Marcus Updateinfo to OVAL Converter 5.5 2023-10-19T04:42:21 (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for haproxy fixes the following issues: - CVE-2023-0056: Fixed a server crash that could be triggered via a malformed HTTP/2 frame (bsc#1207181). Important SUSE bug 1207181 CVE-2023-0056 cpe:/o:suse:sle-ha:15:sp5 (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for prometheus-ha_cluster_exporter fixes the following issues: Updated to version 1.3.1: - CVE-2022-46146: Fixed authentication bypass via cache poisoning in prometheus/exporter-toolkit (bsc#1208046, bsc#1208047). Important SUSE bug 1208046 SUSE bug 1208047 CVE-2022-46146 cpe:/o:suse:sle-ha:15:sp5 (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2021-22885: Fixed possible information disclosure / unintended method execution in Action Pack (bsc#1185715). Important SUSE bug 1185715 CVE-2021-22885 cpe:/o:suse:sle-ha:15:sp5 (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-actionview-5_1 fixes the following issues: - CVE-2020-5267: Fixed an XSS vulnerability in ActionView's JavaScript literal escape helpers (bsc#1167240). Moderate SUSE bug 1167240 CVE-2020-5267 cpe:/o:suse:sle-ha:15:sp5 (Low) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-activejob-5_1 fixes the following issues: Security issue fixed: - CVE-2018-16476: Fixed broken access control vulnerability (bsc#1117632). Low SUSE bug 1117632 CVE-2018-16476 cpe:/o:suse:sle-ha:15:sp5 (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-activerecord-5_1 fixes the following issues: - CVE-2021-22880: Fixed possible DoS vector in PostgreSQL money type (bsc#1182169). Moderate SUSE bug 1182169 CVE-2021-22880 cpe:/o:suse:sle-ha:15:sp5 (Critical) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-activesupport-5_1 fixes the following issues: - CVE-2020-8165: Fixed deserialization of untrusted data in MemCacheStore potentially resulting in remote code execution (bsc#1172186) Critical SUSE bug 1172186 CVE-2020-8165 cpe:/o:suse:sle-ha:15:sp5 (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-globalid fixes the following issues: - CVE-2023-22799: Fixed ReDoS vulnerability (bsc#1207587). Moderate SUSE bug 1207587 CVE-2023-22799 cpe:/o:suse:sle-ha:15:sp5 (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-kramdown fixes the following issues: - CVE-2020-14001: Fixed processing template options inside documents allowing unintended read access or embedded Ruby code execution (bsc#1174297). Important SUSE bug 1174297 CVE-2020-14001 cpe:/o:suse:sle-ha:15:sp5 (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-loofah fixes the following issues: Security issue fixed: - CVE-2018-16468: Fixed XXS by removing the svg animate attribute `from` from the allowlist (bsc#1113969). Moderate SUSE bug 1113969 CVE-2018-16468 cpe:/o:suse:sle-ha:15:sp5 (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-puma to version 4.3.5 fixes the following issues: - CVE-2020-11077: Fixed a HTTP smuggling issue related to proxy usage (bsc#1172175). - CVE-2020-11076: Fixed a HTTP smuggling issue when using an invalid transfer-encoding header (bsc#1172176). - Disabled TLSv1.0 and TLSv1.1 (jsc#SLE-6965). Moderate SUSE bug 1172175 SUSE bug 1172176 CVE-2020-11076 CVE-2020-11077 cpe:/o:suse:sle-ha:15:sp5 (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-rack to version 2.0.8 fixes the following issues: - CVE-2018-16471: Fixed a cross-site scripting (XSS) flaw via the scheme method on Rack::Request (bsc#1116600). - CVE-2019-16782: Fixed a possible information leak and session hijack vulnerability (bsc#1159548). Moderate SUSE bug 1114828 SUSE bug 1116600 SUSE bug 1159548 CVE-2018-16471 CVE-2019-16782 cpe:/o:suse:sle-ha:15:sp5 (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2022-32209: Fixed a potential content injection under specific configurations (bsc#1201183). Moderate SUSE bug 1201183 CVE-2022-32209 cpe:/o:suse:sle-ha:15:sp5 (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-sprockets fixes the following issues: The following security vulnerability was addressed: - CVE-2018-3760: Fixed a path traversal issue in sprockets/server.rb:forbidden_request?(), which allowed remote attackers to read arbitrary files (bsc#1098369) Moderate SUSE bug 1098369 CVE-2018-3760 cpe:/o:suse:sle-ha:15:sp5 (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-tzinfo fixes the following issues: - CVE-2022-31163: Fixed relative path traversal vulnerability that allows TZInfo::Timezone.get to load arbitrary files (bsc#1201835). Important SUSE bug 1201835 CVE-2022-31163 cpe:/o:suse:sle-ha:15:sp5 (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-websocket-extensions fixes the following issues: - CVE-2020-7663: Fixed an excessive resource consumption when parsing crafted message headers sent by an attacker (bsc#1172445). Moderate SUSE bug 1172445 CVE-2020-7663 cpe:/o:suse:sle-ha:15:sp5 (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for openssl-1_1-livepatches fixes the following issues: - CVE-2023-0286: Fixed X.400 address type confusion in X.509 GeneralName via livepatch (bsc#1207533). Important SUSE bug 1207533 CVE-2023-0286 cpe:/o:suse:sle-module-live-patching:15:sp5 Mesa-22.3.5-150500.75.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the Mesa-22.3.5-150500.75.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-5068 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 amavisd-new-2.12.1-150400.1.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the amavisd-new-2.12.1-150400.1.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-1238 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 apache-commons-httpclient-3.1-11.3.2 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for apache-commons-httpclient fixes the following issues: - http/conn/ssl/SSLConnectionSocketFactory.java ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unspecified vectors. [bsc#945190, CVE-2015-5262] - org.apache.http.conn.ssl.AbstractVerifier does not properly verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows MITM attackers to spoof SSL servers via a 'CN=' string in a field in the distinguished name (DN) of a certificate. [bsc#1178171, CVE-2014-3577] Important SUSE bug 1178171 SUSE bug 945190 CVE-2014-3577 CVE-2015-5262 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 apache-commons-io-2.11.0-150200.3.9.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for apache-commons-io fixes the following issues: - CVE-2021-29425: Limited path traversal when invoking the method FileNameUtils.normalize with an improper input string (bsc#1184755) Moderate SUSE bug 1184755 CVE-2021-29425 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 apache2-2.4.51-150400.6.11.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for apache2 fixes the following issues: - CVE-2022-37436: Fixed an issue in mod_proxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body (bsc#1207251). - CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow request smuggling attacks (bsc#1207250). - CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request header could cause memory corruption (bsc#1207247). Important SUSE bug 1207247 SUSE bug 1207250 SUSE bug 1207251 CVE-2006-20001 CVE-2022-36760 CVE-2022-37436 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 apparmor-abstractions-3.0.4-150500.9.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the apparmor-abstractions-3.0.4-150500.9.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-6507 CVE-2022-1271 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 apr-util-devel-1.6.1-150300.18.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the apr-util-devel-1.6.1-150300.18.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-12618 CVE-2022-25147 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 arm-trusted-firmware-2.6-150400.4.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the arm-trusted-firmware-2.6-150400.4.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-5715 CVE-2018-3639 CVE-2022-23960 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 aspell-0.60.8-3.3.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for aspell fixes the following issues: - CVE-2019-25051: Fixed heap-buffer-overflow in acommon:ObjStack:dup_top (bsc#1188576). Important SUSE bug 1177523 SUSE bug 1188576 CVE-2019-25051 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 audit-devel-3.0.6-150400.2.13 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the audit-devel-3.0.6-150400.2.13 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-5186 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 autoyast2-4.5.13-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the autoyast2-4.5.13-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-18905 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 avahi-0.8-150400.7.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for avahi fixes the following issues: - CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328). Moderate SUSE bug 1210328 CVE-2023-1981 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for avahi fixes the following issues: - CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328). Moderate SUSE bug 1210328 CVE-2023-1981 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bash-4.4-150400.25.22 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the bash-4.4-150400.25.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-9401 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bcel-5.2-150200.11.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bcel fixes the following issues: - CVE-2022-42920: Fixed producing arbitrary bytecode via out-of-bounds writing (bsc#1205125). Moderate SUSE bug 1205125 CVE-2022-42920 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bcm43xx-firmware-20180314-150400.28.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the bcm43xx-firmware-20180314-150400.28.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-10370 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bind fixes the following issues: - CVE-2021-25214: Fixed a broken inbound incremental zone update (IXFR) which could have caused named to terminate unexpectedly (bsc#1185345). - CVE-2021-25215: Fixed an assertion check which could have failed while answering queries for DNAME records that required the DNAME to be processed to resolve itself (bsc#1185345). - Switched from /var/run to /run (bsc#1185073) - Hardening: Compiled binary with PIE flags to make it position independent Important SUSE bug 1183453 SUSE bug 1185073 CVE-2021-25214 CVE-2021-25215 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bind-devel-9.16.6-150300.22.27.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the bind-devel-9.16.6-150300.22.27.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-3214 CVE-2014-3859 CVE-2014-8500 CVE-2014-8680 CVE-2015-1349 CVE-2015-4620 CVE-2015-5477 CVE-2015-5722 CVE-2015-5986 CVE-2015-8000 CVE-2015-8461 CVE-2015-8704 CVE-2015-8705 CVE-2016-1285 CVE-2016-1286 CVE-2016-2088 CVE-2016-2775 CVE-2016-2776 CVE-2016-6170 CVE-2016-8864 CVE-2016-9131 CVE-2016-9147 CVE-2016-9444 CVE-2016-9778 CVE-2017-3135 CVE-2017-3136 CVE-2017-3137 CVE-2017-3138 CVE-2017-3140 CVE-2017-3141 CVE-2017-3142 CVE-2017-3143 CVE-2017-3145 CVE-2018-5736 CVE-2018-5737 CVE-2018-5738 CVE-2018-5740 CVE-2018-5743 CVE-2018-5744 CVE-2018-5745 CVE-2019-6465 CVE-2019-6467 CVE-2019-6471 CVE-2019-6475 CVE-2019-6476 CVE-2019-6477 CVE-2020-8616 CVE-2020-8617 CVE-2020-8618 CVE-2020-8619 CVE-2020-8620 CVE-2020-8621 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 CVE-2021-25214 CVE-2021-25215 CVE-2021-25216 CVE-2021-25219 CVE-2021-25220 CVE-2022-2795 CVE-2022-3094 CVE-2022-38177 CVE-2022-38178 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bind-utils-9.16.38-150400.5.20.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the bind-utils-9.16.38-150400.5.20.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-3214 CVE-2014-3859 CVE-2014-8500 CVE-2014-8680 CVE-2015-1349 CVE-2015-4620 CVE-2015-5477 CVE-2015-5722 CVE-2015-5986 CVE-2015-8000 CVE-2015-8461 CVE-2015-8704 CVE-2015-8705 CVE-2016-1285 CVE-2016-1286 CVE-2016-2088 CVE-2016-2775 CVE-2016-2776 CVE-2016-6170 CVE-2016-8864 CVE-2016-9131 CVE-2016-9147 CVE-2016-9444 CVE-2016-9778 CVE-2017-3135 CVE-2017-3136 CVE-2017-3137 CVE-2017-3138 CVE-2017-3140 CVE-2017-3141 CVE-2017-3142 CVE-2017-3143 CVE-2017-3145 CVE-2018-5736 CVE-2018-5737 CVE-2018-5738 CVE-2018-5740 CVE-2018-5743 CVE-2018-5744 CVE-2018-5745 CVE-2019-6465 CVE-2019-6467 CVE-2019-6471 CVE-2019-6475 CVE-2019-6476 CVE-2019-6477 CVE-2020-8616 CVE-2020-8617 CVE-2020-8618 CVE-2020-8619 CVE-2020-8620 CVE-2020-8621 CVE-2020-8622 CVE-2020-8623 CVE-2020-8624 CVE-2020-8625 CVE-2021-25214 CVE-2021-25215 CVE-2021-25216 CVE-2021-25218 CVE-2021-25219 CVE-2021-25220 CVE-2022-0396 CVE-2022-2795 CVE-2022-3080 CVE-2022-3094 CVE-2022-3736 CVE-2022-38177 CVE-2022-38178 CVE-2022-3924 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 binutils-2.39-150100.7.40.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for binutils fixes the following issues: The following security bugs were fixed: - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579). - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597). - CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374). - CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c (bsc#1202969). - CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929). - CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783). - CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592). - CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c (bsc#1202966). - CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in binutils/dwarf.c (bsc#1202967). - CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816). The following non-security bugs were fixed: - SLE toolchain update of binutils, update to 2.39 from 2.37. - Update to 2.39: * The ELF linker will now generate a warning message if the stack is made executable. Similarly it will warn if the output binary contains a segment with all three of the read, write and execute permission bits set. These warnings are intended to help developers identify programs which might be vulnerable to attack via these executable memory regions. The warnings are enabled by default but can be disabled via a command line option. It is also possible to build a linker with the warnings disabled, should that be necessary. * The ELF linker now supports a --package-metadata option that allows embedding a JSON payload in accordance to the Package Metadata specification. * In linker scripts it is now possible to use TYPE=<type> in an output section description to set the section type value. * The objdump program now supports coloured/colored syntax highlighting of its disassembler output for some architectures. (Currently: AVR, RiscV, s390, x86, x86_64). * The nm program now supports a --no-weak/-W option to make it ignore weak symbols. * The readelf and objdump programs now support a -wE option to prevent them from attempting to access debuginfod servers when following links. * The objcopy program's --weaken, --weaken-symbol, and --weaken-symbols options now works with unique symbols as well. - Update to 2.38: * elfedit: Add --output-abiversion option to update ABIVERSION. * Add support for the LoongArch instruction set. * Tools which display symbols or strings (readelf, strings, nm, objdump) have a new command line option which controls how unicode characters are handled. By default they are treated as normal for the tool. Using --unicode=locale will display them according to the current locale. Using --unicode=hex will display them as hex byte values, whilst --unicode=escape will display them as escape sequences. In addition using --unicode=highlight will display them as unicode escape sequences highlighted in red (if supported by the output device). * readelf -r dumps RELR relative relocations now. * Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been added to objcopy in order to enable UEFI development using binutils. * ar: Add --thin for creating thin archives. -T is a deprecated alias without diagnostics. In many ar implementations -T has a different meaning, as specified by X/Open System Interface. * Add support for AArch64 system registers that were missing in previous releases. * Add support for the LoongArch instruction set. * Add a command-line option, -muse-unaligned-vector-move, for x86 target to encode aligned vector move as unaligned vector move. * Add support for Cortex-R52+ for Arm. * Add support for Cortex-A510, Cortex-A710, Cortex-X2 for AArch64. * Add support for Cortex-A710 for Arm. * Add support for Scalable Matrix Extension (SME) for AArch64. * The --multibyte-handling=[allow|warn|warn-sym-only] option tells the assembler what to when it encoutners multibyte characters in the input. The default is to allow them. Setting the option to 'warn' will generate a warning message whenever any multibyte character is encountered. Using the option to 'warn-sym-only' will make the assembler generate a warning whenever a symbol is defined containing multibyte characters. (References to undefined symbols will not generate warnings). * Outputs of .ds.x directive and .tfloat directive with hex input from x86 assembler have been reduced from 12 bytes to 10 bytes to match the output of .tfloat directive. * Add support for 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and 'armv9.3-a' for -march in AArch64 GAS. * Add support for 'armv8.7-a', 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and 'armv9.3-a' for -march in Arm GAS. * Add support for Intel AVX512_FP16 instructions. * Add -z pack-relative-relocs/-z no pack-relative-relocs to x86 ELF linker to pack relative relocations in the DT_RELR section. * Add support for the LoongArch architecture. * Add -z indirect-extern-access/-z noindirect-extern-access to x86 ELF linker to control canonical function pointers and copy relocation. * Add --max-cache-size=SIZE to set the the maximum cache size to SIZE bytes. - Explicitly enable --enable-warn-execstack=yes and --enable-warn-rwx-segments=yes. - Add gprofng subpackage. - Include recognition of 'z16' name for 'arch14' on s390. (bsc#1198237). - Add back fix for bsc#1191473, which got lost in the update to 2.38. - Install symlinks for all target specific tools on arm-eabi-none (bsc#1185712). - Enable PRU architecture for AM335x CPU (Beagle Bone Black board) Moderate SUSE bug 1142579 SUSE bug 1185597 SUSE bug 1185712 SUSE bug 1188374 SUSE bug 1191473 SUSE bug 1193929 SUSE bug 1194783 SUSE bug 1197592 SUSE bug 1198237 SUSE bug 1202816 SUSE bug 1202966 SUSE bug 1202967 SUSE bug 1202969 CVE-2019-1010204 CVE-2021-3530 CVE-2021-3648 CVE-2021-3826 CVE-2021-45078 CVE-2021-46195 CVE-2022-27943 CVE-2022-38126 CVE-2022-38127 CVE-2022-38533 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 blas-devel-3.9.0-150000.4.13.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the blas-devel-3.9.0-150000.4.13.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-4048 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bluez-5.65-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the bluez-5.65-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-9797 CVE-2016-9798 CVE-2016-9800 CVE-2016-9801 CVE-2016-9802 CVE-2016-9804 CVE-2016-9917 CVE-2016-9918 CVE-2020-0556 CVE-2020-26558 CVE-2021-0129 CVE-2021-3588 CVE-2022-0204 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for brotli fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825). Moderate SUSE bug 1175825 CVE-2020-8927 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bubblewrap-0.7.0-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the bubblewrap-0.7.0-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-5226 CVE-2019-12439 CVE-2020-5291 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 busybox-1.35.0-150500.8.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the busybox-1.35.0-150500.8.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2011-5325 CVE-2014-9645 CVE-2015-9261 CVE-2016-2147 CVE-2016-2148 CVE-2016-6301 CVE-2017-15873 CVE-2017-15874 CVE-2017-16544 CVE-2018-1000500 CVE-2018-1000517 CVE-2018-20679 CVE-2019-5747 CVE-2021-28831 CVE-2021-42373 CVE-2021-42374 CVE-2021-42375 CVE-2021-42376 CVE-2021-42377 CVE-2021-42378 CVE-2021-42379 CVE-2021-42380 CVE-2021-42381 CVE-2021-42382 CVE-2021-42383 CVE-2021-42384 CVE-2021-42385 CVE-2021-42386 CVE-2022-30065 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bzip2-1.0.8-150400.1.122 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the bzip2-1.0.8-150400.1.122 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-3189 CVE-2019-12900 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for c-ares fixes the following issues: Updated to version 1.19.0: - CVE-2022-4904: Fixed missing string length check in config_sortlist() (bsc#1208067). Important SUSE bug 1208067 CVE-2022-4904 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 c-ares-devel-1.19.0-150000.3.20.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the c-ares-devel-1.19.0-150000.3.20.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-5180 CVE-2017-1000381 CVE-2020-8277 CVE-2021-3672 CVE-2022-4904 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: - DIGITALSIGN GLOBAL ROOT ECDSA CA - DIGITALSIGN GLOBAL ROOT RSA CA - Security Communication ECC RootCA1 - Security Communication RootCA3 Changed trust: - TrustCor certificates only trusted up to Nov 30 (bsc#1206212) - Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022' and it is not clear how many certs were issued for SSL middleware by TrustCor: - TrustCor RootCert CA-1 - TrustCor RootCert CA-2 - TrustCor ECA-1 Important SUSE bug 1206212 SUSE bug 1206622 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cairo-devel-1.16.0-150400.9.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cairo-devel-1.16.0-150400.9.6 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-9082 CVE-2017-7475 CVE-2017-9814 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ceph fixes the following issues: - Update to 16.2.9-536-g41a9f9a5573: + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979) - Update to 16.2.9-158-gd93952c7eea: + cmake: check for python(\d)\.(\d+) when building boost + make-dist: patch boost source to support python 3.10 - Update to ceph-16.2.9-58-ge2e5cb80063: + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths - Update to 16.2.9.50-g7d9f12156fb: + (jsc#SES-2515) High-availability NFS export + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit - Update to 16.2.7-969-g6195a460d89 + (jsc#SES-2515) High-availability NFS export Important SUSE bug 1194131 SUSE bug 1195359 SUSE bug 1196044 SUSE bug 1196785 SUSE bug 1200064 SUSE bug 1200553 CVE-2021-3979 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ceph-common-16.2.11.58+g38d6afd3b78-150400.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ceph-common-16.2.11.58+g38d6afd3b78-150400.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-16818 CVE-2018-10861 CVE-2018-1128 CVE-2018-1129 CVE-2018-16889 CVE-2019-10222 CVE-2019-3821 CVE-2020-10736 CVE-2020-1759 CVE-2020-1760 CVE-2020-25660 CVE-2020-25678 CVE-2020-27781 CVE-2020-27839 CVE-2021-20288 CVE-2021-3509 CVE-2021-3524 CVE-2021-3531 CVE-2021-3979 CVE-2022-0670 CVE-2022-3650 CVE-2022-3854 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 chrony-4.1-150400.19.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the chrony-4.1-150400.19.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-1567 CVE-2020-14367 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cifs-utils-6.15-150400.3.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cifs-utils fixes the following issues: - Fix changelog to include Bugzilla and CVE tracker id numbers missing from previous update Moderate SUSE bug 1198976 CVE-2022-29869 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 clamav-0.103.8-150000.3.44.1 on GA media (Critical) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for clamav fixes the following issues: - CVE-2023-20032: Fixed a possible remote code execution vulnerability in the HFS+ file parser (bsc#1208363). - CVE-2023-20052: Fixed a possible remote information leak vulnerability in the DMG file parser (bsc#1208365). Critical SUSE bug 1208363 SUSE bug 1208365 CVE-2023-20032 CVE-2023-20052 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for colord fixes the following issues: - CVE-2021-42523: Fixed a small memory leak in sqlite3_exec (bsc#1202802). Moderate SUSE bug 1202802 CVE-2021-42523 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 conntrack-tools-1.4.5-1.46 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the conntrack-tools-1.4.5-1.46 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-6496 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 coreutils-8.32-150400.7.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the coreutils-8.32-150400.7.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-4041 CVE-2015-4042 CVE-2017-7476 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cosign-1.12.0-150400.3.6.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cosign fixes the following issues: Updated to version 1.12.0 (jsc#SLE-23879): - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430). Important SUSE bug 1203430 CVE-2022-36056 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cpio-2.13-150400.1.98 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cpio-2.13-150400.1.98 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9112 CVE-2015-1197 CVE-2016-2037 CVE-2019-14866 CVE-2021-38185 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cpp7-7.5.0+r278197-4.30.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cpp7-7.5.0+r278197-4.30.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-14250 CVE-2019-15847 CVE-2020-13844 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cron-4.2-150400.84.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cron-4.2-150400.84.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-9704 CVE-2019-9705 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cryptctl-2.4-4.5.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cryptctl fixes the following issues: Update to version 2.4: - CVE-2019-18906: Client side password hashing was equivalent to clear text password storage (bsc#1186226) - First step to use plain text password instead of hashed password. - Move repository into the SUSE github organization - in RPC server, if client comes from localhost, remember its ipv4 localhost address instead of ipv6 address - tell a record to clear expired pending commands upon saving a command result; introduce pending commands RPC test case - avoid hard coding 127.0.0.1 in host ID of alive message test; let system administrator mount and unmount disks by issuing these two commands on key server. Important SUSE bug 1186226 CVE-2019-18906 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cryptsetup-2.4.3-150400.1.110 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cryptsetup-2.4.3-150400.1.110 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-14382 CVE-2021-4122 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 curl-8.0.1-150400.5.23.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for curl adds the following feature: Update to version 8.0.1 (jsc#PED-2580) - CVE-2023-28319: use-after-free in SSH sha256 fingerprint check (bsc#1211230). - CVE-2023-28320: siglongjmp race condition (bsc#1211231). - CVE-2023-28321: IDN wildcard matching (bsc#1211232). - CVE-2023-28322: POST-after-PUT confusion (bsc#1211233). Important SUSE bug 1211230 SUSE bug 1211231 SUSE bug 1211232 SUSE bug 1211233 CVE-2023-28319 CVE-2023-28320 CVE-2023-28321 CVE-2023-28322 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cyrus-sasl-2.1.28-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cyrus-sasl-2.1.28-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-19906 CVE-2020-8032 CVE-2022-24407 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 db48-utils-4.8.30-150000.7.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the db48-utils-4.8.30-150000.7.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-2708 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dbus-1-1.12.2-150400.18.5.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111). - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112). - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113). Bugfixes: - Disable asserts (bsc#1087072). Important SUSE bug 1087072 SUSE bug 1204111 SUSE bug 1204112 SUSE bug 1204113 CVE-2022-42010 CVE-2022-42011 CVE-2022-42012 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dbus-1-glib-0.108-1.29 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the dbus-1-glib-0.108-1.29 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2010-1172 CVE-2013-0292 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dbus-1 fixes the following issues: - CVE-2022-42010: Fixed potential crash that could be triggered by an invalid signature (bsc#1204111). - CVE-2022-42011: Fixed an out of bounds read caused by a fixed length array (bsc#1204112). - CVE-2022-42012: Fixed a use-after-free that could be trigged by a message in non-native endianness with out-of-band Unix file descriptor (bsc#1204113). Bugfixes: - Disable asserts (bsc#1087072). Important SUSE bug 1087072 SUSE bug 1204111 SUSE bug 1204112 SUSE bug 1204113 CVE-2022-42010 CVE-2022-42011 CVE-2022-42012 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dhcp-4.3.6.P1-150000.6.17.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dhcp fixes the following issues: - CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient (bsc#1186382) Important SUSE bug 1186382 CVE-2021-25217 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dirmngr-2.2.27-150300.3.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the dirmngr-2.2.27-150300.3.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-1000858 CVE-2018-12020 CVE-2018-9234 CVE-2019-13050 CVE-2019-14855 CVE-2020-25125 CVE-2022-34903 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dmidecode-3.4-150400.16.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dmidecode fixes the following issues: - CVE-2023-30630: Fixed potential privilege escalation vulnerability via file overwrite (bsc#1210418). Moderate SUSE bug 1210418 CVE-2023-30630 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dnsmasq-2.86-150400.14.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the dnsmasq-2.86-150400.14.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-3294 CVE-2015-8899 CVE-2017-14491 CVE-2017-14492 CVE-2017-14493 CVE-2017-14494 CVE-2017-14495 CVE-2017-14496 CVE-2017-15107 CVE-2019-14834 CVE-2020-14312 CVE-2020-25681 CVE-2020-25682 CVE-2020-25683 CVE-2020-25684 CVE-2020-25685 CVE-2020-25686 CVE-2020-25687 CVE-2021-3448 CVE-2022-0934 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dracut-055+suse.360.g076f1113-150500.1.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the dracut-055+suse.360.g076f1113-150500.1.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-8637 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dstat-0.7.3-2.16 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the dstat-0.7.3-2.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2009-3894 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 e2fsprogs-1.46.4-150400.3.3.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for e2fsprogs fixes the following issues: - CVE-2022-1304: Fixed out-of-bounds read/write leading to segmentation fault and possibly arbitrary code execution. (bsc#1198446) Important SUSE bug 1198446 CVE-2022-1304 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ecryptfs-utils-111-2.31 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ecryptfs-utils-111-2.31 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2011-1831 CVE-2011-1832 CVE-2011-1833 CVE-2011-1834 CVE-2011-1835 CVE-2011-1836 CVE-2011-1837 CVE-2014-9687 CVE-2016-1572 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 emacs-27.2-150400.3.6.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for emacs fixes the following issues: - CVE-2022-48337: Fixed etags local command injection vulnerability (bsc#1208515). - CVE-2022-48339: Fixed htmlfontify.el command injection vulnerability (bsc#1208512). - CVE-2022-48338: Fixed ruby-mode.el local command injection vulnerability (bsc#1208514). Important SUSE bug 1208512 SUSE bug 1208514 SUSE bug 1208515 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 enscript-1.6.6-1.17 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the enscript-1.6.6-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2008-3863 CVE-2008-4306 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 expat-2.4.4-150400.3.12.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for expat fixes the following issues: - CVE-2022-40674: Fixed use-after-free in the doContent function in xmlparse.c (bsc#1203438). Important SUSE bug 1203438 CVE-2022-40674 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 file-5.32-7.14.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for file fixes the following issues: Security issues fixed: - CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661). Non-security issue fixed: - Fixed broken '--help' output (bsc#1169512). Moderate SUSE bug 1154661 SUSE bug 1169512 CVE-2019-18218 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for flac fixes the following issues: - CVE-2021-0561: Fixed out of bound write in append_to_verify_fifo_interleaved_ (bsc#1196660). Moderate SUSE bug 1196660 CVE-2021-0561 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 flac-devel-1.3.2-150000.3.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the flac-devel-1.3.2-150000.3.11.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8962 CVE-2014-9028 CVE-2017-6888 CVE-2020-0487 CVE-2020-0499 CVE-2021-0561 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for freetype2 fixes the following issues: - CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830). - CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832). - CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823). Non-security fixes: - Updated to version 2.10.4 Moderate SUSE bug 1198823 SUSE bug 1198830 SUSE bug 1198832 CVE-2022-27404 CVE-2022-27405 CVE-2022-27406 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 freetype2-devel-2.10.4-150000.4.12.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the freetype2-devel-2.10.4-150000.4.12.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-2240 CVE-2014-9656 CVE-2014-9657 CVE-2014-9658 CVE-2014-9659 CVE-2014-9660 CVE-2014-9661 CVE-2014-9662 CVE-2014-9663 CVE-2014-9664 CVE-2014-9665 CVE-2014-9666 CVE-2014-9667 CVE-2014-9668 CVE-2014-9669 CVE-2014-9670 CVE-2014-9671 CVE-2014-9672 CVE-2014-9673 CVE-2014-9674 CVE-2014-9675 CVE-2017-8105 CVE-2017-8287 CVE-2018-6942 CVE-2020-15999 CVE-2022-27404 CVE-2022-27405 CVE-2022-27406 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 fribidi-1.0.10-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for fribidi fixes the following issues: - CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147). - CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148). - CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150). Moderate SUSE bug 1196147 SUSE bug 1196148 SUSE bug 1196150 CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 fuse-2.9.7-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for fuse fixes the following issues: - CVE-2018-10906: fusermount was vulnerable to a restriction bypass when SELinux is active. This allowed non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects (bsc#1101797) Moderate SUSE bug 1101797 CVE-2018-10906 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of fwupdate fixes the following issue: - rebuild with new secure boot key due to grub2 boothole 3 issues (bsc#1198581) Important SUSE bug 1198581 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 g3utils-1.1.37-3.11.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the g3utils-1.1.37-3.11.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-16741 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 CVE-2018-16745 CVE-2019-1010190 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gc-devel-7.6.4-1.16 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gc-devel-7.6.4-1.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2012-2673 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gd fixes the following issues: - CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400). Moderate SUSE bug 1190400 CVE-2021-40812 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gd-devel-2.2.5-11.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gd-devel-2.2.5-11.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-2497 CVE-2016-10166 CVE-2016-10167 CVE-2016-10168 CVE-2016-5116 CVE-2016-5766 CVE-2016-6128 CVE-2016-6132 CVE-2016-6207 CVE-2016-6214 CVE-2016-6905 CVE-2016-6912 CVE-2016-9317 CVE-2017-6362 CVE-2017-7890 CVE-2018-1000222 CVE-2018-14553 CVE-2018-5711 CVE-2019-11038 CVE-2019-6977 CVE-2019-6978 CVE-2021-40812 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gdk-pixbuf fixes the following issues: Update to version 2.42.9: - CVE-2021-44648: Fixed overflow vulnerability in lzw code size (bsc#1194633). Bugfixes: - Fixed loading of larger images (glgo#GNOME/gdk-pixbuf#216). - Avoided bashism in baselibs postscript (bsc#1195391). Important SUSE bug 1194633 SUSE bug 1195391 CVE-2021-44648 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gdk-pixbuf-devel-2.42.9-150400.5.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gdk-pixbuf-devel-2.42.9-150400.5.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-4491 CVE-2015-7552 CVE-2015-7673 CVE-2015-7674 CVE-2016-6352 CVE-2017-2862 CVE-2017-2870 CVE-2017-6312 CVE-2017-6313 CVE-2020-29385 CVE-2021-44648 CVE-2021-46829 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gdk-pixbuf-loader-rsvg-2.52.9-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gdk-pixbuf-loader-rsvg-2.52.9-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-11464 CVE-2019-20446 CVE-2021-25900 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ghostscript-9.52-150000.164.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ghostscript fixes the following issues: - fixed CVE-2020-15900 Memory Corruption (SAFER Sandbox Breakout) cf. https://bugs.ghostscript.com/show_bug.cgi?id=702582 (bsc#1174415) Important SUSE bug 1174415 CVE-2020-15900 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for giflib fixes the following issues: - CVE-2019-15133: Fixed a divide-by-zero exception in the decoder function DGifSlurp in dgif_lib.c if the height field of the ImageSize data structure is equal to zero (bsc#1146299). - CVE-2018-11490: Fixed a heap-based buffer overflow in DGifDecompressLine function in dgif_lib.c (bsc#1094832). - CVE-2016-3977: Fixed a heap buffer overflow in gif2rgb (bsc#974847). Update to version 5.2.1 * In gifbuild.c, avoid a core dump on no color map. * Restore inadvertently removed library version numbers in Makefile. Changes in version 5.2.0 * The undocumented and deprecated GifQuantizeBuffer() entry point has been moved to the util library to reduce libgif size and attack surface. Applications needing this function are couraged to link the util library or make their own copy. * The following obsolete utility programs are no longer installed: gifecho, giffilter, gifinto, gifsponge. These were either installed in error or have been obsolesced by modern image-transformmation tools like ImageMagick convert. They may be removed entirely in a future release. * Address SourceForge issue #136: Stack-buffer-overflow in gifcolor.c:84 * Address SF bug #134: Giflib fails to slurp significant number of gifs * Apply SPDX convention for license tagging. Changes in version 5.1.9 * The documentation directory now includes an HTMlified version of the GIF89 standard, and a more detailed description of how LZW compression is applied to GIFs. * Address SF bug #129: The latest version of giflib cannot be build on windows. * Address SF bug #126: Cannot compile giflib using c89 Changes in version 5.1.8 * Address SF bug #119: MemorySanitizer: FPE on unknown address (CVE-2019-15133 bsc#1146299) * Address SF bug #125: 5.1.7: xmlto is still required for tarball * Address SF bug #124: 5.1.7: ar invocation is not crosscompile compatible * Address SF bug #122: 5.1.7 installs manpages to wrong directory * Address SF bug #121: make: getversion: Command not found * Address SF bug #120: 5.1.7 does not build a proper library - no Changes in version 5.1.7 * Correct a minor packaging error (superfluous symlinks) in the 5.1.6 tarballs. Changes in version 5.1.6 * Fix library installation in the Makefile. Changes in version 5.1.5 * Fix SF bug #114: Null dereferences in main() of gifclrmp * Fix SF bug #113: Heap Buffer Overflow-2 in function DGifDecompressLine() in cgif.c. This had been assigned (CVE-2018-11490 bsc#1094832). * Fix SF bug #111: segmentation fault in PrintCodeBlock * Fix SF bug #109: Segmentation fault of giftool reading a crafted file * Fix SF bug #107: Floating point exception in giftext utility * Fix SF bug #105: heap buffer overflow in DumpScreen2RGB in gif2rgb.c:317 * Fix SF bug #104: Ineffective bounds check in DGifSlurp * Fix SF bug #103: GIFLIB 5.1.4: DGifSlurp fails on empty comment * Fix SF bug #87: Heap buffer overflow in 5.1.2 (gif2rgb). (CVE-2016-3977 bsc#974847) * The horrible old autoconf build system has been removed with extreme prejudice. You now build this simply by running 'make' from the top-level directory. The following non-security bugs were fixed: - build path independent objects and inherit CFLAGS from the build system (bsc#1184123) Moderate SUSE bug 1094832 SUSE bug 1146299 SUSE bug 1184123 SUSE bug 974847 CVE-2016-3977 CVE-2018-11490 CVE-2019-15133 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 giflib-devel-5.2.1-150000.4.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the giflib-devel-5.2.1-150000.4.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-7555 CVE-2016-3977 CVE-2018-11490 CVE-2019-15133 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for git fixes the following issues: - CVE-2023-25652: Fixed partial overwrite of paths outside the working tree (bsc#1210686). - CVE-2023-25815: Fixed malicious placemtn of crafted message (bsc#1210686). - CVE-2023-29007: Fixed arbitrary configuration injection (bsc#1210686). Moderate SUSE bug 1210686 CVE-2023-25652 CVE-2023-25815 CVE-2023-29007 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 git-core-2.35.3-150300.10.27.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the git-core-2.35.3-150300.10.27.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2005-4900 CVE-2014-9390 CVE-2016-2315 CVE-2016-2324 CVE-2017-1000117 CVE-2017-14867 CVE-2017-15298 CVE-2017-8386 CVE-2018-11233 CVE-2018-11235 CVE-2018-17456 CVE-2018-19486 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2019-19604 CVE-2020-11008 CVE-2020-5260 CVE-2021-21300 CVE-2022-23521 CVE-2022-24765 CVE-2022-29187 CVE-2022-39253 CVE-2022-39260 CVE-2022-41903 CVE-2023-22490 CVE-2023-23946 CVE-2023-25652 CVE-2023-25815 CVE-2023-29007 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 glib-networking-2.70.1-150400.1.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the glib-networking-2.70.1-150400.1.6 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-13645 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for glib2 fixes the following issues: - CVE-2023-24593: Fixed a denial of service caused by handling a malicious text-form variant (bsc#1209714). - CVE-2023-25180: Fixed a denial of service caused by malicious serialised variant (bsc#1209713). The following non-security bug was fixed: - Fixed regression on s390x (bsc#1210135, glgo#GNOME/glib!2978). Moderate SUSE bug 1209713 SUSE bug 1209714 SUSE bug 1210135 CVE-2023-24593 CVE-2023-25180 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 glib2-devel-2.70.5-150400.3.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the glib2-devel-2.70.5-150400.3.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-16428 CVE-2018-16429 CVE-2019-12450 CVE-2020-6750 CVE-2021-27218 CVE-2021-27219 CVE-2023-24593 CVE-2023-25180 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gmp fixes the following issues: - CVE-2021-43618: Fixed buffer overflow via crafted input in mpz/inp_raw.c (bsc#1192717). Moderate SUSE bug 1192717 CVE-2021-43618 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gmp-devel-6.1.2-4.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gmp-devel-6.1.2-4.9.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-43618 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 golang-github-prometheus-node_exporter-1.5.0-150100.3.23.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for golang-github-prometheus-alertmanager and golang-github-prometheus-node_exporter fixes the following issues: golang-github-prometheus-alertmanager: - Security issues fixed: * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208051) golang-github-prometheus-node_exporter: - Security issues fixed in this version update to version 1.5.0 (jsc#PED-3578): * CVE-2022-27191: Update go/x/crypto (bsc#1197284) * CVE-2022-27664: Update go/x/net (bsc#1203185) * CVE-2022-46146: Update exporter-toolkit (bsc#1208064) - Other non-security bug fixes and changes in this version update to 1.5.0 (jsc#PED-3578): * NOTE: This changes the Go runtime 'GOMAXPROCS' to 1. This is done to limit the concurrency of the exporter to 1 CPU thread at a time in order to avoid a race condition problem in the Linux kernel and parallel IO issues on nodes with high numbers of CPUs/CPU threads. * [BUGFIX] Fix hwmon label sanitizer * [BUGFIX] Use native endianness when encoding InetDiagMsg * [BUGFIX] Fix btrfs device stats always being zero * [BUGFIX] Fix diskstats exclude flags * [BUGFIX] [node-mixin] Fix fsSpaceAvailableCriticalThreshold and fsSpaceAvailableWarning * [BUGFIX] Fix concurrency issue in ethtool collector * [BUGFIX] Fix concurrency issue in netdev collector * [BUGFIX] Fix diskstat reads and write metrics for disks with different sector sizes * [BUGFIX] Fix iostat on macos broken by deprecation warning * [BUGFIX] Fix NodeFileDescriptorLimit alerts * [BUGFIX] Sanitize rapl zone names * [BUGFIX] Add file descriptor close safely in test * [BUGFIX] Fix race condition in os_release.go * [BUGFIX] Skip ZFS IO metrics if their paths are missing * [BUGFIX] Handle nil CPU thermal power status on M1 * [BUGFIX] bsd: Ignore filesystems flagged as MNT_IGNORE * [BUGFIX] Sanitize UTF-8 in dmi collector * [CHANGE] Merge metrics descriptions in textfile collector * [FEATURE] Add multiple listeners and systemd socket listener activation * [FEATURE] [node-mixin] Add darwin dashboard to mixin * [FEATURE] Add 'isolated' metric on cpu collector on linux * [FEATURE] Add cgroup summary collector * [FEATURE] Add selinux collector * [FEATURE] Add slab info collector * [FEATURE] Add sysctl collector * [FEATURE] Also track the CPU Spin time for OpenBSD systems * [FEATURE] Add support for MacOS version * [ENHANCEMENT] Add RTNL version of netclass collector * [ENHANCEMENT] [node-mixin] Add missing selectors * [ENHANCEMENT] [node-mixin] Change current datasource to grafana's default * [ENHANCEMENT] [node-mixin] Change disk graph to disk table * [ENHANCEMENT] [node-mixin] Change io time units to %util * [ENHANCEMENT] Ad user_wired_bytes and laundry_bytes on *bsd * [ENHANCEMENT] Add additional vm_stat memory metrics for darwin * [ENHANCEMENT] Add device filter flags to arp collector * [ENHANCEMENT] Add diskstats include and exclude device flags * [ENHANCEMENT] Add node_softirqs_total metric * [ENHANCEMENT] Add rapl zone name label option * [ENHANCEMENT] Add slabinfo collector * [ENHANCEMENT] Allow user to select port on NTP server to query * [ENHANCEMENT] collector/diskstats: Add labels and metrics from udev * [ENHANCEMENT] Enable builds against older macOS SDK * [ENHANCEMENT] qdisk-linux: Add exclude and include flags for interface name * [ENHANCEMENT] systemd: Expose systemd minor version * [ENHANCEMENT] Use netlink for tcpstat collector * [ENHANCEMENT] Use netlink to get netdev stats * [ENHANCEMENT] Add additional perf counters for stalled frontend/backend cycles * [ENHANCEMENT] Add btrfs device error stats - Change build requirement to go1.18 or higher (previously this was fixed to version 1.14) Moderate SUSE bug 1197284 SUSE bug 1203185 SUSE bug 1208051 SUSE bug 1208064 CVE-2022-27191 CVE-2022-27664 CVE-2022-46146 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gpg2 fixes the following issues: - CVE-2022-34903: Fixed a status injection vulnerability (bsc#1201225). - Use AES as default cipher instead of 3DES when we are in FIPS mode. (bsc#1196125) Important SUSE bug 1196125 SUSE bug 1201225 CVE-2022-34903 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gptfdisk-1.0.8-150400.1.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gptfdisk-1.0.8-150400.1.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-0256 CVE-2021-0308 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 graphite2-devel-1.3.11-150000.4.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the graphite2-devel-1.3.11-150000.4.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-1521 CVE-2017-5436 CVE-2018-7999 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 graphviz-2.48.0-150400.1.165 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the graphviz-2.48.0-150400.1.165 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-10196 CVE-2019-11023 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 groff-1.22.4-150400.3.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the groff-1.22.4-150400.3.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2009-5080 CVE-2009-5081 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 grub2-2.06-150500.27.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the grub2-2.06-150500.27.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-8370 CVE-2020-10713 CVE-2020-14308 CVE-2020-14309 CVE-2020-14310 CVE-2020-14311 CVE-2020-14372 CVE-2020-15705 CVE-2020-15706 CVE-2020-15707 CVE-2020-25632 CVE-2020-25647 CVE-2020-27749 CVE-2020-27779 CVE-2021-20225 CVE-2021-20233 CVE-2021-3695 CVE-2021-3696 CVE-2021-3697 CVE-2021-3981 CVE-2021-46705 CVE-2022-2601 CVE-2022-28733 CVE-2022-28734 CVE-2022-28735 CVE-2022-28736 CVE-2022-3775 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gstreamer-1.22.0-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gstreamer-1.22.0-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-10198 CVE-2016-10199 CVE-2017-5837 CVE-2017-5838 CVE-2017-5839 CVE-2017-5840 CVE-2017-5841 CVE-2017-5842 CVE-2017-5843 CVE-2017-5844 CVE-2017-5845 CVE-2017-5846 CVE-2017-5847 CVE-2017-5848 CVE-2021-3185 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gstreamer-plugins-base-1.22.0-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gstreamer-plugins-base-1.22.0-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-9928 CVE-2021-3185 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gstreamer-plugins-good-1.22.0-150500.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gstreamer-plugins-good-1.22.0-150500.2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-5838 CVE-2021-3185 CVE-2021-3497 CVE-2021-3498 CVE-2022-1920 CVE-2022-1921 CVE-2022-1922 CVE-2022-1923 CVE-2022-1924 CVE-2022-1925 CVE-2022-2122 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gtk2-devel-2.24.33-150400.2.11 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gtk2-devel-2.24.33-150400.2.11 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-7447 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for harfbuzz fixes the following issues: - CVE-2023-25193: Fixed vulnerability that allowed attackers to trigger O(n^2) growth via consecutive marks (bsc#1207922). Important SUSE bug 1207922 CVE-2023-25193 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 harfbuzz-devel-3.4.0-150400.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the harfbuzz-devel-3.4.0-150400.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-33068 CVE-2023-25193 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 hivex-devel-1.3.21-150400.2.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the hivex-devel-1.3.21-150400.2.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-3504 CVE-2021-3622 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 hplip-devel-3.21.10-150400.3.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the hplip-devel-3.21.10-150400.3.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-0839 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for icu.691 fixes the following issues: - Renamed package from icu 69.1 for SUSE:SLE-15-SP3:Update. (jsc#SLE-17893) - Fix undefined behaviour in 'ComplexUnitsConverter::applyRounder' - Update to release 69.1 - For Norwegian, 'no' is back to being the canonical code, with 'nb' treated as equivalent. This aligns handling of Norwegian with other macro language codes. - Binary prefixes in measurement units (KiB, MiB, etc.) - Time zone offsets from local time with new APIs. - Don't disable testsuite under 'qemu-linux-user' - Fixed an issue when ICU test on 'aarch64 fails. (bsc#1182645) - Drop 'SUSE_ASNEEDED' as the issue was in binutils. (bsc#1182252) - Fix 'pthread' dependency issue. (bsc#1182252) - Update to release 68.2 - Fix memory problem in 'FormattedStringBuilder' - Fix assertion when 'setKeywordValue w/' long value. - Fix UBSan breakage on 8bit of rbbi - fix int32_t overflow in listFormat - Fix memory handling in MemoryPool::operator=() - Fix memory leak in AliasReplacer - Add back icu.keyring. - Update to release 68.1 - PluralRules selection for ranges of numbers - Locale ID canonicalization now conforms to the CLDR spec including edge cases - DateIntervalFormat supports output options such as capitalization - Measurement units are normalized in skeleton string output - Time zone data (tzdata) version 2020d - Add the provides for libicu to Make .Net core can install successfully. (bsc#1167603, bsc#1161007) - Update to version 67.1 - Unicode 13 (ICU-20893, same as in ICU 66) - Total of 5930 new characters - 4 new scripts - 55 new emoji characters, plus additional new sequences - New CJK extension, first characters in plane 3: U+30000..U+3134A - New language at Modern coverage: Nigerian Pidgin - New languages at Basic coverage: Fulah (Adlam), Maithili, Manipuri, Santali, Sindhi (Devanagari), Sundanese - Region containment: EU no longer includes GB - Unicode 13 root collation data and Chinese data for collation and transliteration - DateTimePatternGenerator now obeys the 'hc' preference in the locale identifier - Various other improvements for ECMA-402 conformance - Number skeletons have a new 'concise' form that can be used in MessageFormat strings - Currency formatting options for formal and other currency display name variants - ListFormatter: new public API to select the style & type - ListFormatter now selects the proper “and”/“or” form for Spanish & Hebrew. - Locale ID canonicalization upgraded to implement the complete CLDR spec. - LocaleMatcher: New option to ignore one-way matches - acceptLanguage() reimplemented via LocaleMatcher - Data build tool: tzdbNames.res moved from the 'zone_tree' category to the 'zone_supplemental' category - Fixed uses of u8'literals' broken by the C++20 introduction of the incompatible char8_t type - and added a few API overloads to reduce the need for reinterpret_cast. - Support for manipulating CLDR 37 unit identifiers in MeasureUnit. - Drop icu-versioning. (bsc#1159131) - Update to version 66.1 - Unicode 13 support - Fix uses of u8'literals' broken by C++20 introduction of incompatible char8_t type. - Fixed an issue when Qt apps can't handle non-ASCII filesystem path. ([bsc#1162882) - Remove '/usr/lib(64)/icu/current'. (bsc#1158955) Important SUSE bug 1158955 SUSE bug 1159131 SUSE bug 1161007 SUSE bug 1162882 SUSE bug 1167603 SUSE bug 1182252 SUSE bug 1182645 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ipmitool-1.8.18.238.gb7adc1d-150400.1.14 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ipmitool-1.8.18.238.gb7adc1d-150400.1.14 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-5208 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ipsec-tools-0.8.2-5.35 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ipsec-tools-0.8.2-5.35 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-10396 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ipvsadm fixes the following issues: - Hardening: link as position independent executable (bsc#1184988). Low SUSE bug 1184988 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 iscsiuio-0.7.8.6-150500.44.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the iscsiuio-0.7.8.6-150500.44.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-13987 CVE-2020-13988 CVE-2020-17437 CVE-2020-17438 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 jackson-annotations-2.13.0-150200.3.6.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core fixes the following issues: Security issues fixed: - CVE-2020-36518: Fixed a Java stack overflow exception and denial of service via a large depth of nested objects in jackson-databind. (bsc#1197132) - CVE-2020-25649: Fixed an insecure entity expansion in jackson-databind which was vulnerable to XML external entity (XXE). (bsc#1177616) - CVE-2020-28491: Fixed a bug which could cause `java.lang.OutOfMemoryError` exception in jackson-dataformats-binary. (bsc#1182481) Non security fixes: jackson-annotations - update from version 2.10.2 to version 2.13.0: + Build with source/target levels 8 + Add 'mvnw' wrapper + 'JsonSubType.Type' should accept array of names + Jackson version alignment with Gradle 6 + Add '@JsonIncludeProperties' + Add '@JsonTypeInfo(use=DEDUCTION)' + Ability to use '@JsonAnyGetter' on fields + Add '@JsonKey' annotation + Allow repeated calls to 'SimpleObjectIdResolver.bindItem()' for same mapping + Add 'namespace' property for '@JsonProperty' (for XML module) + Add target 'ElementType.ANNOTATION_TYPE' for '@JsonEnumDefaultValue' + 'JsonPattern.Value.pattern' retained as '', never (accidentally) exposed as 'null' + Rewrite to use `ant` for building in order to be able to use it in packages that have to be built before maven jackson-bom - update from version 2.10.2 to version 2.13.0: + Configure moditect plugin with '<jvmVersion>11</jvmVersion>' + jackson-bom manages the version of 'junit:junit' + Drop 'jackson-datatype-hibernate3' (support for Hibernate 3.x datatypes) + Removed 'jakarta' classifier variants of JAXB/JSON-P/JAX-RS modules due to the addition of new Jakarta artifacts (Jakarta-JSONP, Jakarta-xmlbind-annotations, Jakarta-rs-providers) + Add version for 'jackson-datatype-jakarta-jsonp' module (introduced after 2.12.2) + Add (beta) version for 'jackson-dataformat-toml' + Jakarta 9 artifact versions are missing from jackson-bom + Add default settings for 'gradle-module-metadata-maven-plugin' (gradle metadata) + Add default settings for 'build-helper-maven-plugin' + Drop 'jackson-module-scala_2.10' entry (not released for Jackson 2.12 or later) + Add override for 'version.plugin.bundle' (for 5.1.1) to help build on JDK 15+ + Add missing version for jackson-datatype-eclipse-collections jackson-core - update from version 2.10.2 to version 2.13.0: + Build with source and target levels 8 + Misleading exception for input source when processing byte buffer with start offset + Escape contents of source document snippet for 'JsonLocation._appendSourceDesc()' + Add 'StreamWriteException' type to eventually replace 'JsonGenerationException' + Replace 'getCurrentLocation()'/'getTokenLocation()' with 'currentLocation()'/'currentTokenLocation()' in 'JsonParser' + Replace 'JsonGenerator.writeObject()' (and related) with 'writePOJO()' + Replace 'getCurrentValue()'/'setCurrentValue()' with 'currentValue()'/'assignCurrentValue()' in 'JsonParser'/'JsonGenerator + Introduce O(n^1.5) BigDecimal parser implementation + ByteQuadsCanonicalizer.addName(String, int, int) has incorrect handling for case of q2 == null + UTF32Reader ArrayIndexOutOfBoundsException + Improve exception/JsonLocation handling for binary content: don't show content, include byte offset + Fix an issue with the TokenFilter unable to ignore properties when deserializing. + Optimize array allocation by 'JsonStringEncoder' + Add 'mvnw' wrapper + (partial) Optimize array allocation by 'JsonStringEncoder' + Add back accidentally removed 'JsonStringEncoder' related methods in 'BufferRecyclers' (like 'getJsonStringEncoder()') + 'ArrayOutOfBoundException' at 'WriterBasedJsonGenerator.writeString(Reader, int)' + Allow 'optional-padding' for 'Base64Variant' + More customizable TokenFilter inclusion (using 'Tokenfilter.Inclusion') + Publish Gradle Module Metadata + Add 'StreamReadCapability' for further format-based/format-agnostic handling improvements + Add 'JsonParser.isExpectedNumberIntToken()' convenience method + Add 'StreamWriteCapability' for further format-based/format-agnostic handling improvements + Add 'JsonParser.getNumberValueExact()' to allow precision-retaining buffering + Limit initial allocated block size by 'ByteArrayBuilder' to max block size + Add 'JacksonException' as parent class of 'JsonProcessingException' + Make 'JsonWriteContext.reset()' and 'JsonReadContext.reset()' methods public + Deprecate 'JsonParser.getCurrentTokenId()' (use '#currentTokenId()' instead) + Full 'LICENSE' included in jar for easier access by compliancy tools + Fix NPE in 'writeNumber(String)' method of 'UTF8JsonGenerator', 'WriterBasedJsonGenerator' + Add a String Array write method in the Streaming API + Synchronize variants of 'JsonGenerator#writeNumberField' with 'JsonGenerator#writeNumber' + Add JsonGenerator#writeNumber(char[], int, int) method + Do not clear aggregated contents of 'TextBuffer' when 'releaseBuffers()' called + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)' + Optionally allow leading decimal in float tokens + Rewrite to use ant for building in order to be able to use it in packages that have to be built before maven + Parsing JSON with 'ALLOW_MISSING_VALUE' enabled results in endless stream of 'VALUE_NULL' tokens + Handle case when system property access is restricted + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)' + DataFormatMatcher#getMatchedFormatName throws NPE when no match exists + 'JsonParser.getCurrentLocation()' byte/char offset update incorrectly for big payloads jackson-databind - update from version 2.10.5.1 to version 2.13.0: + '@JsonValue' with integer for enum does not deserialize correctly + 'AnnotatedMethod.getValue()/setValue()' doesn't have useful exception message + Add 'DatabindException' as intermediate subtype of 'JsonMappingException' + Jackson does not support deserializing new Java 9 unmodifiable collections + Allocate TokenBuffer instance via context objects (to allow format-specific buffer types) + Add mechanism for setting default 'ContextAttributes' for 'ObjectMapper' + Add 'DeserializationContext.readTreeAsValue()' methods for more convenient conversions for deserializers to use + Clean up support of typed 'unmodifiable', 'singleton' Maps/Sets/Collections + Extend internal bitfield of 'MapperFeature' to be 'long' + Add 'removeMixIn()' method in 'MapperBuilder' + Backport 'MapperBuilder' lambda-taking methods: 'withConfigOverride()', 'withCoercionConfig()', 'withCoercionConfigDefaults()' + configOverrides(boolean.class) silently ignored, whereas .configOverride(Boolean.class) works for both primitives and boxed boolean values + Dont track unknown props in buffer if 'ignoreAllUnknown' is true + Should allow deserialization of java.time types via opaque 'JsonToken.VALUE_EMBEDDED_OBJECT' + Optimize 'AnnotatedConstructor.call()' case by passing explicit null + Add AnnotationIntrospector.XmlExtensions interface for decoupling javax dependencies + Custom SimpleModule not included in list returned by ObjectMapper.getRegisteredModuleIds() after registration + Use more limiting default visibility settings for JDK types (java.*, javax.*) + Deep merge for 'JsonNode' using 'ObjectReader.readTree()' + IllegalArgumentException: Conflicting setter definitions for property with more than 2 setters + Serializing java.lang.Thread fails on JDK 11 and above + String-based 'Map' key deserializer is not deterministic when there is no single arg constructor + Add ArrayNode#set(int index, primitive_type value) + JsonStreamContext 'currentValue' wrongly references to '@JsonTypeInfo' annotated object + DOM 'Node' serialization omits the default namespace declaration + Support 'suppressed' property when deserializing 'Throwable' + 'AnnotatedMember.equals()' does not work reliably + Add 'MapperFeature.APPLY_DEFAULT_VALUES', initially for Scala module + For an absent property Jackson injects 'NullNode' instead of 'null' to a JsonNode-typed constructor argument of a '@ConstructorProperties'-annotated constructor + 'XMLGregorianCalendar' doesn't work with default typing + Content 'null' handling not working for root values + StdDeserializer rejects blank (all-whitespace) strings for ints + 'USE_BASE_TYPE_AS_DEFAULT_IMPL' not working with 'DefaultTypeResolverBuilder' + Add PropertyNamingStrategies.UpperSnakeCaseStrategy (and UPPER_SNAKE_CASE constant) + StackOverflowError when serializing JsonProcessingException + Support for BCP 47 'java.util.Locale' serialization/deserialization + String property deserializes null as 'null' for JsonTypeInfo.As.EXISTING_PROPERTY + Can not deserialize json to enum value with Object-/Array-valued input, '@JsonCreator' + Fix to avoid problem with 'BigDecimalNode', scale of 'Integer.MIN_VALUE' + Extend handling of 'FAIL_ON_NULL_FOR_PRIMITIVES' to cover coercion from (Empty) String via 'AsNull' + Add 'mvnw' wrapper + (regression) Factory method generic type resolution does not use Class-bound type parameter + Deserialization of 'empty' subtype with DEDUCTION failed + Merge findInjectableValues() results in AnnotationIntrospectorPair + READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE doesn't work with empty strings + 'TypeFactory' cannot convert 'Collection' sub-type without type parameters to canonical form and back + Fix for [modules-java8#207]: prevent fail on secondary Java 8 date/time types + EXTERNAL_PROPERTY does not work well with '@JsonCreator' and 'FAIL_ON_UNKNOWN_PROPERTIES' + String property deserializes null as 'null' for 'JsonTypeInfo.As.EXTERNAL_PROPERTY' + Property ignorals cause 'BeanDeserializer 'to forget how to read from arrays (not copying '_arrayDelegateDeserializer') + UntypedObjectDeserializer' mixes multiple unwrapped collections (related to #2733) + Two cases of incorrect error reporting about DeserializationFeature + Bug in polymorphic deserialization with '@JsonCreator', '@JsonAnySetter', 'JsonTypeInfo.As.EXTERNAL_PROPERTY' + Polymorphic subtype deduction ignores 'defaultImpl' attribute + MismatchedInputException: Cannot deserialize instance of 'com.fasterxml.jackson.databind.node.ObjectNode' out of VALUE_NULL token + Missing override for 'hasAsKey()' in 'AnnotationIntrospectorPair' + Creator lookup fails with 'InvalidDefinitionException' for conflict between single-double/single-Double arg constructor + 'MapDeserializer' forcing 'JsonMappingException' wrapping even if WRAP_EXCEPTIONS set to false + Auto-detection of constructor-based creator method skipped if there is an annotated factory-based creator method (regression from 2.11) + 'ObjectMapper.treeToValue()' no longer invokes 'JsonDeserializer.getNullValue()' + DeserializationProblemHandler is not invoked when trying to deserialize String + Fix failing 'double' JsonCreators in jackson 2.12.0 + Conflicting in POJOPropertiesCollector when having namingStrategy + Breaking API change in 'BasicClassIntrospector' (2.12.0) + 'JsonNode.requiredAt()' does NOT fail on some path expressions + Exception thrown when 'Collections.synchronizedList()' is serialized with type info, deserialized + Add option to resolve type from multiple existing properties, '@JsonTypeInfo(use=DEDUCTION)' + '@JsonIgnoreProperties' does not prevent Exception Conflicting getter/setter definitions for property + Deserialization Not Working Right with Generic Types and Builders + Add '@JsonIncludeProperties(propertyNames)' (reverse of '@JsonIgnoreProperties') + '@JsonAnyGetter' should be allowed on a field + Allow handling of single-arg constructor as property based by default + Allow case insensitive deserialization of String value into 'boolean'/'Boolean' (esp for Excel) + Allow use of '@JsonFormat(with=JsonFormat.Feature .ACCEPT_CASE_INSENSITIVE_PROPERTIES)' on Class + Abstract class included as part of known type ids for error message when using JsonSubTypes + Distinguish null from empty string for UUID deserialization + 'ReferenceType' does not expose valid containedType + Add 'CoercionConfig[s]' mechanism for configuring allowed coercions + 'JsonProperty.Access.READ_ONLY' does not work with 'getter-as-setter' 'Collection's + Support 'BigInteger' and 'BigDecimal' creators in 'StdValueInstantiator' + 'JsonProperty.Access.READ_ONLY' fails with collections when a property name is specified + 'BigDecimal' precision not retained for polymorphic deserialization + Support use of 'Void' valued properties ('MapperFeature.ALLOW_VOID_VALUED_PROPERTIES') + Explicitly fail (de)serialization of 'java.time.*' types in absence of registered custom (de)serializers + Improve description included in by 'DeserializationContext.handleUnexpectedToken()' + Support for JDK 14 record types ('java.lang.Record') + 'PropertyNamingStrategy' class initialization depends on its subclass, this can lead to class loading deadlock + 'FAIL_ON_IGNORED_PROPERTIES' does not throw on 'READONLY' properties with an explicit name + Add Gradle Module Metadata for version alignment with Gradle 6 + Allow 'JsonNode' auto-convert into 'ArrayNode' if duplicates found (for XML) + Allow values of 'untyped' auto-convert into 'List' if duplicates found (for XML) + Add 'ValueInstantiator.createContextual(...) + Support multiple names in 'JsonSubType.Type' + Disabling 'FAIL_ON_INVALID_SUBTYPE' breaks polymorphic deserialization of Enums + Explicitly fail (de)serialization of 'org.joda.time.*' types in absence of registered custom (de)serializers + Trailing zeros are stripped when deserializing BigDecimal values inside a @JsonUnwrapped property + Extract getter/setter/field name mangling from 'BeanUtil' into pluggable 'AccessorNamingStrategy' + Throw 'InvalidFormatException' instead of 'MismatchedInputException' for ACCEPT_FLOAT_AS_INT coercion failures + Add '@JsonKey' annotation (similar to '@JsonValue') for customizable serialization of Map keys + 'MapperFeature.ACCEPT_CASE_INSENSITIVE_ENUMS' should work for enum as keys + Add support for disabling special handling of 'Creator properties' wrt alphabetic property ordering + Add 'JsonNode.canConvertToExactIntegral()' to indicate whether floating-point/BigDecimal values could be converted to integers losslessly + Improve static factory method generic type resolution logic + Allow preventing 'Enum from integer' coercion using new 'CoercionConfig' system + '@JsonValue' not considered when evaluating inclusion + Make some java platform modules optional + Add support for serializing 'java.sql.Blob' + 'AnnotatedCreatorCollector' should avoid processing synthetic static (factory) methods + Add errorprone static analysis profile to detect bugs at build time + Problem with implicit creator name detection for constructor detection + Add 'BeanDeserializerBase.isCaseInsensitive()' + Refactoring of 'CollectionDeserializer' to solve CSV array handling issues + Full 'LICENSE' included in jar for easier access by compliancy tools + Fix type resolution for static methods (regression in 2.11.3) + '@JsonCreator' on constructor not compatible with '@JsonIdentityInfo', 'PropertyGenerator' + Add debug improvements about 'ClassUtil.getClassMethods()' + Cannot detect creator arguments of mixins for JDK types + Add 'JsonFormat.Shape' awareness for UUID serialization ('UUIDSerializer') + Json serialization fails or a specific case that contains generics and static methods with generic parameters (2.11.1 -> 2.11.2 regression) + 'ObjectMapper.activateDefaultTypingAsProperty()' is not using parameter 'PolymorphicTypeValidator' + Problem deserialization 'raw generic' fields (like 'Map') in 2.11.2 + Fix issues with 'MapLikeType.isTrueMapType()', 'CollectionLikeType.isTrueCollectionType()' + Parser/Generator features not set when using 'ObjectMapper.createParser()', 'createGenerator()' + Polymorphic subtypes not registering on copied ObjectMapper (2.11.1) + Failure to read AnnotatedField value in Jackson 2.11 + 'TypeFactory.constructType()' does not take 'TypeBindings' correctly + Builder Deserialization with JsonCreator Value vs Array + JsonCreator on static method in Enum and Enum used as key in map fails randomly + 'StdSubtypeResolver' is not thread safe (possibly due to copy not being made with 'ObjectMapper.copy()') + 'Conflicting setter definitions for property' exception for 'Map' subtype during deserialization + Fail to deserialize local Records + Rearranging of props when property-based generator is in use leads to incorrect output + Jackson doesn't respect 'CAN_OVERRIDE_ACCESS_MODIFIERS=false' for deserializer properties + 'DeserializationFeature.UNWRAP_SINGLE_VALUE_ARRAYS' don't support 'Map' type field + JsonParser from MismatchedInputException cannot getText() for floating-point value + i-I case conversion problem in Turkish locale with case-insensitive deserialization + '@JsonInject' fails on trying to find deserializer even if inject-only + Polymorphic deserialization should handle case-insensitive Type Id property name if 'MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES' is enabled + TreeTraversingParser and UTF8StreamJsonParser create contexts differently + Support use of '@JsonAlias' for enum values + 'declaringClass' of 'enum-as-POJO' not removed for 'ObjectMapper' with a naming strategy + Fix 'JavaType.isEnumType()' to support sub-classes + BeanDeserializerBuilder Protected Factory Method for Extension + Support '@JsonSerialize(keyUsing)' and '@JsonDeserialize(keyUsing)' on Key class + Add 'SerializationFeature.WRITE_SELF_REFERENCES_AS_NULL' + 'ObjectMapper.registerSubtypes(NamedType...)' doesn't allow registering same POJO for two different type ids + 'DeserializationContext.handleMissingInstantiator()' throws 'MismatchedInputException' for non-static inner classes + Incorrect 'JsonStreamContext' for 'TokenBuffer' and 'TreeTraversingParser' + Add 'AnnotationIntrospector.findRenameByField()' to support Kotlin's 'is-getter' naming convention + Use '@JsonProperty(index)' for sorting properties on serialization + Java 8 'Optional' not working with '@JsonUnwrapped' on unwrappable type + Add 'MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES' to allow blocking use of unsafe base type for polymorphic deserialization + 'ObjectMapper.setSerializationInclusion()' is ignored for 'JsonAnyGetter' + 'ValueInstantiationException' when deserializing using a builder and 'UNWRAP_SINGLE_VALUE_ARRAYS' + JsonIgnoreProperties(ignoreUnknown = true) does not work on field and method level + Failure to resolve generic type parameters on serialization + JsonParser cannot getText() for input stream on MismatchedInputException + ObjectReader readValue lacks Class<T> argument + Change default textual serialization of 'java.util.Date'/'Calendar' to include colon in timezone offset + Add 'ObjectMapper.createParser()' and 'createGenerator()' methods + Allow serialization of 'Properties' with non-String values + Add new factory method for creating custom 'EnumValues' to pass to 'EnumDeserializer + 'IllegalArgumentException' thrown for mismatched subclass deserialization + Add convenience methods for creating 'List', 'Map' valued 'ObjectReader's (ObjectMapper.readerForListOf()) + 'SerializerProvider.findContentValueSerializer()' methods jackson-dataformats-binary - update from version 2.10.1 to version 2.13.0: + (cbor) Should validate UTF-8 multi-byte validity for short decode path too + (ion) Deprecate 'CloseSafeUTF8Writer', remove use + (smile) Make 'SmileFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES' + (cbor) Make 'CBORFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES' + (cbor) Handle case of BigDecimal with Integer.MIN_VALUE for scale gracefully + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) + (cbor) Another uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) + (smile) Add 'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient handling of broken Unicode surrogate pairs on writing + (avro) Add 'logicalType' support for some 'java.time' types; add 'AvroJavaTimeModule' for native ser/deser + Support base64 strings in 'getBinaryValue()' for CBOR and Smile + (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name + (avro) Generate logicalType switch + (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name + (ion) 'jackson-dataformat-ion' does not handle null.struct deserialization correctly + 'Ion-java' dep 1.4.0 -> 1.8.0 + Minor change to Ion module registration names (fully-qualified) + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) + (cbor) Uncaught exception in CBORParser._findDecodedFromSymbols() (by ossfuzzer) + (smile) Uncaught validation problem wrt Smile 'BigDecimal' type + (smile) ArrayIndexOutOfBoundsException for malformed Smile header + (cbor) Failed to handle case of alleged String with length of Integer.MAX_VALUE + (smile) Allocate byte[] lazily for longer Smile binary data payloads + (cbor) CBORParser need to validate zero-length byte[] for BigInteger + (smile) Handle invalid chunked-binary-format length gracefully + (smile) Allocate byte[] lazily for longer Smile binary data payloads (7-bit encoded) + (smile) ArrayIndexOutOfBoundsException in SmileParser._decodeShortUnicodeValue() + (smile) Handle sequence of Smile header markers without recursion + (cbor) CBOR loses 'Map' entries with specific 'long' Map key values (32-bit boundary) + (ion) Ion Polymorphic deserialization in 2.12 breaks wrt use of Native Type Ids when upgrading from 2.8 + (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser' for invalid UTF-8 String + (cbor) Handle invalid CBOR content like '[0x84]' (incomplete array) + (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in 'EnumAsIonSymbolSerializer' + (ion) Add support for generating IonSexps + (ion) Add support for deserializing IonTimestamps and IonBlobs + (ion) Add 'IonObjectMapper.builderForBinaryWriters()' / '.builderforTextualWriters()' convenience methods + (ion) Enabling pretty-printing fails Ion serialization + (ion) Allow disabling native type ids in IonMapper + (smile) Small bug in byte-alignment for long field names in Smile, symbol table reuse + (ion) Add 'IonFactory.getIonSystem()' accessor + (ion) Optimize 'IonParser.getNumberType()' using 'IonReader.getIntegerSize()' + (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING' for lenient handling of Unicode surrogate pairs on writing + (cbor) Add support for decoding unassigned 'simple values' (type 7) + Add Gradle Module Metadata (https://blog.gradle.org/alignment-with-gradle-module-metadata) + (avro) Cache record names to avoid hitting class loader + (avro) Avro null deserialization + (ion) Add 'IonFactory.getIonSystem()' accessor + (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to support binary writes, fix 'java.util.UUID' representation + (ion) Allow 'IonObjectMapper' with class name annotation introspector to deserialize generic subtypes + Remove dependencies upon Jackson 1.X and Avro's JacksonUtils + 'jackson-databind' should not be full dependency for (cbor, protobuf, smile) modules + 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not write most compact form for all integers + 'AvroGenerator' overrides 'getOutputContext()' properly + (ion) Add 'IonFactory.getIonSystem()' accessor + (avro) Fix schema evolution involving maps of non-scalar + (protobuf) Parsing a protobuf message doesn't properly skip unknown fields + (ion) IonObjectMapper close()s the provided IonWriter unnecessarily + ion-java dependency 1.4.0 -> 1.5.1 Important SUSE bug 1177616 SUSE bug 1182481 SUSE bug 1197132 CVE-2020-25649 CVE-2020-28491 CVE-2020-36518 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core fixes the following issues: Security issues fixed: - CVE-2020-36518: Fixed a Java stack overflow exception and denial of service via a large depth of nested objects in jackson-databind. (bsc#1197132) - CVE-2020-25649: Fixed an insecure entity expansion in jackson-databind which was vulnerable to XML external entity (XXE). (bsc#1177616) - CVE-2020-28491: Fixed a bug which could cause `java.lang.OutOfMemoryError` exception in jackson-dataformats-binary. (bsc#1182481) Non security fixes: jackson-annotations - update from version 2.10.2 to version 2.13.0: + Build with source/target levels 8 + Add 'mvnw' wrapper + 'JsonSubType.Type' should accept array of names + Jackson version alignment with Gradle 6 + Add '@JsonIncludeProperties' + Add '@JsonTypeInfo(use=DEDUCTION)' + Ability to use '@JsonAnyGetter' on fields + Add '@JsonKey' annotation + Allow repeated calls to 'SimpleObjectIdResolver.bindItem()' for same mapping + Add 'namespace' property for '@JsonProperty' (for XML module) + Add target 'ElementType.ANNOTATION_TYPE' for '@JsonEnumDefaultValue' + 'JsonPattern.Value.pattern' retained as '', never (accidentally) exposed as 'null' + Rewrite to use `ant` for building in order to be able to use it in packages that have to be built before maven jackson-bom - update from version 2.10.2 to version 2.13.0: + Configure moditect plugin with '<jvmVersion>11</jvmVersion>' + jackson-bom manages the version of 'junit:junit' + Drop 'jackson-datatype-hibernate3' (support for Hibernate 3.x datatypes) + Removed 'jakarta' classifier variants of JAXB/JSON-P/JAX-RS modules due to the addition of new Jakarta artifacts (Jakarta-JSONP, Jakarta-xmlbind-annotations, Jakarta-rs-providers) + Add version for 'jackson-datatype-jakarta-jsonp' module (introduced after 2.12.2) + Add (beta) version for 'jackson-dataformat-toml' + Jakarta 9 artifact versions are missing from jackson-bom + Add default settings for 'gradle-module-metadata-maven-plugin' (gradle metadata) + Add default settings for 'build-helper-maven-plugin' + Drop 'jackson-module-scala_2.10' entry (not released for Jackson 2.12 or later) + Add override for 'version.plugin.bundle' (for 5.1.1) to help build on JDK 15+ + Add missing version for jackson-datatype-eclipse-collections jackson-core - update from version 2.10.2 to version 2.13.0: + Build with source and target levels 8 + Misleading exception for input source when processing byte buffer with start offset + Escape contents of source document snippet for 'JsonLocation._appendSourceDesc()' + Add 'StreamWriteException' type to eventually replace 'JsonGenerationException' + Replace 'getCurrentLocation()'/'getTokenLocation()' with 'currentLocation()'/'currentTokenLocation()' in 'JsonParser' + Replace 'JsonGenerator.writeObject()' (and related) with 'writePOJO()' + Replace 'getCurrentValue()'/'setCurrentValue()' with 'currentValue()'/'assignCurrentValue()' in 'JsonParser'/'JsonGenerator + Introduce O(n^1.5) BigDecimal parser implementation + ByteQuadsCanonicalizer.addName(String, int, int) has incorrect handling for case of q2 == null + UTF32Reader ArrayIndexOutOfBoundsException + Improve exception/JsonLocation handling for binary content: don't show content, include byte offset + Fix an issue with the TokenFilter unable to ignore properties when deserializing. + Optimize array allocation by 'JsonStringEncoder' + Add 'mvnw' wrapper + (partial) Optimize array allocation by 'JsonStringEncoder' + Add back accidentally removed 'JsonStringEncoder' related methods in 'BufferRecyclers' (like 'getJsonStringEncoder()') + 'ArrayOutOfBoundException' at 'WriterBasedJsonGenerator.writeString(Reader, int)' + Allow 'optional-padding' for 'Base64Variant' + More customizable TokenFilter inclusion (using 'Tokenfilter.Inclusion') + Publish Gradle Module Metadata + Add 'StreamReadCapability' for further format-based/format-agnostic handling improvements + Add 'JsonParser.isExpectedNumberIntToken()' convenience method + Add 'StreamWriteCapability' for further format-based/format-agnostic handling improvements + Add 'JsonParser.getNumberValueExact()' to allow precision-retaining buffering + Limit initial allocated block size by 'ByteArrayBuilder' to max block size + Add 'JacksonException' as parent class of 'JsonProcessingException' + Make 'JsonWriteContext.reset()' and 'JsonReadContext.reset()' methods public + Deprecate 'JsonParser.getCurrentTokenId()' (use '#currentTokenId()' instead) + Full 'LICENSE' included in jar for easier access by compliancy tools + Fix NPE in 'writeNumber(String)' method of 'UTF8JsonGenerator', 'WriterBasedJsonGenerator' + Add a String Array write method in the Streaming API + Synchronize variants of 'JsonGenerator#writeNumberField' with 'JsonGenerator#writeNumber' + Add JsonGenerator#writeNumber(char[], int, int) method + Do not clear aggregated contents of 'TextBuffer' when 'releaseBuffers()' called + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)' + Optionally allow leading decimal in float tokens + Rewrite to use ant for building in order to be able to use it in packages that have to be built before maven + Parsing JSON with 'ALLOW_MISSING_VALUE' enabled results in endless stream of 'VALUE_NULL' tokens + Handle case when system property access is restricted + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)' + DataFormatMatcher#getMatchedFormatName throws NPE when no match exists + 'JsonParser.getCurrentLocation()' byte/char offset update incorrectly for big payloads jackson-databind - update from version 2.10.5.1 to version 2.13.0: + '@JsonValue' with integer for enum does not deserialize correctly + 'AnnotatedMethod.getValue()/setValue()' doesn't have useful exception message + Add 'DatabindException' as intermediate subtype of 'JsonMappingException' + Jackson does not support deserializing new Java 9 unmodifiable collections + Allocate TokenBuffer instance via context objects (to allow format-specific buffer types) + Add mechanism for setting default 'ContextAttributes' for 'ObjectMapper' + Add 'DeserializationContext.readTreeAsValue()' methods for more convenient conversions for deserializers to use + Clean up support of typed 'unmodifiable', 'singleton' Maps/Sets/Collections + Extend internal bitfield of 'MapperFeature' to be 'long' + Add 'removeMixIn()' method in 'MapperBuilder' + Backport 'MapperBuilder' lambda-taking methods: 'withConfigOverride()', 'withCoercionConfig()', 'withCoercionConfigDefaults()' + configOverrides(boolean.class) silently ignored, whereas .configOverride(Boolean.class) works for both primitives and boxed boolean values + Dont track unknown props in buffer if 'ignoreAllUnknown' is true + Should allow deserialization of java.time types via opaque 'JsonToken.VALUE_EMBEDDED_OBJECT' + Optimize 'AnnotatedConstructor.call()' case by passing explicit null + Add AnnotationIntrospector.XmlExtensions interface for decoupling javax dependencies + Custom SimpleModule not included in list returned by ObjectMapper.getRegisteredModuleIds() after registration + Use more limiting default visibility settings for JDK types (java.*, javax.*) + Deep merge for 'JsonNode' using 'ObjectReader.readTree()' + IllegalArgumentException: Conflicting setter definitions for property with more than 2 setters + Serializing java.lang.Thread fails on JDK 11 and above + String-based 'Map' key deserializer is not deterministic when there is no single arg constructor + Add ArrayNode#set(int index, primitive_type value) + JsonStreamContext 'currentValue' wrongly references to '@JsonTypeInfo' annotated object + DOM 'Node' serialization omits the default namespace declaration + Support 'suppressed' property when deserializing 'Throwable' + 'AnnotatedMember.equals()' does not work reliably + Add 'MapperFeature.APPLY_DEFAULT_VALUES', initially for Scala module + For an absent property Jackson injects 'NullNode' instead of 'null' to a JsonNode-typed constructor argument of a '@ConstructorProperties'-annotated constructor + 'XMLGregorianCalendar' doesn't work with default typing + Content 'null' handling not working for root values + StdDeserializer rejects blank (all-whitespace) strings for ints + 'USE_BASE_TYPE_AS_DEFAULT_IMPL' not working with 'DefaultTypeResolverBuilder' + Add PropertyNamingStrategies.UpperSnakeCaseStrategy (and UPPER_SNAKE_CASE constant) + StackOverflowError when serializing JsonProcessingException + Support for BCP 47 'java.util.Locale' serialization/deserialization + String property deserializes null as 'null' for JsonTypeInfo.As.EXISTING_PROPERTY + Can not deserialize json to enum value with Object-/Array-valued input, '@JsonCreator' + Fix to avoid problem with 'BigDecimalNode', scale of 'Integer.MIN_VALUE' + Extend handling of 'FAIL_ON_NULL_FOR_PRIMITIVES' to cover coercion from (Empty) String via 'AsNull' + Add 'mvnw' wrapper + (regression) Factory method generic type resolution does not use Class-bound type parameter + Deserialization of 'empty' subtype with DEDUCTION failed + Merge findInjectableValues() results in AnnotationIntrospectorPair + READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE doesn't work with empty strings + 'TypeFactory' cannot convert 'Collection' sub-type without type parameters to canonical form and back + Fix for [modules-java8#207]: prevent fail on secondary Java 8 date/time types + EXTERNAL_PROPERTY does not work well with '@JsonCreator' and 'FAIL_ON_UNKNOWN_PROPERTIES' + String property deserializes null as 'null' for 'JsonTypeInfo.As.EXTERNAL_PROPERTY' + Property ignorals cause 'BeanDeserializer 'to forget how to read from arrays (not copying '_arrayDelegateDeserializer') + UntypedObjectDeserializer' mixes multiple unwrapped collections (related to #2733) + Two cases of incorrect error reporting about DeserializationFeature + Bug in polymorphic deserialization with '@JsonCreator', '@JsonAnySetter', 'JsonTypeInfo.As.EXTERNAL_PROPERTY' + Polymorphic subtype deduction ignores 'defaultImpl' attribute + MismatchedInputException: Cannot deserialize instance of 'com.fasterxml.jackson.databind.node.ObjectNode' out of VALUE_NULL token + Missing override for 'hasAsKey()' in 'AnnotationIntrospectorPair' + Creator lookup fails with 'InvalidDefinitionException' for conflict between single-double/single-Double arg constructor + 'MapDeserializer' forcing 'JsonMappingException' wrapping even if WRAP_EXCEPTIONS set to false + Auto-detection of constructor-based creator method skipped if there is an annotated factory-based creator method (regression from 2.11) + 'ObjectMapper.treeToValue()' no longer invokes 'JsonDeserializer.getNullValue()' + DeserializationProblemHandler is not invoked when trying to deserialize String + Fix failing 'double' JsonCreators in jackson 2.12.0 + Conflicting in POJOPropertiesCollector when having namingStrategy + Breaking API change in 'BasicClassIntrospector' (2.12.0) + 'JsonNode.requiredAt()' does NOT fail on some path expressions + Exception thrown when 'Collections.synchronizedList()' is serialized with type info, deserialized + Add option to resolve type from multiple existing properties, '@JsonTypeInfo(use=DEDUCTION)' + '@JsonIgnoreProperties' does not prevent Exception Conflicting getter/setter definitions for property + Deserialization Not Working Right with Generic Types and Builders + Add '@JsonIncludeProperties(propertyNames)' (reverse of '@JsonIgnoreProperties') + '@JsonAnyGetter' should be allowed on a field + Allow handling of single-arg constructor as property based by default + Allow case insensitive deserialization of String value into 'boolean'/'Boolean' (esp for Excel) + Allow use of '@JsonFormat(with=JsonFormat.Feature .ACCEPT_CASE_INSENSITIVE_PROPERTIES)' on Class + Abstract class included as part of known type ids for error message when using JsonSubTypes + Distinguish null from empty string for UUID deserialization + 'ReferenceType' does not expose valid containedType + Add 'CoercionConfig[s]' mechanism for configuring allowed coercions + 'JsonProperty.Access.READ_ONLY' does not work with 'getter-as-setter' 'Collection's + Support 'BigInteger' and 'BigDecimal' creators in 'StdValueInstantiator' + 'JsonProperty.Access.READ_ONLY' fails with collections when a property name is specified + 'BigDecimal' precision not retained for polymorphic deserialization + Support use of 'Void' valued properties ('MapperFeature.ALLOW_VOID_VALUED_PROPERTIES') + Explicitly fail (de)serialization of 'java.time.*' types in absence of registered custom (de)serializers + Improve description included in by 'DeserializationContext.handleUnexpectedToken()' + Support for JDK 14 record types ('java.lang.Record') + 'PropertyNamingStrategy' class initialization depends on its subclass, this can lead to class loading deadlock + 'FAIL_ON_IGNORED_PROPERTIES' does not throw on 'READONLY' properties with an explicit name + Add Gradle Module Metadata for version alignment with Gradle 6 + Allow 'JsonNode' auto-convert into 'ArrayNode' if duplicates found (for XML) + Allow values of 'untyped' auto-convert into 'List' if duplicates found (for XML) + Add 'ValueInstantiator.createContextual(...) + Support multiple names in 'JsonSubType.Type' + Disabling 'FAIL_ON_INVALID_SUBTYPE' breaks polymorphic deserialization of Enums + Explicitly fail (de)serialization of 'org.joda.time.*' types in absence of registered custom (de)serializers + Trailing zeros are stripped when deserializing BigDecimal values inside a @JsonUnwrapped property + Extract getter/setter/field name mangling from 'BeanUtil' into pluggable 'AccessorNamingStrategy' + Throw 'InvalidFormatException' instead of 'MismatchedInputException' for ACCEPT_FLOAT_AS_INT coercion failures + Add '@JsonKey' annotation (similar to '@JsonValue') for customizable serialization of Map keys + 'MapperFeature.ACCEPT_CASE_INSENSITIVE_ENUMS' should work for enum as keys + Add support for disabling special handling of 'Creator properties' wrt alphabetic property ordering + Add 'JsonNode.canConvertToExactIntegral()' to indicate whether floating-point/BigDecimal values could be converted to integers losslessly + Improve static factory method generic type resolution logic + Allow preventing 'Enum from integer' coercion using new 'CoercionConfig' system + '@JsonValue' not considered when evaluating inclusion + Make some java platform modules optional + Add support for serializing 'java.sql.Blob' + 'AnnotatedCreatorCollector' should avoid processing synthetic static (factory) methods + Add errorprone static analysis profile to detect bugs at build time + Problem with implicit creator name detection for constructor detection + Add 'BeanDeserializerBase.isCaseInsensitive()' + Refactoring of 'CollectionDeserializer' to solve CSV array handling issues + Full 'LICENSE' included in jar for easier access by compliancy tools + Fix type resolution for static methods (regression in 2.11.3) + '@JsonCreator' on constructor not compatible with '@JsonIdentityInfo', 'PropertyGenerator' + Add debug improvements about 'ClassUtil.getClassMethods()' + Cannot detect creator arguments of mixins for JDK types + Add 'JsonFormat.Shape' awareness for UUID serialization ('UUIDSerializer') + Json serialization fails or a specific case that contains generics and static methods with generic parameters (2.11.1 -> 2.11.2 regression) + 'ObjectMapper.activateDefaultTypingAsProperty()' is not using parameter 'PolymorphicTypeValidator' + Problem deserialization 'raw generic' fields (like 'Map') in 2.11.2 + Fix issues with 'MapLikeType.isTrueMapType()', 'CollectionLikeType.isTrueCollectionType()' + Parser/Generator features not set when using 'ObjectMapper.createParser()', 'createGenerator()' + Polymorphic subtypes not registering on copied ObjectMapper (2.11.1) + Failure to read AnnotatedField value in Jackson 2.11 + 'TypeFactory.constructType()' does not take 'TypeBindings' correctly + Builder Deserialization with JsonCreator Value vs Array + JsonCreator on static method in Enum and Enum used as key in map fails randomly + 'StdSubtypeResolver' is not thread safe (possibly due to copy not being made with 'ObjectMapper.copy()') + 'Conflicting setter definitions for property' exception for 'Map' subtype during deserialization + Fail to deserialize local Records + Rearranging of props when property-based generator is in use leads to incorrect output + Jackson doesn't respect 'CAN_OVERRIDE_ACCESS_MODIFIERS=false' for deserializer properties + 'DeserializationFeature.UNWRAP_SINGLE_VALUE_ARRAYS' don't support 'Map' type field + JsonParser from MismatchedInputException cannot getText() for floating-point value + i-I case conversion problem in Turkish locale with case-insensitive deserialization + '@JsonInject' fails on trying to find deserializer even if inject-only + Polymorphic deserialization should handle case-insensitive Type Id property name if 'MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES' is enabled + TreeTraversingParser and UTF8StreamJsonParser create contexts differently + Support use of '@JsonAlias' for enum values + 'declaringClass' of 'enum-as-POJO' not removed for 'ObjectMapper' with a naming strategy + Fix 'JavaType.isEnumType()' to support sub-classes + BeanDeserializerBuilder Protected Factory Method for Extension + Support '@JsonSerialize(keyUsing)' and '@JsonDeserialize(keyUsing)' on Key class + Add 'SerializationFeature.WRITE_SELF_REFERENCES_AS_NULL' + 'ObjectMapper.registerSubtypes(NamedType...)' doesn't allow registering same POJO for two different type ids + 'DeserializationContext.handleMissingInstantiator()' throws 'MismatchedInputException' for non-static inner classes + Incorrect 'JsonStreamContext' for 'TokenBuffer' and 'TreeTraversingParser' + Add 'AnnotationIntrospector.findRenameByField()' to support Kotlin's 'is-getter' naming convention + Use '@JsonProperty(index)' for sorting properties on serialization + Java 8 'Optional' not working with '@JsonUnwrapped' on unwrappable type + Add 'MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES' to allow blocking use of unsafe base type for polymorphic deserialization + 'ObjectMapper.setSerializationInclusion()' is ignored for 'JsonAnyGetter' + 'ValueInstantiationException' when deserializing using a builder and 'UNWRAP_SINGLE_VALUE_ARRAYS' + JsonIgnoreProperties(ignoreUnknown = true) does not work on field and method level + Failure to resolve generic type parameters on serialization + JsonParser cannot getText() for input stream on MismatchedInputException + ObjectReader readValue lacks Class<T> argument + Change default textual serialization of 'java.util.Date'/'Calendar' to include colon in timezone offset + Add 'ObjectMapper.createParser()' and 'createGenerator()' methods + Allow serialization of 'Properties' with non-String values + Add new factory method for creating custom 'EnumValues' to pass to 'EnumDeserializer + 'IllegalArgumentException' thrown for mismatched subclass deserialization + Add convenience methods for creating 'List', 'Map' valued 'ObjectReader's (ObjectMapper.readerForListOf()) + 'SerializerProvider.findContentValueSerializer()' methods jackson-dataformats-binary - update from version 2.10.1 to version 2.13.0: + (cbor) Should validate UTF-8 multi-byte validity for short decode path too + (ion) Deprecate 'CloseSafeUTF8Writer', remove use + (smile) Make 'SmileFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES' + (cbor) Make 'CBORFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES' + (cbor) Handle case of BigDecimal with Integer.MIN_VALUE for scale gracefully + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) + (cbor) Another uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) + (smile) Add 'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient handling of broken Unicode surrogate pairs on writing + (avro) Add 'logicalType' support for some 'java.time' types; add 'AvroJavaTimeModule' for native ser/deser + Support base64 strings in 'getBinaryValue()' for CBOR and Smile + (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name + (avro) Generate logicalType switch + (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name + (ion) 'jackson-dataformat-ion' does not handle null.struct deserialization correctly + 'Ion-java' dep 1.4.0 -> 1.8.0 + Minor change to Ion module registration names (fully-qualified) + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) + (cbor) Uncaught exception in CBORParser._findDecodedFromSymbols() (by ossfuzzer) + (smile) Uncaught validation problem wrt Smile 'BigDecimal' type + (smile) ArrayIndexOutOfBoundsException for malformed Smile header + (cbor) Failed to handle case of alleged String with length of Integer.MAX_VALUE + (smile) Allocate byte[] lazily for longer Smile binary data payloads + (cbor) CBORParser need to validate zero-length byte[] for BigInteger + (smile) Handle invalid chunked-binary-format length gracefully + (smile) Allocate byte[] lazily for longer Smile binary data payloads (7-bit encoded) + (smile) ArrayIndexOutOfBoundsException in SmileParser._decodeShortUnicodeValue() + (smile) Handle sequence of Smile header markers without recursion + (cbor) CBOR loses 'Map' entries with specific 'long' Map key values (32-bit boundary) + (ion) Ion Polymorphic deserialization in 2.12 breaks wrt use of Native Type Ids when upgrading from 2.8 + (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser' for invalid UTF-8 String + (cbor) Handle invalid CBOR content like '[0x84]' (incomplete array) + (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in 'EnumAsIonSymbolSerializer' + (ion) Add support for generating IonSexps + (ion) Add support for deserializing IonTimestamps and IonBlobs + (ion) Add 'IonObjectMapper.builderForBinaryWriters()' / '.builderforTextualWriters()' convenience methods + (ion) Enabling pretty-printing fails Ion serialization + (ion) Allow disabling native type ids in IonMapper + (smile) Small bug in byte-alignment for long field names in Smile, symbol table reuse + (ion) Add 'IonFactory.getIonSystem()' accessor + (ion) Optimize 'IonParser.getNumberType()' using 'IonReader.getIntegerSize()' + (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING' for lenient handling of Unicode surrogate pairs on writing + (cbor) Add support for decoding unassigned 'simple values' (type 7) + Add Gradle Module Metadata (https://blog.gradle.org/alignment-with-gradle-module-metadata) + (avro) Cache record names to avoid hitting class loader + (avro) Avro null deserialization + (ion) Add 'IonFactory.getIonSystem()' accessor + (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to support binary writes, fix 'java.util.UUID' representation + (ion) Allow 'IonObjectMapper' with class name annotation introspector to deserialize generic subtypes + Remove dependencies upon Jackson 1.X and Avro's JacksonUtils + 'jackson-databind' should not be full dependency for (cbor, protobuf, smile) modules + 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not write most compact form for all integers + 'AvroGenerator' overrides 'getOutputContext()' properly + (ion) Add 'IonFactory.getIonSystem()' accessor + (avro) Fix schema evolution involving maps of non-scalar + (protobuf) Parsing a protobuf message doesn't properly skip unknown fields + (ion) IonObjectMapper close()s the provided IonWriter unnecessarily + ion-java dependency 1.4.0 -> 1.5.1 Important SUSE bug 1177616 SUSE bug 1182481 SUSE bug 1197132 CVE-2020-25649 CVE-2020-28491 CVE-2020-36518 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 jackson-databind-2.13.4.2-150200.3.12.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for jackson-databind fixes the following issues: Update to version 2.13.4.2: - CVE-2022-42003: Fixed missing check in primitive value deserializers to avoid deep wrapper array nesting wrt 'UNWRAP_SINGLE_VALUE_ARRAYS' (bsc#1204370). - CVE-2022-42004: Fixed missing check in 'BeanDeserializer._deserializeFromArray()' to prevent use of deeply nested arrays (bsc#1204369). Important SUSE bug 1204369 SUSE bug 1204370 CVE-2022-42003 CVE-2022-42004 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jas_icctxtdesc_input (bsc#1117508). - CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507). Moderate SUSE bug 1117507 SUSE bug 1117508 CVE-2018-19540 CVE-2018-19541 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 java-11-openjdk-11.0.19.0-150000.3.96.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.9-11 (October 2020 CPU, bsc#1177943) * New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector * Security fixes + JDK-8233624: Enhance JNI linkage + JDK-8236196: Improve string pooling + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts + JDK-8237995, CVE-2020-14782: Enhance certificate processing + JDK-8240124: Better VM Interning + JDK-8241114, CVE-2020-14792: Better range handling + JDK-8242680, CVE-2020-14796: Improved URI Support + JDK-8242685, CVE-2020-14797: Better Path Validation + JDK-8242695, CVE-2020-14798: Enhanced buffer support + JDK-8243302: Advanced class supports + JDK-8244136, CVE-2020-14803: Improved Buffer supports + JDK-8244479: Further constrain certificates + JDK-8244955: Additional Fix for JDK-8240124 + JDK-8245407: Enhance zoning of times + JDK-8245412: Better class definitions + JDK-8245417: Improve certificate chain handling + JDK-8248574: Improve jpeg processing + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit + JDK-8253019: Enhanced JPEG decoding * Other changes + JDK-6532025: GIF reader throws misleading exception with truncated images + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/ /PDialogTest.java needs update by removing an infinite loop + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/ /Test8017492.java fails + JDK-8062947: Fix exception message to correctly represent LDAP connection failure + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/ /CloseServerSocket.java fails intermittently with Address already in use + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on DeadServerNoTimeoutTest is incorrect + JDK-8160768: Add capability to custom resolve host/domain names within the default JNDI LDAP provider + JDK-8172404: Tools should warn if weak algorithms are used before restricting them + JDK-8193367: Annotated type variable bounds crash javac + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java fails intermittently: Connection reset + JDK-8203026: java.rmi.NoSuchObjectException: no such object in table + JDK-8203281: [Windows] JComboBox change in ui when editor.setBorder() is called + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to resolve_wk_klass + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and JdbExprTest.sh fail due to timeout + JDK-8203928: [Test] Convert non-JDB scaffolding serviceability shell script tests to java + JDK-8204963: javax.swing.border.TitledBorder has a memory leak + JDK-8204994: SA might fail to attach to process with 'Windbg Error: WaitForEvent failed' + JDK-8205534: Remove SymbolTable dependency from serviceability agent + JDK-8206309: Tier1 SA tests fail + JDK-8208281: java/nio/channels/ /AsynchronousSocketChannel/Basic.java timed out + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java version - step1 + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh is incorrect + JDK-8209342: Problemlist SA tests on Solaris due to Error attaching to process: Can't create thread_db agent! + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java should be marked as headful + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with timeout + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java version - step2 + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with ZGC + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/ /ap10t001/TestDescription.java failed with ObjectFree: GetCurrentThreadCpuTimerInfo returned unexpected error code + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java version - step3 + JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related tests + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails with waitForPrompt timed out after 60 seconds + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should clarify which output is the pending reply after a timeout + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java version - step4 + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh test + JDK-8211694: JShell: Redeclared variable should be reset + JDK-8212200: assert when shared java.lang.Object is redefined by JVMTI agent + JDK-8212629: [TEST] wrong breakpoint in test/jdk/com/sun/jdi/DeferredStepTest + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57) - unexpected. lastLine=52, minLine=52, maxLine=55 + JDK-8212807: tools/jar/multiRelease/Basic.java times out + JDK-8213182: Minimal VM build failure after JDK-8212200 (assert when shared java.lang.Object is redefined by JVMTI agent) + JDK-8213214: Set -Djava.io.tmpdir= when running tests + JDK-8213275: ReplaceCriticalClasses.java fails with jdk.internal.vm.PostVMInitHook not found + JDK-8213574: Deadlock in string table expansion when dumping lots of CDS classes + JDK-8213703: LambdaConversionException: Invalid receiver type not a subtype of implementation type interface + JDK-8214074: Ghash optimization using AVX instructions + JDK-8214491: Upgrade to JLine 3.9.0 + JDK-8214797: TestJmapCoreMetaspace.java timed out + JDK-8215243: JShell tests failing intermitently with 'Problem cleaning up the following threads:' + JDK-8215244: jdk/jshell/ToolBasicTest.java testHistoryReference failed + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash optimization using AVX instructions) + JDK-8215438: jshell tool: Ctrl-D causes EOF + JDK-8216021: RunTest.gmk might set concurrency level to 1 on Windows + JDK-8216974: HttpConnection not returned to the pool after 204 response + JDK-8218948: SimpleDateFormat :: format - Zone Names are not reflected correctly during run time + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs + JDK-8221658: aarch64: add necessary predicate for ubfx patterns + JDK-8221759: Crash when completing 'java.io.File.path' + JDK-8221918: runtime/SharedArchiveFile/serviceability/ /ReplaceCriticalClasses.java fails: Shared archive not found + JDK-8222074: Enhance auto vectorization for x86 + JDK-8222079: Don't use memset to initialize fields decode_env constructor in disassembler.cpp + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely on hostname command + JDK-8223688: JShell: crash on the instantiation of raw anonymous class + JDK-8223777: In posix_spawn mode, failing to exec() jspawnhelper does not result in an error + JDK-8223940: Private key not supported by chosen signature algorithm + JDK-8224184: jshell got IOException at exiting with AIX + JDK-8224234: compiler/codegen/TestCharVect2.java fails in test_mulc + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws NullPointerException + JDK-8225625: AES Electronic Codebook (ECB) encryption and decryption optimization using AVX512 + VAES instructions + JDK-8226536: Catch OOM from deopt that fails rematerializing objects + JDK-8226575: OperatingSystemMXBean should be made container aware + JDK-8226697: Several tests which need the @key headful keyword are missing it. + JDK-8226809: Circular reference in printed stack trace is not correctly indented & ambiguous + JDK-8227059: sun/security/tools/keytool/ /DefaultSignatureAlgorithm.java timed out + JDK-8227269: Slow class loading when running with JDWP + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to 'exitValue = 6' + JDK-8228448: Jconsole can't connect to itself + JDK-8228967: Trust/Key store and SSL context utilities for tests + JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow + JDK-8229815: Upgrade Jline to 3.12.1 + JDK-8230000: some httpclients testng tests run zero test + JDK-8230002: javax/xml/jaxp/unittest/transform/ /SecureProcessingTest.java runs zero test + JDK-8230010: Remove jdk8037819/BasicTest1.java + JDK-8230094: CCE in createXMLEventWriter(Result) over an arbitrary XMLStreamWriter + JDK-8230402: Allocation of compile task fails with assert: 'Leaking compilation tasks?' + JDK-8230767: FlightRecorderListener returns null recording + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to test/jdk/java/util/zip/EntryCount64k.java + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread + JDK-8231586: enlarge encoding space for OopMapValue offsets + JDK-8231953: Wrong assumption in assertion in oop::register_oop + JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes + JDK-8232083: Minimal VM is broken after JDK-8231586 + JDK-8232161: Align some one-way conversion in MS950 charset with Windows + JDK-8232855: jshell missing word in /help help + JDK-8233027: OopMapSet::all_do does oms.next() twice during iteration + JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR + JDK-8233386: Initialize NULL fields for unused decorations + JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result + JDK-8233686: XML transformer uses excessive amount of memory + JDK-8233741: AES Countermode (AES-CTR) optimization using AVX512 + VAES instructions + JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment + JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose + JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater() + JDK-8234058: runtime/CompressedOops/ /CompressedClassPointers.java fails with 'Narrow klass base: 0x0000000000000000' missing from stdout/stderr + JDK-8234149: Several regression tests do not dispose Frame at end + JDK-8234347: 'Turkey' meta time zone does not generate composed localized names + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/ /bug6980209.java fails in linux nightly + JDK-8234535: Cross compilation fails due to missing CFLAGS for the BUILD_CC + JDK-8234541: C1 emits an empty message when it inlines successfully + JDK-8234687: change javap reporting on unknown attributes + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK 11 + JDK-8236548: Localized time zone name inconsistency between English and other locales + JDK-8236617: jtreg test containers/docker/ /TestMemoryAwareness.java fails after 8226575 + JDK-8237182: Update copyright header for shenandoah and epsilon files + JDK-8237888: security/infra/java/security/cert/ /CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval + JDK-8237977: Further update javax/net/ssl/compatibility/Compatibility.java + JDK-8238270: java.net HTTP/2 client does not decrease stream count when receives 204 response + JDK-8238284: [macos] Zero VM build fails due to an obvious typo + JDK-8238380: java.base/unix/native/libjava/childproc.c 'multiple definition' link errors with GCC10 + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c 'multiple definition' link errors with GCC10 + JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link errors with GCC10 + JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits with non-zero code + JDK-8239083: C1 assert(known_holder == NULL || (known_holder->is_instance_klass() && (!known_holder->is_interface() || ((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())), 'should be non-static concrete method'); + JDK-8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD + JDK-8240169: javadoc fails to link to non-modular api docs + JDK-8240295: hs_err elapsed time in seconds is not accurate enough + JDK-8240360: NativeLibraryEvent has wrong library name on Linux + JDK-8240676: Meet not symmetric failure when running lucene on jdk8 + JDK-8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support + JDK-8241065: Shenandoah: remove leftover code after JDK-8231086 + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is failing on 32bit Windows + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier: java.lang.NullPointerException + JDK-8241138: http.nonProxyHosts=* causes StringIndexOutOfBoundsException in DefaultProxySelector + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java fails with OOME + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure + JDK-8241750: x86_32 build failure after JDK-8227269 + JDK-8242184: CRL generation error with RSASSA-PSS + JDK-8242283: Can't start JVM when java home path includes non-ASCII character + JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array + JDK-8243029: Rewrite javax/net/ssl/compatibility/ /Compatibility.java with a flexible interop test framework + JDK-8243138: Enhance BaseLdapServer to support starttls extended request + JDK-8243320: Add SSL root certificates to Oracle Root CA program + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program + JDK-8243389: enhance os::pd_print_cpu_info on linux + JDK-8243453: java --describe-module failed with non-ASCII module name under non-UTF8 environment + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp + JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on HiDPI screens (Windows) + JDK-8244087: 2020-04-24 public suffix list update + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest release 1.8.26 + JDK-8244164: AArch64: jaotc generates incorrect code for compressed OOPs with non-zero heap base + JDK-8244196: adjust output in os_linux + JDK-8244225: stringop-overflow warning on strncpy call from compile_the_world_in + JDK-8244287: JFR: Methods samples have line number 0 + JDK-8244703: 'platform encoding not initialized' exceptions with debugger, JNI + JDK-8244719: CTW: C2 compilation fails with 'assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it' + JDK-8244729: Shenandoah: remove resolve paths from SBSA::generate_shenandoah_lrb + JDK-8244763: Update --release 8 symbol information after JSR 337 MR3 + JDK-8244818: Java2D Queue Flusher crash while moving application window to external monitor + JDK-8245151: jarsigner should not raise duplicate warnings on verification + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9 + JDK-8245714: 'Bad graph detected in build_loop_late' when loads are pinned on loop limit check uncommon branch + JDK-8245801: StressRecompilation triggers assert 'redundunt OSR recompilation detected. memory leak in CodeCache!' + JDK-8245832: JDK build make-static-libs should build all JDK libraries + JDK-8245880: Shenandoah: check class unloading flag early in concurrent code root scan + JDK-8245981: Upgrade to jQuery 3.5.1 + JDK-8246027: Minimal fastdebug build broken after JDK-8245801 + JDK-8246094: [macos] Sound Recording and playback is not working + JDK-8246153: TestEliminateArrayCopy fails with -XX:+StressReflectiveCode + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest fails with AssertionError + JDK-8246203: Segmentation fault in verification due to stack overflow with -XX:+VerifyIterativeGVN + JDK-8246330: Add TLS Tests for Legacy ECDSA curves + JDK-8246453: TestClone crashes with 'all collected exceptions must come from the same place' + JDK-8247246: Add explicit ResolvedJavaType.link and expose presence of default methods + JDK-8247350: [aarch64] assert(false) failed: wrong size of mach node + JDK-8247502: PhaseStringOpts crashes while optimising effectively dead code + JDK-8247615: Initialize the bytes left for the heap sampler + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV in SBC2Support::pin_and_expand + JDK-8247874: Replacement in VersionProps.java.template not working when --with-vendor-bug-url contains '&' + JDK-8247979: aarch64: missing side effect of killing flags for clearArray_reg_reg + JDK-8248214: Add paddings for TaskQueueSuper to reduce false-sharing cache contention + JDK-8248219: aarch64: missing memory barrier in fast_storefield and fast_accessfield + JDK-8248348: Regression caused by the update to BCEL 6.0 + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to jtreg 5.1 + JDK-8248495: [macos] zerovm is broken due to libffi headers location + JDK-8248851: CMS: Missing memory fences between free chunk check and klass read + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on Windows + JDK-8249159: Downport test rework for SSLSocketTemplate from 8224650 + JDK-8249215: JFrame::setVisible crashed with -Dfile.encoding=UTF-8 on Japanese Windows. + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not highlighted in GTKLookAndFeel + JDK-8249255: Build fails if source code in cygwin home dir + JDK-8249277: TestVerifyIterativeGVN.java is failing with timeout in OpenJDK 11 + JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList + JDK-8249560: Shenandoah: Fix racy GC request handling + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets + JDK-8250609: C2 crash in IfNode::fold_compares + JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics + JDK-8250755: Better cleanup for jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java + JDK-8250787: Provider.put no longer registering aliases in FIPS env + JDK-8250826: jhsdb does not work with coredump which comes from Substrate VM + JDK-8250827: Shenandoah: needs to reset/finish StringTable's dead count before/after parallel walk + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds + JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java test failure + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U + JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java + JDK-8251487: Shenandoah: missing detail timing tracking for final mark cleaning phase + JDK-8252120: compiler/oracle/TestCompileCommand.java misspells 'occured' + JDK-8252157: JDK-8231209 11u backport breaks jmm binary compatibility + JDK-8252258: [11u] JDK-8242154 changes the default vendor + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after downport of 8234011 + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10) in JDK 11 + JDK-8253283: [11u] Test build/translations/ /VerifyTranslations.java failing after JDK-8252258 + JDK-8253813: Backout JDK-8244287 from 11u: it causes several crashes + Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)' introduced in jdk 11.0.9 Moderate SUSE bug 1177943 CVE-2020-14779 CVE-2020-14781 CVE-2020-14782 CVE-2020-14792 CVE-2020-14796 CVE-2020-14797 CVE-2020-14798 CVE-2020-14803 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 java-17-openjdk-17.0.7.0-150400.3.18.2 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-17-openjdk fixes the following issues: Update to upstrem tag jdk-17.0.7+7 (April 2023 CPU) Security fixes: - CVE-2023-21930: Fixed AES support (bsc#1210628). - CVE-2023-21937: Fixed String platform support (bsc#1210631). - CVE-2023-21938: Fixed runtime support (bsc#1210632). - CVE-2023-21939: Fixed Swing platform support (bsc#1210634). - CVE-2023-21954: Fixed object reclamation process (bsc#1210635). - CVE-2023-21967: Fixed TLS session negotiation (bsc#1210636). - CVE-2023-21968: Fixed path handling (bsc#1210637). Other fixes: - Fixed socket setTrafficClass not working for IPv4 connections when IPv6 is enabled (bsc#1209333). Important SUSE bug 1209333 SUSE bug 1210628 SUSE bug 1210631 SUSE bug 1210632 SUSE bug 1210634 SUSE bug 1210635 SUSE bug 1210636 SUSE bug 1210637 CVE-2023-21930 CVE-2023-21937 CVE-2023-21938 CVE-2023-21939 CVE-2023-21954 CVE-2023-21967 CVE-2023-21968 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for json-c fixes the following issues: - CVE-2020-12762: Fixed integer overflow and out-of-bounds write. (bsc#1171479) Important SUSE bug 1171479 CVE-2020-12762 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 kdump-1.0.2+git42.ge1e25ed-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the kdump-1.0.2+git42.ge1e25ed-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-5759 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 kernel-64kb-5.14.21-150500.53.