Image summary for suse-sles-15-sp4-chost-byos-v20230803-x86_64-gen2

SUSE-IU-2023:548-1

This update for openssl-1_1 fixes the following issues:

• Check the OCSP RESPONSE in openssl s_client command and terminate connection if a revoked certificate is found. [bsc#1212623]

This update for libfido2, python-fido2, yubikey-manager, yubikey-manager-qt fixes the following issues:
This update provides a feature update to the FIDO2 stack.
Changes in libfido2:

• Version 1.13.0 (2023-02-20)

• Version 1.12.0 (2022-09-22)

• Version 1.11.0 (2022-05-03)

• Version 1.10.0 (2022-01-17)

• Version 1.9.0 (2021-10-27)

• Update to version 1.8.0:

• Update to version 1.7.0:

• Enabled hidapi again, issues related to hidapi are fixed upstream

• Update to version 1.6.0:

• Create a udev subpackage and ship the udev rule.

• update to 0.9.3:

• Update to version 0.9.1

• Version 0.8.1 (released 2019-11-25)

• Version 0.8.0 (released 2019-11-25)

• Version 0.7.2 (released 2019-10-24)

• Version 0.7.1 (released 2019-09-20)

• Version 0.7.0 (released 2019-06-17)

• Version 0.6.0 (released 2019-05-10)

• Update to version 4.0.9 (released 2022-06-17)

• Update to version 4.0.8 (released 2022-01-31)

• version update to 4.0.7

• version 4.0.6 (released 2021-09-08)

• version 4.0.5 (released 2021-07-16)

• Update to version 4.0.3

• Update to version 4.0.2

• Update to 3.1.1

• Version 3.1.0 (released 2019-08-20)

• Version 3.0.0 (released 2019-06-24)

• Version 2.1.1 (released 2019-05-28)

• update to 1.2.5:

• Update to version 1.2.4 (released 2021-10-26)

• Update to version 1.2.3

• Update to version 1.2.2

• update to 1.1.5

• Update to version 1.1.4

• Version 1.1.3 (released 2019-08-20)

• Version 1.1.2 (released 2019-06-24)

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335).
• CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838).
• CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842).
• CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051).
• CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265).
• CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606).
• CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605).
• CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513).
• CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039).
• CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495).
• CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504).
• CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494).
• CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154).
• CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155).
• CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129).
• CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600).

• Drop dvb-core fix patch due to a bug (bsc#1205758).
• Enable kernel modules bttv bt878 and snd-bt878 (jsc#PED-3931).
• Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
• Fix usrmerge error (boo#1211796).
• Generalize kernel-doc build requirements.
• Get module prefix from kmod (bsc#1212835).
• Remove orphaned CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT (bsc#1189998 git-fixes).
• Revert 'mtd: rawnand: arasan: Prevent an unsupported configuration' (git-fixes).
• Revert 'net: phy: dp83867: perform soft reset and retain established link' (git-fixes).
• Squashfs: fix handling and sanity checking of xattr_ids count (git-fixes).
• Update the Mellanox/Nvidia mlx5_core driver (jsc#SLE-19253).
• acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes).
• affs: initialize fsdata in affs_truncate() (git-fixes).
• alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes).
• alsa: hda/realtek: Add 'Intel Reference board' and 'NUC 13' SSID in the ALC256 (git-fixes).
• alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
• alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes).
• alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes).
• alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes).
• alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes).
• alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
• alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes).
• alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes).
• alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes).
• alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes).
• alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes).
• alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes).
• alsa: oss: avoid missing-prototype warnings (git-fixes).
• alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes).
• alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes).
• amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes).
• arm64: Add missing Set/Way CMO encodings (git-fixes).
• arm64: Always load shadow stack pointer directly from the task struct (git-fixes)
• arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes)
• arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes)
• arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes)
• arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes)
• arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes).
• arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
• arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes)
• arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes).
• arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes).
• arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes)
• arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
• arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes).
• arm: dts: vexpress: add missing cache properties (git-fixes).
• asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes).
• asoc: dwc: limit the number of overrun messages (git-fixes).
• asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes).
• asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes).
• asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes).
• asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes).
• asoc: mediatek: mt8173: Fix irq error path (git-fixes).
• asoc: nau8824: Add quirk to active-high jack-detect (git-fixes).
• asoc: simple-card: Add missing of_node_put() in case of error (git-fixes).
• asoc: soc-pcm: test if a BE can be prepared (git-fixes).
• asoc: ssm2602: Add workaround for playback distortions (git-fixes).
• ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes).
• batman-adv: Broken sync while rescheduling delayed work (git-fixes).
• binfmt_elf: Take the mmap lock when walking the VMA list (bsc#1209039 CVE-2023-1249).
• bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
• bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes).
• bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes).
• bluetooth: hci_qca: fix debugfs registration (git-fixes).
• bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes).
• bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes).
• bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes).
• bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes).
• bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes)
• bpf, arm64: Clear prog->jited_len along prog->jited (git-fixes)
• bpf, arm64: Feed byte-offset into bpf line info (git-fixes)
• bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes)
• bpf: Add extra path pointer check to d_path helper (git-fixes).
• bpf: Fix UAF in task local storage (bsc#1212564).
• btrfs: unset reloc control if transaction commit fails in prepare_to_relocate() (bsc#1212051 CVE-2023-3111).
• bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes).
• bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes).
• can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes).
• can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes).
• can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
• can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes).
• can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes).
• can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes).
• can: length: fix bitstuffing count (git-fixes).
• can: length: fix description of the RRS field (git-fixes).
• can: length: make header self contained (git-fixes).
• ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540).
• cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563).
• cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561).
• cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563).
• clk: Fix memory leak in devm_clk_notifier_register() (git-fixes).
• clk: cdce925: check return value of kasprintf() (git-fixes).
• clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes).
• clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes).
• clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes).
• clk: keystone: sci-clk: check return value of kasprintf() (git-fixes).
• clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes).
• clk: si5341: check return value of {devm_}kasprintf() (git-fixes).
• clk: si5341: free unused memory on probe failure (git-fixes).
• clk: si5341: return error if one synth clock registration fails (git-fixes).
• clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes).
• clk: ti: clkctrl: check return value of kasprintf() (git-fixes).
• clk: vc5: check memory returned by kasprintf() (git-fixes).
• clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes).
• crypto: marvell/cesa - Fix type mismatch warning (git-fixes).
• crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes).
• dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes).
• dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes).
• dmaengine: pl330: rename _start to prevent build error (git-fixes).
• drivers: meson: secure-pwrc: always enable DMA domain (git-fixes).
• drm/amd/display: Add logging for display MALL refresh setting (git-fixes).
• drm/amd/display: Add minimal pipe split transition state (git-fixes).
• drm/amd/display: Add wrapper to call planes and stream update (git-fixes).
• drm/amd/display: Explicitly specify update type per plane info change (git-fixes).
• drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes).
• drm/amd/display: Use dc_update_planes_and_stream (git-fixes).
• drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes).
• drm/amd/display: edp do not add non-edid timings (git-fixes).
• drm/amd/display: fix the system hang while disable PSR (git-fixes).
• drm/amd/pm: Fix power context allocation in SMU13 (git-fixes).
• drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes).
• drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes).
• drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes).
• drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes).
• drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes).
• drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (git-fixes).
• drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes).
• drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes).
• drm/ast: Fix ARM compatibility (git-fixes).
• drm/bridge: tc358768: always enable HS video mode (git-fixes).
• drm/bridge: tc358768: fix PLL parameters computation (git-fixes).
• drm/bridge: tc358768: fix PLL target frequency (git-fixes).
• drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes).
• drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes).
• drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes).
• drm/exynos: vidi: fix a wrong error return (git-fixes).
• drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes).
• drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes).
• drm/i915/selftests: Add some missing error propagation (git-fixes).
• drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes).
• drm/i915/selftests: Stop using kthread_stop() (git-fixes).
• drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes).
• drm/i915: Use 18 fast wake AUX sync len (git-fixes).
• drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes).
• drm/msm/dp: Free resources after unregistering them (git-fixes).
• drm/msm/dpu: correct MERGE_3D length (git-fixes).
• drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes).
• drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes).
• drm/msm: Be more shouty if per-process pgtables are not working (git-fixes).
• drm/msm: Set max segment size earlier (git-fixes).
• drm/nouveau/dp: check for NULL nv_connector->native_mode (git-fixes).
• drm/nouveau: add nv_encoder pointer check for NULL (git-fixes).
• drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes).
• drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes).
• drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes).
• drm/radeon: fix possible division-by-zero errors (git-fixes).
• drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes).
• drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes).
• drm/vram-helper: fix function names in vram helper doc (git-fixes).
• drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes).
• drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes).
• dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes).
• eeprom: at24: also select REGMAP (git-fixes).
• elf: correct note name comment (git-fixes).
• ext4: unconditionally enable the i_version counter (bsc#1211299).
• extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes).
• extcon: Fix kernel doc of property fields to avoid warnings (git-fixes).
• extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
• extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes).
• extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes).
• extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes).
• fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
• fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472) Backporting changes: * replace refcount_read() with atomic_read()
• fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489)
• fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387).
• fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
• fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes).
• fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes).
• firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes).
• firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes).
• fs/jfs: fix shift exponent db_agl2size negative (git-fixes).
• fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes).
• fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes).
• fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes).
• fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes).
• fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes).
• gfs2: Do not deref jdesc in evict (bsc#1212265 CVE-2023-3212).
• hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes).
• hfs/hfsplus: use WARN_ON for sanity check (git-fixes).
• hfs: Fix OOB Write in hfs_asc2mac (git-fixes).
• hfs: fix OOB Read in __hfs_brec_find (git-fixes).
• hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes).
• hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes).
• hid: amd_sfh: Add missing check for dma_alloc_coherent (bsc#1212605 CVE-2023-3357).
• hid: google: add jewel USB id (git-fixes).
• hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes).
• hid: wacom: Add error check to wacom_parse_and_register() (git-fixes).
• hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes).
• hwrng: imx-rngc - fix the timeout for init and self check (git-fixes).
• hwrng: st - keep clock enabled while hwrng is registered (git-fixes).
• i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes).
• i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes).
• i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes).
• i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes).
• iavf: remove mask from iavf_irq_enable_queues() (git-fixes).
• ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
• ib/isert: Fix dead lock in ib_isert (git-fixes)
• ib/isert: Fix incorrect release of isert connection (git-fixes)
• ib/isert: Fix possible list corruption in CMA handler (git-fixes)
• ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes)
• ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes)
• ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604).
• ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes).
• ice: Do not double unplug aux on peer initiated reset (git-fixes).
• ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes).
• ice: Fix DSCP PFC TLV creation (git-fixes).
• ice: Fix XDP memory leak when NIC is brought up and down (git-fixes).
• ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes).
• ice: Fix memory corruption in VF driver (git-fixes).
• ice: Ignore EEXIST when setting promisc mode (git-fixes).
• ice: Prevent set_channel from changing queues while RDMA active (git-fixes).
• ice: Reset FDIR counter in FDIR init stage (git-fixes).
• ice: add profile conflict check for AVF FDIR (git-fixes).
• ice: block LAN in case of VF to VF offload (git-fixes).
• ice: config netdev tc before setting queues number (git-fixes).
• ice: copy last block omitted in ice_get_module_eeprom() (git-fixes).
• ice: ethtool: Prohibit improper channel config for DCB (git-fixes).
• ice: ethtool: advertise 1000M speeds properly (git-fixes).
• ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes).
• ice: fix wrong fallback logic for FDIR (git-fixes).
• ice: handle E822 generic device ID in PLDM header (git-fixes).
• ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes).
• ice: use bitmap_free instead of devm_kfree (git-fixes).
• ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes).
• ieee802154: hwsim: Fix possible memory leaks (git-fixes).
• ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253).
• igb: fix bit_shift to be in [1..8] range (git-fixes).
• igb: fix nvm.ops.read() error handling (git-fixes).
• igc: Clean the TX buffer and TX descriptor ring (git-fixes).
• igc: Fix possible system crash when loading module (git-fixes).
• iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes).
• iio: accel: fxls8962af: fixup buffer scan element type (git-fixes).
• iio: adc: ad7192: Fix internal/external clock selection (git-fixes).
• iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes).
• init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448).
• init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448).
• init: Provide arch_cpu_finalize_init() (bsc#1212448).
• init: Remove check_bugs() leftovers (bsc#1212448).
• input: adxl34x - do not hardcode interrupt trigger type (git-fixes).
• input: drv260x - fix typo in register value define (git-fixes).
• input: drv260x - remove unused .reg_defaults (git-fixes).
• input: drv260x - sleep between polling GO bit (git-fixes).
• input: fix open count when closing inhibited device (git-fixes).
• input: psmouse - fix OOB access in Elantech protocol (git-fixes).
• input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes).
• input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes).
• integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes).
• io_uring: hold uring mutex around poll removal (bsc#1212838 CVE-2023-3389).
• ipvlan:Fix out-of-bounds caused by unclear skb->cb (bsc#1212842 CVE-2023-3090).
• irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes).
• irqchip/ftintc010: Mark all function static (git-fixes).
• irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes).
• jfs: Fix fortify moan in symlink (git-fixes).
• kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi
• kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base.
• kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741).
• kprobe: reverse kp->flags when arm_kprobe failed (git-fixes).
• kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes).
• kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes).
• kprobes: Forbid probing on trampoline and BPF code areas (git-fixes).
• kprobes: Prohibit probes in gate area (git-fixes).
• kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes).
• kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes).
• kvm: arm64: Do not hypercall before EL2 init (git-fixes)
• kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes)
• kvm: arm64: Save PSTATE early on exit (git-fixes)
• kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes)
• lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852).
• lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852).
• lpfc: Clean up SLI-4 CQE status handling (bsc#1211852).
• lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852).
• lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852).
• lpfc: Enhance congestion statistics collection (bsc#1211852).
• lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346).
• lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852).
• lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852).
• mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes).
• mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes).
• mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes).
• media: cec: core: do not set last_initiator if tx in progress (git-fixes).
• media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes).
• media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes).
• media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes).
• media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes).
• media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes).
• media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes).
• media: dvb_ca_en50221: fix a size write bug (git-fixes).
• media: dvb_demux: fix a bug for the continuity counter (git-fixes).
• media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes).
• media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes).
• memory: brcmstb_dpfe: fix testing array offset after use (git-fixes).
• meson saradc: fix clock divider mask length (git-fixes).
• mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes).
• mfd: pm8008: Fix module autoloading (git-fixes).
• mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
• mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
• mfd: stmfx: Nullify stmfx->vdd in case of error (git-fixes).
• mfd: stmpe: Only disable the regulators if they are enabled (git-fixes).
• misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes).
• misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes).
• misc: pci_endpoint_test: Re-init completion for every test (git-fixes).
• mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253).
• mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes).
• mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410).
• mm: Move mm_cachep initialization to mm_init() (bsc#1212448).
• mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410).
• mmc: bcm2835: fix deferred probing (git-fixes).
• mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes).
• mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes).
• mmc: mmci: stm32: fix max busy timeout calculation (git-fixes).
• mmc: mtk-sd: fix deferred probing (git-fixes).
• mmc: mvsdio: fix deferred probing (git-fixes).
• mmc: omap: fix deferred probing (git-fixes).
• mmc: omap_hsmmc: fix deferred probing (git-fixes).
• mmc: owl: fix deferred probing (git-fixes).
• mmc: sdhci-acpi: fix deferred probing (git-fixes).
• mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes).
• mmc: sdhci-spear: fix deferred probing (git-fixes).
• mmc: sh_mmcif: fix deferred probing (git-fixes).
• mmc: sunxi: fix deferred probing (git-fixes).
• mmc: usdhi60rol0: fix deferred probing (git-fixes).
• mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes).
• net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253).
• net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253).
• net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253).
• net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253).
• net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253).
• net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253).
• net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253).
• net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253).
• net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253).
• net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253).
• net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253).
• net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253).
• net/mlx5: Do not use already freed action pointer (jsc#SLE-19253).
• net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253).
• net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253).
• net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253).
• net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253).
• net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253).
• net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
• net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253).
• net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253).
• net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253).
• net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253).
• net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253).
• net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253).
• net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253).
• net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253).
• net/mlx5: Fix steering rules cleanup (jsc#SLE-19253).
• net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253).
• net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253).
• net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253).
• net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253).
• net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253).
• net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253).
• net/mlx5: SF, Drain health before removing device (jsc#SLE-19253).
• net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253).
• net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253).
• net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253).
• net/mlx5: add IFC bits for bypassing port select flow table (git-fixes)
• net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253).
• net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253).
• net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253).
• net/mlx5: fs, fail conflicting actions (jsc#SLE-19253).
• net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253).
• net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253).
• net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253).
• net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253).
• net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253).
• net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253).
• net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253).
• net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253).
• net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253).
• net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253).
• net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253).
• net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253).
• net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253).
• net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253).
• net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253).
• net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253).
• net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253).
• net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253).
• net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253).
• net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253).
• net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253).
• net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253).
• net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253).
• net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253).
• net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253).
• net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253).
• net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253).
• net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253).
• net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253).
• net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253).
• net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253).
• net/net_failover: fix txq exceeding warning (git-fixes).
• net/sched: fix initialization order when updating chain 0 head (git-fixes).
• net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes).
• net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes).
• net/sched: tcindex: Do not use perfect hashing (bsc#1210335 CVE-2023-1829).
• net: ena: Account for the number of processed bytes in XDP (git-fixes).
• net: ena: Do not register memory info on XDP exchange (git-fixes).
• net: ena: Fix rx_copybreak value update (git-fixes).
• net: ena: Fix toeplitz initial hash value (git-fixes).
• net: ena: Set default value for RX interrupt moderation (git-fixes).
• net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes).
• net: ena: Use bitmask to indicate packet redirection (git-fixes).
• net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes).
• net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes).
• net: hns3: fix reset delay time to avoid configuration timeout (git-fixes).
• net: hns3: fix sending pfc frames after reset issue (git-fixes).
• net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes).
• net: mlx5: eliminate anonymous module_init & module_exit (jsc#SLE-19253).
• net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes).
• net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes).
• nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes).
• nfp: only report pause frame configuration for physical device (git-fixes).
• nilfs2: fix buffer corruption due to concurrent device reads (git-fixes).
• nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes).
• nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes).
• nouveau: fix client work fence deletion race (git-fixes).
• nvme-core: fix dev_pm_qos memleak (git-fixes).
• nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes).
• nvme-core: fix memory leak in dhchap_secret_store (git-fixes).
• nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes).
• nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes).
• ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes).
• ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes).
• ocfs2: fix non-auto defrag path not working issue (git-fixes).
• octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes).
• octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes).
• octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes).
• octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes).
• pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes).
• pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes).
• pci: Release resource invalidated by coalescing (git-fixes).
• pci: cadence: Fix Gen2 Link Retraining process (git-fixes).
• pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes).
• pci: ftpci100: Release the clock resources (git-fixes).
• pci: pciehp: Cancel bringup sequence if card is not present (git-fixes).
• pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes).
• pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes).
• pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes).
• pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes).
• pci: rockchip: Set address alignment for endpoint mode (git-fixes).
• pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes).
• pci: rockchip: Write PCI Device ID to correct register (git-fixes).
• pci: vmd: Reset VMD config register between soft reboots (git-fixes).
• pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes).
• pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes).
• pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
• pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes).
• platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes).
• platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes).
• platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes).
• platform/x86: think-lmi: Correct NVME password handling (git-fixes).
• platform/x86: think-lmi: Correct System password interface (git-fixes).
• platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes).
• platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes).
• pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes).
• power: supply: Fix logic checking if system is running from battery (git-fixes).
• power: supply: Ratelimit no data debug output (git-fixes).
• power: supply: ab8500: Fix external_power_changed race (git-fixes).
• power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes).
• power: supply: sc27xx: Fix external_power_changed race (git-fixes).
• powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869).
• powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729).
• powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662).
• powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701).
• powerpc/purgatory: remove PGO flags (bsc#1194869).
• powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869).
• powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662).
• powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662).
• pstore/ram: Add check for kstrdup (git-fixes).
• qed/qede: Fix scheduling while atomic (git-fixes).
• radeon: avoid double free in ci_dpm_init() (git-fixes).
• rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes).
• rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
• rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
• rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes)
• rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
• rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
• rdma/bnxt_re: Remove unnecessary checks (git-fixes)
• rdma/bnxt_re: Return directly without goto jumps (git-fixes)
• rdma/bnxt_re: Use unique names while registering interrupts (git-fixes)
• rdma/bnxt_re: wraparound mbox producer index (git-fixes)
• rdma/cma: Always set static rate to 0 for RoCE (git-fixes)
• rdma/hns: Fix hns_roce_table_get return value (git-fixes)
• rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
• rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes)
• rdma/mlx5: Fix affinity assignment (git-fixes)
• rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes)
• rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253).
• rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes)
• rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes)
• rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes)
• rdma/rtrs: Fix the last iu->buf leak in err path (git-fixes)
• rdma/rxe: Fix packet length checks (git-fixes)
• rdma/rxe: Fix ref count error in check_rkey() (git-fixes)
• rdma/rxe: Fix rxe_cq_post (git-fixes)
• rdma/rxe: Fix the error 'trying to register non-static key in rxe_cleanup_task' (git-fixes)
• rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes)
• rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
• rdma/rxe: Remove the unused variable obj (git-fixes)
• rdma/rxe: Removed unused name from rxe_task struct (git-fixes)
• rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes)
• rdma/vmw_pvrdma: Remove unnecessary check on wr->opcode (git-fixes)
• regmap: Account for register length when chunking (git-fixes).
• regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes).
• regulator: Fix error checking for debugfs_create_dir (git-fixes).
• regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes).
• regulator: core: Streamline debugfs operations (git-fixes).
• regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes).
• regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes).
• reiserfs: Add missing calls to reiserfs_security_free() (git-fixes).
• reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes).
• revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (git-fixes).
• rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE.
• rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm
• rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435)
• rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes).
• s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592).
• s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892).
• s390/pkey: zeroize key blobs (git-fixes bsc#1212619).
• sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
• scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes).
• scsi: stex: Fix gcc 13 warnings (git-fixes).
• selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes).
• serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes).
• serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes).
• serial: 8250: omap: Fix freeing of resources on failed register (git-fixes).
• serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes).
• serial: atmel: do not enable IRQs prematurely (git-fixes).
• serial: lantiq: add missing interrupt ack (git-fixes).
• sfc: disable RXFCS and RXALL features by default (git-fixes).
• signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861).
• soc/fsl/qe: fix usb.c build errors (git-fixes).
• soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes).
• soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes).
• spi: dw: Round of n_bytes to power of 2 (git-fixes).
• spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes).
• spi: lpspi: disable lpspi module irq in DMA mode (git-fixes).
• spi: qup: Request DMA before enabling clocks (git-fixes).
• spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes).
• spi: tegra210-quad: Fix combined sequence (bsc#1212584)
• spi: tegra210-quad: Fix iterator outside loop (git-fixes).
• spi: tegra210-quad: Multi-cs support (bsc#1212584)
• squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes).
• staging: octeon: delete my name from TODO contact (git-fixes).
• sunrpc: Clean up svc_deferred_class trace events (git-fixes).
• supported.conf: Move bt878 and bttv modules to kernel-*-extra (jsc#PED-3931)
• test_firmware: Use kstrtobool() instead of strtobool() (git-fixes).
• test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes).
• test_firmware: prevent race conditions by a correct implementation of locking (git-fixes).
• test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes).
• thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes).
• thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes).
• tls: Skip tls_append_frag on zero copy size (git-fixes).
• tools: bpftool: Remove invalid \' json escape (git-fixes).
• tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
• tracing/histograms: Allow variables to have some modifiers (git-fixes).
• tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes).
• tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes).
• tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350).
• tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes).
• tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350).
• tty: serial: imx: fix rs485 rx after tx (git-fixes).
• tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes).
• tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes).
• usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes).
• usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes).
• usb: dwc3: fix use-after-free on core driver unbind (git-fixes).
• usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes).
• usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes).
• usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes).
• usb: dwc3: qcom: Fix potential memory leak (git-fixes).
• usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes).
• usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes).
• usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes).
• usb: gadget: udc: fix NULL dereference in remove() (git-fixes).
• usb: hide unused usbfs_notify_suspend/resume functions (git-fixes).
• usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes).
• usb: serial: option: add Quectel EM061KGL series (git-fixes).
• usb: typec: ucsi: Fix command cancellation (git-fixes).
• usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes).
• usrmerge: Adjust module path in the kernel sources (bsc#1212835).
• usrmerge: Compatibility with earlier rpm (boo#1211796)
• vdpa/mlx5: Directly assign memory key (jsc#SLE-19253).
• vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253).
• vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253).
• vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253).
• vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253).
• w1: fix loop in w1_fini() (git-fixes).
• w1: w1_therm: fix locking behavior in convert_t (git-fixes).
• watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
• wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes).
• wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes).
• wifi: ath9k: convert msecs to jiffies where needed (git-fixes).
• wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes).
• wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes).
• wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes).
• wifi: b43: fix incorrect __packed annotation (git-fixes).
• wifi: cfg80211: fix locking in regulatory disconnect (git-fixes).
• wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
• wifi: cfg80211: rewrite merging of inherited elements (git-fixes).
• wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes).
• wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes).
• wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes).
• wifi: mac80211: simplify chanctx allocation (git-fixes).
• wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes).
• wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes).
• wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes).
• wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes).
• wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes).
• wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes).
• wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes).
• wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes).
• writeback: fix dereferencing NULL mapping->host on writeback_page_template (git-fixes).
• x86/build: Avoid relocation information in final vmlinux (bsc#1187829).
• x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448).
• x86/fpu: Mark init functions __init (bsc#1212448).
• x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448).
• x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448).
• x86/init: Initialize signal frame size late (bsc#1212448).
• x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes).
• x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes).
• x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes).
• x86/microcode: Print previous version of microcode after reload (git-fixes).
• x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes).
• x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes).
• x86/mm: Initialize text poking earlier (bsc#1212448).
• x86/mm: Use mm_alloc() in poking_init() (bsc#1212448).
• x86/mm: fix poking_init() for Xen PV guests (git-fixes).
• x86/sgx: Fix race between reclaimer and page fault handler (git-fixes).
• x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes).
• x86/xen: fix secondary processor fpu initialization (bsc#1212869).
• xfs: fix rm_offset flag handling in rmap keys (git-fixes).
• xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes).

This update for libxml2 fixes the following issues:

• Build also for modern python version (jsc#PED-68)

This update for audit fixes the following issues:

• Check for AF_UNIX unnamed sockets (bsc#1210004)
• Enable livepatching on main library on x86_64

This update for openldap2 fixes the following issues:

• libldap2 crashes on ldap_sasl_bind_s (bsc#1212260)

This update for python-requests fixes the following issues:

• CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674).

This update for dbus-1 fixes the following issues:

• CVE-2023-34969: Fixed a possible dbus-daemon crash by an unprivileged users (bsc#1212126).

This update for perl fixes the following issues:

- CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999).

This update for glibc fixes the following issues:

• getlogin_r: fix missing fallback if loginuid is unset (bsc#1209229, BZ #30235)
• Exclude static archives from preparation for live patching (bsc#1208721)
• resolv_conf: release lock on allocation failure (bsc#1211828, BZ #30527)

This update for curl fixes the following issues:

• CVE-2023-32001: Fixed TOCTOU race condition (bsc#1213237).

This update for wicked fixes the following issues:

• Update to version 0.6.73
• Fix arp notify loop and burst sending (boo#1212806)
• Allow verify/notify counter and interval configuration
• Handle ENOBUFS sending errors (bsc#1203300)
• Improve environment variable handling
• Refactor firmware extension definition
• Enable, disable and revert cli commands
• Fix memory leaks, add array/list utils
• Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
• Cleanup /var/run leftovers in extension scripts (bsc#1194557)
• Output formatting improvements and Unicode support
• bond: workaround 6.1 kernel enslave regression (bsc#1206674) - Add `wicked firmware` command to improve `ibft`,`nbft`,`redfish` firmware extension and interface handling.
• Improve error handling in netif firmware discovery extension execution and extension definition overrides in the wicked-config.
• Fix use-after-free in debug mode (bsc#1206447)
• Replace transitional `%usrmerged` macro with regular version check (bsc#1206798)
• Improve to show `no-carrier` in ifstatus output
• Cleanup inclusions and update uapi header to 6.0
• Link mode nwords cleanup and new advertise mode names
• Enable raw-ip support for wwan-qmi interfaces (jsc#PED-90)

This update for gpgme fixes the following issues:
gpgme:

• Address failure handling issues when using gpg 2.2.6 via gpgme, as used by libzypp (bsc#1089497)

• Version upgrade to 2.5.5 in LTSS to address gpgme new requirements

This update for libfido2 fixes the following issues:

• Use openssl 1.1 still on SUSE Linux Enterprise 15 to avoid pulling unneeded openssl-3 dependency. (jsc#PED-4521)

This update for samba fixes the following issues:
- CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173). - CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172). - CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171).

Bugfixes:
- Fixed trust relationship failure (bsc#1213384).

This update for openssh fixes the following issues:

• CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were present on the victim's system and if the agent was forwarded to an attacker-controlled system. [bsc#1213504, CVE-2023-38408]

• Close the right filedescriptor and also close fdh in read_hmac to avoid file descriptor leaks. [bsc#1209536]

• Attempts to mitigate instances of secrets lingering in memory after a session exits. [bsc#1186673, bsc#1213004, bsc#1213008]

This update for openssl-1_1 fixes the following issues:

• CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487).

This update for nfs-utils fixes the following issues:

• SLE15-SP5 and earlier don't use /usr/lib/modprobe.d (bsc#1200710)
• Avoid unhelpful warnings (bsc#1157881)
• Fix rpc.nfsd man pages (bsc#1209859)
• Allow scope to be set in sysconfig: NFSD_SCOPE

This update for hwinfo fixes the following issues:

• Avoid linking problems with libsamba (bsc#1212756)
• Update to version 21.85

This update for perl-Bootloader fixes the following issues:

• Use signed grub EFI binary when updating grub in default EFI location (bsc#1210799)
• UEFI: update also default location, if it is controlled by SUSE (bsc#1210799, bsc#1201399)
• Use `fw_platform_size` to distinguish between 32 bit and 64 bit UEFI platforms (bsc#1208003)
• Add basic support for systemd-boot

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:

• CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867).
• CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245).
• CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846).
• CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543).
• CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286).
• CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061).
• CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059).

• ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes).
• ALSA: fireface: make read-only const array for model names static (git-fixes).
• ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
• ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes).
• ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes).
• ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes).
• ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes).
• ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes).
• ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
• ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (git-fixes).
• ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes).
• ALSA: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes).
• ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes).
• ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes).
• ALSA: hda/realtek: Whitespace fix (git-fixes).
• ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes).
• ALSA: oxfw: make read-only const array models static (git-fixes).
• ALSA: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes).
• ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes).
• ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes).
• ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes).
• ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes).
• ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes).
• ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes).
• ASoC: tegra: Fix ADX byte map (git-fixes).
• ASoC: tegra: Fix AMX byte map (git-fixes).
• Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes).
• Documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes).
• Documentation: bonding: fix the doc of peer_notif_delay (git-fixes).
• Documentation: timers: hrtimers: Make hybrid union historical (git-fixes).
• Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758)
• Fix documentation of panic_on_warn (git-fixes).
• IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes)
• PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes).
• PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes).
• RDMA/rxe: Fix access checks in rxe_check_bind_mw (git-fixes)
• Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes)
• Revert 'drm/amd/display: edp do not add non-edid timings' (git-fixes).
• USB: dwc2: Fix some error handling paths (git-fixes).
• USB: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes).
• USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes).
• USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes).
• USB: serial: option: add LARA-R6 01B PIDs (git-fixes).
• Update config and supported.conf files due to renaming.
• apparmor: fix missing error check for rhashtable_insert_fast (git-fixes).
• arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes)
• arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes)
• arm64: vdso: Pass (void *) to virt_to_page() (git-fixes)
• arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)
• can: bcm: Fix UAF in bcm_proc_show() (git-fixes).
• cifs: add a warning when the in-flight count goes negative (bsc#1193629).
• cifs: address unused variable warning (bsc#1193629).
• cifs: do all necessary checks for credits within or before locking (bsc#1193629).
• cifs: fix lease break oops in xfstest generic/098 (bsc#1193629).
• cifs: fix max_credits implementation (bsc#1193629).
• cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629).
• cifs: fix session state check in smb2_find_smb_ses (bsc#1193629).
• cifs: fix session state transition to avoid use-after-free issue (bsc#1193629).
• cifs: fix sockaddr comparison in iface_cmp (bsc#1193629).
• cifs: fix status checks in cifs_tree_connect (bsc#1193629).
• cifs: log session id when a matching ses is not found (bsc#1193629).
• cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629).
• cifs: prevent use-after-free by freeing the cfile later (bsc#1193629).
• cifs: print all credit counters in DebugData (bsc#1193629).
• cifs: print client_guid in DebugData (bsc#1193629).
• cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629).
• cifs: print nosharesock value while dumping mount options (bsc#1193629).
• clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes).
• clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes).
• codel: fix kernel-doc notation warnings (git-fixes).
• crypto: kpp - Add helper to set reqsize (git-fixes).
• crypto: qat - Use helper to set reqsize (git-fixes).
• devlink: fix kernel-doc notation warnings (git-fixes).
• docs: networking: Update codeaurora references for rmnet (git-fixes).
• drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes).
• drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes).
• drm/amdgpu: Validate VM ioctl flags (git-fixes).
• drm/amdgpu: avoid restore process run into dead loop (git-fixes).
• drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes).
• drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes).
• drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes).
• drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes).
• drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
• drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
• drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
• drm/client: Fix memory leak in drm_client_target_cloned (git-fixes).
• drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes).
• drm/i915: Fix one wrong caching mode enum usage (git-fixes).
• drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes).
• drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes).
• drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes).
• drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes).
• drm/ttm: Do not leak a resource on swapout move error (git-fixes).
• dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes).
• ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020).
• ext4: add EA_INODE checking to ext4_iget() (bsc#1213106).
• ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088).
• ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109).
• ext4: add strict range checks while freeing blocks (bsc#1213089).
• ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016).
• ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018).
• ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090).
• ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103).
• ext4: disallow ea_inodes with extended attributes (bsc#1213108).
• ext4: fail ext4_iget if special inode unallocated (bsc#1213010).
• ext4: fix WARNING in ext4_update_inline_data (bsc#1213012).
• ext4: fix WARNING in mb_find_extent (bsc#1213099).
• ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111).
• ext4: fix data races when using cached status extents (bsc#1213102).
• ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105).
• ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015).
• ext4: fix lockdep warning when enabling MMP (bsc#1213100).
• ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096).
• ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021).
• ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098).
• ext4: improve error handling from ext4_dirhash() (bsc#1213104).
• ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017).
• ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011).
• ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019).
• ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087).
• ext4: refuse to create ea block when umounted (bsc#1213093).
• ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107).
• ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110).
• ext4: update s_journal_inum if it changes after journal replay (bsc#1213094).
• ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092).
• ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013).
• fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes).
• fbdev: imxfb: warn about invalid left/right margin (git-fixes).
• fuse: ioctl: translate ENOSYS in outarg (bsc#1213524).
• fuse: revalidate: do not invalidate if interrupted (bsc#1213523).
• hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861).
• hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861).
• hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861).
• hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861).
• hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861).
• hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861).
• hwmon: (adm1275) Allow setting sample averaging (git-fixes).
• hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes).
• i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes).
• i2c: xiic: Do not try to handle more interrupt events after error (git-fixes).
• inotify: Avoid reporting event with invalid wd (bsc#1213025).
• jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095).
• jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014).
• kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243).
• kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers
• kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes).
• leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes).
• media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes).
• media: cec: i2c: ch7322: also select REGMAP (git-fixes).
• media: i2c: Correct format propagation for st-mipid02 (git-fixes).
• media: usb: Check az6007_read() return value (git-fixes).
• media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes).
• media: venus: helpers: Fix ALIGN() of non power of two (git-fixes).
• media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes).
• memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905).
• mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).
• mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes).
• net: mana: Add support for vlan tagging (bsc#1212301).
• net: phy: prevent stale pointer dereference in phy_init() (git-fixes).
• ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes).
• ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes).
• ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes).
• ntb: ntb_tool: Add check for devm_kcalloc (git-fixes).
• ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes).
• nvme-multipath: support io stats on the mpath device (bsc#1210565).
• nvme: introduce nvme_start_request (bsc#1210565).
• ocfs2: Switch to security_inode_init_security() (git-fixes).
• ocfs2: check new file size on fallocate call (git-fixes).
• ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes).
• opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes).
• phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes).
• phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes).
• phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes).
• pie: fix kernel-doc notation warning (git-fixes).
• pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes).
• pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes).
• pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes).
• powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869).
• powerpc/64s: Fix VAS mm use after free (bsc#1194869).
• powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869).
• powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869).
• powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869).
• powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869).
• powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes).
• powerpc/mm: Switch obsolete dssall to .long (bsc#1194869).
• powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869).
• powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869).
• powerpc/prom_init: Fix kernel config grep (bsc#1194869).
• powerpc/secvar: fix refcount leak in format_show() (bsc#1194869).
• powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869).
• powerpc: clean vdso32 and vdso64 directories (bsc#1194869).
• powerpc: define get_cycles macro for arch-override (bsc#1194869).
• powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869).
• pwm: ab8500: Fix error code in probe() (git-fixes).
• pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes).
• pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes).
• rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*.
• rsi: remove kernel-doc comment marker (git-fixes).
• s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259).
• s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258).
• s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263).
• s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252).
• s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld < 2.36 (git-fixes bsc#1213264).
• s390: discard .interp section (git-fixes bsc#1213247).
• sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes)
• sched: Fix DEBUG && !SCHEDSTATS warn (git-fixes)
• security: keys: Modify mismatched function name (git-fixes).
• selftests: mptcp: depend on SYN_COOKIES (git-fixes).
• selftests: mptcp: sockopt: return error if wrong mark (git-fixes).
• selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes).
• selftests: tc: add 'ct' action kconfig dep (git-fixes).
• selftests: tc: add ConnTrack procfs kconfig (git-fixes).
• selftests: tc: set timeout to 15 minutes (git-fixes).
• signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869).
• signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869).
• smb3: do not reserve too many oplock credits (bsc#1193629).
• smb3: missing null check in SMB2_change_notify (bsc#1193629).
• smb: client: fix broken file attrs with nodfs mounts (bsc#1193629).
• smb: client: fix missed ses refcounting (git-fixes).
• smb: client: fix parsing of source mount option (bsc#1193629).
• smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629).
• smb: client: fix warning in CIFSFindFirst() (bsc#1193629).
• smb: client: fix warning in CIFSFindNext() (bsc#1193629).
• smb: client: fix warning in cifs_match_super() (bsc#1193629).
• smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).
• smb: client: fix warning in generic_ip_connect() (bsc#1193629).
• smb: client: improve DFS mount check (bsc#1193629).
• smb: client: remove redundant pointer 'server' (bsc#1193629).
• smb: delete an unnecessary statement (bsc#1193629).
• smb: move client and server files to common directory fs/smb (bsc#1193629).
• smb: remove obsolete comment (bsc#1193629).
• soundwire: qcom: fix storing port config out-of-bounds (git-fixes).
• spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes).
• spi: bcm63xx: fix max prepend length (git-fixes).
• tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes).
• tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes).
• ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584).
• ubi: ensure that VID header offset + VID header size <= alloc, size (bsc#1210584).
• udf: Avoid double brelse() in udf_rename() (bsc#1213032).
• udf: Define EFSCORRUPTED error code (bsc#1213038).
• udf: Detect system inodes linked into directory hierarchy (bsc#1213114).
• udf: Discard preallocation before extending file with a hole (bsc#1213036).
• udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035).
• udf: Do not bother merging very long extents (bsc#1213040).
• udf: Do not update file length for failed writes to inline files (bsc#1213041).
• udf: Fix error handling in udf_new_inode() (bsc#1213112).
• udf: Fix extending file within last block (bsc#1213037).
• udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034).
• udf: Preserve link count of system files (bsc#1213113).
• udf: Truncate added extents on failed expansion (bsc#1213039).
• wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes).
• wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes).
• wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes).
• wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes).
• wl3501_cs: use eth_hw_addr_set() (git-fixes).
• writeback: fix call of incorrect macro (bsc#1213024).
• x86: Fix .brk attribute in linker script (git-fixes).
• xfs: AIL needs asynchronous CIL forcing (bsc#1211811).
• xfs: CIL work is serialised, not pipelined (bsc#1211811).
• xfs: XLOG_STATE_IOERROR must die (bsc#1211811).
• xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811).
• xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811).
• xfs: clean up the rtbitmap fsmap backend (git-fixes).
• xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes).
• xfs: do not reverse order of items in bulk AIL insertion (git-fixes).
• xfs: do not run shutdown callbacks on active iclogs (bsc#1211811).
• xfs: drop async cache flushes from CIL commits (bsc#1211811).
• xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811).
• xfs: fix getfsmap reporting past the last rt extent (git-fixes).
• xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes).
• xfs: fix interval filtering in multi-step fsmap queries (git-fixes).
• xfs: fix logdev fsmap query result filtering (git-fixes).
• xfs: fix off-by-one error when the last rt extent is in use (git-fixes).
• xfs: fix uninitialized variable access (git-fixes).
• xfs: make fsmap backend function key parameters const (git-fixes).
• xfs: make the record pointer passed to query_range functions const (git-fixes).
• xfs: move the CIL workqueue to the CIL (bsc#1211811).
• xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811).
• xfs: order CIL checkpoint start records (bsc#1211811).
• xfs: pass a CIL context to xlog_write() (bsc#1211811).
• xfs: pass explicit mount pointer to rtalloc query functions (git-fixes).
• xfs: rework xlog_state_do_callback() (bsc#1211811).
• xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811).
• xfs: separate out log shutdown callback processing (bsc#1211811).
• xfs: wait iclog complete before tearing down AIL (bsc#1211811).
• xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).
• xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).
• xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).

SUSE-IU-2023:474-1

This update for systemd-rpm-macros fixes the following issues:

• Adjust functions so they are disabled when called from a chroot (bsc#1211272)

This update for openldap2 fixes the following issues:

• CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795).

This update for libzypp fixes the following issues:

• Fix 'Curl error 92' when synchronizing SUSE Manager repositories. [bsc#1212187]
• Do not unconditionally release a medium if provideFile failed. [bsc#1211661]

This update for python3 fixes the following issues:

• CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750).

• Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158).

This update for supportutils fixes the following issues:
- Added missed sanitation check on crash.txt (bsc#1203818) - Added check to _sanitize_file - Using variable for replement text in _sanitize_file

This update for autoyast2, libsolv, libyui, libzypp, yast2-pkg-bindings ships the update stack to the INSTALLER self-update channel.
yast2-pkg-bindings:

• Added a new option for rebuilding the RPM database (--rebuilddb) (bsc#1209565)

• Selected products are not installed after resetting the package manager internally (bsc#1202234)

• Prevent buffer overflow when drawing very wide labels in ncurses (bsc#1211354)
• Fixed loading icons from an absolute path (bsc#1210591)
• Fix for main window stacking order to avoid unintentional transparency (bsc#1199020, bsc#1191112)
• Force messages from .ui file through our translation mechanism (bsc#1198097)

This update for salt fixes the following issues:
salt:

• Update to Salt release version 3006.0 (jsc#PED-4361) * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
• Add missing patch after rebase to fix collections Mapping issues
• Add python3-looseversion as new dependency for salt
• Add python3-packaging as new dependency for salt
• Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071)
• Avoid conflicts with Salt dependencies versions (bsc#1211612)
• Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
• Create new salt-tests subpackage containing Salt tests
• Drop conflictive patch dicarded from upstream
• Fix package build with old setuptools versions
• Fix SLS rendering error when Jinja macros are used
• Fix version detection and avoid building and testing failures
• Prevent deadlocks in salt-ssh executions
• Require python3-jmespath runtime dependency (bsc#1209233)
• Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517)

This update for cups fixes the following issues:

• CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230).

This update for gcc12 fixes the following issues:

• Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204

• Speed up builds with --enable-link-serialization.

• Update embedded newlib to version 4.2.0

This update for cloud-init fixes the following issues:

• CVE-2023-1786: Do not expose sensitive data gathered from the CSP. (bsc#1210277)
• CVE-2022-2084: Fixed a bug which caused logging schema failures can include password hashes. (bsc#1210652)
• Update to version 23.1

• update to 0.21.0: * Add `threading.Lock()` to allow `responses` working with `threading` module. * Add `urllib3` `Retry` mechanism. See #135 * Removed internal `_cookies_from_headers` function * Now `add`, `upsert`, `replace` methods return registered response. `remove` method returns list of removed responses. * Added null value support in `urlencoded_params_matcher` via `allow_blank` keyword argument * Added strict version of decorator. Now you can apply `@responses.activate(assert_all_requests_are_fired=True)` to your function to validate that all requests were executed in the wrapped function. See #183

This update for suseconnect-ng fixes the following issues:

• Update to version 1.1.0~git2.f42b4b2a060e:
• Keep keepalive timer states when replacing SUSEConnect (bsc#1211588)

This update for vim fixes the following issues:

• CVE-2023-2426: Fixed out-of-range pointer offset (bsc#1210996).
• CVE-2023-2609: Fixed NULL pointer dereference (bsc#1211256).
• CVE-2023-2610: Fixed integer overflow or wraparound (bsc#1211257).

This update for openssl-1_1 fixes the following issues:

• CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534).

• Update further expiring certificates that affect the testsuite (bsc#1201627).

This update for hwdata fixes the following issues:

• update to 0.371:

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263).
• CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131).
• CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288).
• CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855).
• CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806).
• CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604).
• CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647).
• CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590).
• CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760).
• CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758).
• CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762).
• CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803).
• CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756).
• CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783).
• CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533).
• CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940).
• CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294).
• CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024).
• CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043).
• CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287).
• CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105).
• CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037).
• CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498).