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the kernel-64kb-5.14.21-150500.53.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-3695 CVE-2017-1000251 CVE-2017-12153 CVE-2017-13080 CVE-2017-14051 CVE-2017-16536 CVE-2017-16537 CVE-2017-16646 CVE-2017-16648 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-10323 CVE-2018-12232 CVE-2018-13053 CVE-2018-20669 CVE-2019-0154 CVE-2019-0155 CVE-2019-10220 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-14615 CVE-2019-14814 CVE-2019-14815 CVE-2019-14816 CVE-2019-14895 CVE-2019-14896 CVE-2019-14897 CVE-2019-14901 CVE-2019-15030 CVE-2019-15031 CVE-2019-15098 CVE-2019-15099 CVE-2019-15290 CVE-2019-15291 CVE-2019-15504 CVE-2019-16231 CVE-2019-16232 CVE-2019-16233 CVE-2019-16234 CVE-2019-17133 CVE-2019-17666 CVE-2019-18198 CVE-2019-18660 CVE-2019-18683 CVE-2019-18786 CVE-2019-18808 CVE-2019-18809 CVE-2019-18811 CVE-2019-18812 CVE-2019-18813 CVE-2019-18814 CVE-2019-19037 CVE-2019-19043 CVE-2019-19044 CVE-2019-19045 CVE-2019-19046 CVE-2019-19047 CVE-2019-19048 CVE-2019-19049 CVE-2019-19050 CVE-2019-19051 CVE-2019-19052 CVE-2019-19053 CVE-2019-19054 CVE-2019-19055 CVE-2019-19056 CVE-2019-19057 CVE-2019-19058 CVE-2019-19060 CVE-2019-19061 CVE-2019-19062 CVE-2019-19063 CVE-2019-19064 CVE-2019-19065 CVE-2019-19066 CVE-2019-19067 CVE-2019-19068 CVE-2019-19069 CVE-2019-19070 CVE-2019-19071 CVE-2019-19072 CVE-2019-19073 CVE-2019-19074 CVE-2019-19075 CVE-2019-19077 CVE-2019-19078 CVE-2019-19080 CVE-2019-19081 CVE-2019-19082 CVE-2019-19083 CVE-2019-19241 CVE-2019-19252 CVE-2019-19332 CVE-2019-19338 CVE-2019-19447 CVE-2019-19462 CVE-2019-19523 CVE-2019-19524 CVE-2019-19525 CVE-2019-19526 CVE-2019-19528 CVE-2019-19529 CVE-2019-19532 CVE-2019-19533 CVE-2019-19534 CVE-2019-19602 CVE-2019-19767 CVE-2019-19768 CVE-2019-19769 CVE-2019-19770 CVE-2019-19807 CVE-2019-19922 CVE-2019-19947 CVE-2019-19965 CVE-2019-20422 CVE-2019-20810 CVE-2019-20812 CVE-2019-3016 CVE-2019-8912 CVE-2020-0110 CVE-2020-0305 CVE-2020-0404 CVE-2020-0427 CVE-2020-0431 CVE-2020-0432 CVE-2020-0444 CVE-2020-0465 CVE-2020-0466 CVE-2020-0543 CVE-2020-10135 CVE-2020-10690 CVE-2020-10711 CVE-2020-10732 CVE-2020-10751 CVE-2020-10757 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10773 CVE-2020-10781 CVE-2020-10942 CVE-2020-11494 CVE-2020-11608 CVE-2020-11668 CVE-2020-11884 CVE-2020-12351 CVE-2020-12352 CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-12373 CVE-2020-12464 CVE-2020-12465 CVE-2020-12652 CVE-2020-12653 CVE-2020-12654 CVE-2020-12655 CVE-2020-12656 CVE-2020-12657 CVE-2020-12659 CVE-2020-12769 CVE-2020-12770 CVE-2020-12771 CVE-2020-12888 CVE-2020-13143 CVE-2020-13974 CVE-2020-14314 CVE-2020-14331 CVE-2020-14351 CVE-2020-14356 CVE-2020-14385 CVE-2020-14386 CVE-2020-14390 CVE-2020-14416 CVE-2020-15393 CVE-2020-15436 CVE-2020-15437 CVE-2020-15780 CVE-2020-16119 CVE-2020-16120 CVE-2020-16166 CVE-2020-1749 CVE-2020-24490 CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-2521 CVE-2020-25211 CVE-2020-25212 CVE-2020-25284 CVE-2020-25285 CVE-2020-25639 CVE-2020-25641 CVE-2020-25643 CVE-2020-25645 CVE-2020-25656 CVE-2020-25668 CVE-2020-25669 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2020-25673 CVE-2020-25704 CVE-2020-25705 CVE-2020-26088 CVE-2020-26139 CVE-2020-26141 CVE-2020-26145 CVE-2020-26147 CVE-2020-26558 CVE-2020-27068 CVE-2020-27170 CVE-2020-27171 CVE-2020-27194 CVE-2020-2732 CVE-2020-27673 CVE-2020-27675 CVE-2020-27777 CVE-2020-27786 CVE-2020-27815 CVE-2020-27820 CVE-2020-27825 CVE-2020-27830 CVE-2020-27835 CVE-2020-28374 CVE-2020-28915 CVE-2020-28941 CVE-2020-28974 CVE-2020-29368 CVE-2020-29369 CVE-2020-29370 CVE-2020-29371 CVE-2020-29373 CVE-2020-29568 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-35519 CVE-2020-36158 CVE-2020-36310 CVE-2020-36311 CVE-2020-36312 CVE-2020-36322 CVE-2020-36385 CVE-2020-36386 CVE-2020-36516 CVE-2020-4788 CVE-2020-8428 CVE-2020-8647 CVE-2020-8648 CVE-2020-8649 CVE-2020-8694 CVE-2020-8835 CVE-2020-8992 CVE-2020-9383 CVE-2021-0129 CVE-2021-0342 CVE-2021-0512 CVE-2021-0605 CVE-2021-20177 CVE-2021-20268 CVE-2021-20321 CVE-2021-21781 CVE-2021-22543 CVE-2021-22555 CVE-2021-22600 CVE-2021-23134 CVE-2021-26341 CVE-2021-26930 CVE-2021-26931 CVE-2021-26932 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVE-2021-28038 CVE-2021-28375 CVE-2021-28660 CVE-2021-28688 CVE-2021-28711 CVE-2021-28712 CVE-2021-28713 CVE-2021-28714 CVE-2021-28715 CVE-2021-28950 CVE-2021-28952 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29265 CVE-2021-29647 CVE-2021-29650 CVE-2021-30002 CVE-2021-32399 CVE-2021-33034 CVE-2021-33061 CVE-2021-33135 CVE-2021-33200 CVE-2021-3347 CVE-2021-3348 CVE-2021-33624 CVE-2021-33655 CVE-2021-33909 CVE-2021-3428 CVE-2021-3444 CVE-2021-34556 CVE-2021-34693 CVE-2021-3483 CVE-2021-3489 CVE-2021-3490 CVE-2021-3491 CVE-2021-35039 CVE-2021-3542 CVE-2021-35477 CVE-2021-3573 CVE-2021-3609 CVE-2021-3612 CVE-2021-3640 CVE-2021-3653 CVE-2021-3656 CVE-2021-3659 CVE-2021-3679 CVE-2021-3732 CVE-2021-3739 CVE-2021-3743 CVE-2021-3744 CVE-2021-3753 CVE-2021-37576 CVE-2021-3759 CVE-2021-3760 CVE-2021-3764 CVE-2021-3772 CVE-2021-38160 CVE-2021-38166 CVE-2021-38198 CVE-2021-38204 CVE-2021-38205 CVE-2021-38206 CVE-2021-38207 CVE-2021-38209 CVE-2021-3896 CVE-2021-39685 CVE-2021-39698 CVE-2021-4001 CVE-2021-4002 CVE-2021-4037 CVE-2021-4083 CVE-2021-4090 CVE-2021-41073 CVE-2021-4135 CVE-2021-4148 CVE-2021-4155 CVE-2021-41864 CVE-2021-4197 CVE-2021-4202 CVE-2021-4204 CVE-2021-42252 CVE-2021-42327 CVE-2021-42739 CVE-2021-43056 CVE-2021-43057 CVE-2021-43267 CVE-2021-43389 CVE-2021-43975 CVE-2021-43976 CVE-2021-44733 CVE-2021-44879 CVE-2021-45095 CVE-2021-45402 CVE-2021-45480 CVE-2021-45868 CVE-2022-0001 CVE-2022-0002 CVE-2022-0168 CVE-2022-0171 CVE-2022-0185 CVE-2022-0264 CVE-2022-0322 CVE-2022-0330 CVE-2022-0382 CVE-2022-0435 CVE-2022-0487 CVE-2022-0492 CVE-2022-0494 CVE-2022-0500 CVE-2022-0516 CVE-2022-0617 CVE-2022-0644 CVE-2022-0742 CVE-2022-0847 CVE-2022-0854 CVE-2022-0886 CVE-2022-0995 CVE-2022-0998 CVE-2022-1011 CVE-2022-1012 CVE-2022-1015 CVE-2022-1016 CVE-2022-1048 CVE-2022-1055 CVE-2022-1158 CVE-2022-1184 CVE-2022-1195 CVE-2022-1198 CVE-2022-1199 CVE-2022-1204 CVE-2022-1205 CVE-2022-1263 CVE-2022-1280 CVE-2022-1462 CVE-2022-1508 CVE-2022-1516 CVE-2022-1651 CVE-2022-1652 CVE-2022-1671 CVE-2022-1679 CVE-2022-1729 CVE-2022-1734 CVE-2022-1789 CVE-2022-1836 CVE-2022-1852 CVE-2022-1882 CVE-2022-1966 CVE-2022-1972 CVE-2022-1974 CVE-2022-1975 CVE-2022-1998 CVE-2022-20008 CVE-2022-20132 CVE-2022-20154 CVE-2022-20368 CVE-2022-20369 CVE-2022-21123 CVE-2022-21125 CVE-2022-21127 CVE-2022-21166 CVE-2022-21180 CVE-2022-21499 CVE-2022-21505 CVE-2022-2153 CVE-2022-2196 CVE-2022-22942 CVE-2022-23036 CVE-2022-23037 CVE-2022-23038 CVE-2022-23039 CVE-2022-23040 CVE-2022-23041 CVE-2022-23042 CVE-2022-2318 CVE-2022-23222 CVE-2022-23960 CVE-2022-24122 CVE-2022-24448 CVE-2022-24958 CVE-2022-24959 CVE-2022-25258 CVE-2022-25375 CVE-2022-25636 CVE-2022-2585 CVE-2022-2586 CVE-2022-2588 CVE-2022-2602 CVE-2022-26365 CVE-2022-26373 CVE-2022-2639 CVE-2022-26490 CVE-2022-2663 CVE-2022-26878 CVE-2022-26966 CVE-2022-27223 CVE-2022-28356 CVE-2022-28388 CVE-2022-28389 CVE-2022-28390 CVE-2022-28693 CVE-2022-2873 CVE-2022-28748 CVE-2022-28893 CVE-2022-2905 CVE-2022-29156 CVE-2022-2938 CVE-2022-29581 CVE-2022-29582 CVE-2022-2959 CVE-2022-2964 CVE-2022-2977 CVE-2022-2978 CVE-2022-29900 CVE-2022-29901 CVE-2022-3028 CVE-2022-30594 CVE-2022-3078 CVE-2022-3104 CVE-2022-3105 CVE-2022-3106 CVE-2022-3107 CVE-2022-3108 CVE-2022-3111 CVE-2022-3112 CVE-2022-3113 CVE-2022-3114 CVE-2022-3115 CVE-2022-3169 CVE-2022-3176 CVE-2022-3202 CVE-2022-32250 CVE-2022-32296 CVE-2022-3239 CVE-2022-3303 CVE-2022-3344 CVE-2022-33740 CVE-2022-33741 CVE-2022-33742 CVE-2022-33743 CVE-2022-33981 CVE-2022-3424 CVE-2022-3435 CVE-2022-34918 CVE-2022-3521 CVE-2022-3523 CVE-2022-3524 CVE-2022-3526 CVE-2022-3535 CVE-2022-3542 CVE-2022-3545 CVE-2022-3564 CVE-2022-3565 CVE-2022-3566 CVE-2022-3567 CVE-2022-3577 CVE-2022-3586 CVE-2022-3594 CVE-2022-3619 CVE-2022-3621 CVE-2022-3625 CVE-2022-3628 CVE-2022-3629 CVE-2022-3633 CVE-2022-3635 CVE-2022-3640 CVE-2022-3643 CVE-2022-3646 CVE-2022-3649 CVE-2022-36879 CVE-2022-36946 CVE-2022-3707 CVE-2022-3903 CVE-2022-39188 CVE-2022-39189 CVE-2022-39190 CVE-2022-40476 CVE-2022-40768 CVE-2022-4095 CVE-2022-41218 CVE-2022-4129 CVE-2022-4139 CVE-2022-41674 CVE-2022-41848 CVE-2022-41849 CVE-2022-41850 CVE-2022-41858 CVE-2022-42328 CVE-2022-42329 CVE-2022-42703 CVE-2022-42719 CVE-2022-42720 CVE-2022-42721 CVE-2022-42722 CVE-2022-42895 CVE-2022-42896 CVE-2022-43750 CVE-2022-4378 CVE-2022-4379 CVE-2022-4382 CVE-2022-43945 CVE-2022-45869 CVE-2022-45888 CVE-2022-45934 CVE-2022-4662 CVE-2022-47520 CVE-2022-47929 CVE-2023-0266 CVE-2023-0386 CVE-2023-0468 CVE-2023-1078 CVE-2023-1281 CVE-2023-1380 CVE-2023-1990 CVE-2023-2008 CVE-2023-2019 CVE-2023-22995 CVE-2023-23454 CVE-2023-23455 CVE-2023-23559 CVE-2023-28328 CVE-2023-28466 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). - CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2017-5753: Fixed spectre V1 vulnerability on netlink (bsc#1209547). - CVE-2017-5753: Fixed spectre vulnerability in prlimit (bsc#1209256). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/bluetooth/hci_conn.c (bsc#1209052). - CVE-2023-28466: Fixed race condition that could lead to use-after-free or NULL pointer dereference in do_tls_getsockopt in net/tls/tls_main.c (bsc#1209366). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-1281: Fixed use after free that could lead to privilege escalation in tcindex (bsc#1209634). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829). The following non-security bugs were fixed: - ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes). - alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes) - ALSA: asihpi: check pao in control_message() (git-fixes). - ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes). - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes). - ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes). - ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes). - ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes). - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes). - ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes). - ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes). - ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes). - arch: fix broken BuildID for arm64 and riscv (bsc#1209798). - ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes). - ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes). - arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes) - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes). - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes) - arm64: dts: imx8mp: correct usb clocks (git-fixes) - arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes) - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes) - arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes). - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes). - atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes). - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes). - Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes). - ca8210: fix mac_len negative array access (git-fixes). - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes). - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes). - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes). - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes). - cifs: append path to open_enter trace event (bsc#1193629). - cifs: avoid race conditions with parallel reconnects (bsc#1193629). - cifs: avoid races in parallel reconnects in smb1 (bsc#1193629). - cifs: check only tcon status on tcon related functions (bsc#1193629). - cifs: do not poll server interfaces too regularly (bsc#1193629). - cifs: double lock in cifs_reconnect_tcon() (git-fixes). - cifs: dump pending mids for all channels in DebugData (bsc#1193629). - cifs: empty interface list when server does not support query interfaces (bsc#1193629). - cifs: fix dentry lookups in directory handle cache (bsc#1193629). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629). - cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629). - cifs: Fix smb2_set_path_size() (git-fixes). - cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629). - cifs: generate signkey for the channel that's reconnecting (bsc#1193629). - cifs: get rid of dead check in smb2_reconnect() (bsc#1193629). - cifs: lock chan_lock outside match_session (bsc#1193629). - cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes). - cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629). - cifs: print session id while listing open files (bsc#1193629). - cifs: return DFS root session id in DebugData (bsc#1193629). - cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629). - cifs: use DFS root session instead of tcon ses (bsc#1193629). - clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815). - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815). - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes). - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes). - drm/amdkfd: Fix an illegal memory access (git-fixes). - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes). - drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes). - drm/i915: Remove unused bits of i915_vma/active api (git-fixes). - drm/i915/active: Fix missing debug object activation (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/display: clean up comments (git-fixes). - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes). - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes). - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes). - drm/i915/gt: perform uc late init after probe error injection (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes). - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes). - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes). - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes). - fbdev: au1200fb: Fix potential divide by zero (git-fixes). - fbdev: intelfb: Fix potential divide by zero (git-fixes). - fbdev: lxfb: Fix potential divide by zero (git-fixes). - fbdev: nvidia: Fix potential divide by zero (git-fixes). - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes). - fbdev: tgafb: Fix potential divide by zero (git-fixes). - firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes). - fotg210-udc: Add missing completion handler (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes). - ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes). - gpio: davinci: Add irq chip flag to skip set wake (git-fixes). - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes). - HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes). - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes). - hwmon: fix potential sensor registration fail if of_node is missing (git-fixes). - i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes). - i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes). - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes). - iio: adc: ad7791: fix IRQ flags (git-fixes). - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes). - iio: adis16480: select CONFIG_CRC32 (git-fixes). - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes). - iio: light: cm32181: Unregister second I2C client if present (git-fixes). - Input: alps - fix compatibility with -funsigned-char (bsc#1209805). - Input: focaltech - use explicitly signed char type (git-fixes). - Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes). - KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi). - kABI workaround for xhci (git-fixes). - kABI: x86/msr: Remove .fixup usage (kabi). - kconfig: Update config changed flag before calling callback (git-fixes). - keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes). - KVM: x86: fix sending PV IPI (git-fixes). - KVM: x86: fix sending PV IPI (git-fixes). - lan78xx: Add missing return code checks (git-fixes). - lan78xx: Fix exception on link speed change (git-fixes). - lan78xx: Fix memory allocation bug (git-fixes). - lan78xx: Fix partial packet errors on suspend/resume (git-fixes). - lan78xx: Fix race condition in disconnect handling (git-fixes). - lan78xx: Fix race conditions in suspend/resume handling (git-fixes). - lan78xx: Fix white space and style issues (git-fixes). - lan78xx: Remove unused pause frame queue (git-fixes). - lan78xx: Remove unused timer (git-fixes). - lan78xx: Set flow control threshold to prevent packet loss (git-fixes). - lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes). - locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552). - mm: memcg: fix swapcached stat accounting (bsc#1209804). - mm: mmap: remove newline at the end of the trace (git-fixes). - mmc: atmel-mci: fix race between stop command and start of next command (git-fixes). - mtd: rawnand: meson: fix bitmask for length in command word (git-fixes). - mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes). - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes). - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes). - mtdblock: tolerate corrected bit-flips (git-fixes). - net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes). - net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes). - net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes). - net: phy: Ensure state transitions are processed from phy_stop() (git-fixes). - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes). - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes). - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes). - net: usb: asix: remove redundant assignment to variable reg (git-fixes). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - net: usb: use eth_hw_addr_set() (git-fixes). - NFS: Fix an Oops in nfs_d_automount() (git-fixes). - NFS: fix disabling of swap (git-fixes). - NFS4trace: fix state manager flag printing (git-fixes). - NFSD: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes). - NFSD: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes). - NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes). - NFSD: fix race to check ls_layouts (git-fixes). - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes). - NFSD: Protect against filesystem freezing (git-fixes). - NFSD: shut down the NFSv4 state objects before the filecache (git-fixes). - NFSD: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes). - NFSD: zero out pointers after putting nfsd_files on COPY setup error (git-fixes). - NFSv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes). - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes). - NFSv4: keep state manager thread active if swap is enabled (git-fixes). - NFSv4: provide mount option to toggle trunking discovery (git-fixes). - NFSv4: Fix initialisation of struct nfs4_label (git-fixes). - NFSv4: Fail client initialisation if state manager thread can't run (git-fixes). - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes). - nilfs2: fix sysfs interface lifetime (git-fixes). - nvme-tcp: always fail a request when sending it failed (bsc#1208902). - PCI: hv: Add a per-bus mutex state_lock (bsc#1207185). - PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185). - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185). - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185). - PCI: hv: Use async probing to reduce boot time (bsc#1207185). - PCI/DPC: Await readiness of secondary bus after reset (git-fixes). - pinctrl: amd: Disable and mask interrupts on resume (git-fixes). - pinctrl: at91-pio4: fix domain name assignment (git-fixes). - pinctrl: ocelot: Fix alt mode for ocelot (git-fixes). - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes). - platform/x86: think-lmi: add debug_cmd (bsc#1210050). - platform/x86: think-lmi: add missing type attribute (git-fixes). - platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes). - platform/x86: think-lmi: Certificate authentication support (bsc#1210050). - platform/x86: think-lmi: certificate support clean ups (bsc#1210050). - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes). - platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes). - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes). - platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050). - platform/x86: think-lmi: only display possible_values if available (git-fixes). - platform/x86: think-lmi: Opcode support (bsc#1210050). - platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050). - platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050). - platform/x86: think-lmi: use correct possible_values delimiters (git-fixes). - platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050). - platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050). - platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050). - platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050). - platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050). - platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050). - platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050). - platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050). - platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050). - platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050). - platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050). - platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050). - platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050). - platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050). - platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050). - platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050). - platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050). - platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050). - platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050). - platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050). - platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050). - platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050). - platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050). - platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050). - platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050). - platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050). - platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050). - platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050). - platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050). - platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050). - platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050). - platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050). - platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050). - platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050). - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes). - pNFS/filelayout: Fix coalescing test for single DS (git-fixes). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes). - powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869). - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869). - powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869). - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869). - powerpc/kexec_file: fix implicit decl error (bsc#1194869). - powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869). - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869). - ppc64le: HWPOISON_INJECT=m (bsc#1209572). - pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes). - pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes). - r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes). - rcu: Fix rcu_torture_read ftrace event (git-fixes). - regulator: Handle deferred clk (git-fixes). - ring-buffer: Fix race while reader and writer are on the same page (git-fixes). - ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - rpm/constraints.in: increase the disk size for armv6/7 to 24GB It grows and the build fails recently on SLE15-SP4/5. - s390/boot: simplify and fix kernel memory layout setup (bsc#1209600). - s390/dasd: fix no record found for raw_track_access (bsc#1207574). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - sbitmap: Avoid lockups when waker gets preempted (bsc#1209118). - sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes). - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes). - serial: fsl_lpuart: Fix comment typo (git-fixes). - smb3: fix unusable share after force unmount failure (bsc#1193629). - smb3: lower default deferred close timeout to address perf regression (bsc#1193629). - struct dwc3: mask new member (git-fixes). - SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes). - SUNRPC: Fix a server shutdown leak (git-fixes). - SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes). - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes). - thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes). - thunderbolt: Disable interrupt auto clear for rings (git-fixes). - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes). - thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes). - thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes). - timers: Prevent union confusion from unexpected (git-fixes) - trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes). - trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - tracing: Add trace_array_puts() to write into instance (git-fixes). - tracing: Check field value in hist_field_name() (git-fixes). - tracing: Do not let histogram values have some modifiers (git-fixes). - tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes). - tracing: Free error logs of tracing instances (git-fixes). - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes). - tracing: Make splice_read available again (git-fixes). - tracing: Make tracepoint lockdep check actually test something (git-fixes). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes). - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes). - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes). - tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes). - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes). - USB: cdns3: Fix issue with using incorrect PCI device function (git-fixes). - USB: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes). - USB: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes). - USB: cdnsp: Fixes issue with redundant Status Stage (git-fixes). - USB: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes). - USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes). - USB: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes). - USB: dwc3: Fix a typo in field name (git-fixes). - USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes). - USB: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes). - USB: fix memory leak with using debugfs_lookup() (git-fixes). - USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: u_audio: do not let userspace block driver unbind (git-fixes). - USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes). - USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes). - USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes). - USB: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes). - USB: typec: tcpm: fix warning when handle discover_identity message (git-fixes). - USB: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes). - USB: ucsi: Fix ucsi->connector race (git-fixes). - USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes). - USB: xhci: tegra: fix sleep in atomic call (git-fixes). - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes). - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes). - wifi: mac80211: fix qos on mesh interfaces (git-fixes). - wireguard: ratelimiter: use hrtimer in selftest (git-fixes) - x86: Annotate call_on_stack() (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/fpu: Cache xfeature flags from CPUID (git-fixes). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/msr: Remove .fixup usage (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - xfs: convert ptag flags to unsigned (git-fixes). - xfs: do not assert fail on perag references on teardown (git-fixes). - xfs: do not leak btree cursor when insrec fails after a split (git-fixes). - xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes). - xfs: remove xfs_setattr_time() declaration (git-fixes). - xfs: zero inode fork buffer at allocation (git-fixes). - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes). - xhci: Free the command allocated for setting LPM if we return early (git-fixes). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes). - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes). Important SUSE bug 1065729 SUSE bug 1109158 SUSE bug 1189998 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203200 SUSE bug 1206552 SUSE bug 1207168 SUSE bug 1207185 SUSE bug 1207574 SUSE bug 1208602 SUSE bug 1208815 SUSE bug 1208829 SUSE bug 1208902 SUSE bug 1209052 SUSE bug 1209118 SUSE bug 1209256 SUSE bug 1209290 SUSE bug 1209292 SUSE bug 1209366 SUSE bug 1209532 SUSE bug 1209547 SUSE bug 1209556 SUSE bug 1209572 SUSE bug 1209600 SUSE bug 1209634 SUSE bug 1209635 SUSE bug 1209636 SUSE bug 1209681 SUSE bug 1209684 SUSE bug 1209687 SUSE bug 1209779 SUSE bug 1209788 SUSE bug 1209798 SUSE bug 1209799 SUSE bug 1209804 SUSE bug 1209805 SUSE bug 1210050 SUSE bug 1210203 CVE-2017-5753 CVE-2022-4744 CVE-2023-0394 CVE-2023-1281 CVE-2023-1513 CVE-2023-1582 CVE-2023-1611 CVE-2023-1637 CVE-2023-1652 CVE-2023-1838 CVE-2023-23001 CVE-2023-28327 CVE-2023-28464 CVE-2023-28466 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 kernel-firmware-all-20230320-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the kernel-firmware-all-20230320-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-13080 CVE-2017-13081 CVE-2017-5715 CVE-2019-9836 CVE-2021-26312 CVE-2021-26339 CVE-2021-26342 CVE-2021-26347 CVE-2021-26348 CVE-2021-26349 CVE-2021-26350 CVE-2021-26364 CVE-2021-26372 CVE-2021-26373 CVE-2021-26375 CVE-2021-26376 CVE-2021-26378 CVE-2021-26388 CVE-2021-33139 CVE-2021-33155 CVE-2021-46744 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for keylime fixes the following issues: - CVE-2022-3500: Fixed vulnerability where a node seems as attested when in reality it is not properly attested (bsc#1204782). Moderate SUSE bug 1204782 CVE-2022-3500 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 keylime-agent-6.3.2-150400.4.14.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the keylime-agent-6.3.2-150400.4.14.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-43310 CVE-2022-1053 CVE-2022-23948 CVE-2022-23949 CVE-2022-23950 CVE-2022-23951 CVE-2022-23952 CVE-2022-31250 CVE-2022-3500 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 kpartx-0.9.4+71+suse.c648a77-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the kpartx-0.9.4+71+suse.c648a77-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-41973 CVE-2022-41974 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 krb5-1.20.1-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the krb5-1.20.1-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-5351 CVE-2014-5352 CVE-2014-5353 CVE-2014-5354 CVE-2014-5355 CVE-2014-9421 CVE-2014-9422 CVE-2014-9423 CVE-2015-2694 CVE-2015-2695 CVE-2015-2696 CVE-2015-2697 CVE-2015-2698 CVE-2015-8629 CVE-2015-8630 CVE-2015-8631 CVE-2016-3119 CVE-2016-3120 CVE-2017-11368 CVE-2017-11462 CVE-2018-20217 CVE-2018-5729 CVE-2018-5730 CVE-2020-28196 CVE-2021-36222 CVE-2021-37750 CVE-2022-42898 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ldb-tools-2.6.2-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ldb-tools-2.6.2-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-3223 CVE-2015-5330 CVE-2018-1140 CVE-2019-3824 CVE-2020-10700 CVE-2020-10730 CVE-2020-27840 CVE-2021-20277 CVE-2021-3670 CVE-2022-2031 CVE-2022-32744 CVE-2022-32745 CVE-2022-32746 CVE-2023-0614 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ldns fixes the following issues: - CVE-2020-19860: Fixed heap-based out of bounds read when verifying a zone file (bsc#1195057). - CVE-2020-19861: Fixed heap-based out of bounds read in ldns_nsec3_salt_data() (bsc#1195058). Moderate SUSE bug 1195057 SUSE bug 1195058 CVE-2020-19860 CVE-2020-19861 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ldns-devel-1.7.0-150000.4.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ldns-devel-1.7.0-150000.4.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-1000231 CVE-2017-1000232 CVE-2020-19860 CVE-2020-19861 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 less-590-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for less fixes the following issues: - CVE-2022-46663: Fixed denial-of-service by printing specially crafted escape sequences to the terminal (bsc#1207815). Moderate SUSE bug 1207815 CVE-2022-46663 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 lftp-4.9.2-150400.1.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the lftp-4.9.2-150400.1.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-0139 CVE-2018-10916 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libFS-devel-1.0.7-1.22 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libFS-devel-1.0.7-1.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1996 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libHX-devel-3.22-1.26 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libHX-devel-3.22-1.26 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2010-2947 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libICE-devel-1.0.9-1.25 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libICE-devel-1.0.9-1.25 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-2626 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libQt5Concurrent-devel-5.15.8+kde185-150500.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libQt5Concurrent-devel-5.15.8+kde185-150500.2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-0295 CVE-2020-0570 CVE-2020-12267 CVE-2020-13962 CVE-2020-17507 CVE-2022-23853 CVE-2022-25255 CVE-2022-27404 CVE-2022-37434 CVE-2023-24607 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libQt5Svg5-5.15.8+kde8-150500.1.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libQt5Svg5-5.15.8+kde8-150500.1.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-3481 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libX11 fixes the following issues: - Fixed XIM client heap overflows (CVE-2020-14344, bsc#1174628). Important SUSE bug 1174628 CVE-2020-14344 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libX11-6-1.6.5-150000.3.27.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libX11-6-1.6.5-150000.3.27.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-14598 CVE-2018-14599 CVE-2018-14600 CVE-2020-14344 CVE-2020-14363 CVE-2021-31535 CVE-2022-3554 CVE-2022-3555 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXRes1-1.2.0-1.18 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXRes1-1.2.0-1.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1988 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXcursor-devel-1.1.15-1.18 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXcursor-devel-1.1.15-1.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-2003 CVE-2017-16612 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXdmcp-devel-1.1.2-1.23 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXdmcp-devel-1.1.2-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-2625 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXext-devel-1.3.3-1.30 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXext-devel-1.3.3-1.30 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1982 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXfixes-devel-6.0.0-150400.1.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXfixes-devel-6.0.0-150400.1.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1983 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXfont-devel-1.5.4-1.17 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXfont-devel-1.5.4-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2011-2895 CVE-2013-6462 CVE-2014-0209 CVE-2014-0210 CVE-2014-0211 CVE-2015-1802 CVE-2015-1803 CVE-2015-1804 CVE-2017-13720 CVE-2017-13722 CVE-2017-16611 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXfont2-2-2.0.3-1.17 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXfont2-2-2.0.3-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-16611 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXi-devel-1.7.9-3.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXi-devel-1.7.9-3.2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1984 CVE-2013-1995 CVE-2013-1998 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXinerama-devel-1.1.3-1.22 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXinerama-devel-1.1.3-1.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1985 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXp-devel-1.0.3-1.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXp-devel-1.0.3-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-2062 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libXpm fixes the following issues: - CVE-2022-46285: Fixed an infinite loop that could be triggered when reading a XPM image with a C-style comment that is never closed (bsc#1207029). - CVE-2022-44617: Fixed an excessive resource consumption that could be triggered when reading small crafted XPM image (bsc#1207030). - CVE-2022-4883: Fixed an issue that made decompression commands susceptible to PATH environment variable manipulation attacks (bsc#1207031). Important SUSE bug 1207029 SUSE bug 1207030 SUSE bug 1207031 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXpm-devel-3.5.12-150000.3.7.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXpm-devel-3.5.12-150000.3.7.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXrandr-devel-1.5.1-2.17 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXrandr-devel-1.5.1-2.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1986 CVE-2016-7947 CVE-2016-7948 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXrender-devel-0.9.10-1.30 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXrender-devel-0.9.10-1.30 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1987 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXt-devel-1.1.5-2.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXt-devel-1.1.5-2.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-2002 CVE-2013-2005 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXtst-devel-1.2.3-1.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXtst-devel-1.2.3-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-2063 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXv-devel-1.0.11-1.23 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXv-devel-1.0.11-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1989 CVE-2013-2066 CVE-2016-5407 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXvMC-devel-1.0.10-1.23 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXvMC-devel-1.0.10-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1990 CVE-2013-1999 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXvnc1-1.12.0-150500.2.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXvnc1-1.12.0-150500.2.6 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8240 CVE-2015-0255 CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695 CVE-2020-26117 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXxf86dga-devel-1.1.4-1.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXxf86dga-devel-1.1.4-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1991 CVE-2013-2000 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXxf86vm-devel-1.1.4-1.23 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXxf86vm-devel-1.1.4-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-2001 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libaom3-3.2.0-150400.1.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libaom3-3.2.0-150400.1.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-30474 CVE-2021-30475 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libarchive fixes the following issues: - CVE-2021-31566: Fixed vulnerability where libarchive modifies file flags of symlink target (bsc#1192426) - Fixed issue where processing fixup entries may follow symbolic links (bsc#1192427). Moderate SUSE bug 1192426 SUSE bug 1192427 CVE-2021-31566 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libarchive-devel-3.5.1-150400.3.12.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libarchive-devel-3.5.1-150400.3.12.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-0211 CVE-2015-2304 CVE-2015-8917 CVE-2015-8928 CVE-2015-8933 CVE-2015-8934 CVE-2016-1541 CVE-2016-4300 CVE-2016-4301 CVE-2016-4809 CVE-2016-5418 CVE-2016-5844 CVE-2016-6250 CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 CVE-2017-14166 CVE-2017-14501 CVE-2017-14502 CVE-2017-14503 CVE-2017-5601 CVE-2018-1000877 CVE-2018-1000878 CVE-2018-1000879 CVE-2018-1000880 CVE-2019-1000019 CVE-2019-1000020 CVE-2019-18408 CVE-2019-19221 CVE-2021-23177 CVE-2021-31566 CVE-2021-36976 CVE-2022-26280 CVE-2022-36227 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libblkid-devel-2.37.4-150500.7.16 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libblkid-devel-2.37.4-150500.7.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9114 CVE-2015-5218 CVE-2016-2779 CVE-2016-5011 CVE-2017-2616 CVE-2021-37600 CVE-2021-3995 CVE-2021-3996 CVE-2022-0563 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libbpf fixes the following issues: - CVE-2022-3534: Fixed use-after-free in btf_dump_name_dups (bsc#1204391). - CVE-2022-3606: Fixed null pointer dereference in find_prog_by_sec_insn() (bsc#1204502). Important SUSE bug 1204391 SUSE bug 1204502 CVE-2022-3534 CVE-2022-3606 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libbpf0-0.5.0-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libbpf0-0.5.0-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-3534 CVE-2022-3606 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libbpf1-1.1.0-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libbpf1-1.1.0-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-45940 CVE-2021-45941 CVE-2022-3533 CVE-2022-3534 CVE-2022-3606 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libbrotli-devel-1.0.7-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libbrotli-devel-1.0.7-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-8927 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libbsd fixes the following issues: - CVE-2019-20367: Fixed an out-of-bounds read during a comparison for a symbol names from the string table (bsc#1160551). Moderate SUSE bug 1160551 CVE-2019-20367 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libbsd-devel-0.8.7-3.3.17 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libbsd-devel-0.8.7-3.3.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-20367 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libcaca fixes the following issues: - CVE-2021-3410: Fixed overflow when multiplying large ints (bsc#1182731). Moderate SUSE bug 1182731 CVE-2021-3410 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcaca-devel-0.99.beta19.git20171003-150200.11.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcaca-devel-0.99.beta19.git20171003-150200.11.9.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-20544 CVE-2018-20545 CVE-2018-20546 CVE-2018-20547 CVE-2018-20548 CVE-2018-20549 CVE-2021-30498 CVE-2021-30499 CVE-2021-3410 CVE-2022-0856 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcacard0-2.5.3-1.27 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcacard0-2.5.3-1.27 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-6414 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcolord2-1.4.5-150400.4.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcolord2-1.4.5-150400.4.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-42523 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcontainers-common-20230214-150500.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcontainers-common-20230214-150500.2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-15664 CVE-2019-10152 CVE-2020-14370 CVE-2020-15157 CVE-2021-20199 CVE-2021-20291 CVE-2021-3602 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcroco-0.6.13-150400.9.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcroco-0.6.13-150400.9.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-7960 CVE-2017-7961 CVE-2017-8834 CVE-2017-8871 CVE-2020-12825 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcryptopp-devel-8.6.0-150400.1.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcryptopp-devel-8.6.0-150400.1.6 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-2141 CVE-2016-9939 CVE-2019-14318 CVE-2021-40530 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libdmx-devel-1.1.3-1.23 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libdmx-devel-1.1.3-1.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1992 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libekmfweb1-2.25.0-150500.7.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libekmfweb1-2.25.0-150500.7.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-25316 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libesmtp fixes the following issues: - CVE-2019-19977: Fixed stack-based buffer over-read in ntlm/ntlmstruct.c (bsc#1160462). Important SUSE bug 1160462 SUSE bug 1189097 CVE-2019-19977 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libevent-2_1-8-2.1.8-2.23 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libevent-2_1-8-2.1.8-2.23 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-6272 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libfastjson fixes the following issues: - CVE-2020-12762: Fixed an integer overflow and out-of-bounds write via a large JSON file (bsc#1171479). Important SUSE bug 1171479 CVE-2020-12762 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libfastjson-devel-0.99.9-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libfastjson-devel-0.99.9-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-12762 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libfreebl3-3.79.4-150400.3.29.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libfreebl3-3.79.4-150400.3.29.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-1569 CVE-2015-2721 CVE-2015-4000 CVE-2015-7181 CVE-2015-7182 CVE-2015-7575 CVE-2016-1950 CVE-2016-1979 CVE-2016-2834 CVE-2018-0495 CVE-2018-12384 CVE-2018-12404 CVE-2018-18508 CVE-2019-11745 CVE-2019-17006 CVE-2020-12399 CVE-2020-12400 CVE-2020-12401 CVE-2020-12402 CVE-2020-12403 CVE-2020-25648 CVE-2020-6829 CVE-2021-43527 CVE-2022-1097 CVE-2022-23491 CVE-2022-3479 CVE-2023-0767 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libgcrypt-devel-1.9.4-150500.10.19 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libgcrypt-devel-1.9.4-150500.10.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-3591 CVE-2015-0837 CVE-2015-5738 CVE-2015-7511 CVE-2016-6313 CVE-2017-0379 CVE-2017-7526 CVE-2018-0495 CVE-2019-12904 CVE-2019-13627 CVE-2021-3345 CVE-2021-33560 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libgstphotography-1_0-0-1.22.0-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libgstphotography-1_0-0-1.22.0-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-5838 CVE-2017-5847 CVE-2017-5848 CVE-2021-3185 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libgtk-vnc-2_0-0-1.3.1-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libgtk-vnc-2_0-0-1.3.1-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-5884 CVE-2017-5885 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libhogweed6-3.8.1-150500.2.25 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libhogweed6-3.8.1-150500.2.25 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-8803 CVE-2015-8804 CVE-2015-8805 CVE-2016-6489 CVE-2018-16869 CVE-2021-20305 CVE-2021-3580 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libicu-devel-65.1-150200.4.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libicu-devel-65.1-150200.4.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-21913 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libidn-devel-1.34-3.2.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libidn-devel-1.34-3.2.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-2059 CVE-2015-8948 CVE-2016-6261 CVE-2016-6262 CVE-2016-6263 CVE-2017-14062 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libidn2-0-2.2.0-3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libidn2-0-2.2.0-3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-2059 CVE-2015-8948 CVE-2016-6261 CVE-2016-6262 CVE-2016-6263 CVE-2019-12290 CVE-2019-18224 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libinput-devel-1.21.0-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libinput-devel-1.21.0-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-1215 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libipa_hbac-devel-2.5.2-150500.8.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libipa_hbac-devel-2.5.2-150500.8.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-12173 CVE-2018-10852 CVE-2018-16838 CVE-2019-3811 CVE-2021-3621 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libjansson-devel-2.9-1.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libjansson-devel-2.9-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-6401 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libjasper4-2.0.14-150000.3.28.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libjasper4-2.0.14-150000.3.28.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2008-3522 CVE-2011-4516 CVE-2011-4517 CVE-2014-8137 CVE-2014-8138 CVE-2014-8157 CVE-2014-8158 CVE-2014-9029 CVE-2015-5203 CVE-2015-5221 CVE-2016-10251 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-8886 CVE-2016-8887 CVE-2016-9262 CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391 CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9395 CVE-2016-9396 CVE-2016-9398 CVE-2016-9399 CVE-2016-9557 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2017-1000050 CVE-2017-14132 CVE-2017-5498 CVE-2017-5499 CVE-2017-5503 CVE-2017-5504 CVE-2017-5505 CVE-2017-6850 CVE-2017-9782 CVE-2018-18873 CVE-2018-19139 CVE-2018-19539 CVE-2018-19540 CVE-2018-19541 CVE-2018-19542 CVE-2018-19543 CVE-2018-20570 CVE-2018-20622 CVE-2018-9055 CVE-2018-9154 CVE-2018-9252 CVE-2020-27828 CVE-2021-26926 CVE-2021-26927 CVE-2021-27845 CVE-2021-3272 CVE-2021-3443 CVE-2021-3467 CVE-2022-2963 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libjavascriptcoregtk-4_0-18-2.38.6-150400.4.39.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libjavascriptcoregtk-4_0-18-2.38.6-150400.4.39.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-1856 CVE-2016-1857 CVE-2016-4590 CVE-2016-4591 CVE-2016-4622 CVE-2016-4624 CVE-2016-4692 CVE-2016-4743 CVE-2016-7586 CVE-2016-7587 CVE-2016-7589 CVE-2016-7592 CVE-2016-7598 CVE-2016-7599 CVE-2016-7610 CVE-2016-7623 CVE-2016-7632 CVE-2016-7635 CVE-2016-7639 CVE-2016-7641 CVE-2016-7645 CVE-2016-7652 CVE-2016-7654 CVE-2016-7656 CVE-2017-1000121 CVE-2017-1000122 CVE-2017-13788 CVE-2017-13798 CVE-2017-13803 CVE-2017-13856 CVE-2017-13866 CVE-2017-13870 CVE-2017-13884 CVE-2017-13885 CVE-2017-2350 CVE-2017-2354 CVE-2017-2355 CVE-2017-2356 CVE-2017-2362 CVE-2017-2363 CVE-2017-2364 CVE-2017-2365 CVE-2017-2366 CVE-2017-2369 CVE-2017-2371 CVE-2017-2373 CVE-2017-2496 CVE-2017-2510 CVE-2017-2538 CVE-2017-2539 CVE-2017-5715 CVE-2017-5753 CVE-2017-7006 CVE-2017-7011 CVE-2017-7012 CVE-2017-7018 CVE-2017-7019 CVE-2017-7020 CVE-2017-7030 CVE-2017-7034 CVE-2017-7037 CVE-2017-7038 CVE-2017-7039 CVE-2017-7040 CVE-2017-7041 CVE-2017-7042 CVE-2017-7043 CVE-2017-7046 CVE-2017-7048 CVE-2017-7049 CVE-2017-7052 CVE-2017-7055 CVE-2017-7056 CVE-2017-7059 CVE-2017-7061 CVE-2017-7064 CVE-2017-7081 CVE-2017-7087 CVE-2017-7089 CVE-2017-7090 CVE-2017-7091 CVE-2017-7092 CVE-2017-7093 CVE-2017-7094 CVE-2017-7095 CVE-2017-7096 CVE-2017-7098 CVE-2017-7099 CVE-2017-7100 CVE-2017-7102 CVE-2017-7104 CVE-2017-7107 CVE-2017-7109 CVE-2017-7111 CVE-2017-7117 CVE-2017-7120 CVE-2017-7142 CVE-2017-7153 CVE-2017-7156 CVE-2017-7157 CVE-2017-7160 CVE-2017-7161 CVE-2017-7165 CVE-2018-11646 CVE-2018-11712 CVE-2018-11713 CVE-2018-12911 CVE-2018-4088 CVE-2018-4096 CVE-2018-4101 CVE-2018-4113 CVE-2018-4114 CVE-2018-4117 CVE-2018-4118 CVE-2018-4119 CVE-2018-4120 CVE-2018-4122 CVE-2018-4125 CVE-2018-4127 CVE-2018-4128 CVE-2018-4129 CVE-2018-4133 CVE-2018-4146 CVE-2018-4161 CVE-2018-4162 CVE-2018-4163 CVE-2018-4165 CVE-2018-4190 CVE-2018-4191 CVE-2018-4197 CVE-2018-4199 CVE-2018-4200 CVE-2018-4204 CVE-2018-4207 CVE-2018-4208 CVE-2018-4209 CVE-2018-4210 CVE-2018-4212 CVE-2018-4213 CVE-2018-4218 CVE-2018-4222 CVE-2018-4232 CVE-2018-4233 CVE-2018-4246 CVE-2018-4261 CVE-2018-4262 CVE-2018-4263 CVE-2018-4264 CVE-2018-4265 CVE-2018-4266 CVE-2018-4267 CVE-2018-4270 CVE-2018-4272 CVE-2018-4273 CVE-2018-4278 CVE-2018-4284 CVE-2018-4299 CVE-2018-4306 CVE-2018-4309 CVE-2018-4312 CVE-2018-4314 CVE-2018-4315 CVE-2018-4316 CVE-2018-4317 CVE-2018-4318 CVE-2018-4319 CVE-2018-4323 CVE-2018-4328 CVE-2018-4345 CVE-2018-4358 CVE-2018-4359 CVE-2018-4361 CVE-2018-4372 CVE-2018-4373 CVE-2018-4375 CVE-2018-4376 CVE-2018-4378 CVE-2018-4382 CVE-2018-4386 CVE-2018-4392 CVE-2018-4416 CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442 CVE-2018-4443 CVE-2018-4464 CVE-2019-11070 CVE-2019-6201 CVE-2019-6212 CVE-2019-6215 CVE-2019-6216 CVE-2019-6217 CVE-2019-6226 CVE-2019-6227 CVE-2019-6229 CVE-2019-6233 CVE-2019-6234 CVE-2019-6251 CVE-2019-7285 CVE-2019-7292 CVE-2019-8375 CVE-2019-8503 CVE-2019-8506 CVE-2019-8515 CVE-2019-8518 CVE-2019-8523 CVE-2019-8524 CVE-2019-8535 CVE-2019-8536 CVE-2019-8544 CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2019-8595 CVE-2019-8607 CVE-2019-8615 CVE-2019-8625 CVE-2019-8644 CVE-2019-8649 CVE-2019-8658 CVE-2019-8666 CVE-2019-8669 CVE-2019-8671 CVE-2019-8672 CVE-2019-8673 CVE-2019-8674 CVE-2019-8676 CVE-2019-8677 CVE-2019-8678 CVE-2019-8679 CVE-2019-8680 CVE-2019-8681 CVE-2019-8683 CVE-2019-8684 CVE-2019-8686 CVE-2019-8687 CVE-2019-8688 CVE-2019-8689 CVE-2019-8690 CVE-2019-8707 CVE-2019-8710 CVE-2019-8719 CVE-2019-8720 CVE-2019-8726 CVE-2019-8733 CVE-2019-8735 CVE-2019-8743 CVE-2019-8763 CVE-2019-8764 CVE-2019-8765 CVE-2019-8766 CVE-2019-8768 CVE-2019-8769 CVE-2019-8771 CVE-2019-8782 CVE-2019-8783 CVE-2019-8808 CVE-2019-8811 CVE-2019-8812 CVE-2019-8813 CVE-2019-8814 CVE-2019-8815 CVE-2019-8816 CVE-2019-8819 CVE-2019-8820 CVE-2019-8821 CVE-2019-8822 CVE-2019-8823 CVE-2019-8835 CVE-2019-8844 CVE-2019-8846 CVE-2020-10018 CVE-2020-11793 CVE-2020-13543 CVE-2020-13558 CVE-2020-13584 CVE-2020-13753 CVE-2020-27918 CVE-2020-29623 CVE-2020-3862 CVE-2020-3864 CVE-2020-3865 CVE-2020-3867 CVE-2020-3868 CVE-2020-3885 CVE-2020-3894 CVE-2020-3895 CVE-2020-3897 CVE-2020-3899 CVE-2020-3900 CVE-2020-3901 CVE-2020-3902 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9806 CVE-2020-9807 CVE-2020-9843 CVE-2020-9850 CVE-2020-9862 CVE-2020-9893 CVE-2020-9894 CVE-2020-9895 CVE-2020-9915 CVE-2020-9925 CVE-2020-9947 CVE-2020-9948 CVE-2020-9951 CVE-2020-9952 CVE-2020-9983 CVE-2021-1765 CVE-2021-1788 CVE-2021-1789 CVE-2021-1799 CVE-2021-1801 CVE-2021-1817 CVE-2021-1820 CVE-2021-1825 CVE-2021-1826 CVE-2021-1844 CVE-2021-1870 CVE-2021-1871 CVE-2021-21775 CVE-2021-21779 CVE-2021-21806 CVE-2021-30661 CVE-2021-30663 CVE-2021-30665 CVE-2021-30666 CVE-2021-30682 CVE-2021-30689 CVE-2021-30720 CVE-2021-30734 CVE-2021-30744 CVE-2021-30749 CVE-2021-30758 CVE-2021-30761 CVE-2021-30762 CVE-2021-30795 CVE-2021-30797 CVE-2021-30799 CVE-2021-30809 CVE-2021-30818 CVE-2021-30823 CVE-2021-30836 CVE-2021-30846 CVE-2021-30848 CVE-2021-30849 CVE-2021-30851 CVE-2021-30858 CVE-2021-30884 CVE-2021-30887 CVE-2021-30888 CVE-2021-30889 CVE-2021-30890 CVE-2021-30897 CVE-2021-30934 CVE-2021-30936 CVE-2021-30951 CVE-2021-30952 CVE-2021-30953 CVE-2021-30954 CVE-2021-30984 CVE-2021-42762 CVE-2021-45481 CVE-2021-45482 CVE-2021-45483 CVE-2022-0108 CVE-2022-22589 CVE-2022-22590 CVE-2022-22592 CVE-2022-22594 CVE-2022-22620 CVE-2022-22624 CVE-2022-22628 CVE-2022-22629 CVE-2022-22637 CVE-2022-22662 CVE-2022-22677 CVE-2022-26700 CVE-2022-26709 CVE-2022-26710 CVE-2022-26716 CVE-2022-26717 CVE-2022-26719 CVE-2022-30293 CVE-2022-32792 CVE-2022-32816 CVE-2022-32885 CVE-2022-32886 CVE-2022-32888 CVE-2022-32893 CVE-2022-32912 CVE-2022-32923 CVE-2022-42799 CVE-2022-42823 CVE-2022-42824 CVE-2022-42826 CVE-2022-42852 CVE-2022-42856 CVE-2022-42863 CVE-2022-42867 CVE-2022-46691 CVE-2022-46692 CVE-2022-46698 CVE-2022-46699 CVE-2022-46700 CVE-2023-23517 CVE-2023-23518 CVE-2023-23529 CVE-2023-25358 CVE-2023-25360 CVE-2023-25361 CVE-2023-25362 CVE-2023-25363 CVE-2023-27932 CVE-2023-27954 CVE-2023-28205 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libjbig-devel-2.1-3.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libjbig-devel-2.1-3.2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-6369 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libjpeg62-62.3.0-150400.15.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libjpeg62-62.3.0-150400.15.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9092 CVE-2017-15232 CVE-2018-1152 CVE-2018-11813 CVE-2018-14498 CVE-2018-19644 CVE-2018-19664 CVE-2018-20330 CVE-2019-2201 CVE-2020-13790 CVE-2020-17541 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libjson-c-devel-0.13-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libjson-c-devel-0.13-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-6370 CVE-2013-6371 CVE-2020-12762 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libksba fixes the following issues: - CVE-2022-47629: Fixed an integer overflow vulnerability in the CRL signature parser (bsc#1206579). Moderate SUSE bug 1206579 CVE-2022-47629 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libksba-devel-1.3.5-150000.4.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libksba-devel-1.3.5-150000.4.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9087 CVE-2016-4574 CVE-2016-4579 CVE-2022-3515 CVE-2022-47629 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 liblcms2-2-2.12-150400.1.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the liblcms2-2-2.12-150400.1.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-16435 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libldap-2_4-2-2.4.46-150200.14.11.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libldap-2_4-2-2.4.46-150200.14.11.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-1545 CVE-2015-1546 CVE-2015-6908 CVE-2017-17740 CVE-2019-13057 CVE-2019-13565 CVE-2020-12243 CVE-2020-15719 CVE-2020-25692 CVE-2020-25709 CVE-2020-25710 CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230 CVE-2020-8023 CVE-2020-8027 CVE-2021-27212 CVE-2022-29155 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 liblua5_3-5-32bit-5.3.6-3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the liblua5_3-5-32bit-5.3.6-3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-6706 CVE-2020-24370 CVE-2020-24371 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 liblz4-1-1.9.3-150400.1.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the liblz4-1-1.9.3-150400.1.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-17543 CVE-2021-3520 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 liblzo2-2-2.10-2.22 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the liblzo2-2-2.10-2.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-4607 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmariadb3-3.1.13-3.30.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmariadb3-3.1.13-3.30.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-13249 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmarkdown2-2.2.4-1.41 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmarkdown2-2.2.4-1.41 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-11468 CVE-2018-12495 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libmicrohttpd fixes the following issues: - CVE-2023-27371: Fixed a parser bug that could be used to crash servers using the MHD_PostProcessor (bsc#1208745). Moderate SUSE bug 1208745 CVE-2023-27371 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmicrohttpd12-0.9.57-150000.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmicrohttpd12-0.9.57-150000.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2023-27371 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmilter1_0-8.15.2-150000.8.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmilter1_0-8.15.2-150000.8.9.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-31256 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libminizip1-1.2.13-150500.2.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libminizip1-1.2.13-150500.2.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-9843 CVE-2018-25032 CVE-2022-37434 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmp3lame0-3.100-150000.3.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmp3lame0-3.100-150000.3.2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-9410 CVE-2017-9411 CVE-2017-9412 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmpfr6-4.0.2-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmpfr6-4.0.2-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9474 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmpg123-0-1.26.4-1.15 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmpg123-0-1.26.4-1.15 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-10683 CVE-2017-11126 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libmspack fixes the following issues: Security issue fixed: - CVE-2019-1010305: Fixed a buffer overflow triggered by a crafted chm file which could have led to information disclosure (bsc#1141680). Other issue addressed: - Enable build-time tests (bsc#1130489) Low SUSE bug 1130489 SUSE bug 1141680 CVE-2019-1010305 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmspack-devel-0.6-3.14.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmspack-devel-0.6-3.14.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9556 CVE-2017-11423 CVE-2017-6419 CVE-2018-14679 CVE-2018-14681 CVE-2018-14682 CVE-2018-18584 CVE-2018-18585 CVE-2018-18586 CVE-2019-1010305 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libncurses6-32bit-6.1-150000.5.15.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libncurses6-32bit-6.1-150000.5.15.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-19211 CVE-2019-17594 CVE-2019-17595 CVE-2021-39537 CVE-2022-29458 CVE-2023-29491 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libnetpbm11-10.80.1-3.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libnetpbm11-10.80.1-3.11.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-2579 CVE-2017-2580 CVE-2018-8975 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libnghttp2-14-1.40.0-6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libnghttp2-14-1.40.0-6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-1544 CVE-2018-1000168 CVE-2019-18802 CVE-2019-9511 CVE-2019-9513 CVE-2020-11080 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libnm0-1.38.6-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libnm0-1.38.6-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2006-7246 CVE-2015-2924 CVE-2016-0764 CVE-2018-1000135 CVE-2018-15688 CVE-2020-10754 CVE-2020-13529 CVE-2021-20297 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 liboath-devel-2.6.2-150000.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the liboath-devel-2.6.2-150000.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-7322 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libodbc2-2.3.9-150400.14.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libodbc2-2.3.9-150400.14.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-7409 CVE-2018-7485 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libonig4-6.7.0-150000.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libonig4-6.7.0-150000.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-13224 CVE-2019-16163 CVE-2019-19203 CVE-2019-19204 CVE-2019-19246 CVE-2020-26159 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libopenjp2-7-2.3.0-150000.3.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libopenjp2-7-2.3.0-150000.3.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-10504 CVE-2016-10505 CVE-2016-10506 CVE-2016-5139 CVE-2016-5152 CVE-2016-5158 CVE-2016-5159 CVE-2016-7163 CVE-2016-8332 CVE-2017-12982 CVE-2017-14039 CVE-2017-14040 CVE-2017-14041 CVE-2017-14151 CVE-2017-14152 CVE-2017-14164 CVE-2018-14423 CVE-2018-16375 CVE-2018-16376 CVE-2018-20845 CVE-2018-20846 CVE-2018-21010 CVE-2018-5727 CVE-2018-5785 CVE-2018-6616 CVE-2020-15389 CVE-2020-27814 CVE-2020-27823 CVE-2020-27824 CVE-2020-27841 CVE-2020-27842 CVE-2020-27843 CVE-2020-27845 CVE-2020-6851 CVE-2020-8112 CVE-2021-29338 CVE-2022-1122 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libopenssl-1_1-devel-1.1.1l-150500.15.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libopenssl-1_1-devel-1.1.1l-150500.15.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2002-20001 CVE-2014-3513 CVE-2014-3567 CVE-2014-3568 CVE-2014-3569 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8275 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206 CVE-2015-0209 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289 CVE-2015-0293 CVE-2015-1788 CVE-2015-1789 CVE-2015-1790 CVE-2015-1791 CVE-2015-1792 CVE-2015-1793 CVE-2015-1794 CVE-2015-3193 CVE-2015-3194 CVE-2015-3195 CVE-2015-3196 CVE-2015-3197 CVE-2016-0701 CVE-2016-0702 CVE-2016-0705 CVE-2016-0797 CVE-2016-0798 CVE-2016-0800 CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176 CVE-2016-2177 CVE-2016-2178 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-2182 CVE-2016-2183 CVE-2016-6302 CVE-2016-6303 CVE-2016-6304 CVE-2016-6306 CVE-2016-7052 CVE-2016-7055 CVE-2016-7056 CVE-2017-3731 CVE-2017-3732 CVE-2017-3735 CVE-2017-3736 CVE-2017-3738 CVE-2018-0732 CVE-2018-0734 CVE-2018-0735 CVE-2018-0737 CVE-2018-0739 CVE-2019-1543 CVE-2019-1547 CVE-2019-1549 CVE-2019-1551 CVE-2019-1563 CVE-2020-1967 CVE-2020-1971 CVE-2021-23840 CVE-2021-23841 CVE-2021-3449 CVE-2021-3450 CVE-2021-3711 CVE-2021-3712 CVE-2022-0778 CVE-2022-1292 CVE-2022-2068 CVE-2022-2097 CVE-2022-4304 CVE-2022-4450 CVE-2023-0215 CVE-2023-0286 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libopenssl-3-devel-3.0.8-150500.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libopenssl-3-devel-3.0.8-150500.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-1971 CVE-2021-4044 CVE-2022-0778 CVE-2022-1292 CVE-2022-1343 CVE-2022-1434 CVE-2022-1473 CVE-2022-2068 CVE-2022-2097 CVE-2022-2274 CVE-2022-3358 CVE-2022-3602 CVE-2022-3786 CVE-2022-3996 CVE-2022-4203 CVE-2022-4304 CVE-2022-4450 CVE-2023-0215 CVE-2023-0216 CVE-2023-0217 CVE-2023-0286 CVE-2023-0401 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libopenssl-devel-1.1.1l-150400.1.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libopenssl-devel-1.1.1l-150400.1.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-3513 CVE-2014-3567 CVE-2014-3568 CVE-2014-3569 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8275 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206 CVE-2015-0209 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289 CVE-2015-0293 CVE-2015-1788 CVE-2015-1789 CVE-2015-1790 CVE-2015-1791 CVE-2015-1792 CVE-2015-1793 CVE-2015-1794 CVE-2015-3193 CVE-2015-3194 CVE-2015-3195 CVE-2015-3196 CVE-2015-3197 CVE-2016-0701 CVE-2016-0702 CVE-2016-0705 CVE-2016-0797 CVE-2016-0798 CVE-2016-0800 CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176 CVE-2016-2177 CVE-2016-2178 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-2182 CVE-2016-2183 CVE-2016-6302 CVE-2016-6303 CVE-2016-6304 CVE-2016-6306 CVE-2016-7052 CVE-2016-7055 CVE-2016-7056 CVE-2017-3731 CVE-2017-3732 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libopus-devel-1.3.1-150000.3.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libopus-devel-1.3.1-150000.3.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-0381 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libosinfo-1.10.0-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libosinfo-1.10.0-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-13313 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libostree-1-1-2022.7-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libostree-1-1-2022.7-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9862 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libp11-kit0-0.23.22-150500.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libp11-kit0-0.23.22-150500.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-29361 CVE-2020-29362 CVE-2020-29363 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpainter0-0.9.13.1-150200.4.18.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpainter0-0.9.13.1-150200.4.18.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-1430 CVE-2017-16927 CVE-2017-6967 CVE-2020-4044 CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23482 CVE-2022-23483 CVE-2022-23484 CVE-2022-23493 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpango-1_0-0-1.50.4-150400.1.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpango-1_0-0-1.50.4-150400.1.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-15120 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpcap-devel-1.10.1-150400.1.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpcap-devel-1.10.1-150400.1.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-16301 CVE-2019-15161 CVE-2019-15162 CVE-2019-15163 CVE-2019-15164 CVE-2019-15165 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpcre1-32bit-8.45-150000.20.13.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpcre1-32bit-8.45-150000.20.13.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8964 CVE-2015-2325 CVE-2015-2326 CVE-2015-3217 CVE-2016-1283 CVE-2016-3191 CVE-2017-6004 CVE-2017-7186 CVE-2017-7244 CVE-2017-7245 CVE-2017-7246 CVE-2019-20838 CVE-2020-14155 CVE-2022-1586 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpcre2-16-0-10.39-150400.4.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpcre2-16-0-10.39-150400.4.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8964 CVE-2015-2325 CVE-2015-2326 CVE-2016-3191 CVE-2017-7186 CVE-2017-8786 CVE-2022-1586 CVE-2022-1587 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpcsclite1-1.9.4-150400.1.9 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpcsclite1-1.9.4-150400.1.9 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-10109 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpixman-1-0-0.40.0-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpixman-1-0-0.40.0-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-44638 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpng12-0-1.2.57-2.18 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpng12-0-1.2.57-2.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2010-1205 CVE-2011-2501 CVE-2011-3026 CVE-2011-3045 CVE-2011-3048 CVE-2012-3386 CVE-2013-7353 CVE-2013-7354 CVE-2014-9495 CVE-2015-0973 CVE-2015-8126 CVE-2015-8540 CVE-2016-10087 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libpng16 fixes the following issues: Security issues fixed: - CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when png_image_free() was called under png_safe_execute (bsc#1124211). - CVE-2018-13785: Fixed a wrong calculation of row_factor in the png_check_chunk_length function in pngrutil.c, which could haved triggered and integer overflow and result in an divide-by-zero while processing a crafted PNG file, leading to a denial of service (bsc#1100687) Low SUSE bug 1100687 SUSE bug 1121624 SUSE bug 1124211 CVE-2018-13785 CVE-2019-7317 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpng16-16-1.6.34-3.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpng16-16-1.6.34-3.9.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-8126 CVE-2016-10087 CVE-2016-5735 CVE-2017-12652 CVE-2018-13785 CVE-2019-7317 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpolkit-agent-1-0-121-150500.1.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpolkit-agent-1-0-121-150500.1.6 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-3218 CVE-2015-3255 CVE-2015-3256 CVE-2015-4625 CVE-2018-1116 CVE-2018-19788 CVE-2019-6133 CVE-2021-3560 CVE-2021-4034 CVE-2021-4115 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpoppler-cpp0-23.01.0-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpoppler-cpp0-23.01.0-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-14517 CVE-2017-14518 CVE-2017-7511 CVE-2017-7515 CVE-2022-38784 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpoppler89-0.79.0-150200.3.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpoppler89-0.79.0-150200.3.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-14517 CVE-2017-14518 CVE-2017-7511 CVE-2017-7515 CVE-2021-30860 CVE-2022-38784 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpq5-15.3-150200.5.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpq5-15.3-150200.5.9.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-25694 CVE-2020-25695 CVE-2020-25696 CVE-2021-20229 CVE-2021-23214 CVE-2021-23222 CVE-2021-32027 CVE-2021-32028 CVE-2021-32029 CVE-2021-3393 CVE-2022-1552 CVE-2022-41862 CVE-2023-2454 CVE-2023-2455 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libprocps7-3.3.15-150000.7.31.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libprocps7-3.3.15-150000.7.31.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libprotobuf-c-devel-1.3.2-150200.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libprotobuf-c-devel-1.3.2-150200.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-48468 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libprotobuf-lite20-3.9.2-150200.4.19.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libprotobuf-lite20-3.9.2-150200.4.19.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-22569 CVE-2021-22570 CVE-2022-1941 CVE-2022-3171 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libproxy-devel-0.4.17-150400.1.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libproxy-devel-0.4.17-150400.1.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-25219 CVE-2020-26154 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpython3_6m1_0-3.6.15-150300.10.45.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpython3_6m1_0-3.6.15-150300.10.45.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-4650 CVE-2015-20107 CVE-2016-0772 CVE-2016-1000110 CVE-2016-5636 CVE-2016-5699 CVE-2017-18207 CVE-2018-1000802 CVE-2018-1060 CVE-2018-1061 CVE-2018-14647 CVE-2018-20406 CVE-2018-20852 CVE-2019-10160 CVE-2019-15903 CVE-2019-16056 CVE-2019-16935 CVE-2019-18348 CVE-2019-20907 CVE-2019-20916 CVE-2019-5010 CVE-2019-9636 CVE-2019-9674 CVE-2019-9947 CVE-2020-10735 CVE-2020-14422 CVE-2020-26116 CVE-2020-27619 CVE-2020-8492 CVE-2021-23336 CVE-2021-28861 CVE-2021-3177 CVE-2021-3426 CVE-2021-3572 CVE-2021-3733 CVE-2021-3737 CVE-2022-25236 CVE-2022-37454 CVE-2022-45061 CVE-2023-24329 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libqb-devel-2.0.6+20220323.758044b-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libqb-devel-2.0.6+20220323.758044b-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-12779 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libqpdf26-9.0.2-150200.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libqpdf26-9.0.2-150200.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-11624 CVE-2017-11625 CVE-2017-11626 CVE-2017-11627 CVE-2017-12595 CVE-2017-9208 CVE-2017-9209 CVE-2017-9210 CVE-2021-36978 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libqpdf28-10.3.1-1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libqpdf28-10.3.1-1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-11624 CVE-2017-11625 CVE-2017-11626 CVE-2017-11627 CVE-2017-12595 CVE-2017-9208 CVE-2017-9209 CVE-2017-9210 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 librrd8-1.7.0-6.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the librrd8-1.7.0-6.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-2131 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 librsync-devel-1.0.0-1.27 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the librsync-devel-1.0.0-1.27 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8242 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libruby2_5-2_5-2.5.9-150000.4.26.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libruby2_5-2_5-2.5.9-150000.4.26.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2012-6708 CVE-2015-9251 CVE-2017-17742 CVE-2018-1000073 CVE-2018-1000074 CVE-2018-1000075 CVE-2018-1000076 CVE-2018-1000077 CVE-2018-1000078 CVE-2018-1000079 CVE-2018-16395 CVE-2018-16396 CVE-2018-6914 CVE-2018-8777 CVE-2018-8778 CVE-2018-8779 CVE-2018-8780 CVE-2019-15845 CVE-2019-16201 CVE-2019-16254 CVE-2019-16255 CVE-2019-8320 CVE-2019-8321 CVE-2019-8322 CVE-2019-8323 CVE-2019-8324 CVE-2019-8325 CVE-2020-10663 CVE-2020-10933 CVE-2020-25613 CVE-2020-8130 CVE-2021-28965 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 CVE-2021-41817 CVE-2021-41819 CVE-2022-28739 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsamba-errors-devel-4.13.13+git.539.fdbc44a8598-3.20.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsamba-errors-devel-4.13.13+git.539.fdbc44a8598-3.20.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8143 CVE-2015-0240 CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-5370 CVE-2015-7560 CVE-2015-8467 CVE-2015-8543 CVE-2016-0771 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112 CVE-2016-2113 CVE-2016-2115 CVE-2016-2118 CVE-2016-2119 CVE-2016-2123 CVE-2016-2124 CVE-2016-2125 CVE-2016-2126 CVE-2017-11103 CVE-2017-12150 CVE-2017-12151 CVE-2017-12163 CVE-2017-14746 CVE-2017-15275 CVE-2017-2619 CVE-2017-7494 CVE-2018-1050 CVE-2018-1057 CVE-2018-10858 CVE-2018-10918 CVE-2018-10919 CVE-2018-1139 CVE-2018-1140 CVE-2018-14629 CVE-2018-16841 CVE-2018-16851 CVE-2018-16852 CVE-2018-16853 CVE-2018-16857 CVE-2018-16860 CVE-2019-10197 CVE-2019-10218 CVE-2019-12435 CVE-2019-12436 CVE-2019-14833 CVE-2019-14847 CVE-2019-14861 CVE-2019-14870 CVE-2019-14902 CVE-2019-14907 CVE-2019-19344 CVE-2019-3824 CVE-2019-3870 CVE-2019-3880 CVE-2020-10700 CVE-2020-10704 CVE-2020-10730 CVE-2020-10745 CVE-2020-10760 CVE-2020-14303 CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 CVE-2020-1472 CVE-2020-17049 CVE-2020-25717 CVE-2020-25718 CVE-2020-25719 CVE-2020-25721 CVE-2020-25722 CVE-2020-27840 CVE-2021-20254 CVE-2021-20277 CVE-2021-23192 CVE-2021-3738 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsamba-policy-devel-4.17.7+git.330.4057cd7a27a-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsamba-policy-devel-4.17.7+git.330.4057cd7a27a-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8143 CVE-2015-0240 CVE-2015-3223 CVE-2015-5252 CVE-2015-5296 CVE-2015-5299 CVE-2015-5330 CVE-2015-5370 CVE-2015-7560 CVE-2015-8467 CVE-2015-8543 CVE-2016-0771 CVE-2016-2110 CVE-2016-2111 CVE-2016-2112 CVE-2016-2113 CVE-2016-2115 CVE-2016-2118 CVE-2016-2119 CVE-2016-2123 CVE-2016-2124 CVE-2016-2125 CVE-2016-2126 CVE-2017-11103 CVE-2017-12150 CVE-2017-12151 CVE-2017-12163 CVE-2017-14746 CVE-2017-15275 CVE-2017-2619 CVE-2017-7494 CVE-2018-1050 CVE-2018-1057 CVE-2018-10858 CVE-2018-10918 CVE-2018-10919 CVE-2018-1139 CVE-2018-1140 CVE-2018-14629 CVE-2018-16841 CVE-2018-16851 CVE-2018-16852 CVE-2018-16853 CVE-2018-16857 CVE-2018-16860 CVE-2019-10197 CVE-2019-10218 CVE-2019-12435 CVE-2019-12436 CVE-2019-14833 CVE-2019-14847 CVE-2019-14861 CVE-2019-14870 CVE-2019-14902 CVE-2019-14907 CVE-2019-19344 CVE-2019-3824 CVE-2019-3870 CVE-2019-3880 CVE-2020-10700 CVE-2020-10704 CVE-2020-10730 CVE-2020-10745 CVE-2020-10760 CVE-2020-14303 CVE-2020-14318 CVE-2020-14323 CVE-2020-14383 CVE-2020-1472 CVE-2020-17049 CVE-2020-25717 CVE-2020-25718 CVE-2020-25719 CVE-2020-25720 CVE-2020-25721 CVE-2020-25722 CVE-2020-27840 CVE-2021-20251 CVE-2021-20254 CVE-2021-20277 CVE-2021-23192 CVE-2021-3738 CVE-2021-44141 CVE-2021-44142 CVE-2022-0336 CVE-2022-1615 CVE-2022-2031 CVE-2022-32742 CVE-2022-32743 CVE-2022-32744 CVE-2022-32745 CVE-2022-32746 CVE-2022-3437 CVE-2022-3592 CVE-2022-37966 CVE-2022-37967 CVE-2022-38023 CVE-2022-42898 CVE-2022-44640 CVE-2023-0225 CVE-2023-0614 CVE-2023-0922 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libseccomp-devel-2.5.3-150400.2.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libseccomp-devel-2.5.3-150400.2.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-9893 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libserf-1-1-1.3.9-2.31 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libserf-1-1-1.3.9-2.31 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-3504 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsha1detectcoll-devel-1.0.3-2.18 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsha1detectcoll-devel-1.0.3-2.18 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2005-4900 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libslirp-devel-4.7.0+44-150500.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libslirp-devel-4.7.0+44-150500.2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-10756 CVE-2020-1983 CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsmi-0.4.8-1.29 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsmi-0.4.8-1.29 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2010-2891 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libsndfile fixes the following issues: Security issues fixed: - CVE-2018-13139: Fix a stack-based buffer overflow in psf_memset in common.c that allows remote attackers to cause a denial of service (bsc#1100167). - CVE-2017-17456: Prevent segmentation fault in the function d2alaw_array() that may have lead to a remote DoS (bsc#1071777) - CVE-2017-17457: Prevent segmentation fault in the function d2ulaw_array() that may have lead to a remote DoS, a different vulnerability than CVE-2017-14246 (bsc#1071767) Moderate SUSE bug 1071767 SUSE bug 1071777 SUSE bug 1100167 CVE-2017-17456 CVE-2017-17457 CVE-2018-13139 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsndfile-devel-1.0.28-150000.5.17.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsndfile-devel-1.0.28-150000.5.17.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9496 CVE-2014-9756 CVE-2015-7805 CVE-2015-8075 CVE-2017-12562 CVE-2017-14245 CVE-2017-14246 CVE-2017-14634 CVE-2017-17456 CVE-2017-17457 CVE-2017-6892 CVE-2017-7585 CVE-2017-7586 CVE-2017-8361 CVE-2017-8362 CVE-2017-8363 CVE-2017-8365 CVE-2018-13139 CVE-2018-19432 CVE-2018-19758 CVE-2021-3246 CVE-2021-4156 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsnmp30-5.7.3-10.12.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsnmp30-5.7.3-10.12.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-5621 CVE-2018-18065 CVE-2020-15862 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsnmp40-5.9.3-150300.15.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsnmp40-5.9.3-150300.15.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-5621 CVE-2018-18065 CVE-2020-15862 CVE-2022-24805 CVE-2022-24806 CVE-2022-24807 CVE-2022-24808 CVE-2022-24809 CVE-2022-24810 CVE-2022-44792 CVE-2022-44793 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsolv-devel-0.7.23-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsolv-devel-0.7.23-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsoup-2_4-1-2.74.2-150400.1.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsoup-2_4-1-2.74.2-150400.1.6 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-2885 CVE-2018-12910 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libspeex1-1.2-150000.3.5.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libspeex1-1.2-150000.3.5.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-23903 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libspice-client-glib-2_0-8-0.41-150500.1.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libspice-client-glib-2_0-8-0.41-150500.1.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-10873 CVE-2018-10893 CVE-2020-14355 CVE-2021-20201 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsqlite3-0-3.39.3-150000.3.20.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsqlite3-0-3.39.3-150000.3.20.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-3414 CVE-2015-3415 CVE-2018-20346 CVE-2018-8740 CVE-2019-16168 CVE-2019-19244 CVE-2019-19317 CVE-2019-19603 CVE-2019-19645 CVE-2019-19646 CVE-2019-19880 CVE-2019-19923 CVE-2019-19924 CVE-2019-19925 CVE-2019-19926 CVE-2019-19959 CVE-2019-20218 CVE-2019-9936 CVE-2019-9937 CVE-2020-13434 CVE-2020-13435 CVE-2020-13630 CVE-2020-13631 CVE-2020-13632 CVE-2020-15358 CVE-2020-9327 CVE-2021-36690 CVE-2022-35737 CVE-2022-46908 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libssh-config-0.9.6-150400.1.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libssh-config-0.9.6-150400.1.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8132 CVE-2015-3146 CVE-2018-10933 CVE-2019-14889 CVE-2020-16135 CVE-2020-1730 CVE-2021-3634 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libssh2-1-1.9.0-4.13.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libssh2-1-1.9.0-4.13.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-1782 CVE-2016-0787 CVE-2019-17498 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libssh2_org fixes the following issues: - Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922] Enhancements and bugfixes: * adds ECDSA keys and host key support when using OpenSSL * adds ED25519 key and host key support when using OpenSSL 1.1.1 * adds OpenSSH style key file reading * adds AES CTR mode support when using WinCNG * adds PEM passphrase protected file support for Libgcrypt and WinCNG * adds SHA256 hostkey fingerprint * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path() * adds explicit zeroing of sensitive data in memory * adds additional bounds checks to network buffer reads * adds the ability to use the server default permissions when creating sftp directories * adds support for building with OpenSSL no engine flag * adds support for building with LibreSSL * increased sftp packet size to 256k * fixed oversized packet handling in sftp * fixed building with OpenSSL 1.1 * fixed a possible crash if sftp stat gets an unexpected response * fixed incorrect parsing of the KEX preference string value * fixed conditional RSA and AES-CTR support * fixed a small memory leak during the key exchange process * fixed a possible memory leak of the ssh banner string * fixed various small memory leaks in the backends * fixed possible out of bounds read when parsing public keys from the server * fixed possible out of bounds read when parsing invalid PEM files * no longer null terminates the scp remote exec command * now handle errors when diffie hellman key pair generation fails * improved building instructions * improved unit tests - Version update to 1.8.2: [bsc#1130103] Bug fixes: * Fixed the misapplied userauth patch that broke 1.8.1 * moved the MAX size declarations from the public header Moderate SUSE bug 1130103 SUSE bug 1178083 CVE-2019-17498 CVE-2019-3855 CVE-2019-3856 CVE-2019-3857 CVE-2019-3858 CVE-2019-3859 CVE-2019-3860 CVE-2019-3861 CVE-2019-3862 CVE-2019-3863 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsystemd0-249.16-150400.8.25.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsystemd0-249.16-150400.8.25.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-7510 CVE-2016-10156 CVE-2017-15908 CVE-2017-18078 CVE-2017-9445 CVE-2018-15686 CVE-2018-15687 CVE-2018-15688 CVE-2018-16864 CVE-2018-16865 CVE-2018-21029 CVE-2018-6954 CVE-2019-20386 CVE-2019-3842 CVE-2019-3843 CVE-2019-3844 CVE-2019-6454 CVE-2020-13529 CVE-2020-1712 CVE-2021-33910 CVE-2021-3997 CVE-2022-3821 CVE-2022-4415 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtag1-1.11.1-4.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libtag1-1.11.1-4.9.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-12678 CVE-2018-11439 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtasn1-4.13-150000.4.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libtasn1 fixes the following issues: Security issue fixed: - CVE-2018-1000654: Fixed a denial of service in the asn1 parser (bsc#1105435). Moderate SUSE bug 1105435 CVE-2018-1000654 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtidy5-5.4.0-3.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libtidy5-5.4.0-3.2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-5522 CVE-2015-5523 CVE-2016-6583 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtiff-devel-4.0.9-150000.45.25.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libtiff-devel-4.0.9-150000.45.25.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2012-4564 CVE-2013-1960 CVE-2013-1961 CVE-2013-4231 CVE-2013-4232 CVE-2013-4243 CVE-2013-4244 CVE-2014-8127 CVE-2014-8128 CVE-2014-8129 CVE-2014-8130 CVE-2014-9655 CVE-2015-1547 CVE-2015-7554 CVE-2015-8665 CVE-2015-8683 CVE-2015-8781 CVE-2015-8782 CVE-2015-8783 CVE-2016-10092 CVE-2016-10093 CVE-2016-10094 CVE-2016-10095 CVE-2016-10266 CVE-2016-10267 CVE-2016-10268 CVE-2016-10269 CVE-2016-10270 CVE-2016-10271 CVE-2016-10272 CVE-2016-10371 CVE-2016-3186 CVE-2016-3622 CVE-2016-3623 CVE-2016-3658 CVE-2016-3945 CVE-2016-3990 CVE-2016-3991 CVE-2016-5314 CVE-2016-5316 CVE-2016-5317 CVE-2016-5318 CVE-2016-5320 CVE-2016-5321 CVE-2016-5323 CVE-2016-5652 CVE-2016-5875 CVE-2016-6223 CVE-2016-9273 CVE-2016-9297 CVE-2016-9448 CVE-2016-9453 CVE-2016-9538 CVE-2017-11613 CVE-2017-12944 CVE-2017-16232 CVE-2017-17095 CVE-2017-18013 CVE-2017-5225 CVE-2017-7592 CVE-2017-7593 CVE-2017-7594 CVE-2017-7595 CVE-2017-7596 CVE-2017-7597 CVE-2017-7598 CVE-2017-7599 CVE-2017-7600 CVE-2017-7601 CVE-2017-7602 CVE-2017-9403 CVE-2017-9404 CVE-2017-9935 CVE-2017-9936 CVE-2018-10779 CVE-2018-10963 CVE-2018-12900 CVE-2018-16335 CVE-2018-17000 CVE-2018-17100 CVE-2018-17101 CVE-2018-17795 CVE-2018-18557 CVE-2018-18661 CVE-2018-19210 CVE-2018-5784 CVE-2018-7456 CVE-2018-8905 CVE-2019-14973 CVE-2019-17546 CVE-2019-6128 CVE-2019-7663 CVE-2020-19131 CVE-2020-35521 CVE-2020-35522 CVE-2020-35523 CVE-2020-35524 CVE-2022-0561 CVE-2022-0562 CVE-2022-0865 CVE-2022-0891 CVE-2022-0908 CVE-2022-0909 CVE-2022-0924 CVE-2022-1056 CVE-2022-2056 CVE-2022-2057 CVE-2022-2058 CVE-2022-22844 CVE-2022-2519 CVE-2022-2520 CVE-2022-2521 CVE-2022-2867 CVE-2022-2868 CVE-2022-2869 CVE-2022-34266 CVE-2022-34526 CVE-2022-3570 CVE-2022-3597 CVE-2022-3598 CVE-2022-3599 CVE-2022-3626 CVE-2022-3627 CVE-2022-3970 CVE-2022-48281 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtirpc-devel-1.2.6-150300.3.17.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libtirpc-devel-1.2.6-150300.3.17.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-4429 CVE-2021-46828 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtspi1-0.3.15-150400.1.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libtspi1-0.3.15-150400.1.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-18898 CVE-2020-24330 CVE-2020-24331 CVE-2020-24332 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtss2-esys0-3.1.0-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libtss2-esys0-3.1.0-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-24455 CVE-2023-22745 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libu2f-host and pam_u2f to version 1.0.8 fixes the following issues: Security issues fixed for libu2f-host: - CVE-2019-9578: Fixed a memory leak due to a wrong parse of init's response (bsc#1128140). Security issues fixed for pam_u2f: - CVE-2019-12209: Fixed an issue where symlinks in the user's directory were followed (bsc#1135729). - CVE-2019-12210: Fixed file descriptor leaks (bsc#1135727). Moderate SUSE bug 1128140 SUSE bug 1135727 SUSE bug 1135729 CVE-2019-12209 CVE-2019-12210 CVE-2019-9578 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libu2f-host-devel-1.1.10-3.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libu2f-host-devel-1.1.10-3.9.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-20340 CVE-2019-9578 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libudisks2-0-2.9.2-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libudisks2-0-2.9.2-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-17336 CVE-2021-3802 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libunbound2-1.6.8-150100.10.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libunbound2-1.6.8-150100.10.8.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8602 CVE-2017-15105 CVE-2019-18934 CVE-2019-25031 CVE-2019-25032 CVE-2019-25033 CVE-2019-25034 CVE-2019-25035 CVE-2019-25036 CVE-2019-25037 CVE-2019-25038 CVE-2019-25039 CVE-2019-25040 CVE-2019-25041 CVE-2019-25042 CVE-2020-12662 CVE-2020-12663 CVE-2020-28935 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libusbguard1-1.1.2-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libusbguard1-1.1.2-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-25058 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libuv-devel-1.44.2-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libuv-devel-1.44.2-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-22918 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libvirt-libs-9.0.0-150500.4.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libvirt-libs-9.0.0-150500.4.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-7823 CVE-2014-8131 CVE-2015-0236 CVE-2015-5247 CVE-2015-5313 CVE-2017-1000256 CVE-2017-2635 CVE-2017-5715 CVE-2018-1064 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-3639 CVE-2018-5748 CVE-2019-10132 CVE-2019-10161 CVE-2019-10166 CVE-2019-10167 CVE-2019-10168 CVE-2019-11091 CVE-2019-11135 CVE-2019-3886 CVE-2020-10701 CVE-2020-12430 CVE-2020-14339 CVE-2020-15708 CVE-2020-25637 CVE-2021-3631 CVE-2021-3667 CVE-2021-4147 CVE-2022-0897 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libvmtools-devel-12.2.0-150300.26.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libvmtools-devel-12.2.0-150300.26.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-5191 CVE-2022-31676 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libvorbis fixes the following issues: The following security issue was fixed: - Fixed the validation of channels in mapping0_forward(), which previously allowed remote attackers to cause a denial of service via specially crafted files (CVE-2018-10392, bsc#1091070) Moderate SUSE bug 1091070 CVE-2018-10392 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libvorbis-devel-1.3.6-150000.4.5.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libvorbis-devel-1.3.6-150000.4.5.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-14160 CVE-2017-14632 CVE-2017-14633 CVE-2018-10392 CVE-2018-10393 CVE-2018-5146 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libvpx-devel-1.11.0-150400.1.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libvpx-devel-1.11.0-150400.1.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-1621 CVE-2016-2464 CVE-2017-0641 CVE-2017-13194 CVE-2019-2126 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 CVE-2020-0034 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libwavpack1-5.4.0-150000.4.15.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libwavpack1-5.4.0-150000.4.15.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841 CVE-2018-6767 CVE-2018-7253 CVE-2018-7254 CVE-2019-1010319 CVE-2019-11498 CVE-2020-35738 CVE-2021-44269 CVE-2022-2476 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libwebp-devel-1.0.3-3.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libwebp-devel-1.0.3-3.2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-8888 CVE-2016-9085 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libwireshark15-3.6.13-150000.3.89.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libwireshark15-3.6.13-150000.3.89.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8710 CVE-2014-8711 CVE-2014-8712 CVE-2014-8713 CVE-2014-8714 CVE-2015-0559 CVE-2015-0560 CVE-2015-0561 CVE-2015-0562 CVE-2015-0563 CVE-2015-0564 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 CVE-2015-3808 CVE-2015-3809 CVE-2015-3810 CVE-2015-3811 CVE-2015-3812 CVE-2015-3813 CVE-2015-3814 CVE-2015-3815 CVE-2015-4651 CVE-2015-4652 CVE-2015-6241 CVE-2015-6242 CVE-2015-6243 CVE-2015-6244 CVE-2015-6245 CVE-2015-6246 CVE-2015-6247 CVE-2015-6248 CVE-2015-6249 CVE-2015-7830 CVE-2015-8711 CVE-2015-8718 CVE-2015-8720 CVE-2015-8721 CVE-2015-8722 CVE-2015-8723 CVE-2015-8724 CVE-2015-8725 CVE-2015-8726 CVE-2015-8727 CVE-2015-8728 CVE-2015-8729 CVE-2015-8730 CVE-2015-8731 CVE-2015-8732 CVE-2015-8733 CVE-2015-8734 CVE-2015-8735 CVE-2015-8736 CVE-2015-8737 CVE-2015-8738 CVE-2015-8739 CVE-2015-8740 CVE-2015-8741 CVE-2015-8742 CVE-2016-2522 CVE-2016-2523 CVE-2016-2524 CVE-2016-2525 CVE-2016-2526 CVE-2016-2527 CVE-2016-2528 CVE-2016-2529 CVE-2016-2530 CVE-2016-2531 CVE-2016-2532 CVE-2016-5350 CVE-2016-5351 CVE-2016-5352 CVE-2016-5353 CVE-2016-5354 CVE-2016-5355 CVE-2016-5356 CVE-2016-5357 CVE-2016-5358 CVE-2016-6505 CVE-2016-6508 CVE-2016-6509 CVE-2016-6510 CVE-2016-6511 CVE-2016-6512 CVE-2016-6513 CVE-2016-7175 CVE-2016-7176 CVE-2016-7177 CVE-2016-7178 CVE-2016-7179 CVE-2016-7180 CVE-2016-9372 CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 CVE-2017-11406 CVE-2017-11407 CVE-2017-11408 CVE-2017-11410 CVE-2017-11411 CVE-2017-13764 CVE-2017-13765 CVE-2017-13766 CVE-2017-13767 CVE-2017-15189 CVE-2017-15190 CVE-2017-15191 CVE-2017-15192 CVE-2017-15193 CVE-2017-17083 CVE-2017-17084 CVE-2017-17085 CVE-2017-5596 CVE-2017-5597 CVE-2017-5753 CVE-2017-6467 CVE-2017-6468 CVE-2017-6469 CVE-2017-6470 CVE-2017-6471 CVE-2017-6472 CVE-2017-6473 CVE-2017-6474 CVE-2017-7700 CVE-2017-7701 CVE-2017-7702 CVE-2017-7703 CVE-2017-7704 CVE-2017-7705 CVE-2017-7745 CVE-2017-7746 CVE-2017-7747 CVE-2017-7748 CVE-2017-9343 CVE-2017-9344 CVE-2017-9345 CVE-2017-9346 CVE-2017-9347 CVE-2017-9348 CVE-2017-9349 CVE-2017-9350 CVE-2017-9351 CVE-2017-9352 CVE-2017-9353 CVE-2017-9354 CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 CVE-2018-12086 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14344 CVE-2018-14367 CVE-2018-14368 CVE-2018-14369 CVE-2018-14370 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2018-18225 CVE-2018-18226 CVE-2018-18227 CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 CVE-2018-19628 CVE-2018-5334 CVE-2018-5335 CVE-2018-5336 CVE-2018-7320 CVE-2018-7321 CVE-2018-7322 CVE-2018-7323 CVE-2018-7324 CVE-2018-7325 CVE-2018-7326 CVE-2018-7327 CVE-2018-7328 CVE-2018-7329 CVE-2018-7330 CVE-2018-7331 CVE-2018-7332 CVE-2018-7333 CVE-2018-7334 CVE-2018-7335 CVE-2018-7336 CVE-2018-7337 CVE-2018-7417 CVE-2018-7418 CVE-2018-7419 CVE-2018-7420 CVE-2018-7421 CVE-2018-9256 CVE-2018-9257 CVE-2018-9258 CVE-2018-9260 CVE-2018-9261 CVE-2018-9262 CVE-2018-9263 CVE-2018-9264 CVE-2018-9265 CVE-2018-9266 CVE-2018-9267 CVE-2018-9268 CVE-2018-9269 CVE-2018-9270 CVE-2018-9271 CVE-2018-9272 CVE-2018-9273 CVE-2018-9274 CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10897 CVE-2019-10898 CVE-2019-10899 CVE-2019-10900 CVE-2019-10901 CVE-2019-10902 CVE-2019-10903 CVE-2019-13619 CVE-2019-16319 CVE-2019-19553 CVE-2019-5716 CVE-2019-5717 CVE-2019-5718 CVE-2019-5719 CVE-2019-5721 CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 CVE-2020-11647 CVE-2020-13164 CVE-2020-15466 CVE-2020-17498 CVE-2020-25862 CVE-2020-25863 CVE-2020-25866 CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421 CVE-2020-26422 CVE-2020-26575 CVE-2020-28030 CVE-2020-7044 CVE-2020-9428 CVE-2020-9429 CVE-2020-9430 CVE-2020-9431 CVE-2021-22173 CVE-2021-22174 CVE-2021-22191 CVE-2021-22207 CVE-2021-22235 CVE-2021-39920 CVE-2021-39921 CVE-2021-39922 CVE-2021-39924 CVE-2021-39925 CVE-2021-39926 CVE-2021-39928 CVE-2021-39929 CVE-2021-4181 CVE-2021-4182 CVE-2021-4183 CVE-2021-4184 CVE-2021-4185 CVE-2021-4186 CVE-2021-4190 CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586 CVE-2022-3190 CVE-2022-3725 CVE-2022-4345 CVE-2023-0411 CVE-2023-0412 CVE-2023-0413 CVE-2023-0415 CVE-2023-0416 CVE-2023-0417 CVE-2023-1161 CVE-2023-1992 CVE-2023-1993 CVE-2023-1994 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libwscodecs1-2.4.16-3.31.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libwscodecs1-2.4.16-3.31.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8710 CVE-2014-8711 CVE-2014-8712 CVE-2014-8713 CVE-2014-8714 CVE-2015-0559 CVE-2015-0560 CVE-2015-0561 CVE-2015-0562 CVE-2015-0563 CVE-2015-0564 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 CVE-2015-3808 CVE-2015-3809 CVE-2015-3810 CVE-2015-3811 CVE-2015-3812 CVE-2015-3813 CVE-2015-3814 CVE-2015-3815 CVE-2015-4651 CVE-2015-4652 CVE-2015-6241 CVE-2015-6242 CVE-2015-6243 CVE-2015-6244 CVE-2015-6245 CVE-2015-6246 CVE-2015-6247 CVE-2015-6248 CVE-2015-6249 CVE-2015-7830 CVE-2015-8711 CVE-2015-8718 CVE-2015-8720 CVE-2015-8721 CVE-2015-8722 CVE-2015-8723 CVE-2015-8724 CVE-2015-8725 CVE-2015-8726 CVE-2015-8727 CVE-2015-8728 CVE-2015-8729 CVE-2015-8730 CVE-2015-8731 CVE-2015-8732 CVE-2015-8733 CVE-2015-8734 CVE-2015-8735 CVE-2015-8736 CVE-2015-8737 CVE-2015-8738 CVE-2015-8739 CVE-2015-8740 CVE-2015-8741 CVE-2015-8742 CVE-2016-2522 CVE-2016-2523 CVE-2016-2524 CVE-2016-2525 CVE-2016-2526 CVE-2016-2527 CVE-2016-2528 CVE-2016-2529 CVE-2016-2530 CVE-2016-2531 CVE-2016-2532 CVE-2016-5350 CVE-2016-5351 CVE-2016-5352 CVE-2016-5353 CVE-2016-5354 CVE-2016-5355 CVE-2016-5356 CVE-2016-5357 CVE-2016-5358 CVE-2016-6505 CVE-2016-6508 CVE-2016-6509 CVE-2016-6510 CVE-2016-6511 CVE-2016-6512 CVE-2016-6513 CVE-2016-7175 CVE-2016-7176 CVE-2016-7177 CVE-2016-7178 CVE-2016-7179 CVE-2016-7180 CVE-2016-9372 CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 CVE-2017-11406 CVE-2017-11407 CVE-2017-11408 CVE-2017-11410 CVE-2017-11411 CVE-2017-13764 CVE-2017-13765 CVE-2017-13766 CVE-2017-13767 CVE-2017-15189 CVE-2017-15190 CVE-2017-15191 CVE-2017-15192 CVE-2017-15193 CVE-2017-17083 CVE-2017-17084 CVE-2017-17085 CVE-2017-5596 CVE-2017-5597 CVE-2017-5753 CVE-2017-6467 CVE-2017-6468 CVE-2017-6469 CVE-2017-6470 CVE-2017-6471 CVE-2017-6472 CVE-2017-6473 CVE-2017-6474 CVE-2017-7700 CVE-2017-7701 CVE-2017-7702 CVE-2017-7703 CVE-2017-7704 CVE-2017-7705 CVE-2017-7745 CVE-2017-7746 CVE-2017-7747 CVE-2017-7748 CVE-2017-9343 CVE-2017-9344 CVE-2017-9345 CVE-2017-9346 CVE-2017-9347 CVE-2017-9348 CVE-2017-9349 CVE-2017-9350 CVE-2017-9351 CVE-2017-9352 CVE-2017-9353 CVE-2017-9354 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11362 CVE-2018-12086 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14344 CVE-2018-14367 CVE-2018-14368 CVE-2018-14369 CVE-2018-14370 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2018-18227 CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 CVE-2018-5334 CVE-2018-5335 CVE-2018-5336 CVE-2018-7320 CVE-2018-7321 CVE-2018-7322 CVE-2018-7323 CVE-2018-7324 CVE-2018-7325 CVE-2018-7326 CVE-2018-7327 CVE-2018-7328 CVE-2018-7329 CVE-2018-7330 CVE-2018-7331 CVE-2018-7332 CVE-2018-7333 CVE-2018-7334 CVE-2018-7335 CVE-2018-7336 CVE-2018-7337 CVE-2018-7417 CVE-2018-7418 CVE-2018-7419 CVE-2018-7420 CVE-2018-7421 CVE-2018-9256 CVE-2018-9257 CVE-2018-9258 CVE-2018-9260 CVE-2018-9261 CVE-2018-9262 CVE-2018-9263 CVE-2018-9264 CVE-2018-9265 CVE-2018-9266 CVE-2018-9267 CVE-2018-9268 CVE-2018-9269 CVE-2018-9270 CVE-2018-9271 CVE-2018-9272 CVE-2018-9273 CVE-2018-9274 CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10899 CVE-2019-10901 CVE-2019-10903 CVE-2019-13619 CVE-2019-5717 CVE-2019-5718 CVE-2019-5719 CVE-2019-5721 CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libxerces-c-3_2-3.2.3-1.28 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libxerces-c-3_2-3.2.3-1.28 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-0729 CVE-2016-2099 CVE-2016-4463 CVE-2017-12627 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libxkbcommon-devel-1.3.0-150400.1.13 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libxkbcommon-devel-1.3.0-150400.1.13 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-15853 CVE-2018-15854 CVE-2018-15855 CVE-2018-15856 CVE-2018-15857 CVE-2018-15858 CVE-2018-15859 CVE-2018-15861 CVE-2018-15862 CVE-2018-15863 CVE-2018-15864 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libxml2-2-2.10.3-150500.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libxml2-2-2.10.3-150500.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-0191 CVE-2014-3660 CVE-2015-1819 CVE-2015-5312 CVE-2015-7497 CVE-2015-7498 CVE-2015-7499 CVE-2015-7500 CVE-2015-7941 CVE-2015-7942 CVE-2015-8035 CVE-2015-8242 CVE-2016-1762 CVE-2016-1833 CVE-2016-1834 CVE-2016-1835 CVE-2016-1836 CVE-2016-1837 CVE-2016-1838 CVE-2016-1839 CVE-2016-1840 CVE-2016-3627 CVE-2016-3705 CVE-2016-4483 CVE-2016-4658 CVE-2017-0663 CVE-2017-5969 CVE-2017-9047 CVE-2017-9048 CVE-2017-9049 CVE-2018-14404 CVE-2018-14567 CVE-2018-9251 CVE-2019-19956 CVE-2019-20388 CVE-2020-24977 CVE-2020-7595 CVE-2021-3516 CVE-2021-3517 CVE-2021-3518 CVE-2021-3537 CVE-2021-3541 CVE-2022-2309 CVE-2022-23308 CVE-2022-29824 CVE-2022-40303 CVE-2022-40304 CVE-2023-28484 CVE-2023-29469 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libxslt fixes the following issues: - CVE-2021-30560: Fixing a use after free vulnerability in Blink XSLT (bsc#1208574). Important SUSE bug 1208574 CVE-2021-30560 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libxslt-devel-1.1.34-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libxslt-devel-1.1.34-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-7995 CVE-2015-9019 CVE-2016-4738 CVE-2017-5029 CVE-2019-11068 CVE-2019-13117 CVE-2019-13118 CVE-2019-18197 CVE-2021-30560 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libyajl fixes the following issues: - CVE-2022-24795: Fixed heap-based buffer overflow when handling large inputs (bsc#1198405). Moderate SUSE bug 1198405 CVE-2022-24795 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libyajl-devel-2.1.0-150000.4.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libyajl-devel-2.1.0-150000.4.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-24795 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libyaml-0-2-0.1.7-1.17 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libyaml-0-2-0.1.7-1.17 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-6393 CVE-2014-2525 CVE-2014-9130 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libyaml-cpp0_6-0.6.3-150400.4.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libyaml-cpp0_6-0.6.3-150400.4.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-5950 CVE-2018-20573 CVE-2018-20574 CVE-2019-6285 CVE-2019-6292 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libykcs11-1-1.6.2-4.30 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libykcs11-1-1.6.2-4.30 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-14779 CVE-2018-14780 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libzip-devel-1.8.0-150400.1.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libzip-devel-1.8.0-150400.1.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-2331 CVE-2017-12858 CVE-2017-14107 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libzmq5-4.2.3-3.15.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libzmq5-4.2.3-3.15.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-7202 CVE-2014-7203 CVE-2014-9721 CVE-2019-13132 CVE-2019-6250 CVE-2020-15166 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libzstd-devel-1.5.0-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libzstd-devel-1.5.0-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-11922 CVE-2022-4899 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libzzip-0-13-0.13.69-3.10.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libzzip-0-13-0.13.69-3.10.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-5974 CVE-2017-5975 CVE-2017-5976 CVE-2017-5977 CVE-2017-5978 CVE-2017-5979 CVE-2017-5981 CVE-2018-16548 CVE-2018-17828 CVE-2018-6381 CVE-2018-6484 CVE-2018-6540 CVE-2018-6542 CVE-2018-7725 CVE-2018-7726 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 log4j12-1.2.17-4.9.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for log4j12 fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844) - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#1194843) - CVE-2022-23302: Fix remote code execution by removing src/main/java/org/apache/log4j/net/JMSSink.java. (bsc#1194842) Important SUSE bug 1193184 SUSE bug 1194842 SUSE bug 1194843 SUSE bug 1194844 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 login_defs-4.8.1-150400.10.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the login_defs-4.8.1-150400.10.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-7169 CVE-2023-29383 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 logrotate-3.18.1-150400.3.7.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for logrotate fixes the following issues: Security issues fixed: - CVE-2022-1348: Fixed insecure permissions for state file creation (bsc#1199652). - Improved coredump handing for SUID binaries (bsc#1192449). Non-security issues fixed: - Fixed 'logrotate emits unintended warning: keyword size not properly separated, found 0x3d' (bsc#1200278, bsc#1200802). Important SUSE bug 1192449 SUSE bug 1199652 SUSE bug 1200278 SUSE bug 1200802 CVE-2022-1348 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for lua53 fixes the following issues: Update to version 5.3.6: - CVE-2020-24371: lgc.c mishandles the interaction between barriers and the sweep phase, leading to a memory access violation involving collectgarbage (bsc#1175449) - CVE-2020-24370: ldebug.c allows a negation overflow and segmentation fault in getlocal and setlocal (bsc#1175448) - Long brackets with a huge number of '=' overflow some internal buffer arithmetic. Moderate SUSE bug 1175448 SUSE bug 1175449 CVE-2020-24370 CVE-2020-24371 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for mariadb-connector-c fixes the following issues: Security issue fixed: - CVE-2020-13249: Fixed an improper validation of OK packets received from clients (bsc#1171550). Non-security issues fixed: - Update to release 3.1.8 (bsc#1171550) * CONC-304: Rename the static library to libmariadb.a and other libmariadb files in a consistent manner * CONC-441: Default user name for C/C is wrong if login user is different from effective user * CONC-449: Check $MARIADB_HOME/my.cnf in addition to $MYSQL_HOME/my.cnf * CONC-457: mysql_list_processes crashes in unpack_fields * CONC-458: mysql_get_timeout_value crashes when used improper * CONC-464: Fix static build for auth_gssapi_client plugin Important SUSE bug 1171550 CVE-2020-13249 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 mercurial-5.9.1-150400.1.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the mercurial-5.9.1-150400.1.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-7545 CVE-2016-3068 CVE-2016-3069 CVE-2016-3105 CVE-2016-3630 CVE-2017-1000115 CVE-2017-1000116 CVE-2017-17458 CVE-2018-1000132 CVE-2018-13346 CVE-2018-13347 CVE-2018-13348 CVE-2018-17983 CVE-2019-3902 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for mgetty fixes the following issues: - CVE-2019-1010190: Fixed a denial of service which could be caused by a local attacker in putwhitespan() (bsc#1142770). - Fixed a permission issue which have resulted in build failures (bsc#1168170). Moderate SUSE bug 1142770 SUSE bug 1168170 CVE-2019-1010190 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 minicom-2.7.1-1.19 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the minicom-2.7.1-1.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-7467 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for mokutil fixes the following issues: - Adds SBAT revocation support to mokutil. (bsc#1198458) New options added (see manpage): - mokutil --set-sbat-policy (latest | previous | delete) to set the SBAT acceptance policy. - mokutil --list-sbat-revocations To list the current SBAT revocations. Moderate SUSE bug 1198458 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 mozilla-nspr-32bit-4.34.1-150000.3.26.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the mozilla-nspr-32bit-4.34.1-150000.3.26.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-7183 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 mutt-1.10.1-150000.3.23.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for mutt fixes the following issues: - CVE-2020-14954: Fixed a response injection due to a STARTTLS buffering issue which was affecting IMAP, SMTP, and POP3 (bsc#1173197). - CVE-2020-14093: Fixed a potential IMAP Man-in-the-Middle attack via a PREAUTH response (bsc#1172906, bsc#1172935). - CVE-2020-14154: Fixed an issue where Mutt was ignoring an expired certificate and was proceeding with a connection (bsc#1172906, bsc#1172935). Important SUSE bug 1172906 SUSE bug 1172935 SUSE bug 1173197 CVE-2020-14093 CVE-2020-14154 CVE-2020-14954 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ncurses fixes the following issues: - CVE-2021-39537: Fixed an heap-based buffer overflow in _nc_captoinfo. (bsc#1190793) Moderate SUSE bug 1190793 CVE-2021-39537 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for net-snmp fixes the following issues: - CVE-2020-15862: Make extended MIB read-only (bsc#1174961) - CVE-2018-18065: Fix remote DoS in agent/helpers/table.c (bsc#1111122) Important SUSE bug 1027353 SUSE bug 1081164 SUSE bug 1102775 SUSE bug 1108471 SUSE bug 1111122 SUSE bug 1116807 SUSE bug 1140341 SUSE bug 1145864 SUSE bug 1152968 SUSE bug 1174961 SUSE bug 1178021 SUSE bug 1178351 SUSE bug 1179009 SUSE bug 1179699 SUSE bug 1181591 CVE-2018-18065 CVE-2020-15862 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for net-snmp fixes the following issues: - CVE-2022-44793: Fixed a NULL pointer dereference issue that could allow a remote attacker with write access to crash the server instance (bsc#1205148). - CVE-2022-44792: Fixed a NULL pointer dereference issue that could allow a remote attacker with write access to crash the server instance (bsc#1205150). Other fixes: - Enabled AES-192 and AES-256 privacy protocols (bsc#1206828). - Fixed an incorrect systemd hardening that caused home directory size and allocation to be listed incorrectly (bsc#1206044) Moderate SUSE bug 1205148 SUSE bug 1205150 SUSE bug 1206044 SUSE bug 1206828 CVE-2022-44792 CVE-2022-44793 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for netpbm fixes the following issues: Security issues fixed: - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288). - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291). - create netpbm-vulnerable subpackage and move pstopnm there, as ghostscript is used to convert (bsc#1136936) Moderate SUSE bug 1024288 SUSE bug 1024291 SUSE bug 1136936 CVE-2017-2579 CVE-2017-2580 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 nfs-client-2.1.1-150500.20.