• 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes).
• ACPI: EC: Fix oops when removing custom query handlers (git-fixes).
• ACPI: bus: Ensure that notify handlers are not running after removal (git-fixes).
• ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes).
• ACPI: tables: Add support for NBFT (bsc#1195921).
• ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes).
• ACPICA: Avoid undefined behavior: applying zero offset to null pointer (git-fixes).
• ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes).
• ALSA: cs46xx: mark snd_cs46xx_download_image as static (git-fixes).
• ALSA: firewire-digi00x: prevent potential use after free (git-fixes).
• ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
• ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes).
• ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes).
• ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes).
• ALSA: hda/realtek: Add quirk for Clevo L140AU (git-fixes).
• ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes).
• ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes).
• ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (git-fixes).
• ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
• ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes).
• ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes).
• ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes).
• ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes).
• ALSA: hda: Fix Oops by 9.1 surround channel names (git-fixes).
• ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes).
• ALSA: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes).
• ARM64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes).
• ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes).
• ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes).
• ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes).
• ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes).
• ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes).
• ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes).
• ASoC: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes).
• ASoC: lpass: Fix for KASAN use_after_free out of bounds (git-fixes).
• ASoC: rt5682: Disable jack detection interrupt during suspend (git-fixes).
• ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (git-fixes).
• Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (git-fixes).
• Bluetooth: btintel: Add LE States quirk support (git-fixes).
• Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes).
• HID: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes).
• HID: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes).
• HID: microsoft: Add rumble support to latest xbox controllers (bsc#1211280).
• HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes).
• HID: wacom: Force pen out of prox if no events have been received in a while (git-fixes).
• HID: wacom: Set a default resolution for older tablets (git-fixes).
• HID: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes).
• HID: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes).
• HID: wacom: generic: Set battery quirk only when we see battery data (git-fixes).
• IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes)
• IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes)
• IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes)
• Input: xpad - add constants for GIP interface numbers (git-fixes).
• KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes).
• KVM: Destroy target device if coalesced MMIO unregistration fails (git-fixes)
• KVM: Disallow user memslot with size that exceeds 'unsigned long' (git-fixes)
• KVM: Do not create VM debugfs files outside of the VM directory (git-fixes)
• KVM: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes)
• KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes).
• KVM: Prevent module exit until all VMs are freed (git-fixes)
• KVM: SVM: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes).
• KVM: SVM: Fix benign 'bool vs. int' comparison in svm_set_cr0() (git-fixes).
• KVM: SVM: Require logical ID to be power-of-2 for AVIC entry (git-fixes).
• KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes).
• KVM: SVM: hyper-v: placate modpost section mismatch error (git-fixes).
• KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes).
• KVM: VMX: Resume guest immediately when injecting #GP on ECREATE (git-fixes).
• KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes).
• KVM: VMX: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes).
• KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes).
• KVM: arm64: Do not arm a hrtimer for an already pending timer (git-fixes)
• KVM: arm64: Do not return from void function (git-fixes)
• KVM: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes)
• KVM: arm64: Fix S1PTW handling on RO memslots (git-fixes)
• KVM: arm64: Fix bad dereference on MTE-enabled systems (git-fixes)
• KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes)
• KVM: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes)
• KVM: arm64: Free hypervisor allocations if vector slot init fails (git-fixes)
• KVM: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes)
• KVM: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes)
• KVM: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes)
• KVM: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes)
• KVM: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes)
• KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes)
• KVM: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes)
• KVM: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes)
• KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes).
• KVM: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes).
• KVM: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes).
• KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes).
• KVM: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (git-fixes).
• KVM: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes).
• KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes).
• KVM: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes).
• KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes).
• KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes).
• KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes).
• KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU does not support global_ctrl (git-fixes).
• KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes).
• KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes).
• KVM: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes).
• KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes).
• KVM: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes).
• KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes).
• KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes).
• KVM: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes).
• KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes).
• KVM: x86: Protect the unused bits in MSR exiting flags (git-fixes).
• KVM: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes).
• KVM: x86: Report deprecated x87 features in supported CPUID (git-fixes).
• KVM: x86: do not set st->preempted when going back to user space (git-fixes).
• KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes).
• KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes).
• PCI/ASPM: Remove pcie_aspm_pm_state_change() (git-fixes).
• PM: hibernate: Do not get block device exclusively in test_resume mode (git-fixes).
• PM: hibernate: Turn snapshot_test into global variable (git-fixes).
• PM: hibernate: fix load_image_and_restore() error path (git-fixes).
• RDMA/bnxt_re: Fix a possible memory leak (git-fixes)
• RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes)
• RDMA/bnxt_re: Fix the page_size used during the MR creation (git-fixes)
• RDMA/cm: Trace icm_send_rej event before the cm state is reset (git-fixes)
• RDMA/core: Fix multiple -Warray-bounds warnings (git-fixes)
• RDMA/efa: Fix unsupported page sizes in device (git-fixes)
• RDMA/hns: Fix base address table allocation (git-fixes)
• RDMA/hns: Fix timeout attr in query qp for HIP08 (git-fixes)
• RDMA/hns: Modify the value of long message loopback slice (git-fixes)
• RDMA/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383).
• RDMA/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383).
• RDMA/irdma: Fix Local Invalidate fencing (git-fixes)
• RDMA/irdma: Fix RQ completion opcode (jsc#SLE-18383).
• RDMA/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383).
• RDMA/irdma: Fix inline for multiple SGE's (jsc#SLE-18383).
• RDMA/irdma: Prevent QP use after free (git-fixes)
• RDMA/irdma: Remove enum irdma_status_code (jsc#SLE-18383).
• RDMA/irdma: Remove excess error variables (jsc#SLE-18383).
• RDMA/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022).
• RDMA/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022).
• RDMA/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022).
• RDMA/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022).
• RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255).
• RDMA/mlx5: Fix flow counter query via DEVX (git-fixes)
• RDMA/mlx5: Use correct device num_ports when modify DC (git-fixes)
• RDMA/rxe: Remove tasklet call from rxe_cq.c (git-fixes)
• RDMA/siw: Fix potential page_array out of range access (git-fixes)
• RDMA/siw: Remove namespace check from siw_netdev_event() (git-fixes)
• RDMA/srpt: Add a check for valid 'mad_agent' pointer (git-fixes)
• Revert 'KVM: set owner of cpu and vm file operations' (git-fixes)
• SMB3.1.1: add new tree connect ShareFlags (bsc#1193629).
• SMB3: Add missing locks to protect deferred close file list (git-fixes).
• SMB3: Close all deferred handles of inode in case of handle lease break (bsc#1193629).
• SMB3: Close deferred file handles in case of handle lease break (bsc#1193629).
• SMB3: drop reference to cfile before sending oplock break (bsc#1193629).
• SMB3: force unmount was failing to close deferred close files (bsc#1193629).
• SUNRPC: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775).
• USB / dwc3: Fix a checkpatch warning in core.c (git-fixes).
• USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes).
• USB: core: Add routines for endpoint checks in old drivers (git-fixes).
• USB: sisusbvga: Add endpoint checks (git-fixes).
• USB: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes).
• apparmor: add a kernel label to use on kernel objects (bsc#1211113).
• arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes).
• arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes).
• arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes).
• arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes).
• arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes).
• arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage.
• arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes)
• arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes).
• asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes).
• ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes).
• ata: pata_octeon_cf: drop kernel-doc notation (git-fixes).
• block: add a bdev_max_zone_append_sectors helper (git-fixes).
• bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes).
• bnxt: Do not read past the end of test names (jsc#SLE-18978).
• bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978).
• bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978).
• bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978).
• bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978).
• bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978).
• bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978).
• bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978).
• bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978).
• bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978).
• can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
• can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes).
• can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes).
• can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes).
• can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes).
• can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes).
• can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes).
• can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes).
• can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes).
• can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes).
• can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes).
• can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes).
• can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes).
• cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes).
• ceph: force updating the msg pointer in non-split case (bsc#1211804).
• cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906).
• cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650).
• cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650).
• cgroup: Make cgroup_get_from_id() prettier (bsc#1205650).
• cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650).
• cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (bsc#1205650).
• cgroup: reduce dependency on cgroup_mutex (bsc#1205650).
• cifs: Avoid a cast in add_lease_context() (bsc#1193629).
• cifs: Simplify SMB2_open_init() (bsc#1193629).
• cifs: Simplify SMB2_open_init() (bsc#1193629).
• cifs: Simplify SMB2_open_init() (bsc#1193629).
• cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes).
• cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758).
• cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629).
• cifs: fix potential race when tree connecting ipc (bsc#1208758).
• cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758).
• cifs: fix sharing of DFS connections (bsc#1208758).
• cifs: fix smb1 mount regression (bsc#1193629).
• cifs: mapchars mount option ignored (bsc#1193629).
• cifs: missing lock when updating session status (bsc#1193629).
• cifs: print smb3_fs_context::source when mounting (bsc#1193629).
• cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758).
• cifs: protect session status check in smb2_reconnect() (bsc#1208758).
• cifs: release leases for deferred close handles when freezing (bsc#1193629).
• cifs: update internal module version number for cifs.ko (bsc#1193629).
• clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes).
• clk: qcom: regmap: add PHY clock source implementation (git-fixes).
• clk: tegra20: fix gcc-7 constant overflow warning (git-fixes).
• configfs: fix possible memory leak in configfs_create_dir() (git-fixes).
• crypto: acomp - define max size for destination (jsc#PED-3692)
• crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692)
• crypto: qat - Fix unsigned function returning negative (jsc#PED-3692)
• crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692)
• crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692)
• crypto: qat - abstract PFVF receive logic (jsc#PED-3692)
• crypto: qat - abstract PFVF send function (jsc#PED-3692)
• crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692)
• crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692)
• crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692)
• crypto: qat - add backlog mechanism (jsc#PED-3692)
• crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692)
• crypto: qat - add check to validate firmware images (jsc#PED-3692)
• crypto: qat - add limit to linked list parsing (jsc#PED-3692)
• crypto: qat - add misc workqueue (jsc#PED-3692)
• crypto: qat - add missing restarting event notification in (jsc#PED-3692)
• crypto: qat - add param check for DH (jsc#PED-3692)
• crypto: qat - add param check for RSA (jsc#PED-3692)
• crypto: qat - add pfvf_ops (jsc#PED-3692)
• crypto: qat - add resubmit logic for decompression (jsc#PED-3692)
• crypto: qat - add support for 401xx devices (jsc#PED-3692)
• crypto: qat - add support for compression for 4xxx (jsc#PED-3692)
• crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692)
• crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692)
• crypto: qat - change PFVF ACK behaviour (jsc#PED-3692)
• crypto: qat - change behaviour of (jsc#PED-3692)
• crypto: qat - change bufferlist logic interface (jsc#PED-3692)
• crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692)
• crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692)
• crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692)
• crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692)
• crypto: qat - do not rely on min version (jsc#PED-3692)
• crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692)
• crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692)
• crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692)
• crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692)
• crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692)
• crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692)
• crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692)
• crypto: qat - extend buffer list interface (jsc#PED-3692)
• crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692)
• crypto: qat - extract send and wait from (jsc#PED-3692)
• crypto: qat - fix DMA transfer direction (jsc#PED-3692)
• crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692)
• crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692)
• crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692)
• crypto: qat - fix a typo in a comment (jsc#PED-3692)
• crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692)
• crypto: qat - fix definition of ring reset results (jsc#PED-3692)
• crypto: qat - fix error return code in adf_probe (jsc#PED-3692)
• crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692)
• crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692)
• crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692)
• crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692)
• crypto: qat - fix wording and formatting in code comment (jsc#PED-3692)
• crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692)
• crypto: qat - free irq in case of failure (jsc#PED-3692)
• crypto: qat - free irqs only if allocated (jsc#PED-3692)
• crypto: qat - generalize crypto request buffers (jsc#PED-3692)
• crypto: qat - get compression extended capabilities (jsc#PED-3692)
• crypto: qat - handle retries due to collisions in (jsc#PED-3692)
• crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692)
• crypto: qat - improve logging of PFVF messages (jsc#PED-3692)
• crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692)
• crypto: qat - introduce support for PFVF block messages (jsc#PED-3692)
• crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692)
• crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692)
• crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692)
• crypto: qat - make PFVF message construction direction (jsc#PED-3692)
• crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692)
• crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692)
• crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692)
• crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692)
• crypto: qat - move pfvf collision detection values (jsc#PED-3692)
• crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692)
• crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692)
• crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692)
• crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692)
• crypto: qat - re-enable registration of algorithms (jsc#PED-3692)
• crypto: qat - refactor PF top half for PFVF (jsc#PED-3692)
• crypto: qat - refactor pfvf version request messages (jsc#PED-3692)
• crypto: qat - refactor submission logic (jsc#PED-3692)
• crypto: qat - relocate PFVF PF related logic (jsc#PED-3692)
• crypto: qat - relocate PFVF VF related logic (jsc#PED-3692)
• crypto: qat - relocate PFVF disabled function (jsc#PED-3692)
• crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692)
• crypto: qat - relocate backlog related structures (jsc#PED-3692)
• crypto: qat - relocate bufferlist logic (jsc#PED-3692)
• crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692)
• crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692)
• crypto: qat - remove empty sriov_configure() (jsc#PED-3692)
• crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692)
• crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692)
• crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692)
• crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692)
• crypto: qat - remove unneeded assignment (jsc#PED-3692)
• crypto: qat - remove unneeded braces (jsc#PED-3692)
• crypto: qat - remove unneeded packed attribute (jsc#PED-3692)
• crypto: qat - remove unused PFVF stubs (jsc#PED-3692)
• crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692)
• crypto: qat - rename bufferlist functions (jsc#PED-3692)
• crypto: qat - rename pfvf collision constants (jsc#PED-3692)
• crypto: qat - reorganize PFVF code (jsc#PED-3692)
• crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692)
• crypto: qat - replace deprecated MSI API (jsc#PED-3692)
• crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692)
• crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692)
• crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692)
• crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692)
• crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692)
• crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692)
• crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692)
• crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692)
• crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692)
• crypto: qat - simplify adf_enable_aer() (jsc#PED-3692)
• crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692)
• crypto: qat - split PFVF message decoding from handling (jsc#PED-3692)
• crypto: qat - stop using iommu_present() (jsc#PED-3692)
• crypto: qat - store the PFVF protocol version of the (jsc#PED-3692)
• crypto: qat - store the ring-to-service mapping (jsc#PED-3692)
• crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692)
• crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692)
• crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692)
• crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692)
• crypto: qat - use hweight for bit counting (jsc#PED-3692)
• crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692)
• crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692)
• crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692)
• crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes).
• cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992).
• debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes).
• dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes).
• dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes).
• dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes).
• dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes).
• dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes).
• dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes).
• dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes).
• dmaengine: mv_xor_v2: Fix an error code (git-fixes).
• do not reuse connection if share marked as isolated (bsc#1193629).
• docs: networking: fix x25-iface.rst heading & index order (git-fixes).
• drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes).
• drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes).
• drm-hyperv: Add a bug reference to two existing changes (bsc#1211281).
• drm/amd/display: Fix hang when skipping modeset (git-fixes).
• drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes).
• drm/amd/display: fix flickering caused by S/G mode (git-fixes).
• drm/amd: Fix an out of bounds error in BIOS parser (git-fixes).
• drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes).
• drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes).
• drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes).
• drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes).
• drm/displayid: add displayid_get_header() and check bounds better (git-fixes).
• drm/exynos: fix g2d_open/close helper function definitions (git-fixes).
• drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes).
• drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes).
• drm/i915/dg2: Support 4k@30 on HDMI (git-fixes).
• drm/i915/dp: prevent potential div-by-zero (git-fixes).
• drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes).
• drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes).
• drm/msm/dp: unregister audio driver during unbind (git-fixes).
• drm/msm/dpu: Add INTF_5 interrupts (git-fixes).
• drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes).
• drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes).
• drm/sched: Remove redundant check (git-fixes).
• drm/tegra: Avoid potential 32-bit integer overflow (git-fixes).
• drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes).
• drm/ttm: optimize pool allocations a bit v2 (git-fixes).
• dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes).
• dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes).
• dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
• dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes).
• dt-bindings: usb: snps,dwc3: Fix 'snps,hsphy_interface' type (git-fixes).
• f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes).
• fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes).
• fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes).
• fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes).
• fbdev: udlfb: Fix endpoint check (git-fixes).
• firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes).
• firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes).
• fuse: always revalidate rename target dentry (bsc#1211808).
• fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807).
• futex: Resend potentially swallowed owner death notification (git-fixes).
• google/gve:fix repeated words in comments (bsc#1211519).
• gpio: mockup: Fix mode of debugfs files (git-fixes).
• gve: Adding a new AdminQ command to verify driver (bsc#1211519).
• gve: Cache link_speed value from device (git-fixes).
• gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519).
• gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519).
• gve: Handle alternate miss completions (bsc#1211519).
• gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519).
• gve: Remove the code of clearing PBA bit (git-fixes).
• gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes).
• gve: enhance no queue page list detection (bsc#1211519).
• i2c: omap: Fix standard mode false ACK readings (git-fixes).
• i2c: tegra: Fix PEC support for SMBUS block read (git-fixes).
• i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378).
• i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378).
• i40e: Fix DMA mappings leak (jsc#SLE-18378).
• i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378).
• i40e: Fix VF set max MTU size (jsc#SLE-18378).
• i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378).
• i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378).
• i40e: Fix calculating the number of queue pairs (jsc#SLE-18378).
• i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378).
• i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378).
• i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378).
• i40e: Fix for VF MAC address 0 (jsc#SLE-18378).
• i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378).
• i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378).
• i40e: Fix kernel crash during module removal (jsc#SLE-18378).
• i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378).
• i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378).
• i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378).
• i40e: Refactor tc mqprio checks (jsc#SLE-18378).
• i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378).
• i40e: fix accessing vsi->active_filters without holding lock (jsc#SLE-18378).
• i40e: fix flow director packet filter programming (jsc#SLE-18378).
• i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378).
• i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378).
• iavf/iavf_main: actually log ->src mask when talking about it (jsc#SLE-18385).
• iavf: Detach device during reset task (jsc#SLE-18385).
• iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385).
• iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385).
• iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385).
• iavf: Fix a crash during reset task (jsc#SLE-18385).
• iavf: Fix bad page state (jsc#SLE-18385).
• iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385).
• iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385).
• iavf: Fix max_rate limiting (jsc#SLE-18385).
• iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385).
• iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385).
• iavf: fix hang on reboot with ice (jsc#SLE-18385).
• iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385).
• iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385).
• ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375).
• ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375).
• igb: Add lock to avoid data race (jsc#SLE-18379).
• igb: Enable SR-IOV after reinit (jsc#SLE-18379).
• igb: Initialize mailbox message for VF reset (jsc#SLE-18379).
• igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379).
• igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379).
• igbvf: Regard vf reset nack as success (jsc#SLE-18379).
• igc: Add checking for basetime less than zero (jsc#SLE-18377).
• igc: Add ndo_tx_timeout support (jsc#SLE-18377).
• igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377).
• igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377).
• igc: Lift TAPRIO schedule restriction (jsc#SLE-18377).
• igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377).
• igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377).
• igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377).
• igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377).
• igc: fix the validation logic for taprio's gate list (jsc#SLE-18377).
• igc: read before write to SRRCTL register (jsc#SLE-18377).
• igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377).
• igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377).
• iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes).
• iio: adc: ad7192: Change 'shorted' channels to differential (git-fixes).
• iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes).
• iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes).
• iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes).
• iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes).
• iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
• iio: light: vcnl4035: fixed chip ID check (git-fixes).
• intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379).
• ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592).
• iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553).
• ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384).
• ixgbe: Enable setting RSS table to default values (jsc#SLE-18384).
• ixgbe: Fix panic during XDP_TX with > 64 CPUs (jsc#SLE-18384).
• ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384).
• ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384).
• ixgbe: fix pci device refcount leak (jsc#SLE-18384).
• ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384).
• kABI workaround for btbcm.c (git-fixes).
• kABI workaround for mt76_poll_msec() (git-fixes).
• kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest (git-fixes)
• kabi/severities: added Microsoft mana symbold (bsc#1210551)
• kernel-binary: install expoline.o (boo#1210791 bsc#1211089)
• kernel-source: Remove unused macro variant_symbols
• kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731).
• kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes).
• leds: Fix reference to led_set_brightness() in doc (git-fixes).
• leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes).
• leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes).
• libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes).
• locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes).
• mailbox: zynqmp: Fix IPI isr handling (git-fixes).
• mailbox: zynqmp: Fix typo in IPI documentation (git-fixes).
• mce: fix set_mce_nospec to always unmap the whole page (git-fixes).
• media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes).
• media: netup_unidvb: fix use-after-free at del_timer() (git-fixes).
• media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes).
• media: radio-shark: Add endpoint checks (git-fixes).
• media: rcar_fdp1: Fix the correct variable assignments (git-fixes).
• media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes).
• memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449).
• mfd: dln2: Fix memory leak in dln2_probe() (git-fixes).
• mfd: tqmx86: Correct board names for TQMxE39x (git-fixes).
• mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes).
• misc: fastrpc: reject new invocations during device removal (git-fixes).
• misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes).
• mmc: sdhci-esdhc-imx: make 'no-mmc-hs400' works (git-fixes).
• mmc: vub300: fix invalid response handling (git-fixes).
• mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes).
• mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes).
• mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes).
• mtd: rawnand: marvell: ensure timing values are written (git-fixes).
• net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes).
• net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes).
• net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes).
• net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982).
• net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022).
• net: mana: Add support for jumbo frame (bsc#1210551).
• net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551).
• net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022).
• net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022).
• net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022).
• net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022).
• net: mana: Enable RX path to handle various MTU sizes (bsc#1210551).
• net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022).
• net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes).
• net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022).
• net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022).
• net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022).
• net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022).
• net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551).
• net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551).
• net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022).
• net: mana: Use napi_build_skb in RX path (bsc#1210551).
• net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes).
• net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564).
• net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes).
• net: qrtr: correct types of trace event parameters (git-fixes).
• net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes).
• net: tun: avoid disabling NAPI twice (git-fixes).
• net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes).
• net: tun: stop NAPI when detaching queues (git-fixes).
• net: tun: unlink NAPI from device on destruction (git-fixes).
• net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes).
• net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes).
• nilfs2: do not write dirty data after degenerating to read-only (git-fixes).
• nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes).
• nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes).
• nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes).
• nvme-multipath: fix hang when disk goes live over reconnect (git-fixes).
• nvme-pci: add quirks for Samsung X5 SSDs (git-fixes).
• nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes).
• nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes).
• nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes).
• nvme-pci: clear the prp2 field when not used (git-fixes).
• nvme-pci: disable write zeroes on various Kingston SSD (git-fixes).
• nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes).
• nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes).
• nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes).
• nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes).
• nvme-tcp: fix bogus request completion when failing to send AER (git-fixes).
• nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes).
• nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes).
• nvme: also return I/O command effects from nvme_command_effects (git-fixes).
• nvme: check for duplicate identifiers earlier (git-fixes).
• nvme: cleanup __nvme_check_ids (git-fixes).
• nvme: fix discard support without oncs (git-fixes).
• nvme: fix interpretation of DMRSL (git-fixes).
• nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes).
• nvme: fix passthrough csi check (git-fixes).
• nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes).
• nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes).
• nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes).
• nvme: set non-mdts limits in nvme_scan_work (git-fixes).
• nvmet-tcp: add bounds check on Transfer Tag (git-fixes).
• nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes).
• nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes).
• nvmet: fix mar and mor off-by-one errors (git-fixes).
• nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes).
• nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes).
• nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes).
• nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes).
• phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes).
• phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes).
• pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes).
• pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes).
• platform/x86: hp-wmi: Support touchpad on/off (git-fixes).
• platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes).
• platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes).
• platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes).
• power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
• power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes).
• power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes).
• power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes).
• power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
• power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes).
• power: supply: bq27xxx: expose battery data when CI=1 (git-fixes).
• power: supply: leds: Fix blink to LED on transition (git-fixes).
• power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes).
• powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes).
• powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729).
• powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729).
• pstore: Revert pmsg_lock back to a normal mutex (git-fixes).
• purgatory: fix disabling debug info (git-fixes).
• pwm: meson: Fix axg ao mux parents (git-fixes).
• pwm: meson: Fix g12a ao clk81 name (git-fixes).
• qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001).
• qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (jsc#SLE-19001).
• qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001).
• qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001).
• qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001).
• r8152: fix flow control issue of RTL8156A (git-fixes).
• r8152: fix the poor throughput for 2.5G devices (git-fixes).
• r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes).
• regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes).
• regulator: mt6359: add read check for PMIC MT6359 (git-fixes).
• regulator: pca9450: Fix BUCK2 enable_mask (git-fixes).
• remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes).
• ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes).
• ring-buffer: Fix kernel-doc (git-fixes).
• ring-buffer: Sync IRQ works before buffer destruction (git-fixes).
• rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB
• rtmutex: Ensure that the top waiter is always woken up (git-fixes).
• s390/ap: fix crash on older machines based on QCI info missing (bsc#1210947)
• s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686).
• s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687).
• s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes).
• s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688).
• s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689).
• s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690).
• s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691).
• s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692).
• s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693).
• s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes).
• s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes).
• s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714).
• s390x: Fixed hard lockups while running stress-ng and LPAR hangs (bsc#1195655 ltc#195733).
• scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes).
• scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes).
• scsi: libsas: Add sas_ata_device_link_abort() (git-fixes).
• scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes).
• scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847).
• scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847).
• scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847).
• scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (bsc#1211847).
• scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847).
• scsi: lpfc: Update congestion warning notification period (bsc#1211847).
• scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847).
• scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes).
• scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes).
• scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes).
• scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960).
• scsi: qla2xxx: Fix hang in task management (bsc#1211960).
• scsi: qla2xxx: Fix mem access after free (bsc#1211960).
• scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960).
• scsi: qla2xxx: Fix task management cmd failure (bsc#1211960).
• scsi: qla2xxx: Multi-que support for TMF (bsc#1211960).
• scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960).
• scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960).
• scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960).
• scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960).
• scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960).
• scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes).
• scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes).
• selftests mount: Fix mount_setattr_test builds failed (git-fixes).
• selftests/resctrl: Allow ->setup() to return errors (git-fixes).
• selftests/resctrl: Check for return value after write_schemata() (git-fixes).
• selftests/resctrl: Extend CPU vendor detection (git-fixes).
• selftests/resctrl: Move ->setup() call outside of test specific branches (git-fixes).
• selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes).
• selftests/sgx: Add 'test_encl.elf' to TEST_FILES (git-fixes).
• selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes).
• selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes).
• selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes).
• selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes).
• selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes).
• selftests: xsk: Disable IPv6 on VETH1 (git-fixes).
• selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes).
• selinux: do not use make's grouped targets feature yet (git-fixes).
• serial: 8250: Reinit port->pm on port specific driver unbind (git-fixes).
• serial: 8250_bcm7271: balance clk_enable calls (git-fixes).
• serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes).
• serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes).
• serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes).
• serial: Add support for Advantech PCI-1611U card (git-fixes).
• serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes).
• serial: qcom-geni: fix enabling deactivated interrupt (git-fixes).
• serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes).
• sfc: Change VF mac via PF as first preference if available (git-fixes).
• sfc: Fix module EEPROM reporting for QSFP modules (git-fixes).
• sfc: Fix use-after-free due to selftest_work (git-fixes).
• sfc: correctly advertise tunneled IPv6 segmentation (git-fixes).
• sfc: ef10: do not overwrite offload features at NIC reset (git-fixes).
• sfc: fix TX channel offset when using legacy interrupts (git-fixes).
• sfc: fix considering that all channels have TX queues (git-fixes).
• sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes).
• sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes).
• sfc: include vport_id in filter spec hash and equal() (git-fixes).
• smb3: display debug information better for encryption (bsc#1193629).
• smb3: fix problem remounting a share after shutdown (bsc#1193629).
• smb3: improve parallel reads of large files (bsc#1193629).
• smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629).
• smb3: move some common open context structs to smbfs_common (bsc#1193629).
• soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes).
• soundwire: qcom: gracefully handle too many ports in DT (git-fixes).
• spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (git-fixes).
• spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes).
• staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes).
• struct ci_hdrc: hide new member at end (git-fixes).
• supported.conf: mark mana_ib supported
• swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes).
• thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165).
• thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165).
• tools/virtio: compile with -pthread (git-fixes).
• tools/virtio: fix the vringh test for virtio ring changes (git-fixes).
• tools/virtio: fix virtio_test execution (git-fixes).
• tools/virtio: initialize spinlocks in vring_test.c (git-fixes).
• tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes).
• tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes).
• tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes).
• tracing: Fix permissions for the buffer_percent file (git-fixes).
• tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes).
• usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes).
• usb: chipidea: core: fix possible concurrent when switch role (git-fixes).
• usb: dwc3: Align DWC3_EP_* flag macros (git-fixes).
• usb: dwc3: Fix a repeated word checkpatch warning (git-fixes).
• usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes).
• usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes).
• usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes).
• usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes).
• usb: dwc3: gadget: Delay issuing End Transfer (git-fixes).
• usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes).
• usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes).
• usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes).
• usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes).
• usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes).
• usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes).
• usb: gadget: u_ether: Fix host MAC address case (git-fixes).
• usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes).
• usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes).
• usb: typec: tcpm: fix multiple times discover svids error (git-fixes).
• usb: usbfs: Enforce page requirements for mmap (git-fixes).
• usb: usbfs: Use consistent mmap functions (git-fixes).
• usrmerge: Remove usrmerge compatibility symlink in buildroot (boo#1211796).
• vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes).
• vdpa: fix use-after-free on vp_vdpa_remove (git-fixes).
• vhost/net: Clear the pending messages when the backend is removed (git-fixes).
• virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes).
• virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes).
• virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes).
• virtio_net: split free_unused_bufs() (git-fixes).
• virtio_net: suppress cpu stall when free_unused_bufs (git-fixes).
• watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes).
• watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes).
• wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes).
• wifi: ath: Silence memcpy run-time false positive warning (git-fixes).
• wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes).
• wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes).
• wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes).
• wifi: iwlwifi: fw: fix DBGI dump (git-fixes).
• wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes).
• wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes).
• wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes).
• wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes).
• wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes).
• wifi: mac80211: fix min center freq offset tracing (git-fixes).
• wifi: mt76: add flexible polling wait-interval support (git-fixes).
• wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes).
• wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes).
• wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes).
• wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes).
• workqueue: Fix hung time report of worker pools (bsc#1211044).
• workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044).
• workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044).
• workqueue: Warn when a new worker could not be created (bsc#1211044).
• workqueue: Warn when a rescuer could not be created (bsc#1211044).
• x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes).
• x86/MCE/AMD: Use an u64 for bank_map (git-fixes).
• x86/alternative: Make debug-alternative selective (bsc#1206578).
• x86/alternative: Report missing return thunk details (git-fixes).
• x86/alternative: Support relocations in alternatives (bsc#1206578).
• x86/amd: Use IBPB for firmware calls (git-fixes).
• x86/boot: Skip realmode init code when running as Xen PV guest (git-fixes).
• x86/bugs: Add 'unknown' reporting for MMIO Stale Data (git-fixes).
• x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes).
• x86/bugs: Warn when 'ibrs' mitigation is selected on Enhanced IBRS parts (git-fixes).
• x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes).
• x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes).
• x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes).
• x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes).
• x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205).
• x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes).
• x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
• x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes).
• x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes).
• x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578).
• x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). This is a preparation for the next patch
• x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes).
• x86/microcode/AMD: Fix mixed steppings support (git-fixes).
• x86/microcode/AMD: Track patch allocation size explicitly (git-fixes).
• x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes).
• x86/microcode: Add explicit CPU vendor dependency (git-fixes).
• x86/microcode: Adjust late loading result reporting message (git-fixes).
• x86/microcode: Rip out the OLD_INTERFACE (git-fixes).
• x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes).
• x86/mm: Use proper mask when setting PUD mapping (git-fixes).
• x86/nospec: Unwreck the RSB stuffing (git-fixes).
• x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes).
• x86/pat: Fix x86_has_pat_wp() (git-fixes).
• x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
• x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes).
• x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
• x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes).
• x86/signal: Fix the value returned by strict_sas_size() (git-fixes).
• x86/speculation/mmio: Print SMT warning (git-fixes).
• x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes).
• x86/static_call: Serialize __static_call_fixup() properly (git-fixes).
• x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
• x86/topology: Fix duplicated core ID within a package (git-fixes).
• x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
• x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
• x86: Fix return value of __setup handlers (git-fixes).
• x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (git-fixes).
• xen/netback: do not do grant copy across page boundary (git-fixes).
• xen/netback: use same error messages for same errors (git-fixes).
• xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes).
• xhci: Fix incorrect tracking of free space on transfer rings (git-fixes).