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the nfs-client-2.1.1-150500.20.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-3689 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 nmap-7.92-150400.1.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the nmap-7.92-150400.1.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-18594 CVE-2018-15173 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for oniguruma fixes the following issues: - CVE-2019-19246: Fixed an out of bounds access during regular expression matching (bsc#1157805). - CVE-2019-19204: Fixed an out of bounds access when compiling a crafted regular expression (bsc#1164569). - CVE-2019-19203: Fixed an out of bounds access when performing a string search (bsc#1164550). - CVE-2019-16163: Fixed an uncontrolled recursion issue when compiling a crafted regular expression, which could lead to denial of service (bsc#1150130). - CVE-2020-26159: Fixed an off-by-one buffer overflow (bsc#1177179). - CVE-2019-13224: Fixed a potential use-after-free when handling multiple different encodings (bsc#1142847). Important SUSE bug 1142847 SUSE bug 1150130 SUSE bug 1157805 SUSE bug 1164550 SUSE bug 1164569 SUSE bug 1177179 CVE-2019-13224 CVE-2019-16163 CVE-2019-19203 CVE-2019-19204 CVE-2019-19246 CVE-2020-26159 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openldap2 fixes the following issues: - CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240). Important SUSE bug 1199240 CVE-2022-29155 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 opensc-0.22.0-150400.1.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the opensc-0.22.0-150400.1.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-16391 CVE-2018-16392 CVE-2018-16393 CVE-2018-16418 CVE-2018-16419 CVE-2018-16420 CVE-2018-16421 CVE-2018-16422 CVE-2018-16423 CVE-2018-16424 CVE-2018-16425 CVE-2018-16426 CVE-2018-16427 CVE-2019-15945 CVE-2019-15946 CVE-2019-19479 CVE-2019-19480 CVE-2019-20792 CVE-2019-6502 CVE-2020-26570 CVE-2020-26571 CVE-2020-26572 CVE-2021-42779 CVE-2021-42780 CVE-2021-42781 CVE-2021-42782 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 openssh-8.4p1-150300.3.18.2 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssh fixes the following issues: - CVE-2021-28041: Fixed double free in ssh-agent (bsc#1183137). Important SUSE bug 1183137 CVE-2021-28041 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 opie-32bit-2.4-1.96 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the opie-32bit-2.4-1.96 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2011-2489 CVE-2011-2490 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 pam_krb5-2.4.13-1.36 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the pam_krb5-2.4.13-1.36 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2008-3825 CVE-2009-1384 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 pam_ssh-2.1-2.27 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the pam_ssh-2.1-2.27 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2009-1273 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 pam_u2f-1.2.0-150400.2.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the pam_u2f-1.2.0-150400.2.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-12209 CVE-2019-12210 CVE-2021-31924 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 pam_yubico-2.26-1.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the pam_yubico-2.26-1.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-9275 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 patch-2.7.6-150000.5.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for patch fixes the following issues: Security issues fixed: - CVE-2019-13636: Fixed follow symlinks unless --follow-symlinks is given. This increases the security against malicious patches (bsc#1142041). - CVE-2018-6952: Fixed swapping fakelines in pch_swap. This bug was causing a double free leading to a crash (bsc#1080985). Bugfixes: - Abort when cleaning up fails. This bug could cause an infinite loop when a patch wouldn't apply, leading to a segmentation fault (bsc#1111572). - Pass the correct stat to backup files. This bug would occasionally cause backup files to be missing when all hunks failed to apply (bsc#1198106). Moderate SUSE bug 1080985 SUSE bug 1111572 SUSE bug 1142041 SUSE bug 1198106 CVE-2018-6952 CVE-2019-13636 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for pcre fixes the following issues: Update pcre to version 8.45: - CVE-2020-14155: Fixed integer overflow via a large number after a '(?C' substring (bsc#1172974). - CVE-2019-20838: Fixed buffer over-read in JIT compiler (bsc#1172973) Moderate SUSE bug 1172973 SUSE bug 1172974 CVE-2019-20838 CVE-2020-14155 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for pcre2 fixes the following issues: - CVE-2022-1587: Fixed out-of-bounds read due to bug in recursions (bsc#1199235). Important SUSE bug 1199235 CVE-2022-1587 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-Archive-Zip-1.60-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for perl-Archive-Zip fixes the following security issue: - CVE-2018-10860: Prevent directory traversal caused by not properly sanitizing paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could have used this flaw to write or overwrite arbitrary files in the context of the perl interpreter (bsc#1099497) Moderate SUSE bug 1099497 CVE-2018-10860 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-Convert-ASN1-0.27-1.6.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for perl-Convert-ASN1 fixes the following issue: - CVE-2013-7488: Fixed an infinite loop via unexpected input (bsc#1168934). Moderate SUSE bug 1168934 CVE-2013-7488 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-DBI-1.642-3.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for perl-DBI fixes the following issues: - DBD::File drivers can open files from folders other than those specifically passed via the f_dir attribute in the data source name (DSN). [bsc#1176492, CVE-2014-10401, CVE-2014-10402] Moderate SUSE bug 1176492 CVE-2014-10401 CVE-2014-10402 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-File-Path-2.150000-1.22 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-File-Path-2.150000-1.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-6512 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-HTML-Parser-3.72-1.26 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-HTML-Parser-3.72-1.26 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2009-3627 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-HTTP-Daemon-6.01-150000.3.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for perl-HTTP-Daemon fixes the following issues: - CVE-2022-31081: Fixed request smuggling in HTTP::Daemon (bsc#1201157). Moderate SUSE bug 1201157 CVE-2022-31081 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-Mail-SpamAssassin-3.4.5-12.13.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-Mail-SpamAssassin-3.4.5-12.13.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-1238 CVE-2017-15705 CVE-2018-11780 CVE-2018-11781 CVE-2018-11805 CVE-2019-12420 CVE-2020-1930 CVE-2020-1931 CVE-2020-1946 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-Net-Server-2.009-150000.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for perl-Net-Server fixes the following issues: - CVE-2013-1841: Fixed insufficient hostname access checking (bsc#808830). Moderate SUSE bug 808830 CVE-2013-1841 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-XML-Twig-3.52-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for perl-XML-Twig fixes the following issues: - Security fix [bsc#1008644, CVE-2016-9180] * Setting expand_external_ents to 0 or -1 currently doesn't work as expected; To completely turn off expanding external entities use no_xxe. * Update documentation for XML::Twig to mention problems with expand_external_ents and add information about new no_xxe argument Moderate SUSE bug 1008644 CVE-2016-9180 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-biber-2021.20210325.svn30357-150400.29.15 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-biber-2021.20210325.svn30357-150400.29.15 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-10243 CVE-2018-17407 CVE-2019-18604 CVE-2020-8016 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 permissions-20201225-150400.5.16.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for permissions fixes the following issues: * apptainer: fix starter-suid location (bsc#1198720) * static permissions: remove deprecated bind / named chroot entries (bsc#1200747) * postfix: add postlog setgid for maildrop binary (bsc#1201385) Important SUSE bug 1198720 SUSE bug 1200747 SUSE bug 1201385 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for pixman fixes the following issues: - CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033). Important SUSE bug 1205033 CVE-2022-44638 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 policycoreutils-3.1-150400.1.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the policycoreutils-3.1-150400.1.5 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-7545 CVE-2018-1063 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 postgresql-15-150500.8.19 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the postgresql-15-150500.8.19 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-14798 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postgresql15 fixes the following issues: Updated to version 15.3: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). - CVE-2023-2455: Fixed an issue that could allow a user to see or modify rows that should have been invisible (bsc#1211229). - Internal fixes (bsc#1210303). Important SUSE bug 1210303 SUSE bug 1211228 SUSE bug 1211229 CVE-2023-2454 CVE-2023-2455 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 powerpc-utils-1.3.11-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the powerpc-utils-1.3.11-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-4040 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ppc64-diag-2.7.9-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ppc64-diag-2.7.9-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-4038 CVE-2014-4039 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 procmail-3.22-2.34 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the procmail-3.22-2.34 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-3618 CVE-2017-16844 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for procps fixes the following issues: procps was updated to 3.3.15. (bsc#1092100) Following security issues were fixed: - CVE-2018-1122: Prevent local privilege escalation in top. If a user ran top with HOME unset in an attacker-controlled directory, the attacker could have achieved privilege escalation by exploiting one of several vulnerabilities in the config_file() function (bsc#1092100). - CVE-2018-1123: Prevent denial of service in ps via mmap buffer overflow. Inbuilt protection in ps maped a guard page at the end of the overflowed buffer, ensuring that the impact of this flaw is limited to a crash (temporary denial of service) (bsc#1092100). - CVE-2018-1124: Prevent multiple integer overflows leading to a heap corruption in file2strvec function. This allowed a privilege escalation for a local attacker who can create entries in procfs by starting processes, which could result in crashes or arbitrary code execution in proc utilities run by other users (bsc#1092100). - CVE-2018-1125: Prevent stack buffer overflow in pgrep. This vulnerability was mitigated by FORTIFY limiting the impact to a crash (bsc#1092100). - CVE-2018-1126: Ensure correct integer size in proc/alloc.* to prevent truncation/integer overflow issues (bsc#1092100). Also this non-security issue was fixed: - Fix CPU summary showing old data. (bsc#1121753) The update to 3.3.15 contains the following fixes: * library: Increment to 8:0:1 No removals, no new functions Changes: slab and pid structures * library: Just check for SIGLOST and don't delete it * library: Fix integer overflow and LPE in file2strvec CVE-2018-1124 * library: Use size_t for alloc functions CVE-2018-1126 * library: Increase comm size to 64 * pgrep: Fix stack-based buffer overflow CVE-2018-1125 * pgrep: Remove >15 warning as comm can be longer * ps: Fix buffer overflow in output buffer, causing DOS CVE-2018-1123 * ps: Increase command name selection field to 64 * top: Don't use cwd for location of config CVE-2018-1122 * update translations * library: build on non-glibc systems * free: fix scaling on 32-bit systems * Revert 'Support running with child namespaces' * library: Increment to 7:0:1 No changes, no removals New fuctions: numa_init, numa_max_node, numa_node_of_cpu, numa_uninit, xalloc_err_handler * doc: Document I idle state in ps.1 and top.1 * free: fix some of the SI multiples * kill: -l space between name parses correctly * library: dont use vm_min_free on non Linux * library: don't strip off wchan prefixes (ps & top) * pgrep: warn about 15+ char name only if -f not used * pgrep/pkill: only match in same namespace by default * pidof: specify separator between pids * pkill: Return 0 only if we can kill process * pmap: fix duplicate output line under '-x' option * ps: avoid eip/esp address truncations * ps: recognizes SCHED_DEADLINE as valid CPU scheduler * ps: display NUMA node under which a thread ran * ps: Add seconds display for cputime and time * ps: Add LUID field * sysctl: Permit empty string for value * sysctl: Don't segv when file not available * sysctl: Read and write large buffers * top: add config file support for XDG specification * top: eliminated minor libnuma memory leak * top: show fewer memory decimal places (configurable) * top: provide command line switch for memory scaling * top: provide command line switch for CPU States * top: provides more accurate cpu usage at startup * top: display NUMA node under which a thread ran * top: fix argument parsing quirk resulting in SEGV * top: delay interval accepts non-locale radix point * top: address a wishlist man page NLS suggestion * top: fix potential distortion in 'Mem' graph display * top: provide proper multi-byte string handling * top: startup defaults are fully customizable * watch: define HOST_NAME_MAX where not defined * vmstat: Fix alignment for disk partition format * watch: Support ANSI 39,49 reset sequences Important SUSE bug 1092100 SUSE bug 1121753 CVE-2018-1122 CVE-2018-1123 CVE-2018-1124 CVE-2018-1125 CVE-2018-1126 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for protobuf-c fixes the following issues: - CVE-2022-48468: Fixed an unsigned integer overflow. (bsc#1210323) Important SUSE bug 1210323 CVE-2022-48468 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-Babel fixes the following issues: - CVE-2021-42771: Fixed relative path traversal that may lead to arbitrary locale files loading and arbitrary code execution (bsc#1185768). Important SUSE bug 1185768 CVE-2021-42771 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-Flask-Security-Too fixes the following issues: - CVE-2021-23385: Fixed open redirect (bsc#1202105). Moderate SUSE bug 1202105 CVE-2021-23385 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-Jinja2 to version 2.10.1 fixes the following issues: Security issues fixed: - CVE-2019-8341: Fixed a command injection in from_string() (bsc#1125815). - CVE-2019-10906: Fixed a sandbox escape due to information disclosure via str.format (bsc#1132323). Important SUSE bug 1125815 SUSE bug 1132174 SUSE bug 1132323 CVE-2016-10745 CVE-2019-10906 CVE-2019-8341 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-M2Crypto fixes the following issues: - CVE-2020-25657: Fixed Bleichenbacher timing attacks in the RSA decryption API (bsc#1178829). Important SUSE bug 1178829 CVE-2020-25657 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-Mako fixes the following issues: - CVE-2022-40023: Fixed regular expression Denial of Service when using the Lexer class to parse (bsc#1203246). Moderate SUSE bug 1203246 CVE-2022-40023 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Critical) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-PyJWT fixes the following issues: - CVE-2022-29217: Fixed Key confusion through non-blocklisted public key formats (bsc#1199756). - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to 2.4.0 (bsc#1199756) - Explicit check the key for ECAlgorithm - Don't use implicit optionals - documentation fix: show correct scope - fix: Update copyright information - Don't mutate options dictionary in .decode_complete() - Add support for Python 3.10 - api_jwk: Add PyJWKSet.__getitem__ - Update usage.rst - Docs: mention performance reasons for reusing RSAPrivateKey when encoding - Fixed typo in usage.rst - Add detached payload support for JWS encoding and decoding - Replace various string interpolations with f-strings by Critical SUSE bug 1176785 SUSE bug 1199282 SUSE bug 1199756 CVE-2022-29217 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-Pygments fixes the following issues: - CVE-2021-27291: Fixed ReDoS via crafted malicious input (bsc#1184812). Important SUSE bug 1184812 CVE-2021-27291 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-Werkzeug fixes the following issues: - CVE-2023-25577: Fixed high resource usage when parsing multipart form data with many fields (bsc#1208283). Important SUSE bug 1208283 CVE-2023-25577 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-botocore - Version updated to upstream release 1.20.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-urllib3 - Version updated to upstream release 1.25.10 For a detailed list of all changes, please refer to the changelog file of this package. # python-service_identity - Added this new package to resolve runtime dependencies for other packages. Version: 18.1.0 # python-trustme - Added this new package to resolve runtime dependencies for other packages. Version: 0.6.0 Security fixes: # python-urllib3: - CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120) Moderate SUSE bug 1102408 SUSE bug 1138715 SUSE bug 1138746 SUSE bug 1176389 SUSE bug 1177120 SUSE bug 1182421 SUSE bug 1182422 CVE-2020-26137 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-certifi fixes the following issues: - remove all TrustCor CAs, as TrustCor issued multiple man-in-the-middle certs (bsc#1206212 CVE-2022-23491) - TrustCor RootCert CA-1 - TrustCor RootCert CA-2 - TrustCor ECA-1 - Add removeTrustCor.patch Important SUSE bug 1206212 CVE-2022-23491 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-botocore - Version updated to upstream release 1.20.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-urllib3 - Version updated to upstream release 1.25.10 For a detailed list of all changes, please refer to the changelog file of this package. # python-service_identity - Added this new package to resolve runtime dependencies for other packages. Version: 18.1.0 # python-trustme - Added this new package to resolve runtime dependencies for other packages. Version: 0.6.0 Security fixes: # python-urllib3: - CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120) Moderate SUSE bug 1102408 SUSE bug 1138715 SUSE bug 1138746 SUSE bug 1176389 SUSE bug 1177120 SUSE bug 1182421 SUSE bug 1182422 CVE-2020-26137 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-cryptography fixes the following issues: - CVE-2023-23931: Fixed memory corruption due to invalidly changed immutable object (bsc#1208036). Moderate SUSE bug 1208036 CVE-2023-23931 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Critical) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for salt fixes the following issues: Update to Salt release version 3002.2 (jsc#ECO-3212, jsc#SLE-18033, jsc#SLE-18028) - Check if dpkgnotify is executable (bsc#1186674) - Drop support for Python2. Obsoletes `python2-salt` package (jsc#SLE-18028) - virt module updates * network: handle missing ipv4 netmask attribute * more network support * PCI/USB host devices passthrough support - Set distro requirement to oldest supported version in requirements/base.txt - Bring missing part of async batch implementation back (CVE-2021-25315, bsc#1182382) - Always require `python3-distro` (bsc#1182293) - Remove deprecated warning that breaks minion execution when 'server_id_use_crc' opts is missing - Fix pkg states when DEB package has 'all' arch - Do not force beacons configuration to be a list. - Remove msgpack < 1.0.0 from base requirements (bsc#1176293) - msgpack support for version >= 1.0.0 (bsc#1171257) - Fix issue parsing errors in ansiblegate state module - Prevent command injection in the snapper module (bsc#1185281, CVE-2021-31607) - transactional_update: detect recursion in the executor - Add subpackage salt-transactional-update (jsc#SLE-18033) - Improvements on 'ansiblegate' module (bsc#1185092): * New methods: ansible.targets / ansible.discover_playbooks - Add support for Alibaba Cloud Linux 2 (Aliyun Linux) - Regression fix of salt-ssh on processing targets - Update target fix for salt-ssh and avoiding race condition on salt-ssh event processing (bsc#1179831, bsc#1182281) - Add notify beacon for Debian/Ubuntu systems - Fix zmq bug that causes salt-call to freeze (bsc#1181368) Critical SUSE bug 1171257 SUSE bug 1176293 SUSE bug 1179831 SUSE bug 1181368 SUSE bug 1182281 SUSE bug 1182293 SUSE bug 1182382 SUSE bug 1185092 SUSE bug 1185281 SUSE bug 1186674 CVE-2018-15750 CVE-2018-15751 CVE-2020-11651 CVE-2020-11652 CVE-2020-25592 CVE-2021-25315 CVE-2021-31607 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-future fixes the following issues: - CVE-2022-40899: Fixed an issue that could allow attackers to cause an excessive CPU usage via a crafted Set-Cookie header (bsc#1206673). Moderate SUSE bug 1206673 CVE-2022-40899 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-httplib2 fixes the following issues: - Update to version 0.19.0 (bsc#1182053). - CVE-2021-21240: Fixed regular expression denial of service via malicious header (bsc#1182053). - CVE-2020-11078: Fixed unescaped part of uri where an attacker could change request headers and body (bsc#1182053). Moderate SUSE bug 1171998 SUSE bug 1182053 CVE-2020-11078 CVE-2021-21240 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-numpy fixes the following issues: - CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911). Moderate SUSE bug 1193911 CVE-2021-41495 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-py fixes the following issues: - CVE-2020-29651: Fixed regular expression denial of service in svnwc.py (bsc#1179805, bsc#1184505). Moderate SUSE bug 1179805 SUSE bug 1184505 CVE-2020-29651 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-botocore - Version updated to upstream release 1.20.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-urllib3 - Version updated to upstream release 1.25.10 For a detailed list of all changes, please refer to the changelog file of this package. # python-service_identity - Added this new package to resolve runtime dependencies for other packages. Version: 18.1.0 # python-trustme - Added this new package to resolve runtime dependencies for other packages. Version: 0.6.0 Security fixes: # python-urllib3: - CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120) Moderate SUSE bug 1102408 SUSE bug 1138715 SUSE bug 1138746 SUSE bug 1176389 SUSE bug 1177120 SUSE bug 1182421 SUSE bug 1182422 CVE-2020-26137 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-botocore - Version updated to upstream release 1.20.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-urllib3 - Version updated to upstream release 1.25.10 For a detailed list of all changes, please refer to the changelog file of this package. # python-service_identity - Added this new package to resolve runtime dependencies for other packages. Version: 18.1.0 # python-trustme - Added this new package to resolve runtime dependencies for other packages. Version: 0.6.0 Security fixes: # python-urllib3: - CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120) Moderate SUSE bug 1102408 SUSE bug 1138715 SUSE bug 1138746 SUSE bug 1176389 SUSE bug 1177120 SUSE bug 1182421 SUSE bug 1182422 CVE-2020-26137 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-rsa fixes the following issues: - CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389) Important SUSE bug 1172389 CVE-2020-13757 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python-rtslib-fb-common-2.1.75-150500.1.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python-rtslib-fb-common-2.1.75-150500.1.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-14019 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-pip, python-scripttest fixes the following issues: - Update in SLE-15 (bsc#1175297, jsc#ECO-3035, jsc#PM-2318) python-pip was updated to 20.0.2: * Fix a regression in generation of compatibility tags * Rename an internal module, to avoid ImportErrors due to improper uninstallation * Switch to a dedicated CLI tool for vendoring dependencies. * Remove wheel tag calculation from pip and use packaging.tags. This should provide more tags ordered better than in prior releases. * Deprecate setup.py-based builds that do not generate an .egg-info directory. * The pip>=20 wheel cache is not retro-compatible with previous versions. Until pip 21.0, pip will continue to take advantage of existing legacy cache entries. * Deprecate undocumented --skip-requirements-regex option. * Deprecate passing install-location-related options via --install-option. * Use literal 'abi3' for wheel tag on CPython 3.x, to align with PEP 384 which only defines it for this platform. * Remove interpreter-specific major version tag e.g. cp3-none-any from consideration. This behavior was not documented strictly, and this tag in particular is not useful. Anyone with a use case can create an issue with pypa/packaging. * Wheel processing no longer permits wheels containing more than one top-level .dist-info directory. * Support for the git+git@ form of VCS requirement is being deprecated and will be removed in pip 21.0. Switch to git+https:// or git+ssh://. git+git:// also works but its use is discouraged as it is insecure. * Default to doing a user install (as if --user was passed) when the main site-packages directory is not writeable and user site-packages are enabled. * Warn if a path in PATH starts with tilde during pip install. * Cache wheels built from Git requirements that are considered immutable, because they point to a commit hash. * Add option --no-python-version-warning to silence warnings related to deprecation of Python versions. * Cache wheels that pip wheel built locally, matching what pip install does. This particularly helps performance in workflows where pip wheel is used for building before installing. Users desiring the original behavior can use pip wheel --no-cache-dir * Display CA information in pip debug. * Show only the filename (instead of full URL), when downloading from PyPI. * Suggest a more robust command to upgrade pip itself to avoid confusion when the current pip command is not available as pip. * Define all old pip console script entrypoints to prevent import issues in stale wrapper scripts. * The build step of pip wheel now builds all wheels to a cache first, then copies them to the wheel directory all at once. Before, it built them to a temporary directory and moved them to the wheel directory one by one. * Expand ~ prefix to user directory in path options, configs, and environment variables. Values that may be either URL or path are not currently supported, to avoid ambiguity: --find-links --constraint, -c --requirement, -r --editable, -e * Correctly handle system site-packages, in virtual environments created with venv (PEP 405). * Fix case sensitive comparison of pip freeze when used with -r option. * Enforce PEP 508 requirement format in pyproject.toml build-system.requires. * Make ensure_dir() also ignore ENOTEMPTY as seen on Windows. * Fix building packages which specify backend-path in pyproject.toml. * Do not attempt to run setup.py clean after a pep517 build error, since a setup.py may not exist in that case. * Fix passwords being visible in the index-url in 'Downloading <url>' message. * Change method from shutil.remove to shutil.rmtree in noxfile.py. * Skip running tests which require subversion, when svn isn't installed * Fix not sending client certificates when using --trusted-host. * Make sure pip wheel never outputs pure python wheels with a python implementation tag. Better fix/workaround for #3025 by using a per-implementation wheel cache instead of caching pure python wheels with an implementation tag in their name. * Include subdirectory URL fragments in cache keys. * Fix typo in warning message when any of --build-option, --global-option and --install-option is used in requirements.txt * Fix the logging of cached HTTP response shown as downloading. * Effectively disable the wheel cache when it is not writable, as is the case with the http cache. * Correctly handle relative cache directory provided via --cache-dir. Moderate SUSE bug 1175297 SUSE bug 1176262 CVE-2019-20916 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-sqlparse fixes the following issues: - CVE-2021-32839: Fixed ReDoS via regular expression in StripComments filter (bsc#1190741). Moderate SUSE bug 1190741 CVE-2021-32839 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-urllib3 fixes the following issues: - CVE-2021-33503: Fixed a denial of service when the URL contained many @ characters in the authority component (bsc#1187045) Important SUSE bug 1187045 CVE-2021-33503 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-waitress to 1.4.3 fixes the following security issues: - CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088). - CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089). - CVE-2019-16789: HTTP request smuggling through invalid whitespace characters (bsc#1160790). - CVE-2019-16792: HTTP request smuggling by sending the Content-Length header twice (bsc#1161670). Moderate SUSE bug 1160790 SUSE bug 1161088 SUSE bug 1161089 SUSE bug 1161670 CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python3 fixes the following issues: - CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). The following non-security bug was fixed: - Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355). Important SUSE bug 1203355 SUSE bug 1208471 CVE-2023-24329 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-Babel-2.8.0-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-Babel-2.8.0-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-42771 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-CherryPy-18.3.0-1.31 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-CherryPy-18.3.0-1.31 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-9740 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-Flask-Security-Too-3.4.2-150200.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-Flask-Security-Too-3.4.2-150200.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-21241 CVE-2021-23385 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-Jinja2-2.10.1-3.10.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-Jinja2-2.10.1-3.10.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-10745 CVE-2019-10906 CVE-2019-8341 CVE-2020-28493 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-M2Crypto-0.38.0-150400.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-M2Crypto-0.38.0-150400.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-25657 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-Mako-1.0.7-150000.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-Mako-1.0.7-150000.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-40023 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-PyJWT-2.4.0-150200.3.6.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-PyJWT-2.4.0-150200.3.6.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-29217 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-PyYAML-5.4.1-1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-PyYAML-5.4.1-1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-18342 CVE-2020-14343 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-Pygments-2.6.1-4.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-Pygments-2.6.1-4.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-20270 CVE-2021-27291 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-SQLAlchemy-1.3.22-2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-SQLAlchemy-1.3.22-2.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-7164 CVE-2019-7548 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-Werkzeug-1.0.1-150300.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-Werkzeug-1.0.1-150300.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-14806 CVE-2023-25577 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-certifi-2018.1.18-150000.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-certifi-2018.1.18-150000.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-23491 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-cryptography-3.3.2-150400.16.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-cryptography-3.3.2-150400.16.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-25659 CVE-2020-36242 CVE-2023-23931 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-dulwich-0.20.24-150400.1.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-dulwich-0.20.24-150400.1.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-0838 CVE-2017-16228 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-ecdsa-0.13.3-3.7.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-ecdsa-0.13.3-3.7.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-14853 CVE-2019-14859 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-future-0.18.2-150300.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-future-0.18.2-150300.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-40899 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-httplib2-0.19.0-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-httplib2-0.19.0-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-11078 CVE-2021-21240 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-lxml-4.9.1-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-lxml-4.9.1-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-19787 CVE-2020-27783 CVE-2021-28957 CVE-2021-43818 CVE-2022-2309 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-numpy-1.17.3-150400.23.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-numpy-1.17.3-150400.23.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-12852 CVE-2019-6446 CVE-2021-33430 CVE-2021-41495 CVE-2021-41496 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-paramiko-2.4.3-150100.6.18.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-paramiko-2.4.3-150100.6.18.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-1000805 CVE-2018-7750 CVE-2022-24302 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-py-1.10.0-150100.5.12.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-py-1.10.0-150100.5.12.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-29651 CVE-2022-42969 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-python-gnupg-0.4.7-150400.1.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-python-gnupg-0.4.7-150400.1.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-12020 CVE-2019-6690 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-python3-saml-1.7.0-150400.8.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-python3-saml-1.7.0-150400.8.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-11427 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-requests-2.24.0-1.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-requests-2.24.0-1.24 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-2296 CVE-2018-18074 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-rsa-3.4.2-150000.3.7.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-rsa-3.4.2-150000.3.7.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-13757 CVE-2020-25658 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-salt-3005.1-150500.2.13 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-salt-3005.1-150500.2.13 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-1866 CVE-2016-9639 CVE-2017-12791 CVE-2017-14695 CVE-2017-14696 CVE-2018-15750 CVE-2018-15751 CVE-2019-17361 CVE-2019-18897 CVE-2020-11651 CVE-2020-11652 CVE-2020-16846 CVE-2020-17490 CVE-2020-25592 CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-21996 CVE-2021-25281 CVE-2021-25282 CVE-2021-25283 CVE-2021-25284 CVE-2021-25315 CVE-2021-3144 CVE-2021-3148 CVE-2021-31607 CVE-2021-3197 CVE-2022-22934 CVE-2022-22935 CVE-2022-22936 CVE-2022-22941 CVE-2022-22967 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-sqlparse-0.4.2-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-sqlparse-0.4.2-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2021-32839 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-targetcli-fb-2.1.54-150500.6.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-targetcli-fb-2.1.54-150500.6.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2020-10699 CVE-2020-13867 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-urllib3-1.25.10-4.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-urllib3-1.25.10-4.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-9015 CVE-2018-20060 CVE-2019-11236 CVE-2019-11324 CVE-2019-9740 CVE-2020-26137 CVE-2021-33503 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-waitress-1.4.3-150000.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-waitress-1.4.3-150000.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 CVE-2022-24761 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-wheel-0.32.3-150100.6.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-wheel-0.32.3-150100.6.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-40898 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python3 fixes the following issues: - CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). The following non-security bug was fixed: - Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355). Important SUSE bug 1203355 SUSE bug 1208471 CVE-2023-24329 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 qemu-tools-7.1.0-150500.47.15 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the qemu-tools-7.1.0-150500.47.15 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-0222 CVE-2014-0223 CVE-2014-3461 CVE-2014-3640 CVE-2014-7840 CVE-2014-8106 CVE-2015-1779 CVE-2015-3209 CVE-2015-3456 CVE-2015-4037 CVE-2015-5154 CVE-2015-5225 CVE-2015-5278 CVE-2015-5279 CVE-2015-5745 CVE-2015-6815 CVE-2015-6855 CVE-2015-7295 CVE-2015-7512 CVE-2015-7549 CVE-2015-8345 CVE-2015-8504 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-10028 CVE-2016-10155 CVE-2016-1568 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-3710 CVE-2016-3712 CVE-2016-4002 CVE-2016-4020 CVE-2016-4439 CVE-2016-4441 CVE-2016-4453 CVE-2016-4454 CVE-2016-4952 CVE-2016-4964 CVE-2016-5105 CVE-2016-5106 CVE-2016-5107 CVE-2016-5126 CVE-2016-5238 CVE-2016-5337 CVE-2016-5338 CVE-2016-5403 CVE-2016-6351 CVE-2016-6490 CVE-2016-6833 CVE-2016-6836 CVE-2016-6888 CVE-2016-7116 CVE-2016-7155 CVE-2016-7156 CVE-2016-7157 CVE-2016-7161 CVE-2016-7170 CVE-2016-7421 CVE-2016-7422 CVE-2016-7423 CVE-2016-7466 CVE-2016-7907 CVE-2016-7908 CVE-2016-7909 CVE-2016-7994 CVE-2016-7995 CVE-2016-8576 CVE-2016-8577 CVE-2016-8578 CVE-2016-8667 CVE-2016-8668 CVE-2016-8669 CVE-2016-8909 CVE-2016-8910 CVE-2016-9101 CVE-2016-9102 CVE-2016-9103 CVE-2016-9104 CVE-2016-9105 CVE-2016-9106 CVE-2016-9381 CVE-2016-9602 CVE-2016-9776 CVE-2016-9845 CVE-2016-9846 CVE-2016-9907 CVE-2016-9908 CVE-2016-9911 CVE-2016-9912 CVE-2016-9913 CVE-2016-9921 CVE-2016-9922 CVE-2016-9923 CVE-2017-10664 CVE-2017-10806 CVE-2017-11334 CVE-2017-11434 CVE-2017-13672 CVE-2017-13673 CVE-2017-13711 CVE-2017-14167 CVE-2017-15038 CVE-2017-15118 CVE-2017-15119 CVE-2017-15268 CVE-2017-15289 CVE-2017-2615 CVE-2017-2620 CVE-2017-2630 CVE-2017-2633 CVE-2017-5525 CVE-2017-5526 CVE-2017-5552 CVE-2017-5578 CVE-2017-5579 CVE-2017-5667 CVE-2017-5715 CVE-2017-5856 CVE-2017-5857 CVE-2017-5898 CVE-2017-5931 CVE-2017-5973 CVE-2017-5987 CVE-2017-6058 CVE-2017-6505 CVE-2017-7471 CVE-2017-7493 CVE-2017-8112 CVE-2017-8309 CVE-2017-8379 CVE-2017-8380 CVE-2017-9503 CVE-2017-9524 CVE-2018-10839 CVE-2018-11806 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-12207 CVE-2018-12617 CVE-2018-15746 CVE-2018-16847 CVE-2018-16872 CVE-2018-17958 CVE-2018-17962 CVE-2018-17963 CVE-2018-18849 CVE-2018-20123 CVE-2018-20124 CVE-2018-20125 CVE-2018-20126 CVE-2018-20191 CVE-2018-20216 CVE-2018-20815 CVE-2018-3639 CVE-2018-7550 CVE-2018-7858 CVE-2019-11091 CVE-2019-11135 CVE-2019-12068 CVE-2019-12155 CVE-2019-13164 CVE-2019-14378 CVE-2019-15890 CVE-2019-5008 CVE-2019-6778 CVE-2019-8934 CVE-2019-9824 CVE-2020-10702 CVE-2020-10717 CVE-2020-10761 CVE-2020-11102 CVE-2020-11869 CVE-2020-13361 CVE-2020-13362 CVE-2020-13659 CVE-2020-13800 CVE-2020-14364 CVE-2020-15863 CVE-2020-16092 CVE-2020-1711 CVE-2020-17380 CVE-2020-1983 CVE-2020-24352 CVE-2020-25085 CVE-2020-25707 CVE-2020-25723 CVE-2020-27821 CVE-2020-29129 CVE-2020-29130 CVE-2020-35503 CVE-2020-7039 CVE-2020-8608 CVE-2021-20181 CVE-2021-20203 CVE-2021-20221 CVE-2021-20257 CVE-2021-20263 CVE-2021-3409 CVE-2021-3416 CVE-2021-3419 CVE-2021-3527 CVE-2021-3544 CVE-2021-3545 CVE-2021-3546 CVE-2021-3582 CVE-2021-3607 CVE-2021-3608 CVE-2021-3682 CVE-2021-3713 CVE-2021-3748 CVE-2021-3929 CVE-2021-4158 CVE-2021-4206 CVE-2021-4207 CVE-2022-0216 CVE-2022-0358 CVE-2022-1050 CVE-2022-26353 CVE-2022-26354 CVE-2022-2962 CVE-2022-3165 CVE-2022-35414 CVE-2022-4144 CVE-2022-4172 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for qpdf fixes the following issues: - CVE-2021-36978: Fixed heap-based buffer overflow in Pl_ASCII85Decoder::write (bsc#1188514). Important SUSE bug 1188514 CVE-2021-36978 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 rage-encryption-0.9.0+0-150500.1.21 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the rage-encryption-0.9.0+0-150500.1.21 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2022-24713 CVE-2023-22895 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 rekor-1.1.1-150400.4.9.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rekor fixes the following issues: Updated to version 1.1.1 (jsc#SLE-23476): Functional Enhancements - Refactor Trillian client with exported methods (#1454) - Switch to official redis-go client (#1459) - Remove replace in go.mod (#1444) - Add Rekor OID info. (#1390) Quality Enhancements - remove legacy encrypted cosign key (#1446) - swap cjson dependency (#1441) - Update release readme (#1456) Security fixes: - CVE-2023-30551: Fixed a potential denial of service when processing JAR META-INF files or .SIGN/.PKINFO files in APK files (bsc#1211210). - updated to rekor 1.1.0 (jsc#SLE-23476): Functional Enhancements - improve validation on intoto v0.0.2 type (#1351) - add feature to limit HTTP request body length to process (#1334) - add information about the file size limit (#1313) - Add script to backfill Redis from Rekor (#1163) - Feature: add search support for sha512 (#1142) Quality Enhancements - various fuzzing fixes Bug Fixes - remove goroutine usage from SearchLogQuery (#1407) - drop log messages regarding attestation storage to debug (#1408) - fix validation for proposed vs committed log entries for intoto v0.0.1 (#1309) - fix: fix regex for multi-digit counts (#1321) - return NotFound if treesize is 0 rather than calling trillian (#1311) - enumerate slice to get sugared logs (#1312) - put a reasonable size limit on ssh key reader (#1288) - CLIENT: Fix Custom Host and Path Issue (#1306) - do not persist local state if log is empty; fail consistency proofs from 0 size (#1290) - correctly handle invalid or missing pki format (#1281) - Add Verifier to get public key/cert and identities for entry type (#1210) - fix goroutine leak in client; add insecure TLS option (#1238) - Fix - Remove the force-recreate flag (#1179) - trim whitespace around public keys before parsing (#1175) - stop inserting envelope hash for intoto:0.0.2 types into index (#1171) - Revert 'remove double encoding of payload and signature fields for intoto (#1150)' (#1158) - remove double encoding of payload and signature fields for intoto (#1150) - fix SearchLogQuery behavior to conform to openapi spec (#1145) - Remove pem-certificate-chain from client (#1138) - fix flag type for operator in search (#1136) - use sigstore/community dep review (#1132) Important SUSE bug 1211210 CVE-2023-30551 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 rpm-32bit-4.14.3-150300.55.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the rpm-32bit-4.14.3-150300.55.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-7500 CVE-2021-20266 CVE-2021-20271 CVE-2021-3421 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ruby2.5 fixes the following issues: - CVE-2021-31799: Fixed Command injection vulnerability in RDoc (bsc#1190375). - CVE-2021-31810: Fixed trusting FTP PASV responses vulnerability in Net:FTP (bsc#1188161). - CVE-2021-32066: Fixed StartTLS stripping vulnerability in Net:IMAP (bsc#1188160). Important SUSE bug 1188160 SUSE bug 1188161 SUSE bug 1190375 CVE-2021-31799 CVE-2021-31810 CVE-2021-32066 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ruby2.5-rubygem-bundler-1.16.1-3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ruby2.5-rubygem-bundler-1.16.1-3.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-3881 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ruby2.5-rubygem-nokogiri-1.8.5-150400.14.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ruby2.5-rubygem-nokogiri-1.8.5-150400.14.3.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-1819 CVE-2015-5312 CVE-2015-7497 CVE-2015-7498 CVE-2015-7499 CVE-2015-7500 CVE-2015-7941 CVE-2015-7942 CVE-2015-7995 CVE-2015-8035 CVE-2015-8241 CVE-2015-8242 CVE-2015-8317 CVE-2016-4658 CVE-2016-4738 CVE-2016-5131 CVE-2017-15412 CVE-2017-5029 CVE-2018-14404 CVE-2018-14567 CVE-2018-3740 CVE-2018-3741 CVE-2018-8048 CVE-2019-5477 CVE-2020-26247 CVE-2022-24836 CVE-2022-29181 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rubygem-bundler fixes the following issue: - CVE-2019-3881: Fixed insecure permissions on a directory in /tmp/ that allowed malicious code execution (bsc#1143436). Moderate SUSE bug 1143436 CVE-2019-3881 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rubygem-nokogiri fixes the following issues: - CVE-2022-24836: Fixes possibility to DoS because of inefficient RE in HTML encoding. (bsc#1198408) - CVE-2022-29181: Fixes Improper Handling of Unexpected Data Typesi. (bsc#1199782) Important SUSE bug 1198408 SUSE bug 1199782 CVE-2022-24836 CVE-2022-29181 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for samba fixes the following issues: - CVE-2021-20277: Fixed an out of bounds read in ldb_handler_fold (bsc#1183574). - CVE-2021-20254: Fixed a buffer overrun in sids_to_unixids() (bsc#1184677). - CVE-2020-27840: Fixed an unauthenticated remote heap corruption via bad DNs (bsc#1183572). - Spec file fixes around systemd and requires (bsc#1182830) - Fix dependency problem upgrading from libndr0 to libndr1 (bsc#1189875) - Fix dependency problem upgrading from libsmbldap0 to libsmbldap2 (bsc#1189875) Important SUSE bug 1182830 SUSE bug 1183572 SUSE bug 1183574 SUSE bug 1184677 SUSE bug 1189875 CVE-2020-27840 CVE-2021-20254 CVE-2021-20277 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues: Update wireshark to version 3.4.5 - New and updated support and bug fixes for multiple protocols - Asynchronous DNS resolution is always enabled - Protobuf fields can be dissected as Wireshark (header) fields - UI improvements Including security fixes for: - CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353). - CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128) - CVE-2020-26422: QUIC dissector crash (bsc#1180232) - CVE-2020-26418: Kafka dissector memory leak (bsc#1179930) - CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931) - CVE-2020-26420: RTPS dissector memory leak (bsc#1179932) - CVE-2020-26421: USB HID dissector crash (bsc#1179933) - CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598) - CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599) libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt. Important SUSE bug 1179930 SUSE bug 1179931 SUSE bug 1179932 SUSE bug 1179933 SUSE bug 1180102 SUSE bug 1180232 SUSE bug 1181598 SUSE bug 1181599 SUSE bug 1183353 SUSE bug 1184110 SUSE bug 1185128 CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421 CVE-2020-26422 CVE-2021-22173 CVE-2021-22174 CVE-2021-22191 CVE-2021-22207 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 screen-4.6.2-5.3.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for screen fixes the following issues: - CVE-2021-26937: Fixed double width combining char handling that could lead to a denial of service or code execution (bsc#1182092). Important SUSE bug 1182092 CVE-2021-26937 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for shadow fixes the following issues: - CVE-2023-29383: Fixed apparent /etc/shadow manipulation via chfn (bsc#1210507). Moderate SUSE bug 1210507 CVE-2023-29383 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 sharutils-4.15.2-2.21 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the sharutils-4.15.2-2.21 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-1000097 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 shim-15.7-150300.4.16.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for shim fixes the following issues: - CVE-2022-28737 was missing as reference previously. - Upgrade shim-install for bsc#1210382 After closing Leap-gap project since Leap 15.3, openSUSE Leap direct uses shim from SLE. So the ca_string is 'SUSE Linux Enterprise Secure Boot CA1', not 'openSUSE Secure Boot CA1'. It causes that the update_boot=no, so all files in /boot/efi/EFI/boot are not updated. Logic was added that is using ID field in os-release for checking Leap distro and set ca_string to 'SUSE Linux Enterprise Secure Boot CA1'. Then /boot/efi/EFI/boot/* can also be updated. Important SUSE bug 1210382 CVE-2022-28737 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 skopeo-0.1.41-150000.4.16.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for skopeo fixes the following issues: Update to skopeo v0.1.41 (bsc#1165715): - Bump github.com/containers/image/v5 from 5.2.0 to 5.2.1 - Bump gopkg.in/yaml.v2 from 2.2.7 to 2.2.8 - Bump github.com/containers/common from 0.0.7 to 0.1.4 - Remove the reference to openshift/api - vendor github.com/containers/image/v5@v5.2.0 - Manually update buildah to v1.13.1 - add specific authfile options to copy (and sync) command. - Bump github.com/containers/buildah from 1.11.6 to 1.12.0 - Add context to --encryption-key / --decryption-key processing failures - Bump github.com/containers/storage from 1.15.2 to 1.15.3 - Bump github.com/containers/buildah from 1.11.5 to 1.11.6 - remove direct reference on c/image/storage - Makefile: set GOBIN - Bump gopkg.in/yaml.v2 from 2.2.2 to 2.2.7 - Bump github.com/containers/storage from 1.15.1 to 1.15.2 - Introduce the sync command - openshift cluster: remove .docker directory on teardown - Bump github.com/containers/storage from 1.14.0 to 1.15.1 - document installation via apk on alpine - Fix typos in doc for image encryption - Image encryption/decryption support in skopeo - make vendor-in-container - Bump github.com/containers/buildah from 1.11.4 to 1.11.5 - Travis: use go v1.13 - Use a Windows Nano Server image instead of Server Core for multi-arch testing - Increase test timeout to 15 minutes - Run the test-system container without --net=host - Mount /run/systemd/journal/socket into test-system containers - Don't unnecessarily filter out vendor from (go list ./...) output - Use -mod=vendor in (go {list,test,vet}) - Bump github.com/containers/buildah from 1.8.4 to 1.11.4 - Bump github.com/urfave/cli from 1.20.0 to 1.22.1 - skopeo: drop support for ostree - Don't critically fail on a 403 when listing tags - Revert 'Temporarily work around auth.json location confusion' - Remove references to atomic - Remove references to storage.conf - Dockerfile: use golang-github-cpuguy83-go-md2man - bump version to v0.1.41-dev - systemtest: inspect container image different from current platform arch Changes in v0.1.40: - vendor containers/image v5.0.0 - copy: add a --all/-a flag - System tests: various fixes - Temporarily work around auth.json location confusion - systemtest: copy: docker->storage->oci-archive - systemtest/010-inspect.bats: require only PATH - systemtest: add simple env test in inspect.bats - bash completion: add comments to keep scattered options in sync - bash completion: use read -r instead of disabling SC2207 - bash completion: support --opt arg completion - bash-completion: use replacement instead of sed - bash completion: disable shellcheck SC2207 - bash completion: double-quote to avoid re-splitting - bash completions: use bash replacement instead of sed - bash completion: remove unused variable - bash-completions: split decl and assignment to avoid masking retvals - bash completion: double-quote fixes - bash completion: hard-set PROG=skopeo - bash completion: remove unused variable - bash completion: use `||` instead of `-o` - bash completion: rm eval on assigned variable - copy: add --dest-compress-format and --dest-compress-level - flag: add optionalIntValue - Makefile: use go proxy - inspect --raw: skip the NewImage() step - update OCI image-spec to 775207bd45b6cb8153ce218cc59351799217451f - inspect.go: inspect env variables - ostree: use both image and & storage buildtags Update to skopeo v0.1.39 (bsc#1159530): - inspect: add a --config flag - Add --no-creds flag to skopeo inspect - Add --quiet option to skopeo copy - New progress bars - Parallel Pulls and Pushes for major speed improvements - containers/image moved to a new progress-bar library to fix various issues related to overlapping bars and redundant entries. - enforce blocking of registries - Allow storage-multiple-manifests - When copying images and the output is not a tty (e.g., when piping to a file) print single lines instead of using progress bars. This avoids long and hard to parse output - man pages: add --dest-oci-accept-uncompressed-layers - completions: - Introduce transports completions - Fix bash completions when a option requires a argument - Use only spaces in indent - Fix completions with a global option - add --dest-oci-accept-uncompressed-layers Moderate SUSE bug 1159530 SUSE bug 1165715 CVE-2019-10214 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 socat-1.7.3.2-4.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the socat-1.7.3.2-4.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-3571 CVE-2014-0019 CVE-2015-4000 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark and libmaxminddb fixes the following issues: Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288). New features include: - Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC - Improved support for existing protocols, like HTTP/2 - Improved analytics and usability functionalities Moderate SUSE bug 1093733 SUSE bug 1094301 SUSE bug 1101776 SUSE bug 1101777 SUSE bug 1101786 SUSE bug 1101788 SUSE bug 1101791 SUSE bug 1101794 SUSE bug 1101800 SUSE bug 1101802 SUSE bug 1101804 SUSE bug 1101810 SUSE bug 1106514 SUSE bug 1111647 SUSE bug 1117740 SUSE bug 1121231 SUSE bug 1121232 SUSE bug 1121233 SUSE bug 1121234 SUSE bug 1121235 SUSE bug 1127367 SUSE bug 1127369 SUSE bug 1127370 SUSE bug 1131941 SUSE bug 1131945 SUSE bug 1136021 SUSE bug 1141980 SUSE bug 1150690 SUSE bug 1156288 SUSE bug 1158505 SUSE bug 1161052 SUSE bug 1165241 SUSE bug 1165710 SUSE bug 957624 CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 CVE-2018-12086 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14344 CVE-2018-14367 CVE-2018-14368 CVE-2018-14369 CVE-2018-14370 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2018-18225 CVE-2018-18226 CVE-2018-18227 CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 CVE-2018-19628 CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10897 CVE-2019-10898 CVE-2019-10899 CVE-2019-10900 CVE-2019-10901 CVE-2019-10902 CVE-2019-10903 CVE-2019-13619 CVE-2019-16319 CVE-2019-19553 CVE-2019-5716 CVE-2019-5717 CVE-2019-5718 CVE-2019-5719 CVE-2019-5721 CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 CVE-2020-7044 CVE-2020-9428 CVE-2020-9429 CVE-2020-9430 CVE-2020-9431 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 spectre-meltdown-checker-0.44-3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for spectre-meltdown-checker fixes the following issues: spectre-meltdown-checker was updated to version 0.44 (bsc#1189477) - feat: add support for SRBDS related vulnerabilities - feat: add zstd kernel decompression (#370) - enh: arm: add experimental support for binary arm images - enh: rsb filling: no longer need the 'strings' tool to check for kernel support in live mode - fix: fwdb: remove Intel extract tempdir on exit - fix: has_vmm: ignore kernel threads when looking for a hypervisor (fixes #278) - fix: fwdb: use the commit date as the intel fwdb version - fix: fwdb: update Intel's repository URL - fix: arm64: CVE-2017-5753: kernels 4.19+ use a different nospec macro - fix: on CPU parse info under FreeBSD - chore: github: add check run on pull requests - chore: fwdb: update to v165.20201021+i20200616 Moderate SUSE bug 1189477 CVE-2017-5753 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for speex fixes the following issues: - CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580). Moderate SUSE bug 1192580 CVE-2020-23903 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for sqlite3 fixes the following issues: - CVE-2022-46908: Properly implement the azProhibitedFunctions protection mechanism, when relying on --safe for execution of an untrusted CLI script (bsc#1206337). Moderate SUSE bug 1206337 CVE-2022-46908 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 squashfs-4.4-1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the squashfs-4.4-1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-4645 CVE-2015-4646 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 strongswan-5.9.7-150500.3.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the strongswan-5.9.7-150500.3.4 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9221 CVE-2015-3991 CVE-2015-4171 CVE-2015-8023 CVE-2017-11185 CVE-2017-9022 CVE-2017-9023 CVE-2018-10811 CVE-2018-16151 CVE-2018-16152 CVE-2018-17540 CVE-2018-5388 CVE-2018-6459 CVE-2021-41990 CVE-2021-41991 CVE-2021-45079 CVE-2022-40617 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 subversion-1.14.1-150400.3.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the subversion-1.14.1-150400.3.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-3580 CVE-2014-8108 CVE-2015-0202 CVE-2015-0248 CVE-2015-0251 CVE-2015-3184 CVE-2015-3187 CVE-2015-5259 CVE-2015-5343 CVE-2016-2167 CVE-2016-2168 CVE-2016-8734 CVE-2017-9800 CVE-2018-11782 CVE-2018-11803 CVE-2019-0203 CVE-2020-17525 CVE-2021-28544 CVE-2022-24070 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 sudo-1.9.12p1-150500.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the sudo-1.9.12p1-150500.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-9680 CVE-2016-7032 CVE-2016-7076 CVE-2017-1000367 CVE-2017-1000368 CVE-2019-14287 CVE-2019-18634 CVE-2021-23239 CVE-2021-23240 CVE-2021-3156 CVE-2022-43995 CVE-2023-22809 CVE-2023-27320 CVE-2023-28486 CVE-2023-28487 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 supportutils-3.1.21-150300.7.35.15.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for supportutils fixes the following issues: Security issues fixed: - Passwords correctly removed from email.txt, updates.txt and fs-iscsi.txt (bsc#1203818) Bug fixes: - Added lifecycle information - Fixed KVM virtualization detection on bare metal (bsc#1184689) - Added logging using journalctl (bsc#1200330) - Get current sar data before collecting files (bsc#1192648) - Collects everything in /etc/multipath/ (bsc#1192252) - Collects power management information in hardware.txt (bsc#1197428) - Checks for suseconnect-ng or SUSEConnect packages (bsc#1202337) - Fixed conf_files and conf_text_files so y2log is gathered (bsc#1202269) - Update to nvme_info and block_info (bsc#1202417) - Added includedir directories from /etc/sudoers (bsc#1188086) Moderate SUSE bug 1184689 SUSE bug 1188086 SUSE bug 1192252 SUSE bug 1192648 SUSE bug 1197428 SUSE bug 1200330 SUSE bug 1202269 SUSE bug 1202337 SUSE bug 1202417 SUSE bug 1203818 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update fixes the following issues: dracut-saltboot: - Update to verion 0.1.1674034019.a93ff61 * Install copied wicked config as client.xml (bsc#1205599) - Update to version 0.1.1673279145.e7616bd grafana: - CVE-2022-46146: Fix basic authentication bypass by updating the exporter toolkit to version 0.7.3 (bsc#1208065,) - CVE-2022-41723: Require Go 1.19 or newer (bsc#1208293) - Update to version 8.5.20: * CVE-2022-23552: Security: SVG: Add dompurify preprocessor step (bsc#1207749) * CVE-2022-39324: Security: Snapshots: Fix originalUrl spoof security issue (bsc#1207750) * Security: Omit error from http response * Bug fix: Email and username trimming and invitation validation spacecmd: - Version 4.3.19-1 * Fix spacecmd not showing any output for softwarechannel_diff and softwarechannel_errata_diff (bsc#1207352) * Prevent string api parameters to be parsed as dates if not in ISO-8601 format (bsc#1205759) spacewalk-client-tools: - Version 4.3.15-1 * Update translation strings supportutils-plugin-salt: - Update to version 1.2.2 * Remove possible passwords from Salt configuration files (bsc#1201059) uyuni-proxy-systemd-services: - Version 4.3.8-1 * Allow using container images from different registry paths Important SUSE bug 1201059 SUSE bug 1205599 SUSE bug 1205759 SUSE bug 1207352 SUSE bug 1207749 SUSE bug 1207750 SUSE bug 1208065 SUSE bug 1208293 CVE-2022-23552 CVE-2022-39324 CVE-2022-41723 CVE-2022-46146 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for sles12sp3-docker-image, sles12sp4-image, system-user-root fixes the following issues: - CVE-2019-5021: Include an invalidated root password by default, not an empty one (bsc#1134524) Important SUSE bug 1134524 CVE-2019-5021 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 tar-1.34-150000.3.31.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for tar fixes the following issues: - CVE-2022-48303: Fixed a one-byte out-of-bounds read that resulted in use of uninitialized memory for a conditional jump (bsc#1207753). Bug fixes: - Fix hang when unpacking test tarball (bsc#1202436). Moderate SUSE bug 1202436 SUSE bug 1207753 CVE-2022-48303 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 tboot-20170711_1.10.2-150400.1.7 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the tboot-20170711_1.10.2-150400.1.7 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-16837 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 tcpdump-4.99.1-150400.1.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the tcpdump-4.99.1-150400.1.8 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-8767 CVE-2014-8768 CVE-2014-8769 CVE-2015-0261 CVE-2015-2153 CVE-2015-2154 CVE-2015-2155 CVE-2015-3138 CVE-2016-7922 CVE-2016-7923 CVE-2016-7924 CVE-2016-7925 CVE-2016-7926 CVE-2016-7927 CVE-2016-7928 CVE-2016-7929 CVE-2016-7930 CVE-2016-7931 CVE-2016-7932 CVE-2016-7933 CVE-2016-7934 CVE-2016-7935 CVE-2016-7936 CVE-2016-7937 CVE-2016-7938 CVE-2016-7939 CVE-2016-7940 CVE-2016-7973 CVE-2016-7974 CVE-2016-7975 CVE-2016-7983 CVE-2016-7984 CVE-2016-7985 CVE-2016-7986 CVE-2016-7992 CVE-2016-7993 CVE-2016-8574 CVE-2016-8575 CVE-2017-11108 CVE-2017-11541 CVE-2017-11542 CVE-2017-11543 CVE-2017-12893 CVE-2017-12894 CVE-2017-12895 CVE-2017-12896 CVE-2017-12897 CVE-2017-12898 CVE-2017-12899 CVE-2017-12900 CVE-2017-12901 CVE-2017-12902 CVE-2017-12985 CVE-2017-12986 CVE-2017-12987 CVE-2017-12988 CVE-2017-12989 CVE-2017-12990 CVE-2017-12991 CVE-2017-12992 CVE-2017-12993 CVE-2017-12994 CVE-2017-12995 CVE-2017-12996 CVE-2017-12997 CVE-2017-12998 CVE-2017-12999 CVE-2017-13000 CVE-2017-13001 CVE-2017-13002 CVE-2017-13003 CVE-2017-13004 CVE-2017-13005 CVE-2017-13006 CVE-2017-13007 CVE-2017-13008 CVE-2017-13009 CVE-2017-13010 CVE-2017-13011 CVE-2017-13012 CVE-2017-13013 CVE-2017-13014 CVE-2017-13015 CVE-2017-13016 CVE-2017-13017 CVE-2017-13018 CVE-2017-13019 CVE-2017-13020 CVE-2017-13021 CVE-2017-13022 CVE-2017-13023 CVE-2017-13024 CVE-2017-13025 CVE-2017-13026 CVE-2017-13027 CVE-2017-13028 CVE-2017-13029 CVE-2017-13030 CVE-2017-13031 CVE-2017-13032 CVE-2017-13033 CVE-2017-13034 CVE-2017-13035 CVE-2017-13036 CVE-2017-13037 CVE-2017-13038 CVE-2017-13039 CVE-2017-13040 CVE-2017-13041 CVE-2017-13042 CVE-2017-13043 CVE-2017-13044 CVE-2017-13045 CVE-2017-13046 CVE-2017-13047 CVE-2017-13048 CVE-2017-13049 CVE-2017-13050 CVE-2017-13051 CVE-2017-13052 CVE-2017-13053 CVE-2017-13054 CVE-2017-13055 CVE-2017-13687 CVE-2017-13688 CVE-2017-13689 CVE-2017-13690 CVE-2017-13725 CVE-2017-16808 CVE-2017-5202 CVE-2017-5203 CVE-2017-5204 CVE-2017-5205 CVE-2017-5341 CVE-2017-5342 CVE-2017-5482 CVE-2017-5483 CVE-2017-5484 CVE-2017-5485 CVE-2017-5486 CVE-2018-10103 CVE-2018-10105 CVE-2018-14461 CVE-2018-14462 CVE-2018-14463 CVE-2018-14464 CVE-2018-14465 CVE-2018-14466 CVE-2018-14467 CVE-2018-14468 CVE-2018-14469 CVE-2018-14470 CVE-2018-14879 CVE-2018-14880 CVE-2018-14881 CVE-2018-14882 CVE-2018-16227 CVE-2018-16228 CVE-2018-16229 CVE-2018-16230 CVE-2018-16300 CVE-2018-16301 CVE-2018-16451 CVE-2018-16452 CVE-2018-19519 CVE-2019-1010220 CVE-2019-15166 CVE-2019-15167 CVE-2020-8037 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352). Moderate SUSE bug 1168326 SUSE bug 1168352 CVE-2020-7064 CVE-2020-7066 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for tiff fixes the following security issues: These security issues were fixed: - CVE-2017-18013: Fixed a NULL pointer dereference in the tif_print.cTIFFPrintDirectory function that could have lead to denial of service (bsc#1074317). - CVE-2018-10963: Fixed an assertion failure in the TIFFWriteDirectorySec() function in tif_dirwrite.c, which allowed remote attackers to cause a denial of service via a crafted file (bsc#1092949). - CVE-2018-7456: Prevent a NULL Pointer dereference in the function TIFFPrintDirectory when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013 (bsc#1082825). - CVE-2017-11613: Prevent denial of service in the TIFFOpen function. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If the value of td_imagelength is set close to the amount of system memory, it will hang the system or trigger the OOM killer (bsc#1082332). - CVE-2018-8905: Prevent heap-based buffer overflow in the function LZWDecodeCompat via a crafted TIFF file (bsc#1086408). Moderate SUSE bug 1074317 SUSE bug 1082332 SUSE bug 1082825 SUSE bug 1086408 SUSE bug 1092949 CVE-2017-11613 CVE-2017-18013 CVE-2018-10963 CVE-2018-7456 CVE-2018-8905 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for tpm2-0-tss fixes the following issues: - CVE-2023-22745: Fixed a memory safety issue that could be exploited by local attackers with TPM access (bsc#1207325). Moderate SUSE bug 1207325 CVE-2023-22745 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 tpm2.0-tools-5.2-150400.4.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the tpm2.0-tools-5.2-150400.4.6 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-7524 CVE-2021-3565 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 u-boot-rpiarm64-2021.10-150400.4.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the u-boot-rpiarm64-2021.10-150400.4.11.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-18439 CVE-2018-18440 CVE-2020-10648 CVE-2020-8432 CVE-2022-30552 CVE-2022-30767 CVE-2022-30790 CVE-2022-33103 CVE-2022-33967 CVE-2022-34835 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for u-boot fixes the following issues: - CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation (bsc#1201745). - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214). Important SUSE bug 1201214 SUSE bug 1201745 CVE-2022-33967 CVE-2022-34835 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for u-boot fixes the following issues: - CVE-2022-33967: Fixed heap overflow in squashfs filesystem implementation (bsc#1201745). - CVE-2022-34835: Fixed stack buffer overflow vulnerability in i2c md command (bsc#1201214). Important SUSE bug 1201214 SUSE bug 1201745 CVE-2022-33967 CVE-2022-34835 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ucode-intel-20230214-150200.21.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ucode-intel fixes the following issues: Updated to Intel CPU Microcode 20230214 release. Security issues fixed: - CVE-2022-38090: Security updates for [INTEL-SA-00767](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00767.html) (bsc#1208275) - CVE-2022-33196: Security updates for [INTEL-SA-00738](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00738.html) (bsc#1208276) - CVE-2022-21216: Security updates for [INTEL-SA-00700](https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00700.html) (bsc#1208277) - New Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | SPR-SP | E2 | 06-8f-05/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E3 | 06-8f-06/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E4 | 06-8f-07/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-SP | E5 | 06-8f-08/87 | | 2b000181 | Xeon Scalable Gen4 | SPR-HBM | B3 | 06-8f-08/10 | | 2c000170 | Xeon Max | RPL-P 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-H 6+8 | J0 | 06-ba-02/07 | | 0000410e | Core Gen13 | RPL-U 2+8 | Q0 | 06-ba-02/07 | | 0000410e | Core Gen13 - Updated Platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | C0 | 06-97-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-97-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-02/07 | 00000026 | 0000002c | Core Gen12 | ADL | C0 | 06-bf-05/07 | 00000026 | 0000002c | Core Gen12 | ADL | L0 | 06-9a-03/80 | 00000424 | 00000429 | Core Gen12 | ADL | L0 | 06-9a-04/80 | 00000424 | 00000429 | Core Gen12 | CLX-SP | B0 | 06-55-06/bf | 04003302 | 04003303 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05003302 | 05003303 | Xeon Scalable Gen2 | CPX-SP | A1 | 06-55-0b/bf | 07002501 | 07002503 | Xeon Scalable Gen3 | GLK | B0 | 06-7a-01/01 | 0000003c | 0000003e | Pentium Silver N/J5xxx, Celeron N/J4xxx | GLK-R | R0 | 06-7a-08/01 | 00000020 | 00000022 | Pentium J5040/N5030, Celeron J4125/J4025/N4020/N4120 | ICL-D | B0 | 06-6c-01/10 | 01000201 | 01000211 | Xeon D-17xx, D-27xx | ICL-U/Y | D1 | 06-7e-05/80 | 000000b6 | 000000b8 | Core Gen10 Mobile | ICX-SP | D0 | 06-6a-06/87 | 0d000375 | 0d000389 | Xeon Scalable Gen3 | JSL | A0/A1 | 06-9c-00/01 | 24000023 | 24000024 | Pentium N6000/N6005, Celeron N4500/N4505/N5100/N5105 | LKF | B2/B3 | 06-8a-01/10 | 00000031 | 00000032 | Core w/Hybrid Technology | RKL-S | B0 | 06-a7-01/02 | 00000056 | 00000057 | Core Gen11 | RPL-S | S0 | 06-b7-01/32 | 0000010e | 00000112 | Core Gen13 | SKX-SP | B1 | 06-55-03/97 | 0100015e | 01000161 | Xeon Scalable Important SUSE bug 1208275 SUSE bug 1208276 SUSE bug 1208277 CVE-2022-21216 CVE-2022-33196 CVE-2022-38090 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for udisks2 fixes the following issues: - CVE-2021-3802: Fixed denial of service vulnerability caused by insecure defaults in user-accessible mount helpers (bsc#1190606). Moderate SUSE bug 1190606 CVE-2021-3802 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 umoci-0.4.7-3.12.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for umoci fixes the following issues: Update to v0.4.7 (bsc#1184147). - CVE-2021-29136: Fixed overwriting of host files via malicious layer (bsc#1184147). Important SUSE bug 1184147 CVE-2021-29136 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 unzip-6.00-150000.4.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for unzip fixes the following issues: - CVE-2018-18384: Fixed a buffer overflow when listing archives (bsc#1110194) Moderate SUSE bug 1110194 CVE-2018-18384 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 vim-9.0.1443-150500.18.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the vim-9.0.1443-150500.18.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2009-0316 CVE-2017-1000382 CVE-2017-17087 CVE-2017-5953 CVE-2017-6349 CVE-2017-6350 CVE-2019-12735 CVE-2019-20807 CVE-2021-3778 CVE-2021-3796 CVE-2021-3872 CVE-2021-3875 CVE-2021-3903 CVE-2021-3927 CVE-2021-3928 CVE-2021-3968 CVE-2021-3973 CVE-2021-3974 CVE-2021-3984 CVE-2021-4019 CVE-2021-4069 CVE-2021-4136 CVE-2021-4166 CVE-2021-4192 CVE-2021-4193 CVE-2021-46059 CVE-2022-0128 CVE-2022-0213 CVE-2022-0261 CVE-2022-0318 CVE-2022-0319 CVE-2022-0351 CVE-2022-0359 CVE-2022-0361 CVE-2022-0392 CVE-2022-0407 CVE-2022-0413 CVE-2022-0696 CVE-2022-1381 CVE-2022-1420 CVE-2022-1616 CVE-2022-1619 CVE-2022-1620 CVE-2022-1720 CVE-2022-1733 CVE-2022-1735 CVE-2022-1771 CVE-2022-1785 CVE-2022-1796 CVE-2022-1851 CVE-2022-1897 CVE-2022-1898 CVE-2022-1927 CVE-2022-1968 CVE-2022-2124 CVE-2022-2125 CVE-2022-2126 CVE-2022-2129 CVE-2022-2175 CVE-2022-2182 CVE-2022-2183 CVE-2022-2206 CVE-2022-2207 CVE-2022-2208 CVE-2022-2210 CVE-2022-2231 CVE-2022-2257 CVE-2022-2264 CVE-2022-2284 CVE-2022-2285 CVE-2022-2286 CVE-2022-2287 CVE-2022-2304 CVE-2022-2343 CVE-2022-2344 CVE-2022-2345 CVE-2022-2522 CVE-2022-2571 CVE-2022-2580 CVE-2022-2581 CVE-2022-2598 CVE-2022-2816 CVE-2022-2817 CVE-2022-2819 CVE-2022-2845 CVE-2022-2849 CVE-2022-2862 CVE-2022-2874 CVE-2022-2889 CVE-2022-2923 CVE-2022-2946 CVE-2022-2980 CVE-2022-2982 CVE-2022-3016 CVE-2022-3037 CVE-2022-3099 CVE-2022-3134 CVE-2022-3153 CVE-2022-3234 CVE-2022-3235 CVE-2022-3278 CVE-2022-3296 CVE-2022-3297 CVE-2022-3324 CVE-2022-3352 CVE-2022-3491 CVE-2022-3520 CVE-2022-3591 CVE-2022-3705 CVE-2022-4141 CVE-2022-4292 CVE-2022-4293 CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512 CVE-2023-1127 CVE-2023-1170 CVE-2023-1175 CVE-2023-1264 CVE-2023-1355 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 w3m-0.5.3+git20180125-150000.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for w3m fixes the following issues: - CVE-2022-38223: Fixed a memory safety issue when dumping crafted input to standard out (bsc#1202684). Moderate SUSE bug 1202684 CVE-2022-38223 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wavpack fixes the following issues: - Update to version 5.4.0 * CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414) * fixed: disable A32 asm code when building for Apple silicon * fixed: issues with Adobe-style floating-point WAV files * added: --normalize-floats option to wvunpack for correctly exporting un-normalized floating-point files - Update to version 5.3.0 * fixed: OSS-Fuzz issues 19925, 19928, 20060, 20448 * fixed: trailing garbage characters on imported ID3v2 TXXX tags * fixed: various minor undefined behavior and memory access issues * fixed: sanitize tag extraction names for length and path inclusion * improved: reformat wvunpack 'help' and split into long + short versions * added: regression testing to Travis CI for OSS-Fuzz crashers - Updated to version 5.2.0 *fixed: potential security issues including the following CVEs: CVE-2018-19840, CVE-2018-19841, CVE-2018-10536 (bsc#1091344), CVE-2018-10537 (bsc#1091343) CVE-2018-10538 (bsc#1091342), CVE-2018-10539 (bsc#1091341), CVE-2018-10540 (bsc#1091340), CVE-2018-7254, CVE-2018-7253, CVE-2018-6767, CVE-2019-11498 and CVE-2019-1010319 * added: support for CMake, Travis CI, and Google's OSS-fuzz * fixed: use correction file for encode verify (pipe input, Windows) * fixed: correct WAV header with actual length (pipe input, -i option) * fixed: thumb interworking and not needing v6 architecture (ARM asm) * added: handle more ID3v2.3 tag items and from all file types * fixed: coredump on Sparc64 (changed MD5 implementation) * fixed: handle invalid ID3v2.3 tags from sacd-ripper * fixed: several corner-case memory leaks Moderate SUSE bug 1091340 SUSE bug 1091341 SUSE bug 1091342 SUSE bug 1091343 SUSE bug 1091344 SUSE bug 1180414 CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841 CVE-2018-6767 CVE-2018-7253 CVE-2018-7254 CVE-2019-1010319 CVE-2019-11498 CVE-2020-35738 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer. - CVE-2023-27932: Fixed Same Origin Policy bypass. - CVE-2023-27954: Fixed sensitive user information tracking. - CVE-2023-28205: Fixed arbitrary code execution (bsc#1210295). Already fixed in version 2.38.5: - CVE-2022-32886, CVE-2022-32912, CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363. Important SUSE bug 1210295 SUSE bug 1210731 CVE-2022-0108 CVE-2022-32885 CVE-2022-32886 CVE-2022-32912 CVE-2023-25358 CVE-2023-25360 CVE-2023-25361 CVE-2023-25362 CVE-2023-25363 CVE-2023-27932 CVE-2023-27954 CVE-2023-28205 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 wicked-0.6.72-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the wicked-0.6.72-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-18902 CVE-2019-18903 CVE-2020-7216 CVE-2020-7217 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireguard-tools fixes the following issues: - Removed world-readable permissions from /etc/wireguard (bsc#1191224) Moderate SUSE bug 1191224 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark to version 2.4.9 fixes the following issues: Security issues fixed (bsc#1106514): - CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44) - CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45) - CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46) Further bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html Moderate SUSE bug 1106514 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: Updated to Wireshark 3.6.8: - CVE-2022-3190: Fixed F5 Ethernet Trailer dissector infinite loop (bsc#1203388). - CVE-2021-4186: Fixed Gryphon dissector crash (bsc#1194165). Moderate SUSE bug 1194165 SUSE bug 1203388 CVE-2021-4186 CVE-2022-3190 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 wpa_supplicant-2.10-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the wpa_supplicant-2.10-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2014-3686 CVE-2015-1863 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-4144 CVE-2015-4145 CVE-2015-4146 CVE-2015-5310 CVE-2015-5315 CVE-2015-5316 CVE-2015-8041 CVE-2016-4476 CVE-2016-4477 CVE-2017-13077 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13082 CVE-2017-13086 CVE-2017-13087 CVE-2017-13088 CVE-2018-14526 CVE-2019-11555 CVE-2019-13377 CVE-2019-16275 CVE-2019-9494 CVE-2019-9495 CVE-2019-9497 CVE-2019-9498 CVE-2019-9499 CVE-2021-0326 CVE-2021-27803 CVE-2021-30004 CVE-2022-23303 CVE-2022-23304 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 xdg-utils-1.1.3+20210805-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the xdg-utils-1.1.3+20210805-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-18266 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 xen-libs-4.17.0_06-150500.1.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the xen-libs-4.17.0_06-150500.1.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2013-3495 CVE-2013-4533 CVE-2013-4534 CVE-2013-4537 CVE-2013-4538 CVE-2013-4539 CVE-2013-4540 CVE-2014-0222 CVE-2014-3640 CVE-2014-3672 CVE-2014-7815 CVE-2015-1779 CVE-2015-3259 CVE-2015-3340 CVE-2015-3456 CVE-2015-4037 CVE-2015-4103 CVE-2015-4104 CVE-2015-4105 CVE-2015-4106 CVE-2015-5154 CVE-2015-5239 CVE-2015-5278 CVE-2015-5307 CVE-2015-6815 CVE-2015-6855 CVE-2015-7311 CVE-2015-7504 CVE-2015-7512 CVE-2015-7549 CVE-2015-7835 CVE-2015-7969 CVE-2015-7970 CVE-2015-7971 CVE-2015-7972 CVE-2015-8104 CVE-2015-8339 CVE-2015-8340 CVE-2015-8341 CVE-2015-8345 CVE-2015-8504 CVE-2015-8550 CVE-2015-8554 CVE-2015-8555 CVE-2015-8558 CVE-2015-8567 CVE-2015-8568 CVE-2015-8613 CVE-2015-8615 CVE-2015-8619 CVE-2015-8743 CVE-2015-8744 CVE-2015-8745 CVE-2016-10013 CVE-2016-10024 CVE-2016-10025 CVE-2016-1568 CVE-2016-1570 CVE-2016-1571 CVE-2016-1714 CVE-2016-1922 CVE-2016-1981 CVE-2016-2198 CVE-2016-2270 CVE-2016-2271 CVE-2016-2391 CVE-2016-2392 CVE-2016-2538 CVE-2016-2841 CVE-2016-4439 CVE-2016-4441 CVE-2016-5238 CVE-2016-5338 CVE-2016-6258 CVE-2016-6259 CVE-2016-6351 CVE-2016-7092 CVE-2016-7093 CVE-2016-7094 CVE-2016-7777 CVE-2016-7908 CVE-2016-7909 CVE-2016-8667 CVE-2016-8669 CVE-2016-8910 CVE-2016-9377 CVE-2016-9378 CVE-2016-9379 CVE-2016-9380 CVE-2016-9381 CVE-2016-9382 CVE-2016-9383 CVE-2016-9384 CVE-2016-9385 CVE-2016-9386 CVE-2016-9637 CVE-2016-9921 CVE-2016-9922 CVE-2016-9932 CVE-2017-12135 CVE-2017-12136 CVE-2017-12137 CVE-2017-2615 CVE-2017-2620 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2017-6505 CVE-2017-8309 CVE-2017-9330 CVE-2018-10471 CVE-2018-10472 CVE-2018-10981 CVE-2018-10982 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2018-12891 CVE-2018-12892 CVE-2018-12893 CVE-2018-15468 CVE-2018-15469 CVE-2018-15470 CVE-2018-18883 CVE-2018-19961 CVE-2018-19962 CVE-2018-19963 CVE-2018-19964 CVE-2018-19965 CVE-2018-19966 CVE-2018-19967 CVE-2018-3639 CVE-2018-3646 CVE-2018-3665 CVE-2018-5244 CVE-2018-7540 CVE-2018-7541 CVE-2018-7542 CVE-2018-8897 CVE-2019-11091 CVE-2019-17349 CVE-2020-0543 CVE-2020-11739 CVE-2020-11740 CVE-2020-11741 CVE-2020-11742 CVE-2020-11743 CVE-2020-15563 CVE-2020-15565 CVE-2020-15566 CVE-2020-15567 CVE-2020-25595 CVE-2020-25596 CVE-2020-25597 CVE-2020-25598 CVE-2020-25599 CVE-2020-25600 CVE-2020-25601 CVE-2020-25602 CVE-2020-25603 CVE-2020-25604 CVE-2020-27670 CVE-2020-27671 CVE-2020-27672 CVE-2020-27674 CVE-2020-28368 CVE-2020-29040 CVE-2020-29480 CVE-2020-29481 CVE-2020-29483 CVE-2020-29484 CVE-2020-29566 CVE-2020-29567 CVE-2020-29570 CVE-2020-29571 CVE-2021-0089 CVE-2021-26401 CVE-2021-28687 CVE-2021-28690 CVE-2021-28692 CVE-2021-28693 CVE-2021-28694 CVE-2021-28695 CVE-2021-28696 CVE-2021-28697 CVE-2021-28698 CVE-2021-28699 CVE-2021-28700 CVE-2021-28701 CVE-2022-0001 CVE-2022-0002 CVE-2022-21123 CVE-2022-21125 CVE-2022-21166 CVE-2022-23033 CVE-2022-23034 CVE-2022-23035 CVE-2022-23816 CVE-2022-23825 CVE-2022-26356 CVE-2022-26357 CVE-2022-26358 CVE-2022-26359 CVE-2022-26360 CVE-2022-26361 CVE-2022-26362 CVE-2022-26363 CVE-2022-26364 CVE-2022-27672 CVE-2022-29900 CVE-2022-33745 CVE-2022-33746 CVE-2022-33747 CVE-2022-33748 CVE-2022-42309 CVE-2022-42310 CVE-2022-42311 CVE-2022-42312 CVE-2022-42313 CVE-2022-42314 CVE-2022-42315 CVE-2022-42316 CVE-2022-42317 CVE-2022-42318 CVE-2022-42319 CVE-2022-42320 CVE-2022-42321 CVE-2022-42322 CVE-2022-42323 CVE-2022-42325 CVE-2022-42326 CVE-2022-42327 CVE-2022-42330 CVE-2022-42331 CVE-2022-42332 CVE-2022-42333 CVE-2022-42334 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 xorg-x11-7.6_1-1.22 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the xorg-x11-7.6_1-1.22 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2011-0465 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 xorg-x11-devel-7.6.1-1.16 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the xorg-x11-devel-7.6.1-1.16 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2011-2895 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 xorg-x11-server-21.1.4-150500.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the xorg-x11-server-21.1.4-150500.5.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2015-3164 CVE-2017-10971 CVE-2017-10972 CVE-2017-12176 CVE-2017-12187 CVE-2017-13721 CVE-2017-13723 CVE-2017-2624 CVE-2018-14665 CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 CVE-2020-14360 CVE-2020-14361 CVE-2020-14362 CVE-2020-25712 CVE-2021-3472 CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011 CVE-2022-2319 CVE-2022-2320 CVE-2022-3550 CVE-2022-3551 CVE-2022-4283 CVE-2022-46340 CVE-2022-46341 CVE-2022-46342 CVE-2022-46343 CVE-2022-46344 CVE-2023-0494 CVE-2023-1393 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 xterm-330-150200.11.9.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xterm fixes the following issues: - CVE-2022-45063: Fixed an arbitrary code execution issue under configurations using vi and zsh (bsc#1205305). Important SUSE bug 1205305 CVE-2022-45063 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 yast2-buildtools-4.5.5-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the yast2-buildtools-4.5.5-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-17042 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 yast2-multipath-4.5.0-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the yast2-multipath-4.5.0-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-17955 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 yast2-security-4.5.6-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the yast2-security-4.5.6-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2019-3700 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 yast2-users-4.5.4-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the yast2-users-4.5.4-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2016-1601 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 yubikey-manager-2.1.0-1.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the yubikey-manager-2.1.0-1.10 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2017-15631 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for zeromq fixes the following issues: - CVE-2019-13132: An unauthenticated remote attacker could have exploited a stack overflow vulnerability on a server that is supposed to be protected by encryption and authentication to potentially gain a remote code execution. (bsc#1140255) - Correctly mark license files as licence instead of documentation (bsc#1082318) Important SUSE bug 1082318 SUSE bug 1140255 CVE-2019-13132 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 zram-generator-1.1.1~git5.8612dbb-150400.1.9 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the zram-generator-1.1.1~git5.8612dbb-150400.1.9 package on the GA media of SUSE Linux Enterprise Module for Basesystem 15 SP5. Moderate CVE-2018-25023 CVE-2021-45710 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 zsh-5.6-7.5.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for zsh fixes the following issues: - CVE-2021-45444: Fixed a vulnerability where arbitrary shell commands could be executed related to prompt expansion (bsc#1196435). - CVE-2019-20044: Fixed a vulnerability where shell privileges would not be properly dropped when unsetting the PRIVILEGED option (bsc#1163882). Important SUSE bug 1163882 SUSE bug 1196435 CVE-2019-20044 CVE-2021-45444 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for zstd fixes the following issues: - CVE-2022-4899: Fixed buffer overrun in util.c (bsc#1209533). Moderate SUSE bug 1209533 CVE-2022-4899 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for zziplib fixes the following issues: - CVE-2018-17828: Remove any '../' components from pathnames of extracted files to avoid path traversal during unpacking. (bsc#1110687) Moderate SUSE bug 1110687 CVE-2018-17828 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 buildah-1.29.1-150500.1.13 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the buildah-1.29.1-150500.1.13 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2019-10214 CVE-2020-10696 CVE-2021-20206 CVE-2022-27651 CVE-2022-2990 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cni-1.1.2-150500.1.20 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cni-1.1.2-150500.1.20 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2021-20206 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cni-plugins-1.1.1-150500.1.19 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cni-plugins-1.1.1-150500.1.19 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2020-10749 CVE-2021-20206 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 conmon-2.1.5-150500.7.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the conmon-2.1.5-150500.7.1 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2022-1708 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of container-suseconnect fixes the following issues: - rebuild the package with the go 19.9 secure release (bsc#1200441). Important SUSE bug 1200441 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 containerd-1.6.19-150000.87.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for containerd fixes the following issues: Update to containerd v1.6.19: Security fixes: - CVE-2023-25153: Fixed OCI image importer memory exhaustion (bnc#1208423). - CVE-2023-25173: Fixed supplementary groups not set up properly (bnc#1208426). Moderate SUSE bug 1208423 SUSE bug 1208426 CVE-2023-25153 CVE-2023-25173 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 containerized-data-importer-manifests-1.55.0-150500.4.4 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the containerized-data-importer-manifests-1.55.0-150500.4.4 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2022-1996 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 distribution-registry-2.8.1-150400.9.18.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the distribution-registry-2.8.1-150400.9.18.1 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2017-11468 CVE-2023-2253 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 docker-20.10.23_ce-150000.175.1 on GA media (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for containerd, docker, runc fixes the following issues: Docker was updated to 20.10.9-ce. (bsc#1191355) See upstream changelog in the packaged /usr/share/doc/packages/docker/CHANGELOG.md. CVE-2021-41092 CVE-2021-41089 CVE-2021-41091 CVE-2021-41103 container was updated to v1.4.11, to fix CVE-2021-41103. bsc#1191355 - CVE-2021-32760: Fixed that a archive package allows chmod of file outside of unpack target directory (bsc#1188282) - Install systemd service file as well (bsc#1190826) Update to runc v1.0.2. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.2 * Fixed a failure to set CPU quota period in some cases on cgroup v1. * Fixed the inability to start a container with the 'adding seccomp filter rule for syscall ...' error, caused by redundant seccomp rules (i.e. those that has action equal to the default one). Such redundant rules are now skipped. * Made release builds reproducible from now on. * Fixed a rare debug log race in runc init, which can result in occasional harmful 'failed to decode ...' errors from runc run or exec. * Fixed the check in cgroup v1 systemd manager if a container needs to be frozen before Set, and add a setting to skip such freeze unconditionally. The previous fix for that issue, done in runc 1.0.1, was not working. Update to runc v1.0.1. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.1 * Fixed occasional runc exec/run failure ('interrupted system call') on an Azure volume. * Fixed 'unable to find groups ... token too long' error with /etc/group containing lines longer than 64K characters. * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is frozen. This is a regression in 1.0.0, not affecting runc itself but some of libcontainer users (e.g Kubernetes). * cgroupv2: bpf: Ignore inaccessible existing programs in case of permission error when handling replacement of existing bpf cgroup programs. This fixes a regression in 1.0.0, where some SELinux policies would block runc from being able to run entirely. * cgroup/systemd/v2: don't freeze cgroup on Set. * cgroup/systemd/v1: avoid unnecessary freeze on Set. - fix issues with runc under openSUSE MicroOS's SELinux policy. bsc#1187704 Update to runc v1.0.0. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0 ! The usage of relative paths for mountpoints will now produce a warning (such configurations are outside of the spec, and in future runc will produce an error when given such configurations). * cgroupv2: devices: rework the filter generation to produce consistent results with cgroupv1, and always clobber any existing eBPF program(s) to fix runc update and avoid leaking eBPF programs (resulting in errors when managing containers). * cgroupv2: correctly convert 'number of IOs' statistics in a cgroupv1-compatible way. * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures. * cgroupv2: wait for freeze to finish before returning from the freezing code, optimize the method for checking whether a cgroup is frozen. * cgroups/systemd: fixed 'retry on dbus disconnect' logic introduced in rc94 * cgroups/systemd: fixed returning 'unit already exists' error from a systemd cgroup manager (regression in rc94) + cgroupv2: support SkipDevices with systemd driver + cgroup/systemd: return, not ignore, stop unit error from Destroy + Make 'runc --version' output sane even when built with go get or otherwise outside of our build scripts. + cgroups: set SkipDevices during runc update (so we don't modify cgroups at all during runc update). + cgroup1: blkio: support BFQ weights. + cgroupv2: set per-device io weights if BFQ IO scheduler is available. Update to runc v1.0.0~rc95. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95 This release of runc contains a fix for CVE-2021-30465, and users are strongly recommended to update (especially if you are providing semi-limited access to spawn containers to untrusted users). (bsc#1185405) Update to runc v1.0.0~rc94. Upstream changelog is available from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94 Breaking Changes: * cgroupv1: kernel memory limits are now always ignored, as kmemcg has been effectively deprecated by the kernel. Users should make use of regular memory cgroup controls. Regression Fixes: * seccomp: fix 32-bit compilation errors * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code * runc start: fix 'chdir to cwd: permission denied' for some setups Important SUSE bug 1102408 SUSE bug 1185405 SUSE bug 1187704 SUSE bug 1188282 SUSE bug 1190826 SUSE bug 1191015 SUSE bug 1191121 SUSE bug 1191334 SUSE bug 1191355 SUSE bug 1191434 CVE-2021-30465 CVE-2021-32760 CVE-2021-41089 CVE-2021-41091 CVE-2021-41092 CVE-2021-41103 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-4.31.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the docker-libnetwork-0.7.0.1+gitr2908_55e924b8a842-4.31.1 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for conmon, fuse-overlayfs, libcontainers-common, podman fixes the following issues: podman was updated to v2.0.6 (bsc#1175821) - install missing systemd units for the new Rest API (bsc#1175957) and a few man-pages that where missing before - Drop varlink API related bits (in favor of the new API) - fix install location for zsh completions * Fixed a bug where running systemd in a container on a cgroups v1 system would fail. * Fixed a bug where /etc/passwd could be re-created every time a container is restarted if the container's /etc/passwd did not contain an entry for the user the container was started as. * Fixed a bug where containers without an /etc/passwd file specifying a non-root user would not start. * Fixed a bug where the --remote flag would sometimes not make remote connections and would instead attempt to run Podman locally. Update to v2.0.6: * Features - Rootless Podman will now add an entry to /etc/passwd for the user who ran Podman if run with --userns=keep-id. - The podman system connection command has been reworked to support multiple connections, and reenabled for use! - Podman now has a new global flag, --connection, to specify a connection to a remote Podman API instance. * Changes - Podman's automatic systemd integration (activated by the --systemd=true flag, set by default) will now activate for containers using /usr/local/sbin/init as their command, instead of just /usr/sbin/init and /sbin/init (and any path ending in systemd). - Seccomp profiles specified by the --security-opt seccomp=... flag to podman create and podman run will now be honored even if the container was created using --privileged. * Bugfixes - Fixed a bug where the podman play kube would not honor the hostIP field for port forwarding (#5964). - Fixed a bug where the podman generate systemd command would panic on an invalid restart policy being specified (#7271). - Fixed a bug where the podman images command could take a very long time (several minutes) to complete when a large number of images were present. - Fixed a bug where the podman logs command with the --tail flag would not work properly when a large amount of output would be printed ((#7230)[https://github.com//issues/7230]). - Fixed a bug where the podman exec command with remote Podman would not return a non-zero exit code when the exec session failed to start (e.g. invoking a non-existent command) (#6893). - Fixed a bug where the podman load command with remote Podman would did not honor user-specified tags (#7124). - Fixed a bug where the podman system service command, when run as a non-root user by Systemd, did not properly handle the Podman pause process and would not restart properly as a result (#7180). - Fixed a bug where the --publish flag to podman create, podman run, and podman pod create did not properly handle a host IP of 0.0.0.0 (attempting to bind to literal 0.0.0.0, instead of all IPs on the system) (#7104). - Fixed a bug where the podman start --attach command would not print the container's exit code when the command exited due to the container exiting. - Fixed a bug where the podman rm command with remote Podman would not remove volumes, even if the --volumes flag was specified (#7128). - Fixed a bug where the podman run command with remote Podman and the --rm flag could exit before the container was fully removed. - Fixed a bug where the --pod new:... flag to podman run and podman create would create a pod that did not share any namespaces. - Fixed a bug where the --preserve-fds flag to podman run and podman exec could close the wrong file descriptors while trying to close user-provided descriptors after passing them into the container. - Fixed a bug where default environment variables ($PATH and $TERM) were not set in containers when not provided by the image. - Fixed a bug where pod infra containers were not properly unmounted after exiting. - Fixed a bug where networks created with podman network create with an IPv6 subnet did not properly set an IPv6 default route. - Fixed a bug where the podman save command would not work properly when its output was piped to another command (#7017). - Fixed a bug where containers using a systemd init on a cgroups v1 system could leak mounts under /sys/fs/cgroup/systemd to the host. - Fixed a bug where podman build would not generate an event on completion (#7022). - Fixed a bug where the podman history command with remote Podman printed incorrect creation times for layers (#7122). - Fixed a bug where Podman would not create working directories specified by the container image if they did not exist. - Fixed a bug where Podman did not clear CMD from the container image if the user overrode ENTRYPOINT (#7115). - Fixed a bug where error parsing image names were not fully reported (part of the error message containing the exact issue was dropped). - Fixed a bug where the podman images command with remote Podman did not support printing image tags in Go templates supplied to the --format flag (#7123). - Fixed a bug where the podman rmi --force command would not attempt to unmount containers it was removing, which could cause a failure to remove the image. - Fixed a bug where the podman generate systemd --new command could incorrectly quote arguments to Podman that contained whitespace, leading to nonfunctional unit files (#7285). - Fixed a bug where the podman version command did not properly include build time and Git commit. - Fixed a bug where running systemd in a Podman container on a system that did not use the systemd cgroup manager would fail (#6734). - Fixed a bug where capabilities from --cap-add were not properly added when a container was started as a non-root user via --user. - Fixed a bug where Pod infra containers were not properly cleaned up when they stopped, causing networking issues (#7103). * API - Fixed a bug where the libpod and compat Build endpoints did not accept the application/tar content type (instead only accepting application/x-tar) (#7185). - Fixed a bug where the libpod Exists endpoint would attempt to write a second header in some error conditions (#7197). - Fixed a bug where compat and libpod Network Inspect and Network Remove endpoints would return a 500 instead of 404 when the requested network was not found. - Added a versioned _ping endpoint (e.g. http://localhost/v1.40/_ping). - Fixed a bug where containers started through a systemd-managed instance of the REST API would be shut down when podman system service shut down due to its idle timeout (#7294). - Added stronger parameter verification for the libpod Network Create endpoint to ensure subnet mask is a valid value. - The Pod URL parameter to the Libpod Container List endpoint has been deprecated; the information previously gated by the Pod boolean will now be included in the response unconditionally. - Change hard requires for AppArmor to Recommends. They are not needed for runtime or with SELinux but already installed if AppArmor is used [jsc#SMO-15] - Add BuildRequires for pkg-config(libselinux) to build with SELinux support [jsc#SMO-15] Update to v2.0.4 * Fixed a bug where the output of podman image search did not populate the Description field as it was mistakenly assigned to the ID field. * Fixed a bug where podman build - and podman build on an HTTP target would fail. * Fixed a bug where rootless Podman would improperly chown the copied-up contents of anonymous volumes (#7130). * Fixed a bug where Podman would sometimes HTML-escape special characters in its CLI output. * Fixed a bug where the podman start --attach --interactive command would print the container ID of the container attached to when exiting (#7068). * Fixed a bug where podman run --ipc=host --pid=host would only set --pid=host and not --ipc=host (#7100). * Fixed a bug where the --publish argument to podman run, podman create and podman pod create would not allow binding the same container port to more than one host port (#7062). * Fixed a bug where incorrect arguments to podman images --format could cause Podman to segfault. * Fixed a bug where podman rmi --force on an image ID with more than one name and at least one container using the image would not completely remove containers using the image (#7153). * Fixed a bug where memory usage in bytes and memory use percentage were swapped in the output of podman stats --format=json. * Fixed a bug where the libpod and compat events endpoints would fail if no filters were specified (#7078). * Fixed a bug where the CgroupVersion field in responses from the compat Info endpoint was prefixed by 'v' (instead of just being '1' or '2', as is documented). - Suggest katacontainers instead of recommending it. It's not enabled by default, so it's just bloat Update to v2.0.3 * Fix handling of entrypoint * log API: add context to allow for cancelling * fix API: Create container with an invalid configuration * Remove all instances of named return 'err' from Libpod * Fix: Correct connection counters for hijacked connections * Fix: Hijacking v2 endpoints to follow rfc 7230 semantics * Remove hijacked connections from active connections list * version/info: format: allow more json variants * Correctly print STDOUT on non-terminal remote exec * Fix container and pod create commands for remote create * Mask out /sys/dev to prevent information leak from the host * Ensure sig-proxy default is propagated in start * Add SystemdMode to inspect for containers * When determining systemd mode, use full command * Fix lint * Populate remaining unused fields in `pod inspect` * Include infra container information in `pod inspect` * play-kube: add suport for 'IfNotPresent' pull type * docs: user namespace can't be shared in pods * Fix 'Error: unrecognized protocol \'TCP\' in port mapping' * Error on rootless mac and ip addresses * Fix & add notes regarding problematic language in codebase * abi: set default umask and rlimits * Used reference package with errors for parsing tag * fix: system df error when an image has no name * Fix Generate API title/description * Add noop function disable-content-trust * fix play kube doesn't override dockerfile ENTRYPOINT * Support default profile for apparmor * Bump github.com/containers/common to v0.14.6 * events endpoint: backwards compat to old type * events endpoint: fix panic and race condition * Switch references from libpod.conf to containers.conf * podman.service: set type to simple * podman.service: set doc to podman-system-service * podman.service: use default registries.conf * podman.service: use default killmode * podman.service: remove stop timeout * systemd: symlink user->system * vendor golang.org/x/text@v0.3.3 * Fix a bug where --pids-limit was parsed incorrectly * search: allow wildcards * [CI:DOCS]Do not copy policy.json into gating image * Fix systemd pid 1 test * Cirrus: Rotate keys post repo. rename * The libpod.conf(5) man page got removed and all references are now pointing towards containers.conf(5), which will be part of the libcontainers-common package. Update to podman v2.0.2 * fix race condition in `libpod.GetEvents(...)` * Fix bug where `podman mount` didn't error as rootless * remove podman system connection * Fix imports to ensure v2 is used with libpod * Update release notes for v2.0.2 * specgen: fix order for setting rlimits * Ensure umask is set appropriately for 'system service' * generate systemd: improve pod-flags filter * Fix a bug with APIv2 compat network remove to log an ErrNetworkNotFound instead of nil * Fixes --remote flag issues * Pids-limit should only be set if the user set it * Set console mode for windows * Allow empty host port in --publish flag * Add a note on the APIs supported by `system service` * fix: Don't override entrypoint if it's `nil` * Set TMPDIR to /var/tmp by default if not set * test: add tests for --user and volumes * container: move volume chown after spec generation * libpod: volume copyup honors namespace mappings * Fix `system service` panic from early hangup in events * stop podman service in e2e tests * Print errors from individual containers in pods * auto-update: clarify systemd-unit requirements * podman ps truncate the command * move go module to v2 * Vendor containers/common v0.14.4 * Bump to imagebuilder v1.1.6 on v2 branch * Account for non-default port number in image name - Changes since v2.0.1 * Update release notes with further v2.0.1 changes * Fix inspect to display multiple label: changes * Set syslog for exit commands on log-level=debug * Friendly amendment for pr 6751 * podman run/create: support all transports * systemd generate: allow manual restart of container units in pods * Revert sending --remote flag to containers * Print port mappings in `ps` for ctrs sharing network * vendor github.com/containers/common@v0.14.3 * Update release notes for v2.0.1 * utils: drop default mapping when running uid!=0 * Set stop signal to 15 when not explicitly set * podman untag: error if tag doesn't exist * Reformat inspect network settings * APIv2: Return `StatusCreated` from volume creation * APIv2:fix: Remove `/json` from compat network EPs * Fix ssh-agent support * libpod: specify mappings to the storage * APIv2:doc: Fix swagger doc to refer to volumes * Add podman network to bash command completions * Fix typo in manpage for `podman auto update`. * Add JSON output field for ps * V2 podman system connection * image load: no args required * Re-add PODMAN_USERNS environment variable * Fix conflicts between privileged and other flags * Bump required go version to 1.13 * Add explicit command to alpine container in test case. * Use POLL_DURATION for timer * Stop following logs using timers * 'pod' was being truncated to 'po' in the names of the generated systemd unit files. * rootless_linux: improve error message * Fix podman build handling of --http-proxy flag * correct the absolute path of `rm` executable * Makefile: allow customizable GO_BUILD * Cirrus: Change DEST_BRANCH to v2.0 Update to podman v2.0.0 * The `podman generate systemd` command now supports the `--new` flag when used with pods, allowing portable services for pods to be created. * The `podman play kube` command now supports running Kubernetes Deployment YAML. * The `podman exec` command now supports the `--detach` flag to run commands in the container in the background. * The `-p` flag to `podman run` and `podman create` now supports forwarding ports to IPv6 addresses. * The `podman run`, `podman create` and `podman pod create` command now support a `--replace` flag to remove and replace any existing container (or, for `pod create`, pod) with the same name * The `--restart-policy` flag to `podman run` and `podman create` now supports the `unless-stopped` restart policy. * The `--log-driver` flag to `podman run` and `podman create` now supports the `none` driver, which does not log the container's output. * The `--mount` flag to `podman run` and `podman create` now accepts `readonly` option as an alias to `ro`. * The `podman generate systemd` command now supports the `--container-prefix`, `--pod-prefix`, and `--separator` arguments to control the name of generated unit files. * The `podman network ls` command now supports the `--filter` flag to filter results. * The `podman auto-update` command now supports specifying an authfile to use when pulling new images on a per-container basis using the `io.containers.autoupdate.authfile` label. * Fixed a bug where the `podman exec` command would log to journald when run in containers loggined to journald ([#6555](https://github.com/containers/libpod/issues/6555)). * Fixed a bug where the `podman auto-update` command would not preserve the OS and architecture of the original image when pulling a replacement ([#6613](https://github.com/containers/libpod/issues/6613)). * Fixed a bug where the `podman cp` command could create an extra `merged` directory when copying into an existing directory ([#6596](https://github.com/containers/libpod/issues/6596)). * Fixed a bug where the `podman pod stats` command would crash on pods run with `--network=host` ([#5652](https://github.com/containers/libpod/issues/5652)). * Fixed a bug where containers logs written to journald did not include the name of the container. * Fixed a bug where the `podman network inspect` and `podman network rm` commands did not properly handle non-default CNI configuration paths ([#6212](https://github.com/containers/libpod/issues/6212)). * Fixed a bug where Podman did not properly remove containers when using the Kata containers OCI runtime. * Fixed a bug where `podman inspect` would sometimes incorrectly report the network mode of containers started with `--net=none`. * Podman is now better able to deal with cases where `conmon` is killed before the container it is monitoring. Update to podman v1.9.3: * Fixed a bug where, on FIPS enabled hosts, FIPS mode secrets were not properly mounted into containers * Fixed a bug where builds run over Varlink would hang * Fixed a bug where podman save would fail when the target image was specified by digest * Fixed a bug where rootless containers with ports forwarded to them could panic and dump core due to a concurrency issue (#6018) * Fixed a bug where rootless Podman could race when opening the rootless user namespace, resulting in commands failing to run * Fixed a bug where HTTP proxy environment variables forwarded into the container by the --http-proxy flag could not be overridden by --env or --env-file * Fixed a bug where rootless Podman was setting resource limits on cgroups v2 systems that were not using systemd-managed cgroups (and thus did not support resource limits), resulting in containers failing to start Update podman to v1.9.1: * Bugfixes - Fixed a bug where healthchecks could become nonfunctional if container log paths were manually set with --log-path and multiple container logs were placed in the same directory - Fixed a bug where rootless Podman could, when using an older libpod.conf, print numerous warning messages about an invalid CGroup manager config - Fixed a bug where rootless Podman would sometimes fail to close the rootless user namespace when joining it Update podman to v1.9.0: * Features - Experimental support has been added for podman run --userns=auto, which automatically allocates a unique UID and GID range for the new container's user namespace - The podman play kube command now has a --network flag to place the created pod in one or more CNI networks - The podman commit command now supports an --iidfile flag to write the ID of the committed image to a file - Initial support for the new containers.conf configuration file has been added. containers.conf allows for much more detailed configuration of some Podman functionality * Changes - There has been a major cleanup of the podman info command resulting in breaking changes. Many fields have been renamed to better suit usage with APIv2 - All uses of the --timeout flag have been switched to prefer the alternative --time. The --timeout flag will continue to work, but man pages and --help will use the --time flag instead * Bugfixes - Fixed a bug where some volume mounts from the host would sometimes not properly determine the flags they should use when mounting - Fixed a bug where Podman was not propagating $PATH to Conmon and the OCI runtime, causing issues for some OCI runtimes that required it - Fixed a bug where rootless Podman would print error messages about missing support for systemd cgroups when run in a container with no cgroup support - Fixed a bug where podman play kube would not properly handle container-only port mappings (#5610) - Fixed a bug where the podman container prune command was not pruning containers in the created and configured states - Fixed a bug where Podman was not properly removing CNI IP address allocations after a reboot (#5433) - Fixed a bug where Podman was not properly applying the default Seccomp profile when --security-opt was not given at the command line * HTTP API - Many Libpod API endpoints have been added, including Changes, Checkpoint, Init, and Restore - Resolved issues where the podman system service command would time out and exit while there were still active connections - Stability overall has greatly improved as we prepare the API for a beta release soon with Podman 2.0 * Misc - The default infra image for pods has been upgraded to k8s.gcr.io/pause:3.2 (from 3.1) to address a bug in the architecture metadata for non-AMD64 images - The slirp4netns networking utility in rootless Podman now uses Seccomp filtering where available for improved security - Updated Buildah to v1.14.8 - Updated containers/storage to v1.18.2 - Updated containers/image to v5.4.3 - Updated containers/common to v0.8.1 - Add 'systemd' BUILDFLAGS to build with support for journald logging (bsc#1162432) Update podman to v1.8.2: * Features - Initial support for automatically updating containers managed via Systemd unit files has been merged. This allows containers to automatically upgrade if a newer version of their image becomes available * Bugfixes - Fixed a bug where unit files generated by podman generate systemd --new would not force containers to detach, causing the unit to time out when trying to start - Fixed a bug where podman system reset could delete important system directories if run as rootless on installations created by older Podman (#4831) - Fixed a bug where image built by podman build would not properly set the OS and Architecture they were built with (#5503) - Fixed a bug where attached podman run with --sig-proxy enabled (the default), when built with Go 1.14, would repeatedly send signal 23 to the process in the container and could generate errors when the container stopped (#5483) - Fixed a bug where rootless podman run commands could hang when forwarding ports - Fixed a bug where rootless Podman would not work when /proc was mounted with the hidepid option set - Fixed a bug where the podman system service command would use large amounts of CPU when --timeout was set to 0 (#5531) * HTTP API - Initial support for Libpod endpoints related to creating and operating on image manifest lists has been added - The Libpod Healthcheck and Events API endpoints are now supported - The Swagger endpoint can now handle cases where no Swagger documentation has been generated Update podman to v1.8.1: * Features - Many networking-related flags have been added to podman pod create to enable customization of pod networks, including --add-host, --dns, --dns-opt, --dns-search, --ip, --mac-address, --network, and --no-hosts - The podman ps --format=json command now includes the ID of the image containers were created with - The podman run and podman create commands now feature an --rmi flag to remove the image the container was using after it exits (if no other containers are using said image) ([#4628](https://github.com/containers/libpod/issues/4628)) - The podman create and podman run commands now support the --device-cgroup-rule flag (#4876) - While the HTTP API remains in alpha, many fixes and additions have landed. These are documented in a separate subsection below - The podman create and podman run commands now feature a --no-healthcheck flag to disable healthchecks for a container (#5299) - Containers now recognize the io.containers.capabilities label, which specifies a list of capabilities required by the image to run. These capabilities will be used as long as they are more restrictive than the default capabilities used - YAML produced by the podman generate kube command now includes SELinux configuration passed into the container via --security-opt label=... (#4950) * Bugfixes - Fixed CVE-2020-1726, a security issue where volumes manually populated before first being mounted into a container could have those contents overwritten on first being mounted into a container - Fixed a bug where Podman containers with user namespaces in CNI networks with the DNS plugin enabled would not have the DNS plugin's nameserver added to their resolv.conf ([#5256](https://github.com/containers/libpod/issues/5256)) - Fixed a bug where trailing / characters in image volume definitions could cause them to not be overridden by a user-specified mount at the same location ([#5219](https://github.com/containers/libpod/issues/5219)) - Fixed a bug where the label option in libpod.conf, used to disable SELinux by default, was not being respected (#5087) - Fixed a bug where the podman login and podman logout commands required the registry to log into be specified (#5146) - Fixed a bug where detached rootless Podman containers could not forward ports (#5167) - Fixed a bug where rootless Podman could fail to run if the pause process had died - Fixed a bug where Podman ignored labels that were specified with only a key and no value (#3854) - Fixed a bug where Podman would fail to create named volumes when the backing filesystem did not support SELinux labelling (#5200) - Fixed a bug where --detach-keys='' would not disable detaching from a container (#5166) - Fixed a bug where the podman ps command was too aggressive when filtering containers and would force --all on in too many situations - Fixed a bug where the podman play kube command was ignoring image configuration, including volumes, working directory, labels, and stop signal (#5174) - Fixed a bug where the Created and CreatedTime fields in podman images --format=json were misnamed, which also broke Go template output for those fields ([#5110](https://github.com/containers/libpod/issues/5110)) - Fixed a bug where rootless Podman containers with ports forwarded could hang when started (#5182) - Fixed a bug where podman pull could fail to parse registry names including port numbers - Fixed a bug where Podman would incorrectly attempt to validate image OS and architecture when starting containers - Fixed a bug where Bash completion for podman build -f would not list available files that could be built (#3878) - Fixed a bug where podman commit --change would perform incorrect validation, resulting in valid changes being rejected (#5148) - Fixed a bug where podman logs --tail could take large amounts of memory when the log file for a container was large (#5131) - Fixed a bug where Podman would sometimes incorrectly generate firewall rules on systems using firewalld - Fixed a bug where the podman inspect command would not display network information for containers properly if a container joined multiple CNI networks ([#4907](https://github.com/containers/libpod/issues/4907)) - Fixed a bug where the --uts flag to podman create and podman run would only allow specifying containers by full ID (#5289) - Fixed a bug where rootless Podman could segfault when passed a large number of file descriptors - Fixed a bug where the podman port command was incorrectly interpreting additional arguments as container names, instead of port numbers - Fixed a bug where units created by podman generate systemd did not depend on network targets, and so could start before the system network was ready (#4130) - Fixed a bug where exec sessions in containers which did not specify a user would not inherit supplemental groups added to the container via --group-add - Fixed a bug where Podman would not respect the $TMPDIR environment variable for placing large temporary files during some operations (e.g. podman pull) ([#5411](https://github.com/containers/libpod/issues/5411)) * HTTP API - Initial support for secure connections to servers via SSH tunneling has been added - Initial support for the libpod create and logs endpoints for containers has been added - Added a /swagger/ endpoint to serve API documentation - The json endpoint for containers has received many fixes - Filtering images and containers has been greatly improved, with many bugs fixed and documentation improved - Image creation endpoints (commit, pull, etc) have seen many fixes - Server timeout has been fixed so that long operations will no longer trigger the timeout and shut the server down - The stats endpoint for containers has seen major fixes and now provides accurate output - Handling the HTTP 304 status code has been fixed for all endpoints - Many fixes have been made to API documentation to ensure it matches the code * Misc - The Created field to podman images --format=json has been renamed to CreatedSince as part of the fix for (#5110). Go templates using the old name shou ld still work - The CreatedTime field to podman images --format=json has been renamed to CreatedAt as part of the fix for (#5110). Go templates using the old name should still work - The before filter to podman images has been renamed to since for Docker compatibility. Using before will still work, but documentation has been changed to use the new since filter - Using the --password flag to podman login now warns that passwords are being passed in plaintext - Some common cases where Podman would deadlock have been fixed to warn the user that podman system renumber must be run to resolve the deadlock - Configure br_netfilter for podman automatically (bsc#1165738) The trigger is only excuted when updating podman-cni-config while the command was running conmon was update to v2.0.20 (bsc#1175821) - journald: fix logging container name - container logging: Implement none driver - 'off', 'null' or 'none' all work. - ctrl: warn if we fail to unlink - Drop fsync calls - Reap PIDs before running exit command - Fix log path parsing - Add --sync option to prevent conmon from double forking - Add --no-sync-log option to instruct conmon to not sync the logs of the containers upon shutting down. This feature fixes a regression where we unconditionally dropped the log sync. It is possible the container logs could be corrupted on a sudden power-off. If you need container logs to remain in consistent state after a sudden shutdown, please update from v2.0.19 to v2.0.20 - Update to v2.0.17: - Add option to delay execution of exit command - Update to v2.0.16: - tty: flush pending data when fd is ready - Enable support for journald logging (bsc#1162432) - Update to v2.0.15: - store status while waiting for pid - Update to v2.0.14: - drop usage of splice(2) - avoid hanging on stdin - stdio: sometimes quit main loop after io is done - ignore sigpipe - Update to v2.0.12 - oom: fix potential race between verification steps - Update to v2.0.11 - log: reject --log-tag with k8s-file - chmod std files pipes - adjust score to -1000 to prevent conmon from ever being OOM killed - container OOM: verify cgroup hasn't been cleaned up before reporting OOM - journal logging: write to /dev/null instead of -1 fuse-overlayfs was updated to 1.1.2 (bsc#1175821): - fix memory leak when creating whiteout files. - fix lookup for overflow uid when it is different than the overflow gid. - use openat2(2) when available. - accept 'ro' as mount option. - fix set mtime for a symlink. - fix some issues reported by static analysis. - fix potential infinite loop on a short read. - fix creating a directory if the destination already exists in the upper layer. - report correctly the number of links for a directory also for subsequent stat calls - stop looking up the ino in the lower layers if the file could not be opened - make sure the destination is deleted before doing a rename(2). It prevents a left over directory to cause delete to fail with EEXIST. - honor --debug. libcontainers-common was updated to fix: - Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075) - Added containers/common tarball for containers.conf(5) man page - Install containers.conf default configuration in /usr/share/containers - libpod repository on github got renamed to podman - Update to image 5.5.1 - Add documentation for credHelpera - Add defaults for using the rootless policy path - Update libpod/podman to 2.0.3 - docs: user namespace can't be shared in pods - Switch references from libpod.conf to containers.conf - Allow empty host port in --publish flag - update document login see config.json as valid - Update storage to 1.20.2 - Add back skip_mount_home - Remove remaining difference between SLE and openSUSE package and ship the some mounts.conf default configuration on both platforms. As the sources for the mount point do not exist on openSUSE by default this config will basically have no effect on openSUSE. (jsc#SLE-12122, bsc#1175821) - Update to image 5.4.4 - Remove registries.conf VERSION 2 references from man page - Intial authfile man page - Add $HOME/.config/containers/certs.d to perHostCertDirPath - Add $HOME/.config/containers/registries.conf to config path - registries.conf.d: add stances for the registries.conf - update to libpod 1.9.3 - userns: support --userns=auto - Switch to using --time as opposed to --timeout to better match Docker - Add support for specifying CNI networks in podman play kube - man pages: fix inconsistencies - Update to storage 1.19.1 - userns: add support for auto - store: change the default user to containers - config: honor XDG_CONFIG_HOME - Remove the /var/lib/ca-certificates/pem/SUSE.pem workaround again. It never ended up in SLES and a different way to fix the underlying problem is being worked on. - Add registry.opensuse.org as default registry [bsc#1171578] - Add /var/lib/ca-certificates/pem/SUSE.pem to the SLES mounts. This for making container-suseconnect working in the public cloud on-demand images. It needs that file for being able to verify the server certificates of the RMT servers hosted in the public cloud. (https://github.com/SUSE/container-suseconnect/issues/41) Moderate SUSE bug 1162432 SUSE bug 1164090 SUSE bug 1165738 SUSE bug 1171578 SUSE bug 1174075 SUSE bug 1175821 SUSE bug 1175957 CVE-2020-1726 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 helm-3.11.2-150000.1.21.1 on GA media (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for helm fixes the following issues: helm was updated to version 3.9.4: * CVE-2022-36055: Fixed denial of service through string value parsing (bsc#1203054). * Updating the certificates used for testing * Updating index handling helm was updated to version 3.9.3: - CVE-2022-1996: Updated kube-openapi to fix an issue that could result in a CORS protection bypass (bsc#1200528). * Fix missing array length check on release helm was updated to version 3.9.2: * Update of the circleci image helm was updated to version 3.9.1: * Update to support Kubernetes 1.24.2 * Improve logging and safety of statefulSetReady * Make token caching an opt-in feature * Bump github.com/lib/pq from 1.10.5 to 1.10.6 * Bump github.com/Masterminds/squirrel from 1.5.2 to 1.5.3 helm was updated to version 3.9.0: * Added a --quiet flag to helm lint * Added a --post-renderer-args flag to support arguments being passed to the post renderer * Added more checks during the signing process * Updated to add Kubernetes 1.24 support helm was updated to version 3.8.2: * Bump oras.land/oras-go from 1.1.0 to 1.1.1 * Fixing downloader plugin error handling * Simplify testdata charts * Simplify testdata charts * Add tests for multi-level dependencies. * Fix value precedence * Bumping Kubernetes package versions * Updating vcs to latest version * Dont modify provided transport * Pass http getter as pointer in tests * Add docs block * Add transport option and tests * Reuse http transport * Updating Kubernetes libs to 0.23.4 (latest) * fix: remove deadcode * fix: helm package tests * fix: helm package with dependency update for charts with OCI dependencies * Fix typo Unset the env var before func return in Unit Test * add legal name check * maint: fix syntax error in deploy.sh * linting issue fixed * only apply overwrite if version is canary * overwrite flag added to az storage blob upload-batch * Avoid querying for OCI tags can explicit version provided in chart dependencies * Management of bearer tokens for tag listing * Updating Kubernetes packages to 1.23.3 * refactor: use `os.ReadDir` for lightweight directory reading * Add IngressClass to manifests to be (un)installed * feat(comp): Shell completion for OCI * Fix install memory/goroutine leak Important SUSE bug 1200528 SUSE bug 1203054 CVE-2022-1996 CVE-2022-36055 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 helm-mirror-0.3.1-150000.1.13.