This update for containerd, docker, runc fixes the following issues:

• Update to containerd v1.6.21 (bsc#1211578)
• Update to Docker 23.0.6-ce (bsc#1211578)
• Update to runc v1.1.7
• Require a minimum Go version explicitly (bsc#1210298)
• Re-unify packaging for SLE-12 and SLE-15
• Fix build on SLE-12 by switching back to libbtrfs-devel headers
• Allow man pages to be built without internet access in OBS
• Add apparmor-parser as a Recommends to make sure that most users will end up with it installed even if they are primarily running SELinux
• Fix syntax of boolean dependency
• Allow to install container-selinux instead of apparmor-parser
• Change to using systemd-sysusers
• Update runc.keyring to upstream version
• Fix the inability to use `/dev/null` when inside a container (bsc#1207004)

This update for bind fixes the following issues:
Update to release 9.16.42
Security Fixes:

• The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. (CVE-2023-2828)
• A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. This has been fixed. (CVE-2023-2911)

• Previously, it was possible for a delegation from cache to be returned to the client after the stale-answer-client-timeout duration. This has been fixed. [bsc#1212544, bsc#1212567, jsc#SLE-24600]

• When removing delegations from an opt-out range, empty-non-terminal NSEC3 records generated by those delegations were not cleaned up. This has been fixed. [jsc#SLE-24600]

• Logfiles using timestamp-style suffixes were not always correctly removed when the number of files exceeded the limit set by versions. This has been fixed for configurations which do not explicitly specify a directory path as part of the file argument in the channel specification.
• Performance of DNSSEC validation in zones with many DNSKEY records has been improved.

• libuv support for receiving multiple UDP messages in a single recvmmsg() system call has been tweaked several times between libuv versions 1.35.0 and 1.40.0; the current recommended libuv version is 1.40.0 or higher. New rules are now in effect for running with a different version of libuv than the one used at compilation time. These rules may trigger a fatal error at startup: - Building against or running with libuv versions 1.35.0 and 1.36.0 is now a fatal error. - Running with libuv version higher than 1.34.2 is now a fatal error when named is built against libuv version 1.34.2 or lower. - Running with libuv version higher than 1.39.0 is now a fatal error when named is built against libuv version 1.37.0, 1.38.0, 1.38.1, or 1.39.0.

• This prevents the use of libuv versions that may trigger an assertion failure when receiving multiple UDP messages in a single system call.

• named could crash with an assertion failure when adding a new zone into the configuration file for a name which was already configured as a member zone for a catalog zone. This has been fixed.
• When named starts up, it sends a query for the DNSSEC key for each configured trust anchor to determine whether the key has changed. In some unusual cases, the query might depend on a zone for which the server is itself authoritative, and would have failed if it were sent before the zone was fully loaded. This has now been fixed by delaying the key queries until all zones have finished loading. [jsc#SLE-24600]

This update for yast2-pkg-bindings fixes the following issues:
libzypp was updated to version 17.31.14 (22):

• Curl: trim all custom headers (bsc#1212187) HTTP/2 RFC 9113 forbids fields ending with a space. So we make sure all custom headers are trimmed. This also includes headers returned by URL-Resolver plugins.
• build: honor libproxy.pc's includedir (bsc#1212222)

• targetos: Add an error note if XPath:/product/register/target is not defined in /etc/products.d/baseproduct (bsc#1211261)
• targetos: Update help and man page (bsc#1211261)

• Added a new option for rebuilding the RPM database (--rebuilddb) (bsc#1209565)
• Selected products are not installed after resetting the package manager internally (bsc#1202234)

• Rebuild the RPM database during upgrade (--rebuilddb) (bsc#1209565)

This update for libjansson fixes the following issues:

• Update to 2.14 (bsc#1201817): * New Features: + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the corresponding `nocheck` functions. + Add jansson_version_str() and jansson_version_cmp() for runtime version checking + Add json_object_update_new(), json_object_update_existing_new() and json_object_update_missing_new() functions + Add json_object_update_recursive() + Add `json_pack()` format specifiers s*, o* and O* for values that can be omitted if null + Add `json_error_code()` to retrieve numeric error codes + Enable thread safety for `json_dump()` on all systems. Enable thread safe `json_decref()` and `json_incref()` for modern compilers + Add `json_sprintf()` and `json_vsprintf()` * Fixes: + Handle `sprintf` corner cases. + Add infinite loop check in json_deep_copy() + Enhance JANSSON_ATTRS macro to support earlier C standard(C89) + Update version detection for sphinx-build + Fix error message in `json_pack()` for NULL object + Avoid invalid memory read in `json_pack()` + Call va_end after va_copy in `json_vsprintf()` + Improve handling of formats with '?' and '*' in `json_pack()` + Remove inappropriate `jsonp_free()` which caused segmentation fault in error handling + Fix incorrect report of success from `json_dump_file()` when an error is returned by `fclose()` + Make json_equal() const-correct + Fix incomplete stealing of references by `json_pack()`
• Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
• Add check section.

This update for libcap fixes the following issues:

• CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418).
• CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419).

This update for dracut fixes the following issues:

• Update to version 055+suse.344.g3d5cd8fb
• Continue parsing if ldd prints 'cannot execute binary file' (bsc#1212662)

This update for libzypp, zypper fixes the following issues:
libzypp was updated to version 17.31.14 (22):

• Curl: trim all custom headers (bsc#1212187) HTTP/2 RFC 9113 forbids fields ending with a space. So we make sure all custom headers are trimmed. This also includes headers returned by URL-Resolver plugins.
• build: honor libproxy.pc's includedir (bsc#1212222)

• targetos: Add an error note if XPath:/product/register/target is not defined in /etc/products.d/baseproduct (bsc#1211261)
• targetos: Update help and man page (bsc#1211261)

SUSE-IU-2023:337-1

This release of python311, python311-pip, python311-setuptools adds the following feature:

• Add Python-3.11 to SLE-15-SP4 Python Module (jsc#PED-68, jsc#PED-2634)

This update for python-packaging fixes the following issues:

• Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

• Add patch to fix testsuite on big-endian targets
• Ignore python3.6.2 since the test doesn't support it.
• update to 21.3: * Add a pp3-none-any tag * Replace the blank pyparsing 3 exclusion with a 3.0.5 exclusion * Fix a spelling mistake

• update to 21.2: * Update documentation entry for 21.1. * Update pin to pyparsing to exclude 3.0.0. * PEP 656: musllinux support * Drop support for Python 2.7, Python 3.4 and Python 3.5 * Replace distutils usage with sysconfig * Add support for zip files * Use cached hash attribute to short-circuit tag equality comparisons * Specify the default value for the 'specifier' argument to 'SpecifierSet' * Proper keyword-only 'warn' argument in packaging.tags * Correctly remove prerelease suffixes from ~= check * Fix type hints for 'Version.post' and 'Version.dev' * Use typing alias 'UnparsedVersion' * Improve type inference * Tighten the return typeo

• Add Provides: for python*dist(packaging). (bsc#1186870)

• add no-legacyversion-warning.patch to restore compatibility with 20.4

• update to 20.9: * Add support for the ``macosx_10_*_universal2`` platform tags * Introduce ``packaging.utils.parse_wheel_filename()`` and ``parse_sdist_filename()``

• update to 20.8: * Revert back to setuptools for compatibility purposes for some Linux distros * Do not insert an underscore in wheel tags when the interpreter version number is more than 2 digits * Fix flit configuration, to include LICENSE files * Make `intel` a recognized CPU architecture for the `universal` macOS platform tag * Add some missing type hints to `packaging.requirements` * Officially support Python 3.9 * Deprecate the ``LegacyVersion`` and ``LegacySpecifier`` classes * Handle ``OSError`` on non-dynamic executables when attempting to resolve the glibc version string.

• update to 20.4: * Canonicalize version before comparing specifiers. * Change type hint for ``canonicalize_name`` to return ``packaging.utils.NormalizedName``. This enables the use of static typing tools (like mypy) to detect mixing of normalized and un-normalized names.

This update for curl adds the following feature:
Update to version 8.0.1 (jsc#PED-2580)

• CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230).
• CVE-2023-28320: siglongjmp race condition (bsc#1211231).
• CVE-2023-28321: IDN wildcard matching (bsc#1211232).
• CVE-2023-28322: POST-after-PUT confusion (bsc#1211233).

This update for vim fixes the following issues:

• Make xxd conflict with the previous vim packages to avoid a file conflict during migration (bsc#1211144)

This update for systemd fixes the following issues:

• udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)
• Optimize when hundred workers claim the same symlink with the same priority (bsc#1203141)
• Add nss-resolve and systemd-network to Packagehub-Subpackages (MSC-626)

This update for libzypp, zypper fixes the following issues:

• Installing local RPM packages fails if /usr/bin/find is not installed (bsc#1195633)
• multicurl: propagate ssl settings stored in repo url (bsc#1127591)
• MediaCurl: Fix endless loop if wrong credentials are stored in credentials.cat (bsc#1210870)
• zypp.conf: Introduce 'download.connect_timeout' [60 sec.] (bsc#1208329)
• Teach MediaNetwork to retry on HTTP2 errors.
• Fix selecting installed patterns from picklist (bsc#1209406)
• man: better explanation of --priority

This update for containerd fixes the following issues:

• Rebuild containerd with a current version of go to catch up on bugfixes and security fixes (bsc#1210298)

This update of runc fixes the following issues:

• rebuild the package with the go 19.9 secure release (bsc#1200441).

This update for grub2 fixes the following issues:

• grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)

• Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)

This update for dracut fixes the following issues:

• Update to version 055+suse.342.g2e6dce8e: fips=1 and separate /boot break s390x (bsc#1204478): * fix(fips): move fips-boot script to pre-pivot * fix(fips): only unmount /boot if it was mounted by the fips module * feat(fips): add progress messages * fix(fips): do not blindly remove /boot * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)

This update for kbd fixes the following issue:

• Add 'ara' vc keymap, 'ara' is slightly better than 'arabic' as it matches the name of its X11 layout counterpart. (bsc#1210702)

This update for c-ares fixes the following issues:
Update to version 1.19.1:

• CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604)
• CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605)
• CVE-2023-31130: Buffer Underwrite in ares_inet_net_pton() (bsc#1211606)
• CVE-2023-31124: AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607)
• Fix uninitialized memory warning in test
• ares_getaddrinfo() should allow a port of 0
• Fix memory leak in ares_send() on error
• Fix comment style in ares_data.h
• Fix typo in ares_init_options.3
• Sync ax_pthread.m4 with upstream
• Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support

This update for util-linux fixes the following issue:

• Add upstream patch to prevent possible performance degradation of libuuid (bsc#1210164)

This update for zlib fixes the following issue:

• Fix function calling order to avoid crashes (bsc#1210593)

This update for libsigc++2 fixes the following issues:

• Remove executable permission for file (bsc#1209094, bsc#1209140)

This update for openssl-1_1 fixes the following issues:

• CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430).

This update for cups fixes the following issues:

• CVE-2023-32324: Fixed a buffer overflow in format_log_line() which could cause a denial-of-service (bsc#1211643).

This update for librelp fixes the following issues:

• update to librelp 1.11.0 (bsc#1210649)

This update for xen fixes the following issues:

• Added debug-info to xen-syms (bsc#1209237)

• Update to Xen 4.16.4 bug fix release (bsc#1027519)

• Added upstream bug fixes (bsc#1027519)
• Fix host-assisted kexec/kdump for HVM domUs (bsc#1209245)

• Drop patches contained in new tarball and switch to upstream backports for some patches

This update for supportutils-plugin-suse-public-cloud fixes the following issues:
- This update will be delivered to SLE Micro. (SMO-219)

SUSE-IU-2023:317-1

This update for timezone fixes the following issues:

• Version update from 2022g to 2023c: * Egypt now uses DST again, from April through October. * This year Morocco springs forward April 23, not April 30. * Palestine delays the start of DST this year. * Much of Greenland still uses DST from 2024 on. * America/Yellowknife now links to America/Edmonton. * tzselect can now use current time to help infer timezone. * The code now defaults to C99 or later.

This update for haveged fixes the following issues:

• Synchronize haveged instances during switching root (bsc#1203079)

This update for cups fixes the following issues:

• Fix print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable) (bsc#1191525)
• Fix '/usr/bin/lpr: Error - The printer or class does not exist (bsc#1203446)
• Improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error (bsc#1191467, bsc#1198932)
• Add 'After=network.target sssd.service' to the systemd unit (bsc#1201234, bsc#1200321)

This update for containerd fixes the following issues:
Update to containerd v1.6.19:
Security fixes:

• CVE-2023-25153: Fixed OCI image importer memory exhaustion (bnc#1208423).
• CVE-2023-25173: Fixed supplementary groups not set up properly (bnc#1208426).

This update for systemd-rpm-macros fixes the following issue:

• Don't emit a warning when the flag file in /var/lib/systemd/migrated/ is not present as it's expected (bsc#1208079).

This update for makedumpfile fixes the following issues:

• Fix memory leak issue in init_xen_crash_info (bsc#1201209)

This update for dracut fixes the following issues:

• Update to version 055+suse.335.gccf7fbc6: * Always include all drivers that LVM can use (bsc#1206195) * Require libopenssl1_1-hmac for dracut-fips (bsc#1206439)

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.
The following security bugs were fixed:

• CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687).
• CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203).
• CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168).
• CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532).
• CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547).
• CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256).
• CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052).
• CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366).
• CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779).
• CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788).
• CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635).
• CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634).
• CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636).
• CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290).
• CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829).

• ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes).
• alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes)
• ALSA: asihpi: check pao in control_message() (git-fixes).
• ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes).
• ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes).
• ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes).
• ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
• ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes).
• ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes).
• ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
• ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
• ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes).
• ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes).
• ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes).
• ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes).
• ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes).
• arch: fix broken BuildID for arm64 and riscv (bsc#1209798).
• ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes).
• ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes).
• arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes)
• arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes).
• arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes).
• arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes)
• arm64: dts: imx8mp: correct usb clocks (git-fixes)
• arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes)
• arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes)
• arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes).
• arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes)
• ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes).
• atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes).
• Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes).
• Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes).
• Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes).
• ca8210: fix mac_len negative array access (git-fixes).
• ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes).
• can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes).
• can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes).
• can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes).
• cifs: append path to open_enter trace event (bsc#1193629).
• cifs: avoid race conditions with parallel reconnects (bsc#1193629).
• cifs: avoid races in parallel reconnects in smb1 (bsc#1193629).
• cifs: check only tcon status on tcon related functions (bsc#1193629).
• cifs: do not poll server interfaces too regularly (bsc#1193629).
• cifs: double lock in cifs_reconnect_tcon() (git-fixes).
• cifs: dump pending mids for all channels in DebugData (bsc#1193629).
• cifs: empty interface list when server does not support query interfaces (bsc#1193629).
• cifs: fix dentry lookups in directory handle cache (bsc#1193629).
• cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629).
• cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629).
• cifs: Fix smb2_set_path_size() (git-fixes).
• cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629).
• cifs: generate signkey for the channel that's reconnecting (bsc#1193629).
• cifs: get rid of dead check in smb2_reconnect() (bsc#1193629).
• cifs: lock chan_lock outside match_session (bsc#1193629).
• cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes).
• cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629).
• cifs: print session id while listing open files (bsc#1193629).
• cifs: return DFS root session id in DebugData (bsc#1193629).
• cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629).
• cifs: use DFS root session instead of tcon ses (bsc#1193629).
• clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes).
• debugfs: add debugfs_lookup_and_remove() (git-fixes).
• drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815).
• drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815).
• drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes).
• drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes).
• drm/amdkfd: Fix an illegal memory access (git-fixes).
• drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes).
• drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes).
• drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
• drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes).
• drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes).
• drm/i915: Remove unused bits of i915_vma/active api (git-fixes).
• drm/i915/active: Fix missing debug object activation (git-fixes).
• drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes).
• drm/i915/display: clean up comments (git-fixes).
• drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes).
• drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes).
• drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes).
• drm/i915/gt: perform uc late init after probe error injection (git-fixes).
• drm/i915/psr: Use calculated io and fast wake lines (git-fixes).
• drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes).
• drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes).
• dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes).
• efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes).
• fbdev: au1200fb: Fix potential divide by zero (git-fixes).
• fbdev: intelfb: Fix potential divide by zero (git-fixes).
• fbdev: lxfb: Fix potential divide by zero (git-fixes).
• fbdev: nvidia: Fix potential divide by zero (git-fixes).
• fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes).
• fbdev: tgafb: Fix potential divide by zero (git-fixes).
• firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes).
• fotg210-udc: Add missing completion handler (git-fixes).
• ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes).
• ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes).
• ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
• gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
• gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes).
• HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes).
• HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes).
• hwmon: fix potential sensor registration fail if of_node is missing (git-fixes).
• i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes).
• i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes).
• i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes).
• iio: adc: ad7791: fix IRQ flags (git-fixes).
• iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes).
• iio: adis16480: select CONFIG_CRC32 (git-fixes).
• iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes).
• iio: light: cm32181: Unregister second I2C client if present (git-fixes).
• Input: alps - fix compatibility with -funsigned-char (bsc#1209805).
• Input: focaltech - use explicitly signed char type (git-fixes).
• Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes).
• KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi).
• kABI workaround for xhci (git-fixes).
• kABI: x86/msr: Remove .fixup usage (kabi).
• kconfig: Update config changed flag before calling callback (git-fixes).
• keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes).
• KVM: x86: fix sending PV IPI (git-fixes).
• KVM: x86: fix sending PV IPI (git-fixes).
• lan78xx: Add missing return code checks (git-fixes).
• lan78xx: Fix exception on link speed change (git-fixes).
• lan78xx: Fix memory allocation bug (git-fixes).
• lan78xx: Fix partial packet errors on suspend/resume (git-fixes).
• lan78xx: Fix race condition in disconnect handling (git-fixes).
• lan78xx: Fix race conditions in suspend/resume handling (git-fixes).
• lan78xx: Fix white space and style issues (git-fixes).
• lan78xx: Remove unused pause frame queue (git-fixes).
• lan78xx: Remove unused timer (git-fixes).
• lan78xx: Set flow control threshold to prevent packet loss (git-fixes).
• lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes).
• locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552).
• mm: memcg: fix swapcached stat accounting (bsc#1209804).
• mm: mmap: remove newline at the end of the trace (git-fixes).
• mmc: atmel-mci: fix race between stop command and start of next command (git-fixes).
• mtd: rawnand: meson: fix bitmask for length in command word (git-fixes).
• mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes).
• mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes).
• mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes).
• mtdblock: tolerate corrected bit-flips (git-fixes).
• net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes).
• net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes).
• net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes).
• net: phy: Ensure state transitions are processed from phy_stop() (git-fixes).
• net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes).
• net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes).
• net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes).
• net: usb: asix: remove redundant assignment to variable reg (git-fixes).
• net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes).
• net: usb: lan78xx: Limit packet length to skb->len (git-fixes).
• net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes).
• net: usb: smsc75xx: Limit packet length to skb->len (git-fixes).
• net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes).
• net: usb: smsc95xx: Limit packet length to skb->len (git-fixes).
• net: usb: use eth_hw_addr_set() (git-fixes).
• NFS: Fix an Oops in nfs_d_automount() (git-fixes).
• NFS: fix disabling of swap (git-fixes).
• NFS4trace: fix state manager flag printing (git-fixes).
• NFSD: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes).
• NFSD: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes).
• NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes).
• NFSD: fix race to check ls_layouts (git-fixes).
• NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes).
• NFSD: Protect against filesystem freezing (git-fixes).
• NFSD: shut down the NFSv4 state objects before the filecache (git-fixes).
• NFSD: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes).
• NFSD: zero out pointers after putting nfsd_files on COPY setup error (git-fixes).
• NFSv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes).
• NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes).
• NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes).
• NFSv4: keep state manager thread active if swap is enabled (git-fixes).
• NFSv4: provide mount option to toggle trunking discovery (git-fixes).
• NFSv4: Fix initialisation of struct nfs4_label (git-fixes).
• NFSv4: Fail client initialisation if state manager thread can't run (git-fixes).
• nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes).
• nilfs2: fix sysfs interface lifetime (git-fixes).
• nvme-tcp: always fail a request when sending it failed (bsc#1208902).
• PCI: hv: Add a per-bus mutex state_lock (bsc#1207185).
• PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185).
• PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185).
• PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185).
• PCI: hv: Use async probing to reduce boot time (bsc#1207185).
• PCI/DPC: Await readiness of secondary bus after reset (git-fixes).
• pinctrl: amd: Disable and mask interrupts on resume (git-fixes).
• pinctrl: at91-pio4: fix domain name assignment (git-fixes).
• pinctrl: ocelot: Fix alt mode for ocelot (git-fixes).
• platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes).
• platform/x86: think-lmi: add debug_cmd (bsc#1210050).
• platform/x86: think-lmi: add missing type attribute (git-fixes).
• platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes).
• platform/x86: think-lmi: Certificate authentication support (bsc#1210050).
• platform/x86: think-lmi: certificate support clean ups (bsc#1210050).
• platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes).
• platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes).
• platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes).
• platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050).
• platform/x86: think-lmi: only display possible_values if available (git-fixes).
• platform/x86: think-lmi: Opcode support (bsc#1210050).
• platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050).
• platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050).
• platform/x86: think-lmi: use correct possible_values delimiters (git-fixes).
• platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050).
• platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050).
• platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050).
• platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050).
• platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050).
• platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050).
• platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050).
• platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050).
• platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050).
• platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050).
• platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050).
• platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050).
• platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050).
• platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050).
• platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050).
• platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050).
• platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050).
• platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050).
• platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050).
• platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050).
• platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050).
• platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050).
• platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050).
• platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050).
• platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050).
• platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050).
• platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050).
• platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050).
• platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050).
• platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050).
• platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050).
• platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050).
• platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050).
• platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050).
• platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050).
• platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050).
• platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes).
• pNFS/filelayout: Fix coalescing test for single DS (git-fixes).
• power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes).
• powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869).
• powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869).
• powerpc/btext: add missing of_node_put (bsc#1065729).
• powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869).
• powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869).
• powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869).
• powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869).
• powerpc/kexec_file: fix implicit decl error (bsc#1194869).
• powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869).
• powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729).
• powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes).
• powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729).
• powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729).
• powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869).
• powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869).
• powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869).
• powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869).
• ppc64le: HWPOISON_INJECT=m (bsc#1209572).
• pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes).
• pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
• r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes).
• rcu: Fix rcu_torture_read ftrace event (git-fixes).
• regulator: Handle deferred clk (git-fixes).
• ring-buffer: Fix race while reader and writer are on the same page (git-fixes).
• ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes).
• ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes).
• rpm/constraints.in: increase the disk size for armv6/7 to 24GB It grows and the build fails recently on SLE15-SP4/5.
• s390/boot: simplify and fix kernel memory layout setup (bsc#1209600).
• s390/dasd: fix no record found for raw_track_access (bsc#1207574).
• s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes).
• sbitmap: Avoid lockups when waker gets preempted (bsc#1209118).
• sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799).
• scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556).
• sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes).
• serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes).
• serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes).
• serial: fsl_lpuart: Fix comment typo (git-fixes).
• smb3: fix unusable share after force unmount failure (bsc#1193629).
• smb3: lower default deferred close timeout to address perf regression (bsc#1193629).
• struct dwc3: mask new member (git-fixes).
• SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes).
• SUNRPC: Fix a server shutdown leak (git-fixes).
• SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes).
• thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes).
• thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes).
• thunderbolt: Disable interrupt auto clear for rings (git-fixes).
• thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes).
• thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes).
• thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes).
• timers: Prevent union confusion from unexpected (git-fixes)
• trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes).
• trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes).
• trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes).
• tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes).
• tracing: Add trace_array_puts() to write into instance (git-fixes).
• tracing: Check field value in hist_field_name() (git-fixes).
• tracing: Do not let histogram values have some modifiers (git-fixes).
• tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes).
• tracing: Free error logs of tracing instances (git-fixes).
• tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes).
• tracing: Make splice_read available again (git-fixes).
• tracing: Make tracepoint lockdep check actually test something (git-fixes).
• tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes).
• tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
• tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes).
• tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
• tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes).
• uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes).
• USB: cdns3: Fix issue with using incorrect PCI device function (git-fixes).
• USB: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes).
• USB: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
• USB: cdnsp: Fixes issue with redundant Status Stage (git-fixes).
• USB: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes).
• USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes).
• USB: dwc3: Fix a typo in field name (git-fixes).
• USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes).
• USB: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: gadget: u_audio: do not let userspace block driver unbind (git-fixes).
• USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes).
• USB: typec: tcpm: fix warning when handle discover_identity message (git-fixes).
• USB: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes).
• USB: ucsi: Fix ucsi->connector race (git-fixes).
• USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes).
• USB: xhci: tegra: fix sleep in atomic call (git-fixes).
• vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes).
• wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes).
• wifi: mac80211: fix qos on mesh interfaces (git-fixes).
• wireguard: ratelimiter: use hrtimer in selftest (git-fixes)
• x86: Annotate call_on_stack() (git-fixes).
• x86: Annotate call_on_stack() (git-fixes).
• x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
• x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
• x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes).
• x86/fpu: Cache xfeature flags from CPUID (git-fixes).
• x86/fpu: Remove unused supervisor only offsets (git-fixes).
• x86/fpu: Remove unused supervisor only offsets (git-fixes).
• x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
• x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes).
• x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
• x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes).
• x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
• x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes).
• x86/mce: Allow instrumentation during task work queueing (git-fixes).
• x86/mce: Allow instrumentation during task work queueing (git-fixes).
• x86/mce: Mark mce_end() noinstr (git-fixes).
• x86/mce: Mark mce_end() noinstr (git-fixes).
• x86/mce: Mark mce_panic() noinstr (git-fixes).
• x86/mce: Mark mce_panic() noinstr (git-fixes).
• x86/mce: Mark mce_read_aux() noinstr (git-fixes).
• x86/mce: Mark mce_read_aux() noinstr (git-fixes).
• x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
• x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes).
• x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
• x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes).
• x86/msr: Remove .fixup usage (git-fixes).
• x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
• x86/sgx: Free backing memory after faulting the enclave page (git-fixes).
• x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
• x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes).
• x86/uaccess: Move variable into switch case statement (git-fixes).
• x86/uaccess: Move variable into switch case statement (git-fixes).
• xfs: convert ptag flags to unsigned (git-fixes).
• xfs: do not assert fail on perag references on teardown (git-fixes).
• xfs: do not leak btree cursor when insrec fails after a split (git-fixes).
• xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes).
• xfs: remove xfs_setattr_time() declaration (git-fixes).
• xfs: zero inode fork buffer at allocation (git-fixes).
• xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes).
• xhci: Free the command allocated for setting LPM if we return early (git-fixes).
• xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes).
• xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes).

This update for openssl-1_1 fixes the following issues:

• CVE-2023-0465: Invalid certificate policies in leaf certificates were silently ignored (bsc#1209878).
• CVE-2023-0466: Certificate policy check were not enabled (bsc#1209873).

This update for kexec-tools fixes the following issues:

• kexec-bootloader: Add -a argument to load using kexec_load_file() when available (bsc#1202820).

This update for sles-release fixes the following issue:

• Filter libhogweed4 and libnettle6 so they dont get orphaned on system upgrades. (bsc#1208529)

This update for hwdata fixes the following issues:

• Update pci, usb and vendor ids

This update for dmidecode fixes the following issues:

• CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418).

This update for grub2 fixes the following issues:

• Fix aarch64 kiwi image's file not found due to '/@' prepended to path in btrfs filesystem. (bsc#1209165)
• Make grub more robust against storage race condition causing system boot failures (bsc#1189036)
• Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064, bsc#1209234)
• Fix installation over serial console ends up in infinite boot loop (bsc#1187810, bsc#1209667, bsc#1209372)

This update for avahi fixes the following issues:

• CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328).

This update for runc fixes the following issues:
Update to runc v1.1.5:
Security fixes:

• CVE-2023-25809: Fixed rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared (bnc#1209884).
• CVE-2023-27561: Fixed regression that reintroduced CVE-2019-19921 vulnerability (bnc#1208962).
• CVE-2023-28642: Fixed AppArmor/SELinux bypass with symlinked /proc (bnc#1209888).

This update for suseconnect-ng fixes the following issues:

• Update to version 1.1.0~git0.e3c41e60892e * Added MemTotal detection for HwInfo * Make keepalive on SUMA systems exit without error (bsc#1207876) * Add deactivate API to ruby bindings (bsc#1202705) * Allow non-root users to use --version * Update Dockerfile.yast * Use openssl go for SLE and Leap 15.5+ builds

This update for libxml2 fixes the following issues:

• CVE-2023-29469: Fixed inconsistent result when hashing empty strings (bsc#1210412).
• CVE-2023-28484: Fixed NULL pointer dereference in xmlSchemaFixupComplexType (bsc#1210411).

• Remove unneeded dependency (bsc#1209918).

This update for glib2 fixes the following issues:

• CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant (bsc#1209714).
• CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant (bsc#1209713).

• Fixed regression on s390x (bsc#1210135, glgo#GNOME/glib!2978).

This update for shadow fixes the following issues:

• CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507).

This update for shim fixes the following issues:

• CVE-2022-28737 was missing as reference previously.

• Upgrade shim-install for bsc#1210382

This update for vim fixes the following issues:
Updated to version 9.0 with patch level 1443, fixes the following security problems

• CVE-2023-1264: Fixed NULL Pointer Dereference (bsc#1209042).
• CVE-2023-1355: Fixed NULL Pointer Dereference (bsc#1209187).
• CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).

This update for procps fixes the following issue:

• Allow - as leading character to ignore possible errors on systctl entries (bsc#1209122)

This update for ncurses fixes the following issues:

• CVE-2023-29491: Fixed memory corruption issues when processing malformed terminfo data (bsc#1210434).

This update for openssh fixes the following issues:

• Remove some patches that cause invalid environment assignments (bsc#1207014).

This update for zlib fixes the following issues:

• Add DFLTCC support for using inflate() with a small window (bsc#1206513)

This update for libfastjson fixes the following issues:

• CVE-2020-12762: Fixed an integer overflow and out-of-bounds write via a large JSON file (bsc#1171479).

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

The following security bugs were fixed:

• CVE-2023-2235: A use-after-free vulnerability in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210986).
• CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992).
• CVE-2023-23006: Fixed NULL checking against IS_ERR in dr_domain_init_resources (bsc#1208845).
• CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871).
• CVE-2023-2176: A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA. The improper cleanup results in out-of-boundary read, where a local user can utilize this problem to crash the system or escalation of privilege (bsc#1210629).
• CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system (bsc#1209615).
• CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506).
• CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202).
• CVE-2023-30772: Fixed a race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329).
• CVE-2023-2019: A flaw was found in the netdevsim device driver, more specifically within the scheduling of events. This issue results from the improper management of a reference count and may lead to a denial of service (bsc#1210454).
• CVE-2023-2008: A flaw was found in the fault handler of the udmabuf device driver. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code (bsc#1210453).
• CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336).
• CVE-2023-1990: Fixed a use after free in ndlc_remove (bsc#1210337).