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for helm-mirror fixes the following issues: - Updated to version 0.3.1: - CVE-2019-18658: Fixed a potential symbolic link issue in helm that could be used to leak sensitive files (bsc#1156646). Moderate SUSE bug 1156646 SUSE bug 1197728 CVE-2019-18658 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 kubernetes1.23-client-1.23.17-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the kubernetes1.23-client-1.23.17-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2021-25749 CVE-2022-3162 CVE-2022-3294 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 kubernetes1.24-client-1.24.13-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the kubernetes1.24-client-1.24.13-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2022-27664 CVE-2022-3162 CVE-2022-3294 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 kubevirt-manifests-0.58.0-150500.6.3 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the kubevirt-manifests-0.58.0-150500.6.3 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2021-43565 CVE-2022-1798 CVE-2022-1996 CVE-2022-29162 CVE-2023-26484 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 podman-4.4.4-150500.1.4 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the podman-4.4.4-150500.1.4 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2018-10856 CVE-2019-10152 CVE-2019-10214 CVE-2020-14370 CVE-2020-1726 CVE-2021-20199 CVE-2021-20206 CVE-2021-4024 CVE-2021-41190 CVE-2022-1227 CVE-2022-21698 CVE-2022-27191 CVE-2022-27649 CVE-2022-2989 CVE-2023-0778 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-kubernetes-8.0.1-150100.3.7.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-kubernetes-8.0.1-150100.3.7.1 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2018-20060 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-seccomp-2.5.3-150400.2.4 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-seccomp-2.5.3-150400.2.4 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2019-9893 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 runc-1.1.5-150000.41.1 on GA media (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for runc fixes the following issues: Update to runc v1.1.5: Security fixes: - CVE-2023-25809: Fixed rootless `/sys/fs/cgroup` is writable when cgroupns isn't unshared (bnc#1209884). - CVE-2023-27561: Fixed regression that reintroduced CVE-2019-19921 vulnerability (bnc#1208962). - CVE-2023-28642: Fixed AppArmor/SELinux bypass with symlinked /proc (bnc#1209888). Other fixes: - Fix the inability to use `/dev/null` when inside a container. - Fix changing the ownership of host's `/dev/null` caused by fd redirection (bsc#1168481). - Fix rare runc exec/enter unshare error on older kernels. - nsexec: Check for errors in `write_log()`. - Drop version-specific Go requirement. Important SUSE bug 1168481 SUSE bug 1208962 SUSE bug 1209884 SUSE bug 1209888 CVE-2023-25809 CVE-2023-27561 CVE-2023-28642 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 slirp4netns-1.2.0-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the slirp4netns-1.2.0-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Containers 15 SP5. Moderate CVE-2019-6778 CVE-2020-10756 CVE-2020-1983 CVE-2020-29130 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ImageMagick-7.1.0.9-150400.6.18.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ImageMagick fixes the following issues: - CVE-2022-3213: Fixed heap buffer overflow when processing a malformed TIFF file (bsc#1203450). Moderate SUSE bug 1203450 CVE-2022-3213 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 MozillaFirefox-102.11.0-150200.152.87.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 91.9.1 ESR - MFSA 2022-19 (bsc#1199768): - CVE-2022-1802: Prototype pollution in Top-Level Await implementation - CVE-2022-1529: Untrusted input used in JavaScript object indexing, leading to prototype pollution Important SUSE bug 1199768 CVE-2022-1529 CVE-2022-1802 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox fixes the following issues: This update contains the Firefox Extended Support Release 91.2.0 ESR. Release 91.2.0 ESR: * Fixed: Various stability, functionality, and security fixes MFSA 2021-45 (bsc#1191332): * CVE-2021-38496: Use-after-free in MessageTask * CVE-2021-38497: Validation message could have been overlaid on another origin * CVE-2021-38498: Use-after-free of nsLanguageAtomService object * CVE-2021-32810: Fixed Data race in crossbeam-deque * CVE-2021-38500: Memory safety bugs fixed in Firefox 93, Firefox ESR 78.15, and Firefox ESR 91.2 * CVE-2021-38501: Memory safety bugs fixed in Firefox 93 and Firefox ESR 91.2 - Fixed crash in FIPS mode (bsc#1190710) Release 91.1.0 ESR: * Fixed: Various stability, functionality, and security fixes MFSA 2021-40 (bsc#1190269, bsc#1190274): * CVE-2021-38492: Navigating to `mk:` URL scheme could load Internet Explorer * CVE-2021-38495: Memory safety bugs fixed in Firefox 92 and Firefox ESR 91.1 Release 91.0.1esr ESR: * Fixed: Fixed an issue causing buttons on the tab bar to be resized when loading certain websites (bug 1704404) * Fixed: Fixed an issue which caused tabs from private windows to be visible in non-private windows when viewing switch-to- tab results in the address bar panel (bug 1720369) * Fixed: Various stability fixes * Fixed: Security fix MFSA 2021-37 (bsc#1189547) * CVE-2021-29991 (bmo#1724896) Header Splitting possible with HTTP/3 Responses Firefox Extended Support Release 91.0 ESR * New: Some of the highlights of the new Extended Support Release are: - A number of user interface changes. For more information, see the Firefox 89 release notes. - Firefox now supports logging into Microsoft, work, and school accounts using Windows single sign-on. Learn more - On Windows, updates can now be applied in the background while Firefox is not running. - Firefox for Windows now offers a new page about:third-party to help identify compatibility issues caused by third-party applications - Version 2 of Firefox's SmartBlock feature further improves private browsing. Third party Facebook scripts are blocked to prevent you from being tracked, but are now automatically loaded 'just in time' if you decide to 'Log in with Facebook' on any website. - Enhanced the privacy of the Firefox Browser's Private Browsing mode with Total Cookie Protection, which confines cookies to the site where they were created, preventing companis from using cookies to track your browsing across sites. This feature was originally launched in Firefox's ETP Strict mode. - PDF forms now support JavaScript embedded in PDF files. Some PDF forms use JavaScript for validation and other interactive features. - You'll encounter less website breakage in Private Browsing and Strict Enhanced Tracking Protection with SmartBlock, which provides stand-in scripts so that websites load properly. - Improved Print functionality with a cleaner design and better integration with your computer's printer settings. - Firefox now protects you from supercookies, a type of tracker that can stay hidden in your browser and track you online, even after you clear cookies. By isolating supercookies, Firefox prevents them from tracking your web browsing from one site to the next. - Firefox now remembers your preferred location for saved bookmarks, displays the bookmarks toolbar by default on new tabs, and gives you easy access to all of your bookmarks via a toolbar folder. - Native support for macOS devices built with Apple Silicon CPUs brings dramatic performance improvements over the non- native build that was shipped in Firefox 83: Firefox launches over 2.5 times faster and web apps are now twice as responsive (per the SpeedoMeter 2.0 test). If you are on a new Apple device, follow these steps to upgrade to the latest Firefox. - Pinch zooming will now be supported for our users with Windows touchscreen devices and touchpads on Mac devices. Firefox users may now use pinch to zoom on touch-capable devices to zoom in and out of webpages. - We’ve improved functionality and design for a number of Firefox search features: * Selecting a search engine at the bottom of the search panel now enters search mode for that engine, allowing you to see suggestions (if available) for your search terms. The old behavior (immediately performing a search) is available with a shift-click. * When Firefox autocompletes the URL of one of your search engines, you can now search with that engine directly in the address bar by selecting the shortcut in the address bar results. * We’ve added buttons at the bottom of the search panel to allow you to search your bookmarks, open tabs, and history. - Firefox supports AcroForm, which will allow you to fill in, print, and save supported PDF forms and the PDF viewer also has a new fresh look. - For our users in the US and Canada, Firefox can now save, manage, and auto-fill credit card information for you, making shopping on Firefox ever more convenient. - In addition to our default, dark and light themes, with this release, Firefox introduces the Alpenglow theme: a colorful appearance for buttons, menus, and windows. You can update your Firefox themes under settings or preferences. * Changed: Firefox no longer supports Adobe Flash. There is no setting available to re-enable Flash support. * Enterprise: Various bug fixes and new policies have been implemented in the latest version of Firefox. See more details in the Firefox for Enterprise 91 Release Notes. MFSA 2021-33 (bsc#1188891): * CVE-2021-29986: Race condition when resolving DNS names could have led to memory corruption * CVE-2021-29981: Live range splitting could have led to conflicting assignments in the JIT * CVE-2021-29988: Memory corruption as a result of incorrect style treatment * CVE-2021-29983: Firefox for Android could get stuck in fullscreen mode * CVE-2021-29984: Incorrect instruction reordering during JIT optimization * CVE-2021-29980: Uninitialized memory in a canvas object could have led to memory corruption * CVE-2021-29987: Users could have been tricked into accepting unwanted permissions on Linux * CVE-2021-29985: Use-after-free media channels * CVE-2021-29982: Single bit data leak due to incorrect JIT optimization and type confusion * CVE-2021-29989: Memory safety bugs fixed in Firefox 91 and Firefox ESR 78.13 * CVE-2021-29990: Memory safety bugs fixed in Firefox 91 Important SUSE bug 1188891 SUSE bug 1189547 SUSE bug 1190269 SUSE bug 1190274 SUSE bug 1190710 SUSE bug 1191332 CVE-2021-29980 CVE-2021-29981 CVE-2021-29982 CVE-2021-29983 CVE-2021-29984 CVE-2021-29985 CVE-2021-29986 CVE-2021-29987 CVE-2021-29988 CVE-2021-29989 CVE-2021-29990 CVE-2021-29991 CVE-2021-32810 CVE-2021-38492 CVE-2021-38495 CVE-2021-38496 CVE-2021-38497 CVE-2021-38498 CVE-2021-38500 CVE-2021-38501 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 NetworkManager-1.38.6-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the NetworkManager-1.38.6-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2006-7246 CVE-2015-2924 CVE-2016-0764 CVE-2018-1000135 CVE-2018-15688 CVE-2020-10754 CVE-2020-13529 CVE-2021-20297 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for SDL fixes the following issues: Security issues fixed: - CVE-2019-7572: Fixed a buffer over-read in IMA_ADPCM_nibble in audio/SDL_wave.c.(bsc#1124806). - CVE-2019-7578: Fixed a heap-based buffer over-read in InitIMA_ADPCM in audio/SDL_wave.c (bsc#1125099). - CVE-2019-7576: Fixed heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124799). - CVE-2019-7573: Fixed a heap-based buffer over-read in InitMS_ADPCM in audio/SDL_wave.c (bsc#1124805). - CVE-2019-7635: Fixed a heap-based buffer over-read in Blit1to4 in video/SDL_blit_1.c. (bsc#1124827). - CVE-2019-7636: Fixed a heap-based buffer over-read in SDL_GetRGB in video/SDL_pixels.c (bsc#1124826). - CVE-2019-7638: Fixed a heap-based buffer over-read in Map1toN in video/SDL_pixels.c (bsc#1124824). - CVE-2019-7574: Fixed a heap-based buffer over-read in IMA_ADPCM_decode in audio/SDL_wave.c (bsc#1124803). - CVE-2019-7575: Fixed a heap-based buffer overflow in MS_ADPCM_decode in audio/SDL_wave.c (bsc#1124802). - CVE-2019-7637: Fixed a heap-based buffer overflow in SDL_FillRect function in SDL_surface.c (bsc#1124825). - CVE-2019-7577: Fixed a buffer over read in SDL_LoadWAV_RW in audio/SDL_wave.c (bsc#1124800). Moderate SUSE bug 1124799 SUSE bug 1124800 SUSE bug 1124802 SUSE bug 1124803 SUSE bug 1124805 SUSE bug 1124806 SUSE bug 1124824 SUSE bug 1124825 SUSE bug 1124826 SUSE bug 1124827 SUSE bug 1125099 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for SDL2 fixes the following issues: - CVE-2022-4743: Fixed a potential memory leak when creating a texture for an OpenGL ES image (bsc#1206727). Moderate SUSE bug 1206727 CVE-2022-4743 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 accountsservice-0.6.55-150400.12.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the accountsservice-0.6.55-150400.12.8 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2018-14036 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for audiofile fixes the following issues: Security issue fixed: - CVE-2018-13440: Return AF_FAIL instead of causing NULL pointer dereferences later (bsc#1100523). Low SUSE bug 1100523 CVE-2018-13440 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 audiofile-devel-0.3.6-3.7.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the audiofile-devel-0.3.6-3.7.10 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2015-7747 CVE-2017-6827 CVE-2017-6828 CVE-2017-6829 CVE-2017-6830 CVE-2017-6831 CVE-2017-6832 CVE-2017-6833 CVE-2017-6834 CVE-2017-6835 CVE-2017-6836 CVE-2017-6837 CVE-2017-6838 CVE-2017-6839 CVE-2018-13440 CVE-2018-17095 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for avahi fixes the following issues: - CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328). Moderate SUSE bug 1210328 CVE-2023-1981 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 avahi-autoipd-0.8-150400.7.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the avahi-autoipd-0.8-150400.7.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-6519 CVE-2018-1000845 CVE-2021-26720 CVE-2021-3468 CVE-2021-3502 CVE-2023-1981 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for avahi fixes the following issues: - CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328). Moderate SUSE bug 1210328 CVE-2023-1981 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bluez-devel-5.65-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the bluez-devel-5.65-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-9797 CVE-2016-9798 CVE-2016-9800 CVE-2016-9801 CVE-2016-9802 CVE-2016-9804 CVE-2016-9917 CVE-2016-9918 CVE-2020-0556 CVE-2020-26558 CVE-2021-0129 CVE-2021-3588 CVE-2022-0204 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for capnproto fixes the following issues: - CVE-2022-46149: Fixed out of bounds read when handling a list of lists (bsc#1205968). Moderate SUSE bug 1205968 CVE-2022-46149 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 caribou-0.4.21-150400.19.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the caribou-0.4.21-150400.19.6 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2021-3567 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for colord fixes the following issues: - CVE-2021-42523: Fixed a small memory leak in sqlite3_exec (bsc#1202802). Moderate SUSE bug 1202802 CVE-2021-42523 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 colord-color-profiles-1.4.5-150400.4.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the colord-color-profiles-1.4.5-150400.4.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2021-42523 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 conky-1.11.5-1.20 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the conky-1.11.5-1.20 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2011-3616 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cups-pk-helper-0.2.6-150400.12.12 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cups-pk-helper-0.2.6-150400.12.12 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2012-4510 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for djvulibre fixes the following issues: - CVE-2021-3500: Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file (bsc#1186253) Important SUSE bug 1186253 CVE-2021-3500 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for emacs fixes the following issues: - CVE-2022-48337: Fixed etags local command injection vulnerability (bsc#1208515). - CVE-2022-48339: Fixed htmlfontify.el command injection vulnerability (bsc#1208512). - CVE-2022-48338: Fixed ruby-mode.el local command injection vulnerability (bsc#1208514). Important SUSE bug 1208512 SUSE bug 1208514 SUSE bug 1208515 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 emacs-x11-27.2-150400.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the emacs-x11-27.2-150400.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2014-3421 CVE-2014-3422 CVE-2014-3423 CVE-2014-3424 CVE-2014-9483 CVE-2017-7476 CVE-2022-45939 CVE-2022-48337 CVE-2022-48338 CVE-2022-48339 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for exempi fixes the following issues: - CVE-2018-12648: Fixed a NULL pointer dereference (crash) issue when processing webp files (bsc#1098946). Moderate SUSE bug 1098946 CVE-2018-12648 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for exiv2 fixes the following issues: Updated to version 0.27.5 (jsc#PED-1393): - CVE-2017-1000128: Fixed stack out of bounds read in JPEG2000 parser (bsc#1068871). - CVE-2019-13108: Fixed integer overflow PngImage:readMetadata (bsc#1142675). - CVE-2020-19716: Fixed buffer overflow vulnerability in the Databuf function in types.cpp (bsc#1188645). - CVE-2021-29457: Fixed heap buffer overflow when write metadata into a crafted image file (bsc#1185002). - CVE-2021-29470: Fixed out-of-bounds read in Exiv2:Jp2Image:encodeJp2Header (bsc#1185447). - CVE-2021-29623: Fixed read of uninitialized memory (bsc#1186053). - CVE-2021-31291: Fixed heap-based buffer overflow in jp2image.cpp (bsc#1188733). - CVE-2021-32617: Fixed denial of service due to inefficient algorithm (bsc#1186192). - CVE-2021-37620: Fixed out-of-bounds read in XmpTextValue:read() (bsc#1189332). - CVE-2021-37621: Fixed DoS due to infinite loop in Image:printIFDStructure (bsc#1189333). - CVE-2021-37622: Fixed DoS due to infinite loop in JpegBase:printStructure (bsc#1189334) - CVE-2021-34334: Fixed DoS due to integer overflow in loop counter(bsc#1189338) - CVE-2021-37623: Fixed DoS due to infinite loop in JpegBase:printStructure (bsc#1189335) - CVE-2021-29463: Fixed out-of-bounds read in webpimage.cpp (bsc#1185913). - CVE-2021-34334: Fixed DoS due to integer overflow in loop counter (bsc#1189338) - CVE-2019-13111: Fixed integer overflow in WebPImage:decodeChunks that lead to denial of service (bsc#1142679) - CVE-2021-29463: Fixed an out-of-bounds read was found in webpimage.cpp (bsc#1185913) Bugfixes: - Fixed build using GCC 11 (bsc#1185218). A new libexiv2-2_27 shared library is shipped, the libexiv2-2_26 is provided only for compatibility now. Please recompile your applications using the exiv2 library. Important SUSE bug 1068871 SUSE bug 1142675 SUSE bug 1142679 SUSE bug 1185002 SUSE bug 1185218 SUSE bug 1185447 SUSE bug 1185913 SUSE bug 1186053 SUSE bug 1186192 SUSE bug 1188645 SUSE bug 1188733 SUSE bug 1189332 SUSE bug 1189333 SUSE bug 1189334 SUSE bug 1189335 SUSE bug 1189338 CVE-2017-1000128 CVE-2019-13108 CVE-2019-13111 CVE-2020-19716 CVE-2021-29457 CVE-2021-29463 CVE-2021-29470 CVE-2021-29623 CVE-2021-31291 CVE-2021-32617 CVE-2021-34334 CVE-2021-37620 CVE-2021-37621 CVE-2021-37622 CVE-2021-37623 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 fetchmailconf-6.4.22-20.26.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the fetchmailconf-6.4.22-20.26.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2021-36386 CVE-2021-39272 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ffmpeg fixes the following issues: - CVE-2022-48434: Fixed use after free in libavcodec/pthread_frame.c (bsc#1209934). Important SUSE bug 1209934 CVE-2022-48434 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 file-roller-3.40.0-150400.3.13 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the file-roller-3.40.0-150400.3.13 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2020-11736 CVE-2020-36314 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 firewall-applet-0.9.3-150400.8.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the firewall-applet-0.9.3-150400.8.9.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-5410 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 flatpak-1.14.4-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the flatpak-1.14.4-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-8659 CVE-2017-5226 CVE-2019-10063 CVE-2019-5736 CVE-2021-21261 CVE-2021-41133 CVE-2021-43860 CVE-2022-21682 CVE-2023-28100 CVE-2023-28101 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for fribidi fixes the following issues: - CVE-2022-25308: Fixed stack out of bounds read (bsc#1196147). - CVE-2022-25309: Fixed heap-buffer-overflow in fribidi_cap_rtl_to_unicode (bsc#1196148). - CVE-2022-25310: Fixed NULL pointer dereference in fribidi_remove_bidi_marks (bsc#1196150). Moderate SUSE bug 1196147 SUSE bug 1196148 SUSE bug 1196150 CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for freetype2 fixes the following issues: - CVE-2022-27404 Fixed a segmentation fault via a crafted typeface (bsc#1198830). - CVE-2022-27405 Fixed a buffer overflow via a crafted typeface (bsc#1198832). - CVE-2022-27406 Fixed a segmentation fault via a crafted typeface (bsc#1198823). Non-security fixes: - Updated to version 2.10.4 Moderate SUSE bug 1198823 SUSE bug 1198830 SUSE bug 1198832 CVE-2022-27404 CVE-2022-27405 CVE-2022-27406 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ftdump-2.10.4-150000.4.12.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ftdump-2.10.4-150000.4.12.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2014-2240 CVE-2014-9656 CVE-2014-9657 CVE-2014-9658 CVE-2014-9659 CVE-2014-9660 CVE-2014-9661 CVE-2014-9662 CVE-2014-9663 CVE-2014-9664 CVE-2014-9665 CVE-2014-9666 CVE-2014-9667 CVE-2014-9668 CVE-2014-9669 CVE-2014-9670 CVE-2014-9671 CVE-2014-9672 CVE-2014-9673 CVE-2014-9674 CVE-2014-9675 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key (bsc#1209188). Moderate SUSE bug 1209188 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of fwupd fixes the following issues: - rebuild the package with the new secure boot key (bsc#1209188). Moderate SUSE bug 1209188 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 fwupd-1.8.6-150500.2.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the fwupd-1.8.6-150500.2.2 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2020-10759 CVE-2022-3287 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 fwupdtpmevlog-1.5.8-150300.3.7.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the fwupdtpmevlog-1.5.8-150300.3.7.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2020-10759 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gcab-1.1-1.15 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gcab-1.1-1.15 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2015-0552 CVE-2018-5345 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gd-2.2.5-11.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gd fixes the following issues: - CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400). Moderate SUSE bug 1190400 CVE-2021-40812 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gnome-autoar-devel-0.4.1-150400.1.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gnome-autoar-devel-0.4.1-150400.1.10 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2020-36241 CVE-2021-28650 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gnome-desktop-lang-41.8-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gnome-desktop-lang-41.8-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2019-11460 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gnome-extensions-41.9-150400.3.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gnome-extensions-41.9-150400.3.8.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-8288 CVE-2019-3820 CVE-2020-12825 CVE-2020-17489 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gnome-settings-daemon-41.0-150500.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gnome-settings-daemon-41.0-150500.2.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2014-7300 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gnome-shell-search-provider-nautilus-41.5-150400.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gnome-shell-search-provider-nautilus-41.5-150400.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2019-11461 CVE-2022-37290 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 grilo-devel-0.3.14-150400.1.11 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the grilo-devel-0.3.14-150400.1.11 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2021-39365 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gstreamer-plugins-bad-1.22.0-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gstreamer-plugins-bad-1.22.0-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-5838 CVE-2017-5847 CVE-2017-5848 CVE-2021-3185 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gtk2-data-2.24.33-150400.2.11 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gtk2-data-2.24.33-150400.2.11 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2013-7447 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gvim-9.0.1443-150500.18.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gvim-9.0.1443-150500.18.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2009-0316 CVE-2017-1000382 CVE-2017-17087 CVE-2017-5953 CVE-2017-6349 CVE-2017-6350 CVE-2019-12735 CVE-2019-20807 CVE-2021-3778 CVE-2021-3796 CVE-2021-3872 CVE-2021-3875 CVE-2021-3903 CVE-2021-3927 CVE-2021-3928 CVE-2021-3968 CVE-2021-3973 CVE-2021-3974 CVE-2021-3984 CVE-2021-4019 CVE-2021-4069 CVE-2021-4136 CVE-2021-4166 CVE-2021-4192 CVE-2021-4193 CVE-2021-46059 CVE-2022-0128 CVE-2022-0213 CVE-2022-0261 CVE-2022-0318 CVE-2022-0319 CVE-2022-0351 CVE-2022-0359 CVE-2022-0361 CVE-2022-0392 CVE-2022-0407 CVE-2022-0413 CVE-2022-0696 CVE-2022-1381 CVE-2022-1420 CVE-2022-1616 CVE-2022-1619 CVE-2022-1620 CVE-2022-1720 CVE-2022-1733 CVE-2022-1735 CVE-2022-1771 CVE-2022-1785 CVE-2022-1796 CVE-2022-1851 CVE-2022-1897 CVE-2022-1898 CVE-2022-1927 CVE-2022-1968 CVE-2022-2124 CVE-2022-2125 CVE-2022-2126 CVE-2022-2129 CVE-2022-2175 CVE-2022-2182 CVE-2022-2183 CVE-2022-2206 CVE-2022-2207 CVE-2022-2208 CVE-2022-2210 CVE-2022-2231 CVE-2022-2257 CVE-2022-2264 CVE-2022-2284 CVE-2022-2285 CVE-2022-2286 CVE-2022-2287 CVE-2022-2304 CVE-2022-2343 CVE-2022-2344 CVE-2022-2345 CVE-2022-2522 CVE-2022-2571 CVE-2022-2580 CVE-2022-2581 CVE-2022-2598 CVE-2022-2816 CVE-2022-2817 CVE-2022-2819 CVE-2022-2845 CVE-2022-2849 CVE-2022-2862 CVE-2022-2874 CVE-2022-2889 CVE-2022-2923 CVE-2022-2946 CVE-2022-2980 CVE-2022-2982 CVE-2022-3016 CVE-2022-3037 CVE-2022-3099 CVE-2022-3134 CVE-2022-3153 CVE-2022-3234 CVE-2022-3235 CVE-2022-3278 CVE-2022-3296 CVE-2022-3297 CVE-2022-3324 CVE-2022-3352 CVE-2022-3491 CVE-2022-3520 CVE-2022-3591 CVE-2022-3705 CVE-2022-4141 CVE-2022-4292 CVE-2022-4293 CVE-2023-0049 CVE-2023-0051 CVE-2023-0054 CVE-2023-0288 CVE-2023-0433 CVE-2023-0512 CVE-2023-1127 CVE-2023-1170 CVE-2023-1175 CVE-2023-1264 CVE-2023-1355 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ibus-1.5.25-150400.1.13 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ibus-1.5.25-150400.1.13 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2019-14822 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ibus-chewing-1.6.1-1.53 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ibus-chewing-1.6.1-1.53 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2013-4509 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 imlib2-loaders-1.4.10-1.28 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the imlib2-loaders-1.4.10-1.28 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2010-0991 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for jasper fixes the following issues: Security issues fixed: - CVE-2018-19540: Fixed a heap based overflow in jas_icctxtdesc_input (bsc#1117508). - CVE-2018-19541: Fix heap based overread in jas_image_depalettize (bsc#1117507). Moderate SUSE bug 1117507 SUSE bug 1117508 CVE-2018-19540 CVE-2018-19541 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libICE6-32bit-1.0.9-1.25 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libICE6-32bit-1.0.9-1.25 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-2626 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libIlmImf-2_2-23-2.2.1-3.41.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libIlmImf-2_2-23-2.2.1-3.41.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-12596 CVE-2017-14988 CVE-2017-9110 CVE-2017-9111 CVE-2017-9112 CVE-2017-9113 CVE-2017-9114 CVE-2017-9115 CVE-2017-9116 CVE-2018-18444 CVE-2020-11758 CVE-2020-11760 CVE-2020-11761 CVE-2020-11762 CVE-2020-11763 CVE-2020-11764 CVE-2020-11765 CVE-2020-15304 CVE-2020-15305 CVE-2020-15306 CVE-2020-16587 CVE-2020-16588 CVE-2020-16589 CVE-2021-20296 CVE-2021-20298 CVE-2021-20299 CVE-2021-20300 CVE-2021-20302 CVE-2021-20303 CVE-2021-20304 CVE-2021-23215 CVE-2021-26260 CVE-2021-3474 CVE-2021-3475 CVE-2021-3476 CVE-2021-3477 CVE-2021-3479 CVE-2021-3598 CVE-2021-3605 CVE-2021-3933 CVE-2021-3941 CVE-2021-45942 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libQt5OpenGLExtensions-devel-static-5.15.8+kde185-150500.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libQt5OpenGLExtensions-devel-static-5.15.8+kde185-150500.2.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2015-0295 CVE-2020-0570 CVE-2020-12267 CVE-2020-13962 CVE-2020-17507 CVE-2022-23853 CVE-2022-25255 CVE-2022-27404 CVE-2022-37434 CVE-2023-24607 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libQt6Core6-6.4.2-150500.1.14 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libQt6Core6-6.4.2-150500.1.14 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2022-25255 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libSDL-1_2-0-1.2.15-150000.3.19.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libSDL-1_2-0-1.2.15-150000.3.19.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2019-13616 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 CVE-2020-14409 CVE-2020-14410 CVE-2021-33657 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libSDL2-2_0-0-2.0.8-150200.11.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libSDL2-2_0-0-2.0.8-150200.11.9.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-2888 CVE-2019-13616 CVE-2019-13626 CVE-2019-7572 CVE-2019-7573 CVE-2019-7574 CVE-2019-7575 CVE-2019-7576 CVE-2019-7577 CVE-2019-7578 CVE-2019-7635 CVE-2019-7636 CVE-2019-7637 CVE-2019-7638 CVE-2020-14409 CVE-2020-14410 CVE-2021-33657 CVE-2022-4743 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libSoundTouch0-1.8.0-3.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libSoundTouch0-1.8.0-3.11.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2018-1000223 CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXcursor1-32bit-1.1.15-1.18 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXcursor1-32bit-1.1.15-1.18 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2013-2003 CVE-2017-16612 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXinerama1-32bit-1.1.3-1.22 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXinerama1-32bit-1.1.3-1.22 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2013-1985 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXp6-32bit-1.0.3-1.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXp6-32bit-1.0.3-1.24 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2013-2062 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXrandr2-32bit-1.5.1-2.17 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXrandr2-32bit-1.5.1-2.17 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2013-1986 CVE-2016-7947 CVE-2016-7948 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXt6-32bit-1.1.5-2.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXt6-32bit-1.1.5-2.24 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2013-2002 CVE-2013-2005 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libXvnc-devel-1.12.0-150500.2.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libXvnc-devel-1.12.0-150500.2.6 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2014-8240 CVE-2015-0255 CVE-2019-15691 CVE-2019-15692 CVE-2019-15693 CVE-2019-15694 CVE-2019-15695 CVE-2020-26117 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libass fixes the following issues: - CVE-2020-36430: Fixed heap-based buffer overflow in decode_chars (bsc#1188539). Important SUSE bug 1188539 CVE-2020-36430 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libass-devel-0.14.0-150000.3.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libass-devel-0.14.0-150000.3.11.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-7969 CVE-2016-7970 CVE-2016-7972 CVE-2020-24994 CVE-2020-26682 CVE-2020-36430 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libavcodec57-3.4.2-150200.11.28.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libavcodec57-3.4.2-150200.11.28.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2015-8216 CVE-2015-8217 CVE-2015-8218 CVE-2015-8219 CVE-2015-8363 CVE-2015-8364 CVE-2015-8365 CVE-2015-8661 CVE-2015-8662 CVE-2015-8663 CVE-2016-10190 CVE-2016-10191 CVE-2016-10192 CVE-2016-1897 CVE-2016-1898 CVE-2017-11399 CVE-2017-11665 CVE-2017-14054 CVE-2017-14055 CVE-2017-14056 CVE-2017-14057 CVE-2017-14058 CVE-2017-14059 CVE-2017-14169 CVE-2017-14170 CVE-2017-14171 CVE-2017-14222 CVE-2017-14223 CVE-2017-14225 CVE-2017-15186 CVE-2017-15672 CVE-2017-16840 CVE-2017-17081 CVE-2017-17555 CVE-2017-7859 CVE-2017-7862 CVE-2017-7863 CVE-2017-7865 CVE-2017-7866 CVE-2018-12458 CVE-2018-13300 CVE-2018-13301 CVE-2018-13302 CVE-2018-13305 CVE-2018-14394 CVE-2018-14395 CVE-2018-15822 CVE-2018-1999010 CVE-2018-1999011 CVE-2018-1999012 CVE-2018-1999013 CVE-2018-6392 CVE-2018-6621 CVE-2019-12730 CVE-2019-13390 CVE-2019-17539 CVE-2019-17542 CVE-2019-9718 CVE-2019-9721 CVE-2020-13904 CVE-2020-20448 CVE-2020-20451 CVE-2020-20891 CVE-2020-20892 CVE-2020-20895 CVE-2020-20896 CVE-2020-20899 CVE-2020-20902 CVE-2020-21041 CVE-2020-21688 CVE-2020-21697 CVE-2020-22015 CVE-2020-22016 CVE-2020-22017 CVE-2020-22019 CVE-2020-22020 CVE-2020-22021 CVE-2020-22022 CVE-2020-22023 CVE-2020-22025 CVE-2020-22026 CVE-2020-22031 CVE-2020-22032 CVE-2020-22033 CVE-2020-22034 CVE-2020-22037 CVE-2020-22038 CVE-2020-22039 CVE-2020-22042 CVE-2020-22043 CVE-2020-22044 CVE-2020-22046 CVE-2020-22048 CVE-2020-22049 CVE-2020-22054 CVE-2020-35965 CVE-2021-3566 CVE-2021-38092 CVE-2021-38093 CVE-2021-38094 CVE-2021-38114 CVE-2021-38171 CVE-2022-3109 CVE-2022-3341 CVE-2022-48434 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcairo2-32bit-1.16.0-150400.9.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcairo2-32bit-1.16.0-150400.9.6 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-9082 CVE-2017-7475 CVE-2017-9814 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcapnp-0_9-0.9.1-150400.3.4.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcapnp-0_9-0.9.1-150400.3.4.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2022-46149 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcdio++0-2.1.0-1.27 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcdio++0-2.1.0-1.27 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-18198 CVE-2017-18199 CVE-2017-18201 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcdio16-0.94-150000.6.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcdio16-0.94-150000.6.11.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-18199 CVE-2017-18201 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcups2-32bit-2.2.7-150000.3.40.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcups2-32bit-2.2.7-150000.3.40.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2012-5519 CVE-2014-3537 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 CVE-2015-1158 CVE-2015-1159 CVE-2017-18248 CVE-2018-4180 CVE-2018-4181 CVE-2018-4182 CVE-2018-4183 CVE-2018-4700 CVE-2019-8675 CVE-2019-8696 CVE-2019-8842 CVE-2020-10001 CVE-2020-3898 CVE-2021-25317 CVE-2022-26691 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libdjvulibre-devel-3.5.27-11.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libdjvulibre-devel-3.5.27-11.11.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2019-15142 CVE-2019-15143 CVE-2019-15144 CVE-2019-15145 CVE-2019-18804 CVE-2021-32490 CVE-2021-32491 CVE-2021-32492 CVE-2021-32493 CVE-2021-3500 CVE-2021-3630 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libexempi-devel-2.4.5-3.3.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libexempi-devel-2.4.5-3.3.2 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2018-12648 CVE-2018-7728 CVE-2018-7729 CVE-2018-7730 CVE-2018-7731 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libexif to 0.6.22 fixes the following issues: Security issues fixed: - CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857). - CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c (bsc#1059893). - CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943). - CVE-2019-9278: Fixed an integer overflow (bsc#1160770). - CVE-2020-0093: Fixed an out-of-bounds read in exif_data_save_data_entry (bsc#1171847). - CVE-2020-12767: Fixed a divide-by-zero error in exif_entry_get_value (bsc#1171475). - CVE-2020-13112: Fixed a time consumption DoS when parsing canon array markers (bsc#1172121). - CVE-2020-13113: Fixed a potential use of uninitialized memory (bsc#1172105). - CVE-2020-13114: Fixed various buffer overread fixes due to integer overflows in maker notes (bsc#1172116). Non-security issues fixed: - libexif was updated to version 0.6.22: * New translations: ms * Updated translations for most languages * Some useful EXIF 2.3 tag added: * EXIF_TAG_GAMMA * EXIF_TAG_COMPOSITE_IMAGE * EXIF_TAG_SOURCE_IMAGE_NUMBER_OF_COMPOSITE_IMAGE * EXIF_TAG_SOURCE_EXPOSURE_TIMES_OF_COMPOSITE_IMAGE * EXIF_TAG_GPS_H_POSITIONING_ERROR * EXIF_TAG_CAMERA_OWNER_NAME * EXIF_TAG_BODY_SERIAL_NUMBER * EXIF_TAG_LENS_SPECIFICATION * EXIF_TAG_LENS_MAKE * EXIF_TAG_LENS_MODEL * EXIF_TAG_LENS_SERIAL_NUMBER Moderate SUSE bug 1055857 SUSE bug 1059893 SUSE bug 1120943 SUSE bug 1160770 SUSE bug 1171475 SUSE bug 1171847 SUSE bug 1172105 SUSE bug 1172116 SUSE bug 1172121 CVE-2016-6328 CVE-2017-7544 CVE-2018-20030 CVE-2019-9278 CVE-2020-0093 CVE-2020-12767 CVE-2020-13112 CVE-2020-13113 CVE-2020-13114 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libexif-devel-0.6.22-150000.5.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libexif-devel-0.6.22-150000.5.9.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-6328 CVE-2017-7544 CVE-2018-20030 CVE-2019-9278 CVE-2020-0093 CVE-2020-0181 CVE-2020-0198 CVE-2020-0452 CVE-2020-12767 CVE-2020-13112 CVE-2020-13113 CVE-2020-13114 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libexiv2-27-0.27.5-150400.15.4.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libexiv2-27-0.27.5-150400.15.4.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2014-9449 CVE-2017-1000126 CVE-2017-1000128 CVE-2017-11337 CVE-2017-11338 CVE-2017-11339 CVE-2017-11340 CVE-2017-11553 CVE-2017-11591 CVE-2017-11592 CVE-2017-11683 CVE-2017-12955 CVE-2017-12956 CVE-2017-12957 CVE-2017-14859 CVE-2017-14860 CVE-2017-14862 CVE-2017-14864 CVE-2017-9239 CVE-2018-12264 CVE-2018-12265 CVE-2018-17229 CVE-2018-17230 CVE-2018-17282 CVE-2018-19108 CVE-2018-19607 CVE-2018-9305 CVE-2019-13108 CVE-2019-13114 CVE-2020-19716 CVE-2021-29457 CVE-2021-29470 CVE-2021-29623 CVE-2021-31291 CVE-2021-32617 CVE-2021-34334 CVE-2021-37620 CVE-2021-37621 CVE-2021-37622 CVE-2021-37623 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libfribidi0-32bit-1.0.10-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libfribidi0-32bit-1.0.10-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2019-18397 CVE-2022-25308 CVE-2022-25309 CVE-2022-25310 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libgme-devel-0.6.2-1.17 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libgme-devel-0.6.2-1.17 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-9957 CVE-2016-9958 CVE-2016-9959 CVE-2016-9960 CVE-2016-9961 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libgupnp-1_2-1-1.4.3-150400.1.6 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libgupnp-1_2-1-1.4.3-150400.1.6 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2020-12695 CVE-2021-33516 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libgxps fixes the following issues: - CVE-2018-10733: Fixed a heap-based buffer over-read issue in ft_font_face_hash (bsc#1092125). Moderate SUSE bug 1092125 CVE-2018-10733 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libgxps-devel-0.3.0-4.3.29 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libgxps-devel-0.3.0-4.3.29 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2018-10733 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libgypsy-devel-0.9-2.30 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libgypsy-devel-0.9-2.30 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2011-0523 CVE-2011-0524 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libheif fixes the following issues: - CVE-2023-0996: Fixed a buffer overflow in heif_js_decode_image (bsc#1208640). Moderate CVE-2023-0996 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libheif1-1.12.0-150400.3.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libheif1-1.12.0-150400.3.11.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2020-23109 CVE-2023-0996 CVE-2023-29659 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libical-devel-3.0.10-150400.1.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libical-devel-3.0.10-150400.1.8 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-5824 CVE-2016-5827 CVE-2016-9584 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libid3tag0-0.15.1b-3.14 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libid3tag0-0.15.1b-3.14 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2004-2779 CVE-2008-2109 CVE-2017-11550 CVE-2017-11551 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libimobiledevice-1_0-6-1.3.0+git.20210921-150400.1.15 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libimobiledevice-1_0-6-1.3.0+git.20210921-150400.1.15 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-5104 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libjasper-devel-2.0.14-150000.3.28.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libjasper-devel-2.0.14-150000.3.28.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2008-3522 CVE-2011-4516 CVE-2011-4517 CVE-2014-8137 CVE-2014-8138 CVE-2014-8157 CVE-2014-8158 CVE-2014-9029 CVE-2015-5203 CVE-2015-5221 CVE-2016-10251 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692 CVE-2016-8693 CVE-2016-8880 CVE-2016-8881 CVE-2016-8882 CVE-2016-8883 CVE-2016-8884 CVE-2016-8885 CVE-2016-8886 CVE-2016-8887 CVE-2016-9262 CVE-2016-9387 CVE-2016-9388 CVE-2016-9389 CVE-2016-9390 CVE-2016-9391 CVE-2016-9392 CVE-2016-9393 CVE-2016-9394 CVE-2016-9395 CVE-2016-9396 CVE-2016-9398 CVE-2016-9399 CVE-2016-9557 CVE-2016-9560 CVE-2016-9583 CVE-2016-9591 CVE-2016-9600 CVE-2017-1000050 CVE-2017-14132 CVE-2017-5498 CVE-2017-5499 CVE-2017-5503 CVE-2017-5504 CVE-2017-5505 CVE-2017-6850 CVE-2017-9782 CVE-2018-18873 CVE-2018-19139 CVE-2018-19539 CVE-2018-19540 CVE-2018-19541 CVE-2018-19542 CVE-2018-19543 CVE-2018-20570 CVE-2018-20622 CVE-2018-9055 CVE-2018-9154 CVE-2018-9252 CVE-2020-27828 CVE-2021-26926 CVE-2021-26927 CVE-2021-27845 CVE-2021-3272 CVE-2021-3443 CVE-2021-3467 CVE-2022-2963 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libjavascriptcoregtk-4_1-0-2.38.6-150400.4.39.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libjavascriptcoregtk-4_1-0-2.38.6-150400.4.39.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-1856 CVE-2016-1857 CVE-2016-4590 CVE-2016-4591 CVE-2016-4622 CVE-2016-4624 CVE-2016-4692 CVE-2016-4743 CVE-2016-7586 CVE-2016-7587 CVE-2016-7589 CVE-2016-7592 CVE-2016-7598 CVE-2016-7599 CVE-2016-7610 CVE-2016-7623 CVE-2016-7632 CVE-2016-7635 CVE-2016-7639 CVE-2016-7641 CVE-2016-7645 CVE-2016-7652 CVE-2016-7654 CVE-2016-7656 CVE-2017-1000121 CVE-2017-1000122 CVE-2017-13788 CVE-2017-13798 CVE-2017-13803 CVE-2017-13856 CVE-2017-13866 CVE-2017-13870 CVE-2017-13884 CVE-2017-13885 CVE-2017-2350 CVE-2017-2354 CVE-2017-2355 CVE-2017-2356 CVE-2017-2362 CVE-2017-2363 CVE-2017-2364 CVE-2017-2365 CVE-2017-2366 CVE-2017-2369 CVE-2017-2371 CVE-2017-2373 CVE-2017-2496 CVE-2017-2510 CVE-2017-2538 CVE-2017-2539 CVE-2017-5715 CVE-2017-5753 CVE-2017-7006 CVE-2017-7011 CVE-2017-7012 CVE-2017-7018 CVE-2017-7019 CVE-2017-7020 CVE-2017-7030 CVE-2017-7034 CVE-2017-7037 CVE-2017-7038 CVE-2017-7039 CVE-2017-7040 CVE-2017-7041 CVE-2017-7042 CVE-2017-7043 CVE-2017-7046 CVE-2017-7048 CVE-2017-7049 CVE-2017-7052 CVE-2017-7055 CVE-2017-7056 CVE-2017-7059 CVE-2017-7061 CVE-2017-7064 CVE-2017-7081 CVE-2017-7087 CVE-2017-7089 CVE-2017-7090 CVE-2017-7091 CVE-2017-7092 CVE-2017-7093 CVE-2017-7094 CVE-2017-7095 CVE-2017-7096 CVE-2017-7098 CVE-2017-7099 CVE-2017-7100 CVE-2017-7102 CVE-2017-7104 CVE-2017-7107 CVE-2017-7109 CVE-2017-7111 CVE-2017-7117 CVE-2017-7120 CVE-2017-7142 CVE-2017-7153 CVE-2017-7156 CVE-2017-7157 CVE-2017-7160 CVE-2017-7161 CVE-2017-7165 CVE-2018-11646 CVE-2018-11712 CVE-2018-11713 CVE-2018-12911 CVE-2018-4088 CVE-2018-4096 CVE-2018-4101 CVE-2018-4113 CVE-2018-4114 CVE-2018-4117 CVE-2018-4118 CVE-2018-4119 CVE-2018-4120 CVE-2018-4122 CVE-2018-4125 CVE-2018-4127 CVE-2018-4128 CVE-2018-4129 CVE-2018-4133 CVE-2018-4146 CVE-2018-4161 CVE-2018-4162 CVE-2018-4163 CVE-2018-4165 CVE-2018-4190 CVE-2018-4191 CVE-2018-4197 CVE-2018-4199 CVE-2018-4200 CVE-2018-4204 CVE-2018-4207 CVE-2018-4208 CVE-2018-4209 CVE-2018-4210 CVE-2018-4212 CVE-2018-4213 CVE-2018-4218 CVE-2018-4222 CVE-2018-4232 CVE-2018-4233 CVE-2018-4246 CVE-2018-4261 CVE-2018-4262 CVE-2018-4263 CVE-2018-4264 CVE-2018-4265 CVE-2018-4266 CVE-2018-4267 CVE-2018-4270 CVE-2018-4272 CVE-2018-4273 CVE-2018-4278 CVE-2018-4284 CVE-2018-4299 CVE-2018-4306 CVE-2018-4309 CVE-2018-4312 CVE-2018-4314 CVE-2018-4315 CVE-2018-4316 CVE-2018-4317 CVE-2018-4318 CVE-2018-4319 CVE-2018-4323 CVE-2018-4328 CVE-2018-4345 CVE-2018-4358 CVE-2018-4359 CVE-2018-4361 CVE-2018-4372 CVE-2018-4373 CVE-2018-4375 CVE-2018-4376 CVE-2018-4378 CVE-2018-4382 CVE-2018-4386 CVE-2018-4392 CVE-2018-4416 CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442 CVE-2018-4443 CVE-2018-4464 CVE-2019-11070 CVE-2019-6201 CVE-2019-6212 CVE-2019-6215 CVE-2019-6216 CVE-2019-6217 CVE-2019-6226 CVE-2019-6227 CVE-2019-6229 CVE-2019-6233 CVE-2019-6234 CVE-2019-6251 CVE-2019-7285 CVE-2019-7292 CVE-2019-8375 CVE-2019-8503 CVE-2019-8506 CVE-2019-8515 CVE-2019-8518 CVE-2019-8523 CVE-2019-8524 CVE-2019-8535 CVE-2019-8536 CVE-2019-8544 CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2019-8595 CVE-2019-8607 CVE-2019-8615 CVE-2019-8625 CVE-2019-8644 CVE-2019-8649 CVE-2019-8658 CVE-2019-8666 CVE-2019-8669 CVE-2019-8671 CVE-2019-8672 CVE-2019-8673 CVE-2019-8674 CVE-2019-8676 CVE-2019-8677 CVE-2019-8678 CVE-2019-8679 CVE-2019-8680 CVE-2019-8681 CVE-2019-8683 CVE-2019-8684 CVE-2019-8686 CVE-2019-8687 CVE-2019-8688 CVE-2019-8689 CVE-2019-8690 CVE-2019-8707 CVE-2019-8710 CVE-2019-8719 CVE-2019-8720 CVE-2019-8726 CVE-2019-8733 CVE-2019-8735 CVE-2019-8743 CVE-2019-8763 CVE-2019-8764 CVE-2019-8765 CVE-2019-8766 CVE-2019-8768 CVE-2019-8769 CVE-2019-8771 CVE-2019-8782 CVE-2019-8783 CVE-2019-8808 CVE-2019-8811 CVE-2019-8812 CVE-2019-8813 CVE-2019-8814 CVE-2019-8815 CVE-2019-8816 CVE-2019-8819 CVE-2019-8820 CVE-2019-8821 CVE-2019-8822 CVE-2019-8823 CVE-2019-8835 CVE-2019-8844 CVE-2019-8846 CVE-2020-10018 CVE-2020-11793 CVE-2020-13543 CVE-2020-13558 CVE-2020-13584 CVE-2020-13753 CVE-2020-27918 CVE-2020-29623 CVE-2020-3862 CVE-2020-3864 CVE-2020-3865 CVE-2020-3867 CVE-2020-3868 CVE-2020-3885 CVE-2020-3894 CVE-2020-3895 CVE-2020-3897 CVE-2020-3899 CVE-2020-3900 CVE-2020-3901 CVE-2020-3902 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9806 CVE-2020-9807 CVE-2020-9843 CVE-2020-9850 CVE-2020-9862 CVE-2020-9893 CVE-2020-9894 CVE-2020-9895 CVE-2020-9915 CVE-2020-9925 CVE-2020-9947 CVE-2020-9948 CVE-2020-9951 CVE-2020-9952 CVE-2020-9983 CVE-2021-1765 CVE-2021-1788 CVE-2021-1789 CVE-2021-1799 CVE-2021-1801 CVE-2021-1817 CVE-2021-1820 CVE-2021-1825 CVE-2021-1826 CVE-2021-1844 CVE-2021-1870 CVE-2021-1871 CVE-2021-21775 CVE-2021-21779 CVE-2021-21806 CVE-2021-30661 CVE-2021-30663 CVE-2021-30665 CVE-2021-30666 CVE-2021-30682 CVE-2021-30689 CVE-2021-30720 CVE-2021-30734 CVE-2021-30744 CVE-2021-30749 CVE-2021-30758 CVE-2021-30761 CVE-2021-30762 CVE-2021-30795 CVE-2021-30797 CVE-2021-30799 CVE-2021-30809 CVE-2021-30818 CVE-2021-30823 CVE-2021-30836 CVE-2021-30846 CVE-2021-30848 CVE-2021-30849 CVE-2021-30851 CVE-2021-30858 CVE-2021-30884 CVE-2021-30887 CVE-2021-30888 CVE-2021-30889 CVE-2021-30890 CVE-2021-30897 CVE-2021-30934 CVE-2021-30936 CVE-2021-30951 CVE-2021-30952 CVE-2021-30953 CVE-2021-30954 CVE-2021-30984 CVE-2021-42762 CVE-2021-45481 CVE-2021-45482 CVE-2021-45483 CVE-2022-0108 CVE-2022-22589 CVE-2022-22590 CVE-2022-22592 CVE-2022-22594 CVE-2022-22620 CVE-2022-22624 CVE-2022-22628 CVE-2022-22629 CVE-2022-22637 CVE-2022-22662 CVE-2022-22677 CVE-2022-26700 CVE-2022-26709 CVE-2022-26710 CVE-2022-26716 CVE-2022-26717 CVE-2022-26719 CVE-2022-30293 CVE-2022-32792 CVE-2022-32816 CVE-2022-32885 CVE-2022-32886 CVE-2022-32888 CVE-2022-32893 CVE-2022-32912 CVE-2022-32923 CVE-2022-42799 CVE-2022-42823 CVE-2022-42824 CVE-2022-42826 CVE-2022-42852 CVE-2022-42856 CVE-2022-42863 CVE-2022-42867 CVE-2022-46691 CVE-2022-46692 CVE-2022-46698 CVE-2022-46699 CVE-2022-46700 CVE-2023-23517 CVE-2023-23518 CVE-2023-23529 CVE-2023-25358 CVE-2023-25360 CVE-2023-25361 CVE-2023-25362 CVE-2023-25363 CVE-2023-27932 CVE-2023-27954 CVE-2023-28205 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libkpathsea6-6.3.3-150400.29.15 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libkpathsea6-6.3.3-150400.29.15 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-10243 CVE-2018-17407 CVE-2019-18604 CVE-2020-8016 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for liblouis fixes the following issues: - CVE-2023-26767: Fixed buffer overflow vulnerability in lou_logFile function (bsc#1209429). - CVE-2023-26769: Fixed buffer Overflow vulnerability in resolveSubtable function (bsc#1209432). Important SUSE bug 1209429 SUSE bug 1209432 CVE-2023-26767 CVE-2023-26769 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 liblouis-data-3.20.0-150400.3.13.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the liblouis-data-3.20.0-150400.3.13.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-13738 CVE-2017-13739 CVE-2017-13740 CVE-2017-13741 CVE-2017-13742 CVE-2017-13743 CVE-2017-13744 CVE-2018-11410 CVE-2018-11440 CVE-2018-11683 CVE-2018-11684 CVE-2018-11685 CVE-2018-12085 CVE-2022-26981 CVE-2022-31783 CVE-2023-26767 CVE-2023-26768 CVE-2023-26769 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libmad fixes the following issues: - CVE-2017-8373: Fixed heap-based buffer overflow in mad_layer_III (bsc#1036968). - CVE-2017-8372: Fixed assertion failure in layer3.c (bsc#1036969). Important SUSE bug 1036968 SUSE bug 1036969 CVE-2017-8372 CVE-2017-8373 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmad-devel-0.15.1b-150000.5.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmad-devel-0.15.1b-150000.5.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-8372 CVE-2017-8373 CVE-2017-8374 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libmicrohttpd fixes the following issues: - CVE-2023-27371: Fixed a parser bug that could be used to crash servers using the MHD_PostProcessor (bsc#1208745). Moderate SUSE bug 1208745 CVE-2023-27371 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmicrohttpd-devel-0.9.57-150000.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmicrohttpd-devel-0.9.57-150000.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2023-27371 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmms-devel-0.6.4-1.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmms-devel-0.6.4-1.24 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2014-2892 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmodplug-devel-0.3.28-2.13.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmodplug-devel-0.3.28-2.13.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-11311 CVE-2018-10017 CVE-2018-11710 CVE-2018-20860 CVE-2018-20861 CVE-2019-14382 CVE-2019-14383 CVE-2019-17113 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmozjs-78-0-78.15.0-150400.1.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmozjs-78-0-78.15.0-150400.1.10 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2021-29984 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libmp3lame-devel-3.100-150000.3.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libmp3lame-devel-3.100-150000.3.2.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-9410 CVE-2017-9411 CVE-2017-9412 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libndp-devel-1.6-1.26 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libndp-devel-1.6-1.26 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-3698 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libnetpbm-devel-10.80.1-3.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libnetpbm-devel-10.80.1-3.11.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-2579 CVE-2017-2580 CVE-2018-8975 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libopenjpeg1-1.5.2-150000.4.10.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libopenjpeg1-1.5.2-150000.4.10.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2012-3358 CVE-2012-3535 CVE-2013-1447 CVE-2013-4289 CVE-2013-4290 CVE-2013-6045 CVE-2013-6052 CVE-2013-6053 CVE-2013-6054 CVE-2013-6887 CVE-2016-7445 CVE-2018-14423 CVE-2018-16376 CVE-2018-20846 CVE-2018-21010 CVE-2020-15389 CVE-2020-27823 CVE-2020-27824 CVE-2020-27842 CVE-2020-27843 CVE-2020-27845 CVE-2020-8112 CVE-2021-29338 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libopenmpt to version 0.3.9 fixes the following issues: These security issues were fixed: - CVE-2018-11710: Prevent write near address 0 in out-of-memory situations when reading AMS files (bsc#1095644) - CVE-2018-10017: Preven out-of-bounds memory read with IT/ITP/MO3 files containing pattern loops (bsc#1089080) These non-security issues were fixed: - [Bug] openmpt123: Fixed build failure in C++17 due to use of removed feature std::random_shuffle. - STM: Having both Bxx and Cxx commands in a pattern imported the Bxx command incorrectly. - STM: Last character of sample name was missing. - Speed up reading of truncated ULT files. - ULT: Portamento import was sometimes broken. - The resonant filter was sometimes unstable when combining low-volume samples, low cutoff and high mixing rates. - Keep track of active SFx macro during seeking. - The 'note cut' duplicate note action did not volume-ramp the previously playing sample. - A song starting with non-existing patterns could not be played. - DSM: Support restart position and 16-bit samples. - DTM: Import global volume. Moderate SUSE bug 1089080 SUSE bug 1095644 CVE-2018-10017 CVE-2018-11710 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libostree-2022.7-150500.1.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libostree-2022.7-150500.1.3 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2014-9862 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libout123-0-1.26.4-1.15 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libout123-0-1.26.4-1.15 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-10683 CVE-2017-11126 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpango-1_0-0-32bit-1.50.4-150400.1.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpango-1_0-0-32bit-1.50.4-150400.1.5 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2018-15120 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpixman-1-0-32bit-0.40.0-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpixman-1-0-32bit-0.40.0-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2022-44638 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libplist++-devel-2.0.0-1.31 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libplist++-devel-2.0.0-1.31 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-5209 CVE-2017-5545 CVE-2017-5834 CVE-2017-5835 CVE-2017-5836 CVE-2017-6435 CVE-2017-6436 CVE-2017-6437 CVE-2017-6438 CVE-2017-6439 CVE-2017-6440 CVE-2017-7982 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libqt5-qtsvg-private-headers-devel-5.15.8+kde8-150500.1.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libqt5-qtsvg-private-headers-devel-5.15.8+kde8-150500.1.4 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2021-3481 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libquicktime-1.2.4+git20180804.fff99cd-1.19 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libquicktime-1.2.4+git20180804.fff99cd-1.19 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-2399 CVE-2017-9122 CVE-2017-9123 CVE-2017-9124 CVE-2017-9125 CVE-2017-9126 CVE-2017-9127 CVE-2017-9128 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libraptor-devel-2.0.15-150200.9.12.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libraptor-devel-2.0.15-150200.9.12.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-18926 CVE-2020-25713 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libraw fixes the following issues: - CVE-2023-1729: Fixed a heap buffer overflow when converting an image (bsc#1210720). Low SUSE bug 1210720 CVE-2023-1729 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libraw20-0.20.2-150400.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libraw20-0.20.2-150400.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2015-8367 CVE-2017-13735 CVE-2017-14265 CVE-2017-14348 CVE-2017-6886 CVE-2017-6887 CVE-2017-6890 CVE-2017-6899 CVE-2018-10528 CVE-2018-10529 CVE-2018-20337 CVE-2018-20363 CVE-2018-20364 CVE-2018-20365 CVE-2018-5813 CVE-2018-5815 CVE-2018-5816 CVE-2018-5817 CVE-2018-5818 CVE-2018-5819 CVE-2020-15503 CVE-2021-32142 CVE-2023-1729 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 librsvg-devel-2.52.9-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the librsvg-devel-2.52.9-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-11464 CVE-2019-20446 CVE-2021-25900 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsmi-devel-0.4.8-1.29 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsmi-devel-0.4.8-1.29 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2010-2891 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsrt1-1.3.4-1.45 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsrt1-1.3.4-1.45 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2019-15784 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsrtp-devel-1.6.0-2.19 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsrtp-devel-1.6.0-2.19 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2013-2139 CVE-2015-6360 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libsrtp2-1-2.2.0-1.34 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libsrtp2-1-2.2.0-1.34 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2015-6360 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtag-devel-1.11.1-4.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libtag-devel-1.11.1-4.9.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-12678 CVE-2018-11439 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libvdpau-devel-1.1.1-150000.3.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libvdpau-devel-1.1.1-150000.3.2.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libvpx fixes the following issues: - CVE-2020-0034: Fixed an out-of-bounds read on truncated key frames (bsc#1166066). Moderate SUSE bug 1166066 CVE-2020-0034 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libvpx4-1.6.1-150000.6.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libvpx4-1.6.1-150000.6.8.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-1621 CVE-2016-2464 CVE-2017-0641 CVE-2017-13194 CVE-2019-2126 CVE-2019-9232 CVE-2019-9325 CVE-2019-9371 CVE-2019-9433 CVE-2020-0034 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libxkbregistry-devel-1.3.0-150400.1.13 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libxkbregistry-devel-1.3.0-150400.1.13 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2018-15853 CVE-2018-15854 CVE-2018-15855 CVE-2018-15856 CVE-2018-15857 CVE-2018-15858 CVE-2018-15859 CVE-2018-15861 CVE-2018-15862 CVE-2018-15863 CVE-2018-15864 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libzypp-plugin-appdata-1.0.1+git.20230117-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libzypp-plugin-appdata-1.0.1+git.20230117-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2023-22643 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for nautilus fixes the following issues: - CVE-2022-37290: Fixed a denial of service caused by pasted ZIP archives (bsc#1205418). Moderate SUSE bug 1205418 CVE-2022-37290 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for netpbm fixes the following issues: Security issues fixed: - CVE-2017-2579: Fixed out-of-bounds read in expandCodeOntoStack() (bsc#1024288). - CVE-2017-2580: Fixed out-of-bounds write of heap data in addPixelToRaster() function (bsc#1024291). - create netpbm-vulnerable subpackage and move pstopnm there, as ghostscript is used to convert (bsc#1136936) Moderate SUSE bug 1024288 SUSE bug 1024291 SUSE bug 1136936 CVE-2017-2579 CVE-2017-2580 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 open-vm-tools-desktop-12.2.0-150300.26.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the open-vm-tools-desktop-12.2.0-150300.26.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2015-5191 CVE-2022-31676 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openexr fixes the following issues: - CVE-2017-14988: Fixed a denial of service in Header::readfrom() (bsc#1061305). Moderate SUSE bug 1061305 CVE-2017-14988 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssh fixes the following issues: - CVE-2021-28041: Fixed double free in ssh-agent (bsc#1183137). Important SUSE bug 1183137 CVE-2021-28041 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for pixman fixes the following issues: - CVE-2022-44638: Fixed an integer overflow in pixman_sample_floor_y leading to heap out-of-bounds write (bsc#1205033). Important SUSE bug 1205033 CVE-2022-44638 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ppp-2.4.7-150000.5.10.3 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ppp fixes the following security issue: - CVE-2020-8597: Fixed a buffer overflow in the eap_request and eap_response functions (bsc#1162610). Important SUSE bug 1162610 CVE-2020-8597 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-bottle fixes the following issues: - CVE-2020-28473: Fixed Web Cache Poisoning vulnerability using parameter cloaking (bsc#1182181). Important SUSE bug 1182181 CVE-2020-28473 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-bottle-0.12.13-150000.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-bottle-0.12.13-150000.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-9964 CVE-2020-28473 CVE-2022-31799 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 rtkit-0.11+git.20130926-1.34 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the rtkit-0.11+git.20130926-1.34 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2013-4326 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark, libvirt, sbc and libqt5-qtmultimedia fixes the following issues: Update wireshark to version 3.4.5 - New and updated support and bug fixes for multiple protocols - Asynchronous DNS resolution is always enabled - Protobuf fields can be dissected as Wireshark (header) fields - UI improvements Including security fixes for: - CVE-2021-22191: Wireshark could open unsafe URLs (bsc#1183353). - CVE-2021-22207: MS-WSP dissector excessive memory consumption (bsc#1185128) - CVE-2020-26422: QUIC dissector crash (bsc#1180232) - CVE-2020-26418: Kafka dissector memory leak (bsc#1179930) - CVE-2020-26419: Multiple dissector memory leaks (bsc#1179931) - CVE-2020-26420: RTPS dissector memory leak (bsc#1179932) - CVE-2020-26421: USB HID dissector crash (bsc#1179933) - CVE-2021-22173: Fix USB HID dissector memory leak (bsc#1181598) - CVE-2021-22174: Fix USB HID dissector crash (bsc#1181599) libqt5-qtmultimedia and sbc are necessary dependencies. libvirt is needed to rebuild wireshark-plugin-libvirt. Important SUSE bug 1179930 SUSE bug 1179931 SUSE bug 1179932 SUSE bug 1179933 SUSE bug 1180102 SUSE bug 1180232 SUSE bug 1181598 SUSE bug 1181599 SUSE bug 1183353 SUSE bug 1184110 SUSE bug 1185128 CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421 CVE-2020-26422 CVE-2021-22173 CVE-2021-22174 CVE-2021-22191 CVE-2021-22207 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for soundtouch fixes the following issues: - CVE-2018-17098: The WavFileBase class allowed remote attackers to cause a denial of service (heap corruption from size inconsistency) or possibly have unspecified other impact, as demonstrated by SoundStretch. (bsc#1108632) - CVE-2018-17097: The WavFileBase class allowed remote attackers to cause a denial of service (double free) or possibly have unspecified other impact, as demonstrated by SoundStretch. (double free) (bsc#1108631) - CVE-2018-17096: The BPMDetect class allowed remote attackers to cause a denial of service (assertion failure and application exit), as demonstrated by SoundStretch. (bsc#1108630) Moderate SUSE bug 1108630 SUSE bug 1108631 SUSE bug 1108632 CVE-2018-17096 CVE-2018-17097 CVE-2018-17098 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark and libmaxminddb fixes the following issues: Update wireshark to new major version 3.2.2 and introduce libmaxminddb for GeoIP support (bsc#1156288). New features include: - Added support for 111 new protocols, including WireGuard, LoRaWAN, TPM 2.0, 802.11ax and QUIC - Improved support for existing protocols, like HTTP/2 - Improved analytics and usability functionalities Moderate SUSE bug 1093733 SUSE bug 1094301 SUSE bug 1101776 SUSE bug 1101777 SUSE bug 1101786 SUSE bug 1101788 SUSE bug 1101791 SUSE bug 1101794 SUSE bug 1101800 SUSE bug 1101802 SUSE bug 1101804 SUSE bug 1101810 SUSE bug 1106514 SUSE bug 1111647 SUSE bug 1117740 SUSE bug 1121231 SUSE bug 1121232 SUSE bug 1121233 SUSE bug 1121234 SUSE bug 1121235 SUSE bug 1127367 SUSE bug 1127369 SUSE bug 1127370 SUSE bug 1131941 SUSE bug 1131945 SUSE bug 1136021 SUSE bug 1141980 SUSE bug 1150690 SUSE bug 1156288 SUSE bug 1158505 SUSE bug 1161052 SUSE bug 1165241 SUSE bug 1165710 SUSE bug 957624 CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 CVE-2018-12086 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14344 CVE-2018-14367 CVE-2018-14368 CVE-2018-14369 CVE-2018-14370 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2018-18225 CVE-2018-18226 CVE-2018-18227 CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 CVE-2018-19628 CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10897 CVE-2019-10898 CVE-2019-10899 CVE-2019-10900 CVE-2019-10901 CVE-2019-10902 CVE-2019-10903 CVE-2019-13619 CVE-2019-16319 CVE-2019-19553 CVE-2019-5716 CVE-2019-5717 CVE-2019-5718 CVE-2019-5719 CVE-2019-5721 CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 CVE-2020-7044 CVE-2020-9428 CVE-2020-9429 CVE-2020-9430 CVE-2020-9431 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 spice-vdagent-0.22.1-150500.2.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the spice-vdagent-0.22.1-150500.2.2 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-15108 CVE-2020-25650 CVE-2020-25651 CVE-2020-25652 CVE-2020-25653 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 texlive-12many-2021.189.0.0.3svn15878-150400.18.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the texlive-12many-2021.189.0.0.3svn15878-150400.18.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2016-10243 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 texlive-collection-basic-2021.185.svn56569-150400.19.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the texlive-collection-basic-2021.185.svn56569-150400.19.4 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2020-8016 CVE-2020-8017 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 vino-3.22.0-150400.16.11 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the vino-3.22.0-150400.16.11 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2019-15681 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 vorbis-tools-1.4.0-1.53 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the vorbis-tools-1.4.0-1.53 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2014-9638 CVE-2014-9639 CVE-2014-9640 CVE-2015-6749 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 wavpack-5.4.0-150000.4.15.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wavpack fixes the following issues: - Update to version 5.4.0 * CVE-2020-35738: Fixed an out-of-bounds write in WavpackPackSamples (bsc#1180414) * fixed: disable A32 asm code when building for Apple silicon * fixed: issues with Adobe-style floating-point WAV files * added: --normalize-floats option to wvunpack for correctly exporting un-normalized floating-point files - Update to version 5.3.0 * fixed: OSS-Fuzz issues 19925, 19928, 20060, 20448 * fixed: trailing garbage characters on imported ID3v2 TXXX tags * fixed: various minor undefined behavior and memory access issues * fixed: sanitize tag extraction names for length and path inclusion * improved: reformat wvunpack 'help' and split into long + short versions * added: regression testing to Travis CI for OSS-Fuzz crashers - Updated to version 5.2.0 *fixed: potential security issues including the following CVEs: CVE-2018-19840, CVE-2018-19841, CVE-2018-10536 (bsc#1091344), CVE-2018-10537 (bsc#1091343) CVE-2018-10538 (bsc#1091342), CVE-2018-10539 (bsc#1091341), CVE-2018-10540 (bsc#1091340), CVE-2018-7254, CVE-2018-7253, CVE-2018-6767, CVE-2019-11498 and CVE-2019-1010319 * added: support for CMake, Travis CI, and Google's OSS-fuzz * fixed: use correction file for encode verify (pipe input, Windows) * fixed: correct WAV header with actual length (pipe input, -i option) * fixed: thumb interworking and not needing v6 architecture (ARM asm) * added: handle more ID3v2.3 tag items and from all file types * fixed: coredump on Sparc64 (changed MD5 implementation) * fixed: handle invalid ID3v2.3 tags from sacd-ripper * fixed: several corner-case memory leaks Moderate SUSE bug 1091340 SUSE bug 1091341 SUSE bug 1091342 SUSE bug 1091343 SUSE bug 1091344 SUSE bug 1180414 CVE-2018-10536 CVE-2018-10537 CVE-2018-10538 CVE-2018-10539 CVE-2018-10540 CVE-2018-19840 CVE-2018-19841 CVE-2018-6767 CVE-2018-7253 CVE-2018-7254 CVE-2019-1010319 CVE-2019-11498 CVE-2020-35738 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer. - CVE-2023-27932: Fixed Same Origin Policy bypass. - CVE-2023-27954: Fixed sensitive user information tracking. - CVE-2023-28205: Fixed arbitrary code execution (bsc#1210295). Already fixed in version 2.38.5: - CVE-2022-32886, CVE-2022-32912, CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363. Important SUSE bug 1210295 SUSE bug 1210731 CVE-2022-0108 CVE-2022-32885 CVE-2022-32886 CVE-2022-32912 CVE-2023-25358 CVE-2023-25360 CVE-2023-25361 CVE-2023-25362 CVE-2023-25363 CVE-2023-27932 CVE-2023-27954 CVE-2023-28205 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: Updated to Wireshark 3.6.8: - CVE-2022-3190: Fixed F5 Ethernet Trailer dissector infinite loop (bsc#1203388). - CVE-2021-4186: Fixed Gryphon dissector crash (bsc#1194165). Moderate SUSE bug 1194165 SUSE bug 1203388 CVE-2021-4186 CVE-2022-3190 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 wireshark-devel-3.6.13-150000.3.89.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the wireshark-devel-3.6.13-150000.3.89.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2014-8710 CVE-2014-8711 CVE-2014-8712 CVE-2014-8713 CVE-2014-8714 CVE-2015-0559 CVE-2015-0560 CVE-2015-0561 CVE-2015-0562 CVE-2015-0563 CVE-2015-0564 CVE-2015-2187 CVE-2015-2188 CVE-2015-2189 CVE-2015-2190 CVE-2015-2191 CVE-2015-2192 CVE-2015-3808 CVE-2015-3809 CVE-2015-3810 CVE-2015-3811 CVE-2015-3812 CVE-2015-3813 CVE-2015-3814 CVE-2015-3815 CVE-2015-4651 CVE-2015-4652 CVE-2015-6241 CVE-2015-6242 CVE-2015-6243 CVE-2015-6244 CVE-2015-6245 CVE-2015-6246 CVE-2015-6247 CVE-2015-6248 CVE-2015-6249 CVE-2015-7830 CVE-2015-8711 CVE-2015-8718 CVE-2015-8720 CVE-2015-8721 CVE-2015-8722 CVE-2015-8723 CVE-2015-8724 CVE-2015-8725 CVE-2015-8726 CVE-2015-8727 CVE-2015-8728 CVE-2015-8729 CVE-2015-8730 CVE-2015-8731 CVE-2015-8732 CVE-2015-8733 CVE-2015-8734 CVE-2015-8735 CVE-2015-8736 CVE-2015-8737 CVE-2015-8738 CVE-2015-8739 CVE-2015-8740 CVE-2015-8741 CVE-2015-8742 CVE-2016-2522 CVE-2016-2523 CVE-2016-2524 CVE-2016-2525 CVE-2016-2526 CVE-2016-2527 CVE-2016-2528 CVE-2016-2529 CVE-2016-2530 CVE-2016-2531 CVE-2016-2532 CVE-2016-5350 CVE-2016-5351 CVE-2016-5352 CVE-2016-5353 CVE-2016-5354 CVE-2016-5355 CVE-2016-5356 CVE-2016-5357 CVE-2016-5358 CVE-2016-6505 CVE-2016-6508 CVE-2016-6509 CVE-2016-6510 CVE-2016-6511 CVE-2016-6512 CVE-2016-6513 CVE-2016-7175 CVE-2016-7176 CVE-2016-7177 CVE-2016-7178 CVE-2016-7179 CVE-2016-7180 CVE-2016-9372 CVE-2016-9373 CVE-2016-9374 CVE-2016-9375 CVE-2016-9376 CVE-2017-11406 CVE-2017-11407 CVE-2017-11408 CVE-2017-11410 CVE-2017-11411 CVE-2017-13764 CVE-2017-13765 CVE-2017-13766 CVE-2017-13767 CVE-2017-15189 CVE-2017-15190 CVE-2017-15191 CVE-2017-15192 CVE-2017-15193 CVE-2017-17083 CVE-2017-17084 CVE-2017-17085 CVE-2017-5596 CVE-2017-5597 CVE-2017-5753 CVE-2017-6467 CVE-2017-6468 CVE-2017-6469 CVE-2017-6470 CVE-2017-6471 CVE-2017-6472 CVE-2017-6473 CVE-2017-6474 CVE-2017-7700 CVE-2017-7701 CVE-2017-7702 CVE-2017-7703 CVE-2017-7704 CVE-2017-7705 CVE-2017-7745 CVE-2017-7746 CVE-2017-7747 CVE-2017-7748 CVE-2017-9343 CVE-2017-9344 CVE-2017-9345 CVE-2017-9346 CVE-2017-9347 CVE-2017-9348 CVE-2017-9349 CVE-2017-9350 CVE-2017-9351 CVE-2017-9352 CVE-2017-9353 CVE-2017-9354 CVE-2018-11354 CVE-2018-11355 CVE-2018-11356 CVE-2018-11357 CVE-2018-11358 CVE-2018-11359 CVE-2018-11360 CVE-2018-11361 CVE-2018-11362 CVE-2018-12086 CVE-2018-14339 CVE-2018-14340 CVE-2018-14341 CVE-2018-14342 CVE-2018-14343 CVE-2018-14344 CVE-2018-14367 CVE-2018-14368 CVE-2018-14369 CVE-2018-14370 CVE-2018-16056 CVE-2018-16057 CVE-2018-16058 CVE-2018-18225 CVE-2018-18226 CVE-2018-18227 CVE-2018-19622 CVE-2018-19623 CVE-2018-19624 CVE-2018-19625 CVE-2018-19626 CVE-2018-19627 CVE-2018-19628 CVE-2018-5334 CVE-2018-5335 CVE-2018-5336 CVE-2018-7320 CVE-2018-7321 CVE-2018-7322 CVE-2018-7323 CVE-2018-7324 CVE-2018-7325 CVE-2018-7326 CVE-2018-7327 CVE-2018-7328 CVE-2018-7329 CVE-2018-7330 CVE-2018-7331 CVE-2018-7332 CVE-2018-7333 CVE-2018-7334 CVE-2018-7335 CVE-2018-7336 CVE-2018-7337 CVE-2018-7417 CVE-2018-7418 CVE-2018-7419 CVE-2018-7420 CVE-2018-7421 CVE-2018-9256 CVE-2018-9257 CVE-2018-9258 CVE-2018-9260 CVE-2018-9261 CVE-2018-9262 CVE-2018-9263 CVE-2018-9264 CVE-2018-9265 CVE-2018-9266 CVE-2018-9267 CVE-2018-9268 CVE-2018-9269 CVE-2018-9270 CVE-2018-9271 CVE-2018-9272 CVE-2018-9273 CVE-2018-9274 CVE-2019-10894 CVE-2019-10895 CVE-2019-10896 CVE-2019-10897 CVE-2019-10898 CVE-2019-10899 CVE-2019-10900 CVE-2019-10901 CVE-2019-10902 CVE-2019-10903 CVE-2019-13619 CVE-2019-16319 CVE-2019-19553 CVE-2019-5716 CVE-2019-5717 CVE-2019-5718 CVE-2019-5719 CVE-2019-5721 CVE-2019-9208 CVE-2019-9209 CVE-2019-9214 CVE-2020-11647 CVE-2020-13164 CVE-2020-15466 CVE-2020-17498 CVE-2020-25862 CVE-2020-25863 CVE-2020-25866 CVE-2020-26418 CVE-2020-26419 CVE-2020-26420 CVE-2020-26421 CVE-2020-26422 CVE-2020-26575 CVE-2020-28030 CVE-2020-7044 CVE-2020-9428 CVE-2020-9429 CVE-2020-9430 CVE-2020-9431 CVE-2021-22173 CVE-2021-22174 CVE-2021-22191 CVE-2021-22207 CVE-2021-22235 CVE-2021-39920 CVE-2021-39921 CVE-2021-39922 CVE-2021-39924 CVE-2021-39925 CVE-2021-39926 CVE-2021-39928 CVE-2021-39929 CVE-2021-4181 CVE-2021-4182 CVE-2021-4183 CVE-2021-4184 CVE-2021-4185 CVE-2021-4186 CVE-2021-4190 CVE-2022-0581 CVE-2022-0582 CVE-2022-0583 CVE-2022-0585 CVE-2022-0586 CVE-2022-3190 CVE-2022-3725 CVE-2022-4345 CVE-2023-0411 CVE-2023-0412 CVE-2023-0413 CVE-2023-0415 CVE-2023-0416 CVE-2023-0417 CVE-2023-1161 CVE-2023-1992 CVE-2023-1993 CVE-2023-1994 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 yaml-cpp-devel-0.6.3-150400.4.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the yaml-cpp-devel-0.6.3-150400.4.3.1 package on the GA media of SUSE Linux Enterprise Module for Desktop Applications 15 SP5. Moderate CVE-2017-5950 CVE-2018-20573 CVE-2018-20574 CVE-2019-6285 CVE-2019-6292 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 FastCGI-2.4.0-2.23 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the FastCGI-2.4.0-2.23 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2011-2766 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ImageMagick fixes the following issues: - CVE-2022-3213: Fixed heap buffer overflow when processing a malformed TIFF file (bsc#1203450). Moderate SUSE bug 1203450 CVE-2022-3213 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ant-1.10.12-150200.4.12.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ant fixes the following issues: - CVE-2020-1945: Fixed an inseure temorary file vulnerability which could have potentially leaked sensitive information (bsc#1171696). Moderate SUSE bug 1171696 CVE-2020-1945 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ant fixes the following issues: - CVE-2020-1945: Fixed an inseure temorary file vulnerability which could have potentially leaked sensitive information (bsc#1171696). Moderate SUSE bug 1171696 CVE-2020-1945 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ant fixes the following issues: - CVE-2020-1945: Fixed an inseure temorary file vulnerability which could have potentially leaked sensitive information (bsc#1171696). Moderate SUSE bug 1171696 CVE-2020-1945 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 apache-commons-compress-1.21-150200.3.13.4 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for apache-commons-compress fixes the following issues: - Updated to 1.21 - CVE-2021-35515: Fixed an infinite loop when reading a specially crafted 7Z archive. (bsc#1188463) - CVE-2021-35516: Fixed an excessive memory allocation when reading a specially crafted 7Z archive. (bsc#1188464) - CVE-2021-35517: Fixed an excessive memory allocation when reading a specially crafted TAR archive. (bsc#1188465) - CVE-2021-36090: Fixed an excessive memory allocation when reading a specially crafted ZIP archive. (bsc#1188466) Important SUSE bug 1188463 SUSE bug 1188464 SUSE bug 1188465 SUSE bug 1188466 CVE-2021-35515 CVE-2021-35516 CVE-2021-35517 CVE-2021-36090 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for binutils fixes the following issues: The following security bugs were fixed: - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579). - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597). - CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374). - CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c (bsc#1202969). - CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929). - CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783). - CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592). - CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c (bsc#1202966). - CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in binutils/dwarf.c (bsc#1202967). - CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816). The following non-security bugs were fixed: - SLE toolchain update of binutils, update to 2.39 from 2.37. - Update to 2.39: * The ELF linker will now generate a warning message if the stack is made executable. Similarly it will warn if the output binary contains a segment with all three of the read, write and execute permission bits set. These warnings are intended to help developers identify programs which might be vulnerable to attack via these executable memory regions. The warnings are enabled by default but can be disabled via a command line option. It is also possible to build a linker with the warnings disabled, should that be necessary. * The ELF linker now supports a --package-metadata option that allows embedding a JSON payload in accordance to the Package Metadata specification. * In linker scripts it is now possible to use TYPE=<type> in an output section description to set the section type value. * The objdump program now supports coloured/colored syntax highlighting of its disassembler output for some architectures. (Currently: AVR, RiscV, s390, x86, x86_64). * The nm program now supports a --no-weak/-W option to make it ignore weak symbols. * The readelf and objdump programs now support a -wE option to prevent them from attempting to access debuginfod servers when following links. * The objcopy program's --weaken, --weaken-symbol, and --weaken-symbols options now works with unique symbols as well. - Update to 2.38: * elfedit: Add --output-abiversion option to update ABIVERSION. * Add support for the LoongArch instruction set. * Tools which display symbols or strings (readelf, strings, nm, objdump) have a new command line option which controls how unicode characters are handled. By default they are treated as normal for the tool. Using --unicode=locale will display them according to the current locale. Using --unicode=hex will display them as hex byte values, whilst --unicode=escape will display them as escape sequences. In addition using --unicode=highlight will display them as unicode escape sequences highlighted in red (if supported by the output device). * readelf -r dumps RELR relative relocations now. * Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been added to objcopy in order to enable UEFI development using binutils. * ar: Add --thin for creating thin archives. -T is a deprecated alias without diagnostics. In many ar implementations -T has a different meaning, as specified by X/Open System Interface. * Add support for AArch64 system registers that were missing in previous releases. * Add support for the LoongArch instruction set. * Add a command-line option, -muse-unaligned-vector-move, for x86 target to encode aligned vector move as unaligned vector move. * Add support for Cortex-R52+ for Arm. * Add support for Cortex-A510, Cortex-A710, Cortex-X2 for AArch64. * Add support for Cortex-A710 for Arm. * Add support for Scalable Matrix Extension (SME) for AArch64. * The --multibyte-handling=[allow|warn|warn-sym-only] option tells the assembler what to when it encoutners multibyte characters in the input. The default is to allow them. Setting the option to 'warn' will generate a warning message whenever any multibyte character is encountered. Using the option to 'warn-sym-only' will make the assembler generate a warning whenever a symbol is defined containing multibyte characters. (References to undefined symbols will not generate warnings). * Outputs of .ds.x directive and .tfloat directive with hex input from x86 assembler have been reduced from 12 bytes to 10 bytes to match the output of .tfloat directive. * Add support for 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and 'armv9.3-a' for -march in AArch64 GAS. * Add support for 'armv8.7-a', 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and 'armv9.3-a' for -march in Arm GAS. * Add support for Intel AVX512_FP16 instructions. * Add -z pack-relative-relocs/-z no pack-relative-relocs to x86 ELF linker to pack relative relocations in the DT_RELR section. * Add support for the LoongArch architecture. * Add -z indirect-extern-access/-z noindirect-extern-access to x86 ELF linker to control canonical function pointers and copy relocation. * Add --max-cache-size=SIZE to set the the maximum cache size to SIZE bytes. - Explicitly enable --enable-warn-execstack=yes and --enable-warn-rwx-segments=yes. - Add gprofng subpackage. - Include recognition of 'z16' name for 'arch14' on s390. (bsc#1198237). - Add back fix for bsc#1191473, which got lost in the update to 2.38. - Install symlinks for all target specific tools on arm-eabi-none (bsc#1185712). - Enable PRU architecture for AM335x CPU (Beagle Bone Black board) Moderate SUSE bug 1142579 SUSE bug 1185597 SUSE bug 1185712 SUSE bug 1188374 SUSE bug 1191473 SUSE bug 1193929 SUSE bug 1194783 SUSE bug 1197592 SUSE bug 1198237 SUSE bug 1202816 SUSE bug 1202966 SUSE bug 1202967 SUSE bug 1202969 CVE-2019-1010204 CVE-2021-3530 CVE-2021-3648 CVE-2021-3826 CVE-2021-45078 CVE-2021-46195 CVE-2022-27943 CVE-2022-38126 CVE-2022-38127 CVE-2022-38533 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 binutils-devel-32bit-2.39-150100.7.40.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the binutils-devel-32bit-2.39-150100.7.40.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2014-9939 CVE-2017-12448 CVE-2017-12450 CVE-2017-12452 CVE-2017-12453 CVE-2017-12454 CVE-2017-12456 CVE-2017-12799 CVE-2017-13757 CVE-2017-14128 CVE-2017-14129 CVE-2017-14130 CVE-2017-14333 CVE-2017-14529 CVE-2017-14729 CVE-2017-14745 CVE-2017-14974 CVE-2017-15938 CVE-2017-15939 CVE-2017-15996 CVE-2017-16826 CVE-2017-16827 CVE-2017-16828 CVE-2017-16829 CVE-2017-16830 CVE-2017-16831 CVE-2017-16832 CVE-2017-6965 CVE-2017-6966 CVE-2017-6969 CVE-2017-7209 CVE-2017-7210 CVE-2017-7223 CVE-2017-7224 CVE-2017-7225 CVE-2017-7226 CVE-2017-7299 CVE-2017-7300 CVE-2017-7301 CVE-2017-7302 CVE-2017-7303 CVE-2017-7304 CVE-2017-8392 CVE-2017-8393 CVE-2017-8394 CVE-2017-8396 CVE-2017-8421 CVE-2017-9746 CVE-2017-9747 CVE-2017-9748 CVE-2017-9750 CVE-2017-9755 CVE-2017-9756 CVE-2018-1000876 CVE-2018-10372 CVE-2018-10373 CVE-2018-10534 CVE-2018-10535 CVE-2018-17358 CVE-2018-17359 CVE-2018-17360 CVE-2018-17985 CVE-2018-18309 CVE-2018-18483 CVE-2018-18484 CVE-2018-18605 CVE-2018-18606 CVE-2018-18607 CVE-2018-19931 CVE-2018-19932 CVE-2018-20623 CVE-2018-20651 CVE-2018-20671 CVE-2018-6323 CVE-2018-6543 CVE-2018-6759 CVE-2018-6872 CVE-2018-7208 CVE-2018-7568 CVE-2018-7569 CVE-2018-7570 CVE-2018-7642 CVE-2018-7643 CVE-2018-8945 CVE-2019-1010180 CVE-2019-1010204 CVE-2019-12972 CVE-2019-14250 CVE-2019-14444 CVE-2019-17450 CVE-2019-17451 CVE-2019-9074 CVE-2019-9075 CVE-2019-9077 CVE-2020-16590 CVE-2020-16591 CVE-2020-16592 CVE-2020-16593 CVE-2020-16598 CVE-2020-16599 CVE-2020-35448 CVE-2020-35493 CVE-2020-35496 CVE-2020-35507 CVE-2021-20197 CVE-2021-20284 CVE-2021-20294 CVE-2021-3487 CVE-2021-3648 CVE-2021-3826 CVE-2021-45078 CVE-2021-46195 CVE-2022-27943 CVE-2022-38126 CVE-2022-38127 CVE-2022-38533 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 bsdtar-3.5.1-150400.3.12.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the bsdtar-3.5.1-150400.3.12.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2013-0211 CVE-2015-2304 CVE-2015-8917 CVE-2015-8928 CVE-2015-8933 CVE-2015-8934 CVE-2016-1541 CVE-2016-4300 CVE-2016-4301 CVE-2016-4809 CVE-2016-5418 CVE-2016-5844 CVE-2016-6250 CVE-2016-8687 CVE-2016-8688 CVE-2016-8689 CVE-2017-14166 CVE-2017-14501 CVE-2017-14502 CVE-2017-14503 CVE-2017-5601 CVE-2018-1000877 CVE-2018-1000878 CVE-2018-1000879 CVE-2018-1000880 CVE-2019-1000019 CVE-2019-1000020 CVE-2019-18408 CVE-2019-19221 CVE-2021-23177 CVE-2021-31566 CVE-2021-36976 CVE-2022-26280 CVE-2022-36227 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622) Removed CAs: - Global Chambersign Root - EC-ACC - Network Solutions Certificate Authority - Staat der Nederlanden EV Root CA - SwissSign Platinum CA - G2 Added CAs: - DIGITALSIGN GLOBAL ROOT ECDSA CA - DIGITALSIGN GLOBAL ROOT RSA CA - Security Communication ECC RootCA1 - Security Communication RootCA3 Changed trust: - TrustCor certificates only trusted up to Nov 30 (bsc#1206212) - Removed CAs (bsc#1206212) as most code does not handle 'valid before nov 30 2022' and it is not clear how many certs were issued for SSL middleware by TrustCor: - TrustCor RootCert CA-1 - TrustCor RootCert CA-2 - TrustCor ECA-1 Important SUSE bug 1206212 SUSE bug 1206622 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cargo-1.69.0-150400.24.15.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cargo-1.69.0-150400.24.15.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2018-1000622 CVE-2019-12083 CVE-2020-1967 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cblas-devel-3.9.0-150000.4.13.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cblas-devel-3.9.0-150000.4.13.2 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2021-4048 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cmark fixes the following issues: - CVE-2023-22486: Fixed quadratic complexity in handle_close_bracket may lead to a denial of service (bsc#1207674). Moderate SUSE bug 1207674 CVE-2023-22486 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 crash-7.3.1-150500.3.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the crash-7.3.1-150500.3.4 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2014-2524 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ctags-5.8-150000.3.3.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ctags fixes the following issues: - CVE-2022-4515: Fixed a command injection issue via a tag file wih a crafted filename (bsc#1206543). Important SUSE bug 1206543 CVE-2022-4515 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cups-ddk-2.2.7-150000.3.40.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cups-ddk-2.2.7-150000.3.40.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2012-5519 CVE-2014-3537 CVE-2014-5029 CVE-2014-5030 CVE-2014-5031 CVE-2015-1158 CVE-2015-1159 CVE-2017-18248 CVE-2018-4180 CVE-2018-4181 CVE-2018-4182 CVE-2018-4183 CVE-2018-4700 CVE-2019-8675 CVE-2019-8696 CVE-2019-8842 CVE-2020-10001 CVE-2020-3898 CVE-2021-25317 CVE-2022-26691 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cvs-1.12.13-150400.1.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cvs-1.12.13-150400.1.10 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2012-0804 CVE-2017-12836 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dash fixes the following issues: - Fixed an issue where code was executed even if noexec ('-n') was specified (bsc#1178978). Moderate SUSE bug 1178978 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dpkg-1.19.0.4-150000.4.4.1 on GA media (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dpkg fixes the following issues: - CVE-2022-1664: Fixed a directory traversal vulnerability in Dpkg::Source::Archive (bsc#1199944). Low SUSE bug 1199944 CVE-2022-1664 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 firewall-macros-0.9.3-150400.8.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the firewall-macros-0.9.3-150400.8.9.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2016-5410 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 flatpak-builder-1.2.2-150400.1.9 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the flatpak-builder-1.2.2-150400.1.9 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2022-21682 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 git-2.35.3-150300.10.27.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for git fixes the following issues: - CVE-2023-25652: Fixed partial overwrite of paths outside the working tree (bsc#1210686). - CVE-2023-25815: Fixed malicious placemtn of crafted message (bsc#1210686). - CVE-2023-29007: Fixed arbitrary configuration injection (bsc#1210686). Moderate SUSE bug 1210686 CVE-2023-25652 CVE-2023-25815 CVE-2023-29007 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 glibc-devel-32bit-2.31-150300.46.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the glibc-devel-32bit-2.31-150300.46.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2009-5155 CVE-2010-3192 CVE-2012-3406 CVE-2013-4458 CVE-2014-7817 CVE-2014-8121 CVE-2014-9402 CVE-2014-9761 CVE-2015-1472 CVE-2015-1473 CVE-2015-1781 CVE-2015-5180 CVE-2015-7547 CVE-2015-8776 CVE-2015-8777 CVE-2015-8778 CVE-2015-8779 CVE-2016-10228 CVE-2016-10739 CVE-2016-1234 CVE-2016-3075 CVE-2016-3706 CVE-2016-4429 CVE-2016-5417 CVE-2016-6323 CVE-2017-1000366 CVE-2017-1000408 CVE-2017-1000409 CVE-2017-12132 CVE-2017-12133 CVE-2017-15670 CVE-2017-15671 CVE-2017-15804 CVE-2017-16997 CVE-2017-17426 CVE-2017-18269 CVE-2018-1000001 CVE-2018-11236 CVE-2018-11237 CVE-2018-6485 CVE-2018-6551 CVE-2019-19126 CVE-2019-9169 CVE-2020-10029 CVE-2020-1751 CVE-2020-1752 CVE-2020-27618 CVE-2020-29562 CVE-2020-29573 CVE-2021-27645 CVE-2021-3326 CVE-2021-33574 CVE-2021-35942 CVE-2021-3999 CVE-2022-23218 CVE-2022-23219 CVE-2023-0687 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gmp fixes the following issues: - CVE-2021-43618: Fixed buffer overflow via crafted input in mpz/inp_raw.c (bsc#1192717). Moderate SUSE bug 1192717 CVE-2021-43618 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gmp-devel-32bit-6.1.2-4.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gmp-devel-32bit-6.1.2-4.9.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2021-43618 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 go-1.19-150000.3.26.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go and go1.9 fixes the following issues: The following security issues have been addressed for both packages: - CVE-2018-7187: Fixed the validation of the import path in the go get command, which allowed for arbitrary command execution via VCS path when the -insecure flag is used (bsc#1081495) The following other changes have been made for go1.9: - Fixes to the go command and the crypto/x509 and strings packages, which add minimal support to the go command for the vgo transition. - Several fixes to the compiler and go command - Fixed various issues in go trace (bsc#1085785): - Ensure go binaries are not stripped (eg: go tools trace), this caused some of them to misbehave - Ensure go trace html template is shipped as part of the installation, otherwise the web UI won't work For details on any other changes see the Go milestones on the official issue tracker. Moderate SUSE bug 1081495 SUSE bug 1085785 CVE-2018-7187 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 go1.19-1.19.9-150000.1.31.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.19 fixes the following issues: Update to 1.19.9 (bnc#1200441): - CVE-2023-24539: fixed an improper sanitization of CSS values (bnc#1211029). - CVE-2023-24540: fixed an improper handling of JavaScript whitespace (bnc#1211030). - CVE-2023-29400: fixed an improper handling of empty HTML attributes (bnc#1211031). - runtime: automatically bump RLIMIT_NOFILE on Unix - cmd/compile: inlining function that references function literals generates bad code. - cmd/compile: encoding/binary.PutUint16 sometimes doesn't write. - crypto/tls: TLSv1.3 connection fails with invalid PSK binder. - cmd/compile: incorrect inline function variable. Non-security fixes: - Various packaging fixes (boo#1210963, boo#1210938, boo#1211073) - Reduced install size (jsc#PED-1962). Important SUSE bug 1200441 SUSE bug 1210127 SUSE bug 1210128 SUSE bug 1210129 SUSE bug 1210130 SUSE bug 1210938 SUSE bug 1210963 SUSE bug 1211029 SUSE bug 1211030 SUSE bug 1211031 SUSE bug 1211073 CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 go1.20-1.20.4-150000.1.11.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.20 fixes the following issues: Update to 1.20.4 (bnc#1206346): - CVE-2023-24539: Fixed an improper sanitization of CSS values (boo#1211029). - CVE-2023-24540: Fixed an improper handling of JavaScript whitespace (boo#1211030). - CVE-2023-29400: Fixed an improper handling of empty HTML attributes (boo#1211031). - runtime: automatically bump RLIMIT_NOFILE on Unix. - crypto/subtle: xor fails when run with race+purego. - cmd/compile: encoding/binary.PutUint16 sometimes doesn't write. - cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int). - cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex. - net/http: FileServer no longer serves content for POST. - crypto/tls: TLSv1.3 connection fails with invalid PSK binder. - cmd/compile: incorrect inline function variable. - cmd/compile: Unified IR exports table is binary unstable in presence of generics. - go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT. Non-security fixes: - Reverted go1.x Suggests go1.x-race (boo#1210963). - Re-enabled binary stripping and debuginfo (boo#1210938). Important SUSE bug 1206346 SUSE bug 1210127 SUSE bug 1210128 SUSE bug 1210129 SUSE bug 1210130 SUSE bug 1210938 SUSE bug 1210963 SUSE bug 1211029 SUSE bug 1211030 SUSE bug 1211031 CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538 CVE-2023-24539 CVE-2023-24540 CVE-2023-29400 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 google-gson-2.8.9-150200.3.10.3 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for google-gson fixes the following issues: - CVE-2022-25647: Fixed deserialization of untrusted data (bsc#1199064). Important SUSE bug 1199064 CVE-2022-25647 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gradle-4.4.1-150200.3.10.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gradle fixes the following issues: - CVE-2021-29428: Fixed a local privilege escalation through system temporary directory. (bsc#1184807) Important SUSE bug 1184807 CVE-2021-29428 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 graphviz-perl-2.48.0-150400.1.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the graphviz-perl-2.48.0-150400.1.8 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2018-10196 CVE-2019-11023 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for groovy fixes the following issues: - groovy was updated to 2.4.21 - CVE-2020-17521: Fixed an information disclosure vulnerability (bsc#1179729). Moderate SUSE bug 1179729 CVE-2020-17521 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 groovy-lib-2.4.21-150200.3.7.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the groovy-lib-2.4.21-150200.3.7.4 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2020-17521 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This consolidated update includes multiple patchinfos for SUSE Manager Server and Proxy. This patchinfo is used for the codestream release only. Moderate SUSE bug 1136857 SUSE bug 1165572 SUSE bug 1169553 SUSE bug 1169780 SUSE bug 1170244 SUSE bug 1170468 SUSE bug 1170654 SUSE bug 1171281 SUSE bug 1172279 SUSE bug 1172504 SUSE bug 1172709 SUSE bug 1172807 SUSE bug 1172831 SUSE bug 1172839 SUSE bug 1173169 SUSE bug 1173522 SUSE bug 1173535 SUSE bug 1173554 SUSE bug 1173566 SUSE bug 1173584 SUSE bug 1173932 SUSE bug 1173982 SUSE bug 1173997 SUSE bug 1174025 SUSE bug 1174167 SUSE bug 1174201 SUSE bug 1174229 SUSE bug 1174325 SUSE bug 1174405 SUSE bug 1174470 SUSE bug 1174965 SUSE bug 1175485 SUSE bug 1175555 SUSE bug 1175558 SUSE bug 1175724 SUSE bug 1175791 SUSE bug 678126 CVE-2020-11022 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for indent fixes the following issues: - Fixed multiple memory safety issues (bsc#1209718). Important SUSE bug 1209718 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 jackson-dataformat-cbor-2.13.0-150200.3.3.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the jackson-dataformat-cbor-2.13.0-150200.3.3.3 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2020-28491 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for jackson-databind, jackson-dataformats-binary, jackson-annotations, jackson-bom, jackson-core fixes the following issues: Security issues fixed: - CVE-2020-36518: Fixed a Java stack overflow exception and denial of service via a large depth of nested objects in jackson-databind. (bsc#1197132) - CVE-2020-25649: Fixed an insecure entity expansion in jackson-databind which was vulnerable to XML external entity (XXE). (bsc#1177616) - CVE-2020-28491: Fixed a bug which could cause `java.lang.OutOfMemoryError` exception in jackson-dataformats-binary. (bsc#1182481) Non security fixes: jackson-annotations - update from version 2.10.2 to version 2.13.0: + Build with source/target levels 8 + Add 'mvnw' wrapper + 'JsonSubType.Type' should accept array of names + Jackson version alignment with Gradle 6 + Add '@JsonIncludeProperties' + Add '@JsonTypeInfo(use=DEDUCTION)' + Ability to use '@JsonAnyGetter' on fields + Add '@JsonKey' annotation + Allow repeated calls to 'SimpleObjectIdResolver.bindItem()' for same mapping + Add 'namespace' property for '@JsonProperty' (for XML module) + Add target 'ElementType.ANNOTATION_TYPE' for '@JsonEnumDefaultValue' + 'JsonPattern.Value.pattern' retained as '', never (accidentally) exposed as 'null' + Rewrite to use `ant` for building in order to be able to use it in packages that have to be built before maven jackson-bom - update from version 2.10.2 to version 2.13.0: + Configure moditect plugin with '<jvmVersion>11</jvmVersion>' + jackson-bom manages the version of 'junit:junit' + Drop 'jackson-datatype-hibernate3' (support for Hibernate 3.x datatypes) + Removed 'jakarta' classifier variants of JAXB/JSON-P/JAX-RS modules due to the addition of new Jakarta artifacts (Jakarta-JSONP, Jakarta-xmlbind-annotations, Jakarta-rs-providers) + Add version for 'jackson-datatype-jakarta-jsonp' module (introduced after 2.12.2) + Add (beta) version for 'jackson-dataformat-toml' + Jakarta 9 artifact versions are missing from jackson-bom + Add default settings for 'gradle-module-metadata-maven-plugin' (gradle metadata) + Add default settings for 'build-helper-maven-plugin' + Drop 'jackson-module-scala_2.10' entry (not released for Jackson 2.12 or later) + Add override for 'version.plugin.bundle' (for 5.1.1) to help build on JDK 15+ + Add missing version for jackson-datatype-eclipse-collections jackson-core - update from version 2.10.2 to version 2.13.0: + Build with source and target levels 8 + Misleading exception for input source when processing byte buffer with start offset + Escape contents of source document snippet for 'JsonLocation._appendSourceDesc()' + Add 'StreamWriteException' type to eventually replace 'JsonGenerationException' + Replace 'getCurrentLocation()'/'getTokenLocation()' with 'currentLocation()'/'currentTokenLocation()' in 'JsonParser' + Replace 'JsonGenerator.writeObject()' (and related) with 'writePOJO()' + Replace 'getCurrentValue()'/'setCurrentValue()' with 'currentValue()'/'assignCurrentValue()' in 'JsonParser'/'JsonGenerator + Introduce O(n^1.5) BigDecimal parser implementation + ByteQuadsCanonicalizer.addName(String, int, int) has incorrect handling for case of q2 == null + UTF32Reader ArrayIndexOutOfBoundsException + Improve exception/JsonLocation handling for binary content: don't show content, include byte offset + Fix an issue with the TokenFilter unable to ignore properties when deserializing. + Optimize array allocation by 'JsonStringEncoder' + Add 'mvnw' wrapper + (partial) Optimize array allocation by 'JsonStringEncoder' + Add back accidentally removed 'JsonStringEncoder' related methods in 'BufferRecyclers' (like 'getJsonStringEncoder()') + 'ArrayOutOfBoundException' at 'WriterBasedJsonGenerator.writeString(Reader, int)' + Allow 'optional-padding' for 'Base64Variant' + More customizable TokenFilter inclusion (using 'Tokenfilter.Inclusion') + Publish Gradle Module Metadata + Add 'StreamReadCapability' for further format-based/format-agnostic handling improvements + Add 'JsonParser.isExpectedNumberIntToken()' convenience method + Add 'StreamWriteCapability' for further format-based/format-agnostic handling improvements + Add 'JsonParser.getNumberValueExact()' to allow precision-retaining buffering + Limit initial allocated block size by 'ByteArrayBuilder' to max block size + Add 'JacksonException' as parent class of 'JsonProcessingException' + Make 'JsonWriteContext.reset()' and 'JsonReadContext.reset()' methods public + Deprecate 'JsonParser.getCurrentTokenId()' (use '#currentTokenId()' instead) + Full 'LICENSE' included in jar for easier access by compliancy tools + Fix NPE in 'writeNumber(String)' method of 'UTF8JsonGenerator', 'WriterBasedJsonGenerator' + Add a String Array write method in the Streaming API + Synchronize variants of 'JsonGenerator#writeNumberField' with 'JsonGenerator#writeNumber' + Add JsonGenerator#writeNumber(char[], int, int) method + Do not clear aggregated contents of 'TextBuffer' when 'releaseBuffers()' called + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)' + Optionally allow leading decimal in float tokens + Rewrite to use ant for building in order to be able to use it in packages that have to be built before maven + Parsing JSON with 'ALLOW_MISSING_VALUE' enabled results in endless stream of 'VALUE_NULL' tokens + Handle case when system property access is restricted + 'FilteringGeneratorDelegate' does not handle 'writeString(Reader, int)' + DataFormatMatcher#getMatchedFormatName throws NPE when no match exists + 'JsonParser.getCurrentLocation()' byte/char offset update incorrectly for big payloads jackson-databind - update from version 2.10.5.1 to version 2.13.0: + '@JsonValue' with integer for enum does not deserialize correctly + 'AnnotatedMethod.getValue()/setValue()' doesn't have useful exception message + Add 'DatabindException' as intermediate subtype of 'JsonMappingException' + Jackson does not support deserializing new Java 9 unmodifiable collections + Allocate TokenBuffer instance via context objects (to allow format-specific buffer types) + Add mechanism for setting default 'ContextAttributes' for 'ObjectMapper' + Add 'DeserializationContext.readTreeAsValue()' methods for more convenient conversions for deserializers to use + Clean up support of typed 'unmodifiable', 'singleton' Maps/Sets/Collections + Extend internal bitfield of 'MapperFeature' to be 'long' + Add 'removeMixIn()' method in 'MapperBuilder' + Backport 'MapperBuilder' lambda-taking methods: 'withConfigOverride()', 'withCoercionConfig()', 'withCoercionConfigDefaults()' + configOverrides(boolean.class) silently ignored, whereas .configOverride(Boolean.class) works for both primitives and boxed boolean values + Dont track unknown props in buffer if 'ignoreAllUnknown' is true + Should allow deserialization of java.time types via opaque 'JsonToken.VALUE_EMBEDDED_OBJECT' + Optimize 'AnnotatedConstructor.call()' case by passing explicit null + Add AnnotationIntrospector.XmlExtensions interface for decoupling javax dependencies + Custom SimpleModule not included in list returned by ObjectMapper.getRegisteredModuleIds() after registration + Use more limiting default visibility settings for JDK types (java.*, javax.