• ACPI: CPPC: Disable FIE if registers in PCC regions (bsc#1210953).
• ACPI: VIOT: Initialize the correct IOMMU fwspec (git-fixes).
• ACPI: resource: Add Medion S17413 to IRQ override quirk (git-fixes).
• ALSA: emu10k1: do not create old pass-through playback device on Audigy (git-fixes).
• ALSA: emu10k1: fix capture interrupt handler unlinking (git-fixes).
• ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes).
• ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes).
• ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes).
• ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes).
• ALSA: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes).
• ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes).
• ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes).
• ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes).
• ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes).
• ALSA: hda: cs35l41: Enable Amp High Pass Filter (git-fixes).
• ALSA: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes).
• ALSA: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes).
• ARM: 9290/1: uaccess: Fix KASAN false-positives (git-fixes).
• ARM: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes).
• ARM: dts: gta04: fix excess dma channel usage (git-fixes).
• ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes).
• ARM: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes).
• ARM: dts: s5pv210: correct MIPI CSIS clock name (git-fixes).
• ASN.1: Fix check for strdup() success (git-fixes).
• ASoC: cs35l41: Only disable internal boost (git-fixes).
• ASoC: es8316: Handle optional IRQ assignment (git-fixes).
• ASoC: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes).
• ASoC: fsl_mqs: move of_node_put() to the correct location (git-fixes).
• Bluetooth: Fix race condition in hidp_session_thread (git-fixes).
• Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes).
• Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes).
• IB/mlx5: Add support for 400G_8X lane speed (git-fixes)
• Input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes).
• Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes).
• KEYS: Add missing function documentation (git-fixes).
• KEYS: Create static version of public_key_verify_signature (git-fixes).
• NFS: Cleanup unused rpc_clnt variable (git-fixes).
• NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (git-fixes).
• NFSD: callback request does not use correct credential for AUTH_SYS (git-fixes).
• PCI/EDR: Clear Device Status after EDR error recovery (git-fixes).
• PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes).
• PCI: imx6: Install the fault handler only on compatible match (git-fixes).
• PCI: loongson: Add more devices that need MRRS quirk (git-fixes).
• PCI: loongson: Prevent LS7A MRRS increases (git-fixes).
• PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes).
• PCI: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes).
• RDMA/cma: Allow UD qp_type to join multicast only (git-fixes)
• RDMA/core: Fix GID entry ref leak when create_ah fails (git-fixes)
• RDMA/irdma: Add ipv4 check to irdma_find_listener() (git-fixes)
• RDMA/irdma: Fix memory leak of PBLE objects (git-fixes)
• RDMA/irdma: Increase iWARP CM default rexmit count (git-fixes)
• Remove obsolete KMP obsoletes (bsc#1210469).
• Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (git-fixes).
• Revert 'pinctrl: amd: Disable and mask interrupts on resume' (git-fixes).
• USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
• USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
• USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes).
• USB: serial: option: add Quectel RM500U-CN modem (git-fixes).
• USB: serial: option: add Telit FE990 compositions (git-fixes).
• USB: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes).
• amdgpu: disable powerpc support for the newer display engine (bsc#1194869).
• arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes).
• arm64: dts: meson-g12-common: specify full DMC range (git-fixes).
• arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes).
• arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes).
• arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes).
• arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes).
• arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes).
• arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes).
• arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes).
• arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes).
• arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes).
• arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes).
• arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes).
• arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes).
• arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes).
• bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes).
• cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods
• cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly
• cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827).
• cifs: fix negotiate context parsing (bsc#1210301).
• clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes).
• clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
• clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes).
• clk: sprd: set max_register according to mapping range (git-fixes).
• clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes).
• cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
• cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
• cpumask: fix incorrect cpumask scanning result checks (bsc#1210943).
• crypto: caam - Clear some memory in instantiate_rng (git-fixes).
• crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes).
• crypto: sa2ul - Select CRYPTO_DES (git-fixes).
• crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes).
• driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes).
• drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes).
• drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes).
• drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes).
• drm/amd/display: Fix potential null dereference (git-fixes).
• drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869).
• drm/armada: Fix a potential double free in an error handling path (git-fixes).
• drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes).
• drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes).
• drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes).
• drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes).
• drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes).
• drm/i915: Fix fast wake AUX sync len (git-fixes).
• drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes).
• drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes).
• drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes).
• drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes).
• drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes).
• drm/msm: fix NULL-deref on snapshot tear down (git-fixes).
• drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes).
• drm/panel: otm8009a: Set backlight parent to panel device (git-fixes).
• drm/probe-helper: Cancel previous job before starting new one (git-fixes).
• drm/rockchip: Drop unbalanced obj unref (git-fixes).
• drm/vgem: add missing mutex_destroy (git-fixes).
• drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes).
• drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes).
• drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes).
• dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes).
• dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
• dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes).
• dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes).
• dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes).
• dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes).
• e1000e: Disable TSO on i219-LM card to increase speed (git-fixes).
• efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes).
• ext4: Fix deadlock during directory rename (bsc#1210763).
• ext4: Fix possible corruption when moving a directory (bsc#1210763).
• ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766).
• ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767).
• ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076).
• ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765).
• ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891).
• ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764).
• ext4: fix possible double unlock when moving a directory (bsc#1210763).
• ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793).
• fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes).
• firmware: qcom_scm: Clear download bit during reboot (git-fixes).
• firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes).
• fpga: bridge: fix kernel-doc parameter description (git-fixes).
• hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes).
• hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes).
• hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes).
• i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes).
• i2c: hisi: Avoid redundant interrupts (git-fixes).
• i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes).
• i2c: ocores: generate stop condition after timeout in polling mode (git-fixes).
• i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes).
• ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158).
• iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes).
• iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes).
• ipmi: fix SSIF not responding under certain cond (git-fixes).
• ipmi:ssif: Add send_retries increment (git-fixes).
• k-m-s: Drop Linux 2.6 support
• kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi).
• kABI: x86/msi: Fix msi message data shadow struct (kabi).
• kabi/severities: ignore KABI for NVMe target (bsc#1174777).
• keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088).
• locking/rwbase: Mitigate indefinite writer starvation.
• media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes).
• media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes).
• media: max9286: Free control handler (git-fixes).
• media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes).
• media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes).
• media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes).
• media: venus: dec: Fix handling of the start cmd (git-fixes).
• memstick: fix memory leak if card device is never registered (git-fixes).
• mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768).
• mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034).
• mm: take a page reference when removing device exclusive entries (bsc#1211025).
• mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes).
• mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes).
• mtd: core: fix error path for nvmem provider (git-fixes).
• mtd: core: fix nvmem error reporting (git-fixes).
• mtd: core: provide unique name for nvmem device, take two (git-fixes).
• mtd: spi-nor: Fix a trivial typo (git-fixes).
• net: phy: nxp-c45-tja11xx: add remove callback (git-fixes).
• net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes).
• nfsd: call op_release, even when op_func returns an error (git-fixes).
• nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes).
• nilfs2: initialize unused bytes in segment summary blocks (git-fixes).
• nvme initialize core quirks before calling nvme_init_subsystem (git-fixes).
• nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes).
• nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (git-fixes).
• nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes).
• nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes).
• nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes).
• nvme-pci: fix doorbell buffer value endianness (git-fixes).
• nvme-pci: fix mempool alloc size (git-fixes).
• nvme-pci: fix page size checks (git-fixes).
• nvme-pci: fix timeout request state check (git-fixes).
• nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes).
• nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes).
• nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes).
• nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes).
• nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes).
• nvme: add device name to warning in uuid_show() (git-fixes).
• nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes).
• nvme: copy firmware_rev on each init (git-fixes).
• nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes).
• nvme: fix async event trace event (git-fixes).
• nvme: fix handling single range discard request (git-fixes).
• nvme: fix per-namespace chardev deletion (git-fixes).
• nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes).
• nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes).
• nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
• nvme: move nvme_multi_css into nvme.h (git-fixes).
• nvme: return err on nvme_init_non_mdts_limits fail (git-fixes).
• nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693).
• nvme: set dma alignment to dword (git-fixes).
• nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (git-fixes).
• nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes).
• nvmet-tcp: fix incomplete data digest send (git-fixes).
• nvmet-tcp: fix regression in data_digest calculation (git-fixes).
• nvmet: add helpers to set the result field for connect commands (git-fixes).
• nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes).
• nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes).
• nvmet: fix I/O Command Set specific Identify Controller (git-fixes).
• nvmet: fix Identify Active Namespace ID list handling (git-fixes).
• nvmet: fix Identify Controller handling (git-fixes).
• nvmet: fix Identify Namespace handling (git-fixes).
• nvmet: fix a memory leak (git-fixes).
• nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes).
• nvmet: fix a use-after-free (git-fixes).
• nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes).
• nvmet: force reconnect when number of queue changes (git-fixes).
• nvmet: looks at the passthrough controller when initializing CAP (git-fixes).
• nvmet: only allocate a single slab for bvecs (git-fixes).
• nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes).
• perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes).
• perf/core: Fix the same task check in perf_event_set_output (git fixes).
• perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes).
• perf: fix perf_event_context->time (git fixes).
• platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes).
• platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes).
• power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes).
• power: supply: generic-adc-battery: fix unit scaling (git-fixes).
• powerpc/64: Always build with 128-bit long double (bsc#1194869).
• powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869).
• powerpc/hv-gpci: Fix hv_gpci event list (git fixes).
• powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
• powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes).
• powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes).
• powerpc: declare unmodified attribute_group usages const (git-fixes).
• regulator: core: Avoid lockdep reports when resolving supplies (git-fixes).
• regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes).
• regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes).
• regulator: fan53555: Explicitly include bits header (git-fixes).
• regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes).
• regulator: stm32-pwr: fix of_iomap leak (git-fixes).
• remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes).
• remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes).
• remoteproc: st: Call of_node_put() on iteration error (git-fixes).
• remoteproc: stm32: Call of_node_put() on iteration error (git-fixes).
• rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes).
• rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes).
• sched/fair: Fix imbalance overflow (bsc#1155798).
• sched/fair: Limit sched slice duration (bsc#1189999).
• sched/fair: Move calculate of avg_load to a better location (bsc#1155798).
• sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325).
• sched/fair: sanitize vruntime of entity being placed (bsc#1203325).
• sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999).
• sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798).
• scsi: aic94xx: Add missing check for dma_map_single() (git-fixes).
• scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039).
• scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes).
• scsi: core: Fix a procfs host directory removal regression (git-fixes).
• scsi: core: Fix a source code comment (git-fixes).
• scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes).
• scsi: hisi_sas: Check devm_add_action() return value (git-fixes).
• scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes).
• scsi: ipr: Work around fortify-string warning (git-fixes).
• scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes).
• scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes).
• scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes).
• scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
• scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes).
• scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes).
• scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes).
• scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943).
• scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943).
• scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943).
• scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943).
• scsi: lpfc: Fix double word in comments (bsc#1210943).
• scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943).
• scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943).
• scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943).
• scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943).
• scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943).
• scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943).
• scsi: lpfc: Silence an incorrect device output (bsc#1210943).
• scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943).
• scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
• scsi: megaraid_sas: Fix crash after a double completion (git-fixes).
• scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes).
• scsi: mpt3sas: Do not print sense pool info twice (git-fixes).
• scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes).
• scsi: mpt3sas: Fix a memory leak (git-fixes).
• scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes).
• scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes).
• scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes).
• scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943).
• scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes).
• scsi: ses: Do not attach if enclosure has no components (git-fixes).
• scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes).
• scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes).
• scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes).
• scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes).
• scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes).
• seccomp: Move copy_seccomp() to no failure path (bsc#1210817).
• selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes).
• selftests: sigaltstack: fix -Wuninitialized (git-fixes).
• selinux: ensure av_permissions.h is built when needed (git-fixes).
• selinux: fix Makefile dependencies of flask.h (git-fixes).
• serial: 8250: Add missing wakeup event reporting (git-fixes).
• serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
• serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes).
• serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes).
• signal handling: do not use BUG_ON() for debugging (bsc#1210439).
• signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816).
• signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816).
• signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816).
• soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes).
• spi: cadence-quadspi: fix suspend-resume implementations (git-fixes).
• spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
• spi: qup: Do not skip cleanup in remove's error path (git-fixes).
• staging: iio: resolver: ads1210: fix config mode (git-fixes).
• staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes).
• stat: fix inconsistency between struct stat and struct compat_stat (git-fixes).
• sunrpc: only free unix grouplist after RCU settles (git-fixes).
• tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes).
• tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes).
• udf: Check consistency of Space Bitmap Descriptor (bsc#1210771).
• udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649).
• udf: Support splicing to file (bsc#1210770).
• usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
• usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
• usb: dwc3: gadget: Change condition for processing suspend event (git-fixes).
• usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes).
• usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
• usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes).
• usb: host: xhci-rcar: remove leftover quirk handling (git-fixes).
• virt/coco/sev-guest: Add throttling awareness (bsc#1209927).
• virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927).
• virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927).
• virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927).
• virt/coco/sev-guest: Do some code style cleanups (bsc#1209927).
• virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927).
• virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927).
• virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927).
• virtio_ring: do not update event idx on get_buf (git-fixes).
• vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes).
• vmxnet3: use gro callback when UPT is enabled (bsc#1209739).
• wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes).
• wifi: ath6kl: minor fix for allocation size (git-fixes).
• wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes).
• wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes).
• wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes).
• wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes).
• wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes).
• wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes).
• wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes).
• wifi: iwlwifi: fw: move memset before early return (git-fixes).
• wifi: iwlwifi: make the loop for card preparation effective (git-fixes).
• wifi: iwlwifi: mvm: check firmware response size (git-fixes).
• wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes).
• wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (git-fixes).
• wifi: iwlwifi: mvm: initialize seq variable (git-fixes).
• wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes).
• wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes).
• wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes).
• wifi: mac80211: adjust scan cancel comment/check (git-fixes).
• wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes).
• wifi: mt76: fix 6GHz high channel not be scanned (git-fixes).
• wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes).
• wifi: mwifiex: mark OF related data as maybe unused (git-fixes).
• wifi: rt2x00: Fix memory leak when handling surveys (git-fixes).
• wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes).
• wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes).
• wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes).
• wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes).
• wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes).
• writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769).
• x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes).
• x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes).
• x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes).
• x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
• x86/entry: Avoid very early RET (git-fixes).
• x86/entry: Do not call error_entry() for XENPV (git-fixes).
• x86/entry: Move CLD to the start of the idtentry macro (git-fixes).
• x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes).
• x86/entry: Switch the stack after error_entry() returns (git-fixes).
• x86/fpu: Prevent FPU state corruption (git-fixes).
• x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes).
• x86/msi: Fix msi message data shadow struct (git-fixes).
• x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes).
• x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes).
• x86/tsx: Disable TSX development mode at boot (git-fixes).
• x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (git-fixes).
• xhci: fix debugfs register accesses while suspended (git-fixes).

• Do not ship on s390x (bsc#1210729)
• Add exfat (bsc#1208822)
• Add _diag modules for included socket types (bsc#1204042)

This update for supportutils-plugin-suse-public-cloud fixes the following issues:

• Update to version 1.0.7 (bsc#1209026) + Include information about the cached registration data + Collect the data that is sent to the update infrastructure during registration

SUSE-IU-2023:219-1

This update for mokutil fixes the following issues:

• Adds SBAT revocation support to mokutil. (bsc#1198458)

• mokutil --set-sbat-policy (latest | previous | delete) to set the SBAT acceptance policy.

• mokutil --list-sbat-revocations

This update for suse-build-key fixes the following issues:
This update provides multiple new 4096 RSA keys for SUSE Linux Enterprise 15, SUSE Manager 4.2/4.3, Storage 7.1, SUSE Registry) that we will switch to mid of 2023. (jsc#PED-2777)

• gpg-pubkey-3fa1d6ce-63c9481c.asc: new 4096 RSA signing key for SUSE Linux Enterprise (RPM and repositories).
• gpg-pubkey-d588dc46-63c939db.asc: new 4096 RSA reserve key for SUSE Linux Enterprise (RPM and repositories).
• suse_ptf_key_4096.asc: new 4096 RSA signing key for PTF packages.
• build-container-8fd6c337-63c94b45.asc/build-container-8fd6c337-63c94b45.pem: New RSA 4096 key for the SUSE registry registry.suse.com, installed as suse-container-key-2023.pem and suse-container-key-2023.asc
• suse_ptf_containerkey_2023.asc suse_ptf_containerkey_2023.pem: New PTF container signing key for registry.suse.com/ptf/ space.

This update for rpm fixes the following issues:

• Fix missing python(abi) for 3.XX versions (bsc#1207294)

This update for python-cryptography fixes the following issues:
- CVE-2023-23931: Fixed memory corruption due to invalidly changed immutable object (bsc#1208036).

This update for gnutls fixes the following issues:
FIPS: Establish PBKDF2 additional requirements [bsc#1209001]

• Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
• Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
• Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
• Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
• Add regression tests for the new PBKDF2 requirements.

This update for gcc12 fixes the following issues:
This update ships gcc12 also to the SUSE Linux Enterprise 15 SP1 LTSS and 15 SP2 LTSS products.
SUSE Linux Enterprise 15 SP3 and SP4 get only refreshed builds without changes

This update ship the GCC 12 compiler suite and its base libraries.
The compiler baselibraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 11 ones.
The new compilers for C, C++, and Fortran are provided in the SUSE Linux Enterprise Module for Development Tools.
To use gcc12 compilers use:

• install 'gcc12' or 'gcc12-c++' or one of the other 'gcc12-COMPILER' frontend packages.
• override your makefile to use CC=gcc12, CXX=g++12 and similar overrides for the other languages.

This update for vim fixes the following issues:

• CVE-2023-0512: Fixed a divide By Zero (bsc#1207780).
• CVE-2023-1175: vim: an incorrect calculation of buffer size (bsc#1208957).
• CVE-2023-1170: Fixed a heap-based Buffer Overflow (bsc#1208959).
• CVE-2023-1127: Fixed divide by zero in scrolldown() (bsc#1208828).

• https://github.com/vim/vim/compare/v9.0.1234...v9.0.1386

This update for libgcrypt fixes the following issues:

• FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
• FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
• FIPS: PBKDF2: Added additional checks for the minimum key length, salt length, iteration count and passphrase length to the kdf FIPS indicator in _gcry_fips_indicator_kdf() [bsc#1208926]

This update for openssl-1_1 fixes the following issues:
FIPS: Service-level indicator changes [bsc#1208998]

• Add additional checks required by FIPS 140-3. Minimum values for PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for iteration count and 20 characters for password.

This update for grub2 fixes the following issues:

• Remove zfs modules (bsc#1205554)
• Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)

This update for libsolv, libzypp, zypper fixes the following issues:
libsolv:

• Do not autouninstall SUSE PTF packages
• Ensure 'duplinvolvedmap_all' is reset when a solver is reused
• Fix 'keep installed' jobs not disabling 'best update' rules
• New '-P' and '-W' options for `testsolv`
• New introspection interface for weak dependencies similar to ruleinfos
• Ensure special case file dependencies are written correctly in the testcase writer
• Support better info about alternatives
• Support decision reason queries
• Support merging of related decisions
• Support stringification of multiple solvables
• Support stringification of ruleinfo, decisioninfo and decision reasons

• Avoid calling getsockopt when we know the info already. This patch should fix logging on WSL, getsockopt seems to not be fully supported but the code required it when accepting new socket connections (bsc#1178233)
• Avoid redirecting 'history.logfile=/dev/null' into the target
• Create '.no_auto_prune' in the package cache dir to prevent auto cleanup of orphaned repositories (bsc#1204956)
• Enhance yaml-cpp detection
• Improve download of optional files
• MultiCurl: Make sure to reset the progress function when falling back.
• Properly reset range requests (bsc#1204548)
• Removing a PTF without enabled repos should always fail (bsc#1203248) Without enabled repos, the dependent PTF-packages would be removed (not replaced!) as well. To remove a PTF `zypper install -- -PTF` or a dedicated `zypper removeptf PTF` should be used. This will update the installed PTF packages to theit latest version.
• Skip media.1/media download for http repo status calc. This patch allows zypp to skip a extra media.1/media download to calculate if a repository needs to be refreshed. This optimisation only takes place if the repo does specify only downloading base urls.
• Use a dynamic fallback for BLKSIZE in downloads. When not receiving a blocklist via metalink file from the server MediaMultiCurl used to fallback to a fixed, relatively small BLKSIZE. This patch changes the fallback into a dynamic value based on the filesize using a similar metric as the MirrorCache implementation on the server side.
• ProgressData: enforce reporting the INIT||END state (bsc#1206949)
• ps: fix service detection on newer Tumbleweed systems (bsc#1205636)

• Allow to (re)add a service with the same URL (bsc#1203715)
• Bump dependency requirement to libzypp-devel 17.31.7 or greater
• Explain outdatedness of repositories
• patterns: Avoid dispylaing superfluous @System entries (bsc#1205570)
• Provide `removeptf` command (bsc#1203249) A remove command which prefers replacing dependant packages to removing them as well. A PTF is typically removed as soon as the fix it provides is applied to the latest official update of the dependant packages. However it is not desired for the dependant packages to be removed together with the PTF, which is what the remove command would do. The `removeptf` command however will aim to replace the dependant packages by their official update versions.
• Update man page and explain '.no_auto_prune' (bsc#1204956)

This update for kexec-tools fixes the following issues:

• Remove ram_top restriction (bsc#1203410)

This update for python-PyJWT fixes the following issues:

• CVE-2022-29217: Fixed Key confusion through non-blocklisted public key formats (bsc#1199756).

• Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)

• Update to 2.4.0 (bsc#1199756) - Explicit check the key for ECAlgorithm - Don't use implicit optionals - documentation fix: show correct scope - fix: Update copyright information - Don't mutate options dictionary in .decode_complete() - Add support for Python 3.10 - api_jwk: Add PyJWKSet.__getitem__ - Update usage.rst - Docs: mention performance reasons for reusing RSAPrivateKey when encoding - Fixed typo in usage.rst - Add detached payload support for JWS encoding and decoding - Replace various string interpolations with f-strings by

This update for docker fixes the following issues:
Docker was updated to 20.10.23-ce.
See upstream changelog at https://docs.docker.com/engine/release-notes/#201023
Docker was updated to 20.10.21-ce (bsc#1206065)
See upstream changelog at https://docs.docker.com/engine/release-notes/#201021
Security issues fixed:

• CVE-2022-36109: Fixed supplementary group permissions bypass (bsc#1205375)

• Fix wrong After: in docker.service, fixes bsc#1188447
• Add apparmor-parser as a Recommends to make sure that most users will end up with it installed even if they are primarily running SELinux.
• Allow to install container-selinux instead of apparmor-parser.
• Change to using systemd-sysusers

This update for xen fixes the following issues:

• CVE-2022-42332: Fixed use-after-free in x86 shadow plus log-dirty mode (bsc#1209017).
• CVE-2022-42333,CVE-2022-42334: Fixed x86/HVM pinned cache attributes mis-handling (bsc#1209018).
• CVE-2022-42331: Fixed speculative vulnerability in 32bit SYSCALL path on x86 (bsc#1209019).

This update for python3 fixes the following issues:

• CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471).

• Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355).

This update for curl fixes the following issues:

• CVE-2023-27533: Fixed TELNET option IAC injection (bsc#1209209).
• CVE-2023-27534: Fixed SFTP path ~ resolving discrepancy (bsc#1209210).
• CVE-2023-27535: Fixed FTP too eager connection reuse (bsc#1209211).
• CVE-2023-27536: Fixed GSS delegation too eager connection reuse (bsc#1209212).
• CVE-2023-27538: Fixed SSH connection too eager reuse still (bsc#1209214).

This update for nfs-utils fixes the following issues:

• Rename all drop-in options.conf files as 10-options.conf This makes it easier for other packages to over-ride with a drop-in with a later sequence number (bsc#1207843)
• Avoid modprobe errors when sysctl is not installed (bsc#1200710 bsc#1207022 bsc#1206781)
• Add '-S scope' option to rpc.nfsd to simplify fail-over cluster configuration (bsc#1203746)

This update for containerd fixes the following issues:

• CVE-2022-23471: Fixed host memory exhaustion through Terminal resize goroutine leak (bsc#1206235).

• Re-build containerd to use updated golang-packaging (jsc#1342).
• Update to containerd v1.6.16 for Docker v23.0.0-ce. * https://github.com/containerd/containerd/releases/tag/v1.6.16

This update for suse-module-tools fixes the following issues:

• Update to version 15.4.16: * modprobe.conf: s390x: remove softdep on fbcon (bsc#1207853)

This update for sudo fixes the following issue:
Security issues:

• CVE-2023-28486: Fixed sudo does not escape control characters in log messages. (bsc#1209362)
• CVE-2023-28487: Fixed sudo does not escape control characters in sudoreplay output. (bsc#1209361)
• CVE-2023-27320: Fixed a potential security issue with a double free with per-command chroot sudoers rules (bsc#1208595).

• Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483)
• If NOPASSWD is specified, don't ask for password if command is not found (bsc#1206772).
• Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).

This update for cpupower fixes the following issues:

• Replace error with a warning if perf is unavailable (bsc#1202890)

This update for zstd fixes the following issues:

• CVE-2022-4899: Fixed buffer overrun in util.c (bsc#1209533).

This update for ldb, samba fixes the following issues:
ldb:

• CVE-2022-32746: Fixed an use-after-free issue in the database audit logging module (bsc#1201490).
• CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).

• CVE-2023-0922: Fixed cleartext password sending by AD DC admin tool (bso#15315) (bsc#1209481).
• CVE-2023-0225: Fixed deletion of AD DC 'dnsHostname' attribute by unprivileged authenticated users (bso#15276) (bsc#1209483).
• CVE-2023-0614: Fixed discovering of access controlled AD LDAP attributes (bso#15270) (bsc#1209485).