*) + Deep merge for 'JsonNode' using 'ObjectReader.readTree()' + IllegalArgumentException: Conflicting setter definitions for property with more than 2 setters + Serializing java.lang.Thread fails on JDK 11 and above + String-based 'Map' key deserializer is not deterministic when there is no single arg constructor + Add ArrayNode#set(int index, primitive_type value) + JsonStreamContext 'currentValue' wrongly references to '@JsonTypeInfo' annotated object + DOM 'Node' serialization omits the default namespace declaration + Support 'suppressed' property when deserializing 'Throwable' + 'AnnotatedMember.equals()' does not work reliably + Add 'MapperFeature.APPLY_DEFAULT_VALUES', initially for Scala module + For an absent property Jackson injects 'NullNode' instead of 'null' to a JsonNode-typed constructor argument of a '@ConstructorProperties'-annotated constructor + 'XMLGregorianCalendar' doesn't work with default typing + Content 'null' handling not working for root values + StdDeserializer rejects blank (all-whitespace) strings for ints + 'USE_BASE_TYPE_AS_DEFAULT_IMPL' not working with 'DefaultTypeResolverBuilder' + Add PropertyNamingStrategies.UpperSnakeCaseStrategy (and UPPER_SNAKE_CASE constant) + StackOverflowError when serializing JsonProcessingException + Support for BCP 47 'java.util.Locale' serialization/deserialization + String property deserializes null as 'null' for JsonTypeInfo.As.EXISTING_PROPERTY + Can not deserialize json to enum value with Object-/Array-valued input, '@JsonCreator' + Fix to avoid problem with 'BigDecimalNode', scale of 'Integer.MIN_VALUE' + Extend handling of 'FAIL_ON_NULL_FOR_PRIMITIVES' to cover coercion from (Empty) String via 'AsNull' + Add 'mvnw' wrapper + (regression) Factory method generic type resolution does not use Class-bound type parameter + Deserialization of 'empty' subtype with DEDUCTION failed + Merge findInjectableValues() results in AnnotationIntrospectorPair + READ_UNKNOWN_ENUM_VALUES_USING_DEFAULT_VALUE doesn't work with empty strings + 'TypeFactory' cannot convert 'Collection' sub-type without type parameters to canonical form and back + Fix for [modules-java8#207]: prevent fail on secondary Java 8 date/time types + EXTERNAL_PROPERTY does not work well with '@JsonCreator' and 'FAIL_ON_UNKNOWN_PROPERTIES' + String property deserializes null as 'null' for 'JsonTypeInfo.As.EXTERNAL_PROPERTY' + Property ignorals cause 'BeanDeserializer 'to forget how to read from arrays (not copying '_arrayDelegateDeserializer') + UntypedObjectDeserializer' mixes multiple unwrapped collections (related to #2733) + Two cases of incorrect error reporting about DeserializationFeature + Bug in polymorphic deserialization with '@JsonCreator', '@JsonAnySetter', 'JsonTypeInfo.As.EXTERNAL_PROPERTY' + Polymorphic subtype deduction ignores 'defaultImpl' attribute + MismatchedInputException: Cannot deserialize instance of 'com.fasterxml.jackson.databind.node.ObjectNode' out of VALUE_NULL token + Missing override for 'hasAsKey()' in 'AnnotationIntrospectorPair' + Creator lookup fails with 'InvalidDefinitionException' for conflict between single-double/single-Double arg constructor + 'MapDeserializer' forcing 'JsonMappingException' wrapping even if WRAP_EXCEPTIONS set to false + Auto-detection of constructor-based creator method skipped if there is an annotated factory-based creator method (regression from 2.11) + 'ObjectMapper.treeToValue()' no longer invokes 'JsonDeserializer.getNullValue()' + DeserializationProblemHandler is not invoked when trying to deserialize String + Fix failing 'double' JsonCreators in jackson 2.12.0 + Conflicting in POJOPropertiesCollector when having namingStrategy + Breaking API change in 'BasicClassIntrospector' (2.12.0) + 'JsonNode.requiredAt()' does NOT fail on some path expressions + Exception thrown when 'Collections.synchronizedList()' is serialized with type info, deserialized + Add option to resolve type from multiple existing properties, '@JsonTypeInfo(use=DEDUCTION)' + '@JsonIgnoreProperties' does not prevent Exception Conflicting getter/setter definitions for property + Deserialization Not Working Right with Generic Types and Builders + Add '@JsonIncludeProperties(propertyNames)' (reverse of '@JsonIgnoreProperties') + '@JsonAnyGetter' should be allowed on a field + Allow handling of single-arg constructor as property based by default + Allow case insensitive deserialization of String value into 'boolean'/'Boolean' (esp for Excel) + Allow use of '@JsonFormat(with=JsonFormat.Feature .ACCEPT_CASE_INSENSITIVE_PROPERTIES)' on Class + Abstract class included as part of known type ids for error message when using JsonSubTypes + Distinguish null from empty string for UUID deserialization + 'ReferenceType' does not expose valid containedType + Add 'CoercionConfig[s]' mechanism for configuring allowed coercions + 'JsonProperty.Access.READ_ONLY' does not work with 'getter-as-setter' 'Collection's + Support 'BigInteger' and 'BigDecimal' creators in 'StdValueInstantiator' + 'JsonProperty.Access.READ_ONLY' fails with collections when a property name is specified + 'BigDecimal' precision not retained for polymorphic deserialization + Support use of 'Void' valued properties ('MapperFeature.ALLOW_VOID_VALUED_PROPERTIES') + Explicitly fail (de)serialization of 'java.time.*' types in absence of registered custom (de)serializers + Improve description included in by 'DeserializationContext.handleUnexpectedToken()' + Support for JDK 14 record types ('java.lang.Record') + 'PropertyNamingStrategy' class initialization depends on its subclass, this can lead to class loading deadlock + 'FAIL_ON_IGNORED_PROPERTIES' does not throw on 'READONLY' properties with an explicit name + Add Gradle Module Metadata for version alignment with Gradle 6 + Allow 'JsonNode' auto-convert into 'ArrayNode' if duplicates found (for XML) + Allow values of 'untyped' auto-convert into 'List' if duplicates found (for XML) + Add 'ValueInstantiator.createContextual(...) + Support multiple names in 'JsonSubType.Type' + Disabling 'FAIL_ON_INVALID_SUBTYPE' breaks polymorphic deserialization of Enums + Explicitly fail (de)serialization of 'org.joda.time.*' types in absence of registered custom (de)serializers + Trailing zeros are stripped when deserializing BigDecimal values inside a @JsonUnwrapped property + Extract getter/setter/field name mangling from 'BeanUtil' into pluggable 'AccessorNamingStrategy' + Throw 'InvalidFormatException' instead of 'MismatchedInputException' for ACCEPT_FLOAT_AS_INT coercion failures + Add '@JsonKey' annotation (similar to '@JsonValue') for customizable serialization of Map keys + 'MapperFeature.ACCEPT_CASE_INSENSITIVE_ENUMS' should work for enum as keys + Add support for disabling special handling of 'Creator properties' wrt alphabetic property ordering + Add 'JsonNode.canConvertToExactIntegral()' to indicate whether floating-point/BigDecimal values could be converted to integers losslessly + Improve static factory method generic type resolution logic + Allow preventing 'Enum from integer' coercion using new 'CoercionConfig' system + '@JsonValue' not considered when evaluating inclusion + Make some java platform modules optional + Add support for serializing 'java.sql.Blob' + 'AnnotatedCreatorCollector' should avoid processing synthetic static (factory) methods + Add errorprone static analysis profile to detect bugs at build time + Problem with implicit creator name detection for constructor detection + Add 'BeanDeserializerBase.isCaseInsensitive()' + Refactoring of 'CollectionDeserializer' to solve CSV array handling issues + Full 'LICENSE' included in jar for easier access by compliancy tools + Fix type resolution for static methods (regression in 2.11.3) + '@JsonCreator' on constructor not compatible with '@JsonIdentityInfo', 'PropertyGenerator' + Add debug improvements about 'ClassUtil.getClassMethods()' + Cannot detect creator arguments of mixins for JDK types + Add 'JsonFormat.Shape' awareness for UUID serialization ('UUIDSerializer') + Json serialization fails or a specific case that contains generics and static methods with generic parameters (2.11.1 -> 2.11.2 regression) + 'ObjectMapper.activateDefaultTypingAsProperty()' is not using parameter 'PolymorphicTypeValidator' + Problem deserialization 'raw generic' fields (like 'Map') in 2.11.2 + Fix issues with 'MapLikeType.isTrueMapType()', 'CollectionLikeType.isTrueCollectionType()' + Parser/Generator features not set when using 'ObjectMapper.createParser()', 'createGenerator()' + Polymorphic subtypes not registering on copied ObjectMapper (2.11.1) + Failure to read AnnotatedField value in Jackson 2.11 + 'TypeFactory.constructType()' does not take 'TypeBindings' correctly + Builder Deserialization with JsonCreator Value vs Array + JsonCreator on static method in Enum and Enum used as key in map fails randomly + 'StdSubtypeResolver' is not thread safe (possibly due to copy not being made with 'ObjectMapper.copy()') + 'Conflicting setter definitions for property' exception for 'Map' subtype during deserialization + Fail to deserialize local Records + Rearranging of props when property-based generator is in use leads to incorrect output + Jackson doesn't respect 'CAN_OVERRIDE_ACCESS_MODIFIERS=false' for deserializer properties + 'DeserializationFeature.UNWRAP_SINGLE_VALUE_ARRAYS' don't support 'Map' type field + JsonParser from MismatchedInputException cannot getText() for floating-point value + i-I case conversion problem in Turkish locale with case-insensitive deserialization + '@JsonInject' fails on trying to find deserializer even if inject-only + Polymorphic deserialization should handle case-insensitive Type Id property name if 'MapperFeature.ACCEPT_CASE_INSENSITIVE_PROPERTIES' is enabled + TreeTraversingParser and UTF8StreamJsonParser create contexts differently + Support use of '@JsonAlias' for enum values + 'declaringClass' of 'enum-as-POJO' not removed for 'ObjectMapper' with a naming strategy + Fix 'JavaType.isEnumType()' to support sub-classes + BeanDeserializerBuilder Protected Factory Method for Extension + Support '@JsonSerialize(keyUsing)' and '@JsonDeserialize(keyUsing)' on Key class + Add 'SerializationFeature.WRITE_SELF_REFERENCES_AS_NULL' + 'ObjectMapper.registerSubtypes(NamedType...)' doesn't allow registering same POJO for two different type ids + 'DeserializationContext.handleMissingInstantiator()' throws 'MismatchedInputException' for non-static inner classes + Incorrect 'JsonStreamContext' for 'TokenBuffer' and 'TreeTraversingParser' + Add 'AnnotationIntrospector.findRenameByField()' to support Kotlin's 'is-getter' naming convention + Use '@JsonProperty(index)' for sorting properties on serialization + Java 8 'Optional' not working with '@JsonUnwrapped' on unwrappable type + Add 'MapperFeature.BLOCK_UNSAFE_POLYMORPHIC_BASE_TYPES' to allow blocking use of unsafe base type for polymorphic deserialization + 'ObjectMapper.setSerializationInclusion()' is ignored for 'JsonAnyGetter' + 'ValueInstantiationException' when deserializing using a builder and 'UNWRAP_SINGLE_VALUE_ARRAYS' + JsonIgnoreProperties(ignoreUnknown = true) does not work on field and method level + Failure to resolve generic type parameters on serialization + JsonParser cannot getText() for input stream on MismatchedInputException + ObjectReader readValue lacks Class<T> argument + Change default textual serialization of 'java.util.Date'/'Calendar' to include colon in timezone offset + Add 'ObjectMapper.createParser()' and 'createGenerator()' methods + Allow serialization of 'Properties' with non-String values + Add new factory method for creating custom 'EnumValues' to pass to 'EnumDeserializer + 'IllegalArgumentException' thrown for mismatched subclass deserialization + Add convenience methods for creating 'List', 'Map' valued 'ObjectReader's (ObjectMapper.readerForListOf()) + 'SerializerProvider.findContentValueSerializer()' methods jackson-dataformats-binary - update from version 2.10.1 to version 2.13.0: + (cbor) Should validate UTF-8 multi-byte validity for short decode path too + (ion) Deprecate 'CloseSafeUTF8Writer', remove use + (smile) Make 'SmileFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES' + (cbor) Make 'CBORFactory' support 'JsonFactory.Feature.CANONICALIZE_FIELD_NAMES' + (cbor) Handle case of BigDecimal with Integer.MIN_VALUE for scale gracefully + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) + (cbor) Another uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) + (smile) Add 'SmileGenerator.Feature.LENIENT_UTF_ENCODING' for lenient handling of broken Unicode surrogate pairs on writing + (avro) Add 'logicalType' support for some 'java.time' types; add 'AvroJavaTimeModule' for native ser/deser + Support base64 strings in 'getBinaryValue()' for CBOR and Smile + (cbor) 'ArrayIndexOutOfBounds' for truncated UTF-8 name + (avro) Generate logicalType switch + (smile) 'ArrayIndexOutOfBounds' for truncated UTF-8 name + (ion) 'jackson-dataformat-ion' does not handle null.struct deserialization correctly + 'Ion-java' dep 1.4.0 -> 1.8.0 + Minor change to Ion module registration names (fully-qualified) + (cbor) Uncaught exception in CBORParser._nextChunkedByte2 (by ossfuzzer) + (cbor) Uncaught exception in CBORParser._findDecodedFromSymbols() (by ossfuzzer) + (smile) Uncaught validation problem wrt Smile 'BigDecimal' type + (smile) ArrayIndexOutOfBoundsException for malformed Smile header + (cbor) Failed to handle case of alleged String with length of Integer.MAX_VALUE + (smile) Allocate byte[] lazily for longer Smile binary data payloads + (cbor) CBORParser need to validate zero-length byte[] for BigInteger + (smile) Handle invalid chunked-binary-format length gracefully + (smile) Allocate byte[] lazily for longer Smile binary data payloads (7-bit encoded) + (smile) ArrayIndexOutOfBoundsException in SmileParser._decodeShortUnicodeValue() + (smile) Handle sequence of Smile header markers without recursion + (cbor) CBOR loses 'Map' entries with specific 'long' Map key values (32-bit boundary) + (ion) Ion Polymorphic deserialization in 2.12 breaks wrt use of Native Type Ids when upgrading from 2.8 + (cbor) 'ArrayIndexOutOfBoundsException' in 'CBORParser' for invalid UTF-8 String + (cbor) Handle invalid CBOR content like '[0x84]' (incomplete array) + (ion) Respect 'WRITE_ENUMS_USING_TO_STRING' in 'EnumAsIonSymbolSerializer' + (ion) Add support for generating IonSexps + (ion) Add support for deserializing IonTimestamps and IonBlobs + (ion) Add 'IonObjectMapper.builderForBinaryWriters()' / '.builderforTextualWriters()' convenience methods + (ion) Enabling pretty-printing fails Ion serialization + (ion) Allow disabling native type ids in IonMapper + (smile) Small bug in byte-alignment for long field names in Smile, symbol table reuse + (ion) Add 'IonFactory.getIonSystem()' accessor + (ion) Optimize 'IonParser.getNumberType()' using 'IonReader.getIntegerSize()' + (cbor) Add 'CBORGenerator.Feature.LENIENT_UTF_ENCODING' for lenient handling of Unicode surrogate pairs on writing + (cbor) Add support for decoding unassigned 'simple values' (type 7) + Add Gradle Module Metadata (https://blog.gradle.org/alignment-with-gradle-module-metadata) + (avro) Cache record names to avoid hitting class loader + (avro) Avro null deserialization + (ion) Add 'IonFactory.getIonSystem()' accessor + (avro) Add 'AvroGenerator.canWriteBinaryNatively()' to support binary writes, fix 'java.util.UUID' representation + (ion) Allow 'IonObjectMapper' with class name annotation introspector to deserialize generic subtypes + Remove dependencies upon Jackson 1.X and Avro's JacksonUtils + 'jackson-databind' should not be full dependency for (cbor, protobuf, smile) modules + 'CBORGenerator.Feature.WRITE_MINIMAL_INTS' does not write most compact form for all integers + 'AvroGenerator' overrides 'getOutputContext()' properly + (ion) Add 'IonFactory.getIonSystem()' accessor + (avro) Fix schema evolution involving maps of non-scalar + (protobuf) Parsing a protobuf message doesn't properly skip unknown fields + (ion) IonObjectMapper close()s the provided IonWriter unnecessarily + ion-java dependency 1.4.0 -> 1.5.1 Important SUSE bug 1177616 SUSE bug 1182481 SUSE bug 1197132 CVE-2020-25649 CVE-2020-28491 CVE-2020-36518 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 jaxen-1.1.6-150200.12.4.4 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the jaxen-1.1.6-150200.12.4.4 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2021-33813 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 jcl-over-slf4j-1.7.36-150200.3.4.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the jcl-over-slf4j-1.7.36-150200.3.4.3 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2018-8088 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 jetty-http-9.4.48-150200.3.16.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the jetty-http-9.4.48-150200.3.16.3 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2020-27218 CVE-2020-27223 CVE-2021-28163 CVE-2021-28164 CVE-2021-28165 CVE-2021-28169 CVE-2021-34429 CVE-2022-2047 CVE-2022-2048 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 jsr-305-3.0.2-150200.3.7.5 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 Maintenance update for SUSE Manager 4.2: Server, Proxy and Retail Branch Server This is a codestream only update Important SUSE bug 1179926 SUSE bug 1197027 SUSE bug 1206562 SUSE bug 1206973 SUSE bug 1207063 SUSE bug 1207308 SUSE bug 1207352 SUSE bug 1207490 SUSE bug 1207799 SUSE bug 1207829 SUSE bug 1207830 SUSE bug 1207838 SUSE bug 1207883 SUSE bug 1208288 SUSE bug 1208321 SUSE bug 1208325 SUSE bug 1208586 SUSE bug 1208687 SUSE bug 1208719 SUSE bug 1208772 SUSE bug 1208908 SUSE bug 1209369 SUSE bug 1209386 SUSE bug 1209434 SUSE bug 1209703 CVE-2020-8908 CVE-2022-0860 CVE-2023-22644 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 jython-2.2.1-150400.18.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the jython-2.2.1-150400.18.8 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2013-2027 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 kernel-docs-5.14.21-150500.53.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the kernel-docs-5.14.21-150500.53.2 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2016-3695 CVE-2017-1000251 CVE-2017-12153 CVE-2017-13080 CVE-2017-14051 CVE-2017-16536 CVE-2017-16537 CVE-2017-16646 CVE-2017-16648 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-10323 CVE-2018-12232 CVE-2018-13053 CVE-2018-20669 CVE-2019-0154 CVE-2019-0155 CVE-2019-10220 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-14615 CVE-2019-14814 CVE-2019-14815 CVE-2019-14816 CVE-2019-14895 CVE-2019-14896 CVE-2019-14897 CVE-2019-14901 CVE-2019-15030 CVE-2019-15031 CVE-2019-15098 CVE-2019-15099 CVE-2019-15290 CVE-2019-15291 CVE-2019-15504 CVE-2019-16231 CVE-2019-16232 CVE-2019-16233 CVE-2019-16234 CVE-2019-17133 CVE-2019-17666 CVE-2019-18198 CVE-2019-18660 CVE-2019-18683 CVE-2019-18786 CVE-2019-18808 CVE-2019-18809 CVE-2019-18811 CVE-2019-18812 CVE-2019-18813 CVE-2019-18814 CVE-2019-19037 CVE-2019-19043 CVE-2019-19044 CVE-2019-19045 CVE-2019-19046 CVE-2019-19047 CVE-2019-19048 CVE-2019-19049 CVE-2019-19050 CVE-2019-19051 CVE-2019-19052 CVE-2019-19053 CVE-2019-19054 CVE-2019-19055 CVE-2019-19056 CVE-2019-19057 CVE-2019-19058 CVE-2019-19060 CVE-2019-19061 CVE-2019-19062 CVE-2019-19063 CVE-2019-19064 CVE-2019-19065 CVE-2019-19066 CVE-2019-19067 CVE-2019-19068 CVE-2019-19069 CVE-2019-19070 CVE-2019-19071 CVE-2019-19072 CVE-2019-19073 CVE-2019-19074 CVE-2019-19075 CVE-2019-19077 CVE-2019-19078 CVE-2019-19080 CVE-2019-19081 CVE-2019-19082 CVE-2019-19083 CVE-2019-19241 CVE-2019-19252 CVE-2019-19332 CVE-2019-19338 CVE-2019-19447 CVE-2019-19462 CVE-2019-19523 CVE-2019-19524 CVE-2019-19525 CVE-2019-19526 CVE-2019-19528 CVE-2019-19529 CVE-2019-19532 CVE-2019-19533 CVE-2019-19534 CVE-2019-19602 CVE-2019-19767 CVE-2019-19768 CVE-2019-19769 CVE-2019-19770 CVE-2019-19807 CVE-2019-19922 CVE-2019-19947 CVE-2019-19965 CVE-2019-20422 CVE-2019-20810 CVE-2019-20812 CVE-2019-3016 CVE-2019-8912 CVE-2020-0110 CVE-2020-0305 CVE-2020-0404 CVE-2020-0427 CVE-2020-0431 CVE-2020-0432 CVE-2020-0444 CVE-2020-0465 CVE-2020-0466 CVE-2020-0543 CVE-2020-10135 CVE-2020-10690 CVE-2020-10711 CVE-2020-10732 CVE-2020-10751 CVE-2020-10757 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10773 CVE-2020-10781 CVE-2020-10942 CVE-2020-11494 CVE-2020-11608 CVE-2020-11668 CVE-2020-11884 CVE-2020-12351 CVE-2020-12352 CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-12373 CVE-2020-12464 CVE-2020-12465 CVE-2020-12652 CVE-2020-12653 CVE-2020-12654 CVE-2020-12655 CVE-2020-12656 CVE-2020-12657 CVE-2020-12659 CVE-2020-12769 CVE-2020-12770 CVE-2020-12771 CVE-2020-12888 CVE-2020-13143 CVE-2020-13974 CVE-2020-14314 CVE-2020-14331 CVE-2020-14351 CVE-2020-14356 CVE-2020-14385 CVE-2020-14386 CVE-2020-14390 CVE-2020-14416 CVE-2020-15393 CVE-2020-15436 CVE-2020-15437 CVE-2020-15780 CVE-2020-16119 CVE-2020-16120 CVE-2020-16166 CVE-2020-1749 CVE-2020-24490 CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-2521 CVE-2020-25211 CVE-2020-25212 CVE-2020-25284 CVE-2020-25285 CVE-2020-25639 CVE-2020-25641 CVE-2020-25643 CVE-2020-25645 CVE-2020-25656 CVE-2020-25668 CVE-2020-25669 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2020-25673 CVE-2020-25704 CVE-2020-25705 CVE-2020-26088 CVE-2020-26139 CVE-2020-26141 CVE-2020-26145 CVE-2020-26147 CVE-2020-26558 CVE-2020-27068 CVE-2020-27170 CVE-2020-27171 CVE-2020-27194 CVE-2020-2732 CVE-2020-27673 CVE-2020-27675 CVE-2020-27777 CVE-2020-27786 CVE-2020-27815 CVE-2020-27820 CVE-2020-27825 CVE-2020-27830 CVE-2020-27835 CVE-2020-28374 CVE-2020-28915 CVE-2020-28941 CVE-2020-28974 CVE-2020-29368 CVE-2020-29369 CVE-2020-29370 CVE-2020-29371 CVE-2020-29373 CVE-2020-29568 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-35519 CVE-2020-36158 CVE-2020-36310 CVE-2020-36311 CVE-2020-36312 CVE-2020-36322 CVE-2020-36385 CVE-2020-36386 CVE-2020-36516 CVE-2020-4788 CVE-2020-8428 CVE-2020-8647 CVE-2020-8648 CVE-2020-8649 CVE-2020-8694 CVE-2020-8835 CVE-2020-8992 CVE-2020-9383 CVE-2021-0129 CVE-2021-0342 CVE-2021-0512 CVE-2021-0605 CVE-2021-20177 CVE-2021-20268 CVE-2021-20321 CVE-2021-21781 CVE-2021-22543 CVE-2021-22555 CVE-2021-22600 CVE-2021-23134 CVE-2021-26341 CVE-2021-26930 CVE-2021-26931 CVE-2021-26932 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVE-2021-28038 CVE-2021-28375 CVE-2021-28660 CVE-2021-28688 CVE-2021-28711 CVE-2021-28712 CVE-2021-28713 CVE-2021-28714 CVE-2021-28715 CVE-2021-28950 CVE-2021-28952 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29265 CVE-2021-29647 CVE-2021-29650 CVE-2021-30002 CVE-2021-32399 CVE-2021-33034 CVE-2021-33061 CVE-2021-33135 CVE-2021-33200 CVE-2021-3347 CVE-2021-3348 CVE-2021-33624 CVE-2021-33655 CVE-2021-33909 CVE-2021-3428 CVE-2021-3444 CVE-2021-34556 CVE-2021-34693 CVE-2021-3483 CVE-2021-3489 CVE-2021-3490 CVE-2021-3491 CVE-2021-35039 CVE-2021-3542 CVE-2021-35477 CVE-2021-3573 CVE-2021-3609 CVE-2021-3612 CVE-2021-3640 CVE-2021-3653 CVE-2021-3656 CVE-2021-3659 CVE-2021-3679 CVE-2021-3732 CVE-2021-3739 CVE-2021-3743 CVE-2021-3744 CVE-2021-3753 CVE-2021-37576 CVE-2021-3759 CVE-2021-3760 CVE-2021-3764 CVE-2021-3772 CVE-2021-38160 CVE-2021-38166 CVE-2021-38198 CVE-2021-38204 CVE-2021-38205 CVE-2021-38206 CVE-2021-38207 CVE-2021-38209 CVE-2021-3896 CVE-2021-39685 CVE-2021-39698 CVE-2021-4001 CVE-2021-4002 CVE-2021-4037 CVE-2021-4083 CVE-2021-4090 CVE-2021-41073 CVE-2021-4135 CVE-2021-4148 CVE-2021-4155 CVE-2021-41864 CVE-2021-4197 CVE-2021-4202 CVE-2021-4204 CVE-2021-42252 CVE-2021-42327 CVE-2021-42739 CVE-2021-43056 CVE-2021-43057 CVE-2021-43267 CVE-2021-43389 CVE-2021-43975 CVE-2021-43976 CVE-2021-44733 CVE-2021-44879 CVE-2021-45095 CVE-2021-45402 CVE-2021-45480 CVE-2021-45868 CVE-2022-0001 CVE-2022-0002 CVE-2022-0168 CVE-2022-0171 CVE-2022-0185 CVE-2022-0264 CVE-2022-0322 CVE-2022-0330 CVE-2022-0382 CVE-2022-0435 CVE-2022-0487 CVE-2022-0492 CVE-2022-0494 CVE-2022-0500 CVE-2022-0516 CVE-2022-0617 CVE-2022-0644 CVE-2022-0742 CVE-2022-0847 CVE-2022-0854 CVE-2022-0886 CVE-2022-0995 CVE-2022-0998 CVE-2022-1011 CVE-2022-1012 CVE-2022-1015 CVE-2022-1016 CVE-2022-1048 CVE-2022-1055 CVE-2022-1158 CVE-2022-1184 CVE-2022-1195 CVE-2022-1198 CVE-2022-1199 CVE-2022-1204 CVE-2022-1205 CVE-2022-1263 CVE-2022-1280 CVE-2022-1462 CVE-2022-1508 CVE-2022-1516 CVE-2022-1651 CVE-2022-1652 CVE-2022-1671 CVE-2022-1679 CVE-2022-1729 CVE-2022-1734 CVE-2022-1789 CVE-2022-1836 CVE-2022-1852 CVE-2022-1882 CVE-2022-1966 CVE-2022-1972 CVE-2022-1974 CVE-2022-1975 CVE-2022-1998 CVE-2022-20008 CVE-2022-20132 CVE-2022-20154 CVE-2022-20368 CVE-2022-20369 CVE-2022-21123 CVE-2022-21125 CVE-2022-21127 CVE-2022-21166 CVE-2022-21180 CVE-2022-21499 CVE-2022-21505 CVE-2022-2153 CVE-2022-2196 CVE-2022-22942 CVE-2022-23036 CVE-2022-23037 CVE-2022-23038 CVE-2022-23039 CVE-2022-23040 CVE-2022-23041 CVE-2022-23042 CVE-2022-2318 CVE-2022-23222 CVE-2022-23960 CVE-2022-24122 CVE-2022-24448 CVE-2022-24958 CVE-2022-24959 CVE-2022-25258 CVE-2022-25375 CVE-2022-25636 CVE-2022-2585 CVE-2022-2586 CVE-2022-2588 CVE-2022-2602 CVE-2022-26365 CVE-2022-26373 CVE-2022-2639 CVE-2022-26490 CVE-2022-2663 CVE-2022-26878 CVE-2022-26966 CVE-2022-27223 CVE-2022-28356 CVE-2022-28388 CVE-2022-28389 CVE-2022-28390 CVE-2022-28693 CVE-2022-2873 CVE-2022-28748 CVE-2022-28893 CVE-2022-2905 CVE-2022-29156 CVE-2022-2938 CVE-2022-29581 CVE-2022-29582 CVE-2022-2959 CVE-2022-2964 CVE-2022-2977 CVE-2022-2978 CVE-2022-29900 CVE-2022-29901 CVE-2022-3028 CVE-2022-30594 CVE-2022-3078 CVE-2022-3104 CVE-2022-3105 CVE-2022-3106 CVE-2022-3107 CVE-2022-3108 CVE-2022-3111 CVE-2022-3112 CVE-2022-3113 CVE-2022-3114 CVE-2022-3115 CVE-2022-3169 CVE-2022-3176 CVE-2022-3202 CVE-2022-32250 CVE-2022-32296 CVE-2022-3239 CVE-2022-3303 CVE-2022-3344 CVE-2022-33740 CVE-2022-33741 CVE-2022-33742 CVE-2022-33743 CVE-2022-33981 CVE-2022-3424 CVE-2022-3435 CVE-2022-34918 CVE-2022-3521 CVE-2022-3523 CVE-2022-3524 CVE-2022-3526 CVE-2022-3535 CVE-2022-3542 CVE-2022-3545 CVE-2022-3564 CVE-2022-3565 CVE-2022-3566 CVE-2022-3567 CVE-2022-3577 CVE-2022-3586 CVE-2022-3594 CVE-2022-3619 CVE-2022-3621 CVE-2022-3625 CVE-2022-3628 CVE-2022-3629 CVE-2022-3633 CVE-2022-3635 CVE-2022-3640 CVE-2022-3643 CVE-2022-3646 CVE-2022-3649 CVE-2022-36879 CVE-2022-36946 CVE-2022-3707 CVE-2022-3903 CVE-2022-39188 CVE-2022-39189 CVE-2022-39190 CVE-2022-40476 CVE-2022-40768 CVE-2022-4095 CVE-2022-41218 CVE-2022-4129 CVE-2022-4139 CVE-2022-41674 CVE-2022-41848 CVE-2022-41849 CVE-2022-41850 CVE-2022-41858 CVE-2022-42328 CVE-2022-42329 CVE-2022-42703 CVE-2022-42719 CVE-2022-42720 CVE-2022-42721 CVE-2022-42722 CVE-2022-42895 CVE-2022-42896 CVE-2022-43750 CVE-2022-4378 CVE-2022-4379 CVE-2022-4382 CVE-2022-43945 CVE-2022-45869 CVE-2022-45888 CVE-2022-45934 CVE-2022-4662 CVE-2022-47520 CVE-2022-47929 CVE-2023-0266 CVE-2023-0386 CVE-2023-0468 CVE-2023-1078 CVE-2023-1281 CVE-2023-1380 CVE-2023-1990 CVE-2023-2008 CVE-2023-2019 CVE-2023-22995 CVE-2023-23454 CVE-2023-23455 CVE-2023-23559 CVE-2023-28328 CVE-2023-28466 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ldns fixes the following issues: - CVE-2020-19860: Fixed heap-based out of bounds read when verifying a zone file (bsc#1195057). - CVE-2020-19861: Fixed heap-based out of bounds read in ldns_nsec3_salt_data() (bsc#1195058). Moderate SUSE bug 1195057 SUSE bug 1195058 CVE-2020-19860 CVE-2020-19861 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libarchive fixes the following issues: - CVE-2021-31566: Fixed vulnerability where libarchive modifies file flags of symlink target (bsc#1192426) - Fixed issue where processing fixup entries may follow symbolic links (bsc#1192427). Moderate SUSE bug 1192426 SUSE bug 1192427 CVE-2021-31566 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcmark0_30_2-0.30.2-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcmark0_30_2-0.30.2-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2023-22486 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libebl-plugins-0.177-150300.11.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libebl-plugins-0.177-150300.11.6.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2014-9447 CVE-2017-7607 CVE-2017-7608 CVE-2017-7609 CVE-2017-7610 CVE-2017-7611 CVE-2017-7612 CVE-2017-7613 CVE-2018-16062 CVE-2018-16402 CVE-2018-16403 CVE-2018-18310 CVE-2018-18520 CVE-2018-18521 CVE-2019-7146 CVE-2019-7148 CVE-2019-7149 CVE-2019-7150 CVE-2019-7664 CVE-2019-7665 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libgit2 fixes the following issues: - CVE-2023-22742: Verify ssh remote host keys (bsc#1207364) Moderate SUSE bug 1207364 CVE-2023-22742 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libgit2-1_3-1.3.0-150400.3.6.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libgit2-1_3-1.3.0-150400.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2005-4900 CVE-2016-10128 CVE-2016-10129 CVE-2016-10130 CVE-2016-8568 CVE-2016-8569 CVE-2017-5338 CVE-2017-5339 CVE-2018-10887 CVE-2018-10888 CVE-2018-11235 CVE-2018-17456 CVE-2018-8098 CVE-2018-8099 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2022-24765 CVE-2022-29187 CVE-2023-22742 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libjavascriptcoregtk-5_0-0-2.38.6-150400.4.39.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libjavascriptcoregtk-5_0-0-2.38.6-150400.4.39.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2016-1856 CVE-2016-1857 CVE-2016-4590 CVE-2016-4591 CVE-2016-4622 CVE-2016-4624 CVE-2016-4692 CVE-2016-4743 CVE-2016-7586 CVE-2016-7587 CVE-2016-7589 CVE-2016-7592 CVE-2016-7598 CVE-2016-7599 CVE-2016-7610 CVE-2016-7623 CVE-2016-7632 CVE-2016-7635 CVE-2016-7639 CVE-2016-7641 CVE-2016-7645 CVE-2016-7652 CVE-2016-7654 CVE-2016-7656 CVE-2017-1000121 CVE-2017-1000122 CVE-2017-13788 CVE-2017-13798 CVE-2017-13803 CVE-2017-13856 CVE-2017-13866 CVE-2017-13870 CVE-2017-13884 CVE-2017-13885 CVE-2017-2350 CVE-2017-2354 CVE-2017-2355 CVE-2017-2356 CVE-2017-2362 CVE-2017-2363 CVE-2017-2364 CVE-2017-2365 CVE-2017-2366 CVE-2017-2369 CVE-2017-2371 CVE-2017-2373 CVE-2017-2496 CVE-2017-2510 CVE-2017-2538 CVE-2017-2539 CVE-2017-5715 CVE-2017-5753 CVE-2017-7006 CVE-2017-7011 CVE-2017-7012 CVE-2017-7018 CVE-2017-7019 CVE-2017-7020 CVE-2017-7030 CVE-2017-7034 CVE-2017-7037 CVE-2017-7038 CVE-2017-7039 CVE-2017-7040 CVE-2017-7041 CVE-2017-7042 CVE-2017-7043 CVE-2017-7046 CVE-2017-7048 CVE-2017-7049 CVE-2017-7052 CVE-2017-7055 CVE-2017-7056 CVE-2017-7059 CVE-2017-7061 CVE-2017-7064 CVE-2017-7081 CVE-2017-7087 CVE-2017-7089 CVE-2017-7090 CVE-2017-7091 CVE-2017-7092 CVE-2017-7093 CVE-2017-7094 CVE-2017-7095 CVE-2017-7096 CVE-2017-7098 CVE-2017-7099 CVE-2017-7100 CVE-2017-7102 CVE-2017-7104 CVE-2017-7107 CVE-2017-7109 CVE-2017-7111 CVE-2017-7117 CVE-2017-7120 CVE-2017-7142 CVE-2017-7153 CVE-2017-7156 CVE-2017-7157 CVE-2017-7160 CVE-2017-7161 CVE-2017-7165 CVE-2018-11646 CVE-2018-11712 CVE-2018-11713 CVE-2018-12911 CVE-2018-4088 CVE-2018-4096 CVE-2018-4101 CVE-2018-4113 CVE-2018-4114 CVE-2018-4117 CVE-2018-4118 CVE-2018-4119 CVE-2018-4120 CVE-2018-4122 CVE-2018-4125 CVE-2018-4127 CVE-2018-4128 CVE-2018-4129 CVE-2018-4133 CVE-2018-4146 CVE-2018-4161 CVE-2018-4162 CVE-2018-4163 CVE-2018-4165 CVE-2018-4190 CVE-2018-4191 CVE-2018-4197 CVE-2018-4199 CVE-2018-4200 CVE-2018-4204 CVE-2018-4207 CVE-2018-4208 CVE-2018-4209 CVE-2018-4210 CVE-2018-4212 CVE-2018-4213 CVE-2018-4218 CVE-2018-4222 CVE-2018-4232 CVE-2018-4233 CVE-2018-4246 CVE-2018-4261 CVE-2018-4262 CVE-2018-4263 CVE-2018-4264 CVE-2018-4265 CVE-2018-4266 CVE-2018-4267 CVE-2018-4270 CVE-2018-4272 CVE-2018-4273 CVE-2018-4278 CVE-2018-4284 CVE-2018-4299 CVE-2018-4306 CVE-2018-4309 CVE-2018-4312 CVE-2018-4314 CVE-2018-4315 CVE-2018-4316 CVE-2018-4317 CVE-2018-4318 CVE-2018-4319 CVE-2018-4323 CVE-2018-4328 CVE-2018-4345 CVE-2018-4358 CVE-2018-4359 CVE-2018-4361 CVE-2018-4372 CVE-2018-4373 CVE-2018-4375 CVE-2018-4376 CVE-2018-4378 CVE-2018-4382 CVE-2018-4386 CVE-2018-4392 CVE-2018-4416 CVE-2018-4437 CVE-2018-4438 CVE-2018-4441 CVE-2018-4442 CVE-2018-4443 CVE-2018-4464 CVE-2019-11070 CVE-2019-6201 CVE-2019-6212 CVE-2019-6215 CVE-2019-6216 CVE-2019-6217 CVE-2019-6226 CVE-2019-6227 CVE-2019-6229 CVE-2019-6233 CVE-2019-6234 CVE-2019-6251 CVE-2019-7285 CVE-2019-7292 CVE-2019-8375 CVE-2019-8503 CVE-2019-8506 CVE-2019-8515 CVE-2019-8518 CVE-2019-8523 CVE-2019-8524 CVE-2019-8535 CVE-2019-8536 CVE-2019-8544 CVE-2019-8551 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 CVE-2019-8595 CVE-2019-8607 CVE-2019-8615 CVE-2019-8625 CVE-2019-8644 CVE-2019-8649 CVE-2019-8658 CVE-2019-8666 CVE-2019-8669 CVE-2019-8671 CVE-2019-8672 CVE-2019-8673 CVE-2019-8674 CVE-2019-8676 CVE-2019-8677 CVE-2019-8678 CVE-2019-8679 CVE-2019-8680 CVE-2019-8681 CVE-2019-8683 CVE-2019-8684 CVE-2019-8686 CVE-2019-8687 CVE-2019-8688 CVE-2019-8689 CVE-2019-8690 CVE-2019-8707 CVE-2019-8710 CVE-2019-8719 CVE-2019-8720 CVE-2019-8726 CVE-2019-8733 CVE-2019-8735 CVE-2019-8743 CVE-2019-8763 CVE-2019-8764 CVE-2019-8765 CVE-2019-8766 CVE-2019-8768 CVE-2019-8769 CVE-2019-8771 CVE-2019-8782 CVE-2019-8783 CVE-2019-8808 CVE-2019-8811 CVE-2019-8812 CVE-2019-8813 CVE-2019-8814 CVE-2019-8815 CVE-2019-8816 CVE-2019-8819 CVE-2019-8820 CVE-2019-8821 CVE-2019-8822 CVE-2019-8823 CVE-2019-8835 CVE-2019-8844 CVE-2019-8846 CVE-2020-10018 CVE-2020-11793 CVE-2020-13543 CVE-2020-13558 CVE-2020-13584 CVE-2020-13753 CVE-2020-27918 CVE-2020-29623 CVE-2020-3862 CVE-2020-3864 CVE-2020-3865 CVE-2020-3867 CVE-2020-3868 CVE-2020-3885 CVE-2020-3894 CVE-2020-3895 CVE-2020-3897 CVE-2020-3899 CVE-2020-3900 CVE-2020-3901 CVE-2020-3902 CVE-2020-9802 CVE-2020-9803 CVE-2020-9805 CVE-2020-9806 CVE-2020-9807 CVE-2020-9843 CVE-2020-9850 CVE-2020-9862 CVE-2020-9893 CVE-2020-9894 CVE-2020-9895 CVE-2020-9915 CVE-2020-9925 CVE-2020-9947 CVE-2020-9948 CVE-2020-9951 CVE-2020-9952 CVE-2020-9983 CVE-2021-1765 CVE-2021-1788 CVE-2021-1789 CVE-2021-1799 CVE-2021-1801 CVE-2021-1817 CVE-2021-1820 CVE-2021-1825 CVE-2021-1826 CVE-2021-1844 CVE-2021-1870 CVE-2021-1871 CVE-2021-21775 CVE-2021-21779 CVE-2021-21806 CVE-2021-30661 CVE-2021-30663 CVE-2021-30665 CVE-2021-30666 CVE-2021-30682 CVE-2021-30689 CVE-2021-30720 CVE-2021-30734 CVE-2021-30744 CVE-2021-30749 CVE-2021-30758 CVE-2021-30761 CVE-2021-30762 CVE-2021-30795 CVE-2021-30797 CVE-2021-30799 CVE-2021-30809 CVE-2021-30818 CVE-2021-30823 CVE-2021-30836 CVE-2021-30846 CVE-2021-30848 CVE-2021-30849 CVE-2021-30851 CVE-2021-30858 CVE-2021-30884 CVE-2021-30887 CVE-2021-30888 CVE-2021-30889 CVE-2021-30890 CVE-2021-30897 CVE-2021-30934 CVE-2021-30936 CVE-2021-30951 CVE-2021-30952 CVE-2021-30953 CVE-2021-30954 CVE-2021-30984 CVE-2021-42762 CVE-2021-45481 CVE-2021-45482 CVE-2021-45483 CVE-2022-0108 CVE-2022-22589 CVE-2022-22590 CVE-2022-22592 CVE-2022-22594 CVE-2022-22620 CVE-2022-22624 CVE-2022-22628 CVE-2022-22629 CVE-2022-22637 CVE-2022-22662 CVE-2022-22677 CVE-2022-26700 CVE-2022-26709 CVE-2022-26710 CVE-2022-26716 CVE-2022-26717 CVE-2022-26719 CVE-2022-30293 CVE-2022-32792 CVE-2022-32816 CVE-2022-32885 CVE-2022-32886 CVE-2022-32888 CVE-2022-32893 CVE-2022-32912 CVE-2022-32923 CVE-2022-42799 CVE-2022-42823 CVE-2022-42824 CVE-2022-42826 CVE-2022-42852 CVE-2022-42856 CVE-2022-42863 CVE-2022-42867 CVE-2022-46691 CVE-2022-46692 CVE-2022-46698 CVE-2022-46699 CVE-2022-46700 CVE-2023-23517 CVE-2023-23518 CVE-2023-23529 CVE-2023-25358 CVE-2023-25360 CVE-2023-25361 CVE-2023-25362 CVE-2023-25363 CVE-2023-27932 CVE-2023-27954 CVE-2023-28205 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libpcp-devel-5.2.5-150400.5.3.11 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libpcp-devel-5.2.5-150400.5.3.11 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2019-3695 CVE-2019-3696 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libprotoc20-3.9.2-150200.4.19.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libprotoc20-3.9.2-150200.4.19.2 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2021-22569 CVE-2021-22570 CVE-2022-1941 CVE-2022-3171 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtdsodbc0-1.1.36-150400.12.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libtdsodbc0-1.1.36-150400.12.3 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2019-13508 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libtidy-devel-5.4.0-3.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libtidy-devel-5.4.0-3.2.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2015-5522 CVE-2015-5523 CVE-2016-6583 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for log4j12 fixes the following issues: - CVE-2022-23307: Fix deserialization issue by removing the chainsaw sub-package. (bsc#1194844) - CVE-2022-23305: Fix SQL injection by removing src/main/java/org/apache/log4j/jdbc/JDBCAppender.java. (bsc#1194843) - CVE-2022-23302: Fix remote code execution by removing src/main/java/org/apache/log4j/net/JMSSink.java. (bsc#1194842) Important SUSE bug 1193184 SUSE bug 1194842 SUSE bug 1194843 SUSE bug 1194844 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 log4j12-javadoc-1.2.17-4.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the log4j12-javadoc-1.2.17-4.9.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2017-5645 CVE-2019-17571 CVE-2021-4104 CVE-2022-23302 CVE-2022-23305 CVE-2022-23307 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 maven-3.8.6-150200.4.9.8 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) Important SUSE bug 1193795 CVE-2021-42550 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) Important SUSE bug 1193795 CVE-2021-42550 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 nasm-2.15.05-150500.1.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the nasm-2.15.05-150500.1.2 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2017-10686 CVE-2017-11111 CVE-2017-14228 CVE-2017-17810 CVE-2017-17811 CVE-2017-17812 CVE-2017-17813 CVE-2017-17814 CVE-2017-17815 CVE-2017-17816 CVE-2017-17817 CVE-2017-17818 CVE-2017-17819 CVE-2017-17820 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ncurses fixes the following issues: - CVE-2021-39537: Fixed an heap-based buffer overflow in _nc_captoinfo. (bsc#1190793) Moderate SUSE bug 1190793 CVE-2021-39537 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ncurses-devel-32bit-6.1-150000.5.15.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ncurses-devel-32bit-6.1-150000.5.15.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2018-19211 CVE-2019-17594 CVE-2019-17595 CVE-2021-39537 CVE-2022-29458 CVE-2023-29491 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for netty, netty-tcnative fixes the following issues: netty: - Security fixes included in this version update from 4.1.75 to 4.1.90: * CVE-2022-24823: Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files for Java 6 and lower in io.netty:netty-codec-http (bsc#1199338) * CVE-2022-41881: HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360) * CVE-2022-41915: HTTP Response splitting from assigning header value iterator (bsc#1206379) - Other non-security bug fixes included in this version update from 4.1.75 to 4.1.90: * Build with Java 11 on ix86 architecture in order to avoid build failures * Fix `HttpHeaders.names` for non-String headers * Fix `FlowControlHandler` behaviour to pass read events when auto-reading is turned off * Fix brotli compression * Fix a bug in FlowControlHandler that broke auto-read * Fix a potential memory leak bug has been in the pooled allocator * Fix a scalability issue caused by instanceof and check-cast checks that lead to false-sharing on the `Klass::secondary_super_cache` field in the JVM * Fix a bug in our `PEMParser` when PEM files have multiple objects, and `BouncyCastle` is on the classpath * Fix several `NullPointerException` bugs * Fix a regression `SslContext` private key loading * Fix a bug in `SslContext` private key reading fall-back path * Fix a buffer leak regression in `HttpClientCodec` * Fix a bug where some `HttpMessage` implementations, that also implement `HttpContent`, were not handled correctly * Fix epoll bug when receiving zero-sized datagrams * Fix a bug in `SslHandler` so `handlerRemoved` works properly even if `handlerAdded` throws an exception * Fix an issue that allowed the multicast methods on `EpollDatagramChannel` to be called outside of an event-loop thread * Fix a bug where an OPT record was added to DNS queries that already had such a record * Fix a bug that caused an error when files uploaded with HTTP POST contained a backslash in their name * Fix an issue in the `BlockHound` integration that could occasionally cause NetUtil to be reported as performing blocking operation. A similar `BlockHound` issue was fixed for the `JdkSslContext` * Fix a bug that prevented preface or settings frames from being flushed, when an HTTP2 connection was established with prior-knowledge * Fix a bug where Netty fails to load a shaded native library * Fix and relax overly strict HTTP/2 header validation check that was rejecting requests from Chrome and Firefox * Fix OpenSSL and BoringSSL implementations to respect the `jdk.tls.client.protocols` and `jdk.tls.server.protocols` system properties, making them react to these in the same way the JDK SSL provider does * Fix inconsitencies in how `epoll`, `kqueue`, and `NIO` handle RDHUP * For a more detailed list of changes please consult the official release notes: + Changes from 4.1.90: https://netty.io/news/2023/03/14/4-1-90-Final.html + Changes from 4.1.89: https://netty.io/news/2023/02/13/4-1-89-Final.html + Changes from 4.1.88: https://netty.io/news/2023/02/12/4-1-88-Final.html + Changes from 4.1.87: https://netty.io/news/2023/01/12/4-1-87-Final.html + Changes from 4.1.86: https://netty.io/news/2022/12/12/4-1-86-Final.html + Changes from 4.1.85: https://netty.io/news/2022/11/09/4-1-85-Final.html + Changes from 4.1.84: https://netty.io/news/2022/10/11/4-1-84-Final.html + Changes from 4.1.82: https://netty.io/news/2022/09/13/4-1-82-Final.html + Changes from 4.1.81: https://netty.io/news/2022/09/08/4-1-81-Final.html + Changes from 4.1.80: https://netty.io/news/2022/08/26/4-1-80-Final.html + Changes from 4.1.79: https://netty.io/news/2022/07/11/4-1-79-Final.html + Changes from 4.1.78: https://netty.io/news/2022/06/14/4-1-78-Final.html + Changes from 4.1.77: https://netty.io/news/2022/05/06/2-1-77-Final.html + Changes from 4.1.76: https://netty.io/news/2022/04/12/4-1-76-Final.html netty-tcnative: - New artifact named `netty-tcnative-classes`, provided by this update is required by netty 4.1.90 which contains important security updates - No formal changelog present. This artifact is closely bound to the netty releases Important SUSE bug 1199338 SUSE bug 1206360 SUSE bug 1206379 CVE-2022-24823 CVE-2022-41881 CVE-2022-41915 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gcc10, nvptx-tools fixes the following issues: This update provides the GCC10 compiler suite and runtime libraries. The base SUSE Linux Enterprise libraries libgcc_s1, libstdc++6 are replaced by the gcc10 variants. The new compiler variants are available with '-10' suffix, you can specify them via: CC=gcc-10 CXX=g++-10 or similar commands. For a detailed changelog check out https://gcc.gnu.org/gcc-10/changes.html Changes in nvptx-tools: - Enable build on aarch64 Moderate SUSE bug 1172798 SUSE bug 1172846 SUSE bug 1173972 SUSE bug 1174753 SUSE bug 1174817 SUSE bug 1175168 CVE-2020-13844 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ocaml-4.05.0-13.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ocaml-4.05.0-13.5 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2015-8869 CVE-2017-9772 CVE-2018-9838 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 ocaml-hivex-1.3.21-150400.2.10 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the ocaml-hivex-1.3.21-150400.2.10 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2021-3504 CVE-2021-3622 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openldap2 fixes the following issues: - CVE-2022-29155: Fixed SQL injection in back-sql (bsc#1199240). Important SUSE bug 1199240 CVE-2022-29155 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 openldap2-devel-32bit-2.4.46-150200.14.11.2 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the openldap2-devel-32bit-2.4.46-150200.14.11.2 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2015-1545 CVE-2015-1546 CVE-2015-6908 CVE-2017-17740 CVE-2019-13057 CVE-2019-13565 CVE-2020-12243 CVE-2020-15719 CVE-2020-25692 CVE-2020-25709 CVE-2020-25710 CVE-2020-36221 CVE-2020-36222 CVE-2020-36223 CVE-2020-36224 CVE-2020-36225 CVE-2020-36226 CVE-2020-36227 CVE-2020-36228 CVE-2020-36229 CVE-2020-36230 CVE-2020-8023 CVE-2020-8027 CVE-2021-27212 CVE-2022-29155 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 pam-devel-32bit-1.3.0-150000.6.61.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the pam-devel-32bit-1.3.0-150000.6.61.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2015-3238 CVE-2018-17953 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-Archive-Extract-0.80-1.24 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-Archive-Extract-0.80-1.24 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2016-1238 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for git fixes the following issues: Security issues fixed: - CVE-2019-1349: Fixed issue on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice (bsc#1158787). - CVE-2019-19604: Fixed a recursive clone followed by a submodule update could execute code contained within the repository without the user explicitly having asked for that (bsc#1158795). - CVE-2019-1387: Fixed recursive clones that are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones (bsc#1158793). - CVE-2019-1354: Fixed issue on Windows that refuses to write tracked files with filenames that contain backslashes (bsc#1158792). - CVE-2019-1353: Fixed issue when run in the Windows Subsystem for Linux while accessing a working directory on a regular Windows drive, none of the NTFS protections were active (bsc#1158791). - CVE-2019-1352: Fixed issue on Windows was unaware of NTFS Alternate Data Streams (bsc#1158790). - CVE-2019-1351: Fixed issue on Windows mistakes drive letters outside of the US-English alphabet as relative paths (bsc#1158789). - CVE-2019-1350: Fixed incorrect quoting of command-line arguments allowed remote code execution during a recursive clone in conjunction with SSH URLs (bsc#1158788). - CVE-2019-1348: Fixed the --export-marks option of fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths (bsc#1158785). - Fixes an issue where git send-email failed to authenticate with SMTP server (bsc#1082023) Bug fixes: - Add zlib dependency, which used to be provided by openssl-devel, so that package can compile successfully after openssl upgrade to 1.1.1. (bsc#1149792). Important SUSE bug 1082023 SUSE bug 1149792 SUSE bug 1158785 SUSE bug 1158787 SUSE bug 1158788 SUSE bug 1158789 SUSE bug 1158790 SUSE bug 1158791 SUSE bug 1158792 SUSE bug 1158793 SUSE bug 1158795 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2019-19604 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-Config-IniFiles-2.94-1.23 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-Config-IniFiles-2.94-1.23 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2012-2451 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-DNS-LDNS-1.7.0-150000.4.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-DNS-LDNS-1.7.0-150000.4.8.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2017-1000231 CVE-2017-1000232 CVE-2020-19860 CVE-2020-19861 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.13.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-Mail-SpamAssassin-Plugin-iXhash2-2.05-12.13.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2016-1238 CVE-2017-15705 CVE-2018-11780 CVE-2018-11781 CVE-2018-11805 CVE-2019-12420 CVE-2020-1930 CVE-2020-1931 CVE-2020-1946 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-Net-Libproxy-0.4.17-150400.1.21 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-Net-Libproxy-0.4.17-150400.1.21 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2020-25219 CVE-2020-26154 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for git fixes the following issues: Security issues fixed: - CVE-2019-1349: Fixed issue on Windows, when submodules are cloned recursively, under certain circumstances Git could be fooled into using the same Git directory twice (bsc#1158787). - CVE-2019-19604: Fixed a recursive clone followed by a submodule update could execute code contained within the repository without the user explicitly having asked for that (bsc#1158795). - CVE-2019-1387: Fixed recursive clones that are currently affected by a vulnerability that is caused by too-lax validation of submodule names, allowing very targeted attacks via remote code execution in recursive clones (bsc#1158793). - CVE-2019-1354: Fixed issue on Windows that refuses to write tracked files with filenames that contain backslashes (bsc#1158792). - CVE-2019-1353: Fixed issue when run in the Windows Subsystem for Linux while accessing a working directory on a regular Windows drive, none of the NTFS protections were active (bsc#1158791). - CVE-2019-1352: Fixed issue on Windows was unaware of NTFS Alternate Data Streams (bsc#1158790). - CVE-2019-1351: Fixed issue on Windows mistakes drive letters outside of the US-English alphabet as relative paths (bsc#1158789). - CVE-2019-1350: Fixed incorrect quoting of command-line arguments allowed remote code execution during a recursive clone in conjunction with SSH URLs (bsc#1158788). - CVE-2019-1348: Fixed the --export-marks option of fast-import is exposed also via the in-stream command feature export-marks=... and it allows overwriting arbitrary paths (bsc#1158785). - Fixes an issue where git send-email failed to authenticate with SMTP server (bsc#1082023) Bug fixes: - Add zlib dependency, which used to be provided by openssl-devel, so that package can compile successfully after openssl upgrade to 1.1.1. (bsc#1149792). Important SUSE bug 1082023 SUSE bug 1149792 SUSE bug 1158785 SUSE bug 1158787 SUSE bug 1158788 SUSE bug 1158789 SUSE bug 1158790 SUSE bug 1158791 SUSE bug 1158792 SUSE bug 1158793 SUSE bug 1158795 CVE-2019-1348 CVE-2019-1349 CVE-2019-1350 CVE-2019-1351 CVE-2019-1352 CVE-2019-1353 CVE-2019-1354 CVE-2019-1387 CVE-2019-19604 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-PerlMagick-7.1.0.9-150400.6.18.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-PerlMagick-7.1.0.9-150400.6.18.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2016-3714 CVE-2016-3715 CVE-2016-3716 CVE-2016-3717 CVE-2016-3718 CVE-2016-5118 CVE-2018-10805 CVE-2018-11624 CVE-2018-11625 CVE-2018-12599 CVE-2018-12600 CVE-2018-14434 CVE-2018-14435 CVE-2018-14436 CVE-2018-14437 CVE-2018-16323 CVE-2018-16328 CVE-2018-16329 CVE-2018-16412 CVE-2018-16413 CVE-2018-16640 CVE-2018-16641 CVE-2018-16642 CVE-2018-16643 CVE-2018-16644 CVE-2018-16645 CVE-2018-17966 CVE-2018-18024 CVE-2018-18544 CVE-2018-20467 CVE-2018-9135 CVE-2019-10650 CVE-2019-11007 CVE-2019-11008 CVE-2019-11470 CVE-2019-11472 CVE-2019-11505 CVE-2019-11506 CVE-2019-11597 CVE-2019-11598 CVE-2019-12974 CVE-2019-12975 CVE-2019-12976 CVE-2019-12977 CVE-2019-12978 CVE-2019-12979 CVE-2019-13133 CVE-2019-13134 CVE-2019-13135 CVE-2019-13136 CVE-2019-13137 CVE-2019-13295 CVE-2019-13296 CVE-2019-13297 CVE-2019-13298 CVE-2019-13299 CVE-2019-13300 CVE-2019-13301 CVE-2019-13302 CVE-2019-13303 CVE-2019-13304 CVE-2019-13305 CVE-2019-13306 CVE-2019-13307 CVE-2019-13308 CVE-2019-13309 CVE-2019-13310 CVE-2019-13311 CVE-2019-13391 CVE-2019-13454 CVE-2019-14980 CVE-2019-14981 CVE-2019-15139 CVE-2019-15140 CVE-2019-15141 CVE-2019-16708 CVE-2019-16709 CVE-2019-16710 CVE-2019-16711 CVE-2019-16712 CVE-2019-16713 CVE-2019-19948 CVE-2019-19949 CVE-2019-7175 CVE-2019-7395 CVE-2019-7396 CVE-2019-7397 CVE-2019-7398 CVE-2019-9956 CVE-2020-19667 CVE-2020-25664 CVE-2020-25665 CVE-2020-25666 CVE-2020-25674 CVE-2020-25675 CVE-2020-25676 CVE-2020-27560 CVE-2020-27750 CVE-2020-27751 CVE-2020-27752 CVE-2020-27753 CVE-2020-27754 CVE-2020-27755 CVE-2020-27756 CVE-2020-27757 CVE-2020-27758 CVE-2020-27759 CVE-2020-27760 CVE-2020-27761 CVE-2020-27762 CVE-2020-27763 CVE-2020-27764 CVE-2020-27765 CVE-2020-27766 CVE-2020-27767 CVE-2020-27768 CVE-2020-27769 CVE-2020-27770 CVE-2020-27771 CVE-2020-27772 CVE-2020-27773 CVE-2020-27774 CVE-2020-27775 CVE-2020-27776 CVE-2020-29599 CVE-2021-20241 CVE-2021-20243 CVE-2021-20244 CVE-2021-20246 CVE-2021-20311 CVE-2021-20312 CVE-2021-20313 CVE-2021-4219 CVE-2022-0284 CVE-2022-1114 CVE-2022-1115 CVE-2022-2719 CVE-2022-28463 CVE-2022-3213 CVE-2022-32545 CVE-2022-32546 CVE-2022-32547 CVE-2022-44267 CVE-2022-44268 CVE-2023-1289 CVE-2023-1906 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for slurm to version 18.08.8 fixes the following issues: Security issue fixed: - CVE-2019-12838: Fixed a SQL injection in slurmdbd (bsc#1140709). Important SUSE bug 1140709 CVE-2019-12838 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-YAML-LibYAML-0.69-150000.3.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for perl-YAML-LibYAML fixes the following issues: perl-YAML-LibYAML was updated to 0.69: [bsc#1173703] * Security fix: Add $LoadBlessed option to turn on/off loading objects: Default is set to true. Note that, the behavior is unchanged. * Clarify documentation about exported functions * Dump() was modifying original data, adding a PV to numbers * Support standard tags !!str, !!map and !!seq instead of dying. * Support JSON::PP::Boolean and boolean.pm via $YAML::XS::Boolean. * Fix regex roundtrip. Fix loading of many regexes. Moderate SUSE bug 1173703 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-apparmor-3.0.4-150500.9.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-apparmor-3.0.4-150500.9.3 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2017-6507 CVE-2022-1271 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-doc-5.26.1-150300.17.11.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-doc-5.26.1-150300.17.11.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2017-12837 CVE-2017-12883 CVE-2017-6512 CVE-2018-12015 CVE-2018-18311 CVE-2018-18312 CVE-2018-18313 CVE-2018-18314 CVE-2020-10543 CVE-2020-10878 CVE-2020-12723 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 perl-solv-0.7.23-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the perl-solv-0.7.23-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 policycoreutils-devel-3.1-150400.1.5 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the policycoreutils-devel-3.1-150400.1.5 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2016-7545 CVE-2018-1063 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for file fixes the following issues: Security issues fixed: - CVE-2019-18218: Fixed a heap-based buffer overflow in cdf_read_property_info() (bsc#1154661). Non-security issue fixed: - Fixed broken '--help' output (bsc#1169512). Moderate SUSE bug 1154661 SUSE bug 1169512 CVE-2019-18218 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-ujson fixes the following issues: - CVE-2021-45958: Fixed a stack-based buffer overflow in Buffer_AppendIndentUnchecked (bsc#1194261). Moderate SUSE bug 1194261 CVE-2021-45958 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-tools-3.6.15-150300.10.45.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-tools-3.6.15-150300.10.45.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2014-4650 CVE-2015-20107 CVE-2016-0772 CVE-2016-1000110 CVE-2016-5636 CVE-2016-5699 CVE-2017-18207 CVE-2018-1000802 CVE-2018-1060 CVE-2018-1061 CVE-2018-14647 CVE-2018-20406 CVE-2018-20852 CVE-2019-10160 CVE-2019-15903 CVE-2019-16056 CVE-2019-16935 CVE-2019-18348 CVE-2019-20907 CVE-2019-20916 CVE-2019-5010 CVE-2019-9636 CVE-2019-9674 CVE-2019-9947 CVE-2020-10735 CVE-2020-14422 CVE-2020-26116 CVE-2020-27619 CVE-2020-8492 CVE-2021-23336 CVE-2021-28861 CVE-2021-3177 CVE-2021-3426 CVE-2021-3572 CVE-2021-3733 CVE-2021-3737 CVE-2022-25236 CVE-2022-37454 CVE-2022-45061 CVE-2023-24329 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-ujson-1.35-150100.3.8.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-ujson-1.35-150100.3.8.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2021-45958 CVE-2022-31116 CVE-2022-31117 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python3 fixes the following issues: - CVE-2023-24329: Fixed a blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). The following non-security bug was fixed: - Eliminate unnecessary and dangerous calls to PyThread_exit_thread() (bsc#1203355). Important SUSE bug 1203355 SUSE bug 1208471 CVE-2023-24329 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 rpm-build-4.14.3-150300.55.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the rpm-build-4.14.3-150300.55.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2017-7500 CVE-2021-20266 CVE-2021-20271 CVE-2021-3421 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 sccache-0.3.0~git5.14a4b8b-150300.7.9.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for sccache fixes the following issues: Updated to version 0.3.0: - CVE-2022-24713: Fixed Regex denial of service (bsc#1196972). - CVE-2021-45710: Fixed tokio data race with memory corruption (bsc#1194119). - Added hardening to systemd service(s) (bsc#1181400). Moderate SUSE bug 1181400 SUSE bug 1194119 SUSE bug 1196972 CVE-2021-45710 CVE-2022-24713 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for spamassassin fixes the following issues: Security issues fixed: - CVE-2018-11805: Fixed an issue with delimiter handling in rule files related to is_regexp_valid() (bsc#1118987). - CVE-2020-1930: Fixed an issue with rule configuration (.cf) files which can be configured to run system commands (bsc#1162197). - CVE-2020-1931: Fixed an issue with rule configuration (.cf) files which can be configured to run system commands with warnings (bsc#1162200). Non-security issue fixed: - Altering hash requires restarting loop (bsc#862963). Important SUSE bug 1118987 SUSE bug 1162197 SUSE bug 1162200 SUSE bug 862963 CVE-2018-11805 CVE-2020-1930 CVE-2020-1931 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 subversion-bash-completion-1.14.1-150400.3.8 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the subversion-bash-completion-1.14.1-150400.3.8 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2014-3580 CVE-2014-8108 CVE-2015-0202 CVE-2015-0248 CVE-2015-0251 CVE-2015-3184 CVE-2015-3187 CVE-2015-5259 CVE-2015-5343 CVE-2016-2167 CVE-2016-2168 CVE-2016-8734 CVE-2017-9800 CVE-2018-11782 CVE-2018-11803 CVE-2019-0203 CVE-2020-17525 CVE-2021-28544 CVE-2022-24070 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 testng-7.4.0-150200.3.7.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for testng fixes the following issues: - CVE-2022-4065: Fixed a path traversal in zip files (bsc#1205628). Important SUSE bug 1205628 CVE-2022-4065 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7 fixes the following issues: - CVE-2020-7064: Fixed a one byte read of uninitialized memory in exif_read_data() (bsc#1168326). - CVE-2020-7066: Fixed URL truncation get_headers() if the URL contains zero (\0) character (bsc#1168352). Moderate SUSE bug 1168326 SUSE bug 1168352 CVE-2020-7064 CVE-2020-7066 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 valgrind-3.20.0-150500.2.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the valgrind-3.20.0-150500.2.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2016-6131 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 velocity-1.7-150200.3.7.3 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for velocity fixes the following issues: - CVE-2020-13936: Fixed an arbitrary code execution when attacker is able to modify templates (bsc#1183360). Important SUSE bug 1183360 CVE-2020-13936 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: Update to version 2.38.6 (bsc#1210731): - CVE-2022-0108: Fixed information leak. - CVE-2022-32885: Fixed arbitrary code execution. - CVE-2023-25358: Fixed use-after-free vulnerability in WebCore::RenderLayer. - CVE-2023-27932: Fixed Same Origin Policy bypass. - CVE-2023-27954: Fixed sensitive user information tracking. - CVE-2023-28205: Fixed arbitrary code execution (bsc#1210295). Already fixed in version 2.38.5: - CVE-2022-32886, CVE-2022-32912, CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363. Important SUSE bug 1210295 SUSE bug 1210731 CVE-2022-0108 CVE-2022-32885 CVE-2022-32886 CVE-2022-32912 CVE-2023-25358 CVE-2023-25360 CVE-2023-25361 CVE-2023-25362 CVE-2023-25363 CVE-2023-27932 CVE-2023-27954 CVE-2023-28205 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) Important SUSE bug 1193795 CVE-2021-42550 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) Important SUSE bug 1193795 CVE-2021-42550 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) Important SUSE bug 1193795 CVE-2021-42550 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) Important SUSE bug 1193795 CVE-2021-42550 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) Important SUSE bug 1193795 CVE-2021-42550 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 xorg-x11-server-sdk-21.1.4-150500.5.1 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the xorg-x11-server-sdk-21.1.4-150500.5.1 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2015-3164 CVE-2017-10971 CVE-2017-10972 CVE-2017-12176 CVE-2017-12187 CVE-2017-13721 CVE-2017-13723 CVE-2017-2624 CVE-2018-14665 CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 CVE-2020-14360 CVE-2020-14361 CVE-2020-14362 CVE-2020-25712 CVE-2021-3472 CVE-2021-4008 CVE-2021-4009 CVE-2021-4010 CVE-2021-4011 CVE-2022-2319 CVE-2022-2320 CVE-2022-3550 CVE-2022-3551 CVE-2022-4283 CVE-2022-46340 CVE-2022-46341 CVE-2022-46342 CVE-2022-46343 CVE-2022-46344 CVE-2023-0494 CVE-2023-1393 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 xstream-1.4.20-150200.3.25.1 on GA media (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xstream fixes the following issues: - CVE-2022-40151: Fixed stackoverflow in XML serialization (bsc#1203520). - CVE-2022-41966: Fixed denial of service via uncontrolled recursion during deserialization (bsc#1206729). - Upgrade to 1.4.20. Important SUSE bug 1203520 SUSE bug 1206729 CVE-2022-40151 CVE-2022-41966 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 zlib-devel-32bit-1.2.13-150500.2.3 on GA media (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the zlib-devel-32bit-1.2.13-150500.2.3 package on the GA media of SUSE Linux Enterprise Module for Development Tools 15 SP5. Moderate CVE-2016-9843 CVE-2018-25032 CVE-2022-37434 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for HPC 15 SP5 This update for python-numpy fixes the following issues: - CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911). Moderate SUSE bug 1193911 CVE-2021-41495 cpe:/o:suse:sle-module-hpc:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 apache2-mod_php7-7.4.33-150400.4.22.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the apache2-mod_php7-7.4.33-150400.4.22.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2014-3622 CVE-2014-3668 CVE-2014-3669 CVE-2014-3670 CVE-2014-9426 CVE-2014-9427 CVE-2015-0231 CVE-2015-0232 CVE-2015-0235 CVE-2015-0273 CVE-2015-1351 CVE-2015-1352 CVE-2015-2305 CVE-2015-2325 CVE-2015-2326 CVE-2015-2331 CVE-2015-3152 CVE-2015-3414 CVE-2015-3415 CVE-2015-3416 CVE-2017-9120 CVE-2018-1000222 CVE-2018-1000888 CVE-2018-12882 CVE-2018-14851 CVE-2018-17082 CVE-2018-19935 CVE-2018-20783 CVE-2019-11034 CVE-2019-11035 CVE-2019-11036 CVE-2019-11039 CVE-2019-11040 CVE-2019-11041 CVE-2019-11042 CVE-2019-11043 CVE-2019-11045 CVE-2019-11046 CVE-2019-11047 CVE-2019-11050 CVE-2019-9020 CVE-2019-9021 CVE-2019-9022 CVE-2019-9023 CVE-2019-9024 CVE-2019-9637 CVE-2019-9638 CVE-2019-9639 CVE-2019-9640 CVE-2019-9641 CVE-2019-9675 CVE-2020-7062 CVE-2020-7063 CVE-2020-7068 CVE-2020-7069 CVE-2020-7070 CVE-2020-7071 CVE-2021-21702 CVE-2021-21703 CVE-2021-21704 CVE-2021-21705 CVE-2021-21706 CVE-2021-21707 CVE-2021-21708 CVE-2022-31625 CVE-2022-31626 CVE-2022-31628 CVE-2022-31629 CVE-2022-31630 CVE-2022-31631 CVE-2022-37454 CVE-2022-4900 CVE-2023-0567 CVE-2023-0568 CVE-2023-0662 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 cyrus-sasl-bdb-2.1.28-150500.1.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the cyrus-sasl-bdb-2.1.28-150500.1.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2019-19906 CVE-2020-8032 CVE-2022-24407 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 dpdk-19.11.10-150500.3.37 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the dpdk-19.11.10-150500.3.37 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2018-1059 CVE-2019-14818 CVE-2020-10722 CVE-2020-10723 CVE-2020-10724 CVE-2020-10725 CVE-2020-10726 CVE-2020-14374 CVE-2020-14375 CVE-2020-14376 CVE-2020-14377 CVE-2020-14378 CVE-2021-3839 CVE-2022-0669 CVE-2022-2132 CVE-2022-28199 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 gv-3.7.4-1.41 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the gv-3.7.4-1.41 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2012-3386 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for icu fixes the following issues: - CVE-2020-10531: Fixed a potential integer overflow in UnicodeString:doAppend (bsc#1166844). Important SUSE bug 1166844 CVE-2020-10531 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 java-1_8_0-ibm-1.8.0_sr8.0-150000.3.71.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 (bsc#1208480): * Security fixes: - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249). - CVE-2023-21835: Fixed handshake DoS attack against DTLS connections (bsc#1207246). - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248). * New Features/Enhancements: - Add RSA-PSS signature to IBMJCECCA. * Defect Fixes: - IJ45437 Service, Build, Packaging and Deliver: Getting FIPSRUNTIMEEXCEPTION when calling java code: MESSAGEDIGEST.GETINSTANCE('SHA256', 'IBMJCEFIPS'); in MAC - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843 - IJ45280 Class Libraries: Update timezone information to the latest TZDATA2022F - IJ44896 Class Libraries: Update timezone information to the latest TZDATA2022G - IJ45436 Java Virtual Machine: Stack walking code gets into endless loop, hanging the application - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified multiple times on the same command line the first option takes precedence instead of the last - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT() due to a NULL pointer - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static final field object properties - IJ44107 JIT Compiler: JIT publishes new object reference to other threads without executing a memory flush - IX90193 ORB: Fix security vulnerability CVE-2023-21830 - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has similar error of JDK-8253368 - IJ45148 Security: code changes for tech preview - IJ44621 Security: Computing Diffie-Hellman secret repeatedly, using IBMJCEPLUS, causes a small memory leak - IJ44172 Security: Disable SHA-1 signed jars for EA - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly, using IBMJCEPLUS, Causes a small memory leak - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305 crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA during signature operations resulting in Java cores - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain a SUBJECTKEYIDENTIFIER extension - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY() method uses SHA1XXXX signature algorithms to match private and public keys - IJ45203 Security: RSAPSS multiple names for KEYTYPE - IJ43920 Security: The PKCS12 keystore update and the PBES2 support - IJ40002 XML: Fix security vulnerability CVE-2022-21426 Moderate SUSE bug 1207246 SUSE bug 1207248 SUSE bug 1207249 SUSE bug 1208480 CVE-2022-21426 CVE-2023-21830 CVE-2023-21835 CVE-2023-21843 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 java-1_8_0-openjdk-1.8.0.362-150000.3.76.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-1_8_0-openjdk fixes the following issues: Updated to version jdk8u362 (icedtea-3.26.0): - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249). - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248). Moderate SUSE bug 1207248 SUSE bug 1207249 CVE-2023-21830 CVE-2023-21843 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libcgroup-devel-0.41.rc1-1.10.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libcgroup-devel-0.41.rc1-1.10.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2018-14348 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libicu60_2-60.2-150000.3.12.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libicu60_2-60.2-150000.3.12.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2020-10531 CVE-2020-21913 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libncurses5-32bit-6.1-150000.5.15.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libncurses5-32bit-6.1-150000.5.15.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2018-19211 CVE-2019-17594 CVE-2019-17595 CVE-2021-39537 CVE-2022-29458 CVE-2023-29491 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libopenssl-1_0_0-devel-1.0.2p-150000.3.73.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libopenssl-1_0_0-devel-1.0.2p-150000.3.73.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2014-3513 CVE-2014-3567 CVE-2014-3568 CVE-2014-3569 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-8275 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206 CVE-2015-0209 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289 CVE-2015-0293 CVE-2015-1788 CVE-2015-1789 CVE-2015-1790 CVE-2015-1791 CVE-2015-1792 CVE-2015-1793 CVE-2015-1794 CVE-2015-3193 CVE-2015-3194 CVE-2015-3195 CVE-2015-3196 CVE-2015-3197 CVE-2016-0701 CVE-2016-0702 CVE-2016-0705 CVE-2016-0797 CVE-2016-0798 CVE-2016-0800 CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2176 CVE-2016-2177 CVE-2016-2178 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-2182 CVE-2016-2183 CVE-2016-6302 CVE-2016-6303 CVE-2016-6304 CVE-2016-6306 CVE-2016-7052 CVE-2016-7055 CVE-2016-7056 CVE-2017-3731 CVE-2017-3732 CVE-2017-3735 CVE-2017-3736 CVE-2017-3737 CVE-2017-3738 CVE-2018-0732 CVE-2018-0734 CVE-2018-0737 CVE-2018-5407 CVE-2019-1547 CVE-2019-1551 CVE-2019-1559 CVE-2019-1563 CVE-2020-1971 CVE-2021-23840 CVE-2021-23841 CVE-2021-3712 CVE-2022-0778 CVE-2022-1292 CVE-2022-2068 CVE-2022-4304 CVE-2023-0215 CVE-2023-0286 CVE-2023-0464 CVE-2023-0465 CVE-2023-0466 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 libopenvswitch-2_14-0-2.14.2-150400.24.3.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the libopenvswitch-2_14-0-2.14.2-150400.24.3.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2020-27827 CVE-2020-35498 CVE-2021-36980 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ncurses fixes the following issues: - CVE-2021-39537: Fixed an heap-based buffer overflow in _nc_captoinfo. (bsc#1190793) Moderate SUSE bug 1190793 CVE-2021-39537 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-1_0_0 to 1.0.2p fixes the following issues: These security issues were fixed: - Prevent One&Done side-channel attack on RSA that allowed physically near attackers to use EM emanations to recover information (bsc#1104789) - CVE-2018-0737: The RSA Key generation algorithm has been shown to be vulnerable to a cache timing side channel attack. An attacker with sufficient access to mount cache timing attacks during the RSA key generation process could have recovered the private key (bsc#1089039) - CVE-2018-0732: During key agreement in a TLS handshake using a DH(E) based ciphersuite a malicious server could have sent a very large prime value to the client. This caused the client to spend an unreasonably long period of time generating a key for this prime resulting in a hang until the client has finished. This could be exploited in a Denial Of Service attack (bsc#1097158) - Make problematic ECDSA sign addition length-invariant - Add blinding to ECDSA and DSA signatures to protect against side channel attacks This non-security issue was fixed: - Add openssl(cli) Provide so the packages that require the openssl binary can require this instead of the new openssl meta package (bsc#1101470) Moderate SUSE bug 1089039 SUSE bug 1097158 SUSE bug 1101470 SUSE bug 1104789 SUSE bug 1106197 CVE-2018-0732 CVE-2018-0737 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openvswitch fixes the following issues: - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524). Moderate SUSE bug 1188524 CVE-2021-36980 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openvswitch fixes the following issues: - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524). Moderate SUSE bug 1188524 CVE-2021-36980 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537) Moderate SUSE bug 1205162 SUSE bug 1208199 SUSE bug 1209537 CVE-2022-4900 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 php7-pear-1.10.21-3.6.1 on GA media (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7-pear fixes the following issues: - CVE-2020-36193: Fixed Archive_Tar directory traversal due to inadequate checking of symbolic links (bsc#1189591). Important SUSE bug 1189591 CVE-2020-36193 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537) Moderate SUSE bug 1205162 SUSE bug 1208199 SUSE bug 1209537 CVE-2022-4900 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537) Moderate SUSE bug 1205162 SUSE bug 1208199 SUSE bug 1209537 CVE-2022-4900 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537) Moderate SUSE bug 1205162 SUSE bug 1208199 SUSE bug 1209537 CVE-2022-4900 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 postgresql-llvmjit-15-150500.8.19 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the postgresql-llvmjit-15-150500.8.19 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2017-14798 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 postgresql14-14.8-150200.5.26.1 on GA media (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postgresql14 fixes the following issues: Updated to version 14.8: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). - CVE-2023-2455: Fixed an issue that could allow a user to see or modify rows that should have been invisible (bsc#1211229). - Internal fixes (bsc#1210303). Important SUSE bug 1210303 SUSE bug 1211228 SUSE bug 1211229 CVE-2023-2454 CVE-2023-2455 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 reiserfs-kmp-default-5.14.21-150500.53.2 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the reiserfs-kmp-default-5.14.21-150500.53.2 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2016-3695 CVE-2017-1000251 CVE-2017-12153 CVE-2017-13080 CVE-2017-14051 CVE-2017-16536 CVE-2017-16537 CVE-2017-16646 CVE-2017-16648 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-10323 CVE-2018-12232 CVE-2018-13053 CVE-2018-20669 CVE-2019-0154 CVE-2019-0155 CVE-2019-10220 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-14615 CVE-2019-14814 CVE-2019-14815 CVE-2019-14816 CVE-2019-14895 CVE-2019-14896 CVE-2019-14897 CVE-2019-14901 CVE-2019-15030 CVE-2019-15031 CVE-2019-15098 CVE-2019-15099 CVE-2019-15290 CVE-2019-15291 CVE-2019-15504 CVE-2019-16231 CVE-2019-16232 CVE-2019-16233 CVE-2019-16234 CVE-2019-17133 CVE-2019-17666 CVE-2019-18198 CVE-2019-18660 CVE-2019-18683 CVE-2019-18786 CVE-2019-18808 CVE-2019-18809 CVE-2019-18811 CVE-2019-18812 CVE-2019-18813 CVE-2019-18814 CVE-2019-19037 CVE-2019-19043 CVE-2019-19044 CVE-2019-19045 CVE-2019-19046 CVE-2019-19047 CVE-2019-19048 CVE-2019-19049 CVE-2019-19050 CVE-2019-19051 CVE-2019-19052 CVE-2019-19053 CVE-2019-19054 CVE-2019-19055 CVE-2019-19056 CVE-2019-19057 CVE-2019-19058 CVE-2019-19060 CVE-2019-19061 CVE-2019-19062 CVE-2019-19063 CVE-2019-19064 CVE-2019-19065 CVE-2019-19066 CVE-2019-19067 CVE-2019-19068 CVE-2019-19069 CVE-2019-19070 CVE-2019-19071 CVE-2019-19072 CVE-2019-19073 CVE-2019-19074 CVE-2019-19075 CVE-2019-19077 CVE-2019-19078 CVE-2019-19080 CVE-2019-19081 CVE-2019-19082 CVE-2019-19083 CVE-2019-19241 CVE-2019-19252 CVE-2019-19332 CVE-2019-19338 CVE-2019-19447 CVE-2019-19462 CVE-2019-19523 CVE-2019-19524 CVE-2019-19525 CVE-2019-19526 CVE-2019-19528 CVE-2019-19529 CVE-2019-19532 CVE-2019-19533 CVE-2019-19534 CVE-2019-19602 CVE-2019-19767 CVE-2019-19768 CVE-2019-19769 CVE-2019-19770 CVE-2019-19807 CVE-2019-19922 CVE-2019-19947 CVE-2019-19965 CVE-2019-20422 CVE-2019-20810 CVE-2019-20812 CVE-2019-3016 CVE-2019-8912 CVE-2020-0110 CVE-2020-0305 CVE-2020-0404 CVE-2020-0427 CVE-2020-0431 CVE-2020-0432 CVE-2020-0444 CVE-2020-0465 CVE-2020-0466 CVE-2020-0543 CVE-2020-10135 CVE-2020-10690 CVE-2020-10711 CVE-2020-10732 CVE-2020-10751 CVE-2020-10757 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10773 CVE-2020-10781 CVE-2020-10942 CVE-2020-11494 CVE-2020-11608 CVE-2020-11668 CVE-2020-11884 CVE-2020-12351 CVE-2020-12352 CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-12373 CVE-2020-12464 CVE-2020-12465 CVE-2020-12652 CVE-2020-12653 CVE-2020-12654 CVE-2020-12655 CVE-2020-12656 CVE-2020-12657 CVE-2020-12659 CVE-2020-12769 CVE-2020-12770 CVE-2020-12771 CVE-2020-12888 CVE-2020-13143 CVE-2020-13974 CVE-2020-14314 CVE-2020-14331 CVE-2020-14351 CVE-2020-14356 CVE-2020-14385 CVE-2020-14386 CVE-2020-14390 CVE-2020-14416 CVE-2020-15393 CVE-2020-15436 CVE-2020-15437 CVE-2020-15780 CVE-2020-16119 CVE-2020-16120 CVE-2020-16166 CVE-2020-1749 CVE-2020-24490 CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-2521 CVE-2020-25211 CVE-2020-25212 CVE-2020-25284 CVE-2020-25285 CVE-2020-25639 CVE-2020-25641 CVE-2020-25643 CVE-2020-25645 CVE-2020-25656 CVE-2020-25668 CVE-2020-25669 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2020-25673 CVE-2020-25704 CVE-2020-25705 CVE-2020-26088 CVE-2020-26139 CVE-2020-26141 CVE-2020-26145 CVE-2020-26147 CVE-2020-26558 CVE-2020-27068 CVE-2020-27170 CVE-2020-27171 CVE-2020-27194 CVE-2020-2732 CVE-2020-27673 CVE-2020-27675 CVE-2020-27777 CVE-2020-27786 CVE-2020-27815 CVE-2020-27820 CVE-2020-27825 CVE-2020-27830 CVE-2020-27835 CVE-2020-28374 CVE-2020-28915 CVE-2020-28941 CVE-2020-28974 CVE-2020-29368 CVE-2020-29369 CVE-2020-29370 CVE-2020-29371 CVE-2020-29373 CVE-2020-29568 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-35519 CVE-2020-36158 CVE-2020-36310 CVE-2020-36311 CVE-2020-36312 CVE-2020-36322 CVE-2020-36385 CVE-2020-36386 CVE-2020-36516 CVE-2020-4788 CVE-2020-8428 CVE-2020-8647 CVE-2020-8648 CVE-2020-8649 CVE-2020-8694 CVE-2020-8835 CVE-2020-8992 CVE-2020-9383 CVE-2021-0129 CVE-2021-0342 CVE-2021-0512 CVE-2021-0605 CVE-2021-20177 CVE-2021-20268 CVE-2021-20321 CVE-2021-21781 CVE-2021-22543 CVE-2021-22555 CVE-2021-22600 CVE-2021-23134 CVE-2021-26341 CVE-2021-26930 CVE-2021-26931 CVE-2021-26932 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVE-2021-28038 CVE-2021-28375 CVE-2021-28660 CVE-2021-28688 CVE-2021-28711 CVE-2021-28712 CVE-2021-28713 CVE-2021-28714 CVE-2021-28715 CVE-2021-28950 CVE-2021-28952 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29265 CVE-2021-29647 CVE-2021-29650 CVE-2021-30002 CVE-2021-32399 CVE-2021-33034 CVE-2021-33061 CVE-2021-33135 CVE-2021-33200 CVE-2021-3347 CVE-2021-3348 CVE-2021-33624 CVE-2021-33655 CVE-2021-33909 CVE-2021-3428 CVE-2021-3444 CVE-2021-34556 CVE-2021-34693 CVE-2021-3483 CVE-2021-3489 CVE-2021-3490 CVE-2021-3491 CVE-2021-35039 CVE-2021-3542 CVE-2021-35477 CVE-2021-3573 CVE-2021-3609 CVE-2021-3612 CVE-2021-3640 CVE-2021-3653 CVE-2021-3656 CVE-2021-3659 CVE-2021-3679 CVE-2021-3732 CVE-2021-3739 CVE-2021-3743 CVE-2021-3744 CVE-2021-3753 CVE-2021-37576 CVE-2021-3759 CVE-2021-3760 CVE-2021-3764 CVE-2021-3772 CVE-2021-38160 CVE-2021-38166 CVE-2021-38198 CVE-2021-38204 CVE-2021-38205 CVE-2021-38206 CVE-2021-38207 CVE-2021-38209 CVE-2021-3896 CVE-2021-39685 CVE-2021-39698 CVE-2021-4001 CVE-2021-4002 CVE-2021-4037 CVE-2021-4083 CVE-2021-4090 CVE-2021-41073 CVE-2021-4135 CVE-2021-4148 CVE-2021-4155 CVE-2021-41864 CVE-2021-4197 CVE-2021-4202 CVE-2021-4204 CVE-2021-42252 CVE-2021-42327 CVE-2021-42739 CVE-2021-43056 CVE-2021-43057 CVE-2021-43267 CVE-2021-43389 CVE-2021-43975 CVE-2021-43976 CVE-2021-44733 CVE-2021-44879 CVE-2021-45095 CVE-2021-45402 CVE-2021-45480 CVE-2021-45868 CVE-2022-0001 CVE-2022-0002 CVE-2022-0168 CVE-2022-0171 CVE-2022-0185 CVE-2022-0264 CVE-2022-0322 CVE-2022-0330 CVE-2022-0382 CVE-2022-0435 CVE-2022-0487 CVE-2022-0492 CVE-2022-0494 CVE-2022-0500 CVE-2022-0516 CVE-2022-0617 CVE-2022-0644 CVE-2022-0742 CVE-2022-0847 CVE-2022-0854 CVE-2022-0886 CVE-2022-0995 CVE-2022-0998 CVE-2022-1011 CVE-2022-1012 CVE-2022-1015 CVE-2022-1016 CVE-2022-1048 CVE-2022-1055 CVE-2022-1158 CVE-2022-1184 CVE-2022-1195 CVE-2022-1198 CVE-2022-1199 CVE-2022-1204 CVE-2022-1205 CVE-2022-1263 CVE-2022-1280 CVE-2022-1462 CVE-2022-1508 CVE-2022-1516 CVE-2022-1651 CVE-2022-1652 CVE-2022-1671 CVE-2022-1679 CVE-2022-1729 CVE-2022-1734 CVE-2022-1789 CVE-2022-1836 CVE-2022-1852 CVE-2022-1882 CVE-2022-1966 CVE-2022-1972 CVE-2022-1974 CVE-2022-1975 CVE-2022-1998 CVE-2022-20008 CVE-2022-20132 CVE-2022-20154 CVE-2022-20368 CVE-2022-20369 CVE-2022-21123 CVE-2022-21125 CVE-2022-21127 CVE-2022-21166 CVE-2022-21180 CVE-2022-21499 CVE-2022-21505 CVE-2022-2153 CVE-2022-2196 CVE-2022-22942 CVE-2022-23036 CVE-2022-23037 CVE-2022-23038 CVE-2022-23039 CVE-2022-23040 CVE-2022-23041 CVE-2022-23042 CVE-2022-2318 CVE-2022-23222 CVE-2022-23960 CVE-2022-24122 CVE-2022-24448 CVE-2022-24958 CVE-2022-24959 CVE-2022-25258 CVE-2022-25375 CVE-2022-25636 CVE-2022-2585 CVE-2022-2586 CVE-2022-2588 CVE-2022-2602 CVE-2022-26365 CVE-2022-26373 CVE-2022-2639 CVE-2022-26490 CVE-2022-2663 CVE-2022-26878 CVE-2022-26966 CVE-2022-27223 CVE-2022-28356 CVE-2022-28388 CVE-2022-28389 CVE-2022-28390 CVE-2022-28693 CVE-2022-2873 CVE-2022-28748 CVE-2022-28893 CVE-2022-2905 CVE-2022-29156 CVE-2022-2938 CVE-2022-29581 CVE-2022-29582 CVE-2022-2959 CVE-2022-2964 CVE-2022-2977 CVE-2022-2978 CVE-2022-29900 CVE-2022-29901 CVE-2022-3028 CVE-2022-30594 CVE-2022-3078 CVE-2022-3104 CVE-2022-3105 CVE-2022-3106 CVE-2022-3107 CVE-2022-3108 CVE-2022-3111 CVE-2022-3112 CVE-2022-3113 CVE-2022-3114 CVE-2022-3115 CVE-2022-3169 CVE-2022-3176 CVE-2022-3202 CVE-2022-32250 CVE-2022-32296 CVE-2022-3239 CVE-2022-3303 CVE-2022-3344 CVE-2022-33740 CVE-2022-33741 CVE-2022-33742 CVE-2022-33743 CVE-2022-33981 CVE-2022-3424 CVE-2022-3435 CVE-2022-34918 CVE-2022-3521 CVE-2022-3523 CVE-2022-3524 CVE-2022-3526 CVE-2022-3535 CVE-2022-3542 CVE-2022-3545 CVE-2022-3564 CVE-2022-3565 CVE-2022-3566 CVE-2022-3567 CVE-2022-3577 CVE-2022-3586 CVE-2022-3594 CVE-2022-3619 CVE-2022-3621 CVE-2022-3625 CVE-2022-3628 CVE-2022-3629 CVE-2022-3633 CVE-2022-3635 CVE-2022-3640 CVE-2022-3643 CVE-2022-3646 CVE-2022-3649 CVE-2022-36879 CVE-2022-36946 CVE-2022-3707 CVE-2022-3903 CVE-2022-39188 CVE-2022-39189 CVE-2022-39190 CVE-2022-40476 CVE-2022-40768 CVE-2022-4095 CVE-2022-41218 CVE-2022-4129 CVE-2022-4139 CVE-2022-41674 CVE-2022-41848 CVE-2022-41849 CVE-2022-41850 CVE-2022-41858 CVE-2022-42328 CVE-2022-42329 CVE-2022-42703 CVE-2022-42719 CVE-2022-42720 CVE-2022-42721 CVE-2022-42722 CVE-2022-42895 CVE-2022-42896 CVE-2022-43750 CVE-2022-4378 CVE-2022-4379 CVE-2022-4382 CVE-2022-43945 CVE-2022-45869 CVE-2022-45888 CVE-2022-45934 CVE-2022-4662 CVE-2022-47520 CVE-2022-47929 CVE-2023-0266 CVE-2023-0386 CVE-2023-0468 CVE-2023-1078 CVE-2023-1281 CVE-2023-1380 CVE-2023-1990 CVE-2023-2008 CVE-2023-2019 CVE-2023-22995 CVE-2023-23454 CVE-2023-23455 CVE-2023-23559 CVE-2023-28328 CVE-2023-28466 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 telnet-server-1.2-150000.3.6.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the telnet-server-1.2-150000.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Legacy 15 SP5. Moderate CVE-2022-39028 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for GraphicsMagick fixes the following issues: - CVE-2022-1270: Fixed a heap buffer overflow when parsing MIFF (bsc#1198351). Important SUSE bug 1198351 CVE-2022-1270 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for LibVNCServer fixes the following issues: - CVE-2020-29260: Fixed memory leakage via rfbClientCleanup() (bsc#1203106). Moderate SUSE bug 1203106 CVE-2020-29260 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for MozillaThunderbird fixes the following issues: Various security fixes MFSA 2022-18 (bsc#1198970): - CVE-2022-1520: Incorrect security status shown after viewing an attached email (bmo#1745019). - CVE-2022-29914: Fullscreen notification bypass using popups (bmo#1746448). - CVE-2022-29909: Bypassing permission prompt in nested browsing contexts (bmo#1755081). - CVE-2022-29916: Leaking browser history with CSS variables (bmo#1760674). - CVE-2022-29911: iframe sandbox bypass (bmo#1761981). - CVE-2022-29912: Reader mode bypassed SameSite cookies (bmo#1692655). - CVE-2022-29913: Speech Synthesis feature not properly disabled (bmo#1764778). - CVE-2022-29917: Memory safety bugs fixed in Thunderbird 91.9 (bmo#1684739, bmo#1706441, bmo#1753298, bmo#1762614, bmo#1762620). Important SUSE bug 1198970 CVE-2022-1520 CVE-2022-29909 CVE-2022-29911 CVE-2022-29912 CVE-2022-29913 CVE-2022-29914 CVE-2022-29916 CVE-2022-29917 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for SDL2 fixes the following issues: - CVE-2022-4743: Fixed a potential memory leak when creating a texture for an OpenGL ES image (bsc#1206727). Moderate SUSE bug 1206727 CVE-2022-4743 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for apache2 fixes the following issues: - CVE-2022-37436: Fixed an issue in mod_proxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body (bsc#1207251). - CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow request smuggling attacks (bsc#1207250). - CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request header could cause memory corruption (bsc#1207247). Important SUSE bug 1207247 SUSE bug 1207250 SUSE bug 1207251 CVE-2006-20001 CVE-2022-36760 CVE-2022-37436 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for avahi fixes the following issues: - CVE-2023-1981: Fixed crash in avahi-daemon (bsc#1210328). Moderate SUSE bug 1210328 CVE-2023-1981 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for binutils fixes the following issues: The following security bugs were fixed: - CVE-2019-1010204: Fixed out-of-bounds read in elfcpp/elfcpp_file.h (bsc#1142579). - CVE-2021-3530: Fixed stack-based buffer overflow in demangle_path() in rust-demangle.c (bsc#1185597). - CVE-2021-3648: Fixed infinite loop while demangling rust symbols (bsc#1188374). - CVE-2021-3826: Fixed heap/stack buffer overflow in the dlang_lname function in d-demangle.c (bsc#1202969). - CVE-2021-45078: Fixed out-of-bounds write in stab_xcoff_builtin_type() in stabs.c (bsc#1193929). - CVE-2021-46195: Fixed uncontrolled recursion in libiberty/rust-demangle.c (bsc#1194783). - CVE-2022-27943: Fixed stack exhaustion in demangle_const in (bsc#1197592). - CVE-2022-38126: Fixed assertion fail in the display_debug_names() function in binutils/dwarf.c (bsc#1202966). - CVE-2022-38127: Fixed NULL pointer dereference in the read_and_display_attr_value() function in binutils/dwarf.c (bsc#1202967). - CVE-2022-38533: Fixed heap out-of-bounds read in bfd_getl32 (bsc#1202816). The following non-security bugs were fixed: - SLE toolchain update of binutils, update to 2.39 from 2.37. - Update to 2.39: * The ELF linker will now generate a warning message if the stack is made executable. Similarly it will warn if the output binary contains a segment with all three of the read, write and execute permission bits set. These warnings are intended to help developers identify programs which might be vulnerable to attack via these executable memory regions. The warnings are enabled by default but can be disabled via a command line option. It is also possible to build a linker with the warnings disabled, should that be necessary. * The ELF linker now supports a --package-metadata option that allows embedding a JSON payload in accordance to the Package Metadata specification. * In linker scripts it is now possible to use TYPE=<type> in an output section description to set the section type value. * The objdump program now supports coloured/colored syntax highlighting of its disassembler output for some architectures. (Currently: AVR, RiscV, s390, x86, x86_64). * The nm program now supports a --no-weak/-W option to make it ignore weak symbols. * The readelf and objdump programs now support a -wE option to prevent them from attempting to access debuginfod servers when following links. * The objcopy program's --weaken, --weaken-symbol, and --weaken-symbols options now works with unique symbols as well. - Update to 2.38: * elfedit: Add --output-abiversion option to update ABIVERSION. * Add support for the LoongArch instruction set. * Tools which display symbols or strings (readelf, strings, nm, objdump) have a new command line option which controls how unicode characters are handled. By default they are treated as normal for the tool. Using --unicode=locale will display them according to the current locale. Using --unicode=hex will display them as hex byte values, whilst --unicode=escape will display them as escape sequences. In addition using --unicode=highlight will display them as unicode escape sequences highlighted in red (if supported by the output device). * readelf -r dumps RELR relative relocations now. * Support for efi-app-aarch64, efi-rtdrv-aarch64 and efi-bsdrv-aarch64 has been added to objcopy in order to enable UEFI development using binutils. * ar: Add --thin for creating thin archives. -T is a deprecated alias without diagnostics. In many ar implementations -T has a different meaning, as specified by X/Open System Interface. * Add support for AArch64 system registers that were missing in previous releases. * Add support for the LoongArch instruction set. * Add a command-line option, -muse-unaligned-vector-move, for x86 target to encode aligned vector move as unaligned vector move. * Add support for Cortex-R52+ for Arm. * Add support for Cortex-A510, Cortex-A710, Cortex-X2 for AArch64. * Add support for Cortex-A710 for Arm. * Add support for Scalable Matrix Extension (SME) for AArch64. * The --multibyte-handling=[allow|warn|warn-sym-only] option tells the assembler what to when it encoutners multibyte characters in the input. The default is to allow them. Setting the option to 'warn' will generate a warning message whenever any multibyte character is encountered. Using the option to 'warn-sym-only' will make the assembler generate a warning whenever a symbol is defined containing multibyte characters. (References to undefined symbols will not generate warnings). * Outputs of .ds.x directive and .tfloat directive with hex input from x86 assembler have been reduced from 12 bytes to 10 bytes to match the output of .tfloat directive. * Add support for 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and 'armv9.3-a' for -march in AArch64 GAS. * Add support for 'armv8.7-a', 'armv8.8-a', 'armv9-a', 'armv9.1-a', 'armv9.2-a' and 'armv9.3-a' for -march in Arm GAS. * Add support for Intel AVX512_FP16 instructions. * Add -z pack-relative-relocs/-z no pack-relative-relocs to x86 ELF linker to pack relative relocations in the DT_RELR section. * Add support for the LoongArch architecture. * Add -z indirect-extern-access/-z noindirect-extern-access to x86 ELF linker to control canonical function pointers and copy relocation. * Add --max-cache-size=SIZE to set the the maximum cache size to SIZE bytes. - Explicitly enable --enable-warn-execstack=yes and --enable-warn-rwx-segments=yes. - Add gprofng subpackage. - Include recognition of 'z16' name for 'arch14' on s390. (bsc#1198237). - Add back fix for bsc#1191473, which got lost in the update to 2.38. - Install symlinks for all target specific tools on arm-eabi-none (bsc#1185712). - Enable PRU architecture for AM335x CPU (Beagle Bone Black board) Moderate SUSE bug 1142579 SUSE bug 1185597 SUSE bug 1185712 SUSE bug 1188374 SUSE bug 1191473 SUSE bug 1193929 SUSE bug 1194783 SUSE bug 1197592 SUSE bug 1198237 SUSE bug 1202816 SUSE bug 1202966 SUSE bug 1202967 SUSE bug 1202969 CVE-2019-1010204 CVE-2021-3530 CVE-2021-3648 CVE-2021-3826 CVE-2021-45078 CVE-2021-46195 CVE-2022-27943 CVE-2022-38126 CVE-2022-38127 CVE-2022-38533 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for capnproto fixes the following issues: - CVE-2022-46149: Fixed out of bounds read when handling a list of lists (bsc#1205968). Moderate SUSE bug 1205968 CVE-2022-46149 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for cmark fixes the following issues: - CVE-2023-22486: Fixed quadratic complexity in handle_close_bracket may lead to a denial of service (bsc#1207674). Moderate SUSE bug 1207674 CVE-2023-22486 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.3.3 (jsc#SLE-8705), bringing many bug and stability fixes. More information for the 6.3 release at: https://wiki.documentfoundation.org/ReleaseNotes/6.3 Security issue fixed: - CVE-2019-9853: Fixed an issue where by executing macros, the security settings could have been bypassed (bsc#1152684). Other issues addressed: - Dropped disable-kde4 switch, since it is no longer known by configure - Disabled gtk2 because it will be removed in future releases - librelogo is now a standalone sub-package (bsc#1144522). - Partial fixes for an issue where Table(s) from DOCX showed wrong position or color (bsc#1061210). cmis-client was updated to 0.5.2: * Removed header for Uuid's sha1 header(bsc#1105173). * Fixed Google Drive login * Added support for Google Drive two-factor authentication * Fixed access to SharePoint root folder * Limited the maximal number of redirections to 20 * Switched library implementation to C++11 (the API remains C++98-compatible) * Fixed encoding of OAuth2 credentials * Dropped cppcheck run from 'make check'. A new 'make cppcheck' target was created for it * Added proper API symbol exporting * Speeded up building of tests a bit * Fixed a few issues found by coverity and cppcheck libixion was updated to 0.15.0: * Updated for new liborcus * Switched to spdlog for compile-time debug log outputs * Fixed various issues libmwaw was updated 0.3.15: * Fixed fuzzing issues liborcus was updated to 0.15.3: * Fixed various xml related bugs * Improved performance * Fixed multiple parser issues * Added map and structure mode to orcus-json * Other improvements and fixes mdds was updated to 1.5.0: * API changed to 1.5 * Moved the API incompatibility notes from README to the rst doc. * Added the overview section for flat_segment_tree. myspell-dictionaries was updated to 20191016: * Updated Slovenian thesaurus * Updated the da_DK dictionary * Removed the abbreviations from Thai hunspell dictionary * Updated the English dictionaries * Fixed the logo management for 'ca' spdlog was updated to 0.16.3: * Fixed sleep issue under MSVC that happens when changing the clock backwards * Ensured that macros always expand to expressions * Added global flush_on function Moderate SUSE bug 1061210 SUSE bug 1105173 SUSE bug 1144522 SUSE bug 1152684 CVE-2019-9853 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for dcraw fixes the following issues: - CVE-2017-13735: Fixed a denial of service issue due to a floating point exception (bsc#1056170). - CVE-2017-14608: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1063798). - CVE-2018-19655: Fixed a buffer overflow that could lead to an application crash (bsc#1117896). - CVE-2018-5801: Fixed an invalid memory access that could lead to denial of service (bsc#1084690). - CVE-2018-5805: Fixed a buffer overflow that could lead to an application crash (bsc#1097973). - CVE-2018-5806: Fixed an invalid memory access that could lead to denial of service (bsc#1097974). - CVE-2018-19565: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1117622). - CVE-2018-19566: Fixed an invalid memory access that could lead to information disclosure or denial of service (bsc#1117517). - CVE-2018-19567: Fixed a denial of service issue due to a floating point exception (bsc#1117512). - CVE-2018-19568: Fixed a denial of service issue due to a floating point exception (bsc#1117436). - CVE-2021-3624: Fixed a buffer overflow that could lead to code execution or denial of service (bsc#1189642). Non-security fixes: - Updated to version 9.28.0. Moderate SUSE bug 1056170 SUSE bug 1063798 SUSE bug 1084690 SUSE bug 1097973 SUSE bug 1097974 SUSE bug 1117436 SUSE bug 1117512 SUSE bug 1117517 SUSE bug 1117622 SUSE bug 1117896 SUSE bug 1189642 CVE-2017-13735 CVE-2017-14608 CVE-2018-19565 CVE-2018-19566 CVE-2018-19567 CVE-2018-19568 CVE-2018-19655 CVE-2018-5801 CVE-2018-5805 CVE-2018-5806 CVE-2021-3624 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for dia fixes the following issue: - CVE-2019-19451: Fixed an endless loop on filenames with invalid encoding (bsc#1158194). Moderate SUSE bug 1158194 CVE-2019-19451 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for djvulibre fixes the following issues: - CVE-2021-3500: Stack overflow in function DJVU:DjVuDocument:get_djvu_file() via crafted djvu file (bsc#1186253) Important SUSE bug 1186253 CVE-2021-3500 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for eclipse fixes the following issues: - CVE-2020-27225: Authenticate active help requests to the local help web server (bsc#1183728). Important SUSE bug 1183728 CVE-2020-27225 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for eclipse fixes the following issues: - CVE-2020-27225: Authenticate active help requests to the local help web server (bsc#1183728). Important SUSE bug 1183728 CVE-2020-27225 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for eclipse fixes the following issues: - CVE-2020-27225: Authenticate active help requests to the local help web server (bsc#1183728). Important SUSE bug 1183728 CVE-2020-27225 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for eclipse fixes the following issues: - CVE-2020-27225: Authenticate active help requests to the local help web server (bsc#1183728). Important SUSE bug 1183728 CVE-2020-27225 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for evolution-data-server fixes the following issues: - CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712). - CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910). - Fix buffer overrun when parsing base64 data (bsc#1182882). This update for evolution-ews fixes the following issue: - Fix buffer overrun when parsing base64 data (bsc#1182882). Moderate SUSE bug 1173910 SUSE bug 1174712 SUSE bug 1182882 CVE-2020-14928 CVE-2020-16117 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for ffmpeg fixes the following issues: - CVE-2022-48434: Fixed use after free in libavcodec/pthread_frame.c (bsc#1209934). Important SUSE bug 1209934 CVE-2022-48434 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for ffmpeg-4 fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442). Moderate SUSE bug 1206442 CVE-2022-3109 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for flac fixes the following issues: - CVE-2021-0561: Fixed out of bound write in append_to_verify_fifo_interleaved_ (bsc#1196660). Moderate SUSE bug 1196660 CVE-2021-0561 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for freerdp fixes the following issues: - CVE-2022-39282: Fix to init data read by `/parallel` command line switch. (bsc#1204258) - CVE-2022-39283: Fix to prevent video channel from reading uninitialized data. (bsc#1204257) Moderate SUSE bug 1204257 SUSE bug 1204258 CVE-2022-39282 CVE-2022-39283 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for gd fixes the following issues: - CVE-2021-40812: Fixed out-of-bounds read caused by the lack of certain gdGetBuf and gdPutBuf return value checks (bsc#1190400). Moderate SUSE bug 1190400 CVE-2021-40812 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for go1.10 fixes the following issues: Security issues fixed: - CVE-2019-6486: A CPU denial of service vulnerability affecting P-521 and P-384 elliptic curves was fixed. Other fixes: - go1.10.8 (released 2019/01/23) security release fixes CVE-2019-6486. - Enable build for %arm (bsc#1125768), with go1.4 as building with gccgo hangs (bsc#974800) Moderate SUSE bug 1121397 SUSE bug 1125768 SUSE bug 974800 CVE-2019-6486 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for containerd, docker, docker-runc, go, go1.11, go1.12, golang-github-docker-libnetwork fixes the following issues: Security issues fixed: - CVE-2019-5736: containerd: Fixing container breakout vulnerability (bsc#1121967). - CVE-2019-6486: go security release, fixing crypto/elliptic CPU DoS vulnerability affecting P-521 and P-384 (bsc#1123013). - CVE-2018-16873: go secuirty release, fixing cmd/go remote command execution (bsc#1118897). - CVE-2018-16874: go security release, fixing cmd/go directory traversal (bsc#1118898). - CVE-2018-16875: go security release, fixing crypto/x509 CPU denial of service (bsc#1118899). Other changes and bug fixes: - Update to containerd v1.2.5, which is required for v18.09.5-ce (bsc#1128376, bsc#1134068). - Update to runc 2b18fe1d885e, which is required for Docker v18.09.5-ce (bsc#1128376, bsc#1134068). - Update to Docker 18.09.5-ce see upstream changelog in the packaged (bsc#1128376, bsc#1134068). - docker-test: Improvements to test packaging (bsc#1128746). - Move daemon.json file to /etc/docker directory (bsc#1114832). - Revert golang(API) removal since it turns out this breaks >= requires in certain cases (bsc#1114209). - Fix go build failures (bsc#1121397). Important SUSE bug 1114209 SUSE bug 1114832 SUSE bug 1118897 SUSE bug 1118898 SUSE bug 1118899 SUSE bug 1121397 SUSE bug 1121967 SUSE bug 1123013 SUSE bug 1128376 SUSE bug 1128746 SUSE bug 1134068 CVE-2018-16873 CVE-2018-16874 CVE-2018-16875 CVE-2019-5736 CVE-2019-6486 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for go1.12 fixes the following issues: Security issues fixed: - CVE-2019-9512: Fixed HTTP/2 flood using PING frames that results in unbounded memory growth (bsc#1146111). - CVE-2019-9514: Fixed HTTP/2 implementation that is vulnerable to a reset flood, potentially leading to a denial of service (bsc#1146115). - CVE-2019-14809: Fixed malformed hosts in URLs that leads to authorization bypass (bsc#1146123). Bugfixes: - Update to go version 1.12.9 (bsc#1141689). - Adding Web Assembly stuff from misc/wasm (bsc#1139210). Moderate SUSE bug 1139210 SUSE bug 1141689 SUSE bug 1146111 SUSE bug 1146115 SUSE bug 1146123 CVE-2019-14809 CVE-2019-9512 CVE-2019-9514 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for go1.13 fixes the following issues: Security issues fixed: - CVE-2019-16276: Fixed the handling of invalid HTTP headers, which had allowed request smuggling (bsc#1152082). - CVE-2019-17596: Fixed a panic in dsa.Verify caused by invalid public keys (bsc#1154402). - CVE-2020-7919: Fixed a panic in the ASN.1 parsing functions of golang.org/x/crypto/cryptobyte (bsc#1164288). Non-security issues fixed: - Go was updated to version 1.13.8 (bsc#1149259). Moderate SUSE bug 1149259 SUSE bug 1149638 SUSE bug 1152082 SUSE bug 1154402 SUSE bug 1164288 CVE-2019-16276 CVE-2019-17596 CVE-2020-7919 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for golang-github-prometheus-alertmanager fixes the following issues: Update golang-github-prometheus-alertmanager from version 0.21.0 to version 0.23.0 (bsc#1196338, jsc#SLE-24077) - CVE-2022-21698: Denial of service using InstrumentHandlerCounter - Update vendor tarball with prometheus/client_golang 1.11.1 - Update required Go version to 1.16 - Use %autosetup macro - Update to version 0.23.0: * Release 0.23.0 * Release 0.23.0-rc.0 * amtool: Detect version drift and warn users (#2672) * Add ability to skip TLS verification for amtool (#2663) * Fix empty isEqual in amtool. (#2668) * Fix main tests (#2670) * cli: add new template render command (#2538) * OpsGenie: refer to alert instead of incident (#2609) * Docs: target_match and source_match are DEPRECATED (#2665) * Fix test not waiting for cluster member to be ready - Add go_modules to _service. - Added hardening to systemd service(s) with a modified prometheus-alertmanager.service (bsc#1181400) Important SUSE bug 1181400 SUSE bug 1196338 CVE-2022-21698 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update fixes the following issues: prometheus-blackbox_exporter: - Security issues fixed: * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208062) - Other non-security bugs fixed and changes: * Add `min_version` parameter of `tls_config` to allow enabling TLS 1.0 and 1.1 (bsc#1209113) * On SUSE Linux Enterprise build always with Go >= 1.19 (bsc#1203599) prometheus-postgres_exporter: - Security issues fixed: * CVE-2022-46146: Fix authentication bypass via cache poisoning (bsc#1208060) - Other non-security bugs fixed and changes: * Adapt the systemd service security configuration to be able to start it on for Red Hat Linux Enterprise systems and clones * Create the prometheus user for Red Hat Linux Enterprise systems and clones * Fix broken log-level for values other than debug (bsc#1208965) golang-github-prometheus-prometheus: - Security issues fixed in this version update to 2.37.6: * CVE-2022-46146: Fix basic authentication bypass vulnerability (bsc#1208049, jsc#PED-3576) * CVE-2022-41715: Update our regexp library to fix upstream (bsc#1204023) - Other non-security bugs fixed and changes in this version update to 2.37.6: * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a memory leak. * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus startup. * [BUGFIX] Agent: Fix validation of flag options and prevent WAL from growing more than desired. * [BUGFIX] Properly close file descriptor when logging unfinished queries. * [BUGFIX] TSDB: In the WAL watcher metrics, expose the type='exemplar' label instead of type='unknown' for exemplar records. * [BUGFIX] Alerting: Fix Alertmanager targets not being updated when alerts were queued. * [BUGFIX] Hetzner SD: Make authentication files relative to Prometheus config file. * [BUGFIX] Promtool: Fix promtool check config not erroring properly on failures. * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on reloads. * [BUGFIX] TSDB: Don't increment prometheus_tsdb_compactions_failed_total when context is canceled. * [BUGFIX] TSDB: Fix panic if series is not found when deleting series. * [BUGFIX] TSDB: Increase prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence errors. * [BUGFIX] Uyuni SD: Make authentication files relative to Prometheus configuration file and fix default configuration values. * [BUGFIX] Fix serving of static assets like fonts and favicon. * [BUGFIX] promtool: Add --lint-fatal option. * [BUGFIX] Changing TotalQueryableSamples from int to int64. * [BUGFIX] tsdb/agent: Ignore duplicate exemplars. * [BUGFIX] TSDB: Fix chunk overflow appending samples at a variable rate. * [BUGFIX] Stop rule manager before TSDB is stopped. * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io. * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels correctly. * [BUGFIX] UI: Fix scrape interval and duration tooltip not showing on target page. * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is false. * [BUGFIX] Agent: Fix ID collision when loading a WAL with multiple segments. * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing the queue. * [BUGFIX] PromQL: Properly return an error from histogram_quantile when metrics have the same labelset. * [BUGFIX] UI: Fix bug that sets the range input to the resolution. * [BUGFIX] TSDB: Fix a query panic when memory-snapshot-on-shutdown is enabled. * [BUGFIX] Parser: Specify type in metadata parser errors. * [BUGFIX] Scrape: Fix label limit changes not applying. * [BUGFIX] Remote-write: Fix deadlock between adding to queue and getting batch. * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the disk. * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't set. * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set. * [BUGFIX] Remote-write: Fix deadlock when stopping a shard. * [BUGFIX] SD: Fix no such file or directory in K8s SD when not running inside K8s. * [BUGFIX] Promtool: Make exit codes more consistent. * [BUGFIX] Promtool: Fix flakiness of rule testing. * [BUGFIX] Remote-write: Update prometheus_remote_storage_queue_highest_sent_timestamp_seconds metric when write irrecoverably fails. * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator. * [BUGFIX] TSDB: CompactBlockMetas should produce correct mint/maxt for overlapping blocks. * [BUGFIX] TSDB: Fix logging of exemplar storage size. * [BUGFIX] UI: Fix overlapping click targets for the alert state checkboxes. * [BUGFIX] UI: Fix Unhealthy filter on target page to actually display only Unhealthy targets. * [BUGFIX] UI: Fix autocompletion when expression is empty. * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write. * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts. * [CHANGE] promtool: Add new flag --lint (enabled by default) for the commands check rules and check config, resulting in a new exit code (3) for linter errors. * [CHANGE] UI: Classic UI removed. * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based tracing. * [CHANGE] PromQL: Promote negative offset and @ modifer to stable features. * [CHANGE] Web: Promote remote-write-receiver to stable. * [FEATURE] Nomad SD: New service discovery for Nomad built-in service discovery. * [FEATURE] Add lowercase and uppercase relabel action. * [FEATURE] SD: Add IONOS Cloud integration. * [FEATURE] SD: Add Vultr integration. * [FEATURE] SD: Add Linode SD failure count metric. * [FEATURE] Add prometheus_ready metric. * [FEATURE] Support for automatically setting the variable GOMAXPROCS to the container CPU limit. Enable with the flag `--enable-feature=auto-gomaxprocs`. * [FEATURE] PromQL: Extend statistics with total and peak number of samples in a query. Additionally, per-step statistics are available with --enable-feature=promql-per-step-stats and using stats=all in the query API. Enable with the flag `--enable-feature=per-step-stats`. * [FEATURE] Config: Add stripPort template function. * [FEATURE] Promtool: Add cardinality analysis to check metrics, enabled by flag --extended. * [FEATURE] SD: Enable target discovery in own K8s namespace. * [FEATURE] SD: Add provider ID label in K8s SD. * [FEATURE] Web: Add limit field to the rules API. * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for endpoint role. * [ENHANCEMENT] PromQL: Optimise creation of signature with/without labels. * [ENHANCEMENT] TSDB: Memory optimizations. * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL. * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent header. * [ENHANCEMENT] Add stripDomain to template function. * [ENHANCEMENT] UI: Enable active search through dropped targets. * [ENHANCEMENT] promtool: support matchers when querying label * [ENHANCEMENT] Add agent mode identifier. * [ENHANCEMENT] TSDB: more efficient sorting of postings read from WAL at startup. * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures. * [ENHANCEMENT] Azure SD: Add an optional resource_group configuration. * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1 EndpointSlice (previously only discovery.k8s.io/v1beta1 EndpointSlice was supported). * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to discovered pods. * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch OAuth2 tokens. * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2. * [ENHANCEMENT] Config: Support overriding minimum TLS version. * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and allow configuration with the experimental flag `--storage.tsdb.head-chunks-write-queue-size`. * [ENHANCEMENT] HTTP SD: Add a failure counter. * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests. * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni. * [ENHANCEMENT] Scrape: Log when an invalid media type is encountered during a scrape. * [ENHANCEMENT] Scrape: Accept application/openmetrics-text;version=1.0.0 in addition to version=0.0.1. * [ENHANCEMENT] Remote-read: Add an option to not use external labels as selectors for remote read. * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar. * [ENHANCEMENT] UI: Improve graph colors that were hard to see. * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using environment variables with external labels. * [ENHANCEMENT] Remote-write: Avoid allocations by buffering concrete structs instead of interfaces. * [ENHANCEMENT] Remote-write: Log time series details for out-of-order samples in remote write receiver. * [ENHANCEMENT] Remote-write: Shard up more when backlogged. * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar ingest performance. * [ENHANCEMENT] TSDB: Avoid allocations when popping from the intersected postings heap. * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding latency spikes in remote-write. * [ENHANCEMENT] TSDB: Improve label matching performance. * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar. * [ENHANCEMENT] UI: Optimize the target page and add a search bar. Important SUSE bug 1203599 SUSE bug 1204023 SUSE bug 1208049 SUSE bug 1208060 SUSE bug 1208062 SUSE bug 1208965 SUSE bug 1209113 CVE-2022-41715 CVE-2022-46146 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This version update from 8.5.20 to 8.5.22 for grafana fixes the following issues: - Security issues fixed: * CVE-2023-1410: Fix XSS in Graphite functions tooltip (bsc#1209645) * CVE-2023-0507: Apply attribute sanitation to GeomapPanel (bsc#1208821) * CVE-2023-0594: Avoid storing XSS in TraceView panel (bsc#1208819) - The following non-security bug was fixed: * Login: Fix panic when UpsertUser is called without ReqContext Important SUSE bug 1208819 SUSE bug 1208821 SUSE bug 1209645 CVE-2023-0507 CVE-2023-0594 CVE-2023-1410 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for grafana, grafana-piechart-panel, grafana-status-panel fixes the following issues: grafana was updated to version 7.0.3: * Features / Enhancements - Stats: include all fields. #24829, @ryantxu - Variables: change VariableEditorList row action Icon to IconButton. #25217, @hshoff * Bug fixes - Cloudwatch: Fix dimensions of DDoSProtection. #25317, @papagian - Configuration: Fix env var override of sections containing hyphen. #25178, @marefr - Dashboard: Get panels in collapsed rows. #25079, @peterholmberg - Do not show alerts tab when alerting is disabled. #25285, @dprokop - Jaeger: fixes cascader option label duration value. #25129, @Estrax - Transformations: Fixed Transform tab crash & no update after adding first transform. #25152, @torkelo Update to version 7.0.2 * Bug fixes - Security: Urgent security patch release to fix CVE-2020-13379 Update to version 7.0.1 * Features / Enhancements - Datasource/CloudWatch: Makes CloudWatch Logs query history more readable. #24795, @kaydelaney - Download CSV: Add date and time formatting. #24992, @ryantxu - Table: Make last cell value visible when right aligned. #24921, @peterholmberg - TablePanel: Adding sort order persistance. #24705, @torkelo - Transformations: Display correct field name when using reduce transformation. #25068, @peterholmberg - Transformations: Allow custom number input for binary operations. #24752, @ryantxu * Bug fixes - Dashboard/Links: Fixes dashboard links by tags not working. #24773, @KamalGalrani - Dashboard/Links: Fixes open in new window for dashboard link. #24772, @KamalGalrani - Dashboard/Links: Variables are resolved and limits to 100. #25076, @hugohaggmark - DataLinks: Bring back variables interpolation in title. #24970, @dprokop - Datasource/CloudWatch: Field suggestions no longer limited to prefix-only. #24855, @kaydelaney - Explore/Table: Keep existing field types if possible. #24944, @kaydelaney - Explore: Fix wrap lines toggle for results of queries with filter expression. #24915, @ivanahuckova - Explore: fix undo in query editor. #24797, @zoltanbedi - Explore: fix word break in type head info. #25014, @zoltanbedi - Graph: Legend decimals now work as expected. #24931, @torkelo - LoginPage: Fix hover color for service buttons. #25009, @tskarhed - LogsPanel: Fix scrollbar. #24850, @ivanahuckova - MoveDashboard: Fix for moving dashboard caused all variables to be lost. #25005, @torkelo - Organize transformer: Use display name in field order comparer. #24984, @dprokop - Panel: shows correct panel menu items in view mode. #24912, @hugohaggmark - PanelEditor Fix missing labels and description if there is only single option in category. #24905, @dprokop - PanelEditor: Overrides name matcher still show all original field names even after Field default display name is specified. #24933, @torkelo - PanelInspector: Makes sure Data display options are visible. #24902, @hugohaggmark - PanelInspector: Hides unsupported data display options for Panel type. #24918, @hugohaggmark - PanelMenu: Make menu disappear on button press. #25015, @tskarhed - Postgres: Fix add button. #25087, @phemmer - Prometheus: Fix recording rules expansion. #24977, @ivanahuckova - Stackdriver: Fix creating Service Level Objectives (SLO) datasource query variable. #25023, @papagian Update to version 7.0.0 * Breaking changes - Removed PhantomJS: PhantomJS was deprecated in Grafana v6.4 and starting from Grafana v7.0.0, all PhantomJS support has been removed. This means that Grafana no longer ships with a built-in image renderer, and we advise you to install the Grafana Image Renderer plugin. - Dashboard: A global minimum dashboard refresh interval is now enforced and defaults to 5 seconds. - Interval calculation: There is now a new option Max data points that controls the auto interval $__interval calculation. Interval was previously calculated by dividing the panel width by the time range. With the new max data points option it is now easy to set $__interval to a dynamic value that is time range agnostic. For example if you set Max data points to 10 Grafana will dynamically set $__interval by dividing the current time range by 10. - Datasource/Loki: Support for deprecated Loki endpoints has been removed. - Backend plugins: Grafana now requires backend plugins to be signed, otherwise Grafana will not load/start them. This is an additional security measure to make sure backend plugin binaries and files haven't been tampered with. Refer to Upgrade Grafana for more information. - @grafana/ui: Forms migration notice, see @grafana/ui changelog - @grafana/ui: Select API change for creating custom values, see @grafana/ui changelog + Deprecation warnings - Scripted dashboards is now deprecated. The feature is not removed but will be in a future release. We hope to address the underlying requirement of dynamic dashboards in a different way. #24059 - The unofficial first version of backend plugins together with usage of grafana/grafana-plugin-model is now deprecated and support for that will be removed in a future release. Please refer to backend plugins documentation for information about the new officially supported backend plugins. * Features / Enhancements - Backend plugins: Log deprecation warning when using the unofficial first version of backend plugins. #24675, @marefr - Editor: New line on Enter, run query on Shift+Enter. #24654, @davkal - Loki: Allow multiple derived fields with the same name. #24437, @aocenas - Orgs: Add future deprecation notice. #24502, @torkelo * Bug Fixes - @grafana/toolkit: Use process.cwd() instead of PWD to get directory. #24677, @zoltanbedi - Admin: Makes long settings values line break in settings page. #24559, @hugohaggmark - Dashboard: Allow editing provisioned dashboard JSON and add confirmation when JSON is copied to dashboard. #24680, @dprokop - Dashboard: Fix for strange 'dashboard not found' errors when opening links in dashboard settings. #24416, @torkelo - Dashboard: Fix so default data source is selected when data source can't be found in panel editor. #24526, @mckn - Dashboard: Fixed issue changing a panel from transparent back to normal in panel editor. #24483, @torkelo - Dashboard: Make header names reflect the field name when exporting to CSV file from the the panel inspector. #24624, @peterholmberg - Dashboard: Make sure side pane is displayed with tabs by default in panel editor. #24636, @dprokop - Data source: Fix query/annotation help content formatting. #24687, @AgnesToulet - Data source: Fixes async mount errors. #24579, @Estrax - Data source: Fixes saving a data source without failure when URL doesn't specify a protocol. #24497, @aknuds1 - Explore/Prometheus: Show results of instant queries only in table. #24508, @ivanahuckova - Explore: Fix rendering of react query editors. #24593, @ivanahuckova - Explore: Fixes loading more logs in logs context view. #24135, @Estrax - Graphite: Fix schema and dedupe strategy in rollup indicators for Metrictank queries. #24685, @torkelo - Graphite: Makes query annotations work again. #24556, @hugohaggmark - Logs: Clicking 'Load more' from context overlay doesn't expand log row. #24299, @kaydelaney - Logs: Fix total bytes process calculation. #24691, @davkal - Org/user/team preferences: Fixes so UI Theme can be set back to Default. #24628, @AgnesToulet - Plugins: Fix manifest validation. #24573, @aknuds1 - Provisioning: Use proxy as default access mode in provisioning. #24669, @bergquist - Search: Fix select item when pressing enter and Grafana is served using a sub path. #24634, @tskarhed - Search: Save folder expanded state. #24496, @Clarity-89 - Security: Tag value sanitization fix in OpenTSDB data source. #24539, @rotemreiss - Table: Do not include angular options in options when switching from angular panel. #24684, @torkelo - Table: Fixed persisting column resize for time series fields. #24505, @torkelo - Table: Fixes Cannot read property subRows of null. #24578, @hugohaggmark - Time picker: Fixed so you can enter a relative range in the time picker without being converted to absolute range. #24534, @mckn - Transformations: Make transform dropdowns not cropped. #24615, @dprokop - Transformations: Sort order should be preserved as entered by user when using the reduce transformation. #24494, @hugohaggmark - Units: Adds scale symbol for currencies with suffixed symbol. #24678, @hugohaggmark - Variables: Fixes filtering options with more than 1000 entries. #24614, @hugohaggmark - Variables: Fixes so Textbox variables read value from url. #24623, @hugohaggmark - Zipkin: Fix error when span contains remoteEndpoint. #24524, @aocenas - SAML: Switch from email to login for user login attribute mapping (Enterprise) Moderate SUSE bug 1170557 CVE-2019-15043 CVE-2020-12245 CVE-2020-13379 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for helm fixes the following issues: helm was updated to version 3.9.4: * CVE-2022-36055: Fixed denial of service through string value parsing (bsc#1203054). * Updating the certificates used for testing * Updating index handling helm was updated to version 3.9.3: - CVE-2022-1996: Updated kube-openapi to fix an issue that could result in a CORS protection bypass (bsc#1200528). * Fix missing array length check on release helm was updated to version 3.9.2: * Update of the circleci image helm was updated to version 3.9.1: * Update to support Kubernetes 1.24.2 * Improve logging and safety of statefulSetReady * Make token caching an opt-in feature * Bump github.com/lib/pq from 1.10.5 to 1.10.6 * Bump github.com/Masterminds/squirrel from 1.5.2 to 1.5.3 helm was updated to version 3.9.0: * Added a --quiet flag to helm lint * Added a --post-renderer-args flag to support arguments being passed to the post renderer * Added more checks during the signing process * Updated to add Kubernetes 1.24 support helm was updated to version 3.8.2: * Bump oras.land/oras-go from 1.1.0 to 1.1.1 * Fixing downloader plugin error handling * Simplify testdata charts * Simplify testdata charts * Add tests for multi-level dependencies. * Fix value precedence * Bumping Kubernetes package versions * Updating vcs to latest version * Dont modify provided transport * Pass http getter as pointer in tests * Add docs block * Add transport option and tests * Reuse http transport * Updating Kubernetes libs to 0.23.4 (latest) * fix: remove deadcode * fix: helm package tests * fix: helm package with dependency update for charts with OCI dependencies * Fix typo Unset the env var before func return in Unit Test * add legal name check * maint: fix syntax error in deploy.sh * linting issue fixed * only apply overwrite if version is canary * overwrite flag added to az storage blob upload-batch * Avoid querying for OCI tags can explicit version provided in chart dependencies * Management of bearer tokens for tag listing * Updating Kubernetes packages to 1.23.3 * refactor: use `os.ReadDir` for lightweight directory reading * Add IngressClass to manifests to be (un)installed * feat(comp): Shell completion for OCI * Fix install memory/goroutine leak Important SUSE bug 1200528 SUSE bug 1203054 CVE-2022-1996 CVE-2022-36055 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for icedtea-web fixes the following issues: - CVE-2019-10181: Fixed an issue where an attacker could inject unsigned code in a signed JAR file (bsc#1142835). - CVE-2019-10182: Fixed a path traversal issue where an attacker could upload arbritrary files by tricking a victim into running a specially crafted application(bsc#1142825). - CVE-2019-10185: Fixed an issue where an attacker could write files to arbitrary locations during JAR auto-extraction (bsc#1142832). Important SUSE bug 1142825 SUSE bug 1142832 SUSE bug 1142835 CVE-2019-10181 CVE-2019-10182 CVE-2019-10185 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for java-11-openjdk fixes the following issues: - Update to upstream tag jdk-11.0.9-11 (October 2020 CPU, bsc#1177943) * New features + JDK-8250784: Shenandoah: A Low-Pause-Time Garbage Collector * Security fixes + JDK-8233624: Enhance JNI linkage + JDK-8236196: Improve string pooling + JDK-8236862, CVE-2020-14779: Enhance support of Proxy class + JDK-8237990, CVE-2020-14781: Enhanced LDAP contexts + JDK-8237995, CVE-2020-14782: Enhance certificate processing + JDK-8240124: Better VM Interning + JDK-8241114, CVE-2020-14792: Better range handling + JDK-8242680, CVE-2020-14796: Improved URI Support + JDK-8242685, CVE-2020-14797: Better Path Validation + JDK-8242695, CVE-2020-14798: Enhanced buffer support + JDK-8243302: Advanced class supports + JDK-8244136, CVE-2020-14803: Improved Buffer supports + JDK-8244479: Further constrain certificates + JDK-8244955: Additional Fix for JDK-8240124 + JDK-8245407: Enhance zoning of times + JDK-8245412: Better class definitions + JDK-8245417: Improve certificate chain handling + JDK-8248574: Improve jpeg processing + JDK-8249927: Specify limits of jdk.serialProxyInterfaceLimit + JDK-8253019: Enhanced JPEG decoding * Other changes + JDK-6532025: GIF reader throws misleading exception with truncated images + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/ /PDialogTest.java needs update by removing an infinite loop + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/ /Test8017492.java fails + JDK-8062947: Fix exception message to correctly represent LDAP connection failure + JDK-8067354: com/sun/jdi/GetLocalVariables4Test.sh failed + JDK-8134599: TEST_BUG: java/rmi/transport/closeServerSocket/ /CloseServerSocket.java fails intermittently with Address already in use + JDK-8151678: com/sun/jndi/ldap/LdapTimeoutTest.java failed due to timeout on DeadServerNoTimeoutTest is incorrect + JDK-8160768: Add capability to custom resolve host/domain names within the default JNDI LDAP provider + JDK-8172404: Tools should warn if weak algorithms are used before restricting them + JDK-8193367: Annotated type variable bounds crash javac + JDK-8202117: com/sun/jndi/ldap/RemoveNamingListenerTest.java fails intermittently: Connection reset + JDK-8203026: java.rmi.NoSuchObjectException: no such object in table + JDK-8203281: [Windows] JComboBox change in ui when editor.setBorder() is called + JDK-8203382: Rename SystemDictionary::initialize_wk_klass to resolve_wk_klass + JDK-8203393: com/sun/jdi/JdbMethodExitTest.sh and JdbExprTest.sh fail due to timeout + JDK-8203928: [Test] Convert non-JDB scaffolding serviceability shell script tests to java + JDK-8204963: javax.swing.border.TitledBorder has a memory leak + JDK-8204994: SA might fail to attach to process with 'Windbg Error: WaitForEvent failed' + JDK-8205534: Remove SymbolTable dependency from serviceability agent + JDK-8206309: Tier1 SA tests fail + JDK-8208281: java/nio/channels/ /AsynchronousSocketChannel/Basic.java timed out + JDK-8209109: [TEST] rewrite com/sun/jdi shell tests to java version - step1 + JDK-8209332: [TEST] test/jdk/com/sun/jdi/CatchPatternTest.sh is incorrect + JDK-8209342: Problemlist SA tests on Solaris due to Error attaching to process: Can't create thread_db agent! + JDK-8209343: Test javax/swing/border/TestTitledBorderLeak.java should be marked as headful + JDK-8209517: com/sun/jdi/BreakpointWithFullGC.java fails with timeout + JDK-8209604: [TEST] rewrite com/sun/jdi shell tests to java version - step2 + JDK-8209605: com/sun/jdi/BreakpointWithFullGC.java fails with ZGC + JDK-8209608: Problem list com/sun/jdi/BreakpointWithFullGC.java + JDK-8210131: vmTestbase/nsk/jvmti/scenarios/allocation/AP10/ /ap10t001/TestDescription.java failed with ObjectFree: GetCurrentThreadCpuTimerInfo returned unexpected error code + JDK-8210243: [TEST] rewrite com/sun/jdi shell tests to java version - step3 + JDK-8210527: JShell: NullPointerException in jdk.jshell.Eval.translateExceptionStack + JDK-8210560: [TEST] convert com/sun/jdi redefineClass-related tests + JDK-8210725: com/sun/jdi/RedefineClearBreakpoint.java fails with waitForPrompt timed out after 60 seconds + JDK-8210748: [TESTBUG] lib.jdb.Jdb.waitForPrompt() should clarify which output is the pending reply after a timeout + JDK-8210760: [TEST] rewrite com/sun/jdi shell tests to java version - step4 + JDK-8210977: jdk/jfr/event/oldobject/TestThreadLocalLeak.java fails to find ThreadLocalObject + JDK-8211292: [TEST] convert com/sun/jdi/DeferredStepTest.sh test + JDK-8211694: JShell: Redeclared variable should be reset + JDK-8212200: assert when shared java.lang.Object is redefined by JVMTI agent + JDK-8212629: [TEST] wrong breakpoint in test/jdk/com/sun/jdi/DeferredStepTest + JDK-8212665: com/sun/jdi/DeferredStepTest.java: jj1 (line 57) - unexpected. lastLine=52, minLine=52, maxLine=55 + JDK-8212807: tools/jar/multiRelease/Basic.java times out + JDK-8213182: Minimal VM build failure after JDK-8212200 (assert when shared java.lang.Object is redefined by JVMTI agent) + JDK-8213214: Set -Djava.io.tmpdir= when running tests + JDK-8213275: ReplaceCriticalClasses.java fails with jdk.internal.vm.PostVMInitHook not found + JDK-8213574: Deadlock in string table expansion when dumping lots of CDS classes + JDK-8213703: LambdaConversionException: Invalid receiver type not a subtype of implementation type interface + JDK-8214074: Ghash optimization using AVX instructions + JDK-8214491: Upgrade to JLine 3.9.0 + JDK-8214797: TestJmapCoreMetaspace.java timed out + JDK-8215243: JShell tests failing intermitently with 'Problem cleaning up the following threads:' + JDK-8215244: jdk/jshell/ToolBasicTest.java testHistoryReference failed + JDK-8215354: x86_32 build failures after JDK-8214074 (Ghash optimization using AVX instructions) + JDK-8215438: jshell tool: Ctrl-D causes EOF + JDK-8216021: RunTest.gmk might set concurrency level to 1 on Windows + JDK-8216974: HttpConnection not returned to the pool after 204 response + JDK-8218948: SimpleDateFormat :: format - Zone Names are not reflected correctly during run time + JDK-8219712: code_size2 (defined in stub_routines_x86.hpp) is too small on new Skylake CPUs + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs instead of aliased B&W glyphs + JDK-8221658: aarch64: add necessary predicate for ubfx patterns + JDK-8221759: Crash when completing 'java.io.File.path' + JDK-8221918: runtime/SharedArchiveFile/serviceability/ /ReplaceCriticalClasses.java fails: Shared archive not found + JDK-8222074: Enhance auto vectorization for x86 + JDK-8222079: Don't use memset to initialize fields decode_env constructor in disassembler.cpp + JDK-8222769: [TESTBUG] TestJFRNetworkEvents should not rely on hostname command + JDK-8223688: JShell: crash on the instantiation of raw anonymous class + JDK-8223777: In posix_spawn mode, failing to exec() jspawnhelper does not result in an error + JDK-8223940: Private key not supported by chosen signature algorithm + JDK-8224184: jshell got IOException at exiting with AIX + JDK-8224234: compiler/codegen/TestCharVect2.java fails in test_mulc + JDK-8225037: java.net.JarURLConnection::getJarEntry() throws NullPointerException + JDK-8225625: AES Electronic Codebook (ECB) encryption and decryption optimization using AVX512 + VAES instructions + JDK-8226536: Catch OOM from deopt that fails rematerializing objects + JDK-8226575: OperatingSystemMXBean should be made container aware + JDK-8226697: Several tests which need the @key headful keyword are missing it. + JDK-8226809: Circular reference in printed stack trace is not correctly indented & ambiguous + JDK-8227059: sun/security/tools/keytool/ /DefaultSignatureAlgorithm.java timed out + JDK-8227269: Slow class loading when running with JDWP + JDK-8227595: keytool/fakegen/DefaultSignatureAlgorithm.java fails due to 'exitValue = 6' + JDK-8228448: Jconsole can't connect to itself + JDK-8228967: Trust/Key store and SSL context utilities for tests + JDK-8229378: jdwp library loader in linker_md.c quietly truncates on buffer overflow + JDK-8229815: Upgrade Jline to 3.12.1 + JDK-8230000: some httpclients testng tests run zero test + JDK-8230002: javax/xml/jaxp/unittest/transform/ /SecureProcessingTest.java runs zero test + JDK-8230010: Remove jdk8037819/BasicTest1.java + JDK-8230094: CCE in createXMLEventWriter(Result) over an arbitrary XMLStreamWriter + JDK-8230402: Allocation of compile task fails with assert: 'Leaking compilation tasks?' + JDK-8230767: FlightRecorderListener returns null recording + JDK-8230870: (zipfs) Add a ZIP FS test that is similar to test/jdk/java/util/zip/EntryCount64k.java + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes() can be quicker for self thread + JDK-8231586: enlarge encoding space for OopMapValue offsets + JDK-8231953: Wrong assumption in assertion in oop::register_oop + JDK-8231968: getCurrentThreadAllocatedBytes default implementation s/b getThreadAllocatedBytes + JDK-8232083: Minimal VM is broken after JDK-8231586 + JDK-8232161: Align some one-way conversion in MS950 charset with Windows + JDK-8232855: jshell missing word in /help help + JDK-8233027: OopMapSet::all_do does oms.next() twice during iteration + JDK-8233228: Disable weak named curves by default in TLS, CertPath, and Signed JAR + JDK-8233386: Initialize NULL fields for unused decorations + JDK-8233452: java.math.BigDecimal.sqrt() with RoundingMode.FLOOR results in incorrect result + JDK-8233686: XML transformer uses excessive amount of memory + JDK-8233741: AES Countermode (AES-CTR) optimization using AVX512 + VAES instructions + JDK-8233829: javac cannot find non-ASCII module name under non-UTF8 environment + JDK-8233958: Memory retention due to HttpsURLConnection finalizer that serves no purpose + JDK-8234011: (zipfs) Memory leak in ZipFileSystem.releaseDeflater() + JDK-8234058: runtime/CompressedOops/ /CompressedClassPointers.java fails with 'Narrow klass base: 0x0000000000000000' missing from stdout/stderr + JDK-8234149: Several regression tests do not dispose Frame at end + JDK-8234347: 'Turkey' meta time zone does not generate composed localized names + JDK-8234385: [TESTBUG] java/awt/EventQueue/6980209/ /bug6980209.java fails in linux nightly + JDK-8234535: Cross compilation fails due to missing CFLAGS for the BUILD_CC + JDK-8234541: C1 emits an empty message when it inlines successfully + JDK-8234687: change javap reporting on unknown attributes + JDK-8236464: SO_LINGER option is ignored by SSLSocket in JDK 11 + JDK-8236548: Localized time zone name inconsistency between English and other locales + JDK-8236617: jtreg test containers/docker/ /TestMemoryAwareness.java fails after 8226575 + JDK-8237182: Update copyright header for shenandoah and epsilon files + JDK-8237888: security/infra/java/security/cert/ /CertPathValidator/certification/LuxTrustCA.java fails when checking validity interval + JDK-8237977: Further update javax/net/ssl/compatibility/Compatibility.java + JDK-8238270: java.net HTTP/2 client does not decrease stream count when receives 204 response + JDK-8238284: [macos] Zero VM build fails due to an obvious typo + JDK-8238380: java.base/unix/native/libjava/childproc.c 'multiple definition' link errors with GCC10 + JDK-8238386: (sctp) jdk.sctp/unix/native/libsctp/SctpNet.c 'multiple definition' link errors with GCC10 + JDK-8238388: libj2gss/NativeFunc.o 'multiple definition' link errors with GCC10 + JDK-8238448: RSASSA-PSS signature verification fail when using certain odd key sizes + JDK-8238710: LingeredApp doesn't log stdout/stderr if exits with non-zero code + JDK-8239083: C1 assert(known_holder == NULL || (known_holder->is_instance_klass() && (!known_holder->is_interface() || ((ciInstanceKlass*)known_holder)->has_nonstatic_concrete_methods())), 'should be non-static concrete method'); + JDK-8239385: KerberosTicket client name refers wrongly to sAMAccountName in AD + JDK-8240169: javadoc fails to link to non-modular api docs + JDK-8240295: hs_err elapsed time in seconds is not accurate enough + JDK-8240360: NativeLibraryEvent has wrong library name on Linux + JDK-8240676: Meet not symmetric failure when running lucene on jdk8 + JDK-8241007: Shenandoah: remove ShenandoahCriticalControlThreadPriority support + JDK-8241065: Shenandoah: remove leftover code after JDK-8231086 + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is failing on 32bit Windows + JDK-8241130: com.sun.jndi.ldap.EventSupport.removeDeadNotifier: java.lang.NullPointerException + JDK-8241138: http.nonProxyHosts=* causes StringIndexOutOfBoundsException in DefaultProxySelector + JDK-8241319: WB_GetCodeBlob doesn't have ResourceMark + JDK-8241478: vmTestbase/gc/gctests/Steal/steal001/steal001.java fails with OOME + JDK-8241574: Shenandoah: remove ShenandoahAssertToSpaceClosure + JDK-8241750: x86_32 build failure after JDK-8227269 + JDK-8242184: CRL generation error with RSASSA-PSS + JDK-8242283: Can't start JVM when java home path includes non-ASCII character + JDK-8242556: Cannot load RSASSA-PSS public key with non-null params from byte array + JDK-8243029: Rewrite javax/net/ssl/compatibility/ /Compatibility.java with a flexible interop test framework + JDK-8243138: Enhance BaseLdapServer to support starttls extended request + JDK-8243320: Add SSL root certificates to Oracle Root CA program + JDK-8243321: Add Entrust root CA - G4 to Oracle Root CA program + JDK-8243389: enhance os::pd_print_cpu_info on linux + JDK-8243453: java --describe-module failed with non-ASCII module name under non-UTF8 environment + JDK-8243470: [macos] bring back O2 opt level for unsafe.cpp + JDK-8243489: Thread CPU Load event may contain wrong data for CPU time under certain conditions + JDK-8243925: Toolkit#getScreenInsets() returns wrong value on HiDPI screens (Windows) + JDK-8244087: 2020-04-24 public suffix list update + JDK-8244151: Update MUSCLE PC/SC-Lite headers to the latest release 1.8.26 + JDK-8244164: AArch64: jaotc generates incorrect code for compressed OOPs with non-zero heap base + JDK-8244196: adjust output in os_linux + JDK-8244225: stringop-overflow warning on strncpy call from compile_the_world_in + JDK-8244287: JFR: Methods samples have line number 0 + JDK-8244703: 'platform encoding not initialized' exceptions with debugger, JNI + JDK-8244719: CTW: C2 compilation fails with 'assert(!VerifyHashTableKeys || _hash_lock == 0) failed: remove node from hash table before modifying it' + JDK-8244729: Shenandoah: remove resolve paths from SBSA::generate_shenandoah_lrb + JDK-8244763: Update --release 8 symbol information after JSR 337 MR3 + JDK-8244818: Java2D Queue Flusher crash while moving application window to external monitor + JDK-8245151: jarsigner should not raise duplicate warnings on verification + JDK-8245616: Bump update version for OpenJDK: jdk-11.0.9 + JDK-8245714: 'Bad graph detected in build_loop_late' when loads are pinned on loop limit check uncommon branch + JDK-8245801: StressRecompilation triggers assert 'redundunt OSR recompilation detected. memory leak in CodeCache!' + JDK-8245832: JDK build make-static-libs should build all JDK libraries + JDK-8245880: Shenandoah: check class unloading flag early in concurrent code root scan + JDK-8245981: Upgrade to jQuery 3.5.1 + JDK-8246027: Minimal fastdebug build broken after JDK-8245801 + JDK-8246094: [macos] Sound Recording and playback is not working + JDK-8246153: TestEliminateArrayCopy fails with -XX:+StressReflectiveCode + JDK-8246193: Possible NPE in ENC-PA-REP search in AS-REQ + JDK-8246196: javax/management/MBeanServer/OldMBeanServerTest fails with AssertionError + JDK-8246203: Segmentation fault in verification due to stack overflow with -XX:+VerifyIterativeGVN + JDK-8246330: Add TLS Tests for Legacy ECDSA curves + JDK-8246453: TestClone crashes with 'all collected exceptions must come from the same place' + JDK-8247246: Add explicit ResolvedJavaType.link and expose presence of default methods + JDK-8247350: [aarch64] assert(false) failed: wrong size of mach node + JDK-8247502: PhaseStringOpts crashes while optimising effectively dead code + JDK-8247615: Initialize the bytes left for the heap sampler + JDK-8247824: CTW: C2 (Shenandoah) compilation fails with SEGV in SBC2Support::pin_and_expand + JDK-8247874: Replacement in VersionProps.java.template not working when --with-vendor-bug-url contains '&' + JDK-8247979: aarch64: missing side effect of killing flags for clearArray_reg_reg + JDK-8248214: Add paddings for TaskQueueSuper to reduce false-sharing cache contention + JDK-8248219: aarch64: missing memory barrier in fast_storefield and fast_accessfield + JDK-8248348: Regression caused by the update to BCEL 6.0 + JDK-8248385: [testbug][11u] Adapt TestInitiExceptions to jtreg 5.1 + JDK-8248495: [macos] zerovm is broken due to libffi headers location + JDK-8248851: CMS: Missing memory fences between free chunk check and klass read + JDK-8248987: AOT's Linker.java seems to eagerly fail-fast on Windows + JDK-8249159: Downport test rework for SSLSocketTemplate from 8224650 + JDK-8249215: JFrame::setVisible crashed with -Dfile.encoding=UTF-8 on Japanese Windows. + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not highlighted in GTKLookAndFeel + JDK-8249255: Build fails if source code in cygwin home dir + JDK-8249277: TestVerifyIterativeGVN.java is failing with timeout in OpenJDK 11 + JDK-8249278: Revert JDK-8226253 which breaks the spec of AccessibleState.SHOWING for JList + JDK-8249560: Shenandoah: Fix racy GC request handling + JDK-8249801: Shenandoah: Clear soft-refs on requested GC cycle + JDK-8249953: Shenandoah: gc/shenandoah/mxbeans tests should account for corner cases + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when requesting TGS Kerberos tickets + JDK-8250609: C2 crash in IfNode::fold_compares + JDK-8250627: Use -XX:+/-UseContainerSupport for enabling/disabling Java container metrics + JDK-8250755: Better cleanup for jdk/test/javax/imageio/plugins/shared/CanWriteSequence.java + JDK-8250787: Provider.put no longer registering aliases in FIPS env + JDK-8250826: jhsdb does not work with coredump which comes from Substrate VM + JDK-8250827: Shenandoah: needs to reset/finish StringTable's dead count before/after parallel walk + JDK-8250844: Make sure {type,obj}ArrayOopDesc accessors check the bounds + JDK-8251117: Cannot check P11Key size in P11Cipher and P11AEADCipher + JDK-8251354: Shenandoah: Fix jdk/jfr/tool/TestPrintJSON.java test failure + JDK-8251451: Shenandoah: Remark ObjectSynchronizer roots with I-U + JDK-8251469: Better cleanup for test/jdk/javax/imageio/SetOutput.java + JDK-8251487: Shenandoah: missing detail timing tracking for final mark cleaning phase + JDK-8252120: compiler/oracle/TestCompileCommand.java misspells 'occured' + JDK-8252157: JDK-8231209 11u backport breaks jmm binary compatibility + JDK-8252258: [11u] JDK-8242154 changes the default vendor + JDK-8252804: [test] Fix 'ReleaseDeflater.java' test after downport of 8234011 + JDK-8253134: JMM_VERSION should remain at 0x20020000 (JDK 10) in JDK 11 + JDK-8253283: [11u] Test build/translations/ /VerifyTranslations.java failing after JDK-8252258 + JDK-8253813: Backout JDK-8244287 from 11u: it causes several crashes + Fix regression '8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)' introduced in jdk 11.0.9 Moderate SUSE bug 1177943 CVE-2020-14779 CVE-2020-14781 CVE-2020-14782 CVE-2020-14792 CVE-2020-14796 CVE-2020-14797 CVE-2020-14798 CVE-2020-14803 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for java-1_8_0-openj9 fixes the following issues: - CVE-2023-21830: Fixed improper restrictions in CORBA deserialization (bsc#1207249). - CVE-2023-21843: Fixed soundbank URL remote loading (bsc#1207248). Moderate SUSE bug 1207248 SUSE bug 1207249 CVE-2023-21830 CVE-2023-21843 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for ldns fixes the following issues: - CVE-2020-19860: Fixed heap-based out of bounds read when verifying a zone file (bsc#1195057). - CVE-2020-19861: Fixed heap-based out of bounds read in ldns_nsec3_salt_data() (bsc#1195058). Moderate SUSE bug 1195057 SUSE bug 1195058 CVE-2020-19860 CVE-2020-19861 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libXpm fixes the following issues: - CVE-2022-46285: Fixed an infinite loop that could be triggered when reading a XPM image with a C-style comment that is never closed (bsc#1207029). - CVE-2022-44617: Fixed an excessive resource consumption that could be triggered when reading small crafted XPM image (bsc#1207030). - CVE-2022-4883: Fixed an issue that made decompression commands susceptible to PATH environment variable manipulation attacks (bsc#1207031). Important SUSE bug 1207029 SUSE bug 1207030 SUSE bug 1207031 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libconfuse0 fixes the following issues: - CVE-2022-40320: Fixed a heap-based buffer over-read in cfg_tilde_expand in confuse.c (bsc#1203326). Important SUSE bug 1203326 CVE-2022-40320 cpe:/o:suse:packagehub:15:sp5 (Low) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libdwarf fixes the following issues: - Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057). Low SUSE bug 1185057 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for LibreOffice, libepubgen, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues: LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes: The full changelog can be found on: https://wiki.documentfoundation.org/ReleaseNotes/6.1 Bugfixes: - bsc#1095639 Exporting to PPTX results in vertical labels being shown horizontally - bsc#1098891 Table in PPTX misplaced and partly blue - bsc#1088263 Labels in chart change (from white and other colors) to black when saving as PPTX - bsc#1095601 Exporting to PPTX shifts arrow shapes quite a bit - Add more translations: * Belarusian * Bodo * Dogri * Frisian * Gaelic * Paraguayan_Guaran * Upper_Sorbian * Konkani * Kashmiri * Luxembourgish * Monglolian * Manipuri * Burnese * Occitan * Kinyarwanda * Santali * Sanskrit * Sindhi * Sidamo * Tatar * Uzbek * Upper Sorbian * Venetian * Amharic * Asturian * Tibetian * Bosnian * English GB * English ZA * Indonesian * Icelandic * Georgian * Khmer * Lao * Macedonian * Nepali * Oromo * Albanian * Tajik * Uyghur * Vietnamese * Kurdish - Try to build all languages see bsc#1096360 - Make sure to install the KDE5/Qt5 UI/filepicker - Try to implement safeguarding to avoid bsc#1050305 - Disable base-drivers-mysql as it needs mysqlcppcon that is only for mysql and not mariadb, causes issues bsc#1094779 * Users can still connect using jdbc/odbc - Fix java detection on machines with too many cpus - CVE-2018-10583: An information disclosure vulnerability occured when LibreOffice automatically processed and initiated an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606) libepubgen was updated to 0.1.1: - Avoid <div> inside <p> or <span>. - Avoid writin vertical-align attribute without a value. - Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote. - Handle relative width for images. - Fixed layout: write chapter names to improve navigation. - Support writing mode. - Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML <body> attribute. liblangtag was updated to 0.6.2: - use standard function - fix leak in test libmwaw was updated to 0.3.14: - Support MS Multiplan 1.1 files libnumbertext was update to 1.0.5: - Various fixes in numerical calculations and issues reported on libreoffice tracker libstaroffice was updated to 0.0.6: - retrieve some StarMath's formula, - retrieve some charts as graphic, - retrieve some fields in sda/sdc/sdp text-boxes, - .sdw: retrieve more attachments. libwps was updated to 0.4.9: - QuattroPro: add parser to .wb3 files - Multiplan: add parser to DOS v1-v3 files - charts: try to retrieve charts in .wk*, .wq* files - QuattroPro: add parser to .wb[12] files myspell-dictionaries was updated to 20181025: - Turkish dictionary added - Updated French dictionary xmlsec1 was updated to 1.2.26: - Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation - Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto Moderate SUSE bug 1050305 SUSE bug 1088263 SUSE bug 1091606 SUSE bug 1094779 SUSE bug 1095601 SUSE bug 1095639 SUSE bug 1096360 SUSE bug 1098891 SUSE bug 1104876 CVE-2018-10583 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libexif to 0.6.22 fixes the following issues: Security issues fixed: - CVE-2016-6328: Fixed an integer overflow in parsing MNOTE entry data of the input file (bsc#1055857). - CVE-2017-7544: Fixed an out-of-bounds heap read vulnerability in exif_data_save_data_entry function in libexif/exif-data.c (bsc#1059893). - CVE-2018-20030: Fixed a denial of service by endless recursion (bsc#1120943). - CVE-2019-9278: Fixed an integer overflow (bsc#1160770). - CVE-2020-0093: Fixed an out-of-bounds read in exif_data_save_data_entry (bsc#1171847). - CVE-2020-12767: Fixed a divide-by-zero error in exif_entry_get_value (bsc#1171475). - CVE-2020-13112: Fixed a time consumption DoS when parsing canon array markers (bsc#1172121). - CVE-2020-13113: Fixed a potential use of uninitialized memory (bsc#1172105). - CVE-2020-13114: Fixed various buffer overread fixes due to integer overflows in maker notes (bsc#1172116). Non-security issues fixed: - libexif was updated to version 0.6.22: * New translations: ms * Updated translations for most languages * Some useful EXIF 2.3 tag added: * EXIF_TAG_GAMMA * EXIF_TAG_COMPOSITE_IMAGE * EXIF_TAG_SOURCE_IMAGE_NUMBER_OF_COMPOSITE_IMAGE * EXIF_TAG_SOURCE_EXPOSURE_TIMES_OF_COMPOSITE_IMAGE * EXIF_TAG_GPS_H_POSITIONING_ERROR * EXIF_TAG_CAMERA_OWNER_NAME * EXIF_TAG_BODY_SERIAL_NUMBER * EXIF_TAG_LENS_SPECIFICATION * EXIF_TAG_LENS_MAKE * EXIF_TAG_LENS_MODEL * EXIF_TAG_LENS_SERIAL_NUMBER Moderate SUSE bug 1055857 SUSE bug 1059893 SUSE bug 1120943 SUSE bug 1160770 SUSE bug 1171475 SUSE bug 1171847 SUSE bug 1172105 SUSE bug 1172116 SUSE bug 1172121 CVE-2016-6328 CVE-2017-7544 CVE-2018-20030 CVE-2019-9278 CVE-2020-0093 CVE-2020-12767 CVE-2020-13112 CVE-2020-13113 CVE-2020-13114 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libheif fixes the following issues: - CVE-2023-0996: Fixed a buffer overflow in heif_js_decode_image (bsc#1208640). Moderate CVE-2023-0996 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.2.5.2 (fate#327121 bsc#1128845 bsc#1123455), bringing lots of bug and stability fixes. Additional bugfixes: - If there is no firebird engine we still need java to run hsqldb (bsc#1135189) - PPTX: Rectangle turns from green to blue and loses transparency when transparency is set (bsc#1135228) - Slide deck compression doesn't, hmm, compress too much (bsc#1127760) - Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869) - Image from PPTX shown in a square, not a circle (bsc#1121874) libixion was updated to 0.14.1: * Updated for new orcus liborcus was updated to 0.14.1: * Boost 1.67 support * Various cell handling issues fixed libwps was updated to 0.4.10: * QuattroPro: add parser of .qwp files * all: support complex encoding mdds was updated to 1.4.3: * Api change to 1.4 * More multivector operations and tweaks * Various multi vector fixes * flat_segment_tree: add segment iterator and functions * fix to handle out-of-range insertions on flat_segment_tree * Another api version -> rename to mdds-1_2 myspell-dictionaries was updated to 20190423: * Serbian dictionary updated * Update af_ZA hunspell * Update Spanish dictionary * Update Slovenian dictionary * Update Breton dictionary * Update Galician dictionary Moderate SUSE bug 1089811 SUSE bug 1116451 SUSE bug 1121874 SUSE bug 1123131 SUSE bug 1123455 SUSE bug 1124062 SUSE bug 1124869 SUSE bug 1127760 SUSE bug 1127857 SUSE bug 1128845 SUSE bug 1135189 SUSE bug 1135228 CVE-2018-16858 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for LibreOffice, libepubgen, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues: LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes: The full changelog can be found on: https://wiki.documentfoundation.org/ReleaseNotes/6.1 Bugfixes: - bsc#1095639 Exporting to PPTX results in vertical labels being shown horizontally - bsc#1098891 Table in PPTX misplaced and partly blue - bsc#1088263 Labels in chart change (from white and other colors) to black when saving as PPTX - bsc#1095601 Exporting to PPTX shifts arrow shapes quite a bit - Add more translations: * Belarusian * Bodo * Dogri * Frisian * Gaelic * Paraguayan_Guaran * Upper_Sorbian * Konkani * Kashmiri * Luxembourgish * Monglolian * Manipuri * Burnese * Occitan * Kinyarwanda * Santali * Sanskrit * Sindhi * Sidamo * Tatar * Uzbek * Upper Sorbian * Venetian * Amharic * Asturian * Tibetian * Bosnian * English GB * English ZA * Indonesian * Icelandic * Georgian * Khmer * Lao * Macedonian * Nepali * Oromo * Albanian * Tajik * Uyghur * Vietnamese * Kurdish - Try to build all languages see bsc#1096360 - Make sure to install the KDE5/Qt5 UI/filepicker - Try to implement safeguarding to avoid bsc#1050305 - Disable base-drivers-mysql as it needs mysqlcppcon that is only for mysql and not mariadb, causes issues bsc#1094779 * Users can still connect using jdbc/odbc - Fix java detection on machines with too many cpus - CVE-2018-10583: An information disclosure vulnerability occured when LibreOffice automatically processed and initiated an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606) libepubgen was updated to 0.1.1: - Avoid <div> inside <p> or <span>. - Avoid writin vertical-align attribute without a value. - Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote. - Handle relative width for images. - Fixed layout: write chapter names to improve navigation. - Support writing mode. - Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML <body> attribute. liblangtag was updated to 0.6.2: - use standard function - fix leak in test libmwaw was updated to 0.3.14: - Support MS Multiplan 1.1 files libnumbertext was update to 1.0.5: - Various fixes in numerical calculations and issues reported on libreoffice tracker libstaroffice was updated to 0.0.6: - retrieve some StarMath's formula, - retrieve some charts as graphic, - retrieve some fields in sda/sdc/sdp text-boxes, - .sdw: retrieve more attachments. libwps was updated to 0.4.9: - QuattroPro: add parser to .wb3 files - Multiplan: add parser to DOS v1-v3 files - charts: try to retrieve charts in .wk*, .wq* files - QuattroPro: add parser to .wb[12] files myspell-dictionaries was updated to 20181025: - Turkish dictionary added - Updated French dictionary xmlsec1 was updated to 1.2.26: - Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation - Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto Moderate SUSE bug 1050305 SUSE bug 1088263 SUSE bug 1091606 SUSE bug 1094779 SUSE bug 1095601 SUSE bug 1095639 SUSE bug 1096360 SUSE bug 1098891 SUSE bug 1104876 CVE-2018-10583 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.2.5.2 (fate#327121 bsc#1128845 bsc#1123455), bringing lots of bug and stability fixes. Additional bugfixes: - If there is no firebird engine we still need java to run hsqldb (bsc#1135189) - PPTX: Rectangle turns from green to blue and loses transparency when transparency is set (bsc#1135228) - Slide deck compression doesn't, hmm, compress too much (bsc#1127760) - Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869) - Image from PPTX shown in a square, not a circle (bsc#1121874) libixion was updated to 0.14.1: * Updated for new orcus liborcus was updated to 0.14.1: * Boost 1.67 support * Various cell handling issues fixed libwps was updated to 0.4.10: * QuattroPro: add parser of .qwp files * all: support complex encoding mdds was updated to 1.4.3: * Api change to 1.4 * More multivector operations and tweaks * Various multi vector fixes * flat_segment_tree: add segment iterator and functions * fix to handle out-of-range insertions on flat_segment_tree * Another api version -> rename to mdds-1_2 myspell-dictionaries was updated to 20190423: * Serbian dictionary updated * Update af_ZA hunspell * Update Spanish dictionary * Update Slovenian dictionary * Update Breton dictionary * Update Galician dictionary Moderate SUSE bug 1089811 SUSE bug 1116451 SUSE bug 1121874 SUSE bug 1123131 SUSE bug 1123455 SUSE bug 1124062 SUSE bug 1124869 SUSE bug 1127760 SUSE bug 1127857 SUSE bug 1128845 SUSE bug 1135189 SUSE bug 1135228 CVE-2018-16858 cpe:/o:suse:packagehub:15:sp5 (Low) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libraw fixes the following issues: - CVE-2023-1729: Fixed a heap buffer overflow when converting an image (bsc#1210720). Low SUSE bug 1210720 CVE-2023-1729 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for librsvg fixes the following issues: - librsvg was updated to 2.42.9: * Update dependent crates that had security vulnerabilities: smallvec to 0.6.14 - RUSTSEC-2018-0003 - CVE-2018-20991 (bsc#1148293) -the bundled version of the cssparser crate now builds correctly on Rust 1.43 (bsc#1181571). Moderate SUSE bug 1148293 SUSE bug 1181571 CVE-2018-20991 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libsndfile fixes the following issues: Security issues fixed: - CVE-2018-13139: Fix a stack-based buffer overflow in psf_memset in common.c that allows remote attackers to cause a denial of service (bsc#1100167). - CVE-2017-17456: Prevent segmentation fault in the function d2alaw_array() that may have lead to a remote DoS (bsc#1071777) - CVE-2017-17457: Prevent segmentation fault in the function d2ulaw_array() that may have lead to a remote DoS, a different vulnerability than CVE-2017-14246 (bsc#1071767) Moderate SUSE bug 1071767 SUSE bug 1071777 SUSE bug 1100167 CVE-2017-17456 CVE-2017-17457 CVE-2018-13139 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libtomcrypt fixes the following issue: CVE-2019-17362: Fixed an improper detection of invalid UTF-8 sequences that could have led to DoS or information disclosure via crafted DER-encoded data (bsc#1153433). Moderate SUSE bug 1153433 CVE-2019-17362 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libvorbis fixes the following issues: The following security issue was fixed: - Fixed the validation of channels in mapping0_forward(), which previously allowed remote attackers to cause a denial of service via specially crafted files (CVE-2018-10392, bsc#1091070) Moderate SUSE bug 1091070 CVE-2018-10392 cpe:/o:suse:packagehub:15:sp5 (Critical) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libwebp fixes the following issues: - CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter() (bsc#1185685). - CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign() (bsc#1185691). - CVE-2020-36332: Fixed extreme memory allocation when reading a file (bsc#1185674). - CVE-2020-36329: Fixed use-after-free in EmitFancyRGB() (bsc#1185652). - CVE-2018-25012: Fixed heap-based buffer overflow in GetLE24() (bsc#1185690). - CVE-2020-36328: Fixed heap-based buffer overflow in WebPDecode*Into functions (bsc#1185688). - CVE-2018-25013: Fixed heap-based buffer overflow in ShiftBytes() (bsc#1185654). - CVE-2020-36331: Fixed heap-based buffer overflow in ChunkAssignData() (bsc#1185686). - CVE-2018-25009: Fixed heap-based buffer overflow in GetLE16() (bsc#1185673). - CVE-2018-25011: Fixed fail on multiple image chunks (bsc#1186247). Critical SUSE bug 1185652 SUSE bug 1185654 SUSE bug 1185673 SUSE bug 1185674 SUSE bug 1185685 SUSE bug 1185686 SUSE bug 1185688 SUSE bug 1185690 SUSE bug 1185691 SUSE bug 1186247 CVE-2018-25009 CVE-2018-25010 CVE-2018-25011 CVE-2018-25012 CVE-2018-25013 CVE-2020-36328 CVE-2020-36329 CVE-2020-36330 CVE-2020-36331 CVE-2020-36332 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libwmf fixes the following issues: libwmf was updated to 0.2.12: * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf * merged all the pending fixes * merge in fixes for libgd CVE-2019-6978 (bsc#1123522) * fixed memory allocation failure (CVE-2016-9011) * Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075) Important SUSE bug 1006739 SUSE bug 1123522 SUSE bug 1174075 CVE-2016-9011 CVE-2019-6978 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libwpd fixes the following issues: Security issue fixed: - CVE-2018-19208: Fixed illegal address access inside libwpd at function WP6ContentListener:defineTable (bsc#1115713). Important SUSE bug 1115713 CVE-2018-19208 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libxslt fixes the following issues: - CVE-2021-30560: Fixing a use after free vulnerability in Blink XSLT (bsc#1208574). Important SUSE bug 1208574 CVE-2021-30560 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for nbd fixes the following issues: - CVE-2022-26495: Fixed an integer overflow with a resultant heap-based buffer overflow (bsc#1196827). - CVE-2022-26496: Fixed a stack-based buffer overflow when parsing the name field by sending a crafted NBD_OPT_INFO (bsc#1196828). Update to version 3.24 (bsc#1196827, bsc#1196828, CVE-2022-26495, CVE-2022-26496): * https://github.com/advisories/GHSA-q9rw-8758-hccj Update to version 3.23: * Don't overwrite the hostname with the TLS hostname Update to version 3.22: - nbd-server: handle auth for v6-mapped IPv4 addresses - nbd-client.c: parse the next option in all cases - configure.ac: silence a few autoconf 2.71 warnings - spec: Relax NBD_OPT_LIST_META_CONTEXTS - client: Don't confuse Unix socket with TLS hostname - server: Avoid deprecated g_memdup Update to version 3.21: - Fix --disable-manpages build - Fix a bug in whitespace handling regarding authorization files - Support client-side marking of devices as read-only - Support preinitialized NBD connection (i.e., skip the negotiation). - Fix the systemd unit file for nbd-client so it works with netlink (the more common situation nowadays) Update to 3.20.0 (no changelog) Update to version 3.19.0: * Better error messages in case of unexpected disconnects * Better compatibility with non-bash sh implementations (for configure.sh) * Fix for a segfault in NBD_OPT_INFO handling * The ability to specify whether to listen on both TCP and Unix domain sockets, rather than to always do so * Various minor editorial and spelling fixes in the documentation. Update to version 1.18.0: * Client: Add the '-g' option to avoid even trying the NBD_OPT_GO message * Server: fixes to inetd mode * Don't make gnutls and libnl automagic. * Server: bugfixes in handling of some export names during verification. * Server: clean supplementary groups when changing user. * Client: when using the netlink protocol, only set a timeout when there actually is a timeout, rather than defaulting to 0 seconds * Improve documentation on the nbdtab file * Minor improvements to some error messages * Improvements to test suite so it works better on non-GNU userland environments - Update to version 1.17.0: * proto: add xNBD command NBD_CMD_CACHE to the spec * server: do not crash when handling child name * server: Close socket pair when fork fails Important SUSE bug 1196827 SUSE bug 1196828 CVE-2022-26495 CVE-2022-26496 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for net-snmp fixes the following issues: - CVE-2020-15862: Make extended MIB read-only (bsc#1174961) - CVE-2018-18065: Fix remote DoS in agent/helpers/table.c (bsc#1111122) Important SUSE bug 1027353 SUSE bug 1081164 SUSE bug 1102775 SUSE bug 1108471 SUSE bug 1111122 SUSE bug 1116807 SUSE bug 1140341 SUSE bug 1145864 SUSE bug 1152968 SUSE bug 1174961 SUSE bug 1178021 SUSE bug 1178351 SUSE bug 1179009 SUSE bug 1179699 SUSE bug 1181591 CVE-2018-18065 CVE-2020-15862 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for netty fixes the following issues: - CVE-2021-21295: Fixed an improper Content-Length header field validation (bsc#1183262). : Moderate SUSE bug 1183262 CVE-2021-21295 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for netty, netty-tcnative fixes the following issues: netty: - Security fixes included in this version update from 4.1.75 to 4.1.90: * CVE-2022-24823: Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files for Java 6 and lower in io.netty:netty-codec-http (bsc#1199338) * CVE-2022-41881: HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360) * CVE-2022-41915: HTTP Response splitting from assigning header value iterator (bsc#1206379) - Other non-security bug fixes included in this version update from 4.1.75 to 4.1.90: * Build with Java 11 on ix86 architecture in order to avoid build failures * Fix `HttpHeaders.names` for non-String headers * Fix `FlowControlHandler` behaviour to pass read events when auto-reading is turned off * Fix brotli compression * Fix a bug in FlowControlHandler that broke auto-read * Fix a potential memory leak bug has been in the pooled allocator * Fix a scalability issue caused by instanceof and check-cast checks that lead to false-sharing on the `Klass::secondary_super_cache` field in the JVM * Fix a bug in our `PEMParser` when PEM files have multiple objects, and `BouncyCastle` is on the classpath * Fix several `NullPointerException` bugs * Fix a regression `SslContext` private key loading * Fix a bug in `SslContext` private key reading fall-back path * Fix a buffer leak regression in `HttpClientCodec` * Fix a bug where some `HttpMessage` implementations, that also implement `HttpContent`, were not handled correctly * Fix epoll bug when receiving zero-sized datagrams * Fix a bug in `SslHandler` so `handlerRemoved` works properly even if `handlerAdded` throws an exception * Fix an issue that allowed the multicast methods on `EpollDatagramChannel` to be called outside of an event-loop thread * Fix a bug where an OPT record was added to DNS queries that already had such a record * Fix a bug that caused an error when files uploaded with HTTP POST contained a backslash in their name * Fix an issue in the `BlockHound` integration that could occasionally cause NetUtil to be reported as performing blocking operation. A similar `BlockHound` issue was fixed for the `JdkSslContext` * Fix a bug that prevented preface or settings frames from being flushed, when an HTTP2 connection was established with prior-knowledge * Fix a bug where Netty fails to load a shaded native library * Fix and relax overly strict HTTP/2 header validation check that was rejecting requests from Chrome and Firefox * Fix OpenSSL and BoringSSL implementations to respect the `jdk.tls.client.protocols` and `jdk.tls.server.protocols` system properties, making them react to these in the same way the JDK SSL provider does * Fix inconsitencies in how `epoll`, `kqueue`, and `NIO` handle RDHUP * For a more detailed list of changes please consult the official release notes: + Changes from 4.1.90: https://netty.io/news/2023/03/14/4-1-90-Final.html + Changes from 4.1.89: https://netty.io/news/2023/02/13/4-1-89-Final.html + Changes from 4.1.88: https://netty.io/news/2023/02/12/4-1-88-Final.html + Changes from 4.1.87: https://netty.io/news/2023/01/12/4-1-87-Final.html + Changes from 4.1.86: https://netty.io/news/2022/12/12/4-1-86-Final.html + Changes from 4.1.85: https://netty.io/news/2022/11/09/4-1-85-Final.html + Changes from 4.1.84: https://netty.io/news/2022/10/11/4-1-84-Final.html + Changes from 4.1.82: https://netty.io/news/2022/09/13/4-1-82-Final.html + Changes from 4.1.81: https://netty.io/news/2022/09/08/4-1-81-Final.html + Changes from 4.1.80: https://netty.io/news/2022/08/26/4-1-80-Final.html + Changes from 4.1.79: https://netty.io/news/2022/07/11/4-1-79-Final.html + Changes from 4.1.78: https://netty.io/news/2022/06/14/4-1-78-Final.html + Changes from 4.1.77: https://netty.io/news/2022/05/06/2-1-77-Final.html + Changes from 4.1.76: https://netty.io/news/2022/04/12/4-1-76-Final.html netty-tcnative: - New artifact named `netty-tcnative-classes`, provided by this update is required by netty 4.1.90 which contains important security updates - No formal changelog present. This artifact is closely bound to the netty releases Important SUSE bug 1199338 SUSE bug 1206360 SUSE bug 1206379 CVE-2022-24823 CVE-2022-41881 CVE-2022-41915 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service (bsc#1171862). Moderate SUSE bug 1171862 CVE-2020-12823 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for opencv fixes the following issues: Security issues fixed: - CVE-2019-14491: Fixed an out of bounds read in the function cv:predictOrdered<cv:HaarEvaluator>, leading to DOS (bsc#1144352). - CVE-2019-14492: Fixed an out of bounds read/write in the function HaarEvaluator:OptFeature:calc, which leads to denial of service (bsc#1144348). - CVE-2019-15939: Fixed a divide-by-zero error in cv:HOGDescriptor:getDescriptorSize (bsc#1149742). Non-security issue fixed: - Fixed an issue in opencv-devel that broke builds with 'No rule to make target opencv_calib3d-NOTFOUND' (bsc#1154091). Moderate SUSE bug 1144348 SUSE bug 1144352 SUSE bug 1149742 SUSE bug 1154091 CVE-2019-14491 CVE-2019-14492 CVE-2019-15939 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for openvswitch fixes the following issues: - CVE-2020-35498: Fixed a denial of service related to the handling of Ethernet padding (bsc#1181742). Important SUSE bug 1181742 CVE-2020-35498 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for openvswitch fixes the following issues: - CVE-2021-36980: Fixed a use-after-free issue during the decoding of a RAW_ENCAP action (bsc#1188524). Moderate SUSE bug 1188524 CVE-2021-36980 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for php7 fixes the following issues: - CVE-2022-4900: Fixed potential buffer overflow via PHP_CLI_SERVER_WORKERS environment variable. (bsc#1209537) Moderate SUSE bug 1205162 SUSE bug 1208199 SUSE bug 1209537 CVE-2022-4900 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for pidgin fixes the following issues: - CVE-2022-26491: Fixed MITM vulnerability when DNSSEC wasn't used (bsc#1199025). Important SUSE bug 1199025 CVE-2022-26491 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for pkgconf fixes the following issues: - CVE-2023-24056: Fixed unbounded string expansion due to incorrect checks in libpkgconf/tuple.c (bsc#1207394). Moderate SUSE bug 1207394 CVE-2023-24056 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for podofo fixes the following issues: - CVE-2018-12983: Fixed a stack overrun (bsc#1099719). Moderate SUSE bug 1099719 CVE-2018-12983 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for postgresql14 fixes the following issues: Updated to version 14.8: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). - CVE-2023-2455: Fixed an issue that could allow a user to see or modify rows that should have been invisible (bsc#1211229). - Internal fixes (bsc#1210303). Important SUSE bug 1210303 SUSE bug 1211228 SUSE bug 1211229 CVE-2023-2454 CVE-2023-2455 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-Mako fixes the following issues: - CVE-2022-40023: Fixed regular expression Denial of Service when using the Lexer class to parse (bsc#1203246). Moderate SUSE bug 1203246 CVE-2022-40023 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-PyJWT fixes the following issues: - CVE-2022-29217: Fixed key confusion through non-blocklisted public key format (bsc#1199756). Important SUSE bug 1199756 CVE-2022-29217 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-Pygments fixes the following issues: - CVE-2021-27291: Fixed ReDoS via crafted malicious input (bsc#1184812). Important SUSE bug 1184812 CVE-2021-27291 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-Werkzeug fixes the following issues: - CVE-2023-25577: Fixed high resource usage when parsing multipart form data with many fields (bsc#1208283). Important SUSE bug 1208283 CVE-2023-25577 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This patch updates the Python AWS SDK stack in SLE 15: General: # aws-cli - Version updated to upstream release v1.19.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-boto3 - Version updated to upstream release 1.17.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-botocore - Version updated to upstream release 1.20.9 For a detailed list of all changes, please refer to the changelog file of this package. # python-urllib3 - Version updated to upstream release 1.25.10 For a detailed list of all changes, please refer to the changelog file of this package. # python-service_identity - Added this new package to resolve runtime dependencies for other packages. Version: 18.1.0 # python-trustme - Added this new package to resolve runtime dependencies for other packages. Version: 0.6.0 Security fixes: # python-urllib3: - CVE-2020-26137: urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest() (bsc#1177120) Moderate SUSE bug 1102408 SUSE bug 1138715 SUSE bug 1138746 SUSE bug 1176389 SUSE bug 1177120 SUSE bug 1182421 SUSE bug 1182422 CVE-2020-26137 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-httplib2 fixes the following issues: - Update to version 0.19.0 (bsc#1182053). - CVE-2021-21240: Fixed regular expression denial of service via malicious header (bsc#1182053). - CVE-2020-11078: Fixed unescaped part of uri where an attacker could change request headers and body (bsc#1182053). Moderate SUSE bug 1171998 SUSE bug 1182053 CVE-2020-11078 CVE-2021-21240 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-numpy fixes the following issues: - CVE-2021-41495: Fixed Null Pointer Dereference in numpy.sort (bsc#1193911). Moderate SUSE bug 1193911 CVE-2021-41495 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-reportlab fixes the following issues: - CVE-2020-28463: Fixed Server-side Request Forgery via img tags (bsc#1182503). Moderate SUSE bug 1182503 CVE-2020-28463 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-rsa fixes the following issues: - CVE-2020-13757: Proper handling of leading '\0' bytes during decryption of ciphertext (bsc#1172389) Important SUSE bug 1172389 CVE-2020-13757 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-ujson fixes the following issues: - CVE-2021-45958: Fixed a stack-based buffer overflow in Buffer_AppendIndentUnchecked (bsc#1194261). Moderate SUSE bug 1194261 CVE-2021-45958 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-waitress to 1.4.3 fixes the following security issues: - CVE-2019-16785: HTTP request smuggling through LF vs CRLF handling (bsc#1161088). - CVE-2019-16786: HTTP request smuggling through invalid Transfer-Encoding (bsc#1161089). - CVE-2019-16789: HTTP request smuggling through invalid whitespace characters (bsc#1160790). - CVE-2019-16792: HTTP request smuggling by sending the Content-Length header twice (bsc#1161670). Moderate SUSE bug 1160790 SUSE bug 1161088 SUSE bug 1161089 SUSE bug 1161670 CVE-2019-16785 CVE-2019-16786 CVE-2019-16789 CVE-2019-16792 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for rust fixes the following issues: Rust was updated to version 1.36.0. Security issues fixed: - CVE-2019-12083: a standard method can be overridden violating Rust's safety guarantees and causing memory unsafety (bsc#1134978) - CVE-2018-1000622: rustdoc loads plugins from world writable directory allowing for arbitrary code execution (bsc#1100691) Moderate SUSE bug 1096945 SUSE bug 1100691 SUSE bug 1133283 SUSE bug 1134978 CVE-2018-1000622 CVE-2019-12083 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) Important SUSE bug 1193795 CVE-2021-42550 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for antlr3, maven, minlog, sbt, xmvn fixes the following issues: maven: - Version update from 3.8.5 to 3.8.6 (jsc#SLE-23217): * Security fixes: + CVE-2021-42550: Update Version of (optional) Logback (bsc#1193795) * Bug fixes: + Fix resolver session containing non-MavenWorkspaceReader + Fix for multiple maven instances working on same source tree that can lock each other + Don't ignore bin/ otherwise bin/ in apache-maven module cannot be added back + Fix IllegalStateException in SessionScope during guice injection in multithreaded build + Revert MNG-7347 (SessionScoped beans should be singletons for a given session) + Fix compilation failure with relocated transitive dependency + Fix deadlock during forked lifecycle executions + Fix issue with resolving dependencies between submodules * New features and improvements: + Create a multiline message helper for boxed log messages + Display a warning when an aggregator mojo is locking other mojo executions + Align Assembly Descriptor NS versions * Dependency upgrades: + Upgrade SLF4J to 1.7.36 + Upgrade JUnit to 4.13.2 + Upgrade Plexus Utils to 3.3.1 - Move mvn.1 from bin to man directory antlr3: - Bug fixes in this version update from 3.5.2 to 3.5.3 (jsc#SLE-23217): * Change source compatibility to 1.8 and enable github workflows * Change Wiki URLs to theantlrguy.atlassian.net in README.txt * Add Bazel support - Remove enforcer plugin as it is not needed in a controlled environment minlog: - Bug fixes in this version update from 1.3.0 to 1.3.1 (jsc#SLE-23217): * Use currentTimeMillis * Use 3-Clause BSD * Use Java 7 JDK. sbt: - Fix build issues with maven 3.8.6 (jsc#SLE-23217) xmvn: - Remove RPM package build dependency on easymock (jsc#SLE-23217) Important SUSE bug 1193795 CVE-2021-42550 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for speex fixes the following issues: - CVE-2020-23903: Fixed zero division error in read_samples (bsc#1192580). Moderate SUSE bug 1192580 CVE-2020-23903 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for systemd fixes the following issues: - CVE-2021-3997: Fixed an uncontrolled recursion in systemd's systemd-tmpfiles which could cause a minor denial of service. (bsc#1194178) Moderate SUSE bug 1178561 SUSE bug 1190515 SUSE bug 1194178 CVE-2021-3997 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform-provider-helm fixes the following issues: Updated terraform-provider-helm to version 2.9.0: - CVE-2023-25165: Fixed getHostByName Function Information Disclosure in helm embedded in the package (bsc#1208086). Moderate SUSE bug 1208086 CVE-2023-25165 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for tiff fixes the following security issues: These security issues were fixed: - CVE-2017-18013: Fixed a NULL pointer dereference in the tif_print.cTIFFPrintDirectory function that could have lead to denial of service (bsc#1074317). - CVE-2018-10963: Fixed an assertion failure in the TIFFWriteDirectorySec() function in tif_dirwrite.c, which allowed remote attackers to cause a denial of service via a crafted file (bsc#1092949). - CVE-2018-7456: Prevent a NULL Pointer dereference in the function TIFFPrintDirectory when using the tiffinfo tool to print crafted TIFF information, a different vulnerability than CVE-2017-18013 (bsc#1082825). - CVE-2017-11613: Prevent denial of service in the TIFFOpen function. During the TIFFOpen process, td_imagelength is not checked. The value of td_imagelength can be directly controlled by an input file. In the ChopUpSingleUncompressedStrip function, the _TIFFCheckMalloc function is called based on td_imagelength. If the value of td_imagelength is set close to the amount of system memory, it will hang the system or trigger the OOM killer (bsc#1082332). - CVE-2018-8905: Prevent heap-based buffer overflow in the function LZWDecodeCompat via a crafted TIFF file (bsc#1086408). Moderate SUSE bug 1074317 SUSE bug 1082332 SUSE bug 1082825 SUSE bug 1086408 SUSE bug 1092949 CVE-2017-11613 CVE-2017-18013 CVE-2018-10963 CVE-2018-7456 CVE-2018-8905 cpe:/o:suse:packagehub:15:sp5 (Low) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for tinyxml fixes the following issues: - CVE-2021-42260: Fixed an infinite loop for inputs containing the sequence 0xEF0x00 (bsc#1191576) Low SUSE bug 1191576 CVE-2021-42260 cpe:/o:suse:packagehub:15:sp5 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for tmux fixes the following issues: - CVE-2022-47016: Fixed a null pointer dereference in window.c. (bsc#1207393) Moderate SUSE bug 1207393 CVE-2022-47016 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for transfig fixes the following issues: Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021) - bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c. - bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c. - bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c. - bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c. - bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c. - bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c. - bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c. - bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c Important SUSE bug 1189325 SUSE bug 1189343 SUSE bug 1189345 SUSE bug 1189346 SUSE bug 1190607 SUSE bug 1190611 SUSE bug 1190612 SUSE bug 1190615 SUSE bug 1190616 SUSE bug 1190617 SUSE bug 1190618 SUSE bug 1192019 CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-21532 CVE-2020-21533 CVE-2020-21534 CVE-2020-21535 CVE-2020-21680 CVE-2020-21681 CVE-2020-21682 CVE-2020-21683 CVE-2021-32280 cpe:/o:suse:packagehub:15:sp5 (Low) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for uriparser fixes the following issues: Security issues fixed: - CVE-2018-20721: Fixed an out-of-bounds read for incomplete URIs with IPv6 addresses with embedded IPv4 address (bsc#1122193). - CVE-2018-19198: Fixed an out-of-bounds write that was possible via the uriComposeQuery* or uriComposeQueryEx* function (bsc#1115722). - CVE-2018-19199: Fixed an integer overflow caused by an unchecked multiplication via the uriComposeQuery* or uriComposeQueryEx* function (bsc#1115723). - CVE-2018-19200: Fixed a operation attempted on NULL input via a uriResetUri* function (bsc#1115724). Low SUSE bug 1115722 SUSE bug 1115723 SUSE bug 1115724 SUSE bug 1122193 CVE-2018-19198 CVE-2018-19199 CVE-2018-19200 CVE-2018-20721 cpe:/o:suse:packagehub:15:sp5 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for zxing-cpp fixes the following issues: - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbi__extend_receive in stb_image.h via a crafted JPEG file. (bsc#1191743). - CVE-2021-42715: Fixed buffer overflow in stb_image PNM loader (bsc#1191942). - CVE-2021-42716: Fixed denial of service in stb_image HDR loader when reading crafted HDR files (bsc#1191944). Important SUSE bug 1191743 SUSE bug 1191942 SUSE bug 1191944 CVE-2021-28021 CVE-2021-42715 CVE-2021-42716 cpe:/o:suse:packagehub:15:sp5 amazon-ssm-agent-3.1.1260.0-150000.5.11.1 on GA media (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for amazon-ssm-agent fixes the following issues: - CVE-2022-29527: Fixed unsafe file creation mode of ssm-agent-users sudoer file (bsc#1196556). Update to version 3.1.1260.0 Important SUSE bug 1196556 CVE-2022-29527 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 apache2-mod_wsgi-4.7.1-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for apache2-mod_wsgi fixes the following issues: - CVE-2022-2255: Hardened the trusted proxy header filter to avoid bypass. (bsc#1201634) Moderate SUSE bug 1201634 CVE-2022-2255 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 aws-efs-utils-1.34.5-150100.4.11.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for aws-efs-utils fixes the following issues: - Updated to version 1.34.5: - CVE-2022-46174: Fixed a race condition when mounting filesystems using TLS, which could result in various failures (bsc#1206737). Moderate SUSE bug 1191055 SUSE bug 1206737 CVE-2022-46174 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 aws-iam-authenticator-0.5.3-150000.1.9.1 on GA media (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for aws-iam-authenticator fixes the following issues: - CVE-2022-2385: Fixed AccessKeyID validation bypass (bsc#1201395). Important SUSE bug 1201395 CVE-2022-2385 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 aws-nitro-enclaves-binaryblobs-upstream-1.2.2~git0.4ccc639-150400.3.3.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the aws-nitro-enclaves-binaryblobs-upstream-1.2.2~git0.4ccc639-150400.3.3.1 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP5. Moderate CVE-2022-24713 CVE-2022-31394 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for aws-nitro-enclaves-cli fixes the following issues: Update aws-nitro-enclaves-cli to version 1.2.2~git0.4ccc639: * CVE-2022-31394: Fixed DoS vulnerability in hyper crate (bsc#1208555). Update aws-nitro-enclaves-cli to version 1.2.0~git2.841ef94: * CVE-2022-24713: Fixed ReDoS vulnerability in regex crate (bsc#1196972). Moderate SUSE bug 1196972 SUSE bug 1208555 CVE-2022-24713 CVE-2022-31394 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for google-compute-engine fixes the following issues: - Don't enable and start google-network-daemon.service when it's already installed (bsc#1169978) + Do not add the created user to the adm (CVE-2020-8903), docker (CVE-2020-8907), or lxd (CVE-2020-8933) groups if they exist (bsc#1173258) Important SUSE bug 1169978 SUSE bug 1173258 CVE-2020-8903 CVE-2020-8907 CVE-2020-8933 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 google-compute-engine-oslogin-20190801-4.38.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the google-compute-engine-oslogin-20190801-4.38.1 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP5. Moderate CVE-2020-8903 CVE-2020-8907 CVE-2020-8933 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 google-guest-agent-20230221.00-150000.1.34.1 on GA media (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for google-guest-agent fixes the following issues: Updated to version 20230222.00 and bumped go API version to 1.18 to address the following (bsc#1208723): - CVE-2021-38297: Fixed data overwrite when passing large arguments to GOARCH=wasm GOOS=js (bsc#1191468). - CVE-2022-23806: Fixed Curve.IsOnCurve to incorrectly return true (bsc#1195838). Bugfixes: - Avoid bashism in post-install scripts (bsc#1195391). Important SUSE bug 1191468 SUSE bug 1195391 SUSE bug 1195838 SUSE bug 1208723 CVE-2021-38297 CVE-2022-23806 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for google-osconfig-agent fixes the following issues: Updated to version 20230222.00 and bumped go API version to 1.18 to address the following (bsc#1208723): - CVE-2021-38297: Fixed data overwrite when passing large arguments to GOARCH=wasm GOOS=js (bsc#1191468). - CVE-2022-23806: Fixed Curve.IsOnCurve to incorrectly return true (bsc#1195838). Important SUSE bug 1191468 SUSE bug 1195838 SUSE bug 1208723 CVE-2021-38297 CVE-2022-23806 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 kernel-azure-5.14.21-150500.31.4 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the kernel-azure-5.14.21-150500.31.4 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP5. Moderate CVE-2016-3695 CVE-2017-1000251 CVE-2017-12153 CVE-2017-13080 CVE-2017-14051 CVE-2017-16536 CVE-2017-16537 CVE-2017-16646 CVE-2017-16648 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-10323 CVE-2018-12232 CVE-2018-13053 CVE-2018-20669 CVE-2019-0154 CVE-2019-0155 CVE-2019-10220 CVE-2019-11477 CVE-2019-11478 CVE-2019-11479 CVE-2019-14615 CVE-2019-14814 CVE-2019-14815 CVE-2019-14816 CVE-2019-14895 CVE-2019-14896 CVE-2019-14897 CVE-2019-14901 CVE-2019-15030 CVE-2019-15031 CVE-2019-15098 CVE-2019-15099 CVE-2019-15290 CVE-2019-15291 CVE-2019-15504 CVE-2019-16231 CVE-2019-16232 CVE-2019-16233 CVE-2019-16234 CVE-2019-17133 CVE-2019-17666 CVE-2019-18198 CVE-2019-18660 CVE-2019-18683 CVE-2019-18786 CVE-2019-18808 CVE-2019-18809 CVE-2019-18811 CVE-2019-18812 CVE-2019-18813 CVE-2019-18814 CVE-2019-19037 CVE-2019-19043 CVE-2019-19044 CVE-2019-19045 CVE-2019-19046 CVE-2019-19047 CVE-2019-19048 CVE-2019-19049 CVE-2019-19050 CVE-2019-19051 CVE-2019-19052 CVE-2019-19053 CVE-2019-19054 CVE-2019-19055 CVE-2019-19056 CVE-2019-19057 CVE-2019-19058 CVE-2019-19060 CVE-2019-19061 CVE-2019-19062 CVE-2019-19063 CVE-2019-19064 CVE-2019-19065 CVE-2019-19066 CVE-2019-19067 CVE-2019-19068 CVE-2019-19069 CVE-2019-19070 CVE-2019-19071 CVE-2019-19072 CVE-2019-19073 CVE-2019-19074 CVE-2019-19075 CVE-2019-19077 CVE-2019-19078 CVE-2019-19080 CVE-2019-19081 CVE-2019-19082 CVE-2019-19083 CVE-2019-19241 CVE-2019-19252 CVE-2019-19332 CVE-2019-19338 CVE-2019-19447 CVE-2019-19462 CVE-2019-19523 CVE-2019-19524 CVE-2019-19525 CVE-2019-19526 CVE-2019-19528 CVE-2019-19529 CVE-2019-19532 CVE-2019-19533 CVE-2019-19534 CVE-2019-19602 CVE-2019-19767 CVE-2019-19768 CVE-2019-19769 CVE-2019-19770 CVE-2019-19807 CVE-2019-19922 CVE-2019-19947 CVE-2019-19965 CVE-2019-20422 CVE-2019-20810 CVE-2019-20812 CVE-2019-3016 CVE-2019-8912 CVE-2020-0110 CVE-2020-0305 CVE-2020-0404 CVE-2020-0427 CVE-2020-0431 CVE-2020-0432 CVE-2020-0444 CVE-2020-0465 CVE-2020-0466 CVE-2020-0543 CVE-2020-10135 CVE-2020-10690 CVE-2020-10711 CVE-2020-10732 CVE-2020-10751 CVE-2020-10757 CVE-2020-10766 CVE-2020-10767 CVE-2020-10768 CVE-2020-10773 CVE-2020-10781 CVE-2020-10942 CVE-2020-11494 CVE-2020-11608 CVE-2020-11668 CVE-2020-11884 CVE-2020-12351 CVE-2020-12352 CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-12373 CVE-2020-12464 CVE-2020-12465 CVE-2020-12652 CVE-2020-12653 CVE-2020-12654 CVE-2020-12655 CVE-2020-12656 CVE-2020-12657 CVE-2020-12659 CVE-2020-12769 CVE-2020-12770 CVE-2020-12771 CVE-2020-12888 CVE-2020-13143 CVE-2020-13974 CVE-2020-14314 CVE-2020-14331 CVE-2020-14351 CVE-2020-14356 CVE-2020-14385 CVE-2020-14386 CVE-2020-14390 CVE-2020-14416 CVE-2020-15393 CVE-2020-15436 CVE-2020-15437 CVE-2020-15780 CVE-2020-16119 CVE-2020-16120 CVE-2020-16166 CVE-2020-1749 CVE-2020-24490 CVE-2020-24586 CVE-2020-24587 CVE-2020-24588 CVE-2020-2521 CVE-2020-25211 CVE-2020-25212 CVE-2020-25284 CVE-2020-25285 CVE-2020-25639 CVE-2020-25641 CVE-2020-25643 CVE-2020-25645 CVE-2020-25656 CVE-2020-25668 CVE-2020-25669 CVE-2020-25670 CVE-2020-25671 CVE-2020-25672 CVE-2020-25673 CVE-2020-25704 CVE-2020-25705 CVE-2020-26088 CVE-2020-26139 CVE-2020-26141 CVE-2020-26145 CVE-2020-26147 CVE-2020-26558 CVE-2020-27068 CVE-2020-27170 CVE-2020-27171 CVE-2020-27194 CVE-2020-2732 CVE-2020-27673 CVE-2020-27675 CVE-2020-27777 CVE-2020-27786 CVE-2020-27815 CVE-2020-27820 CVE-2020-27825 CVE-2020-27830 CVE-2020-27835 CVE-2020-28374 CVE-2020-28915 CVE-2020-28941 CVE-2020-28974 CVE-2020-29368 CVE-2020-29369 CVE-2020-29370 CVE-2020-29371 CVE-2020-29373 CVE-2020-29568 CVE-2020-29569 CVE-2020-29660 CVE-2020-29661 CVE-2020-35519 CVE-2020-36158 CVE-2020-36310 CVE-2020-36311 CVE-2020-36312 CVE-2020-36322 CVE-2020-36385 CVE-2020-36386 CVE-2020-36516 CVE-2020-4788 CVE-2020-8428 CVE-2020-8647 CVE-2020-8648 CVE-2020-8649 CVE-2020-8694 CVE-2020-8835 CVE-2020-8992 CVE-2020-9383 CVE-2021-0129 CVE-2021-0342 CVE-2021-0512 CVE-2021-0605 CVE-2021-20177 CVE-2021-20268 CVE-2021-20321 CVE-2021-21781 CVE-2021-22543 CVE-2021-22555 CVE-2021-22600 CVE-2021-23134 CVE-2021-26341 CVE-2021-26930 CVE-2021-26931 CVE-2021-26932 CVE-2021-27363 CVE-2021-27364 CVE-2021-27365 CVE-2021-28038 CVE-2021-28375 CVE-2021-28660 CVE-2021-28688 CVE-2021-28711 CVE-2021-28712 CVE-2021-28713 CVE-2021-28714 CVE-2021-28715 CVE-2021-28950 CVE-2021-28952 CVE-2021-28964 CVE-2021-28971 CVE-2021-28972 CVE-2021-29154 CVE-2021-29155 CVE-2021-29264 CVE-2021-29265 CVE-2021-29647 CVE-2021-29650 CVE-2021-30002 CVE-2021-32399 CVE-2021-33034 CVE-2021-33061 CVE-2021-33135 CVE-2021-33200 CVE-2021-3347 CVE-2021-3348 CVE-2021-33624 CVE-2021-33655 CVE-2021-33909 CVE-2021-3428 CVE-2021-3444 CVE-2021-34556 CVE-2021-34693 CVE-2021-3483 CVE-2021-3489 CVE-2021-3490 CVE-2021-3491 CVE-2021-35039 CVE-2021-3542 CVE-2021-35477 CVE-2021-3573 CVE-2021-3609 CVE-2021-3612 CVE-2021-3640 CVE-2021-3653 CVE-2021-3656 CVE-2021-3659 CVE-2021-3679 CVE-2021-3732 CVE-2021-3739 CVE-2021-3743 CVE-2021-3744 CVE-2021-3753 CVE-2021-37576 CVE-2021-3759 CVE-2021-3760 CVE-2021-3764 CVE-2021-3772 CVE-2021-38160 CVE-2021-38166 CVE-2021-38198 CVE-2021-38204 CVE-2021-38205 CVE-2021-38206 CVE-2021-38207 CVE-2021-38209 CVE-2021-3896 CVE-2021-39685 CVE-2021-39698 CVE-2021-4001 CVE-2021-4002 CVE-2021-4037 CVE-2021-4083 CVE-2021-4090 CVE-2021-41073 CVE-2021-4135 CVE-2021-4148 CVE-2021-4155 CVE-2021-41864 CVE-2021-4197 CVE-2021-4202 CVE-2021-4204 CVE-2021-42252 CVE-2021-42327 CVE-2021-42739 CVE-2021-43056 CVE-2021-43057 CVE-2021-43267 CVE-2021-43389 CVE-2021-43975 CVE-2021-43976 CVE-2021-44733 CVE-2021-44879 CVE-2021-45095 CVE-2021-45402 CVE-2021-45480 CVE-2021-45868 CVE-2022-0001 CVE-2022-0002 CVE-2022-0168 CVE-2022-0171 CVE-2022-0185 CVE-2022-0264 CVE-2022-0322 CVE-2022-0330 CVE-2022-0382 CVE-2022-0435 CVE-2022-0487 CVE-2022-0492 CVE-2022-0494 CVE-2022-0500 CVE-2022-0516 CVE-2022-0617 CVE-2022-0644 CVE-2022-0742 CVE-2022-0847 CVE-2022-0854 CVE-2022-0886 CVE-2022-0995 CVE-2022-0998 CVE-2022-1011 CVE-2022-1012 CVE-2022-1015 CVE-2022-1016 CVE-2022-1048 CVE-2022-1055 CVE-2022-1158 CVE-2022-1184 CVE-2022-1195 CVE-2022-1198 CVE-2022-1199 CVE-2022-1204 CVE-2022-1205 CVE-2022-1263 CVE-2022-1280 CVE-2022-1462 CVE-2022-1508 CVE-2022-1516 CVE-2022-1651 CVE-2022-1652 CVE-2022-1671 CVE-2022-1679 CVE-2022-1729 CVE-2022-1734 CVE-2022-1789 CVE-2022-1836 CVE-2022-1852 CVE-2022-1882 CVE-2022-1966 CVE-2022-1972 CVE-2022-1974 CVE-2022-1975 CVE-2022-1998 CVE-2022-20008 CVE-2022-20132 CVE-2022-20154 CVE-2022-20368 CVE-2022-20369 CVE-2022-21123 CVE-2022-21125 CVE-2022-21127 CVE-2022-21166 CVE-2022-21180 CVE-2022-21499 CVE-2022-21505 CVE-2022-2153 CVE-2022-22942 CVE-2022-23036 CVE-2022-23037 CVE-2022-23038 CVE-2022-23039 CVE-2022-23040 CVE-2022-23041 CVE-2022-23042 CVE-2022-2318 CVE-2022-23222 CVE-2022-23960 CVE-2022-24122 CVE-2022-24448 CVE-2022-24958 CVE-2022-24959 CVE-2022-25258 CVE-2022-25375 CVE-2022-25636 CVE-2022-2585 CVE-2022-2586 CVE-2022-2588 CVE-2022-2602 CVE-2022-26365 CVE-2022-26373 CVE-2022-2639 CVE-2022-26490 CVE-2022-2663 CVE-2022-26878 CVE-2022-26966 CVE-2022-27223 CVE-2022-28356 CVE-2022-28388 CVE-2022-28389 CVE-2022-28390 CVE-2022-28693 CVE-2022-2873 CVE-2022-28748 CVE-2022-28893 CVE-2022-2905 CVE-2022-29156 CVE-2022-2938 CVE-2022-29581 CVE-2022-29582 CVE-2022-2959 CVE-2022-2964 CVE-2022-2977 CVE-2022-2978 CVE-2022-29900 CVE-2022-29901 CVE-2022-3028 CVE-2022-30594 CVE-2022-3078 CVE-2022-3104 CVE-2022-3105 CVE-2022-3106 CVE-2022-3107 CVE-2022-3108 CVE-2022-3111 CVE-2022-3112 CVE-2022-3113 CVE-2022-3114 CVE-2022-3115 CVE-2022-3169 CVE-2022-3176 CVE-2022-3202 CVE-2022-32250 CVE-2022-32296 CVE-2022-3239 CVE-2022-3303 CVE-2022-3344 CVE-2022-33740 CVE-2022-33741 CVE-2022-33742 CVE-2022-33743 CVE-2022-33981 CVE-2022-3424 CVE-2022-3435 CVE-2022-34918 CVE-2022-3521 CVE-2022-3523 CVE-2022-3524 CVE-2022-3526 CVE-2022-3535 CVE-2022-3542 CVE-2022-3545 CVE-2022-3564 CVE-2022-3565 CVE-2022-3566 CVE-2022-3567 CVE-2022-3577 CVE-2022-3586 CVE-2022-3594 CVE-2022-3619 CVE-2022-3621 CVE-2022-3625 CVE-2022-3628 CVE-2022-3629 CVE-2022-3633 CVE-2022-3635 CVE-2022-3640 CVE-2022-3643 CVE-2022-3646 CVE-2022-3649 CVE-2022-36879 CVE-2022-36946 CVE-2022-3707 CVE-2022-3903 CVE-2022-39188 CVE-2022-39189 CVE-2022-39190 CVE-2022-40476 CVE-2022-40768 CVE-2022-4095 CVE-2022-41218 CVE-2022-4129 CVE-2022-4139 CVE-2022-41674 CVE-2022-41848 CVE-2022-41849 CVE-2022-41850 CVE-2022-41858 CVE-2022-42328 CVE-2022-42329 CVE-2022-42703 CVE-2022-42719 CVE-2022-42720 CVE-2022-42721 CVE-2022-42722 CVE-2022-42895 CVE-2022-42896 CVE-2022-43750 CVE-2022-4378 CVE-2022-4379 CVE-2022-4382 CVE-2022-43945 CVE-2022-45869 CVE-2022-45888 CVE-2022-45934 CVE-2022-4662 CVE-2022-47520 CVE-2022-47929 CVE-2023-0266 CVE-2023-0386 CVE-2023-0468 CVE-2023-1078 CVE-2023-1281 CVE-2023-1990 CVE-2023-2008 CVE-2023-2019 CVE-2023-22995 CVE-2023-23454 CVE-2023-23455 CVE-2023-23559 CVE-2023-28328 CVE-2023-28466 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-crcmod, python-cryptography, python-cryptography-vectors contains the following fixes: Changes in python-crcmod: - Include in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Include in SLE-15 (bsc#1181995, jsc#ECO-3329, jsc#PM-2475) - Cleanup spec file - Use fdupes - Do not bundle html doc - singlespec auto-conversion - Include in SLE 12 (FATE #316168) - Initial release Changes in python-cryptography: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - Refresh patches for new version * Using the Fernet class to symmetrically encrypt multi gigabyte values. (bsc#1182066, CVE-2020-36242) could result in an integer overflow and buffer overflow. - update to 2.9.2 * 2.9.2 - 2020-04-22 - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15. * 2.9.1 - 2020-04-21 - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g. * 2.9 - 2020-04-02 - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to low usage and maintenance burden. - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed. Users on older version of OpenSSL will need to upgrade. - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed. - Removed support for calling public_bytes() with no arguments, as per our deprecation policy. You must now pass encoding and format. - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string() returns the RDNs as required by RFC 4514. - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f. - Added support for parsing single_extensions in an OCSP response. - NameAttribute values can now be empty strings. Changes in python-cryptography-vectors: - Update in SLE-15 (bsc#1177083, jsc#PM-2730, jsc#SLE-18312) - update to 2.9.2: * updated vectors for the cryptography 2.9.2 testing Moderate SUSE bug 1177083 SUSE bug 1181995 CVE-2020-36242 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for aws-efs-utils, python-ansi2html, python-py, python-pytest-html, python-pytest-metadata, python-pytest-rerunfailures fixes the following issues: - Update in SLE-15 (bsc#1196696, bsc#1195916, jsc#SLE-23972) - Remove redundant python3 dependency from Requires - Update regular expression to fix python shebang - Style is enforced upstream and triggers unnecessary build version requirements - Allow specifying fs_id in cloudwatch log group name - Includes fix for stunnel path - Added hardening to systemd service(s). - Raise minimal pytest version - Fix typo in the ansi2html Requires - Cleanup with spec-cleaner - Make sure the tests are really executed - Remove useless devel dependency - Multiprocessing support in Python 3.8 was broken, but is now fixed - Bumpy the URL to point to github rather than to docs Moderate SUSE bug 1195916 SUSE bug 1196696 CVE-2020-29651 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-aiohttp-3.6.0-150100.3.9.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-aiohttp-3.6.0-150100.3.9.1 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP5. Moderate CVE-2021-21330 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-keystoneclient-4.0.0-9.4.5 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-keystoneclient-4.0.0-9.4.5 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP5. Moderate CVE-2015-1852 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-protobuf-3.9.2-150200.4.19.2 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-protobuf-3.9.2-150200.4.19.2 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP5. Moderate CVE-2021-22569 CVE-2021-22570 CVE-2022-1941 CVE-2022-3171 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 python3-yarl-1.3.0-150200.3.6.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the python3-yarl-1.3.0-150200.3.6.1 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP5. Moderate CVE-2023-24329 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 rmt-server-pubcloud-2.9-150500.1.4 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 These are all security issues fixed in the rmt-server-pubcloud-2.9-150500.1.4 package on the GA media of SUSE Linux Enterprise Module for Public Cloud 15 SP5. Moderate CVE-2018-14404 CVE-2018-16468 CVE-2018-16470 CVE-2019-11068 CVE-2019-16770 CVE-2019-18904 CVE-2019-5418 CVE-2019-5419 CVE-2019-5420 CVE-2020-11076 CVE-2020-11077 CVE-2020-15169 CVE-2020-5247 CVE-2020-5249 CVE-2020-5267 CVE-2020-8164 CVE-2020-8165 CVE-2020-8166 CVE-2020-8167 CVE-2020-8184 CVE-2020-8185 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 terraform-0.13.4-6.3.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 terraform-provider-helm-2.9.0-150200.6.8.1 on GA media (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform-provider-helm fixes the following issues: Updated terraform-provider-helm to version 2.9.0: - CVE-2023-25165: Fixed getHostByName Function Information Disclosure in helm embedded in the package (bsc#1208086). Moderate SUSE bug 1208086 CVE-2023-25165 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for terraform fixes the following issues: - Updated terraform to version 0.13.4 (bsc#1177421) * Many features, bug fixes, and enhancements were made during this update. Please refer to the terraform rpm changelog, for a full list of all changes. - The following terraform providers were updated: * terraform-provider-aws * terraform-provider-azurerm * terraform-provider-external * terraform-provider-google * terraform-provider-helm * terraform-provider-kubernetes * terraform-provider-local * terraform-provider-null * terraform-provider-random * terraform-provider-tls Moderate SUSE bug 1168921 SUSE bug 1170264 SUSE bug 1177421 CVE-2020-14039 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for apache2 fixes the following issues: - CVE-2022-37436: Fixed an issue in mod_proxy where a malicious backend could cause the response headers to be truncated early, resulting in some headers being incorporated into the response body (bsc#1207251). - CVE-2022-36760: Fixed an issue in mod_proxy_ajp that could allow request smuggling attacks (bsc#1207250). - CVE-2006-20001: Fixed an issue in mod_proxy_ajp where a request header could cause memory corruption (bsc#1207247). Important SUSE bug 1207247 SUSE bug 1207250 SUSE bug 1207251 CVE-2006-20001 CVE-2022-36760 CVE-2022-37436 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for apache2-mod_auth_openidc fixes the following issues: - CVE-2019-20479: Fixed an open redirect issue in URLs with slash and backslash (bsc#1164459). Moderate SUSE bug 1164459 CVE-2019-20479 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for apache2-mod_security2 fixes the following issues: - CVE-2023-24021: Fixed FILES_TMP_CONTENT missing complete content (bsc#1207379). Important SUSE bug 1207379 CVE-2023-24021 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for clone-master-clean-up fixes the following issues: - CVE-2021-32000: Fixed some potentially dangerous file system operations (bsc#1181050). Bugfixes: - Fixed clone-master-clean-up failing to remove btrfs snapshots (bsc#1203651). Moderate SUSE bug 1181050 SUSE bug 1203651 CVE-2021-32000 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dhcp fixes the following issues: - CVE-2021-25217: A buffer overrun in lease file parsing code can be used to exploit a common vulnerability shared by dhcpd and dhclient (bsc#1186382) Important SUSE bug 1186382 CVE-2021-25217 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dovecot23 fixes the following issues: Update dovecot to version 2.3.15 (jsc#SLE-19970): Security issues fixed: - CVE-2021-29157: Dovecot does not correctly escape kid and azp fields in JWT tokens. This may be used to supply attacker controlled keys to validate tokens, if attacker has local access. (bsc#1187418) Local attacker can login as any user and access their emails - CVE-2021-33515: On-path attacker could have injected plaintext commands before STARTTLS negotiation that would be executed after STARTTLS finished with the client. (bsc#1187419) Attacker can potentially steal user credentials and mails * Disconnection log messages are now more standardized across services. They also always now start with 'Disconnected' prefix. * Dovecot now depends on libsystemd for systemd integration. * Removed support for Lua 5.2. Use version 5.1 or 5.3 instead. * config: Some settings are now marked as 'hidden'. It's discouraged to change these settings. They will no longer be visible in doveconf output, except if they have been changed or if doveconf -s parameter is used. See https://doc.dovecot.org/settings/advanced/ for details. * imap-compress: Compression level is now algorithm specific. See https://doc.dovecot.org/settings/plugin/compress-plugin/ * indexer-worker: Convert 'Indexed' info logs to an event named 'indexer_worker_indexing_finished'. See https://doc.dovecot.org/admin_manual/list_of_events/#indexer-worker-indexing-finished + Add TSLv1.3 support to min_protocols. + Allow configuring ssl_cipher_suites. (for TLSv1.3+) + acl: Add acl_ignore_namespace setting which allows to entirely ignore ACLs for the listed namespaces. + imap: Support official RFC8970 preview/snippet syntax. Old methods of retrieving preview information via IMAP commands ('SNIPPET and PREVIEW with explicit algorithm selection') have been deprecated. + imapc: Support INDEXPVT for imapc storage to enable private message flags for cluster wide shared mailboxes. + lib-storage: Add new events: mail_opened, mail_expunge_requested, mail_expunged, mail_cache_lookup_finished. See https://doc.dovecot.org/admin_manual/list_of_events/#mail + zlib, imap-compression, fs-compress: Support compression levels that the algorithm supports. Before, we would allow hardcoded value between 1 to 9 and would default to 6. Now we allow using per-algorithm value range and default to whatever default the algorithm specifies. - *-login: Commands pipelined together with and just after the authenticate command cause these commands to be executed twice. This applies to all protocols that involve user login, which currently comprises of imap, pop3, submisision and managesieve. - *-login: Processes are supposed to disconnect the oldest non-logged in connection when process_limit was reached. This didn't actually happen with the default 'high-security mode' (with service_count=1) where each connection is handled by a separate process. - *-login: When login process reaches client/process limits, oldest client connections are disconnected. If one of these was still doing anvil lookup, this caused a crash. This could happen only if the login process limits were very low or if the server was overloaded. - Fixed building with link time optimizations (-flto). - auth: Userdb iteration with passwd driver does not always return all users with some nss drivers. - dsync: Shared INBOX not synced when 'mail_shared_explicit_inbox' was disabled. If a user has a shared mailbox which is another user's INBOX, dsync didn't include the mailbox in syncing unless explicit naming is enabled with 'mail_shared_explicit_inbox' set to 'yes'. - dsync: Shared namespaces were not synced with '-n' flag. - dsync: Syncing shared INBOX failed if mail_attribute_dict was not set. If a user has a shared mailbox that is another user's INBOX, dsync failed to export the mailbox if mail attributes are disabled. - fts-solr, fts-tika: Using both Solr FTS and Tika may have caused HTTP requests to assert-crash: Panic: file http-client-request.c: line 1232 (http_client_request_send_more): assertion failed: (req->payload_input != NULL) - fts-tika: 5xx errors returned by Tika server as indexing failures. However, Tika can return 5xx for some attachments every time. So the 5xx error should be retried once, but treated as success if it happens on the retry as well. v2.3 regression. - fts-tika: v2.3.11 regression: Indexing messages with fts-tika may have resulted in Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts): assertion failed: (ctx->nested_parts_count == 0 || i_stream_have_bytes_left(ctx->input)) - imap: SETMETADATA could not be used to unset metadata values. Instead NIL was handled as a 'NIL' string. v2.3.14 regression. - imap: IMAP BINARY FETCH crashes at least on empty base64 body: Panic: file index-mail-binary.c: line 358 (blocks_count_lines): assertion failed: (block_count == 0 || block_idx+1 == block_count) - imap: If IMAP client using the NOTIFY command was disconnected while sending FETCH notifications to the client, imap could crash with Panic: Trying to close mailbox INBOX with open transactions. - imap: Using IMAP COMPRESS extension can cause IMAP connection to hang when IMAP commands are >8 kB long. - imapc: If remote server sent BYE but didn't immediately disconnect, it could cause infinite busy-loop. - lib-index: Corrupted cache record size in dovecot.index.cache file could have caused a crash (segfault) when accessing it. - lib-oauth2: JWT token time validation now works correctly with 32-bit systems. - lib-ssl-iostream: Checking hostnames against an SSL certificate was case-sensitive. - lib-storage: Corrupted mime.parts in dovecot.index.cache may have resulted in Panic: file imap-bodystructure.c: line 206 (part_write_body): assertion failed: (text == ((part->flags & MESSAGE_PART_FLAG_TEXT) != 0)) - lib-storage: Index rebuilding (e.g. via doveadm force-resync) didn't preserve the 'hdr-pop3-uidl' header. Because of this, the next pop3 session could have accessed all of the emails' metadata to read their POP3 UIDL (opening dbox files). - listescape: When using the listescape plugin and a shared namespace the plugin didn't work properly anymore resulting in errors like: 'Invalid mailbox name: Name must not have '/' character.' - lmtp: Connection crashes if connection gets disconnected due to multiple bad commands and the last bad command is BDAT. - lmtp: The Dovecot-specific LMTP parameter XRCPTFORWARD was blindly forwarded by LMTP proxy without checking that the backend has support. This caused a command parameter error from the backend if it was running an older Dovecot release. This could only occur in more complex setups where the message was proxied twice; when the proxy generated the XRCPTFORWARD parameter itself the problem did not occur, so this only happened when it was forwarded. - lmtp: The LMTP proxy crashes with a panic when the remote server replies with an error while the mail is still being forwarded through a DATA/BDAT command. - lmtp: Username may have been missing from lmtp log line prefixes when it was performing autoexpunging. - master: Dovecot would incorrectly fail with haproxy 2.0.14 service checks. - master: Systemd service: Dovecot announces readiness for accepting connections earlier than it should. The following environment variables are now imported automatically and can be omitted from import_environment setting: NOTIFY_SOCKET LISTEN_FDS LISTEN_PID. - master: service { process_min_avail } was launching processes too slowly when master was forking a lot of processes. - util: Make the health-check.sh example script POSIX shell compatible. * Added new aliases for some variables. Usage of the old ones is possible, but discouraged. (These were partially added already to v2.3.13.) See https://doc.dovecot.org/configuration_manual/config_file/config_variables/ for more information. * Optimize imap/pop3/submission/managesieve proxies to use less CPU at the cost of extra memory usage. * Remove autocreate, expire, snarf and mail-filter plugins. * Remove cydir storage driver. * Remove XZ/LZMA write support. Read support will be removed in future release. * doveadm -D: Add timestamps to debug output even when LOG_STDERR_TIMESTAMP environment variable is not set. Timestamp format is taken from log_timestamp setting. * If BROKENCHAR or listescape plugin is used, the escaped folder names may be slightly different from before in some situations. This is unlikely to cause issues, although caching clients may redownload the folders. * imapc: It now enables BROKENCHAR=~ by default to escape remote folder names if necessary. This also means that if there are any '~' characters in the remote folder names, they will be visible as '~7e'. * imapc: When using local index files folder names were escaped on filesystem a bit differently. This affects only if there are folder names that actually require escaping, which isn't so common. The old style folders will be automatically deleted from filesystem. * stats: Update exported metrics to be compliant with OpenMetrics standard. + doveadm: Add an optional '-p' parameter to metadata list command. If enabled, '/private', and '/shared' metadata prefixes will be prepended to the keys in the list output. + doveconf: Support environment variables in config files. See https://doc.dovecot.org/configuration_manual/config_file/config_file_syntax/#environment-variables for more details. + indexer-worker: Change indexer to disconnect from indexer-worker after each request. This allows service indexer-worker's service_count & idle_kill settings to work. These can be used to restart indexer-worker processes once in a while to reduce their memory usage. - auth: 'nodelay' with various authentication mechanisms such as apop and digest-md5 crashed AUTH process if authentication failed. - auth: Auth lua script generating an error triggered an assertion failure: Panic: file db-lua.c: line 630 (auth_lua_call_password_verify): assertion failed: (lua_gettop(script->L) == 0). - configure: Fix libunwind detection to work on other than x86_64 systems. - doveadm-server: Process could crash if logging was done outside command handling. For example http-client could have done debug logging afterwards, resulting in either segfault or Panic: file http-client.c: line 642 (http_client_context_close): assertion failed: (cctx->clients_list == NULL). - dsync: Folder name escaping with BROKENCHAR didn't work completely correctly. This especially caused problems with dsync-migrations using imapc where some of the remote folder names may not have been accessible. - dsync: doveadm sync + imapc doesn't always sync all mails when doing an incremental sync (-1), which could lead to mail loss when it's used for migration. This happens only when GUIDs aren't used (i.e. imapc without imapc_features=guid-forced). - fts-tika: When tika server returns error, some mails cause Panic: file message-parser.c: line 802 (message_parser_deinit_from_parts): assertion failed: (ctx->nested_parts_count == 0 || i_stream_have_bytes_left(ctx->input)) - lib-imap: imapc parsing illegal BODYSTRUCTUREs with NILs could have resulted in crashes. This exposed that Dovecot was wrongly accepting atoms in 'nstring' handling. Changed the IMAP parsing to be more strict about this now. - lib-index: If dovecot.index.cache has corrupted message size, fetching BODY/BODYSTRUCTURE may cause assert-crash: Panic: file index-mail.c: line 1140 (index_mail_parse_body_finish): assertion failed: (mail->data.parts != NULL). - lib-index: Minor error handling and race condition fixes related to rotating dovecot.index.log. These didn't usually cause problems, unless the log files were rotated rapidly. - lib-lua: Lua scripts using coroutines or lua libraries using coroutines (e.g., cqueues) panicked. - Message PREVIEW handled whitespace wrong so first space would get eaten from between words. - FTS and message PREVIEW (snippet) parsed HTML &entities case-sensitively. - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE was written in a way that may have caused confusion for IMAP clients and also Dovecot itself when parsing it. The truncated part is now written out using application/octet-stream MIME type. - lib-oauth2: HS512 and HS384 JWT token algorithms crash when you try to use them: Panic: file hmac.c: line 26 (hmac_init): assertion failed: (meth->context_size <= MAC_MAX_CONTEXT_SIZE). - event filters: NOT keyword did not have the correct associativity. - Ignore ECONNRESET when closing socket. This avoids logging useless errors on systems like FreeBSD. - event filters: event filter syntax error may lead to Panic: file event-filter.c: line 137 (event_filter_parse): assertion failed: (state.output == NULL) - lib: timeval_cmp_margin() was broken on 32-bit systems. This could potentially have caused HTTP timeouts to be handled incorrectly. - log: instance_name wasn't used as syslog ident by the log process. - master: After a service reached process_limit and client_limit, it could have taken up to 1 second to realize that more client connections became available. During this time client connections could have been unnecessarily rejected and a warning logged: Warning: service(...): process_limit (...) reached, client connections are being dropped - stats: Crash would occur when generating openmetrics data for metrics using aggregating functions. - stats: Event filters comparing against empty strings crash the stats process. * CVE-2020-24386: Specially crafted command can cause IMAP hibernate to allow logged in user to access other people's emails and filesystem information. * Metric filter and global event filter variable syntax changed to a SQL-like format. See https://doc.dovecot.org/configuration_manual/event_filter/ * auth: Added new aliases for %{variables}. Usage of the old ones is possible, but discouraged. * auth: Removed RPA auth mechanism, SKEY auth mechanism, NTLM auth mechanism and related password schemes. * auth: Removed passdb-sia, passdb-vpopmail and userdb-vpopmail. * auth: Removed postfix postmap socket + auth: Added new fields for auth server events. These fields are now also available for all auth events. See https://doc.dovecot.org/admin_manual/list_of_events/#authentication-server for details. + imap-hibernate: Added imap_client_hibernated, imap_client_unhibernated and imap_client_unhibernate_retried events. See https://doc.dovecot.org/admin_manual/list_of_events/ for details. + lib-index: Added new mail_index_recreated event. See https://doc.dovecot.org/admin_manual/list_of_events/#mail-index-recreated + lib-sql: Support TLS options for cassandra driver. This requires cpp-driver v2.15 (or later) to work reliably. + lib-storage: Missing $HasAttachment / $HasNoAttachment flags are now added to existing mails if mail_attachment_detection_option=add-flags and it can be done inexpensively. + login proxy: Added login_proxy_max_reconnects setting (default 3) to control how many reconnections are attempted. + login proxy: imap/pop3/submission/managesieve proxying now supports reconnection retrying on more than just connect() failure. Any error except a non-temporary authentication failure will result in reconnect attempts. - auth: Lua passdb/userdb leaks stack elements per call, eventually causing the stack to become too deep and crashing the auth or auth-worker process. - auth: SASL authentication PLAIN mechanism could be used to trigger read buffer overflow. However, this doesn't seem to be exploitable in any way. - auth: v2.3.11 regression: GSSAPI authentication fails because dovecot disallows NUL bytes for it. - dict: Process used too much CPU when iterating keys, because each key used a separate write() syscall. - doveadm-server: Crash could occur if logging was done outside command handling. For example http-client could have done debug logging afterwards, resulting in either segfault or Panic: file http-client.c: line 642 (http_client_context_close): assertion failed: (cctx->clients_list == NULL). - doveadm-server: v2.3.11 regression: Trying to connect to doveadm server process via starttls assert-crashed if there were no ssl=yes listeners: Panic: file master-service-ssl.c: line 22 (master_service_ssl_init): assertion failed: (service->ssl_ctx_initialized). - fts-solr: HTTP requests may have assert-crashed: Panic: file http-client-request.c: line 1232 (http_client_request_send_more): assertion failed: (req->payload_input != NULL) - imap: IMAP NOTIFY could crash with a segmentation fault due to a bad configuration that causes errors. Sending the error responses to the client can cause the segmentation fault. This can for example happen when several namespaces use the same mail storage location. - imap: IMAP NOTIFY used on a shared namespace that doesn't actually exist (e.g. public namespace for a nonexistent user) can crash with a panic: Panic: Leaked view for index /tmp/home/asdf/mdbox/dovecot.list.index: Opened in (null):0 - imap: IMAP session can crash with QRESYNC extension if many changes are done before asking for expunged mails since last sync. - imap: Process might hang indefinitely if client disconnects after sending some long-running commands pipelined, for example FETCH+LOGOUT. - lib-compress: Mitigate crashes when configuring a not compiled in compression. Errors with compression configuration now distinguish between not supported and unknown. - lib-compression: Using xz/lzma compression in v2.3.11 could have written truncated output in some situations. This would result in 'Broken pipe' read errors when trying to read it back. - lib-compression: zstd compression could have crashed in some situations: Panic: file ostream.c: line 287 (o_stream_sendv_int): assertion failed: (!stream->blocking) - lib-dict: dict client could have crashed in some rare situations when iterating keys. - lib-http: Fix several assert-crashes in HTTP client. - lib-index: v2.3.11 regression: When mails were expunged at the same time as lots of new content was being saved to the cache (e.g. cache file was lost and is being re-filled) a deadlock could occur with dovecot.index.cache / dovecot.index.log. - lib-index: v2.3.11 regression: dovecot.index.cache file was being purged (rewritten) too often when it had a field that hadn't been accessed for over 1 month, but less than 2 months. Every cache file change caused a purging in this situation. - lib-mail: MIME parts were not returned correctly by Dovecot MIME parser. Regression caused by fixing CVE-2020-12100. - lib-mail: When max nested MIME parts were reached, IMAP BODYSTRUCTURE was written in a way that may have caused confusion for both IMAP clients and Dovecot itself when parsing it. The truncated part is now written out using application/octet-stream MIME type. - lib-mail: v2.3.11 regression: Mail delivery / parsing crashed when the 10000th MIME part was message/rfc822 (or if parent was multipart/digest): Panic: file message-parser.c: line 167 (message_part_append): assertion failed: (ctx->total_parts_count <= ctx->max_total_mime_parts). - lib-oauth2: Dovecot incorrectly required oauth2 server introspection reply to contain username with invalid token. - lib-ssl-iostream, lib-dcrypt: Fix building with OpenSSL that has deprecated APIs disabled. - lib-storage: When mail's size is different from the cached one (in dovecot.index.cache or Maildir S=size in the filename), this is handled by logging 'Cached message size smaller/larger than expected' error. However, in some situations this also ended up crashing with: Panic: file istream.c: line 315 (i_stream_read_memarea): assertion failed: (old_size <= _stream->pos - _stream->skip). - lib-storage: v2.3 regression: Copying/moving mails was taking much more memory than before. This was mainly visible when copying/moving thousands of mails in a single transaction. - lib-storage: v2.3.11 regression: Searching messages assert-crashed (without FTS): Panic: file message-parser.c: line 174 (message_part_finish): assertion failed: (ctx->nested_parts_count > 0). - lib: Dovecot v2.3 moved signal handlers around in ioloops, causing more CPU usage than in v2.2. - lib: Fixed JSON parsing: '\' escape sequence may have wrongly resulted in error if it happened to be at read boundary. Any NUL characters and '\u0000' will now result in parsing error instead of silently truncating the data. - lmtp, submission: Server may hang if SSL client connection disconnects during the delivery. If this happened repeated, it could have ended up reaching process_limit and preventing any further lmtp/submission deliveries. - lmtp: Proxy does not always properly log TLS connection problems as errors; in some cases, only a debug message is logged if enabled. - lmtp: The LMTP service can hang when commands are pipelined. This can particularly occur when one command in the middle of the pipeline fails. One example of this occurs for proxied LMTP transactions in which the final DATA or BDAT command is pipelined after a failing RCPT command. - login-proxy: The login_source_ips setting has no effect, and therefore the proxy source IPs are not cycled through as they should be. - master: Process was using 100% CPU in some situations when a broken service was being throttled. - pop3-login: POP3 login would fail with 'Input buffer full' if the initial response for SASL was too long. - stats: Crash would occur when generating openmetrics data for metrics using aggregating functions. Update pigeonhole to version 0.5.15 * CVE-2020-28200: Sieve interpreter is not protected against abusive scripts that claim excessive resource usage. Fixed by limiting the user CPU time per single script execution and cumulatively over several script runs within a configurable timeout period. Sufficiently large CPU time usage is summed in the Sieve script binary and execution is blocked when the sum exceeds the limit within that time. The block is lifted when the script is updated after the resource usage times out. (bsc#1187420) Attacker can DoS the mail delivery system (jsc#PM-2746) ECO: Dovecot 2.3.15 version upgrade * Disconnection log messages are now more standardized across services. They also always now start with 'Disconnected' prefix. * managesieve: Commands pipelined together with and just after the authenticate command cause these commands to be executed twice. * duplicate: The test was handled badly in a multiscript (sieve_before, sieve_after) scenario in which an earlier script in the sequence with a duplicate test succeeded, while a later script caused a runtime failure. In that case, the message is recorded for duplicate tracking, while the message may not actually have been delivered in the end. * editheader: Sieve interpreter entered infinite loop at startup when the 'editheader' configuration listed an invalid header name. This problem can only be triggered by the administrator. * relational: The Sieve relational extension can cause a segfault at compile time. This is triggered by invalid script syntax. The segfault happens when this match type is the last argument of the test command. This situation is not possible in a valid script; positional arguments are normally present after that, which would prevent the segfault. * sieve: For some Sieve commands the provided mailbox name is not properly checked for UTF-8 validity, which can cause assert crashes at runtime when an invalid mailbox name is encountered. This can be caused by the user by writing a bad Sieve script involving the affected commands ('mailboxexists', 'specialuse_exists'). This can be triggered by the remote sender only when the user has written a Sieve script that passes message content to one of the affected commands. * sieve: Large sequences of 8-bit octets passed to certain Sieve commands that create or modify message headers that allow UTF-8 text (vacation, notify and addheader) can cause the delivery or IMAP process (when IMAPSieve is used) to enter a memory-consuming semi-infinite loop that ends when the process exceeds its memory limits. Logged in users can cause these hangs only for their own processes. Moderate SUSE bug 1187418 SUSE bug 1187419 SUSE bug 1187420 CVE-2020-28200 CVE-2021-29157 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for erlang fixes the following issues: - CVE-2022-37026: fixed a client authorization bypass vulnerability for SSL, TLS, and DTLS in Erlang/OTP. [bsc#1205318] Important SUSE bug 1205318 CVE-2022-37026 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for freeradius-server fixes the following issues: - CVE-2022-41859: Fixes an information leakage in EAP-PWD (bsc#1206204). - CVE-2022-41860: Fixes a crash on unknown option in EAP-SIM (bsc#1206205). - CVE-2022-41861: Fixes a crash on invalid abinary data (bsc#1206206). - rebuild against the new net-snmp (jsc#SLE-11203). Important SUSE bug 1206204 SUSE bug 1206205 SUSE bug 1206206 CVE-2022-41859 CVE-2022-41860 CVE-2022-41861 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libtpms fixes the following issues: - CVE-2021-3746: Fixed out-of-bounds access via specially crafted TPM 2 command packets (bsc#1189935). Important SUSE bug 1189935 CVE-2021-3746 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libvirt fixes the following issues: - lxc: controller: Fix container launch on cgroup v1. (bsc#1183247) - supportconfig: Use systemctl command 'is-active' instead of 'is-enabled' when checking if libvirtd is active. - qemu: Do not report error in the logs when processing monitor IO. (bsc#1190917) - spec: Fix an issue when package update hangs (bsc#1177902, bsc#1190693) - spec: Don't add '--timeout' argument to '/etc/sysconfig/libvirtd' when running in traditional mode without socket activation. (bsc#1190695) - libxl: Improve reporting of 'die_id' in capabilities. (bsc#1190493) - libxl: Fix driver reload. (bsc#1190420) - qemu: Set label on virtual host network device when hotplugging. (bsc#1186398) - supportconfig: When checking for installed hypervisor drivers, use the libvirtr-daemon-driver-<hypervisor> package instead of libvirt-daemon-<hypervisor>. The latter are not required packages for a functioning hypervisor driver. Moderate SUSE bug 1177902 SUSE bug 1183247 SUSE bug 1186398 SUSE bug 1190420 SUSE bug 1190493 SUSE bug 1190693 SUSE bug 1190695 SUSE bug 1190917 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for mariadb-connector-c fixes the following issues: Security issue fixed: - CVE-2020-13249: Fixed an improper validation of OK packets received from clients (bsc#1171550). Non-security issues fixed: - Update to release 3.1.8 (bsc#1171550) * CONC-304: Rename the static library to libmariadb.a and other libmariadb files in a consistent manner * CONC-441: Default user name for C/C is wrong if login user is different from effective user * CONC-449: Check $MARIADB_HOME/my.cnf in addition to $MYSQL_HOME/my.cnf * CONC-457: mysql_list_processes crashes in unpack_fields * CONC-458: mysql_get_timeout_value crashes when used improper * CONC-464: Fix static build for auth_gssapi_client plugin Important SUSE bug 1171550 CVE-2020-13249 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for nginx fixes the following issues: - CVE-2022-41741: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204526) - CVE-2022-41742: Handle duplicated atoms in mp4 streams, to mitigate out-of-bound reads. (bsc#1204527) Important SUSE bug 1204526 SUSE bug 1204527 CVE-2022-41741 CVE-2022-41742 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for pam_radius fixes the following issues: - CVE-2015-9542: pam_radius: buffer overflow in password field (bsc#1163933) Moderate SUSE bug 1163933 CVE-2015-9542 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for pgadmin4 fixes the following issues: - CVE-2023-0241: Fixed a directory traversal vulnerability (bsc#1207464). Important SUSE bug 1207464 CVE-2023-0241 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postgresql-jdbc fixes the following issues: - CVE-2022-41946: Fixed a local information disclosure issue due to improper handling of temporary files (bsc#1206921). Moderate SUSE bug 1206921 CVE-2022-41946 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postgresql15 fixes the following issues: Updated to version 15.3: - CVE-2023-2454: Fixed an issue where a user having permission to create a schema could hijack the privileges of a security definer function or extension script (bsc#1211228). - CVE-2023-2455: Fixed an issue that could allow a user to see or modify rows that should have been invisible (bsc#1211229). - Internal fixes (bsc#1210303). Important SUSE bug 1210303 SUSE bug 1211228 SUSE bug 1211229 CVE-2023-2454 CVE-2023-2455 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Low) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-Twisted fixes the following issues: - CVE-2022-39348: Fixed NameVirtualHost Host header injection (bsc#1204781). Low SUSE bug 1204781 CVE-2022-39348 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rabbitmq-server fixes the following issues: - CVE-2021-32718: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in management UI (bsc#1187818). - CVE-2021-32719: Fixed improper neutralization of script-related HTML tags in a web page (basic XSS) in federation management plugin (bsc#1187819). - CVE-2021-22116: Fixed improper input validation may lead to DoS (bsc#1186203). - Use /run instead of /var/run in tmpfiles.d configuration (bsc#1185075). Moderate SUSE bug 1185075 SUSE bug 1186203 SUSE bug 1187818 SUSE bug 1187819 CVE-2021-22116 CVE-2021-32718 CVE-2021-32719 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Low) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for redis fixes the following issues: - CVE-2022-3647: Fixed crash in sigsegvHandler debug function (bsc#1204633). Low SUSE bug 1204633 CVE-2022-3647 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Low) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for shibboleth-sp fixes the following issues: - Template generation allows external parameters to override placeholders (bsc#1184222) Low SUSE bug 1184222 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for squid fixes the following issues: Updated squid to version 5.7: - CVE-2022-41317: Fixed exposure of sensitive information in cache manager (bsc#1203677). - CVE-2022-41318: Fixed buffer overread in SSPI and SMB Authentication (bsc#1203680). Important SUSE bug 1203677 SUSE bug 1203680 CVE-2022-41317 CVE-2022-41318 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for stunnel fixes the following issues: Update to 5.62 including new features and bugfixes: * Security bugfixes - The 'redirect' option was fixed to properly handle unauthenticated requests (bsc#1182529). - Fixed a double free with OpenSSL older than 1.1.0. - Added hardening to systemd service (bsc#1181400). * New features - Added new 'protocol = capwin' and 'protocol = capwinctrl' configuration file options. - Added support for the new SSL_set_options() values. - Added a bash completion script. - New 'sessionResume' service-level option to allow or disallow session resumption - Download fresh ca-certs.pem for each new release. - New 'protocolHeader' service-level option to insert custom 'connect' protocol negotiation headers. This feature can be used to impersonate other software (e.g. web browsers). - 'protocolHost' can also be used to control the client SMTP protocol negotiation HELO/EHLO value. - Initial FIPS 3.0 support. - Client-side 'protocol = ldap' support * Bugfixes - Fixed a transfer() loop bug. - Fixed reloading configuration with 'systemctl reload stunnel.service'. - Fixed incorrect messages logged for OpenSSL errors. - Fixed 'redirect' with 'protocol'. This combination is not supported by 'smtp', 'pop3' and 'imap' protocols. - X.509v3 extensions required by modern versions of OpenSSL are added to generated self-signed test certificates. - Fixed a tiny memory leak in configuration file reload error handling. - Fixed engine initialization. - FIPS TLS feature is reported when a provider or container is available, and not when FIPS control API is available. - Fix configuration reload when compression is used - Fix test suite fixed not to require external connectivity Important SUSE bug 1181400 SUSE bug 1182529 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fixed out-of-bonds write in read_transfer_data() (bsc#1195389). Important SUSE bug 1195389 CVE-2022-0135 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for virglrenderer fixes the following issues: - CVE-2022-0135: Fix OOB in read_transfer_data. (bsc#1195389) Important SUSE bug 1195389 CVE-2022-0135 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for virt-v2v fixes the following issues: - CVE-2022-2211: Fixed buffer overflow in get_keys (bsc#1201064). Moderate SUSE bug 1201064 CVE-2022-2211 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for vsftpd fixes the following issues: Bugfixes: - Removed unsupported systemd hardening options (bsc#1196918). Moderate SUSE bug 1196918 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for yast2-samba-provision fixes the following issues: Security issue fixed: - CVE-2018-17956: Fixed a credentials leak (bsc#1117597). Non-Security issues fixed: - Stop packaging docdir, it only contained the license which is now in licensedir. (bsc#1184897) - Catch and show internal python exceptions. (bsc#1140548) - Show a dialog with provision details or errors. (bsc#1132676) - Add metainfo (fate#319035) Moderate SUSE bug 1117597 SUSE bug 1132676 SUSE bug 1140548 SUSE bug 1184897 CVE-2018-17956 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 salt-transactional-update-3005.1-150500.2.13 on GA media (Moderate) SUSE Linux Enterprise Module for Transactional Server 15 SP5 These are all security issues fixed in the salt-transactional-update-3005.1-150500.2.13 package on the GA media of SUSE Linux Enterprise Module for Transactional Server 15 SP5. Moderate CVE-2016-1866 CVE-2016-9639 CVE-2017-12791 CVE-2017-14695 CVE-2017-14696 CVE-2018-15750 CVE-2018-15751 CVE-2019-17361 CVE-2019-18897 CVE-2020-11651 CVE-2020-11652 CVE-2020-16846 CVE-2020-17490 CVE-2020-25592 CVE-2020-28243 CVE-2020-28972 CVE-2020-35662 CVE-2021-21996 CVE-2021-25281 CVE-2021-25282 CVE-2021-25283 CVE-2021-25284 CVE-2021-25315 CVE-2021-3144 CVE-2021-3148 CVE-2021-31607 CVE-2021-3197 CVE-2022-22934 CVE-2022-22935 CVE-2022-22936 CVE-2022-22941 CVE-2022-22967 cpe:/o:suse:sle-module-transactional-server:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for nodejs18 fixes the following issues: Update to NodeJS 18.14.2 LTS: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule (bsc#1208481). - CVE-2023-23919: Fixed OpenSSL error handling issues in nodejs crypto library (bsc#1208483). - CVE-2023-23920: Fixed insecure loading of ICU data through ICU_DATA environment (bsc#1208487). - CVE-2023-23936: Fixed protection against CRLF injection in host headers inside fetch API (bsc#1208485). - CVE-2023-24807: Fixed possible Regular Expression Denial of Service (ReDoS) via Headers.set() and Headers.append() methods (bsc#1208413). Important SUSE bug 1208413 SUSE bug 1208481 SUSE bug 1208483 SUSE bug 1208485 SUSE bug 1208487 CVE-2023-23918 CVE-2023-23919 CVE-2023-23920 CVE-2023-23936 CVE-2023-24807 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php-composer2 fixes the following issues: - CVE-2022-24828: Fixed a code injection issue that affected integrators using specific APIs to read untrusted input files (bsc#1198494). Important SUSE bug 1198494 CVE-2022-24828 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php8-pear fixes the following issues: - Add php8-pear to SLE15-SP4 (jsc#SLE-24728) - Update to 1.10.21 - PEAR 1.10.13 * unsupported protocol - use --force to continue * Add $this operator to _determineIfPowerpc calls - Update to 1.10.20 - Archive_Tar 1.4.14 * Properly fix symbolic