• Prevent use after free of messaging_ctdb_fde_ev structs (bso#15293) (bsc#1207416).
• Ship missing samba-winbind-libs-32bit package (bsc#1207996)
• Ship missing samba-libs to SLE Micro 5.3 (bsc#1207723)

This update for bind fixes the following issues:

• A constant stream of zone additions and deletions via rndc reconfig could cause increased memory consumption due to

This update for shim fixes the following issues:

• Updated shim signature after shim 15.7 be signed back: signature-sles.x86_64.asc, signature-sles.aarch64.asc (bsc#1198458)

• Add POST_PROCESS_PE_FLAGS=-N to the build command in shim.spec to disable the NX compatibility flag when using post-process-pe because grub2 is not ready. (bsc#1205588)

• Enable the NX compatibility flag by default. (jsc#PED-127)

• Make SBAT variable payload introspectable
• Reference MokListRT instead of MokList
• Add a link to the test plan in the readme.
• [V3] Enable TDX measurement to RTMR register
• Discard load-options that start with a NUL
• Fixed load_cert_file bugs
• Add -malign-double to IA32 compiler flags
• pe: Fix image section entry-point validation
• make-archive: Build reproducible tarball
• mok: remove MokListTrusted from PCR 7

• Support enhance shim measurement to TD RTMR. (jsc#PED-1273)

• shim-install: ensure grub.cfg created is not overwritten after installing grub related files
• Add logic to shim.spec to only set sbat policy when efivarfs is writeable. (bsc#1201066)
• Add logic to shim.spec for detecting --set-sbat-policy option before using mokutil to set sbat policy. (bsc#1202120)
• Change the URL in SBAT section to mail:security@suse.de. (bsc#1193282)

• MokManager: removed Locate graphic output protocol fail error message
• shim: implement SBAT verification for the shim_lock protocol
• post-process-pe: Fix a missing return code check
• Update github actions matrix to be more useful
• post-process-pe: Fix format string warnings on 32-bit platforms
• Allow MokListTrusted to be enabled by default
• Re-add ARM AArch64 support
• Use ASCII as fallback if Unicode Box Drawing characters fail
• make: don't treat cert.S specially
• shim: use SHIM_DEVEL_VERBOSE when built in devel mode
• Break out of the inner sbat loop if we find the entry.
• Support loading additional certificates
• Add support for NX (W^X) mitigations.
• Fix preserve_sbat_uefi_variable() logic
• SBAT Policy latest should be a one-shot
• pe: Fix a buffer overflow when SizeOfRawData > VirtualSize
• pe: Perform image verification earlier when loading grub
• Update advertised sbat generation number for shim
• Update SBAT generation requirements for 05/24/22
• Also avoid CVE-2022-28737 in verify_image() by @vathpela

• Broken ia32 relocs and an unimportant submodule change.
• mok: allocate MOK config table as BootServicesData
• Don't call QueryVariableInfo() on EFI 1.10 machines (bsc#1187260)
• Relax the check for import_mok_state() (bsc#1185261)
• SBAT.md: trivial changes
• shim: another attempt to fix load options handling
• Add tests for our load options parsing.
• arm/aa64: fix the size of .rela* sections
• mok: fix potential buffer overrun in import_mok_state
• mok: relax the maximum variable size check
• Don't unhook ExitBootServices when EBS protection is disabled
• fallback: find_boot_option() needs to return the index for the boot entry in optnum
• httpboot: Ignore case when checking HTTP headers
• Fallback allocation errors
• shim: avoid BOOTx64.EFI in message on other architectures
• str: remove duplicate parameter check
• fallback: add compile option FALLBACK_NONINTERACTIVE
• Test mok mirror
• Modify sbat.md to help with readability.
• csv: detect end of csv file correctly
• Specify that the .sbat section is ASCII not UTF-8
• tests: add 'include-fixed' GCC directory to include directories
• pe: simplify generate_hash()
• Don't make shim abort when TPM log event fails (RHBZ #2002265)
• Fallback to default loader if parsed one does not exist
• fallback: Fix for BootOrder crash when index returned
• Better console checks
• docs: update SBAT UEFI variable name
• Don't parse load options if invoked from removable media path
• fallback: fix fallback not passing arguments of the first boot option
• shim: Don't stop forever at 'Secure Boot not enabled' notification
• Allocate mokvar table in runtime memory.
• Remove post-process-pe on 'make clean'
• pe: missing perror argument

• CVE-2022-28737: Fixed a buffer overflow when SizeOfRawData > VirtualSize (bsc#1198458)

• Add mokutil command to post script for setting sbat policy to latest mode when the SbatPolicy-605dab50-e046-4300-abb6-3dd810dd8b23 is not created. (bsc#1198458)

• Updated vendor dbx binary and script (bsc#1198458)

• avoid buffer overflow when copying data to the MOK config table (bsc#1185232)
• Disable exporting vendor-dbx to MokListXRT since writing a large RT variable could crash some machines (bsc#1185261)
• ignore the odd LoadOptions length (bsc#1185232)
• shim-install: reset def_shim_efi to 'shim.efi' if the given file doesn't exist
• relax the maximum variable size check for u-boot (bsc#1185621)
• handle ignore_db and user_insecure_mode correctly (bsc#1185441, bsc#1187071)

• Split the keys in vendor-dbx.bin to vendor-dbx-sles and vendor-dbx-opensuse for shim-sles and shim-opensuse to reduce the size of MokListXRT (bsc#1185261) + Also update generate-vendor-dbx.sh in dbx-cert.tar.xz

The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes.

• CVE-2022-3523: Fixed a use after free related to device private page handling (bsc#1204363).
• CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332).
• CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331).
• CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773).
• CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787).
• CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845).
• CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598).
• CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599).
• CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208601).
• CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777).
• CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837).
• CVE-2023-22995: Fixed lacks of certain platform_device_put and kfree in drivers/usb/dwc3/dwc3-qcom.c (bsc#1208741).
• CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776).
• CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816).
• CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843).
• CVE-2023-23559: Fixed integer overflow in rndis_wlan that leads to a buffer overflow (bsc#1207051).
• CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560).
• CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700).
• CVE-2023-28328: Fixed a denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c (bsc#1209291).

• [infiniband] READ is 'data destination', not source... (git-fixes)
• [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes).
• acpi/x86: Add support for LPS0 callback handler (git-fixes).
• acpi: Do not build ACPICA with '-Os' (git-fixes).
• acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes).
• acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224).
• acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224).
• acpi: battery: Fix missing NUL-termination with large strings (git-fixes).
• acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes).
• acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes).
• acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224).
• acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224).
• acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224).
• acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224).
• acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224).
• acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224).
• acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224).
• acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224).
• acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224).
• acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224).
• acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224).
• acpica: Drop port I/O validation for some regions (git-fixes).
• acpica: nsrepair: handle cases without a return value correctly (git-fixes).
• add cherry-picked id for nouveau patch
• alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes).
• alsa: hda/ca0132: minor fix for allocation size (git-fixes).
• alsa: hda/conexant: add a new hda codec SN6180 (git-fixes).
• alsa: hda/realtek - fixed wrong gpio assigned (git-fixes).
• alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes).
• alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes).
• alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes).
• alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes).
• alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes).
• alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes).
• alsa: hda: Do not unset preset when cleaning up codec (git-fixes).
• alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes).
• alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes).
• alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes).
• alsa: pci: lx6464es: fix a debug loop (git-fixes).
• applicom: Fix PCI device refcount leak in applicom_init() (git-fixes).
• arm64: Treat ESR_ELx as a 64-bit register (git-fixes)
• arm64: atomics: remove LL/SC trampolines (git-fixes)
• arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes)
• arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes)
• arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes).
• arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes).
• arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes).
• arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes).
• arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes).
• arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes).
• arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes).
• arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes).
• arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes).
• arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes).
• arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes).
• arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes)
• arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes).
• arm64: dts: juno: Add missing MHU secure-irq (git-fixes)
• arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes).
• arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes).
• arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes).
• arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes).
• arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes).
• arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes).
• arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes).
• arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes).
• arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes).
• arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes).
• arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes).
• arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes).
• arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes).
• arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes).
• arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes).
• arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes).
• arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes).
• arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes).
• arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes).
• arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes).
• arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes).
• arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes).
• arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes).
• arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes).
• arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes).
• arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes).
• arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes).
• arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes).
• arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes).
• arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes).
• arm64: make is_ttbrX_addr() noinstr-safe (git-fixes)
• arm64: mm: kfence: only handle translation faults (git-fixes)
• arm: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes).
• arm: OMAP2+: Fix memory leak in realtime_counter_init() (git-fixes).
• arm: bcm2835_defconfig: Enable the framebuffer (git-fixes).
• arm: dts: am5748: keep usb4_tm disabled (git-fixes)
• arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes).
• arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes).
• arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes).
• arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes).
• arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes).
• arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes).
• arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes).
• arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes).
• arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes).
• arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes)
• arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes).
• arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes)
• arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes).
• arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes).
• arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes).
• arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes)
• arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes)
• arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes).
• arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes).
• arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes)
• arm: omap: remove debug-leds driver (git-fixes)
• arm: remove some dead code (git-fixes)
• arm: renumber bits related to _TIF_WORK_MASK (git-fixes)
• arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes).
• arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes)
• arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes).
• asoc: Intel: boards: fix spelling in comments (git-fixes).
• asoc: Intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes).
• asoc: Intel: bytcht_es8316: move comment to the right place (git-fixes).
• asoc: Intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes).
• asoc: Intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes).
• asoc: adau7118: do not disable regulators on device unbind (git-fixes).
• asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes).
• asoc: codecs: lpass: fix incorrect mclk rate (git-fixes).
• asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes).
• asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes).
• asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes).
• asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes).
• asoc: cs42l56: fix DT probe (git-fixes).
• asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes).
• asoc: fsl_sai: Update to modern clocking terminology (git-fixes).
• asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes).
• asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes).
• asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes).
• asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes).
• asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes).
• asoc: rsnd: fixup #endif position (git-fixes).
• asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes).
• asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes).
• asoc: soc-compress: Reposition and add pcm_mutex (git-fixes).
• asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes).
• asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes).
• asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes).
• asoc: zl38060 add gpiolib dependency (git-fixes).
• asoc: zl38060: Remove spurious gpiolib select (git-fixes).
• ath9k: hif_usb: simplify if-if to if-else (git-fixes).
• ath9k: htc: clean up statistics macros (git-fixes).
• auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes).
• avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529).
• backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes).
• blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes).
• blk-mq: fix possible memleak when register 'hctx' failed (git-fixes).
• block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes).
• block/bfq-iosched.c: use 'false' rather than 'BLK_RW_ASYNC' (git-fixes).
• block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541).
• block: clear ->slave_dir when dropping the main slave_dir reference (git-fixes).
• block: do not allow splitting of a REQ_NOWAIT bio (git-fixes).
• block: fix and cleanup bio_check_ro (git-fixes).
• block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes).
• block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes).
• bluetooth: L2CAP: Fix potential user-after-free (git-fixes).
• bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes).
• bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes).
• bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes).
• bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes).
• bpf, x64: Factor out emission of REX byte in more cases (git-fixes).
• bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes).
• bpf: Fix extable address check (git-fixes).
• bpf: Fix extable fixup offset (git-fixes).
• bpf: Skip task with pid=1 in send_signal_common() (git-fixes).
• can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes).
• ceph: flush cap releases when the session is flushed (bsc#1208428).
• ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504).
• cifs: Check the lease context if we actually got a lease (bsc#1193629).
• cifs: Convert struct fealist away from 1-element array (bsc#1193629).
• cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes).
• cifs: Fix oops due to uncleared server->smbd_conn in reconnect (git-fixes).
• cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629).
• cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629).
• cifs: Fix use-after-free in rdata->read_into_pages() (git-fixes).
• cifs: Fix warning and UAF when destroy the MR list (git-fixes).
• cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629).
• cifs: Replace remaining 1-element arrays (bsc#1193629).
• cifs: Replace zero-length arrays with flexible-array members (bsc#1193629).
• cifs: Use kstrtobool() instead of strtobool() (bsc#1193629).
• cifs: do not try to use rdma offload on encrypted connections (bsc#1193629).
• cifs: fix mount on old smb servers (boo#1206935).
• cifs: get rid of dns resolve worker (bsc#1193629).
• cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629).
• cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes).
• cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629).
• cifs: match even the scope id for ipv6 addresses (bsc#1193629).
• cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629).
• cifs: prevent data race in smb2_reconnect() (bsc#1193629).
• cifs: print last update time for interface list (bsc#1193629).
• cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629).
• cifs: return a single-use cfid if we did not get a lease (bsc#1193629).
• cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629).
• cifs: split out smb3_use_rdma_offload() helper (bsc#1193629).
• cifs: update ip_addr for ses only for primary chan setup (bsc#1193629).
• cifs: use tcon allocation functions even for dummy tcon (git-fixes).
• cifs: use the least loaded channel for sending requests (bsc#1193629).
• clk: HI655X: select REGMAP instead of depending on it (git-fixes).
• clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes).
• clk: imx: avoid memory leak (git-fixes).
• clk: mxl: Add option to override gate clks (git-fixes).
• clk: mxl: Fix a clk entry by adding relevant flags (git-fixes).
• clk: mxl: Remove redundant spinlocks (git-fixes).
• clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes).
• clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes).
• clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes).
• clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes).
• clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes).
• clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes).
• clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes).
• clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes).
• comedi: use menuconfig for main Comedi menu (git-fixes).
• crypto: arm64 - Fix unused variable compilation warnings of (git-fixes)
• crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes).
• crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes).
• crypto: crypto4xx - Call dma_unmap_page when done (git-fixes).
• crypto: essiv - Handle EBUSY correctly (git-fixes).
• crypto: qat - fix out-of-bounds read (git-fixes).
• crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes).
• crypto: seqiv - Handle EBUSY correctly (git-fixes).
• crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes).
• crypto: xts - Handle EBUSY correctly (git-fixes).
• delete patches.suse/drm-i915-Don-t-use-BAR-mappings-for-ring-buffers-wit.patch Resulted in an Oops / hang at boot (bsc#1209436)
• dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes).
• dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes).
• dmaengine: dw-edma: Drop chancnt initialization (git-fixes).
• dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes).
• dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes).
• dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes).
• dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes).
• dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes).
• dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes).
• do not sign the vanilla kernel (bsc#1209008).
• docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes).
• docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (git-fixes).
• docs: ftrace: fix a issue with duplicated subtitle number (git-fixes).
• docs: gdbmacros: print newest record (git-fixes).
• documentation/hw-vuln: Document the interaction between IBRS and STIBP (git-fixes).
• documentation: simplify and clarify DCO contribution example language (git-fixes).
• driver core: fix potential null-ptr-deref in device_add() (git-fixes).
• driver core: fix resource leak in device_add() (git-fixes).
• driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes).
• drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes).
• drivers: base: transport_class: fix possible memory leak (git-fixes).
• drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes).
• drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes).
• drm/amd/display: Fix potential null-deref in dm_resume (git-fixes).
• drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes).
• drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes).
• drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes).
• drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes).
• drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes).
• drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes).
• drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes).
• drm/bridge: lt8912b: Add hot plug detection (git-fixes).
• drm/bridge: lt9611: fix HPD reenablement (git-fixes).
• drm/bridge: lt9611: fix clock calculation (git-fixes).
• drm/bridge: lt9611: fix polarity programming (git-fixes).
• drm/bridge: lt9611: fix programming of video modes (git-fixes).
• drm/bridge: lt9611: fix sleep mode setup (git-fixes).
• drm/bridge: lt9611: pass a pointer to the of node (git-fixes).
• drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes).
• drm/connector: print max_requested_bpc in state debugfs (git-fixes).
• drm/edid: fix AVI infoframe aspect ratio handling (git-fixes).
• drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes).
• drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes).
• drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes).
• drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes).
• drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes).
• drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes).
• drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes).
• drm/i915: Fix VBT DSI DVO port handling (git-fixes).
• drm/i915: Initialize the obj flags for shmem objects (git-fixes).
• drm/mediatek: Clean dangling pointer on bind error path (git-fixes).
• drm/mediatek: Drop unbalanced obj unref (git-fixes).
• drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes).
• drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes).
• drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes).
• drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes).
• drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes).
• drm/msm/a5xx: fix context faults during ring switch (git-fixes).
• drm/msm/a5xx: fix highest bank bit for a530 (git-fixes).
• drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes).
• drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes).
• drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes).
• drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes).
• drm/msm/dpu: Add check for cstate (git-fixes).
• drm/msm/dpu: Add check for pstates (git-fixes).
• drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes).
• drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes).
• drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes).
• drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes).
• drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes).
• drm/msm/gem: Add check for kmalloc (git-fixes).
• drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes).
• drm/msm/mdp5: Add check for kzalloc (git-fixes).
• drm/msm: Fix potential invalid ptr free (git-fixes).
• drm/msm: clean event_thread->worker in case of an error (git-fixes).
• drm/msm: use strscpy instead of strncpy (git-fixes).
• drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes).
• drm/nouveau/kms/nv50-: remove unused functions (git-fixes).
• drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes).
• drm/omap: dsi: Fix excessive stack usage (git-fixes).
• drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes).
• drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes).
• drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes).
• drm/radeon: free iio for atombios when driver shutdown (git-fixes).
• drm/shmem-helper: Remove another errant put in error path (git-fixes).
• drm/sun4i: fix missing component unbind on bind errors (git-fixes).
• drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes).
• drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes).
• drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes).
• drm/vc4: hdmi: Correct interlaced timings again (git-fixes).
• drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes).
• drm/vc4: hvs: Set AXI panic modes (git-fixes).
• drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes).
• drm/virtio: exbuf->fence_fd unmodified on interrupted wait (git-fixes).
• drm/vkms: Fix memory leak in vkms_init() (git-fixes).
• drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes).
• drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes).
• drm: amd: display: Fix memory leakage (git-fixes).
• drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes).
• drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes).
• drm: tidss: Fix pixel format definition (git-fixes).
• dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes).
• dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes).
• dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes).
• dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes).
• dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes).
• dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes).
• dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes).
• eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes).
• efi: Accept version 2 of memory attributes table (git-fixes).
• exit: Add and use make_task_dead (bsc#1207328).
• exit: Allow oops_limit to be disabled (bsc#1207328).
• exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328).
• exit: Move force_uaccess back into do_exit (bsc#1207328).
• exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328).
• exit: Put an upper limit on how often we can oops (bsc#1207328).
• exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328).
• exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328).
• ext4,f2fs: fix readahead of verity data (bsc#1207648).
• ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619).
• ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878).
• ext4: add helper to check quota inums (bsc#1207618).
• ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617).
• ext4: add missing validation of fast-commit record lengths (bsc#1207626).
• ext4: allocate extended attribute value in vmalloc area (bsc#1207635).
• ext4: avoid crash when inline data creation follows DIO write (bsc#1206883).
• ext4: avoid resizing to a partial cluster size (bsc#1206880).
• ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634).
• ext4: continue to expand file system when the target size does not reach (bsc#1206882).
• ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592).
• ext4: correct max_inline_xattr_value_size computing (bsc#1206878).
• ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878).
• ext4: disable fast-commit of encrypted dir operations (bsc#1207623).
• ext4: do not allow journal inode to have encrypt flag (bsc#1207621).
• ext4: do not increase iversion counter for ea_inodes (bsc#1207605).
• ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603).
• ext4: do not set up encryption key during jbd2 transaction (bsc#1207624).
• ext4: drop ineligible txn start stop APIs (bsc#1207588).
• ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606).
• ext4: factor out ext4_fc_get_tl() (bsc#1207615).
• ext4: fast commit may miss file actions (bsc#1207591).
• ext4: fast commit may not fallback for ineligible commit (bsc#1207590).
• ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886).
• ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1206881).
• ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620).
• ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594).
• ext4: fix deadlock due to mbcache entry corruption (bsc#1207653).
• ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631).
• ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608).
• ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630).
• ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593).
• ext4: fix extent status tree race in writeback error recovery path (bsc#1206877).
• ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636).
• ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894).
• ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625).
• ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609).
• ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884).
• ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628).
• ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611).
• ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612).
• ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616).
• ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637).
• ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627).
• ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890).
• ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893).
• ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888).
• ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622).
• ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878).
• ext4: fix warning in 'ext4_da_release_space' (bsc#1206887).
• ext4: goto right label 'failed_mount3a' (bsc#1207610).
• ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629).
• ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633).
• ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614).
• ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602).
• ext4: make ext4_lazyinit_thread freezable (bsc#1206885).
• ext4: place buffer head allocation before handle start (bsc#1207607).
• ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889).
• ext4: simplify updating of fast commit stats (bsc#1207589).
• ext4: update 'state->fc_regions_size' after successful memory allocation (bsc#1207613).
• ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876).
• fbdev: omapfb: cleanup inconsistent indentation (git-fixes).
• fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes).
• firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes).
• firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes).
• firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes).
• firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes).
• firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes).
• firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes).
• fix page corruption caused by racy check in __free_pages (bsc#1208149).
• fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258).
• fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632).
• fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429).
• fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759).
• genirq: Provide new interfaces for affinity hints (bsc#1208153).
• gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes).
• gpio: vf610: connect GPIO label to dev name (git-fixes).
• gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes).
• gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes).
• hid: Add Mapping for System Microphone Mute (git-fixes).
• hid: asus: use spinlock to protect concurrent accesses (git-fixes).
• hid: asus: use spinlock to safely schedule workers (git-fixes).
• hid: bigben: use spinlock to protect concurrent accesses (git-fixes).
• hid: bigben: use spinlock to safely schedule workers (git-fixes).
• hid: bigben_probe(): validate report count (git-fixes).
• hid: bigben_worker() remove unneeded check on report_field (git-fixes).
• hid: core: Fix deadloop in hid_apply_multiplier (git-fixes).
• hid: elecom: add support for TrackBall 056E:011C (git-fixes).
• hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes).
• hid: multitouch: Add quirks for flipped axes (git-fixes).
• hid: retain initial quirks set up when creating HID devices (git-fixes).
• hv: fix comment typo in vmbus_channel/low_latency (git-fixes).
• hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes).
• hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes).
• hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes).
• hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes).
• hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes).
• hwmon: (coretemp) Simplify platform device handling (git-fixes).
• hwmon: (ftsteutates) Fix scaling of measurements (git-fixes).
• hwmon: (ina3221) return prober error code (git-fixes).
• hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848).
• hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes).
• hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes).
• hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes).
• hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes).
• hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes).
• hwmon: tmp512: drop of_match_ptr for ID table (git-fixes).
• i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes).
• i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes).
• i2c: mxs: suppress probe-deferral error message (git-fixes).
• i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes).
• ib/hfi1: Assign npages earlier (git-fixes)
• ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes)
• ib/hfi1: Fix sdma.h tx->num_descs off-by-one errors (git-fixes)
• ib/hfi1: Restore allocated resources on failed copyout (git-fixes)
• ib/hfi1: Update RMT size calculation (git-fixes)
• ib/ipoib: Fix legacy IPoIB due to wrong number of queues (git-fixes)
• iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes).
• iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes).
• iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes).
• input: ads7846 - always set last command to PWRDOWN (git-fixes).
• input: ads7846 - do not check penirq immediately for 7845 (git-fixes).
• input: ads7846 - do not report pressure for ads7845 (git-fixes).
• input: iqs269a - configure device with a single block write (git-fixes).
• input: iqs269a - drop unused device node references (git-fixes).
• input: iqs269a - increase interrupt handler return delay (git-fixes).
• input: iqs626a - drop unused device node references (git-fixes).
• interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes).
• interconnect: fix mem leak when freeing nodes (git-fixes).
• interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes).
• iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes).
• ipmi:ssif: Add a timer between request retries (bsc#1206459).
• ipmi:ssif: Remove rtc_us_timer (bsc#1206459).
• ipmi:ssif: resend_msg() cannot fail (bsc#1206459).
• ipmi_ssif: Rename idle state and check (bsc#1206459).
• irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes)
• iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes)
• jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590).
• jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646).
• jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641).
• jbd2: fix potential buffer head reference count leak (bsc#1207644).
• jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645).
• jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643).
• kABI workaround for hid quirks (git-fixes).
• kABI: pci: Reduce warnings on possible RW1C corruption (kabi).
• kABI: pci: dwc: Add dw_pcie_ops.host_deinit() callback (kabi).
• kabi fix for nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes).
• kabi fix for: NFSv3: handle out-of-order write replies (bsc#1205544).
• kabi fix for: nfs: Further optimisations for 'ls -l' (git-fixes).
• kabi fix for: nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes).
• kabi fix for: nfsv4.1 query for fs_location attr on a new file system (Never, kabi).
• kasan: no need to unset panic_on_warn in end_report() (bsc#1207328).
• kernel-module-subpackage: Fix expansion with -b parameter (bsc#1208179). When -b is specified the script is prefixed with KMP_NEEDS_MKINITRD=1 which sets the variable for a simple command. However, the script is no longer a simple command. Export the variable instead.
• keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes).
• leds: led-class: Add missing put_device() to led_put() (git-fixes).
• leds: led-core: Fix refcount leak in of_led_get() (git-fixes).
• lib/mpi: Fix buffer overrun when SG is too long (git-fixes).
• lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes).
• locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270).
• locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270).
• locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270).
• locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270).
• locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270).
• locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270).
• locking/rwsem: Make handoff bit handling more consistent (bsc#1207270).
• locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270).
• locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270).
• locking: Add missing __sched attributes (bsc#1207270).
• makefile: link with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
• mbcache: Avoid nesting of cache->c_list_lock under bit locks (bsc#1207647).
• mbcache: Fixup kABI of mb_cache_entry (bsc#1207653).
• md/bitmap: Fix bitmap chunk size overflow issues (git-fixes).
• md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes).
• md: fix a crash in mempool_free (git-fixes).
• media: coda: Add check for dcoda_iram_alloc (git-fixes).
• media: coda: Add check for kmalloc (git-fixes).
• media: i2c: imx219: Fix binning for RAW8 capture (git-fixes).
• media: i2c: imx219: Split common registers from mode tables (git-fixes).
• media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes).
• media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes).
• media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes).
• media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes).
• media: m5mols: fix off-by-one loop termination error (git-fixes).
• media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes).
• media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes).
• media: ov5640: Fix analogue gain control (git-fixes).
• media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes).
• media: platform: ti: Add missing check for devm_regulator_get (git-fixes).
• media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes).
• media: rc: gpio-ir-recv: add remove function (git-fixes).
• media: saa7134: Use video_unregister_device for radio_dev (git-fixes).
• media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes).
• media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes).
• media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes).
• media: uvcvideo: Check controls flags before accessing them (git-fixes).
• media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes).
• media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes).
• media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes).
• media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes).
• media: uvcvideo: Handle cameras with invalid descriptors (git-fixes).
• media: uvcvideo: Handle errors from calls to usb_string (git-fixes).
• media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes).
• media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes).
• media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes).
• media: uvcvideo: Use control names from framework (git-fixes).
• media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes).
• media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes).
• media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes).
• mei: bus-fixup:upon error print return values of send and receive (git-fixes).
• mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes).
• mfd: cs5535: Do not build on UML (git-fixes).
• mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes).
• misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes).
• misc: enclosure: Fix doc for enclosure_find() (git-fixes).
• mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262).
• mmc: jz4740: Work around bug on JZ4760(B) (git-fixes).
• mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes).
• mmc: sdhci_am654: lower power-on failed message severity (git-fixes).
• mmc: sdio: fix possible resource leaks in some error paths (git-fixes).
• move upstreamed i915 and media fixes into sorted section
• mt76: mt7915: fix polling firmware-own status (git-fixes).
• mtd: dataflash: remove duplicate SPI ID table (git-fixes).
• mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes).
• mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes).
• mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes).
• mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes).
• mtd: spi-nor: core: fix implicit declaration warning (git-fixes).
• mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes).
• mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes).
• net/rose: Fix to not accept on connected socket (git-fixes).
• net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes).
• net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes).
• net/x25: Fix to not accept on connected socket (git-fixes).
• net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes).
• net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153).
• net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875).
• net: mana: Fix accessing freed irq affinity_hint (bsc#1208153).
• net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes).
• net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes).
• nfc: change order inside nfc_se_io error path (git-fixes).
• nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes).
• nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes).
• nfc: pn533: initialize struct pn533_out_arg properly (git-fixes).
• nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes).
• nfcv3: handle out-of-order write replies (bsc#1205544).
• nfs4: Fix kmemleak when allocate slot failed (git-fixes).
• nfs: Always initialise fattr->label in nfs_fattr_alloc() (git-fixes).
• nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes).
• nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes).
• nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes).
• nfs: Further optimisations for 'ls -l' (git-fixes).
• nfs: nfs4clinet: check the return value of kstrdup() (git-fixes).
• nfs: nfsiod should not block forever in mempool_alloc() (git-fixes).
• nfs: nfsiod should not block forever in mempool_alloc() (git-fixes).
• nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes).
• nfsd: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (git-fixes).
• nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes).
• nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes).
• nfsd: Fix a memory leak in an error handling path (git-fixes).
• nfsd: Fix handling of oversized nfsv4 COMPOUND requests (git-fixes).
• nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes).
• nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes).
• nfsd: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes).
• nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes).
• nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes).
• nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes).
• nfsv4 expose nfs_parse_server_name function (git-fixes).
• nfsv4 handle port presence in fs_location server string (git-fixes).
• nfsv4 only print the label when its queried (git-fixes).
• nfsv4 remove zero number of fs_locations entries error check (git-fixes).
• nfsv4 store server support for fs_location attribute (git-fixes).
• nfsv4.1 query for fs_location attr on a new file system (git-fixes).
• nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes).
• nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes).
• nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes).
• nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes).
• nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes).
• nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes).
• nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes).
• nfsv4/pnfs: Always return layout stats on layout return for flexfiles (git-fixes).
• nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes).
• nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes).
• nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes).
• nfsv4: Fix a potential state reclaim deadlock (git-fixes).
• nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes).
• nfsv4: Protect the state recovery thread against direct reclaim (git-fixes).
• nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes).
• nvdimm: disable namespace on error (bsc#1166486).
• nvme-auth: check chap ctrl_key once constructed (bsc#1202633).
• nvme-auth: clear sensitive info right after authentication completes (bsc#1202633).
• nvme-auth: convert dhchap_auth_list to an array (bsc#1202633).
• nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633).
• nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633).
• nvme-auth: do not override ctrl keys before validation (bsc#1202633).
• nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633).
• nvme-auth: do not use NVMe status codes (bsc#1202633).
• nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633).
• nvme-auth: fix smatch warning complaints (bsc#1202633).
• nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633).
• nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633).
• nvme-auth: mark nvme_auth_wq static (bsc#1202633).
• nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633).
• nvme-auth: remove redundant auth_work flush (bsc#1202633).
• nvme-auth: remove redundant buffer deallocations (bsc#1202633).
• nvme-auth: remove redundant deallocations (bsc#1202633).
• nvme-auth: remove redundant if statement (bsc#1202633).
• nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633).
• nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633).
• nvme-auth: rename authentication work elements (bsc#1202633).
• nvme-auth: use workqueue dedicated to authentication (bsc#1202633).
• nvme-fabrics: show well known discovery name (bsc#1200054).
• objtool: Add a missing comma to avoid string concatenation (bsc#1207328).
• ocfs2: Fix data corruption after failed write (bsc#1208542).
• ocfs2: clear dinode links count in case of error (bsc#1207650).
• ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649).
• ocfs2: fix crash when mount with quota enabled (bsc#1207640).
• ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652).
• ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651).
• ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770).
• ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768).
• ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771).
• panic: Consolidate open-coded panic_on_warn checks (bsc#1207328).
• panic: Introduce warn_limit (bsc#1207328).
• panic: unset panic_on_warn inside panic() (bsc#1207328).
• pci/iov: Enlarge virtfn sysfs name buffer (git-fixes).
• pci/pm: Always disable PTM for all devices during suspend (git-fixes).
• pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes).
• pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes).
• pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes).
• pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes).
• pci: Add ACS quirk for Wangxun NICs (git-fixes).
• pci: Add SolidRun vendor ID (git-fixes).
• pci: Align extra resources for hotplug bridges properly (git-fixes).
• pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes).
• pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes).
• pci: Fix dropping valid root bus resources with .end = zero (git-fixes).
• pci: Reduce warnings on possible RW1C corruption (git-fixes).
• pci: Take other bus devices into account when distributing resources (git-fixes).
• pci: Unify delay handling for reset and resume (git-fixes).
• pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes).
• pci: aardvark: Fix link training (git-fixes).
• pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes).
• pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes).
• pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes).
• pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes).
• pci: qcom: Fix host-init error handling (git-fixes).
• pci: qcom: Fix pipe clock imbalance (git-fixes).
• pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes).
• pci: xgene: Revert 'PCI: xgene: Use inbound resources for setup' (git-fixes).
• perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes).
• perf/core: Call LSM hook after copying perf_event_attr (git fixes).
• perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes).
• perf/core: Inherit event_caps (git fixes).
• perf/x86/amd: fix potential integer overflow on shift of a int (git fixes).
• perf/x86/intel/ds: Fix precise store latency handling (git fixes).
• perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes).
• perf/x86/intel/pt: Fix sampling using single range output (git fixes).
• perf/x86/intel/pt: Relax address filter validation (git fixes).
• perf/x86/intel/uncore: Add Emerald Rapids (git fixes).
• perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes).
• perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes).
• perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes).
• perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes).
• perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes).
• perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes).
• perf/x86/intel: Add Emerald Rapids (git fixes).
• perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes).
• perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes).
• perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes).
• perf/x86/intel: Fix event constraints for ICL (git fixes).
• perf/x86/intel: Fix pebs event constraints for ADL (git fixes).
• perf/x86/intel: Fix pebs event constraints for ICL (git fixes).
• perf/x86/intel: Fix pebs event constraints for SPR (git fixes).
• perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes).
• perf/x86/msr: Add Emerald Rapids (git fixes).
• perf/x86/rapl: Add support for Intel AlderLake-N (git fixes).
• perf/x86/rapl: Treat Tigerlake like Icelake (git fixes).
• perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes).
• perf/x86/rapl: fix AMD event handling (git fixes).
• perf/x86/uncore: Add Raptor Lake uncore support (git fixes).
• perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes).
• perf/x86/uncore: Add new Raptor Lake S support (git fixes).
• perf/x86/uncore: Clean up uncore_pci_ids (git fixes).
• perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492).
• perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492).
• perf: Always wake the parent event (git fixes).
• perf: Fix possible memleak in pmu_dev_alloc() (git fixes).
• phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes).
• phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes).
• pinctrl: aspeed: Fix confusing types in return value (git-fixes).
• pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes).
• pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes).
• pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes).
• pinctrl: mediatek: Initialize variable *buf to zero (git-fixes).
• pinctrl: mediatek: fix coding style (git-fixes).
• pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes).
• pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes).
• pinctrl: single: fix potential NULL dereference (git-fixes).
• pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes).
• platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420).
• platform/x86: amd-pmc: Correct usage of SMU version (git-fixes).
• platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes).
• platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes).
• platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes).
• platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes).
• platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes).
• platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes).
• powercap: fix possible name leak in powercap_register_zone() (git-fixes).
• powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612).
• printf: fix errname.c list (git-fixes).
• prlimit: do_prlimit needs to have a speculation check (bsc#1209256).
• pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes).
• qede: avoid uninitialized entries in coal_entry array (bsc#1205846).
• qede: fix interrupt coalescing configuration (bsc#1205846).
• quota: Check next/prev free block number after reading from quota file (bsc#1206640).
• quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639).
• rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159).
• rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes)
• rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes)
• rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes)
• rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes)
• rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes)
• rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes)
• rdma/siw: Fix user page pinning accounting (git-fixes)
• rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes)
• refresh patches.suse/NFSv3-handle-out-of-order-write-replies (bsc#1209457).
• regulator: Flag uncontrollable regulators as always_on (git-fixes).
• regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes).
• regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes).
• regulator: max77802: Bounds check regulator id against opmode (git-fixes).
• regulator: s5m8767: Bounds check id indexing into arrays (git-fixes).
• remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes).
• remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes).
• replace mkinitrd dependency with dracut (bsc#1202353). Also update mkinitrd refrences in documentation and comments.
• require suse-kernel-rpm-scriptlets at all times. The kernel packages call scriptlets for each stage, add the dependency to make it clear to libzypp that the scriptlets are required. There is no special dependency for posttrans, these scriptlets run when transactions are resolved. The plain dependency has to be used to support posttrans.
• revert 'HID: logitech-hidpp: add a module parameter to keep firmware gestures' (git-fixes).
• revert 'char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol' (git-fixes).
• revert 'crypto: rsa-pkcs1pad - Replace GFP_ATOMIC with GFP_KERNEL in pkcs1pad_encrypt_sign_complete' (git-fixes).
• revert 'usb: dwc3: qcom: Keep power domain on to retain controller status' (git-fixes).
• rpm/group-source-files.pl: Deal with {pre,post}fixed / in location When the source file location provided with -L is either prefixed or postfixed with forward slash, the script get stuck in a infinite loop inside calc_dirs() where $path is an empty string. user@localhost:/tmp> perl '$HOME/group-source-files.pl' -D devel.files -N nondevel.files -L /usr/src/linux-5.14.21-150500.41/ ... path = /usr/src/linux-5.14.21-150500.41/Documentation/Kconfig path = /usr/src/linux-5.14.21-150500.41/Documentation path = /usr/src/linux-5.14.21-150500.41 path = /usr/src path = /usr path = path = path = ... # Stuck in an infinite loop This workarounds the issue by breaking out the loop once path is an empty string. For a proper fix we'd want something that filesystem-aware, but this workaround should be enough for the rare occation that this script is ran manually. Link: http://mailman.suse.de/mlarch/SuSE/kernel/2023/kernel.2023.03/msg00024.html
• rpm/group-source-files.pl: Fix output difference when / is in location While previous attempt to fix group-source-files.pl in 6d651362c38 'rpm/group-source-files.pl: Deal with {pre,post}fixed / in location' breaks the infinite loop, it does not properly address the issue. Having prefixed and/or postfixed forward slash still result in different output. This commit changes the script to use the Perl core module File::Spec for proper path manipulation to give consistent output.
• rpm/kernel-obs-build.spec.in: Remove SLE11 cruft
• rtc: allow rtc_read_alarm without read_alarm callback (git-fixes).
• rtc: pm8xxx: fix set-alarm race (git-fixes).
• rtc: sun6i: Always export the internal oscillator (git-fixes).
• runrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes).
• s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes).
• s390/kexec: fix ipl report address for kdump (bsc#1207529).
• scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607).
• scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607).
• scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607).
• scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607).
• scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607).
• scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534).
• scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607).
• scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607).
• scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607).
• scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607).
• scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607).
• scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103).
• scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570).
• scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570).
• scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570).
• scsi: qla2xxx: Fix erroneous link down (bsc#1208570).
• scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570).
• scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570).
• scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570).
• scsi: qla2xxx: Fix printk() format string (bsc#1208570).
• scsi: qla2xxx: Fix stalled login (bsc#1208570).
• scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570).
• scsi: qla2xxx: Relocate/rename vp map (bsc#1208570).
• scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570).
• scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570).
• scsi: qla2xxx: Remove dead code (bsc#1208570).
• scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570).
• scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570).
• scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570).
• scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570).
• scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570).
• scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570).
• scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570).
• scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570).
• scsi: qla2xxx: edif: Fix clang warning (bsc#1208570).
• scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570).
• scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570).
• scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570).
• scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes).
• sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes).
• selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes).
• selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103).
• selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103).
• selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232).
• selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232).
• selftests/powerpc: Move perror closer to its use (bsc#1206232).
• selftests: forwarding: lib: quote the sysctl values (git-fixes).
• selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes).
• selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes).
• selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes).
• selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes).
• serial: 8250_em: Fix UART port type (git-fixes).
• serial: 8250_fsl: fix handle_irq locking (git-fixes).
• serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes).
• serial: qcom-geni: fix console shutdown hang (git-fixes).
• serial: sc16is7xx: setup GPIO controller later in probe (git-fixes).
• serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes).
• signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes).
• signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes).
• signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes).
• signal: Implement force_fatal_sig (git-fixes).
• smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629).
• soundwire: cadence: Do not overflow the command FIFOs (git-fixes).
• spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes).
• spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes).
• spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes).
• spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes).
• spi: tegra210-quad: Fix validate combined sequence (git-fixes).
• staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes).
• staging: mt7621-dts: change palmbus address to lower case (git-fixes).
• struct uvc_device move flush_status new member to end (git-fixes).
• sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes).
• sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes).
• sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes).
• sunrpc: Fix socket waits for write buffer space (git-fixes).
• sunrpc: Return true/false (not 1/0) from bool functions (git-fixes).
• supported.conf: Remove duplicate entry.
• sysctl: add a new register_sysctl_init() interface (bsc#1207328).
• thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes).
• thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes).
• thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes).
• thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes).
• thermal/drivers/tsens: fix slope values for msm8939 (git-fixes).
• thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes).
• thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes).
• thermal: intel: Fix unsigned comparison with less than zero (git-fixes).
• thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes).
• thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes).
• thermal: intel: quark_dts: fix error pointer dereference (git-fixes).
• tools/iio/iio_utils:fix memory leak (git-fixes).
• tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes).
• trace_events_hist: add check for return value of 'create_hist_field' (git-fixes).
• tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes).
• tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes).
• tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes).
• tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes).
• tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes).
• tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes).
• tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes).
• tty: serial: imx: Handle RS485 DE signal active high (git-fixes).
• tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes).
• tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes).
• ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328).
• update internal module version number for cifs.ko (bsc#1193629).
• update suse/hid-bigben_probe-validate-report-count (bsc#1208605).
• usb: core: Do not hold device lock while reading the 'descriptors' sysfs file (git-fixes).
• usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes).
• usb: dwc3: core: Host wake up support from system suspend (git-fixes).
• usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes).
• usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes).
• usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes).
• usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes).
• usb: dwc3: qcom: clean up icc init (git-fixes).
• usb: dwc3: qcom: clean up suspend callbacks (git-fixes).
• usb: dwc3: qcom: fix gadget-only builds (git-fixes).
• usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes).
• usb: dwc3: qcom: fix wakeup implementation (git-fixes).
• usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes).
• usb: dwc3: qcom: suppress unused-variable warning (git-fixes).
• usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes).
• usb: ene_usb6250: Allocate enough memory for full object (git-fixes).
• usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes).
• usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes).
• usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes).
• usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes).
• usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes).
• usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes).
• usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes).
• usb: max-3421: Fix setting of I/O pins (git-fixes).
• usb: musb: Add and use inline function musb_otg_state_string (git-fixes).
• usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes).
• usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes).
• usb: musb: remove schedule work called after flush (git-fixes).
• usb: serial: option: add support for VW/Skoda 'Carstick LTE' (git-fixes).
• usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes).
• usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes).
• usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes).
• usb: uvc: Enumerate valid values for color matching (git-fixes).
• vc_screen: do not clobber return value in vcs_read (git-fixes).
• vc_screen: modify vcs_size() handling in vcs_read() (git-fixes).
• vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes).
• vfio/type1: prevent underflow of locked_vm via exec() (git-fixes).
• vfio/type1: restore locked_vm (git-fixes).
• vfio/type1: track locked_vm per dma (git-fixes).
• vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642).
• vfs: filename_create(): fix incorrect intent (bsc#1197534).
• virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449).
• virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449).
• virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449).
• virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449).
• virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449).
• virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449).
• vmci: check context->notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes).
• vmxnet3: move rss code block under eop descriptor (bsc#1208212).
• watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617).
• watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (jsc#PED-3210) Also enable module in aarch64 default configuration.
• watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes).
• watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes).
• watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes).
• watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes).
• wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes).
• wifi: ath11k: allow system suspend to survive ath11k (git-fixes).
• wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes).
• wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes).
• wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes).
• wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes).
• wifi: ath9k: use proper statements in conditionals (git-fixes).
• wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes).
• wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes).
• wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes).
• wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes).
• wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes).
• wifi: cfg80211: Fix use after free for wext (git-fixes).
• wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (git-fixes).
• wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes).
• wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes).
• wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes).
• wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes).
• wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes).
• wifi: mt7601u: fix an integer underflow (git-fixes).
• wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes).
• wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes).
• wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes).
• wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes).
• wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes).
• wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes).
• wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes).
• wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes).
• wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes).
• wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
• wifi: rtw89: Add missing check for alloc_workqueue (git-fixes).
• wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes).
• wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes).
• writeback: avoid use-after-free after removing device (bsc#1207638).
• x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes).
• x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes).
• x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848).
• x86/asm: Fix an assembler warning with current binutils (git-fixes).
• x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes).
• x86/cpu: Add CPU model numbers for Meteor Lake (git fixes).
• x86/cpu: Add Raptor Lake to Intel family (git fixes).
• x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes).
• x86/cpu: Add new Raptor Lake CPU model number (git fixes).
• x86/cpu: Add several Intel server CPU model numbers (git fixes).
• x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes).
• x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes).
• x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes).
• x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes).
• x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes).
• x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes).
• x86/perf/zhaoxin: Add stepping check for ZXC (git fixes).
• x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes).
• x86/perf: Default set FREEZE_ON_SMI for all (git fixes).
• x86/sgx: Fix free page accounting (git-fixes).
• x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes).
• x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes).
• x86: acpi: cstate: Optimize C3 entry on AMD CPUs (git-fixes).
• x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200).
• xen-netfront: Fix NULL sring after live migration (git-fixes).
• xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes).
• xen/arm: Fix race in RB-tree based P2M accounting (git-fixes)
• xen/netback: do some code cleanup (git-fixes).
• xen/netback: fix build warning (git-fixes).
• xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes).
• xen/platform-pci: add missing free_irq() in error path (git-fixes).
• xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes).
• xfs: estimate post-merge refcounts correctly (bsc#1208183).
• xfs: hoist refcount record merge predicates (bsc#1208183).

This update of grub2 fixes the following issues:

• rebuild the package with the new secure boot key (bsc#1209188).

This update for glibc fixes the following issues:
Security issue fixed:

• CVE-2023-0687: Fix allocated buffer overflow in gmon (bsc#1207975)

• Fix avx2 strncmp offset compare condition check (bsc#1208358)
• elf: Allow dlopen of filter object to work (bsc#1207571)
• powerpc: Fix unrecognized instruction errors with recent GCC
• x86: Cache computation for AMD architecture (bsc#1207957)

This update for openssl-1_1 fixes the following issues:

• CVE-2023-0464: Fixed excessive Resource Usage Verifying X.509 Policy Constraints (bsc#1209624).

This update for systemd-presets-common-SUSE fixes the following issue:

• Enable systemd-pstore.service by default (jsc#PED-2663)

This update for systemd fixes the following issues:

• Fix return non-zero value when disabling SysVinit service (bsc#1208432)
• Drop build requirement on libpci, it's not no longer needed
• Move systemd-boot and all components managing (secure) UEFI boot into udev sub-package, so they aren't installed in systemd based containers

SUSE-IU-2023:154-1

This update fixes the following issues:
hwdata:

• Update to version 0.314: + Updated pci, usb and vendor ids.

• Channels to be actually un-subscribed from the assigned systems when being removed using spacewalk-remove-channel tool. (bsc#1104120)
• Take only text files from /srv/salt to make spacewalk-debug smaller. (bsc#1103388)

This update for hwdata fixes the following issues:
Update to version 0.320 (bsc#1121410):

• Updated the pci, usb and vendor ids vendor and product databases.

This update for hwdata fixes the following issues:
Update from version 0.320 to version 0.324 (bsc#1168806)

• Updated pci, usb and vendor ids.
• Replace pciutils-ids package providing compatibility symbolic link

This update for hwdata fixes the following issues:

• Added merge-pciids.pl to fully duplicate behavior of pciutils-ids (bsc#1180422, bsc#1180482)
• Updated pci, usb and vendor ids.

This update for hwdata fixes the following issues:

• Updated pci, usb and vendor ids (bsc#1182482, bsc#1170160, jsc#SLE-13791)