link path traversal (CVE-2021-32610) - Archive_Tar 1.4.13 * Relative symlinks failing (out-of path file extraction) - Archive_Tar 1.4.12 - Archive_Tar 1.4.11 - Archive_Tar 1.4.10 * Fix block padding when the file buffer length is a multiple of 512 and smaller than Archive_Tar buffer length * Don't try to copy username/groupname in chroot jail - provides and obsoletes php7-pear-Archive_Tar, former location of PEAR/Archive/Tar.php - Update to version 1.10.19 - PEAR 1.10.12 * adjust dependencies based on new releases - XML_Util 1.4.5 * fix Trying to access array offset on value of type int - Update to version 1.10.18 - Remove pear-cacheid-array-check.patch (upstreamed) - Contents of .filemap are now sorted internally - Sort contents of .filemap to make build reproducible - Recommend php7-openssl to allow https sources to be used - Modify metadata_dir for system configuration only - Add /var/lib/pear directory where xml files are stored - Cleanup %files section - Only use the GPG keys of Chuck Burgess. Extracted from the Release Manager public keys. - Add release versions of PEAR modules - Install metadata files (registry, filemap, channels, ...) in /var/lib/pear/ instead of /usr/share/php7/PEAR/ - Update to version 1.10.17 Moderate CVE-2021-32610 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for tomcat fixes the following issues: - CVE-2022-45143: Fixed JsonErrorReportValve injection (bsc#1206840). Important SUSE bug 1206840 CVE-2022-45143 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for LibVNCServer fixes the following issues: - CVE-2020-29260: Fixed memory leakage via rfbClientCleanup() (bsc#1203106). Moderate SUSE bug 1203106 CVE-2020-29260 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for MozillaThunderbird fixes the following issues: Various security fixes MFSA 2022-18 (bsc#1198970): - CVE-2022-1520: Incorrect security status shown after viewing an attached email (bmo#1745019). - CVE-2022-29914: Fullscreen notification bypass using popups (bmo#1746448). - CVE-2022-29909: Bypassing permission prompt in nested browsing contexts (bmo#1755081). - CVE-2022-29916: Leaking browser history with CSS variables (bmo#1760674). - CVE-2022-29911: iframe sandbox bypass (bmo#1761981). - CVE-2022-29912: Reader mode bypassed SameSite cookies (bmo#1692655). - CVE-2022-29913: Speech Synthesis feature not properly disabled (bmo#1764778). - CVE-2022-29917: Memory safety bugs fixed in Thunderbird 91.9 (bmo#1684739, bmo#1706441, bmo#1753298, bmo#1762614, bmo#1762620). Important SUSE bug 1198970 CVE-2022-1520 CVE-2022-29909 CVE-2022-29911 CVE-2022-29912 CVE-2022-29913 CVE-2022-29914 CVE-2022-29916 CVE-2022-29917 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.3.3 (jsc#SLE-8705), bringing many bug and stability fixes. More information for the 6.3 release at: https://wiki.documentfoundation.org/ReleaseNotes/6.3 Security issue fixed: - CVE-2019-9853: Fixed an issue where by executing macros, the security settings could have been bypassed (bsc#1152684). Other issues addressed: - Dropped disable-kde4 switch, since it is no longer known by configure - Disabled gtk2 because it will be removed in future releases - librelogo is now a standalone sub-package (bsc#1144522). - Partial fixes for an issue where Table(s) from DOCX showed wrong position or color (bsc#1061210). cmis-client was updated to 0.5.2: * Removed header for Uuid's sha1 header(bsc#1105173). * Fixed Google Drive login * Added support for Google Drive two-factor authentication * Fixed access to SharePoint root folder * Limited the maximal number of redirections to 20 * Switched library implementation to C++11 (the API remains C++98-compatible) * Fixed encoding of OAuth2 credentials * Dropped cppcheck run from 'make check'. A new 'make cppcheck' target was created for it * Added proper API symbol exporting * Speeded up building of tests a bit * Fixed a few issues found by coverity and cppcheck libixion was updated to 0.15.0: * Updated for new liborcus * Switched to spdlog for compile-time debug log outputs * Fixed various issues libmwaw was updated 0.3.15: * Fixed fuzzing issues liborcus was updated to 0.15.3: * Fixed various xml related bugs * Improved performance * Fixed multiple parser issues * Added map and structure mode to orcus-json * Other improvements and fixes mdds was updated to 1.5.0: * API changed to 1.5 * Moved the API incompatibility notes from README to the rst doc. * Added the overview section for flat_segment_tree. myspell-dictionaries was updated to 20191016: * Updated Slovenian thesaurus * Updated the da_DK dictionary * Removed the abbreviations from Thai hunspell dictionary * Updated the English dictionaries * Fixed the logo management for 'ca' spdlog was updated to 0.16.3: * Fixed sleep issue under MSVC that happens when changing the clock backwards * Ensured that macros always expand to expressions * Added global flush_on function Moderate SUSE bug 1061210 SUSE bug 1105173 SUSE bug 1144522 SUSE bug 1152684 CVE-2019-9853 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for colord fixes the following issues: - CVE-2021-42523: Fixed a small memory leak in sqlite3_exec (bsc#1202802). Moderate SUSE bug 1202802 CVE-2021-42523 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for dia fixes the following issue: - CVE-2019-19451: Fixed an endless loop on filenames with invalid encoding (bsc#1158194). Moderate SUSE bug 1158194 CVE-2019-19451 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for evolution-data-server fixes the following issues: - CVE-2020-16117: Fix crash on malformed server response with minimal capabilities (bsc#1174712). - CVE-2020-14928: Response injection via STARTTLS in SMTP and POP3 (bsc#1173910). - Fix buffer overrun when parsing base64 data (bsc#1182882). This update for evolution-ews fixes the following issue: - Fix buffer overrun when parsing base64 data (bsc#1182882). Moderate SUSE bug 1173910 SUSE bug 1174712 SUSE bug 1182882 CVE-2020-14928 CVE-2020-16117 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for ffmpeg fixes the following issues: - CVE-2022-48434: Fixed use after free in libavcodec/pthread_frame.c (bsc#1209934). Important SUSE bug 1209934 CVE-2022-48434 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for ffmpeg-4 fixes the following issues: - CVE-2022-3109: Fixed null pointer dereference in vp3_decode_frame() (bsc#1206442). Moderate SUSE bug 1206442 CVE-2022-3109 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for freerdp fixes the following issues: - CVE-2022-39282: Fix to init data read by `/parallel` command line switch. (bsc#1204258) - CVE-2022-39283: Fix to prevent video channel from reading uninitialized data. (bsc#1204257) Moderate SUSE bug 1204257 SUSE bug 1204258 CVE-2022-39282 CVE-2022-39283 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for gegl fixes the following issues: - CVE-2021-45463: fixed shell expansion via crafted pathname in the ImageMagick convert fallback (bsc#1194045). Important SUSE bug 1194045 CVE-2021-45463 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for icedtea-web fixes the following issues: - CVE-2019-10181: Fixed an issue where an attacker could inject unsigned code in a signed JAR file (bsc#1142835). - CVE-2019-10182: Fixed a path traversal issue where an attacker could upload arbritrary files by tricking a victim into running a specially crafted application(bsc#1142825). - CVE-2019-10185: Fixed an issue where an attacker could write files to arbitrary locations during JAR auto-extraction (bsc#1142832). Important SUSE bug 1142825 SUSE bug 1142832 SUSE bug 1142835 CVE-2019-10181 CVE-2019-10182 CVE-2019-10185 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libXpm fixes the following issues: - CVE-2022-46285: Fixed an infinite loop that could be triggered when reading a XPM image with a C-style comment that is never closed (bsc#1207029). - CVE-2022-44617: Fixed an excessive resource consumption that could be triggered when reading small crafted XPM image (bsc#1207030). - CVE-2022-4883: Fixed an issue that made decompression commands susceptible to PATH environment variable manipulation attacks (bsc#1207031). Important SUSE bug 1207029 SUSE bug 1207030 SUSE bug 1207031 CVE-2022-44617 CVE-2022-46285 CVE-2022-4883 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for LibreOffice, libepubgen, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues: LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes: The full changelog can be found on: https://wiki.documentfoundation.org/ReleaseNotes/6.1 Bugfixes: - bsc#1095639 Exporting to PPTX results in vertical labels being shown horizontally - bsc#1098891 Table in PPTX misplaced and partly blue - bsc#1088263 Labels in chart change (from white and other colors) to black when saving as PPTX - bsc#1095601 Exporting to PPTX shifts arrow shapes quite a bit - Add more translations: * Belarusian * Bodo * Dogri * Frisian * Gaelic * Paraguayan_Guaran * Upper_Sorbian * Konkani * Kashmiri * Luxembourgish * Monglolian * Manipuri * Burnese * Occitan * Kinyarwanda * Santali * Sanskrit * Sindhi * Sidamo * Tatar * Uzbek * Upper Sorbian * Venetian * Amharic * Asturian * Tibetian * Bosnian * English GB * English ZA * Indonesian * Icelandic * Georgian * Khmer * Lao * Macedonian * Nepali * Oromo * Albanian * Tajik * Uyghur * Vietnamese * Kurdish - Try to build all languages see bsc#1096360 - Make sure to install the KDE5/Qt5 UI/filepicker - Try to implement safeguarding to avoid bsc#1050305 - Disable base-drivers-mysql as it needs mysqlcppcon that is only for mysql and not mariadb, causes issues bsc#1094779 * Users can still connect using jdbc/odbc - Fix java detection on machines with too many cpus - CVE-2018-10583: An information disclosure vulnerability occured when LibreOffice automatically processed and initiated an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606) libepubgen was updated to 0.1.1: - Avoid <div> inside <p> or <span>. - Avoid writin vertical-align attribute without a value. - Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote. - Handle relative width for images. - Fixed layout: write chapter names to improve navigation. - Support writing mode. - Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML <body> attribute. liblangtag was updated to 0.6.2: - use standard function - fix leak in test libmwaw was updated to 0.3.14: - Support MS Multiplan 1.1 files libnumbertext was update to 1.0.5: - Various fixes in numerical calculations and issues reported on libreoffice tracker libstaroffice was updated to 0.0.6: - retrieve some StarMath's formula, - retrieve some charts as graphic, - retrieve some fields in sda/sdc/sdp text-boxes, - .sdw: retrieve more attachments. libwps was updated to 0.4.9: - QuattroPro: add parser to .wb3 files - Multiplan: add parser to DOS v1-v3 files - charts: try to retrieve charts in .wk*, .wq* files - QuattroPro: add parser to .wb[12] files myspell-dictionaries was updated to 20181025: - Turkish dictionary added - Updated French dictionary xmlsec1 was updated to 1.2.26: - Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation - Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto Moderate SUSE bug 1050305 SUSE bug 1088263 SUSE bug 1091606 SUSE bug 1094779 SUSE bug 1095601 SUSE bug 1095639 SUSE bug 1096360 SUSE bug 1098891 SUSE bug 1104876 CVE-2018-10583 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.2.5.2 (fate#327121 bsc#1128845 bsc#1123455), bringing lots of bug and stability fixes. Additional bugfixes: - If there is no firebird engine we still need java to run hsqldb (bsc#1135189) - PPTX: Rectangle turns from green to blue and loses transparency when transparency is set (bsc#1135228) - Slide deck compression doesn't, hmm, compress too much (bsc#1127760) - Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869) - Image from PPTX shown in a square, not a circle (bsc#1121874) libixion was updated to 0.14.1: * Updated for new orcus liborcus was updated to 0.14.1: * Boost 1.67 support * Various cell handling issues fixed libwps was updated to 0.4.10: * QuattroPro: add parser of .qwp files * all: support complex encoding mdds was updated to 1.4.3: * Api change to 1.4 * More multivector operations and tweaks * Various multi vector fixes * flat_segment_tree: add segment iterator and functions * fix to handle out-of-range insertions on flat_segment_tree * Another api version -> rename to mdds-1_2 myspell-dictionaries was updated to 20190423: * Serbian dictionary updated * Update af_ZA hunspell * Update Spanish dictionary * Update Slovenian dictionary * Update Breton dictionary * Update Galician dictionary Moderate SUSE bug 1089811 SUSE bug 1116451 SUSE bug 1121874 SUSE bug 1123131 SUSE bug 1123455 SUSE bug 1124062 SUSE bug 1124869 SUSE bug 1127760 SUSE bug 1127857 SUSE bug 1128845 SUSE bug 1135189 SUSE bug 1135228 CVE-2018-16858 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for LibreOffice, libepubgen, liblangtag, libmwaw, libnumbertext, libstaroffice, libwps, myspell-dictionaries, xmlsec1 fixes the following issues: LibreOffice was updated to 6.1.3.2 (fate#326624) and contains new features and lots of bugfixes: The full changelog can be found on: https://wiki.documentfoundation.org/ReleaseNotes/6.1 Bugfixes: - bsc#1095639 Exporting to PPTX results in vertical labels being shown horizontally - bsc#1098891 Table in PPTX misplaced and partly blue - bsc#1088263 Labels in chart change (from white and other colors) to black when saving as PPTX - bsc#1095601 Exporting to PPTX shifts arrow shapes quite a bit - Add more translations: * Belarusian * Bodo * Dogri * Frisian * Gaelic * Paraguayan_Guaran * Upper_Sorbian * Konkani * Kashmiri * Luxembourgish * Monglolian * Manipuri * Burnese * Occitan * Kinyarwanda * Santali * Sanskrit * Sindhi * Sidamo * Tatar * Uzbek * Upper Sorbian * Venetian * Amharic * Asturian * Tibetian * Bosnian * English GB * English ZA * Indonesian * Icelandic * Georgian * Khmer * Lao * Macedonian * Nepali * Oromo * Albanian * Tajik * Uyghur * Vietnamese * Kurdish - Try to build all languages see bsc#1096360 - Make sure to install the KDE5/Qt5 UI/filepicker - Try to implement safeguarding to avoid bsc#1050305 - Disable base-drivers-mysql as it needs mysqlcppcon that is only for mysql and not mariadb, causes issues bsc#1094779 * Users can still connect using jdbc/odbc - Fix java detection on machines with too many cpus - CVE-2018-10583: An information disclosure vulnerability occured when LibreOffice automatically processed and initiated an SMB connection embedded in a malicious file, as demonstrated by xlink:href=file://192.168.0.2/test.jpg within an office:document-content element in a .odt XML document. (bsc#1091606) libepubgen was updated to 0.1.1: - Avoid <div> inside <p> or <span>. - Avoid writin vertical-align attribute without a value. - Fix generation of invalid XHTML when there is a link starting at the beginning of a footnote. - Handle relative width for images. - Fixed layout: write chapter names to improve navigation. - Support writing mode. - Start a new HTML file at every page span in addition to the splits induced by the chosen split method. This is to ensure that specified writing mode works correctly, as it is HTML <body> attribute. liblangtag was updated to 0.6.2: - use standard function - fix leak in test libmwaw was updated to 0.3.14: - Support MS Multiplan 1.1 files libnumbertext was update to 1.0.5: - Various fixes in numerical calculations and issues reported on libreoffice tracker libstaroffice was updated to 0.0.6: - retrieve some StarMath's formula, - retrieve some charts as graphic, - retrieve some fields in sda/sdc/sdp text-boxes, - .sdw: retrieve more attachments. libwps was updated to 0.4.9: - QuattroPro: add parser to .wb3 files - Multiplan: add parser to DOS v1-v3 files - charts: try to retrieve charts in .wk*, .wq* files - QuattroPro: add parser to .wb[12] files myspell-dictionaries was updated to 20181025: - Turkish dictionary added - Updated French dictionary xmlsec1 was updated to 1.2.26: - Added xmlsec-mscng module based on Microsoft Cryptography API: Next Generation - Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R 34.10-2001 in xmlsec-mscrypto Moderate SUSE bug 1050305 SUSE bug 1088263 SUSE bug 1091606 SUSE bug 1094779 SUSE bug 1095601 SUSE bug 1095639 SUSE bug 1096360 SUSE bug 1098891 SUSE bug 1104876 CVE-2018-10583 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libreoffice and libraries fixes the following issues: LibreOffice was updated to 6.2.5.2 (fate#327121 bsc#1128845 bsc#1123455), bringing lots of bug and stability fixes. Additional bugfixes: - If there is no firebird engine we still need java to run hsqldb (bsc#1135189) - PPTX: Rectangle turns from green to blue and loses transparency when transparency is set (bsc#1135228) - Slide deck compression doesn't, hmm, compress too much (bsc#1127760) - Psychedelic graphics in LibreOffice (but not PowerPoint) (bsc#1124869) - Image from PPTX shown in a square, not a circle (bsc#1121874) libixion was updated to 0.14.1: * Updated for new orcus liborcus was updated to 0.14.1: * Boost 1.67 support * Various cell handling issues fixed libwps was updated to 0.4.10: * QuattroPro: add parser of .qwp files * all: support complex encoding mdds was updated to 1.4.3: * Api change to 1.4 * More multivector operations and tweaks * Various multi vector fixes * flat_segment_tree: add segment iterator and functions * fix to handle out-of-range insertions on flat_segment_tree * Another api version -> rename to mdds-1_2 myspell-dictionaries was updated to 20190423: * Serbian dictionary updated * Update af_ZA hunspell * Update Spanish dictionary * Update Slovenian dictionary * Update Breton dictionary * Update Galician dictionary Moderate SUSE bug 1089811 SUSE bug 1116451 SUSE bug 1121874 SUSE bug 1123131 SUSE bug 1123455 SUSE bug 1124062 SUSE bug 1124869 SUSE bug 1127760 SUSE bug 1127857 SUSE bug 1128845 SUSE bug 1135189 SUSE bug 1135228 CVE-2018-16858 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libraw fixes the following issues: Security issues fixed: - CVE-2018-20337: Fixed a stack-based buffer overflow in the parse_makernote function of dcraw_common.cpp (bsc#1120519) - CVE-2018-20365: Fixed a heap-based buffer overflow in the raw2image function of libraw_cxx.cpp (bsc#1120500) - CVE-2018-20364: Fixed a NULL pointer dereference in the copy_bayer function of libraw_cxx.cpp (bsc#1120499) - CVE-2018-20363: Fixed a NULL pointer dereference in the raw2image function of libraw_cxx.cpp (bsc#1120498) - CVE-2018-5817: Fixed an infinite loop in the unpacked_load_raw function of dcraw_common.cpp (bsc#1120515) - CVE-2018-5818: Fixed an infinite loop in the parse_rollei function of dcraw_common.cpp (bsc#1120516) - CVE-2018-5819: Fixed a denial of service in the parse_sinar_ia function of dcraw_common.cpp (bsc#1120517) Moderate SUSE bug 1120498 SUSE bug 1120499 SUSE bug 1120500 SUSE bug 1120515 SUSE bug 1120516 SUSE bug 1120517 SUSE bug 1120519 CVE-2018-20337 CVE-2018-20363 CVE-2018-20364 CVE-2018-20365 CVE-2018-5817 CVE-2018-5818 CVE-2018-5819 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libraw fixes the following issues: - CVE-2023-1729: Fixed a heap buffer overflow when converting an image (bsc#1210720). Low SUSE bug 1210720 CVE-2023-1729 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Critical) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libwebp fixes the following issues: - CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter() (bsc#1185685). - CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign() (bsc#1185691). - CVE-2020-36332: Fixed extreme memory allocation when reading a file (bsc#1185674). - CVE-2020-36329: Fixed use-after-free in EmitFancyRGB() (bsc#1185652). - CVE-2018-25012: Fixed heap-based buffer overflow in GetLE24() (bsc#1185690). - CVE-2020-36328: Fixed heap-based buffer overflow in WebPDecode*Into functions (bsc#1185688). - CVE-2018-25013: Fixed heap-based buffer overflow in ShiftBytes() (bsc#1185654). - CVE-2020-36331: Fixed heap-based buffer overflow in ChunkAssignData() (bsc#1185686). - CVE-2018-25009: Fixed heap-based buffer overflow in GetLE16() (bsc#1185673). - CVE-2018-25011: Fixed fail on multiple image chunks (bsc#1186247). Critical SUSE bug 1185652 SUSE bug 1185654 SUSE bug 1185673 SUSE bug 1185674 SUSE bug 1185685 SUSE bug 1185686 SUSE bug 1185688 SUSE bug 1185690 SUSE bug 1185691 SUSE bug 1186247 CVE-2018-25009 CVE-2018-25010 CVE-2018-25011 CVE-2018-25012 CVE-2018-25013 CVE-2020-36328 CVE-2020-36329 CVE-2020-36330 CVE-2020-36331 CVE-2020-36332 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libwmf fixes the following issues: libwmf was updated to 0.2.12: * upstream changed to fork from Fedora: https://github.com/caolanm/libwmf * merged all the pending fixes * merge in fixes for libgd CVE-2019-6978 (bsc#1123522) * fixed memory allocation failure (CVE-2016-9011) * Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075) Important SUSE bug 1006739 SUSE bug 1123522 SUSE bug 1174075 CVE-2016-9011 CVE-2019-6978 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libwpd fixes the following issues: Security issue fixed: - CVE-2018-19208: Fixed illegal address access inside libwpd at function WP6ContentListener:defineTable (bsc#1115713). Important SUSE bug 1115713 CVE-2018-19208 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for ntfs-3g_ntfsprogs fixes the following issues: - CVE-2022-40284: Fixed incorrect validation of some of the NTFS metadata that could cause buffer overflow (bsc#1204734). Important SUSE bug 1204734 CVE-2022-40284 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for openconnect fixes the following issues: - CVE-2020-12823: Fixed a buffer overflow via crafted certificate data which could have led to denial of service (bsc#1171862). Moderate SUSE bug 1171862 CVE-2020-12823 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for pidgin fixes the following issues: - CVE-2022-26491: Fixed MITM vulnerability when DNSSEC wasn't used (bsc#1199025). Important SUSE bug 1199025 CVE-2022-26491 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for poppler fixes the following issues: - CVE-2022-38784: Fixed integer overflow in the JBIG2 decoder (bsc#1202692). Important SUSE bug 1202692 CVE-2022-38784 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for transfig fixes the following issues: Update to fig2dev version 3.2.8 Patchlevel 8b (Aug 2021) - bsc#1190618, CVE-2020-21529: stack buffer overflow in the bezier_spline function in genepic.c. - bsc#1190615, CVE-2020-21530: segmentation fault in the read_objects function in read.c. - bsc#1190617, CVE-2020-21531: global buffer overflow in the conv_pattern_index function in gencgm.c. - bsc#1190616, CVE-2020-21532: global buffer overflow in the setfigfont function in genepic.c. - bsc#1190612, CVE-2020-21533: stack buffer overflow in the read_textobject function in read.c. - bsc#1190611, CVE-2020-21534: global buffer overflow in the get_line function in read.c. - bsc#1190607, CVE-2020-21535: segmentation fault in the gencgm_start function in gencgm.c. - bsc#1192019, CVE-2021-32280: NULL pointer dereference in compute_closed_spline() in trans_spline.c Important SUSE bug 1189325 SUSE bug 1189343 SUSE bug 1189345 SUSE bug 1189346 SUSE bug 1190607 SUSE bug 1190611 SUSE bug 1190612 SUSE bug 1190615 SUSE bug 1190616 SUSE bug 1190617 SUSE bug 1190618 SUSE bug 1192019 CVE-2020-21529 CVE-2020-21530 CVE-2020-21531 CVE-2020-21532 CVE-2020-21533 CVE-2020-21534 CVE-2020-21535 CVE-2020-21680 CVE-2020-21681 CVE-2020-21682 CVE-2020-21683 CVE-2021-32280 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for zxing-cpp fixes the following issues: - CVE-2021-28021: Fixed buffer overflow vulnerability in function stbi__extend_receive in stb_image.h via a crafted JPEG file. (bsc#1191743). - CVE-2021-42715: Fixed buffer overflow in stb_image PNM loader (bsc#1191942). - CVE-2021-42716: Fixed denial of service in stb_image HDR loader when reading crafted HDR files (bsc#1191944). Important SUSE bug 1191743 SUSE bug 1191942 SUSE bug 1191944 CVE-2021-28021 CVE-2021-42715 CVE-2021-42716 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gcc13 (Important) (in QA) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Installer Updates 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the 'Development Tools' module. The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories. To use gcc13 compilers use: - install 'gcc13' or 'gcc13-c++' or one of the other 'gcc13-COMPILER' frontend packages. - override your Makefile to use CC=gcc13, CXX=g++13 and similar overrides for the other languages. For a full changelog with all new GCC13 features, check out https://gcc.gnu.org/gcc-13/changes.html Detailed changes: * CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052) - Turn cross compiler to s390x to a glibc cross. [bsc#1214460] - Also handle -static-pie in the default-PIE specs - Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101] - Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427] - Add new x86-related intrinsics (amxcomplexintrin.h). - RISC-V: Add support for inlining subword atomic operations - Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver. - Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC. - Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing. - Bump included newlib to version 4.3.0. - Also package libhwasan_preinit.o on aarch64. - Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite. - Package libhwasan_preinit.o on x86_64. - Fixed unwinding on aarch64 with pointer signing. [bsc#1206684] - Enable PRU flavour for gcc13 - update floatn fixinclude pickup to check each header separately (bsc#1206480) - Redo floatn fixinclude pick-up to simply keep what is there. - Bump libgo SONAME to libgo22. - Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers. - Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15. - Depend on at least LLVM 13 for GCN cross compiler. - Update embedded newlib to version 4.2.0 - Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the same build. This patch is currently in QA and not yet available for download. Important SUSE bug 1206480 SUSE bug 1206684 SUSE bug 1210557 SUSE bug 1211427 SUSE bug 1212101 SUSE bug 1213915 SUSE bug 1214052 SUSE bug 1214460 CVE-2023-4039 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups-filters (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups-filters fixes the following issues: - CVE-2023-24805: Fixed a remote code execution in the beh backend (bsc#1211340). Important SUSE bug 1211340 CVE-2023-24805 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ucode-intel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230512 release. (bsc#1211382). - New platforms: | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL-N | A0 | 06-be-00/01 | | 00000010 | Core i3-N305/N300, N50/N97/N100/N200, Atom x7211E/x7213E/x7425E | AZB | A0 | 06-9a-04/40 | | 00000004 | Intel(R) Atom(R) C1100 | AZB | R0 | 06-9a-04/40 | | 00000004 | Intel(R) Atom(R) C1100 - Updated Platforms | Processor | Stepping | F-M-S/PI | Old Ver | New Ver | Products |:---------------|:---------|:------------|:---------|:---------|:--------- | ADL | L0 | 06-9a-03/80 | 00000429 | 0000042a | Core Gen12 | ADL | L0 | 06-9a-04/80 | 00000429 | 0000042a | Core Gen12 | AML-Y22 | H0 | 06-8e-09/10 | | 000000f2 | Core Gen8 Mobile | AML-Y42 | V0 | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile | CFL-H | R0 | 06-9e-0d/22 | 000000f4 | 000000f8 | Core Gen9 Mobile | CFL-H/S | P0 | 06-9e-0c/22 | 000000f0 | 000000f2 | Core Gen9 | CFL-H/S/E3 | U0 | 06-9e-0a/22 | 000000f0 | 000000f2 | Core Gen8 Desktop, Mobile, Xeon E | CFL-S | B0 | 06-9e-0b/02 | 000000f0 | 000000f2 | Core Gen8 | CFL-U43e | D0 | 06-8e-0a/c0 | 000000f0 | 000000f2 | Core Gen8 Mobile | CLX-SP | B0 | 06-55-06/bf | 04003303 | 04003501 | Xeon Scalable Gen2 | CLX-SP | B1 | 06-55-07/bf | 05003303 | 05003501 | Xeon Scalable Gen2 | CML-H | R1 | 06-a5-02/20 | 000000f4 | 000000f6 | Core Gen10 Mobile | CML-S102 | Q0 | 06-a5-05/22 | 000000f4 | 000000f6 | Core Gen10 | CML-S62 | G1 | 06-a5-03/22 | 000000f4 | 000000f6 | Core Gen10 | CML-U62 V1 | A0 | 06-a6-00/80 | 000000f4 | 000000f6 | Core Gen10 Mobile | CML-U62 V2 | K1 | 06-a6-01/80 | 000000f4 | 000000f6 | Core Gen10 Mobile | CML-Y42 | V0 | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen10 Mobile | CPX-SP | A1 | 06-55-0b/bf | 07002503 | 07002601 | Xeon Scalable Gen3 | ICL-D | B0 | 06-6c-01/10 | 01000211 | 01000230 | Xeon D-17xx, D-27xx | ICL-U/Y | D1 | 06-7e-05/80 | 000000b8 | 000000ba | Core Gen10 Mobile | ICX-SP | D0 | 06-6a-06/87 | 0d000389 | 0d000390 | Xeon Scalable Gen3 | KBL-G/H/S/E3 | B0 | 06-9e-09/2a | 000000f0 | 000000f2 | Core Gen7; Xeon E3 v6 | KBL-U/Y | H0 | 06-8e-09/c0 | | 000000f2 | Core Gen7 Mobile | LKF | B2/B3 | 06-8a-01/10 | 00000032 | 00000033 | Core w/Hybrid Technology | RKL-S | B0 | 06-a7-01/02 | 00000057 | 00000058 | Core Gen11 | RPL-H 6+8 | J0 | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13 | RPL-P 6+8 | J0 | 06-ba-02/07 | 0000410e | 00004112 | Core Gen13 | RPL-S | S0 | 06-b7-01/32 | 00000112 | 00000113 | Core Gen13 | RPL-U 2+8 | Q0 | 06-ba-03/07 | 0000410e | 00004112 | Core Gen13 | SKX-D | H0 | 06-55-04/b7 | | 02006f05 | Xeon D-21xx | SKX-SP | B1 | 06-55-03/97 | 01000161 | 01000171 | Xeon Scalable | SKX-SP | H0/M0/U0 | 06-55-04/b7 | | 02006f05 | Xeon Scalable | SPR-HBM | B3 | 06-8f-08/10 | 2c000170 | 2c0001d1 | Xeon Max | SPR-SP | E0 | 06-8f-04/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 | SPR-SP | E2 | 06-8f-05/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 | SPR-SP | E3 | 06-8f-06/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 | SPR-SP | E4 | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 | SPR-SP | E5 | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 | SPR-SP | S2 | 06-8f-07/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 | SPR-SP | S3 | 06-8f-08/87 | 2b000181 | 2b000461 | Xeon Scalable Gen4 | TGL | B1 | 06-8c-01/80 | 000000a6 | 000000aa | Core Gen11 Mobile | TGL-H | R0 | 06-8d-01/c2 | 00000042 | 00000044 | Core Gen11 Mobile | TGL-R | C0 | 06-8c-02/c2 | 00000028 | 0000002a | Core Gen11 Mobile | WHL-U | V0 | 06-8e-0c/94 | 000000f4 | 000000f6 | Core Gen8 Mobile | WHL-U | W0 | 06-8e-0b/d0 | | 000000f2 | Core Gen8 Mobile Important SUSE bug 1208479 SUSE bug 1211382 CVE-2022-33972 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-Flask (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-Flask fixes the following issues: - CVE-2023-30861: Fixed a potential cookie confusion due to incorrect caching (bsc#1211246). Important SUSE bug 1211246 CVE-2023-30861 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for geoipupdate (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of geoipupdate fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441 bsc#1209658). Important SUSE bug 1200441 SUSE bug 1209658 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for texlive (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for texlive fixes the following issues: - CVE-2023-32700: Fixed arbitrary code execution in LuaTeX (bsc#1211389). Important SUSE bug 1211389 CVE-2023-32700 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for c-ares (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for c-ares fixes the following issues: Update to version 1.19.1: - CVE-2023-32067: 0-byte UDP payload causes Denial of Service (bsc#1211604) - CVE-2023-31147: Insufficient randomness in generation of DNS query IDs (bsc#1211605) - CVE-2023-31130: Buffer Underwrite in ares_inet_net_pton() (bsc#1211606) - CVE-2023-31124: AutoTools does not set CARES_RANDOM_FILE during cross compilation (bsc#1211607) - Fix uninitialized memory warning in test - ares_getaddrinfo() should allow a port of 0 - Fix memory leak in ares_send() on error - Fix comment style in ares_data.h - Fix typo in ares_init_options.3 - Sync ax_pthread.m4 with upstream - Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support Important SUSE bug 1211604 SUSE bug 1211605 SUSE bug 1211606 SUSE bug 1211607 CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for wireshark (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: Updated to version 3.6.14: - CVE-2023-2855: Fixed a crash in the Candump log file parser (boo#1211703). - CVE-2023-2856: Fixed a crash in the VMS TCPIPtrace file parser (boo#1211707). - CVE-2023-2857: Fixed a crash in the BLF file parser (boo#1211705). - CVE-2023-2858: Fixed a crash in the NetScaler file parser (boo#1211706). - CVE-2023-0668: Fixed a crash in the IEEE C37.118 Synchrophasor dissector (boo#1211710). - CVE-2023-2879: GDSDB dissector infinite loop (boo#1211793). Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html Moderate SUSE bug 1211703 SUSE bug 1211705 SUSE bug 1211706 SUSE bug 1211707 SUSE bug 1211710 SUSE bug 1211793 CVE-2023-0668 CVE-2023-2855 CVE-2023-2856 CVE-2023-2857 CVE-2023-2858 CVE-2023-2859 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for tiff (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for tiff fixes the following issues: Fixed multiple out of bounds read/write security issues: CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797 (bsc#1208228), CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230), CVE-2023-0800 (bsc#1208231), CVE-2023-0801 (bsc#1208232), CVE-2023-0802 (bsc#1208233), CVE-2023-0803 (bsc#1208234), CVE-2023-0804 (bsc#1208236). Moderate SUSE bug 1208226 SUSE bug 1208227 SUSE bug 1208228 SUSE bug 1208229 SUSE bug 1208230 SUSE bug 1208231 SUSE bug 1208232 SUSE bug 1208233 SUSE bug 1208234 SUSE bug 1208236 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799 CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups fixes the following issues: - CVE-2023-32324: Fixed a buffer overflow in format_log_line() which could cause a denial-of-service (bsc#1211643). Important SUSE bug 1211643 CVE-2023-32324 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libwebp (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libwebp fixes the following issues: - CVE-2023-1999: Fixed a double free (bsc#1210212). Important SUSE bug 1210212 CVE-2023-1999 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openldap2 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openldap2 fixes the following issues: - CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795). Moderate SUSE bug 1211795 CVE-2023-2953 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rekor (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rekor fixes the following issues: - updated to rekor 1.2.1 (jsc#SLE-23476): - CVE-2023-33199: Fixed that malformed proposed intoto v0.0.2 entries can cause a panic (bsc#1211790). Moderate SUSE bug 1211790 CVE-2023-33199 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for opensc (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for opensc fixes the following issues: - CVE-2023-2977: Fixed out of bounds read in pkcs15 cardos_have_verifyrc_package() (bsc#1211894). Moderate SUSE bug 1211894 CVE-2023-2977 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python3 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python3 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). - Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158). Moderate SUSE bug 1203750 SUSE bug 1211158 CVE-2007-4559 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xen (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xen fixes the following issues: Security fixes: - CVE-2022-42336: Fix an issue where guests configuring AMD Speculative Store Bypass Disable would have no effect (XSA-431) (bsc#1211433). - CVE-2022-42335: Fixed an issue where guests running under shadow mode with a PCI devices passed through could force the hypervisor to dereference arbitrary memory, leading to a denial of service (XSA-430) (bsc#1210315). Non-security fixes: - Fixed a build warning false positive (bsc#1210570). - Added missing debug-info to xen-syms (bsc#1209237). - Updated to version 4.17.1 (bsc#1027519). - Fixed a failure during VM destruction when using host-assisted kexec and kdump (bsc#1209245). - Other upstream fixes (bsc#1027519). Important SUSE bug 1027519 SUSE bug 1208736 SUSE bug 1209237 SUSE bug 1209245 SUSE bug 1210315 SUSE bug 1210570 SUSE bug 1211433 CVE-2022-42335 CVE-2022-42336 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for bluez (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398). Important SUSE bug 1210398 CVE-2023-27349 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for Salt (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for salt fixes the following issues: salt: - Update to Salt release version 3006.0 (jsc#PED-4361) * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency for salt - Add python3-packaging as new dependency for salt - Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071) - Avoid conflicts with Salt dependencies versions (bsc#1211612) - Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754) - Create new salt-tests subpackage containing Salt tests - Drop conflictive patch dicarded from upstream - Fix package build with old setuptools versions - Fix SLS rendering error when Jinja macros are used - Fix version detection and avoid building and testing failures - Prevent deadlocks in salt-ssh executions - Require python3-jmespath runtime dependency (bsc#1209233) - Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517) python-jmespath: - Deliver python3-jmespath to SUSE Linux Enterprise Micro on s390x architecture as it is now required by Salt (no source changes) python-ply: - Deliver python3-ply to SUSE Linux Enterprise Micro on s390x architecture as it is a requirement for python-jmespath (no source changes) Moderate SUSE bug 1207071 SUSE bug 1209233 SUSE bug 1211612 SUSE bug 1211754 SUSE bug 1212516 SUSE bug 1212517 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for salt and python-pyzmq (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for salt and python-pyzmq fixes the following issues: salt: - Update to Salt release version 3006.0 (jsc#PED-4361) * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency for salt - Add python3-packaging as new dependency for salt - Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071) - Avoid conflicts with Salt dependencies versions (bsc#1211612) - Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754) - Create new salt-tests subpackage containing Salt tests - Drop conflictive patch dicarded from upstream - Fix package build with old setuptools versions - Fix SLS rendering error when Jinja macros are used - Fix version detection and avoid building and testing failures - Prevent deadlocks in salt-ssh executions - Require python3-jmespath runtime dependency (bsc#1209233) - Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517) python-pyzmq: - Update python-pyzmq to version 17.1.2 in LTSS products (bsc#1186945) Moderate SUSE bug 1186945 SUSE bug 1207071 SUSE bug 1209233 SUSE bug 1211612 SUSE bug 1211754 SUSE bug 1212516 SUSE bug 1212517 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for open-vm-tools (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). Bug fixes: - Fixed build problem with grpc 1.54 (bsc#1210695). Moderate SUSE bug 1210695 SUSE bug 1212143 CVE-2023-20867 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libX11 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libX11 fixes the following issues: - CVE-2023-3138: Fixed buffer overflows in InitExt.c (bsc#1212102). Important SUSE bug 1212102 CVE-2023-3138 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups fixes the following issues: - CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230). Important SUSE bug 1212230 CVE-2023-34241 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-sqlparse (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-sqlparse fixes the following issues: - CVE-2023-30608: Fixed a Regular Expression Denial of Service (ReDOS) vulnerability (bsc#1210617). Moderate SUSE bug 1210617 CVE-2023-30608 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-3 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-3 fixes the following issues: - CVE-2023-1255: Fixed input buffer over-read in AES-XTS implementation on 64 bit ARM (bsc#1210714). - CVE-2023-2650: Fixed possible DoS translating ASN.1 object identifiers (bsc#1211430). Moderate SUSE bug 1210714 SUSE bug 1211430 CVE-2023-1255 CVE-2023-2650 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: Add security patches (bsc#1211846): - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659). - CVE-2023-32373: Fixed processing of maliciously crafted web content that may lead to arbitrary code execution (bsc#1211658). Important SUSE bug 1211658 SUSE bug 1211659 SUSE bug 1211846 CVE-2023-28204 CVE-2023-32373 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libvirt (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libvirt fixes the following issues: - CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList (bsc#1211390) - apparmor: Add support for local profile customizations (bsc#1211472) - qemu: Fix cdrom media change (bsc#1210666) - qemu: Fix potential crash during driver cleanup (bsc#1209861) Moderate SUSE bug 1209861 SUSE bug 1210666 SUSE bug 1211390 SUSE bug 1211472 CVE-2023-2700 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cosign (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of cosign fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rekor (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of rekor fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libcap (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libcap fixes the following issues: - CVE-2023-2602: Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create() (bsc#1211418). - CVE-2023-2603: Fixed an integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup() (bsc#1211419). Moderate SUSE bug 1211418 SUSE bug 1211419 CVE-2023-2602 CVE-2023-2603 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues: grpc: - Update in SLE-15 (bsc#1197726, bsc#1144068) protobuf: - Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681 - Fix a potential DoS issue when parsing with binary data in protobuf-java, CVE-2022-3171, bsc#1204256 - Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530 - Add missing dependency of python subpackages on python-six (bsc#1177127) - Updated to version 3.9.2 (bsc#1162343) * Remove OSReadLittle* due to alignment requirements. * Don't use unions and instead use memcpy for the type swaps. - Disable LTO (bsc#1133277) python-aiocontextvars: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-avro: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-cryptography: - update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331) * SECURITY ISSUE: Fixed a bug where certain sequences of update() calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. CVE-2020-36242 python-cryptography-vectors: - update to 3.2 (bsc#1178168, CVE-2020-25659): * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities. Due to limitations imposed by our API, we cannot completely mitigate this vulnerability. * Support for OpenSSL 1.0.2 has been removed. * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder. - update to 3.3.2 (bsc#1198331) python-Deprecated: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 1.2.13: python-google-api-core: - Update to 1.14.2 python-googleapis-common-protos: - Update to 1.6.0 python-grpcio-gcp: - Initial spec for v0.2.2 python-humanfriendly: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to 10.0 python-jsondiff: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.0 python-knack: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 0.9.0 python-opencensus: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Disable Python2 build - Update to 0.8.0 python-opencensus-context: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-opencensus-ext-threading: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial build version 0.1.2 python-opentelemetry-api: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Version update to 1.5.0 python-psutil: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 5.9.1 - remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753) - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-PyGithub: - Update to 1.43.5: python-pytest-asyncio: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial release of python-pytest-asyncio 0.8.0 python-requests: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-websocket-client: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.2 python-websockets: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 9.1: Important SUSE bug 1099269 SUSE bug 1133277 SUSE bug 1144068 SUSE bug 1162343 SUSE bug 1177127 SUSE bug 1178168 SUSE bug 1182066 SUSE bug 1184753 SUSE bug 1194530 SUSE bug 1197726 SUSE bug 1198331 SUSE bug 1199282 SUSE bug 1203681 SUSE bug 1204256 CVE-2018-1000518 CVE-2020-25659 CVE-2020-36242 CVE-2021-22569 CVE-2021-22570 CVE-2022-1941 CVE-2022-3171 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for geoipupdate (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of geoipupdate fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for skopeo (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of skopeo fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libqt5-qtbase (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libqt5-qtbase fixes the following issues: - CVE-2023-32763: Fixed an overflow in QTextLayout (bsc#1211798). Important SUSE bug 1211798 CVE-2023-32763 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ghostscript (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ghostscript fixes the following issues: - CVE-2023-36664: Fixed permission validation mishandling for pipe devices with the %pipe% prefix or the | pipe character prefix (bsc#1212711). Important SUSE bug 1212711 CVE-2023-36664 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for bind (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bind fixes the following issues: Update to release 9.16.42 Security Fixes: * The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. (CVE-2023-2828) * A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. This has been fixed. (CVE-2023-2911) Bug Fixes: * Previously, it was possible for a delegation from cache to be returned to the client after the stale-answer-client-timeout duration. This has been fixed. [bsc#1212544, bsc#1212567, jsc#SLE-24600] Update to release 9.16.41 Bug Fixes: * When removing delegations from an opt-out range, empty-non-terminal NSEC3 records generated by those delegations were not cleaned up. This has been fixed. [jsc#SLE-24600] Update to release 9.16.40 Bug Fixes: * Logfiles using timestamp-style suffixes were not always correctly removed when the number of files exceeded the limit set by versions. This has been fixed for configurations which do not explicitly specify a directory path as part of the file argument in the channel specification. * Performance of DNSSEC validation in zones with many DNSKEY records has been improved. Update to release 9.16.39 Feature Changes: * libuv support for receiving multiple UDP messages in a single recvmmsg() system call has been tweaked several times between libuv versions 1.35.0 and 1.40.0; the current recommended libuv version is 1.40.0 or higher. New rules are now in effect for running with a different version of libuv than the one used at compilation time. These rules may trigger a fatal error at startup: - Building against or running with libuv versions 1.35.0 and 1.36.0 is now a fatal error. - Running with libuv version higher than 1.34.2 is now a fatal error when named is built against libuv version 1.34.2 or lower. - Running with libuv version higher than 1.39.0 is now a fatal error when named is built against libuv version 1.37.0, 1.38.0, 1.38.1, or 1.39.0. * This prevents the use of libuv versions that may trigger an assertion failure when receiving multiple UDP messages in a single system call. Bug Fixes: * named could crash with an assertion failure when adding a new zone into the configuration file for a name which was already configured as a member zone for a catalog zone. This has been fixed. * When named starts up, it sends a query for the DNSSEC key for each configured trust anchor to determine whether the key has changed. In some unusual cases, the query might depend on a zone for which the server is itself authoritative, and would have failed if it were sent before the zone was fully loaded. This has now been fixed by delaying the key queries until all zones have finished loading. [jsc#SLE-24600] Important SUSE bug 1212090 SUSE bug 1212544 SUSE bug 1212567 CVE-2023-2828 CVE-2023-2911 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-requests (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-requests fixes the following issues: - CVE-2023-32681: Fixed unintended leak of Proxy-Authorization header (bsc#1211674). Moderate SUSE bug 1211674 CVE-2023-32681 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bsc#1207050). - CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034). - CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-0469: Fixed a use-after-free flaw in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent (bsc#1207521). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-1583: Fixed a NULL pointer dereference in io_file_bitmap_get in io_uring/filetable.c (bsc#1209637). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155). - CVE-2023-21106: Fixed possible memory corruption due to double free in adreno_set_param of adreno_gpu.c (bsc#1211654). - CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). - CVE-2023-2235: Fixed a use-after-free vulnerability in the Performance Events system that could have been exploited to achieve local privilege escalation (bsc#1210986). - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-23006: Fixed NULL vs IS_ERR checking in dr_domain_init_resources (bsc#1208845). - CVE-2023-2430: Fixed a missing lock on overflow for IOPOLL (bsc#1211014). - CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1209052). - CVE-2023-28866: Fixed an out-of-bounds access in net/bluetooth/hci_sync.c because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but did not (bsc#1209780). - CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855). - CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294). - CVE-2023-30772: Fixed race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265). - CVE-2023-3220: Fixed a NULL pointer dereference flaw in dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() (bsc#1212556). - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043). - CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590). - CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838). - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593). - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504). - CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494). - CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). - CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495). The following non-security bugs were fixed: - 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes). - Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes). - Avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529). - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Fix page corruption caused by racy check in __free_pages (bsc#1208149). - Get module prefix from kmod (bsc#1212835). - Move upstreamed x86, scsi and arm patches into sorted section - Fixed typo that might caused (bsc#1209457). - Fix bug introduced by broken backport (bsc#1208628). - Update patch for launch issue (bsc#1210853). - [infiniband] READ is 'data destination', not source... (git-fixes) - [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes). - acpi / x86: Add support for LPS0 callback handler (git-fixes). - acpi: Do not build ACPICA with '-Os' (git-fixes). - acpi: EC: Fix EC address space handler unregistration (bsc#1207149). - acpi: EC: Fix ECDT probe ordering issues (bsc#1207149). - acpi: EC: Fix oops when removing custom query handlers (git-fixes). - acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes). - acpi: PM: Do not turn of unused power resources on the Toshiba Click Mini (git-fixes). - acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - acpi: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (git-fixes). - acpi: VIOT: Initialize the correct IOMMU fwspec (git-fixes). - acpi: battery: Fix missing NUL-termination with large strings (git-fixes). - acpi: bus: Ensure that notify handlers are not running after removal (git-fixes). - acpi: cppc: Add AMD pstate energy performance preference cppc control (bsc#1212445). - acpi: cppc: Add auto select register read/write support (bsc#1212445). - acpi: cppc: Disable FIE if registers in PCC regions (bsc#1210953). - acpi: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - acpi: resource: Add IRQ override quirk for LG UltraPC 17U70P (git-fixes). - acpi: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models (git-fixes). - acpi: resource: Add Medion S17413 to IRQ override quirk (git-fixes). - acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - acpi: resource: Do IRQ override on all TongFang GMxRGxx (git-fixes). - acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes). - acpi: tables: Add support for NBFT (bsc#1195921). - acpi: tables: Add support for NBFT (bsc#1206340). - acpi: video: Add acpi_video_backlight_use_native() helper (bsc#1206843). - acpi: video: Allow GPU drivers to report no panels (bsc#1206843). - acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - acpi: video: Fix missing native backlight on Chromebooks (bsc#1206843). - acpi: video: Refactor acpi_video_get_backlight_type() a bit (bsc#1203693). - acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - acpi: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes). - acpica: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes). - acpica: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149). - acpica: Avoid undefined behavior: applying zero offset to null pointer (git-fixes). - acpica: Drop port I/O validation for some regions (git-fixes). - acpica: include/acpi/acpixf.h: Fix indentation (bsc#1207149). - acpica: nsrepair: handle cases without a return value correctly (git-fixes). - add mainline tags to five pci_hyperv patches - affs: initialize fsdata in affs_truncate() (git-fixes). - alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes) - alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes). - alsa: asihpi: check pao in control_message() (git-fixes). - alsa: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes). - alsa: cs46xx: mark snd_cs46xx_download_image as static (git-fixes). - alsa: emu10k1: do not create old pass-through playback device on Audigy (git-fixes). - alsa: emu10k1: fix capture interrupt handler unlinking (git-fixes). - alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - alsa: fireface: make read-only const array for model names static (git-fixes). - alsa: firewire-digi00x: prevent potential use after free (git-fixes). - alsa: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes). - alsa: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes). - alsa: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes). - alsa: hda/ca0132: minor fix for allocation size (git-fixes). - alsa: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes). - alsa: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes). - alsa: hda/conexant: add a new hda codec SN6180 (git-fixes). - alsa: hda/hdmi: Preserve the previous PCM device upon re-enablement (git-fixes). - alsa: hda/hdmi: disable KAE for Intel DG2 (git-fixes). - alsa: hda/realtek - fixed wrong gpio assigned (git-fixes). - alsa: hda/realtek: Add 'Intel Reference board' and 'NUC 13' SSID in the ALC256 (git-fixes). - alsa: hda/realtek: Add Acer Predator PH315-54 (git-fixes). - alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes). - alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes). - alsa: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes). - alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes). - alsa: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for Clevo L140AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo X370SNW (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - alsa: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes). - alsa: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes). - alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes). - alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes). - alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes). - alsa: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (git-fixes). - alsa: hda/realtek: Add quirks for some Clevo laptops (git-fixes). - alsa: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes). - alsa: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (git-fixes). - alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes). - alsa: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes). - alsa: hda/realtek: Fix support for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - alsa: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Whitespace fix (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes). - alsa: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes). - alsa: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes). - alsa: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes). - alsa: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes). - alsa: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes). - alsa: hda: Do not unset preset when cleaning up codec (git-fixes). - alsa: hda: Fix Oops by 9.1 surround channel names (git-fixes). - alsa: hda: Fix unhandled register update during auto-suspend period (git-fixes). - alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes). - alsa: hda: LNL: add HD Audio PCI ID (git-fixes). - alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - alsa: hda: cs35l41: Enable Amp High Pass Filter (git-fixes). - alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes). - alsa: hda: intel-dsp-config: add MTL PCI id (git-fixes). - alsa: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes). - alsa: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes). - alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - alsa: jack: Fix mutex call in snd_jack_report() (git-fixes). - alsa: memalloc: Workaround for Xen PV (git-fixes). - alsa: oss: avoid missing-prototype warnings (git-fixes). - alsa: oxfw: make read-only const array models static (git-fixes). - alsa: pci: lx6464es: fix a debug loop (git-fixes). - alsa: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes). - alsa: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes). - alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes). - alsa: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes). - alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes). - alsa: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes). - alsa: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes). - alsa: ymfpci: Fix BUG_ON in probe function (git-fixes). - amdgpu/nv.c: Corrected typo in the video capabilities resolution (git-fixes). - amdgpu: disable powerpc support for the newer display engine (bsc#1194869). - amdgpu: fix build on non-DCN platforms (git-fixes). - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes). - apparmor: add a kernel label to use on kernel objects (bsc#1211113). - apparmor: fix missing error check for rhashtable_insert_fast (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arch: fix broken BuildID for arm64 and riscv (bsc#1209798). - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64: Add missing Set/Way CMO encodings (git-fixes). - arm64: Always load shadow stack pointer directly from the task struct (git-fixes) - arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes) - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes). - arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes). - arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes) - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes). - arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes) - arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes) - arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes) - arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes). - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes). - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes). - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes). - arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes). - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes) - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes) - arm64: dts: imx8mp: correct usb clocks (git-fixes) - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes). - arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes) - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes) - arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: specify full DMC range (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes). - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes). - arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes). - arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes). - arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes). - arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes). - arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes). - arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes). - arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes). - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes). - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes). - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes). - arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes). - arm64: efi: Execute runtime services from a dedicated stack (git-fixes). - arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes). - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage. - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes). - arm64: make is_ttbrX_addr() noinstr-safe (git-fixes) - arm64: mm: kfence: only handle translation faults (git-fixes) - arm: 9290/1: uaccess: Fix KASAN false-positives (git-fixes). - arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes) - arm: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes). - arm: bcm2835_defconfig: Enable the framebuffer (git-fixes). - arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - arm: defconfig: drop CONFIG_DRM_RCAR_LVDS (git-fixes). - arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes). - arm: dts: am5748: keep usb4_tm disabled (git-fixes) - arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes). - arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes). - arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes). - arm: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes). - arm: dts: gta04: fix excess dma channel usage (git-fixes). - arm: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes) - arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes). - arm: dts: imx: Fix pca9547 i2c-mux node name (git-fixes). - arm: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes). - arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes) - arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes). - arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes). - arm: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes). - arm: dts: s5pv210: correct MIPI CSIS clock name (git-fixes). - arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes). - arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes) - arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes) - arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes). - arm: dts: vexpress: add missing cache properties (git-fixes). - arm: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes). - arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes). - arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes) - arm: oMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes). - arm: oMAP2+: Fix memory leak in realtime_counter_init() (git-fixes). - arm: omap: remove debug-leds driver (git-fixes) - arm: remove some dead code (git-fixes) - arm: renumber bits related to _TIF_WORK_MASK (git-fixes) - arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes). - arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes) - arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes). - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes). - asn.1: Fix check for strdup() success (git-fixes). - asoc: adau7118: do not disable regulators on device unbind (git-fixes). - asoc: amd: acp-es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes). - asoc: codecs: lpass: fix incorrect mclk rate (git-fixes). - asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes). - asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes). - asoc: cs35l41: Only disable internal boost (git-fixes). - asoc: cs42l56: fix DT probe (git-fixes). - asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes). - asoc: dwc: limit the number of overrun messages (git-fixes). - asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes). - asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes). - asoc: es8316: Handle optional IRQ assignment (git-fixes). - asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes). - asoc: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes). - asoc: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes). - asoc: fsl_micfil: Correct the number of steps on SX controls (git-fixes). - asoc: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes). - asoc: fsl_mqs: move of_node_put() to the correct location (git-fixes). - asoc: fsl_sai: Update to modern clocking terminology (git-fixes). - asoc: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes). - asoc: hdac_hdmi: use set_stream() instead of set_tdm_slots() (git-fixes). - asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes). - asoc: intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes). - asoc: intel: Skylake: Fix driver hang during shutdown (git-fixes). - asoc: intel: avs: Access path components under lock (git-fixes). - asoc: intel: avs: Fix declaration of enum avs_channel_config (git-fixes). - asoc: intel: avs: Implement PCI shutdown (git-fixes). - asoc: intel: avs: Use min_t instead of min with cast (git-fixes). - asoc: intel: boards: fix spelling in comments (git-fixes). - asoc: intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcht_es8316: move comment to the right place (git-fixes). - asoc: intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes). - asoc: intel: bytcr_rt5640: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: soc-acpi-byt: Fix 'WM510205' match no longer working (git-fixes). - asoc: intel: soc-acpi: fix copy-paste issue in topology names (git-fixes). - asoc: intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes). - asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes). - asoc: lpass: Fix for KASAN use_after_free out of bounds (git-fixes). - asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes). - asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes). - asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes). - asoc: mediatek: mt8173: Fix irq error path (git-fixes). - asoc: nau8824: Add quirk to active-high jack-detect (git-fixes). - asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes). - asoc: rsnd: fixup #endif position (git-fixes). - asoc: rt1308-sdw: add the default value of some registers (git-fixes). - asoc: rt5682: Disable jack detection interrupt during suspend (git-fixes). - asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes). - asoc: simple-card: Add missing of_node_put() in case of error (git-fixes). - asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes). - asoc: soc-compress: Inherit atomicity from DAI link for Compress FE (git-fixes). - asoc: soc-compress: Reposition and add pcm_mutex (git-fixes). - asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes). - asoc: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (git-fixes). - asoc: soc-pcm: test if a BE can be prepared (git-fixes). - asoc: sof: Intel: MTL: Fix the device description (git-fixes). - asoc: sof: ipc4-topology: set dmic dai index from copier (git-fixes). - asoc: sof: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data() (git-fixes). - asoc: ssm2602: Add workaround for playback distortions (git-fixes). - asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes). - asoc: topology: Properly access value coming from topology file (git-fixes). - asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes). - asoc: zl38060 add gpiolib dependency (git-fixes). - asoc: zl38060: Remove spurious gpiolib select (git-fixes). - ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes). - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes). - ata: libata: Set __ATA_BASE_SHT max_sectors (git-fixes). - ata: libata: fix NCQ autosense logic (git-fixes). - ata: pata_macio: Fix compilation warning (git-fixes). - ata: pata_octeon_cf: drop kernel-doc notation (git-fixes). - ata: pata_octeon_cf: fix call to trace_ata_bmdma_stop() (git-fixes). - ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes). - ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes). - ath9k: hif_usb: simplify if-if to if-else (git-fixes). - ath9k: htc: clean up statistics macros (git-fixes). - atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes). - audit: update the mailing list in MAINTAINERS (git-fixes). - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes). - backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes). - batman-adv: Broken sync while rescheduling delayed work (git-fixes). - bcache: Revert 'bcache: use bvec_virt' (git-fixes). - bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes). - bcache: fix wrong bdev parameter when calling bio_alloc_clone() in do_bio_hook() (git-fixes). - bcache: put bch_bio_map() back to correct location in journal_write_unlocked() (git-fixes). - bfq: fix use-after-free in bfq_dispatch_request (git-fixes). - bfq: fix waker_bfqq inconsistency crash (git-fixes). - Blacklist commit that might cause regression (bsc#1210947) - blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes). - blk-cgroup: properly pin the parent in blkcg_css_online (bsc#1208105). - blk-lib: fix blkdev_issue_secure_erase (git-fixes). - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (git-fixes). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: run queue no matter whether the request is the last request (git-fixes). - blk-throttle: fix that io throttle can only work for single bio (git-fixes). - blk-throttle: prevent overflow while calculating wait time (git-fixes). - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - block, bfq: do not move oom_bfqq (git-fixes). - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes). - block, bfq: fix possible uaf for 'bfqq->bic' (git-fixes). - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes). - block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bfq-iosched.c: use 'false' rather than 'BLK_RW_ASYNC' (git-fixes). - block/bfq_wf2q: correct weight to ioprio (git-fixes). - block/bio: remove duplicate append pages code (git-fixes). - block: Fix possible memory leak for rq_wb on add_disk failure (git-fixes). - block: add a bdev_max_zone_append_sectors helper (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: check minor range in device_add_disk() (git-fixes). - block: clear ->slave_dir when dropping the main slave_dir reference (git-fixes). - block: do not allow splitting of a REQ_NOWAIT bio (git-fixes). - block: do not allow the same type rq_qos add more than once (git-fixes). - block: do not reverse request order when flushing plug list (bsc#1208588 bsc#1208128). - block: ensure iov_iter advances for added pages (git-fixes). - block: fix and cleanup bio_check_ro (git-fixes). - block: fix default IO priority handling again (git-fixes). - block: fix infinite loop for invalid zone append (git-fixes). - block: fix leaking minors of hidden disks (git-fixes). - block: fix memory leak for elevator on add_disk failure (git-fixes). - block: fix missing blkcg_bio_issue_init (bsc#1208107). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (git-fixes). - block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes). - block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes). - block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes). - block: null_blk: Fix null_zone_write() (git-fixes). - block: pop cached rq before potentially blocking rq_qos_throttle() (git-fixes). - block: use bdev_get_queue() in bio.c (git-fixes). - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes). - bluetooth: Fix crash when replugging CSR fake controllers (git-fixes). - bluetooth: Fix double free in hci_conn_cleanup (bsc#1209052 CVE-2023-28464). - bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes). - bluetooth: Fix race condition in hci_cmd_sync_clear (git-fixes). - bluetooth: Fix race condition in hidp_session_thread (git-fixes). - bluetooth: Fix support for Read Local Supported Codecs V2 (git-fixes). - bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes). - bluetooth: HCI: Fix global-out-of-bounds (git-fixes). - bluetooth: ISO: Avoid circular locking dependency (git-fixes). - bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - bluetooth: ISO: do not try to remove CIG if there are bound CIS left (git-fixes). - bluetooth: ISO: fix timestamped HCI ISO data packet parsing (git-fixes). - bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes). - bluetooth: L2CAP: Fix potential user-after-free (git-fixes). - bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes). - bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes). - bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (git-fixes). - bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes). - bluetooth: Remove codec id field in vendor codec definition (git-fixes). - bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (git-fixes). - bluetooth: Set ISO Data Path on broadcast sink (git-fixes). - bluetooth: btintel: Add LE States quirk support (git-fixes). - bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes). - bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes). - bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - bluetooth: btusb: Remove detection of ISO packets over bulk (git-fixes). - bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes). - bluetooth: hci_conn: Fix memory leaks (git-fixes). - bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (git-fixes). - bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (git-fixes). - bluetooth: hci_conn: use HCI dst_type values also for BIS (git-fixes). - bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (git-fixes). - bluetooth: hci_core: fix error handling in hci_register_dev() (git-fixes). - bluetooth: hci_event: Fix Invalid wait context (git-fixes). - bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - bluetooth: hci_qca: fix debugfs registration (git-fixes). - bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes). - bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes). - bluetooth: hci_sync: Fix not indicating power state (git-fixes). - bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (git-fixes). - bluetooth: hci_sync: cancel cmd_timer if hci_open failed (git-fixes). - bnxt: Do not read past the end of test names (jsc#SLE-18978). - bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978). - bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978). - bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978). - bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978). - bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes). - bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978). - bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978). - bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978). - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes). - bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978). - bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978). - bonding: Fix negative jump label count on nested bonding (bsc#1212685). - bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes) - bpf, arm64: Clear prog->jited_len along prog->jited (git-fixes) - bpf, arm64: Feed byte-offset into bpf line info (git-fixes) - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes) - bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes). - bpf, x64: Factor out emission of REX byte in more cases (git-fixes). - bpf: Add extra path pointer check to d_path helper (git-fixes). - bpf: Fix UAF in task local storage (bsc#1212564). - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes). - bpf: Fix extable address check (git-fixes). - bpf: Fix extable fixup offset (git-fixes). - bpf: Skip task with pid=1 in send_signal_common() (git-fixes). - btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158). - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158). - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes). - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158). - btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158). - btrfs: qgroup: remove outdated TODO comments (bsc#1207158). - bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes). - bus: mhi: host: Fix race between channel preparation and M0 event (git-fixes). - bus: mhi: host: Range check CHDBOFF and ERDBOFF (git-fixes). - bus: mhi: host: Remove duplicate ee check for syserr (git-fixes). - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (git-fixes). - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes). - bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes). - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes). - ca8210: fix mac_len negative array access (git-fixes). - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes). - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes). - can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes). - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes). - can: j1939: change j1939_netdev_lock type to mutex (git-fixes). - can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes). - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes). - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes). - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes). - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes). - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes). - can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes). - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes). - can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes). - can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes). - can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes). - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes). - can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes). - can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes). - can: length: fix bitstuffing count (git-fixes). - can: length: fix description of the RRS field (git-fixes). - can: length: make header self contained (git-fixes). - cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes). - ceph: avoid use-after-free in ceph_fl_release_lock() (jsc#SES-1880). - ceph: blocklist the kclient when receiving corrupted snap trace (jsc#SES-1880). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540). - ceph: flush cap releases when the session is flushed (bsc#1208428). - ceph: flush cap releases when the session is flushed (jsc#SES-1880). - ceph: force updating the msg pointer in non-split case (bsc#1211804). - ceph: move mount state enum to super.h (jsc#SES-1880). - ceph: remove useless session parameter for check_caps() (jsc#SES-1880). - ceph: switch to vfs_inode_has_locks() to fix file lock bug (jsc#SES-1880). - ceph: try to check caps immediately after async creating finishes (jsc#SES-1880). - ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504). - ceph: use locks_inode_context helper (jsc#SES-1880). - cfg80211: allow continuous radar monitoring on offchannel chain (bsc#1209980). - cfg80211: fix possible NULL pointer dereference in cfg80211_stop_offchan_radar_detection (bsc#1209980). - cfg80211: implement APIs for dedicated radar detection HW (bsc#1209980). - cfg80211: move offchan_cac_event to a dedicated work (bsc#1209980). - cfg80211: rename offchannel_chain structs to background_chain to avoid confusion with ETSI standard (bsc#1209980). - cfg80211: schedule offchan_cac_abort_wk in cfg80211_radar_event (bsc#1209980). - cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906). - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827). - cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650). - cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650). - cgroup: Make cgroup_get_from_id() prettier (bsc#1205650). - cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650). - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563). - cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561). - cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (bsc#1205650). - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563). - cgroup: reduce dependency on cgroup_mutex (bsc#1205650). - cifs: Avoid a cast in add_lease_context() (bsc#1193629). - cifs: Check the lease context if we actually got a lease (bsc#1193629). - cifs: Convert struct fealist away from 1-element array (bsc#1193629). - cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (git-fixes). - cifs: Fix smb2_set_path_size() (git-fixes). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629). - cifs: Fix use-after-free in rdata->read_into_pages() (git-fixes). - cifs: Fix warning and UAF when destroy the MR list (git-fixes). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629). - cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes). - cifs: Replace remaining 1-element arrays (bsc#1193629). - cifs: Replace zero-length arrays with flexible-array members (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Use kstrtobool() instead of strtobool() (bsc#1193629). - cifs: append path to open_enter trace event (bsc#1193629). - cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758). - cifs: avoid race conditions with parallel reconnects (bsc#1193629). - cifs: avoid races in parallel reconnects in smb1 (bsc#1193629). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629). - cifs: check only tcon status on tcon related functions (bsc#1193629). - cifs: do not include page data when checking signature (git-fixes). - cifs: do not poll server interfaces too regularly (bsc#1193629). - cifs: do not take exclusive lock for updating target hints (bsc#1193629). - cifs: do not try to use rdma offload on encrypted connections (bsc#1193629). - cifs: double lock in cifs_reconnect_tcon() (git-fixes). - cifs: dump pending mids for all channels in DebugData (bsc#1193629). - cifs: empty interface list when server does not support query interfaces (bsc#1193629). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629). - cifs: fix dentry lookups in directory handle cache (bsc#1193629). - cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629). - cifs: fix mount on old smb servers (boo#1206935). - cifs: fix negotiate context parsing (bsc#1210301). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629). - cifs: fix potential deadlock in cache_refresh_path() (git-fixes). - cifs: fix potential race when tree connecting ipc (bsc#1208758). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629). - cifs: fix sharing of DFS connections (bsc#1208758). - cifs: fix smb1 mount regression (bsc#1193629). - cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629). - cifs: generate signkey for the channel that's reconnecting (bsc#1193629). - cifs: get rid of dead check in smb2_reconnect() (bsc#1193629). - cifs: get rid of dns resolve worker (bsc#1193629). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629). - cifs: handle cache lookup errors different than -ENOENT (bsc#1193629). - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629). - cifs: lock chan_lock outside match_session (bsc#1193629). - cifs: mapchars mount option ignored (bsc#1193629). - cifs: match even the scope id for ipv6 addresses (bsc#1193629). - cifs: missing lock when updating session status (bsc#1193629). - cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629). - cifs: prevent data race in smb2_reconnect() (bsc#1193629). - cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629). - cifs: print last update time for interface list (bsc#1193629). - cifs: print session id while listing open files (bsc#1193629). - cifs: print smb3_fs_context::source when mounting (bsc#1193629). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758). - cifs: protect session status check in smb2_reconnect() (bsc#1208758). - cifs: release leases for deferred close handles when freezing (bsc#1193629). - cifs: remove duplicate code in __refresh_tcon() (bsc#1193629). - cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629). - cifs: remove unused function (bsc#1193629). - cifs: return DFS root session id in DebugData (bsc#1193629). - cifs: return a single-use cfid if we did not get a lease (bsc#1193629). - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629). - cifs: sanitize paths in cifs_update_super_prepath (git-fixes). - cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629). - cifs: split out smb3_use_rdma_offload() helper (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - cifs: update ip_addr for ses only for primary chan setup (bsc#1193629). - cifs: use DFS root session instead of tcon ses (bsc#1193629). - cifs: use tcon allocation functions even for dummy tcon (git-fixes). - cifs: use the least loaded channel for sending requests (bsc#1193629). - clk: Fix memory leak in devm_clk_notifier_register() (git-fixes). - clk: HI655X: select REGMAP instead of depending on it (git-fixes). - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes). - clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes). - clk: at91: clk-sam9x60-pll: fix return value check (git-fixes). - clk: cdce925: check return value of kasprintf() (git-fixes). - clk: imx: avoid memory leak (git-fixes). - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes). - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes). - clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (git-fixes). - clk: keystone: sci-clk: check return value of kasprintf() (git-fixes). - clk: mxl: Add option to override gate clks (git-fixes). - clk: mxl: Fix a clk entry by adding relevant flags (git-fixes). - clk: mxl: Remove redundant spinlocks (git-fixes). - clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes). - clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes). - clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes). - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes). - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes). - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes). - clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes). - clk: qcom: regmap: add PHY clock source implementation (git-fixes). - clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes). - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes). - clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes). - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes). - clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes). - clk: si5341: check return value of {devm_}kasprintf() (git-fixes). - clk: si5341: free unused memory on probe failure (git-fixes). - clk: si5341: return error if one synth clock registration fails (git-fixes). - clk: sprd: set max_register according to mapping range (git-fixes). - clk: tegra20: fix gcc-7 constant overflow warning (git-fixes). - clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes). - clk: ti: clkctrl: check return value of kasprintf() (git-fixes). - clk: vc5: check memory returned by kasprintf() (git-fixes). - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes). - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes). - clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes). - clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes). - comedi: use menuconfig for main Comedi menu (git-fixes). - configfs: fix possible memory leak in configfs_create_dir() (git-fixes). - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes). - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953). - cpufreq: CPPC: Fix performance/frequency conversion (git-fixes). - cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - crypto: acomp - define max size for destination (jsc#PED-3692) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - crypto: caam - Clear some memory in instantiate_rng (git-fixes). - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes). - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes). - crypto: crypto4xx - Call dma_unmap_page when done (git-fixes). - crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes). - crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692) - crypto: essiv - Handle EBUSY correctly (git-fixes). - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (git-fixes). - crypto: marvell/cesa - Fix type mismatch warning (git-fixes). - crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes). - crypto: qat - Fix unsigned function returning negative (jsc#PED-3692) - crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692) - crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692) - crypto: qat - abstract PFVF receive logic (jsc#PED-3692) - crypto: qat - abstract PFVF send function (jsc#PED-3692) - crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692) - crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692) - crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692) - crypto: qat - add backlog mechanism (jsc#PED-3692) - crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692) - crypto: qat - add check to validate firmware images (jsc#PED-3692) - crypto: qat - add limit to linked list parsing (jsc#PED-3692) - crypto: qat - add misc workqueue (jsc#PED-3692) - crypto: qat - add missing restarting event notification in (jsc#PED-3692) - crypto: qat - add param check for DH (jsc#PED-3692) - crypto: qat - add param check for RSA (jsc#PED-3692) - crypto: qat - add pfvf_ops (jsc#PED-3692) - crypto: qat - add resubmit logic for decompression (jsc#PED-3692) - crypto: qat - add support for 401xx devices (jsc#PED-3692) - crypto: qat - add support for compression for 4xxx (jsc#PED-3692) - crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692) - crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692) - crypto: qat - change PFVF ACK behaviour (jsc#PED-3692) - crypto: qat - change behaviour of (jsc#PED-3692) - crypto: qat - change bufferlist logic interface (jsc#PED-3692) - crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692) - crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692) - crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692) - crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692) - crypto: qat - do not rely on min version (jsc#PED-3692) - crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692) - crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692) - crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692) - crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692) - crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692) - crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - extend buffer list interface (jsc#PED-3692) - crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692) - crypto: qat - extract send and wait from (jsc#PED-3692) - crypto: qat - fix DMA transfer direction (jsc#PED-3692) - crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692) - crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692) - crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692) - crypto: qat - fix a typo in a comment (jsc#PED-3692) - crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692) - crypto: qat - fix definition of ring reset results (jsc#PED-3692) - crypto: qat - fix error return code in adf_probe (git-fixes). - crypto: qat - fix error return code in adf_probe (jsc#PED-3692) - crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692) - crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692) - crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692) - crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692) - crypto: qat - fix out-of-bounds read (git-fixes). - crypto: qat - fix wording and formatting in code comment (jsc#PED-3692) - crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692) - crypto: qat - free irq in case of failure (jsc#PED-3692) - crypto: qat - free irqs only if allocated (jsc#PED-3692) - crypto: qat - generalize crypto request buffers (jsc#PED-3692) - crypto: qat - get compression extended capabilities (jsc#PED-3692) - crypto: qat - handle retries due to collisions in (jsc#PED-3692) - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692) - crypto: qat - improve logging of PFVF messages (jsc#PED-3692) - crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692) - crypto: qat - introduce support for PFVF block messages (jsc#PED-3692) - crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692) - crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692) - crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692) - crypto: qat - make PFVF message construction direction (jsc#PED-3692) - crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692) - crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692) - crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692) - crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692) - crypto: qat - move pfvf collision detection values (jsc#PED-3692) - crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692) - crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692) - crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692) - crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692) - crypto: qat - re-enable registration of algorithms (jsc#PED-3692) - crypto: qat - refactor PF top half for PFVF (jsc#PED-3692) - crypto: qat - refactor pfvf version request messages (jsc#PED-3692) - crypto: qat - refactor submission logic (jsc#PED-3692) - crypto: qat - relocate PFVF PF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF VF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF disabled function (jsc#PED-3692) - crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692) - crypto: qat - relocate backlog related structures (jsc#PED-3692) - crypto: qat - relocate bufferlist logic (jsc#PED-3692) - crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692) - crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692) - crypto: qat - remove empty sriov_configure() (jsc#PED-3692) - crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692) - crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692) - crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692) - crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692) - crypto: qat - remove unneeded assignment (jsc#PED-3692) - crypto: qat - remove unneeded braces (jsc#PED-3692) - crypto: qat - remove unneeded packed attribute (jsc#PED-3692) - crypto: qat - remove unused PFVF stubs (jsc#PED-3692) - crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692) - crypto: qat - rename bufferlist functions (jsc#PED-3692) - crypto: qat - rename pfvf collision constants (jsc#PED-3692) - crypto: qat - reorganize PFVF code (jsc#PED-3692) - crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692) - crypto: qat - replace deprecated MSI API (jsc#PED-3692) - crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692) - crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692) - crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692) - crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692) - crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692) - crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692) - crypto: qat - simplify adf_enable_aer() (jsc#PED-3692) - crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692) - crypto: qat - split PFVF message decoding from handling (jsc#PED-3692) - crypto: qat - stop using iommu_present() (jsc#PED-3692) - crypto: qat - store the PFVF protocol version of the (jsc#PED-3692) - crypto: qat - store the ring-to-service mapping (jsc#PED-3692) - crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692) - crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692) - crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692) - crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692) - crypto: qat - use hweight for bit counting (jsc#PED-3692) - crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692) - crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692) - crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692) - crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes). - crypto: sa2ul - Select CRYPTO_DES (git-fixes). - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes). - crypto: seqiv - Handle EBUSY correctly (git-fixes). - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes). - crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes). - crypto: xts - Handle EBUSY correctly (git-fixes). - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes). - device-dax: Fix duplicate 'hmem' device registration (bsc#1211400). - devlink: hold region lock when flushing snapshots (git-fixes). - disable two x86 PAT related patches (bsc#1212456) This may break i915 when booted with nopat, but fixes /dev/mem access in Xen PV domU. - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm clone: Fix UAF in clone_dtr() (git-fixes). - dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes). - dm integrity: clear the journal on suspend (git-fixes). - dm integrity: flush the journal on suspend (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm raid: fix address sanitizer warning in raid_resume (git-fixes). - dm raid: fix address sanitizer warning in raid_status (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes). - dm: fix alloc_dax error handling in alloc_dev (git-fixes). - dm: requeue IO if mapping table not yet available (git-fixes). - dma-buf: Use dma_fence_unwrap_for_each when importing fences (git-fixes). - dma-buf: cleanup kerneldoc of removed component (git-fixes). - dma-direct: use is_swiotlb_active in dma_direct_map_page (PED-3259). - dma-mapping: reformat comment to suppress htmldoc warning (git-fixes). - dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes). - dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes). - dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes). - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes). - dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes). - dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes). - dmaengine: dw-edma: Drop chancnt initialization (git-fixes). - dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes). - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes). - dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes). - dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes). - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes). - dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes). - dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes). - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes). - dmaengine: mv_xor_v2: Fix an error code (git-fixes). - dmaengine: pl330: rename _start to prevent build error (git-fixes). - dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes). - dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes). - dmaengine: tegra: Fix memory leak in terminate_all() (git-fixes). - do not reuse connection if share marked as isolated (bsc#1193629). - docs/memory-barriers.txt: Add a missed closing parenthesis (git-fixes). - docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes). - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (git-fixes). - docs: driver-api: firmware_loader: fix missing argument in usage example (git-fixes). - docs: ftrace: fix a issue with duplicated subtitle number (git-fixes). - docs: gdbmacros: print newest record (git-fixes). - docs: networking: Update codeaurora references for rmnet (git-fixes). - docs: networking: fix x25-iface.rst heading & index order (git-fixes). - documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes). - documentation: bonding: fix the doc of peer_notif_delay (git-fixes). - documentation: timers: hrtimers: Make hybrid union historical (git-fixes). - driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes). - driver core: fix potential null-ptr-deref in device_add() (git-fixes). - driver core: fix resource leak in device_add() (git-fixes). - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes). - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815). - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815). - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes). - drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: transport_class: fix possible memory leak (git-fixes). - drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes). - drivers: meson: secure-pwrc: always enable DMA domain (git-fixes). - drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes). - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes). - drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - drm-hyperv: Add a bug reference to two existing changes (bsc#1211281). - drm/amd/amdgpu: fix warning during suspend (bsc#1206843). - drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes). - drm/amd/display: Add DCN314 display SG Support (bsc#1206843). - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes). - drm/amd/display: Add NULL plane_state check for cursor disable logic (git-fixes). - drm/amd/display: Add check for DET fetch latency hiding for dcn32 (bsc#1206843). - drm/amd/display: Add logging for display MALL refresh setting (git-fixes). - drm/amd/display: Add minimal pipe split transition state (git-fixes). - drm/amd/display: Add missing brackets in calculation (bsc#1206843). - drm/amd/display: Add wrapper to call planes and stream update (git-fixes). - drm/amd/display: Adjust downscaling limits for dcn314 (bsc#1206843). - drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 (bsc#1206843). - drm/amd/display: Clear MST topology if it fails to resume (git-fixes). - drm/amd/display: Conversion to bool not necessary (git-fixes). - drm/amd/display: Defer DIG FIFO disable after VID stream enable (bsc#1206843). - drm/amd/display: Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now (bsc#1206843). - drm/amd/display: Do not clear GPINT register when releasing DMUB from reset (git-fixes). - drm/amd/display: Do not commit pipe when updating DRR (bsc#1206843). - drm/amd/display: Do not set DRR on pipe Commit (bsc#1206843). - drm/amd/display: Enable P-state validation checks for DCN314 (bsc#1206843). - drm/amd/display: Explicitly specify update type per plane info change (git-fixes). - drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes). - drm/amd/display: Fix DP MST sinks removal issue (git-fixes). - drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming (bsc#1206843). - drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes). - drm/amd/display: Fix display corruption w/ VSR enable (bsc#1206843). - drm/amd/display: Fix hang when skipping modeset (git-fixes). - drm/amd/display: Fix potential null dereference (git-fixes). - drm/amd/display: Fix potential null-deref in dm_resume (git-fixes). - drm/amd/display: Fix race condition in DPIA AUX transfer (bsc#1206843). - drm/amd/display: Fix set scaling doesn's work (git-fixes). - drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes). - drm/amd/display: Fixes for dcn32_clk_mgr implementation (git-fixes). - drm/amd/display: Include virtual signal to set k1 and k2 values (bsc#1206843). - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB (bsc#1206843). - drm/amd/display: Pass the right info to drm_dp_remove_payload (bsc#1206843). - drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes). - drm/amd/display: Properly reuse completion structure (bsc#1206843). - drm/amd/display: Reduce expected sdp bandwidth for dcn321 (bsc#1206843). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1206843). - drm/amd/display: Report to ACPI video if no panels were found (bsc#1206843). - drm/amd/display: Reset DMUB mailbox SW state after HW reset (bsc#1206843). - drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset (git-fixes). - drm/amd/display: Return error code on DSC atomic check failure (git-fixes). - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write (git-fixes). - drm/amd/display: Set dcn32 caps.seamless_odm (bsc#1206843). - drm/amd/display: Set hvm_enabled flag for S/G mode (bsc#1206843). - drm/amd/display: Simplify same effect if/else blocks (git-fixes). - drm/amd/display: Take FEC Overhead into Timeslot Calculation (bsc#1206843). - drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734). - drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 (bsc#1206843). - drm/amd/display: Uninitialized variables causing 4k60 UCLK to stay at DPM1 and not DPM0 (bsc#1206843). - drm/amd/display: Update bounding box values for DCN321 (git-fixes). - drm/amd/display: Update clock table to include highest clock setting (bsc#1206843). - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes). - drm/amd/display: Use dc_update_planes_and_stream (git-fixes). - drm/amd/display: Use min transition for SubVP into MPO (bsc#1206843). - drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit (bsc#1206843). - drm/amd/display: add a NULL pointer check (bsc#1212848, bsc#1212961). - drm/amd/display: adjust MALL size available for DCN32 and DCN321 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.4 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.5 (bsc#1206843). - drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848, bsc#1212961). - drm/amd/display: disconnect MPCC only on OTG change (bsc#1206843). - drm/amd/display: do not call dc_interrupt_set() for disabled crtcs (git-fixes). - drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes). - drm/amd/display: edp do not add non-edid timings (git-fixes). - drm/amd/display: fix FCLK pstate change underflow (bsc#1206843). - drm/amd/display: fix cursor offset on rotation 180 (git-fixes). - drm/amd/display: fix duplicate assignments (git-fixes). - drm/amd/display: fix flickering caused by S/G mode (git-fixes). - drm/amd/display: fix issues with driver unload (git-fixes). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1206843). - drm/amd/display: fix mapping to non-allocated address (bsc#1206843). - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes). - drm/amd/display: fix the system hang while disable PSR (git-fixes). - drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk (bsc#1206843). - drm/amd/display: move remaining FPU code to dml folder (bsc#1206843). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1206843). - drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes). - drm/amd/display: revert Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: skip commit minimal transition state (bsc#1206843). - drm/amd/display: wait for vblank during pipe programming (git-fixes). - drm/amd/pm/smu13: BACO is supported when it's in BACO state (bsc#1206843). - drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 (bsc#1206843). - drm/amd/pm: Fix output of pp_od_clk_voltage (git-fixes). - drm/amd/pm: Fix power context allocation in SMU13 (git-fixes). - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (bsc#1206843). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1206843). - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 (bsc#1206843). - drm/amd/pm: add missing SMU13.0.0 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add missing SMU13.0.7 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 (bsc#1206843). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.4 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU13.0.0 driver_if header to version 0x34 (bsc#1206843). - drm/amd/pm: correct SMU13.0.0 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 max shader clock reporting (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct the fan speed retrieving in PWM for some SMU13 asics (bsc#1206843). - drm/amd/pm: correct the pcie link state check for SMU13 (bsc#1206843). - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation (bsc#1206843). - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 (bsc#1206843). - drm/amd/pm: enable mode1 reset on smu_v13_0_10 (bsc#1206843). - drm/amd/pm: parse pp_handle under appropriate conditions (git-fixes). - drm/amd/pm: remove unused num_of_active_display variable (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes). - drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (bsc#1212848, bsc#1212961). - drm/amd/pm: update SMU13.0.0 reported maximum shader clock (bsc#1206843). - drm/amd/pm: update the LC_L1_INACTIVITY setting to address possible noise issue (bsc#1212848, bsc#1212961). - drm/amd: Avoid ASSERT for some message failures (bsc#1206843). - drm/amd: Avoid BUG() for case of SRIOV missing IP version (bsc#1206843). - drm/amd: Delay removal of the firmware framebuffer (git-fixes). - drm/amd: Disable PSR-SU on Parade 0803 TCON (bsc#1212848, bsc#1212961). - drm/amd: Do not try to enable secure display TA multiple times (bsc#1212848, bsc#1212961). - drm/amd: Fix an out of bounds error in BIOS parser (git-fixes). - drm/amd: Fix initialization for nbio 4.3.0 (bsc#1206843). - drm/amd: Fix initialization for nbio 7.5.1 (bsc#1206843). - drm/amd: Fix initialization mistake for NBIO 7.3.0 (bsc#1206843). - drm/amd: Make sure image is written to trigger VBIOS image update flow (git-fixes). - drm/amd: Tighten permissions on VBIOS flashing attributes (git-fixes). - drm/amdgpu/discovery: add PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable mes support for GC v11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 (bsc#1206843). - drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: set the APU flag for GC 11.0.4 (bsc#1206843). - drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments (bsc#1206843). - drm/amdgpu/display/mst: adjust the naming of mst_port and port of aconnector (bsc#1206843). - drm/amdgpu/display/mst: limit payload to be updated one by one (bsc#1206843). - drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD (bsc#1206843). - drm/amdgpu/dm/dp_mst: Do not grab mst_mgr->lock when computing DSC state (bsc#1206843). - drm/amdgpu/dm/mst: Fix uninitialized var in pre_compute_mst_dsc_configs_for_state() (bsc#1206843). - drm/amdgpu/dm/mst: Use the correct topology mgr pointer in amdgpu_dm_connector (bsc#1206843). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes). - drm/amdgpu/gfx10: Disable gfxoff before disabling powergating (git-fixes). - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes). - drm/amdgpu/mst: Stop ignoring error codes and deadlocking (bsc#1206843). - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (bsc#1206843). - drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 (bsc#1206843). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1206843). - drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 (bsc#1206843). - drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/soc21: do not expose AV1 if VCN0 is harvested (bsc#1206843). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1206843). - drm/amdgpu: Correct the power calcultion for Renior/Cezanne (git-fixes). - drm/amdgpu: Do not register backlight when another backlight should be used (v3) (bsc#1206843). - drm/amdgpu: Do not resume IOMMU after incomplete init (bsc#1206843). - drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN (bsc#1206843). - drm/amdgpu: Enable vclk dclk node for gc11.0.3 (bsc#1206843). - drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (bsc#1206843). - drm/amdgpu: Fix potential NULL dereference (bsc#1206843). - drm/amdgpu: Fix potential double free and null pointer dereference (bsc#1206843). - drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1206843). - drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes). - drm/amdgpu: Fixed bug on error when unloading amdgpu (bsc#1206843). - drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869). - drm/amdgpu: Register ACPI video backlight when skipping amdgpu backlight registration (bsc#1206843). - drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1206843). - drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes). - drm/amdgpu: Use the sched from entity for amdgpu_cs trace (git-fixes). - drm/amdgpu: Validate VM ioctl flags (git-fixes). - drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes). - drm/amdgpu: add gfx support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add gmc v11 support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add missing radeon secondary PCI ID (git-fixes). - drm/amdgpu: add smu 13 support for smu 13.0.11 (bsc#1206843). - drm/amdgpu: add soc21 common ip block support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add tmz support for GC 11.0.1 (bsc#1206843). - drm/amdgpu: add tmz support for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: allow more APUs to do mode2 reset when go to S4 (bsc#1206843). - drm/amdgpu: allow multipipe policy on ASICs with one MEC (bsc#1206843). - drm/amdgpu: change gfx 11.0.4 external_id range (git-fixes). - drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes). - drm/amdgpu: correct MEC number for gfx11 APUs (bsc#1206843). - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes). - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes). - drm/amdgpu: drop experimental flag on aldebaran (git-fixes). - drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable GFX IP v11.0.4 CG support (bsc#1206843). - drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable HDP SD for gfx 11.0.3 (bsc#1206843). - drm/amdgpu: enable PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu: enable VCN DPG for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram (git-fixes). - drm/amdgpu: fix amdgpu_job_free_resources v2 (bsc#1206843). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (bsc#1212848, bsc#1212961). - drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv (bsc#1206843). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 (bsc#1206843). - drm/amdgpu: fix mmhub register base coding error (git-fixes). - drm/amdgpu: fix number of fence calculations (bsc#1212848, bsc#1212961). - drm/amdgpu: fix return value check in kfd (git-fixes). - drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (bsc#1206843). - drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes). - drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume (git-fixes). - drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (git-fixes). - drm/amdgpu: reposition the gpu reset checking for reuse (bsc#1206843). - drm/amdgpu: set GC 11.0.4 family (bsc#1206843). - drm/amdgpu: skip ASIC reset for APUs when go to S4 (bsc#1206843). - drm/amdgpu: skip MES for S0ix as well since it's part of GFX (bsc#1206843). - drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes). - drm/amdgpu: skip mes self test after s0i3 resume for MES IP v11.0 (bsc#1206843). - drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset (git-fixes). - drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes). - drm/amdgpu: update wave data type to 3 for gfx11 (bsc#1206843). - drm/amdkfd: Add sync after creating vram bo (bsc#1206843). - drm/amdkfd: Fix BO offset for multi-VMA page migration (git-fixes). - drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU (bsc#1206843). - drm/amdkfd: Fix an illegal memory access (git-fixes). - drm/amdkfd: Fix double release compute pasid (bsc#1206843). - drm/amdkfd: Fix kfd_process_device_init_vm error handling (bsc#1206843). - drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes). - drm/amdkfd: Fix the memory overrun (bsc#1206843). - drm/amdkfd: Fix the warning of array-index-out-of-bounds (bsc#1206843). - drm/amdkfd: Fixed kfd_process cleanup on module exit (git-fixes). - drm/amdkfd: Get prange->offset after svm_range_vram_node_new (git-fixes). - drm/amdkfd: Page aligned memory reserve size (bsc#1206843). - drm/amdkfd: add GC 11.0.4 KFD support (bsc#1206843). - drm/amdkfd: fix a potential double free in pqm_create_queue (git-fixes). - drm/amdkfd: fix potential kgd_mem UAFs (git-fixes). - drm/amdkfd: introduce dummy cache info for property asic (bsc#1206843). - drm/armada: Fix a potential double free in an error handling path (git-fixes). - drm/ast: Fix ARM compatibility (git-fixes). - drm/bochs: fix blanking (git-fixes). - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes). - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes). - drm/bridge: it6505: Fix return value check for pm_runtime_get_sync (git-fixes). - drm/bridge: lt8912b: Add hot plug detection (git-fixes). - drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes). - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes). - drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes). - drm/bridge: lt9611: fix HPD reenablement (git-fixes). - drm/bridge: lt9611: fix clock calculation (git-fixes). - drm/bridge: lt9611: fix polarity programming (git-fixes). - drm/bridge: lt9611: fix programming of video modes (git-fixes). - drm/bridge: lt9611: fix sleep mode setup (git-fixes). - drm/bridge: lt9611: pass a pointer to the of node (git-fixes). - drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes). - drm/bridge: tc358768: always enable HS video mode (git-fixes). - drm/bridge: tc358768: fix PLL parameters computation (git-fixes). - drm/bridge: tc358768: fix PLL target frequency (git-fixes). - drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes). - drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec (git-fixes). - drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow (git-fixes). - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (git-fixes). - drm/connector: print max_requested_bpc in state debugfs (git-fixes). - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state() (bsc#1206843). - drm/display/dp_mst: Add helper for finding payloads in atomic MST state (bsc#1206843). - drm/display/dp_mst: Add helpers for serializing SST &lt;-> MST transitions (bsc#1206843). - drm/display/dp_mst: Add nonblocking helpers for DP MST (bsc#1206843). - drm/display/dp_mst: Call them time slots, not VCPI slots (bsc#1206843). - drm/display/dp_mst: Correct the kref of port (bsc#1206843). - drm/display/dp_mst: Do not open code modeset checks for releasing time slots (bsc#1206843). - drm/display/dp_mst: Drop all ports from topology on CSNs before queueing link address work (bsc#1206843). - drm/display/dp_mst: Fix confusing docs for drm_dp_atomic_release_time_slots() (bsc#1206843). - drm/display/dp_mst: Fix down message handling after a packet reception error (git-fixes). - drm/display/dp_mst: Fix down/up message handling after sink disconnect (git-fixes). - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (git-fixes). - drm/display/dp_mst: Fix modeset tracking in drm_dp_atomic_release_vcpi_slots() (bsc#1206843). - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload() (bsc#1206843). - drm/display/dp_mst: Maintain time slot allocations when deleting payloads (bsc#1206843). - drm/display/dp_mst: Move all payload info into the atomic state (bsc#1206843). - drm/display/dp_mst: Rename drm_dp_mst_vcpi_allocation (bsc#1206843). - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (git-fixes). - drm/displayid: add displayid_get_header() and check bounds better (git-fixes). - drm/dp: Do not rewrite link config when setting phy test pattern (git-fixes). - drm/dp_mst: Avoid deleting payloads for connectors staying enabled (bsc#1206843). - drm/dp_mst: fix drm_dp_dpcd_read return value checks (git-fixes). - drm/edid: fix AVI infoframe aspect ratio handling (git-fixes). - drm/edid: fix parsing of 3D modes from HDMI VSDB (git-fixes). - drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes). - drm/exynos: fix g2d_open/close helper function definitions (git-fixes). - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes). - drm/exynos: vidi: fix a wrong error return (git-fixes). - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes). - drm/fbdev-generic: prohibit potential out-of-bounds access (git-fixes). - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes). - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes). - drm/hyperv: Add error message for fb size greater than allocated (git-fixes). - drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes). - drm/i915/active: Fix missing debug object activation (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/adlp: Fix typo for reference clock (git-fixes). - drm/i915/color: Fix typo for Plane CSC indexes (git-fixes). - drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes). - drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes). - drm/i915/dg2: Drop one PCI ID (git-fixes). - drm/i915/dg2: Support 4k@30 on HDMI (git-fixes). - drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU (git-fixes). - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes). - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes). - drm/i915/display: Check source height is > 0 (git-fixes). - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes). - drm/i915/display: clean up comments (git-fixes). - drm/i915/dmc: Update DG2 DMC version to v2.08 (git-fixes). - drm/i915/dp: prevent potential div-by-zero (git-fixes). - drm/i915/dp_mst: Fix mst_mgr lookup during atomic check (bsc#1206843). - drm/i915/dp_mst: Fix payload removal during output disabling (bsc#1206843). - drm/i915/dpt: Treat the DPT BO as a framebuffer (git-fixes). - drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() (git-fixes). - drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes). - drm/i915/gem: Flush lmem contents after construction (git-fixes). - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes). - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes). - drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes). - drm/i915/gt: perform uc late init after probe error injection (git-fixes). - drm/i915/guc: Do not capture Gen8 regs on Xe devices (git-fixes). - drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes). - drm/i915/huc: always init the delayed load fence (git-fixes). - drm/i915/huc: bump timeout for delayed load and reduce print verbosity (git-fixes). - drm/i915/huc: fix leak of debug object in huc load fence on driver unload (git-fixes). - drm/i915/migrate: Account for the reserved_space (git-fixes). - drm/i915/migrate: fix corner case in CCS aux copying (git-fixes). - drm/i915/psr: Fix PSR_IMR/IIR field handling (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes). - drm/i915/pxp: use &lt;> instead of '' for headers in include/ (git-fixes). - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes). - drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes). - drm/i915/selftests: Add some missing error propagation (git-fixes). - drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes). - drm/i915/selftests: Stop using kthread_stop() (git-fixes). - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes). - drm/i915: Allow switching away via vga-switcheroo if uninitialized (git-fixes). - drm/i915: Avoid potential vm use-after-free (git-fixes). - drm/i915: Disable DC states for all commits (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes). - drm/i915: Fix NULL ptr deref by checking new_crtc_state (git-fixes). - drm/i915: Fix VBT DSI DVO port handling (git-fixes). - drm/i915: Fix context runtime accounting (git-fixes). - drm/i915: Fix fast wake AUX sync len (git-fixes). - drm/i915: Fix potential bit_17 double-free (git-fixes). - drm/i915: Fix potential context UAFs (git-fixes). - drm/i915: Fix request ref counting during error capture & debugfs dump (git-fixes). - drm/i915: Fix up locking around dumping requests lists (git-fixes). - drm/i915: Initialize the obj flags for shmem objects (git-fixes). - drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes). - drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on skl/glk (git-fixes). - drm/i915: Move fd_install after last use of fence (git-fixes). - drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes). - drm/i915: Remove __maybe_unused from mtl_info (git-fixes). - drm/i915: Remove unused bits of i915_vma/active api (git-fixes). - drm/i915: Remove unused variable (git-fixes). - drm/i915: Use 18 fast wake AUX sync len (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: move a Kconfig symbol to unbreak the menu presentation (git-fixes). - drm/i915: stop abusing swiotlb_max_segment (git-fixes). - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes). - drm/mediatek: Clean dangling pointer on bind error path (git-fixes). - drm/mediatek: Drop unbalanced obj unref (git-fixes). - drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes). - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes). - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes). - drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes). - drm/meson: fix missing component unbind on bind errors (git-fixes). - drm/meson: reorder driver deinit sequence to fix use-after-free bug (git-fixes). - drm/mgag200: Fix gamma lut not initialized (git-fixes). - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes). - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes). - drm/msm/a5xx: fix context faults during ring switch (git-fixes). - drm/msm/a5xx: fix highest bank bit for a530 (git-fixes). - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes). - drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes). - drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage (git-fixes). - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (git-fixes). - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes). - drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error (git-fixes). - drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at gpu load (git-fixes). - drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes). - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes). - drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes). - drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes). - drm/msm/dp: Free resources after unregistering them (git-fixes). - drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training (git-fixes). - drm/msm/dp: unregister audio driver during unbind (git-fixes). - drm/msm/dpu: Add INTF_5 interrupts (git-fixes). - drm/msm/dpu: Add check for cstate (git-fixes). - drm/msm/dpu: Add check for pstates (git-fixes). - drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes). - drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes). - drm/msm/dpu: Reject topologies for which no DSC blocks are available (git-fixes). - drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes). - drm/msm/dpu: Remove num_enc from topology struct in favour of num_dsc (git-fixes). - drm/msm/dpu: Wire up DSC mask for active CTL configuration (git-fixes). - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (git-fixes). - drm/msm/dpu: clear DSPP reservations in rm release (git-fixes). - drm/msm/dpu: correct MERGE_3D length (git-fixes). - drm/msm/dpu: disable features unsupported by QCM2290 (git-fixes). - drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes). - drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK (git-fixes). - drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes). - drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks (git-fixes). - drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes). - drm/msm/dpu: sc7180: add missing WB2 clock control (git-fixes). - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes). - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/dsi: Allow 2 CTRLs on v2.5.0 (git-fixes). - drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes). - drm/msm/gem: Add check for kmalloc (git-fixes). - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/mdp5: Add check for kzalloc (git-fixes). - drm/msm/mdp5: fix reading hw revision on db410c platform (git-fixes). - drm/msm: Be more shouty if per-process pgtables are not working (git-fixes). - drm/msm: Fix potential invalid ptr free (git-fixes). - drm/msm: Set max segment size earlier (git-fixes). - drm/msm: clean event_thread->worker in case of an error (git-fixes). - drm/msm: fix NULL-deref on irq uninstall (git-fixes). - drm/msm: fix NULL-deref on snapshot tear down (git-fixes). - drm/msm: fix drm device leak on bind errors (git-fixes). - drm/msm: fix missing wq allocation error handling (git-fixes). - drm/msm: fix vram leak on bind errors (git-fixes). - drm/msm: fix workqueue leak on bind errors (git-fixes). - drm/msm: use strscpy instead of strncpy (git-fixes). - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes). - drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes). - drm/nouveau/dp: check for NULL nv_connector->native_mode (git-fixes). - drm/nouveau/kms/nv50-: remove unused functions (git-fixes). - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes). - drm/nouveau/kms: Cache DP encoders in nouveau_connector (bsc#1206843). - drm/nouveau/kms: Pull mst state in for all modesets (bsc#1206843). - drm/nouveau: add nv_encoder pointer check for NULL (git-fixes). - drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes). - drm/omap: dsi: Fix excessive stack usage (git-fixes). - drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes). - drm/panel: novatek-nt35950: Improve error handling (git-fixes). - drm/panel: novatek-nt35950: Only unregister DSI1 if it exists (git-fixes). - drm/panel: otm8009a: Set backlight parent to panel device (git-fixes). - drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes). - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes). - drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes). - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes). - drm/probe-helper: Cancel previous job before starting new one (git-fixes). - drm/radeon: Drop legacy MST support (bsc#1206843). - drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes). - drm/radeon: fix possible division-by-zero errors (git-fixes). - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes). - drm/radeon: free iio for atombios when driver shutdown (git-fixes). - drm/radeon: reintroduce radeon_dp_work_func content (git-fixes). - drm/rockchip: Drop unbalanced obj unref (git-fixes). - drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes). - drm/sched: Remove redundant check (git-fixes). - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() (git-fixes). - drm/shmem-helper: Remove another errant put in error path (git-fixes). - drm/shmem-helper: Revert accidental non-GPL export (git-fixes). - drm/sun4i: fix missing component unbind on bind errors (git-fixes). - drm/tegra: Avoid potential 32-bit integer overflow (git-fixes). - drm/tegra: firewall: Check for is_addr_reg existence in IMM check (git-fixes). - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes). - drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes). - drm/ttm: Fix a NULL pointer dereference (git-fixes). - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (git-fixes). - drm/ttm: optimize pool allocations a bit v2 (git-fixes). - drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking (git-fixes). - drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: drv: Call component_unbind_all() (git-fixes). - drm/vc4: hdmi: Correct interlaced timings again (git-fixes). - drm/vc4: hdmi: make CEC adapter name unique (git-fixes). - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes). - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 (git-fixes). - drm/vc4: hvs: Set AXI panic modes (git-fixes). - drm/vc4: kms: Sort the CRTCs by output before assigning them (git-fixes). - drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes). - drm/vgem: add missing mutex_destroy (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - drm/virtio: exbuf->fence_fd unmodified on interrupted wait (git-fixes). - drm/vkms: Fix memory leak in vkms_init() (git-fixes). - drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes). - drm/vmwgfx: Do not drop the reference to the handle too soon (git-fixes). - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (git-fixes). - drm/vmwgfx: Fix race issue calling pin_user_pages (git-fixes). - drm/vmwgfx: Stop accessing buffer objects which failed init (git-fixes). - drm/vram-helper: fix function names in vram helper doc (git-fixes). - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes). - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes). - drm: amd: display: Fix memory leakage (git-fixes). - drm: bridge: adv7511: unregister cec i2c device after cec adapter (git-fixes). - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags (git-fixes). - drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes). - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC (git-fixes). - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes). - drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes). - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes). - drm: tidss: Fix pixel format definition (git-fixes). - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes). - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes). - dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes). - dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes). - dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes). - dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes). - dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes). - dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes). - dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes). - dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes). - dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes). - dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes). - dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes). - dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes). - dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes). - dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes). - dt-bindings: power: renesas,apmu: Fix cpus property limits (git-fixes). - dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes). - dt-bindings: remoteproc: st,stm32-rproc: Fix phandle-array parameters description (git-fixes). - dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes). - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes). - dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes). - dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes). - dt-bindings: usb: snps,dwc3: Fix 'snps,hsphy_interface' type (git-fixes). - e1000e: Disable TSO on i219-LM card to increase speed (git-fixes). - edac/i10nm: Add Intel Emerald Rapids server support (PED-4400). - eeprom: at24: also select REGMAP (git-fixes). - eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes). - efi/x86: libstub: Fix typo in __efi64_argmap* name (git-fixes). - efi: Accept version 2 of memory attributes table (git-fixes). - efi: efivars: Fix variable writes with unsupported query_variable_store() (git-fixes). - efi: efivars: Fix variable writes without query_variable_store() (git-fixes). - efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes). - efi: rt-wrapper: Add missing include (git-fixes). - efi: ssdt: Do not free memory if ACPI table was loaded successfully (git-fixes). - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes). - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes). - elevator: update the document of elevator_switch (git-fixes). - elf: correct note name comment (git-fixes). - ethernet: 3com/typhoon: do not write directly to netdev->dev_addr (git-fixes). - ethernet: 8390/etherh: do not write directly to netdev->dev_addr (git-fixes). - ethernet: i825xx: do not write directly to netdev->dev_addr (git-fixes). - ethernet: ice: avoid gcc-9 integer overflow warning (jsc#PED-376). - ethernet: seeq/ether3: do not write directly to netdev->dev_addr (git-fixes). - ethernet: tundra: do not write directly to netdev->dev_addr (git-fixes). - exit: Add and use make_task_dead (bsc#1207328). - exit: Allow oops_limit to be disabled (bsc#1207328). - exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328). - exit: Move force_uaccess back into do_exit (bsc#1207328). - exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328). - exit: Put an upper limit on how often we can oops (bsc#1207328). - exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328). - exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328). - ext4,f2fs: fix readahead of verity data (bsc#1207648). - ext4: Fix deadlock during directory rename (bsc#1210763). - ext4: Fix possible corruption when moving a directory (bsc#1210763). - ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020). - ext4: add EA_INODE checking to ext4_iget() (bsc#1213106). - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088). - ext4: add helper to check quota inums (bsc#1207618). - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617). - ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109). - ext4: add missing validation of fast-commit record lengths (bsc#1207626). - ext4: add strict range checks while freeing blocks (bsc#1213089). - ext4: allocate extended attribute value in vmalloc area (bsc#1207635). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016). - ext4: avoid resizing to a partial cluster size (bsc#1206880). - ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634). - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018). - ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090). - ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103). - ext4: continue to expand file system when the target size does not reach (bsc#1206882). - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592). - ext4: correct max_inline_xattr_value_size computing (bsc#1206878). - ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878). - ext4: disable fast-commit of encrypted dir operations (bsc#1207623). - ext4: disallow ea_inodes with extended attributes (bsc#1213108). - ext4: do not allow journal inode to have encrypt flag (bsc#1207621). - ext4: do not increase iversion counter for ea_inodes (bsc#1207605). - ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603). - ext4: do not set up encryption key during jbd2 transaction (bsc#1207624). - ext4: drop ineligible txn start stop APIs (bsc#1207588). - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606). - ext4: factor out ext4_fc_get_tl() (bsc#1207615). - ext4: fail ext4_iget if special inode unallocated (bsc#1213010). - ext4: fast commit may miss file actions (bsc#1207591). - ext4: fast commit may not fallback for ineligible commit (bsc#1207590). - ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886). - ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766). - ext4: fix WARNING in ext4_update_inline_data (bsc#1213012). - ext4: fix WARNING in mb_find_extent (bsc#1213099). - ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767). - ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076). - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1206881). - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620). - ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111). - ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594). - ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765). - ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891). - ext4: fix data races when using cached status extents (bsc#1213102). - ext4: fix deadlock due to mbcache entry corruption (bsc#1207653). - ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105). - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631). - ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608). - ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630). - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593). - ext4: fix extent status tree race in writeback error recovery path (bsc#1206877). - ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015). - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764). - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636). - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894). - ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625). - ext4: fix lockdep warning when enabling MMP (bsc#1213100). - ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609). - ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884). - ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628). - ext4: fix possible double unlock when moving a directory (bsc#1210763). - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611). - ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612). - ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616). - ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637). - ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096). - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021). - ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627). - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890). - ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893). - ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888). - ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622). - ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878). - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098). - ext4: fix warning in 'ext4_da_release_space' (bsc#1206887). - ext4: goto right label 'failed_mount3a' (bsc#1207610). - ext4: improve error handling from ext4_dirhash() (bsc#1213104). - ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017). - ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629). - ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633). - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614). - ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602). - ext4: make ext4_lazyinit_thread freezable (bsc#1206885). - ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011). - ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019). - ext4: place buffer head allocation before handle start (bsc#1207607). - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087). - ext4: refuse to create ea block when umounted (bsc#1213093). - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - ext4: simplify updating of fast commit stats (bsc#1207589). - ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110). - ext4: unconditionally enable the i_version counter (bsc#1211299). - ext4: update 'state->fc_regions_size' after successful memory allocation (bsc#1207613). - ext4: update s_journal_inum if it changes after journal replay (bsc#1213094). - ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876). - ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092). - ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793). - ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013). - extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes). - extcon: Fix kernel doc of property fields to avoid warnings (git-fixes). - extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes). - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes). - extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes). - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes). - extcon: usbc-tusb320: fix kernel-doc warning (git-fixes). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (git-fixes). - fbcon: Fix error paths in set_con2fb_map (git-fixes). - fbcon: Fix null-ptr-deref in soft_cursor (git-fixes). - fbcon: set_con2fb_map needs to set con2fb_map! (git-fixes). - fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472). - fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes). - fbdev: au1200fb: Fix potential divide by zero (git-fixes). - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes). - fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387). - fbdev: intelfb: Fix potential divide by zero (git-fixes). - fbdev: lxfb: Fix potential divide by zero (git-fixes). - fbdev: mmp: Fix deferred clk handling in mmphw_probe() (git-fixes). - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes). - fbdev: nvidia: Fix potential divide by zero (git-fixes). - fbdev: omapfb: avoid stack overflow warning (git-fixes). - fbdev: omapfb: cleanup inconsistent indentation (git-fixes). - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes). - fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes). - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes). - fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes). - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes). - fbdev: tgafb: Fix potential divide by zero (git-fixes). - fbdev: udlfb: Fix endpoint check (git-fixes). - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes). - filelock: new helper: vfs_inode_has_locks (jsc#SES-1880). - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes). - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes). - firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes). - firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes). - firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes). - firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes). - firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes). - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes). - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes). - firmware: qcom_scm: Clear download bit during reboot (git-fixes). - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes). - firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes). - flow_dissector: Do not count vlan tags inside tunnel payload (git-fixes). - fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258). - fotg210-udc: Add missing completion handler (git-fixes). - fpga: bridge: fix kernel-doc parameter description (git-fixes). - fpga: bridge: properly initialize bridge device before populating children (git-fixes). - fpga: m10bmc-sec: Fix probe rollback (git-fixes). - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes). - fprobe: Check rethook_alloc() return in rethook initialization (git-fixes). - fprobe: Fix smatch type mismatch warning (git-fixes). - fprobe: add recursion detection in fprobe_exit_handler (git-fixes). - fprobe: make fprobe_kprobe_handler recursion free (git-fixes). - fs/jfs: fix shift exponent db_agl2size negative (git-fixes). - fs: account for filesystem mappings (bsc#1205191). - fs: account for group membership (bsc#1205191). - fs: add i_user_ns() helper (bsc#1205191). - fs: dlm: do not call kernel_getpeername() in error_report() (bsc#1208130). - fs: dlm: use sk->sk_socket instead of con->sock (bsc#1208130). - fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632). - fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes). - fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes). - fs: move mapping helpers (bsc#1205191) - fs: remove __sync_filesystem (git-fixes). - fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes). - fs: tweak fsuidgid_has_mapping() (bsc#1205191). - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (bsc#1210409). - fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429). - ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes). - ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes). - ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes). - fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759). - fuse: always revalidate rename target dentry (bsc#1211808). - fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807). - futex: Resend potentially swallowed owner death notification (git-fixes). - genirq: Provide new interfaces for affinity hints (bsc#1208153). - git-sort: Add io_uring 6.3 fixes remote - google/gve:fix repeated words in comments (bsc#1211519). - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes). - gpio: davinci: Add irq chip flag to skip set wake (git-fixes). - gpio: mockup: Fix mode of debugfs files (git-fixes). - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes). - gpio: vf610: connect GPIO label to dev name (git-fixes). - gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes). - gpu: host1x: Fix mask for syncpoint increment register (git-fixes). - gpu: host1x: Fix potential double free if IOMMU is disabled (git-fixes). - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes). - gve: Adding a new AdminQ command to verify driver (bsc#1211519). - gve: Cache link_speed value from device (git-fixes). - gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519). - gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519). - gve: Handle alternate miss completions (bsc#1211519). - gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519). - gve: Remove the code of clearing PBA bit (git-fixes). - gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes). - gve: enhance no queue page list detection (bsc#1211519). - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes). - hfs/hfsplus: use WARN_ON for sanity check (git-fixes). - hfs: Fix OOB Write in hfs_asc2mac (git-fixes). - hfs: fix OOB Read in __hfs_brec_find (git-fixes). - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes). - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes). - hid: Add Mapping for System Microphone Mute (git-fixes). - hid: asus: use spinlock to protect concurrent accesses (git-fixes). - hid: asus: use spinlock to safely schedule workers (git-fixes). - hid: bigben: use spinlock to protect concurrent accesses (git-fixes). - hid: bigben: use spinlock to safely schedule workers (git-fixes). - hid: bigben_probe(): validate report count (git-fixes). - hid: bigben_worker() remove unneeded check on report_field (git-fixes). - hid: core: Fix deadloop in hid_apply_multiplier (git-fixes). - hid: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes). - hid: elecom: add support for TrackBall 056E:011C (git-fixes). - hid: google: add jewel USB id (git-fixes). - hid: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes). - hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes). - hid: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes). - hid: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes). - hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes). - hid: microsoft: Add rumble support to latest xbox controllers (bsc#1211280). - hid: multitouch: Add quirks for flipped axes (git-fixes). - hid: playstation: sanity check DualSense calibration data (git-fixes). - hid: retain initial quirks set up when creating HID devices (git-fixes). - hid: wacom: Add error check to wacom_parse_and_register() (git-fixes). - hid: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes). - hid: wacom: Force pen out of prox if no events have been received in a while (git-fixes). - hid: wacom: Set a default resolution for older tablets (git-fixes). - hid: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes). - hid: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes). - hid: wacom: generic: Set battery quirk only when we see battery data (git-fixes). - hv: fix comment typo in vmbus_channel/low_latency (git-fixes). - hv: hv_balloon: fix memory leak with using debugfs_lookup() (git-fixes). - hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes). - hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes). - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes). - hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861). - hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861). - hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861). - hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861). - hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861). - hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861). - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes). - hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes). - hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes). - hwmon: (coretemp) Simplify platform device handling (git-fixes). - hwmon: (ftsteutates) Fix scaling of measurements (git-fixes). - hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes). - hwmon: (ina3221) return prober error code (git-fixes). - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes). - hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848). - hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes). - hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes). - hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes). - hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes). - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes). - hwmon: fix potential sensor registration fail if of_node is missing (git-fixes). - hwmon: tmp512: drop of_match_ptr for ID table (git-fixes). - hwrng: imx-rngc - fix the timeout for init and self check (git-fixes). - hwrng: st - keep clock enabled while hwrng is registered (git-fixes). - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes). - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes). - i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes). - i2c: hisi: Avoid redundant interrupts (git-fixes). - i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes). - i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes). - i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes). - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes). - i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes). - i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes). - i2c: mv64xxx: Remove shutdown method from driver (git-fixes). - i2c: mxs: suppress probe-deferral error message (git-fixes). - i2c: ocores: generate stop condition after timeout in polling mode (git-fixes). - i2c: omap: Fix standard mode false ACK readings (git-fixes). - i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes). - i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes). - i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes). - i2c: tegra: Fix PEC support for SMBUS block read (git-fixes). - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes). - i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378). - i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378). - i40e: Fix DMA mappings leak (jsc#SLE-18378). - i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378). - i40e: Fix VF set max MTU size (jsc#SLE-18378). - i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378). - i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378). - i40e: Fix calculating the number of queue pairs (jsc#SLE-18378). - i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378). - i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378). - i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378). - i40e: Fix for VF MAC address 0 (jsc#SLE-18378). - i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378). - i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378). - i40e: Fix kernel crash during module removal (jsc#SLE-18378). - i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378). - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378). - i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378). - i40e: Refactor tc mqprio checks (jsc#SLE-18378). - i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378). - i40e: fix accessing vsi->active_filters without holding lock (jsc#SLE-18378). - i40e: fix flow director packet filter programming (jsc#SLE-18378). - i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378). - i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378). - i825xx: sni_82596: use eth_hw_addr_set() (git-fixes). - i915 kABI workaround (git-fixes). - i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes). - iavf/iavf_main: actually log ->src mask when talking about it (jsc#SLE-18385). - iavf: Detach device during reset task (jsc#SLE-18385). - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385). - iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385). - iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385). - iavf: Fix a crash during reset task (jsc#SLE-18385). - iavf: Fix bad page state (jsc#SLE-18385). - iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385). - iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385). - iavf: Fix max_rate limiting (jsc#SLE-18385). - iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385). - iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385). - iavf: do not track VLAN 0 filters (jsc#PED-835). - iavf: fix hang on reboot with ice (jsc#SLE-18385). - iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385). - iavf: fix temporary deadlock and failure to set MAC address (jsc#PED-835). - iavf: refactor VLAN filter states (jsc#PED-835). - iavf: remove active_cvlans and active_svlans bitmaps (jsc#PED-835). - iavf: remove mask from iavf_irq_enable_queues() (git-fixes). - iavf: schedule watchdog immediately when changing primary MAC (jsc#PED-835). - ib/hfi1: Assign npages earlier (git-fixes) - ib/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes) - ib/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes) - ib/hfi1: Fix expected receive setup error exit issues (git-fixes) - ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes) - ib/hfi1: Fix sdma.h tx->num_descs off-by-one errors (git-fixes) - ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes) - ib/hfi1: Immediately remove invalid memory from hardware (git-fixes) - ib/hfi1: Reject a zero-length user expected buffer (git-fixes) - ib/hfi1: Remove user expected buffer invalidate race (git-fixes) - ib/hfi1: Reserve user expected TIDs (git-fixes) - ib/hfi1: Restore allocated resources on failed copyout (git-fixes) - ib/hfi1: Update RMT size calculation (git-fixes) - ib/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes) - ib/iPoIB: Fix legacy IPoIB due to wrong number of queues (git-fixes) - ib/isert: Fix dead lock in ib_isert (git-fixes) - ib/isert: Fix incorrect release of isert connection (git-fixes) - ib/isert: Fix possible list corruption in CMA handler (git-fixes) - ib/mad: Do not call to function that might sleep while in atomic context (git-fixes). - ib/mlx5: Add support for 400G_8X lane speed (git-fixes) - ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes) - ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes) - ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604). - ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes). - ice: Add check for kzalloc (jsc#PED-376). - ice: Do not double unplug aux on peer initiated reset (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (jsc#PED-376). - ice: Fix DSCP PFC TLV creation (git-fixes). - ice: Fix DSCP PFC TLV creation (jsc#PED-376). - ice: Fix XDP memory leak when NIC is brought up and down (git-fixes). - ice: Fix disabling Rx VLAN filtering with port VLAN enabled (jsc#PED-376). - ice: Fix ice VF reset during iavf initialization (jsc#PED-376). - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields (jsc#PED-376). - ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes). - ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375). - ice: Fix memory corruption in VF driver (git-fixes). - ice: Fix potential memory leak in ice_gnss_tty_write() (jsc#PED-376). - ice: Ignore EEXIST when setting promisc mode (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (jsc#PED-376). - ice: Reset FDIR counter in FDIR init stage (git-fixes). - ice: Reset FDIR counter in FDIR init stage (jsc#PED-376). - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375). - ice: add profile conflict check for AVF FDIR (git-fixes). - ice: add profile conflict check for AVF FDIR (jsc#PED-376). - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158). - ice: block LAN in case of VF to VF offload (git-fixes). - ice: block LAN in case of VF to VF offload (jsc#PED-376). - ice: check if VF exists before mode check (jsc#PED-376). - ice: config netdev tc before setting queues number (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (jsc#PED-376). - ice: ethtool: Prohibit improper channel config for DCB (git-fixes). - ice: ethtool: advertise 1000M speeds properly (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (jsc#PED-376). - ice: fix lost multicast packets in promisc mode (jsc#PED-376). - ice: fix wrong fallback logic for FDIR (git-fixes). - ice: fix wrong fallback logic for FDIR (jsc#PED-376). - ice: handle E822 generic device ID in PLDM header (git-fixes). - ice: move devlink port creation/deletion (jsc#PED-376). - ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes). - ice: switch: fix potential memleak in ice_add_adv_recipe() (jsc#PED-376). - ice: use bitmap_free instead of devm_kfree (git-fixes). - ice: xsk: Fix cleaning of XDP_TX frames (jsc#PED-376). - ice: xsk: disable txq irq before flushing hw (jsc#PED-376). - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (jsc#PED-376). - ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes). - ieee80211: add TWT element definitions (bsc#1209980). - ieee802154: hwsim: Fix possible memory leaks (git-fixes). - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253). - igb: Add lock to avoid data race (jsc#SLE-18379). - igb: Enable SR-IOV after reinit (jsc#SLE-18379). - igb: Fix PPS input and output using 3rd and 4th SDP (jsc#PED-370). - igb: Fix extts capture value format for 82580/i354/i350 (git-fixes). - igb: Initialize mailbox message for VF reset (jsc#SLE-18379). - igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379). - igb: fix bit_shift to be in [1..8] range (git-fixes). - igb: fix nvm.ops.read() error handling (git-fixes). - igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379). - igbvf: Regard vf reset nack as success (jsc#SLE-18379). - igc: Add checking for basetime less than zero (jsc#SLE-18377). - igc: Add ndo_tx_timeout support (jsc#SLE-18377). - igc: Clean the TX buffer and TX descriptor ring (git-fixes). - igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377). - igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377). - igc: Fix possible system crash when loading module (git-fixes). - igc: Lift TAPRIO schedule restriction (jsc#SLE-18377). - igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377). - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377). - igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377). - igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377). - igc: fix the validation logic for taprio's gate list (jsc#SLE-18377). - igc: read before write to SRRCTL register (jsc#SLE-18377). - igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377). - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377). - iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes). - iio: accel: fxls8962af: fixup buffer scan element type (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes). - iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes). - iio: adc: ad7192: Change 'shorted' channels to differential (git-fixes). - iio: adc: ad7192: Fix internal/external clock selection (git-fixes). - iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes). - iio: adc: ad7791: fix IRQ flags (git-fixes). - iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes). - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes). - iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes). - iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes). - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes). - iio: adc: stm32-dfsdm: fill module aliases (git-fixes). - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes). - iio: adis16480: select CONFIG_CRC32 (git-fixes). - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes). - iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes). - iio: hid: fix the retval in accel_3d_capture_sample (git-fixes). - iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes). - iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes). - iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes). - iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes). - iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes). - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes). - iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes). - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes). - iio: imu: inv_icm42600: fix timestamp reset (git-fixes). - iio: light: cm32181: Unregister second I2C client if present (git-fixes). - iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes). - iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes). - iio: light: vcnl4035: fixed chip ID check (git-fixes). - iio:adc:twl6030: Enable measurement of VAC (git-fixes). - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes). - ima: Fix memory leak in __ima_inode_hash() (git-fixes). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448). - init: Provide arch_cpu_finalize_init() (bsc#1212448). - init: Remove check_bugs() leftovers (bsc#1212448). - inotify: Avoid reporting event with invalid wd (bsc#1213025). - input: ads7846 - always set last command to PWRDOWN (git-fixes). - input: ads7846 - do not check penirq immediately for 7845 (git-fixes). - input: ads7846 - do not report pressure for ads7845 (git-fixes). - input: adxl34x - do not hardcode interrupt trigger type (git-fixes). - input: alps - fix compatibility with -funsigned-char (bsc#1209805). - input: drv260x - fix typo in register value define (git-fixes). - input: drv260x - remove unused .reg_defaults (git-fixes). - input: drv260x - sleep between polling GO bit (git-fixes). - input: exc3000 - properly stop timer on shutdown (git-fixes). - input: fix open count when closing inhibited device (git-fixes). - input: focaltech - use explicitly signed char type (git-fixes). - input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes). - input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes). - input: iqs269a - configure device with a single block write (git-fixes). - input: iqs269a - drop unused device node references (git-fixes). - input: iqs269a - increase interrupt handler return delay (git-fixes). - input: iqs626a - drop unused device node references (git-fixes). - input: psmouse - fix OOB access in Elantech protocol (git-fixes). - input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes). - input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes). - input: xpad - add constants for GIP interface numbers (git-fixes). - input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes). - integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes). - intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379). - intel_idle: add Emerald Rapids Xeon support (PED-3849). - interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes). - interconnect: fix mem leak when freeing nodes (git-fixes). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes). - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128 (git-fixes). - io_uring/kbuf: fix not advancing READV kbuf ring (git-fixes). - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available (git-fixes). - io_uring: do not expose io_fill_cqe_aux() (bsc#1211014). - io_uring: do not gate task_work run on TIF_NOTIFY_SIGNAL (git-fixes). - io_uring: ensure that cached task references are always put on exit (git-fixes). - io_uring: fix CQ waiting timeout handling (git-fixes). - io_uring: fix fget leak when fs do not support nowait buffered read (bsc#1205205). - io_uring: fix ordering of args in io_uring_queue_async_work (git-fixes). - io_uring: fix return value when removing provided buffers (git-fixes). - io_uring: fix size calculation when registering buf ring (git-fixes). - io_uring: recycle kbuf recycle on tw requeue (git-fixes). - iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes). - iommu/vt-d: Add a fix for devices need extra dtlb flush (bsc#1208219). - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode (bsc#1208948). - iommu/vt-d: Fix buggy QAT device mask (bsc#1208219). - ipmi: fix SSIF not responding under certain cond (git-fixes). - ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459). - ipmi:ssif: Add a timer between request retries (bsc#1206459). - ipmi:ssif: Add send_retries increment (git-fixes). - ipmi:ssif: Increase the message retry time (bsc#1206459). - ipmi:ssif: Remove rtc_us_timer (bsc#1206459). - ipmi:ssif: resend_msg() cannot fail (bsc#1206459). - ipmi_ssif: Rename idle state and check (bsc#1206459). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes). - irqchip/ftintc010: Mark all function static (git-fixes). - irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes). - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes) - iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553). - ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384). - ixgbe: Enable setting RSS table to default values (jsc#SLE-18384). - ixgbe: Fix panic during XDP_TX with > 64 CPUs (jsc#SLE-18384). - ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384). - ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384). - ixgbe: fix pci device refcount leak (jsc#SLE-18384). - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384). - jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590). - jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641). - jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095). - jbd2: fix potential buffer head reference count leak (bsc#1207644). - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645). - jbd2: use the correct print format (git-fixes). - jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643). - jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014). - jfs: Fix fortify moan in symlink (git-fixes). - k-m-s: Drop Linux 2.6 support - kABI compatibility workaround for efivars (git-fixes). - kABI workaround for btbcm.c (git-fixes). - kABI workaround for cpp_acpi extensions for EPP (bsc#1212445). - kABI workaround for drm_dp_mst helper updates (bsc#1206843). - kABI workaround for hid quirks (git-fixes). - kABI workaround for ieee80211 and co (bsc#1209980). - kABI workaround for mt76_poll_msec() (git-fixes). - kABI workaround for struct acpi_ec (bsc#1207149). - kABI workaround for xhci (git-fixes). - kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest (git-fixes) - kABI: PCI: Reduce warnings on possible RW1C corruption (kabi). - kABI: PCI: dwc: Add dw_pcie_ops.host_deinit() callback (kabi). - kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi). - kABI: Preserve TRACE_EVENT_FL values (git-fixes). - kABI: Work around kABI changes after '20347fca71a3 swiotlb: split up the global swiotlb lock' (jsc#PED-3259). - kABI: x86/msi: Fix msi message data shadow struct (kabi). - kABI: x86/msr: Remove .fixup usage (kabi). - kabi FIX FOR NFSv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - kabi FIX FOR: NFS: Further optimisations for 'ls -l' (git-fixes). - kabi FIX FOR: NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - kabi FIX FOR: NFSv4.1 query for fs_location attr on a new file system (Never, kabi). - kabi FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi). - kabi fix for: NFSv3: handle out-of-order write replies (bsc#1205544). - kabi/severities: add mlx5 internal symbols - kabi/severities: added Microsoft mana symbold (bsc#1210551) - kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users. - kabi/severities: ignore kABI changes for mt76/* local modules (bsc#1209980) - kabi/severities: ignore kABI in bq27xxx_battery module Those are local symbols that are used only by child drivers - kasan: no need to unset panic_on_warn in end_report() (bsc#1207328). - kconfig: Update config changed flag before calling callback (git-fixes). - kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi - kernel-binary: install expoline.o (boo#1210791 bsc#1211089) - kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base. - kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741). - kernel-source: Remove unused macro variant_symbols - kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). rpm only supports full length release, no provides - kernel: Do not sign the vanilla kernel (bsc#1209008). - kernel: Kernel is locked down even though secure boot is disabled (bsc#1198101, bsc#1208976). - keys: Add missing function documentation (git-fixes). - keys: Create static version of public_key_verify_signature (git-fixes). - keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes). - keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - keys: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes). - keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes). - kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes) Update config/armv7hl/default too. - kprobe: reverse kp->flags when arm_kprobe failed (git-fixes). - kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes). - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes). - kprobes: Forbid probing on trampoline and BPF code areas (git-fixes). - kprobes: Prohibit probes in gate area (git-fixes). - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes). - kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes). - kvm/vfio: Fix potential deadlock on vfio group_lock (git-fixes) - kvm/vfio: Fix potential deadlock problem in vfio (git-fixes) - kvm: Destroy target device if coalesced MMIO unregistration fails (git-fixes) - kvm: Disallow user memslot with size that exceeds 'unsigned long' (git-fixes) - kvm: Do not create VM debugfs files outside of the VM directory (git-fixes) - kvm: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes) - kvm: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes). - kvm: Prevent module exit until all VMs are freed (git-fixes) - kvm: arm64: Do not arm a hrtimer for an already pending timer (git-fixes) - kvm: arm64: Do not hypercall before EL2 init (git-fixes) - kvm: arm64: Do not return from void function (git-fixes) - kvm: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes) - kvm: arm64: Fix S1PTW handling on RO memslots (git-fixes) - kvm: arm64: Fix bad dereference on MTE-enabled systems (git-fixes) - kvm: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes) - kvm: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes) - kvm: arm64: Free hypervisor allocations if vector slot init fails (git-fixes) - kvm: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes) - kvm: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes) - kvm: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes) - kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes) - kvm: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes) - kvm: arm64: Save PSTATE early on exit (git-fixes) - kvm: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes) - kvm: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes) - kvm: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes) - kvm: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes) - kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes) - kvm: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes). - kvm: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes). - kvm: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes). - kvm: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes). - kvm: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (git-fixes). - kvm: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes). - kvm: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes). - kvm: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes). - kvm: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes). - kvm: s390: selftest: memop: Fix integer literal (git-fixes). - kvm: svm: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes). - kvm: svm: Fix benign 'bool vs. int' comparison in svm_set_cr0() (git-fixes). - kvm: svm: Fix potential overflow in SEV's send|receive_update_data() (git-fixes). - kvm: svm: Require logical ID to be power-of-2 for AVIC entry (git-fixes). - kvm: svm: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes). - kvm: svm: hyper-v: placate modpost section mismatch error (git-fixes). - kvm: vmx: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes). - kvm: vmx: Resume guest immediately when injecting #GP on ECREATE (git-fixes). - kvm: vmx: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes). - kvm: vmx: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes). - kvm: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes). - kvm: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes). - kvm: x86/pmu: Ignore pmu->global_ctrl check if vPMU does not support global_ctrl (git-fixes). - kvm: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes). - kvm: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes). - kvm: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes). - kvm: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes). - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes). - kvm: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes). - kvm: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes). - kvm: x86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes). - kvm: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes). - kvm: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes). - kvm: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes). - kvm: x86: Protect the unused bits in MSR exiting flags (git-fixes). - kvm: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes). - kvm: x86: Report deprecated x87 features in supported CPUID (git-fixes). - kvm: x86: do not set st->preempted when going back to user space (git-fixes). - kvm: x86: fix sending PV IPI (git-fixes). - kvm: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes). - kvm: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes). - lan78xx: Add missing return code checks (git-fixes). - lan78xx: Fix exception on link speed change (git-fixes). - lan78xx: Fix memory allocation bug (git-fixes). - lan78xx: Fix partial packet errors on suspend/resume (git-fixes). - lan78xx: Fix race condition in disconnect handling (git-fixes). - lan78xx: Fix race conditions in suspend/resume handling (git-fixes). - lan78xx: Fix white space and style issues (git-fixes). - lan78xx: Remove unused pause frame queue (git-fixes). - lan78xx: Remove unused timer (git-fixes). - lan78xx: Set flow control threshold to prevent packet loss (git-fixes). - leds: Fix reference to led_set_brightness() in doc (git-fixes). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes). - leds: led-class: Add missing put_device() to led_put() (git-fixes). - leds: led-core: Fix refcount leak in of_led_get() (git-fixes). - leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes). - lib/mpi: Fix buffer overrun when SG is too long (git-fixes). - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (git-fixes). - lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes). - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes). - lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes). - locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552). - locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes). - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270). - locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270). - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270). - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270). - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270). - locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270). - locking/rwsem: Make handoff bit handling more consistent (bsc#1207270). - locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270). - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270). - locking: Add missing __sched attributes (bsc#1207270). - loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes). - loop: fix ioctl calls using compat_loop_info (git-fixes). - lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852). - lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852). - lpfc: Clean up SLI-4 CQE status handling (bsc#1211852). - lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852). - lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852). - lpfc: Enhance congestion statistics collection (bsc#1211852). - lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346). - lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852). - lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852). - lpfc: update metadata - mac80211: introduce individual TWT support in AP mode (bsc#1209980). - mac80211: introduce set_radar_offchan callback (bsc#1209980). - mac80211: twt: do not use potentially unaligned pointer (bsc#1209980). - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes). - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes). - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes). - mailbox: zynqmp: Fix IPI isr handling (git-fixes). - mailbox: zynqmp: Fix typo in IPI documentation (git-fixes). - mbcache: Avoid nesting of cache->c_list_lock under bit locks (bsc#1207647). - mbcache: Fixup kABI of mb_cache_entry (bsc#1207653). - mce: fix set_mce_nospec to always unmap the whole page (git-fixes). - md/bitmap: Fix bitmap chunk size overflow issues (git-fixes). - md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes). - md/raid5: Improve performance for sequential IO (bsc#1208081). - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes). - md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes). - md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes). - md: fix a crash in mempool_free (git-fixes). - md: protect md_unregister_thread from reentrancy (git-fixes). - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes). - media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes). - media: cec: core: do not set last_initiator if tx in progress (git-fixes). - media: cec: i2c: ch7322: also select REGMAP (git-fixes). - media: coda: Add check for dcoda_iram_alloc (git-fixes). - media: coda: Add check for kmalloc (git-fixes). - media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes). - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes). - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes). - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes). - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes). - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes). - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes). - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes). - media: dvb_ca_en50221: fix a size write bug (git-fixes). - media: dvb_demux: fix a bug for the continuity counter (git-fixes). - media: i2c: Correct format propagation for st-mipid02 (git-fixes). - media: i2c: imx219: Fix binning for RAW8 capture (git-fixes). - media: i2c: imx219: Split common registers from mode tables (git-fixes). - media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes). - media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes). - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes). - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes). - media: m5mols: fix off-by-one loop termination error (git-fixes). - media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes). - media: max9286: Free control handler (git-fixes). - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes). - media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes). - media: netup_unidvb: fix use-after-free at del_timer() (git-fixes). - media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes). - media: ov5640: Fix analogue gain control (git-fixes). - media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes). - media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes). - media: platform: ti: Add missing check for devm_regulator_get (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes). - media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes). - media: rc: gpio-ir-recv: add remove function (git-fixes). - media: rcar_fdp1: Fix the correct variable assignments (git-fixes). - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes). - media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes). - media: saa7134: Use video_unregister_device for radio_dev (git-fixes). - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes). - media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes). - media: usb: Check az6007_read() return value (git-fixes). - media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes). - media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes). - media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes). - media: uvcvideo: Check controls flags before accessing them (git-fixes). - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes). - media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes). - media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes). - media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes). - media: uvcvideo: Handle cameras with invalid descriptors (git-fixes). - media: uvcvideo: Handle errors from calls to usb_string (git-fixes). - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes). - media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes). - media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes). - media: uvcvideo: Use control names from framework (git-fixes). - media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes). - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes). - media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes). - media: venus: dec: Fix handling of the start cmd (git-fixes). - media: venus: helpers: Fix ALIGN() of non power of two (git-fixes). - media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes). - mei: bus-fixup:upon error print return values of send and receive (git-fixes). - mei: bus: fix unlink on bus in error path (git-fixes). - mei: me: add meteor lake point M DID (git-fixes). - mei: pxp: Use correct macros to initialize uuid_le (git-fixes). - memory: brcmstb_dpfe: fix testing array offset after use (git-fixes). - memstick: fix memory leak if card device is never registered (git-fixes). - memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449). - meson saradc: fix clock divider mask length (git-fixes). - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes). - mfd: cs5535: Do not build on UML (git-fixes). - mfd: dln2: Fix memory leak in dln2_probe() (git-fixes). - mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes). - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes). - mfd: pm8008: Fix module autoloading (git-fixes). - mfd: rt5033: Drop rt5033-battery sub-device (git-fixes). - mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes). - mfd: stmfx: Nullify stmfx->vdd in case of error (git-fixes). - mfd: stmpe: Only disable the regulators if they are enabled (git-fixes). - mfd: tqmx86: Correct board names for TQMxE39x (git-fixes). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes). - misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes). - misc: enclosure: Fix doc for enclosure_find() (git-fixes). - misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes). - misc: fastrpc: reject new invocations during device removal (git-fixes). - misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes). - misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes). - misc: pci_endpoint_test: Re-init completion for every test (git-fixes). - mkinitrd: Replace dependency with dracut (bsc#1202353). - mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253). - mlx5: fix possible ptp queue fifo use-after-free (jsc#PED-1549). - mlx5: fix skb leak while fifo resync and push (jsc#PED-1549). - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes). - mlxsw: minimal: Fix deadlock in ports creation (git-fixes). - mlxsw: spectrum: Allow driver to load with old firmware versions (git-fixes). - mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768). - mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410). - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769). - mm: Move mm_cachep initialization to mm_init() (bsc#1212448). - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262). - mm: memcg: fix swapcached stat accounting (bsc#1209804). - mm: mmap: remove newline at the end of the trace (git-fixes). - mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034). - mm: take a page reference when removing device exclusive entries (bsc#1211025). - mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410). - mmc: atmel-mci: fix race between stop command and start of next command (git-fixes). - mmc: bcm2835: fix deferred probing (git-fixes). - mmc: block: Remove error check of hw_reset on reset (git-fixes). - mmc: block: ensure error propagation for non-blk (git-fixes). - mmc: jz4740: Work around bug on JZ4760(B) (git-fixes). - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes). - mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes). - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes). - mmc: mmci: stm32: fix max busy timeout calculation (git-fixes). - mmc: mtk-sd: fix deferred probing (git-fixes). - mmc: mvsdio: fix deferred probing (git-fixes). - mmc: omap: fix deferred probing (git-fixes). - mmc: omap_hsmmc: fix deferred probing (git-fixes). - mmc: owl: fix deferred probing (git-fixes). - mmc: sdhci-acpi: fix deferred probing (git-fixes). - mmc: sdhci-esdhc-imx: make 'no-mmc-hs400' works (git-fixes). - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes). - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes). - mmc: sdhci-spear: fix deferred probing (git-fixes). - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes). - mmc: sdhci_am654: lower power-on failed message severity (git-fixes). - mmc: sdio: fix possible resource leaks in some error paths (git-fixes). - mmc: sh_mmcif: fix deferred probing (git-fixes). - mmc: sunxi: fix deferred probing (git-fixes). - mmc: usdhi60rol0: fix deferred probing (git-fixes). - mmc: vub300: fix invalid response handling (git-fixes). - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - mt76: Make use of the helper macro kthread_run() (bsc#1209980). - mt76: Print error message when reading EEPROM from mtd failed (bsc#1209980). - mt76: add 6GHz support (bsc#1209980). - mt76: add MT_RXQ_MAIN_WA for mt7916 (bsc#1209980). - mt76: add support for setting mcast rate (bsc#1209980). - mt76: allow drivers to drop rx packets early (bsc#1209980). - mt76: clear sta powersave flag after notifying driver (bsc#1209980). - mt76: connac: add 6 GHz support for wtbl and starec configuration (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss (bsc#1209980). - mt76: connac: add support for limiting to maximum regulatory Tx power (bsc#1209980). - mt76: connac: add support for passing the cipher field in bss_info (bsc#1209980). - mt76: connac: adjust wlan_idx size from u8 to u16 (bsc#1209980). - mt76: connac: align MCU_EXT definitions with 7915 driver (bsc#1209980). - mt76: connac: enable 6GHz band for hw scan (bsc#1209980). - mt76: connac: enable hw amsdu @ 6GHz (bsc#1209980). - mt76: connac: extend mcu_get_nic_capability (bsc#1209980). - mt76: connac: fix a theoretical NULL pointer dereference in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: fix last_chan configuration in mt76_connac_mcu_rate_txpower_band (bsc#1209980). - mt76: connac: fix unresolved symbols when CONFIG_PM is unset (bsc#1209980). - mt76: connac: introduce MCU_CE_CMD macro (bsc#1209980). - mt76: connac: introduce MCU_EXT macros (bsc#1209980). - mt76: connac: introduce MCU_UNI_CMD macro (bsc#1209980). - mt76: connac: introduce is_connac_v1 utility routine (bsc#1209980). - mt76: connac: make read-only array ba_range static const (bsc#1209980). - mt76: connac: move mcu reg access utility routines in mt76_connac_lib module (bsc#1209980). - mt76: connac: move mt76_connac_chan_bw in common code (bsc#1209980). - mt76: connac: move mt76_connac_lmac_mapping in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_add_key in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_basic_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_ext_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_omac_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_gen_dl_mode in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_get_cipher in common code (bsc#1209980). - mt76: connac: move mt76_connac_mcu_rdd_cmd in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_restart in common module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_set_pm in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_wtbl_update_hdr_trans in connac module (bsc#1209980). - mt76: connac: rely on MCU_CMD macro (bsc#1209980). - mt76: connac: rely on le16_add_cpu in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - mt76: connac: remove MCU_FW_PREFIX bit (bsc#1209980). - mt76: connac: remove PHY_MODE_AX_6G configuration in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2} (bsc#1209980). - mt76: connac: set 6G phymode in single-sku support (bsc#1209980). - mt76: debugfs: fix queue reporting for mt76-usb (bsc#1209980). - mt76: debugfs: improve queue node readability (bsc#1209980). - mt76: disable BH around napi_schedule() calls (bsc#1209980). - mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs (bsc#1209980). - mt76: do not always copy ethhdr in reverse_frag0_hdr_trans (bsc#1209980). - mt76: do not reset MIB counters in get_stats callback (bsc#1209980). - mt76: eeprom: tolerate corrected bit-flips (bsc#1209980). - mt76: fill boottime_ns in Rx path (bsc#1209980). - mt76: fix antenna config missing in 6G cap (bsc#1209980). - mt76: fix boolreturn.cocci warnings (bsc#1209980). - mt76: fix dfs state issue with 160 MHz channels (bsc#1209980). - mt76: fix endianness errors in reverse_frag0_hdr_trans (bsc#1209980). - mt76: fix invalid rssi report (bsc#1209980). - mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi (bsc#1209980). - mt76: fix monitor rx FCS error in DFS channel (bsc#1209980). - mt76: fix possible OOB issue in mt76_calculate_default_rate (bsc#1209980). - mt76: fix possible pktid leak (bsc#1209980). - mt76: fix the wiphy's available antennas to the correct value (bsc#1209980). - mt76: fix timestamp check in tx_status (bsc#1209980). - mt76: fix tx status related use-after-free race on station removal (bsc#1209980). - mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes). - mt76: fix wrong HE data rate in sniffer tool (bsc#1209980). - mt76: improve signal strength reporting (bsc#1209980). - mt76: introduce packet_id idr (bsc#1209980). - mt76: make mt76_sar_capa static (bsc#1209980). - mt76: move mt76_ethtool_worker_info in mt76 module (bsc#1209980). - mt76: move mt76_sta_stats in mt76.h (bsc#1209980). - mt76: move sar utilities to mt76-core module (bsc#1209980). - mt76: move sar_capa configuration in common code (bsc#1209980). - mt76: move spin_lock_bh to spin_lock in tasklet (bsc#1209980). - mt76: mt7603: improve reliability of tx powersave filtering (bsc#1209980). - mt76: mt7603: introduce SAR support (bsc#1209980). - mt76: mt7615: add support for LG LGSBWAC02 (MT7663BUN) (bsc#1209980). - mt76: mt7615: apply cached RF data for DBDC (bsc#1209980). - mt76: mt7615: clear mcu error interrupt status on mt7663 (bsc#1209980). - mt76: mt7615: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7615: fix compiler warning on frame size (bsc#1209980). - mt76: mt7615: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7615: fix throughput regression on DFS channels (bsc#1209980). - mt76: mt7615: fix unused tx antenna mask in testmode (bsc#1209980). - mt76: mt7615: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7615: honor ret from mt7615_mcu_restart in mt7663u_mcu_init (bsc#1209980). - mt76: mt7615: in debugfs queue stats, skip wmm index 3 on mt7663 (bsc#1209980). - mt76: mt7615: introduce SAR support (bsc#1209980). - mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module (bsc#1209980). - mt76: mt7615: remove dead code in get_omac_idx (bsc#1209980). - mt76: mt7615: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7615e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7663: disable 4addr capability (bsc#1209980). - mt76: mt7663s: flush runtime-pm queue after waking up the device (bsc#1209980). - mt76: mt7663s: rely on mcu reg access utility (bsc#1209980). - mt76: mt7663u: introduce mt7663u_mcu_power_on routine (bsc#1209980). - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (bsc#1209980). - mt76: mt76x02: improve tx hang detection (bsc#1209980). - mt76: mt76x02: introduce SAR support (bsc#1209980). - mt76: mt76x02: use mt76_phy_dfs_state to determine radar detector state (bsc#1209980). - mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset (bsc#1209980). - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() (bsc#1209980). - mt76: mt7915: Fix channel state update error issue (bsc#1209980). - mt76: mt7915: add 6 GHz support (bsc#1209980). - mt76: mt7915: add HE-LTF into fixed rate command (bsc#1209980). - mt76: mt7915: add LED support (bsc#1209980). - mt76: mt7915: add WA firmware log support (bsc#1209980). - mt76: mt7915: add control knobs for thermal throttling (bsc#1209980). - mt76: mt7915: add debugfs knobs for MCU utilization (bsc#1209980). - mt76: mt7915: add default calibrated data support (bsc#1209980). - mt76: mt7915: add device id for mt7916 (bsc#1209980). - mt76: mt7915: add ethtool stats support (bsc#1209980). - mt76: mt7915: add firmware support for mt7916 (bsc#1209980). - mt76: mt7915: add mib counters to ethtool stats (bsc#1209980). - mt76: mt7915: add missing DATA4_TB_SPTL_REUSE1 to mt7915_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7915: add more MIB registers (bsc#1209980). - mt76: mt7915: add mt7915_mmio_probe() as a common probing function (bsc#1209980). - mt76: mt7915: add mt7916 calibrated data support (bsc#1209980). - mt76: mt7915: add mu-mimo and ofdma debugfs knobs (bsc#1209980). - mt76: mt7915: add some per-station tx stats to ethtool (bsc#1209980). - mt76: mt7915: add support for MT7986 (bsc#1209980). - mt76: mt7915: add support for passing chip/firmware debug data to user space (bsc#1209980). - mt76: mt7915: add twt_stats knob in debugfs (bsc#1209980). - mt76: mt7915: add tx mu/su counters to mib (bsc#1209980). - mt76: mt7915: add tx stats gathered from tx-status callbacks (bsc#1209980). - mt76: mt7915: add txfree event v3 (bsc#1209980). - mt76: mt7915: add txpower init for 6GHz (bsc#1209980). - mt76: mt7915: allow beaconing on all chains (bsc#1209980). - mt76: mt7915: change max rx len limit of hw modules (bsc#1209980). - mt76: mt7915: check band idx for bcc event (bsc#1209980). - mt76: mt7915: check for devm_pinctrl_get() failure (bsc#1209980). - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set (bsc#1209980). - mt76: mt7915: enable HE UL MU-MIMO (bsc#1209980). - mt76: mt7915: enable configured beacon tx rate (bsc#1209980). - mt76: mt7915: enable radar background detection (bsc#1209980). - mt76: mt7915: enable radar trigger on rdd2 (bsc#1209980). - mt76: mt7915: enable twt responder capability (bsc#1209980). - mt76: mt7915: enlarge wcid size to 544 (bsc#1209980). - mt76: mt7915: fix DBDC default band selection on MT7915D (bsc#1209980). - mt76: mt7915: fix DFS no radar detection event (bsc#1209980). - mt76: mt7915: fix SMPS operation fail (bsc#1209980). - mt76: mt7915: fix WMM index on DBDC cards (bsc#1209980). - mt76: mt7915: fix beamforming mib stats (bsc#1209980). - mt76: mt7915: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7915: fix eeprom fields of txpower init values (bsc#1209980). - mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_debugfs_rx_fw_monitor (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_mac_tx_free() (bsc#1209980). - mt76: mt7915: fix he_mcs capabilities for 160mhz (bsc#1209980). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs() (bsc#1209980). - mt76: mt7915: fix missing HE phy cap (bsc#1209980). - mt76: mt7915: fix phy cap in mt7915_set_stream_he_txbf_caps() (bsc#1209980). - mt76: mt7915: fix polling firmware-own status (git-fixes). - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (git-fixes). - mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta (bsc#1209980). - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup (bsc#1209980). - mt76: mt7915: fix potential NPE in TXS processing (bsc#1209980). - mt76: mt7915: fix potential memory leak of fw monitor packets (bsc#1209980). - mt76: mt7915: fix return condition in mt7915_tm_reg_backup_restore() (bsc#1209980). - mt76: mt7915: fix the muru tlv issue (bsc#1209980). - mt76: mt7915: fix the nss setting in bitrates (bsc#1209980). - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev (bsc#1209980). - mt76: mt7915: fix txbf starec TLV issues (bsc#1209980). - mt76: mt7915: fix typos in comments (bsc#1209980). - mt76: mt7915: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7915: get rid of mt7915_mcu_set_fixed_rate routine (bsc#1209980). - mt76: mt7915: honor all possible error conditions in mt7915_mcu_init() (bsc#1209980). - mt76: mt7915: improve code readability for xmit-queue handler (bsc#1209980). - mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht (bsc#1209980). - mt76: mt7915: improve starec readability of txbf (bsc#1209980). - mt76: mt7915: improve wmm index allocation (bsc#1209980). - mt76: mt7915: initialize smps mode in mt7915_mcu_sta_rate_ctrl_tlv() (bsc#1209980). - mt76: mt7915: introduce SAR support (bsc#1209980). - mt76: mt7915: introduce __mt7915_get_tsf routine (bsc#1209980). - mt76: mt7915: introduce band_idx in mt7915_phy (bsc#1209980). - mt76: mt7915: introduce bss coloring support (bsc#1209980). - mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy (bsc#1209980). - mt76: mt7915: introduce mt76_vif in mt7915_vif (bsc#1209980). - mt76: mt7915: introduce mt7915_mac_add_twt_setup routine (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_beacon_check_caps() (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command (bsc#1209980). - mt76: mt7915: introduce mt7915_set_radar_background routine (bsc#1209980). - mt76: mt7915: introduce rdd_monitor debugfs node (bsc#1209980). - mt76: mt7915: move pci specific code back to pci.c (bsc#1209980). - mt76: mt7915: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7915: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7915: refine register definition (bsc#1209980). - mt76: mt7915: rely on mt76_connac definitions (bsc#1209980). - mt76: mt7915: rely on mt76_connac_get_phy utilities (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_add_tlv routine (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_sta_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_wtbl_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_init_download (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_patch_sem_ctrl/mt76_connac_mcu_start_patch (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_set_rts_thresh (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_basic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_uapsd (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_start_firmware (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_generic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_hdr_trans_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ht_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_smps_tlv (bsc#1209980). - mt76: mt7915: remove dead code in debugfs code (bsc#1209980). - mt76: mt7915: remove duplicated defs in mcu.h (bsc#1209980). - mt76: mt7915: remove mt7915_mcu_add_he() (bsc#1209980). - mt76: mt7915: rename debugfs tx-queues (bsc#1209980). - mt76: mt7915: report radar pattern if detected by rdd2 (bsc#1209980). - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate (bsc#1209980). - mt76: mt7915: rework .set_bitrate_mask() to support more options (bsc#1209980). - mt76: mt7915: rework debugfs fixed-rate knob (bsc#1209980). - mt76: mt7915: rework debugfs queue info (bsc#1209980). - mt76: mt7915: rework dma.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework eeprom.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework mt7915_mcu_sta_muru_tlv() (bsc#1209980). - mt76: mt7915: rework starec TLV tags (bsc#1209980). - mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex (bsc#1209980). - mt76: mt7915: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7915: set VTA bit in tx descriptor (bsc#1209980). - mt76: mt7915: set band1 TGID field in tx descriptor (bsc#1209980). - mt76: mt7915: set bssinfo/starec command when adding interface (bsc#1209980). - mt76: mt7915: set muru platform type (bsc#1209980). - mt76: mt7915: simplify conditional (bsc#1209980). - mt76: mt7915: switch proper tx arbiter mode in testmode (bsc#1209980). - mt76: mt7915: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7915: update mac timing settings (bsc#1209980). - mt76: mt7915: update max_mpdu_size in mt7915_mcu_sta_amsdu_tlv() (bsc#1209980). - mt76: mt7915: update mt7915_chan_mib_offs for mt7916 (bsc#1209980). - mt76: mt7915: update rx rate reporting for mt7916 (bsc#1209980). - mt76: mt7915: use min_t() to make code cleaner (bsc#1209980). - mt76: mt7915e: Add a hwmon attribute to get the actual throttle state (bsc#1209980). - mt76: mt7915e: Enable thermal management by default (bsc#1209980). - mt76: mt7915e: Fix degraded performance after temporary overheat (bsc#1209980). - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (git-fixes). - mt76: mt7921: add 6GHz support (bsc#1209980). - mt76: mt7921: add MT7921_COMMON module (bsc#1209980). - mt76: mt7921: add MU EDCA cmd support (bsc#1209980). - mt76: mt7921: add delay config for sched scan (bsc#1209980). - mt76: mt7921: add mt7921u driver (bsc#1209980). - mt76: mt7921: add per-vif counters in ethtool (bsc#1209980). - mt76: mt7921: add some more MIB counters (bsc#1209980). - mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb (bsc#1209980). - mt76: mt7921: add support for PCIe ID 0x0608/0x0616 (bsc#1209980). - mt76: mt7921: add support for tx status reporting (bsc#1209980). - mt76: mt7921: clear pm->suspended in mt7921_mac_reset_work (bsc#1209980). - mt76: mt7921: disable 4addr capability (bsc#1209980). - mt76: mt7921: disable runtime pm for usb (bsc#1209980). - mt76: mt7921: do not always disable fw runtime-pm (bsc#1209980). - mt76: mt7921: do not enable beacon filter when IEEE80211_CONF_CHANGE_MONITOR is set (bsc#1209980). - mt76: mt7921: do not update pm states in case of error (git-fixes). - mt76: mt7921: fix MT7921E reset failure (bsc#1209980). - mt76: mt7921: fix Wformat build warning (bsc#1209980). - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7921: fix boolreturn.cocci warning (bsc#1209980). - mt76: mt7921: fix build regression (bsc#1209980). - mt76: mt7921: fix endianness issues in mt7921_mcu_set_tx() (bsc#1209980). - mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap (bsc#1209980). - mt76: mt7921: fix ht mcs in mt7921_mac_add_txs_skb() (bsc#1209980). - mt76: mt7921: fix injected MPDU transmission to not use HW A-MSDU (bsc#1209980). - mt76: mt7921: fix kernel crash at mt7921_pci_remove (git-fixes). - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (git-fixes). - mt76: mt7921: fix mt7921s Kconfig (bsc#1209980). - mt76: mt7921: fix network buffer leak by txs missing (bsc#1209980). - mt76: mt7921: fix possible NULL pointer dereference in mt7921_mac_write_txwi (bsc#1209980). - mt76: mt7921: fix up the monitor mode (bsc#1209980). - mt76: mt7921: fix xmit-queue dump for usb and sdio (bsc#1209980). - mt76: mt7921: forbid the doze mode when coredump is in progress (bsc#1209980). - mt76: mt7921: get rid of monitor_vif (bsc#1209980). - mt76: mt7921: get rid of mt7921_mcu_get_eeprom (bsc#1209980). - mt76: mt7921: get rid of mt7921_wait_for_mcu_init declaration (bsc#1209980). - mt76: mt7921: honor mt76_connac_mcu_set_rate_txpower return value in mt7921_config (bsc#1209980). - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter (bsc#1209980). - mt76: mt7921: introduce 160 MHz channel bandwidth support (bsc#1209980). - mt76: mt7921: introduce mt7921s support (bsc#1209980). - mt76: mt7921: introduce stats reporting through ethtool (bsc#1209980). - mt76: mt7921: make all event parser reusable between mt7921s and mt7921e (bsc#1209980). - mt76: mt7921: make mt7921_init_tx_queues static (bsc#1209980). - mt76: mt7921: move mt76_connac_mcu_set_hif_suspend to bus-related files (bsc#1209980). - mt76: mt7921: move mt7921_init_hw in a dedicated work (bsc#1209980). - mt76: mt7921: move mt7921_queue_rx_skb to mac.c (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_complete_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_prepare_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_status_data in mac common code (bsc#1209980). - mt76: mt7921: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7921: reduce log severity levels for informative messages (bsc#1209980). - mt76: mt7921: refactor dma.c to be pcie specific (bsc#1209980). - mt76: mt7921: refactor init.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mac.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mcu.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mt7921_mcu_send_message (bsc#1209980). - mt76: mt7921: rely on mcu_get_nic_capability (bsc#1209980). - mt76: mt7921: remove dead definitions (bsc#1209980). - mt76: mt7921: remove duplicated code in mt7921_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7921: remove mcu rate reporting code (bsc#1209980). - mt76: mt7921: remove mt7921_sta_stats (bsc#1209980). - mt76: mt7921: report tx rate directly from tx status (bsc#1209980). - mt76: mt7921: robustify hardware initialization flow (bsc#1209980). - mt76: mt7921: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7921: set EDCA parameters with the MCU CE command (bsc#1209980). - mt76: mt7921: start reworking tx rate reporting (bsc#1209980). - mt76: mt7921: toggle runtime-pm adding a monitor vif (bsc#1209980). - mt76: mt7921: update mib counters dumping phy stats (bsc#1209980). - mt76: mt7921: update mt7921_skb_add_usb_sdio_hdr to support usb (bsc#1209980). - mt76: mt7921: use correct iftype data on 6GHz cap init (bsc#1209980). - mt76: mt7921: use mt76_hw instead of open coding it (bsc#1209980). - mt76: mt7921: use physical addr to unify register access (bsc#1209980). - mt76: mt7921e: fix possible probe failure after reboot (bsc#1198835). - mt76: mt7921e: make dev->fw_assert usage consistent (bsc#1209980). - mt76: mt7921e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7921s: add reset support (bsc#1209980). - mt76: mt7921s: clear MT76_STATE_MCU_RUNNING immediately after reset (bsc#1209980). - mt76: mt7921s: fix a possible memory leak in mt7921_load_patch (bsc#1209980). - mt76: mt7921s: fix bus hang with wrong privilege (bsc#1209980). - mt76: mt7921s: fix cmd timeout in throughput test (bsc#1209980). - mt76: mt7921s: fix firmware download random fail (bsc#1209980). - mt76: mt7921s: fix missing fc type/sub-type for 802.11 pkts (bsc#1209980). - mt76: mt7921s: fix mt7921s_mcu_[fw|drv]_pmctrl (bsc#1209980). - mt76: mt7921s: fix possible kernel crash due to invalid Rx count (bsc#1209980). - mt76: mt7921s: fix possible sdio deadlock in command fail (bsc#1209980). - mt76: mt7921s: fix suspend error with enlarging mcu timeout value (bsc#1209980). - mt76: mt7921s: fix the device cannot sleep deeply in suspend (bsc#1209980). - mt76: mt7921s: make pm->suspended usage consistent (bsc#1209980). - mt76: mt7921s: run sleep mode by default (bsc#1209980). - mt76: mt7921s: update mt7921s_wfsys_reset sequence (bsc#1209980). - mt76: only access ieee80211_hdr after mt76_insert_ccmp_hdr (bsc#1209980). - mt76: only set rx radiotap flag from within decoder functions (bsc#1209980). - mt76: redefine mt76_for_each_q_rx to adapt mt7986 changes (bsc#1209980). - mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature (bsc#1209980). - mt76: remove mt76_wcid pointer from mt76_tx_status_check signature (bsc#1209980). - mt76: remove variable set but not used (bsc#1209980). - mt76: reverse the first fragmented frame to 802.11 (bsc#1209980). - mt76: schedule status timeout at dma completion (bsc#1209980). - mt76: sdio: disable interrupt in mt76s_sdio_irq (bsc#1209980). - mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines (bsc#1209980). - mt76: sdio: extend sdio module to support CONNAC2 (bsc#1209980). - mt76: sdio: honor the largest Tx buffer the hardware can support (bsc#1209980). - mt76: sdio: introduce parse_irq callback (bsc#1209980). - mt76: sdio: lock sdio when it is needed (bsc#1209980). - mt76: sdio: move common code in mt76_sdio module (bsc#1209980). - mt76: set wlan_idx_hi on mt7916 (bsc#1209980). - mt76: split single ldpc cap bit into bits (bsc#1209980). - mt76: substitute sk_buff_head status_list with spinlock_t status_lock (bsc#1209980). - mt76: support reading EEPROM data embedded in fdt (bsc#1209980). - mt76: switch from 'pci_' to 'dma_' API (bsc#1209980). - mt76: testmode: add support to set MAC (bsc#1209980). - mt76: usb: add req_type to ___mt76u_rr signature (bsc#1209980). - mt76: usb: add req_type to ___mt76u_wr signature (bsc#1209980). - mt76: usb: introduce __mt76u_init utility routine (bsc#1209980). - mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD (bsc#1209980). - mt76: use a separate CCMP PN receive counter for management frames (bsc#1209980). - mt76: use le32/16_get_bits() whenever possible (bsc#1209980). - mt76x02: improve mac error check/reset reliability (bsc#1209980). - mtd: core: fix error path for nvmem provider (git-fixes). - mtd: core: fix nvmem error reporting (git-fixes). - mtd: core: provide unique name for nvmem device, take two (git-fixes). - mtd: dataflash: remove duplicate SPI ID table (git-fixes). - mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes). - mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes). - mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes). - mtd: rawnand: marvell: ensure timing values are written (git-fixes). - mtd: rawnand: meson: fix bitmask for length in command word (git-fixes). - mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes). - mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes). - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes). - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes). - mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes). - mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes). - mtd: spi-nor: Fix a trivial typo (git-fixes). - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes). - mtd: spi-nor: core: fix implicit declaration warning (git-fixes). - mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes). - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes). - mtdblock: tolerate corrected bit-flips (git-fixes). - nbd: Fix hung on disconnect request if socket is closed before (git-fixes). - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes). - nbd: Fix hungtask when nbd_config_put (git-fixes). - nbd: add missing definition of pr_fmt (git-fixes). - nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes). - nbd: fix io hung while disconnecting device (git-fixes). - nbd: fix race between nbd_alloc_config() and module removal (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#PED-1549). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253). - net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253). - net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253). - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253). - net/mlx5: Avoid recovery in probe flows (jsc#PED-1549 bsc#1211794). - net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#PED-1549). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253). - net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253). - net/mlx5: Collect command failures data only for known commands (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#PED-1549). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253). - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#PED-1549). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253). - net/mlx5: Devcom, serialize devcom registration (jsc#PED-1549). - net/mlx5: Disable eswitch before waiting for VF pages (jsc#PED-1549). - net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253). - net/mlx5: Do not use already freed action pointer (jsc#SLE-19253). - net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#PED-1549). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#PED-1549). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#PED-1549). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#PED-1549). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#PED-1549). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5: E-switch, Fix switchdev mode after devlink reload (jsc#PED-1549). - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules (jsc#PED-1549). - net/mlx5: ECPF, wait for VF pages only after disabling host PFs (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253). - net/mlx5: Expose SF firmware pages counter (jsc#PED-1549). - net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253). - net/mlx5: Fix RoCE setting at HCA level (jsc#PED-1549). - net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253). - net/mlx5: Fix command stats access after free (jsc#PED-1549). - net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253). - net/mlx5: Fix error message when failing to allocate device memory (jsc#PED-1549). - net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253). - net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253). - net/mlx5: Fix io_eq_size and event_eq_size params validation (jsc#PED-1549). - net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253). - net/mlx5: Fix ptp max frequency adjustment range (jsc#PED-1549). - net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253). - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#SLE-19253). - net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#PED-1549). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253). - net/mlx5: Handle pairing of E-switch via uplink un/load APIs (jsc#PED-1549). - net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253). - net/mlx5: Lag, fix failure to cancel delayed bond work (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#PED-1549). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253). - net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253). - net/mlx5: SF, Drain health before removing device (jsc#PED-1549). - net/mlx5: SF, Drain health before removing device (jsc#SLE-19253). - net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253). - net/mlx5: Serialize module cleanup with reload and remove (jsc#PED-1549). - net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253). - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver (jsc#PED-1549). - net/mlx5: Store page counters in a single array (jsc#PED-1549). - net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253). - net/mlx5: add IFC bits for bypassing port select flow table (git-fixes) - net/mlx5: check attr pointer validity before dereferencing it (jsc#PED-1549). - net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253). - net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253). - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253). - net/mlx5: fs, fail conflicting actions (jsc#SLE-19253). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#PED-1549). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253). - net/mlx5: fw_tracer, Fix event handling (jsc#PED-1549). - net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#PED-1549). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#PED-1549). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#PED-1549). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#PED-1549). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253). - net/mlx5e: CT: Fix ct debugfs folder name (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253). - net/mlx5e: Do not cache tunnel offloads capability (jsc#PED-1549). - net/mlx5e: Do not clone flow post action attributes second time (jsc#PED-1549). - net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253). - net/mlx5e: Do not support encap rules with gbp option (jsc#PED-1549). - net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253). - net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253). - net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253). - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253). - net/mlx5e: Fix RX reporter for XSK RQs (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253). - net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253). - net/mlx5e: Fix cleanup null-ptr deref on encap lock (jsc#PED-1549). - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (jsc#PED-1549). - net/mlx5e: Fix deadlock in tc route query code (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#PED-1549). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253). - net/mlx5e: Fix macsec ASO context alignment (jsc#PED-1549). - net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (jsc#PED-1549). - net/mlx5e: Fix macsec ssci attribute handling in offload path (jsc#PED-1549). - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253). - net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253). - net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253). - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253). - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (jsc#PED-1549). - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253). - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253). - net/mlx5e: Initialize link speed to zero (jsc#PED-1549). - net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253). - net/mlx5e: Nullify table pointer when failing to create (jsc#PED-1549). - net/mlx5e: Overcome slow response for first macsec ASO WQE (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5e: Remove redundant xsk pointer check in mlx5e_mpwrq_validate_xsk (jsc#PED-1549). - net/mlx5e: Set decap action based on attr for sample (jsc#PED-1549). - net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253). - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253). - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253). - net/mlx5e: Use correct encap attribute during invalidation (jsc#PED-1549). - net/mlx5e: Verify dev is present for fix features ndo (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#PED-1549). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253). - net/net_failover: fix txq exceeding warning (git-fixes). - net/rose: Fix to not accept on connected socket (git-fixes). - net/sched: fix initialization order when updating chain 0 head (git-fixes). - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes). - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes). - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842). - net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes). - net/x25: Fix to not accept on connected socket (git-fixes). - net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes). - net: add missing include in include/net/gro.h (git-fixes). - net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes). - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes). - net: devlink: Fix missing mutex_unlock() call (git-fixes). - net: ena: Account for the number of processed bytes in XDP (git-fixes). - net: ena: Do not register memory info on XDP exchange (git-fixes). - net: ena: Fix rx_copybreak value update (git-fixes). - net: ena: Fix toeplitz initial hash value (git-fixes). - net: ena: Set default value for RX interrupt moderation (git-fixes). - net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes). - net: ena: Use bitmask to indicate packet redirection (git-fixes). - net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes). - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes). - net: hns3: fix reset delay time to avoid configuration timeout (git-fixes). - net: hns3: fix sending pfc frames after reset issue (git-fixes). - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes). - net: linkwatch: be more careful about dev->linkwatch_dev_tracker (git-fixes). - net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982). - net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022). - net: mana: Add support for jumbo frame (bsc#1210551). - net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153). - net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551). - net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022). - net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022). - net: mana: Enable RX path to handle various MTU sizes (bsc#1210551). - net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875). - net: mana: Fix accessing freed irq affinity_hint (bsc#1208153). - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes). - net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022). - net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022). - net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022). - net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022). - net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551). - net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551). - net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022). - net: mana: Use napi_build_skb in RX path (bsc#1210551). - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes). - net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes). - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#PED-1549). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#SLE-19253). - net: natsemi: fix hw address initialization for jazz and xtensa (git-fixes). - net: of: fix stub of_net helpers for CONFIG_NET=n (git-fixes). - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes). - net: phy: Ensure state transitions are processed from phy_stop() (git-fixes). - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes). - net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes). - net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes). - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes). - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes). - net: phy: mxl-gpy: add MDINT workaround (git-fixes). - net: phy: nxp-c45-tja11xx: add remove callback (git-fixes). - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes). - net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes). - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes). - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes). - net: qrtr: correct types of trace event parameters (git-fixes). - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes). - net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes). - net: tun: avoid disabling NAPI twice (git-fixes). - net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes). - net: tun: stop NAPI when detaching queues (git-fixes). - net: tun: unlink NAPI from device on destruction (git-fixes). - net: usb: asix: remove redundant assignment to variable reg (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes). - net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes). - net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - net: usb: use eth_hw_addr_set() (git-fixes). - net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes). - netrom: Fix use-after-free caused by accept on already connected socket (git-fixes). - netrom: Fix use-after-free of a listening socket (git-fixes). - nfc: change order inside nfc_se_io error path (git-fixes). - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes). - nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes). - nfc: pn533: initialize struct pn533_out_arg properly (git-fixes). - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes). - nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes). - nfp: flower-ct: fix error return code in nfp_fl_ct_add_offload() (git-fixes). - nfp: flower: fix ingress police using matchall filter (git-fixes). - nfp: only report pause frame configuration for physical device (git-fixes). - nfs4: Fix kmemleak when allocate slot failed (git-fixes). - nfs4trace: fix state manager flag printing (git-fixes). - nfs: Always initialise fattr->label in nfs_fattr_alloc() (git-fixes). - nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes). - nfs: Cleanup unused rpc_clnt variable (git-fixes). - nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes). - nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes). - nfs: Fix an Oops in nfs_d_automount() (git-fixes). - nfs: Further optimisations for 'ls -l' (git-fixes). - nfs: Pass i_size to fscache_unuse_cookie() when a file is released (git-fixes). - nfs: fix disabling of swap (git-fixes). - nfs: nfs4clinet: check the return value of kstrdup() (git-fixes). - nfs: nfsiod should not block forever in mempool_alloc() (git-fixes). - nfsd: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (git-fixes). - nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes). - nfsd: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (git-fixes). - nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes). - nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes). - nfsd: Fix a memory leak in an error handling path (git-fixes). - nfsd: Fix handling of oversized NFSv4 COMPOUND requests (git-fixes). - nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes). - nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - nfsd: Protect against filesystem freezing (git-fixes). - nfsd: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - nfsd: call op_release, even when op_func returns an error (git-fixes). - nfsd: callback request does not use correct credential for AUTH_SYS (git-fixes). - nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes). - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes). - nfsd: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes). - nfsd: fix problems with cleanup on errors in nfsd4_copy (git-fixes). - nfsd: fix race to check ls_layouts (git-fixes). - nfsd: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes). - nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes). - nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes). - nfsd: shut down the NFSv4 state objects before the filecache (git-fixes). - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes). - nfsd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes). - nfsv3: handle out-of-order write replies (bsc#1205544). - nfsv4 expose nfs_parse_server_name function (git-fixes). - nfsv4 handle port presence in fs_location server string (git-fixes). - nfsv4 only print the label when its queried (git-fixes). - nfsv4 remove zero number of fs_locations entries error check (git-fixes). - nfsv4 store server support for fs_location attribute (git-fixes). - nfsv4.1 provide mount option to toggle trunking discovery (git-fixes). - nfsv4.1 query for fs_location attr on a new file system (git-fixes). - nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes). - nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - nfsv4.2: Fix initialisation of struct nfs4_label (git-fixes). - nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes). - nfsv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - nfsv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes). - nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes). - nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes). - nfsv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes). - nfsv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - nfsv4: Fix a potential state reclaim deadlock (git-fixes). - nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - nfsv4: Fix hangs when recovering open state after a server reboot (git-fixes). - nfsv4: Protect the state recovery thread against direct reclaim (git-fixes). - nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes). - nfsv4: keep state manager thread active if swap is enabled (git-fixes). - nilfs2: do not write dirty data after degenerating to read-only (git-fixes). - nilfs2: fix buffer corruption due to concurrent device reads (git-fixes). - nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes). - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes). - nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes). - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes). - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes). - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes). - nilfs2: fix sysfs interface lifetime (git-fixes). - nilfs2: fix underflow in second superblock position calculations (git-fixes). - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes). - nilfs2: initialize unused bytes in segment summary blocks (git-fixes). - nouveau: fix client work fence deletion race (git-fixes). - ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes). - ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes). - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes). - ntb: ntb_tool: Add check for devm_kcalloc (git-fixes). - ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes). - null_blk: fix ida error handling in null_add_dev() (git-fixes). - nvdimm: disable namespace on error (bsc#1166486). - nvme initialize core quirks before calling nvme_init_subsystem (git-fixes). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-core: fix dev_pm_qos memleak (git-fixes). - nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes). - nvme-core: fix memory leak in dhchap_secret_store (git-fixes). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes). - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (git-fixes). - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes). - nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes). - nvme-multipath: fix hang when disk goes live over reconnect (git-fixes). - nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes). - nvme-multipath: support io stats on the mpath device (bsc#1210565). - nvme-pci: add bogus ID quirk for ADATA SX6000PNP (bsc#1207827). - nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes). - nvme-pci: add quirks for Samsung X5 SSDs (git-fixes). - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes). - nvme-pci: clear the prp2 field when not used (git-fixes). - nvme-pci: disable write zeroes on various Kingston SSD (git-fixes). - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes). - nvme-pci: fix doorbell buffer value endianness (git-fixes). - nvme-pci: fix mempool alloc size (git-fixes). - nvme-pci: fix page size checks (git-fixes). - nvme-pci: fix timeout request state check (git-fixes). - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes). - nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes). - nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: always fail a request when sending it failed (bsc#1208902). - nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes). - nvme-tcp: fix bogus request completion when failing to send AER (git-fixes). - nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes). - nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes). - nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes). - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes). - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes). - nvme: add device name to warning in uuid_show() (git-fixes). - nvme: also return I/O command effects from nvme_command_effects (git-fixes). - nvme: bring back auto-removal of deleted namespaces during sequential scan (git-fixes). - nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes). - nvme: check for duplicate identifiers earlier (git-fixes). - nvme: cleanup __nvme_check_ids (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes). - nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes). - nvme: fix async event trace event (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix handling single range discard request (git-fixes). - nvme: fix interpretation of DMRSL (git-fixes). - nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes). - nvme: fix passthrough csi check (git-fixes). - nvme: fix per-namespace chardev deletion (git-fixes). - nvme: fix the CRIMS and CRWMS definitions to match the spec (git-fixes). - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes). - nvme: fix the name of Zone Append for verbose logging (git-fixes). - nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes). - nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes). - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes). - nvme: introduce nvme_start_request (bsc#1210565). - nvme: move nvme_multi_css into nvme.h (git-fixes). - nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes). - nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes). - nvme: return err on nvme_init_non_mdts_limits fail (git-fixes). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: set dma alignment to dword (git-fixes). - nvme: set non-mdts limits in nvme_scan_work (git-fixes). - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (git-fixes). - nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes). - nvmet-tcp: add bounds check on Transfer Tag (git-fixes). - nvmet-tcp: fix incomplete data digest send (git-fixes). - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes). - nvmet-tcp: fix regression in data_digest calculation (git-fixes). - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes). - nvmet: add helpers to set the result field for connect commands (git-fixes). - nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes). - nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes). - nvmet: fix I/O Command Set specific Identify Controller (git-fixes). - nvmet: fix Identify Active Namespace ID list handling (git-fixes). - nvmet: fix Identify Controller handling (git-fixes). - nvmet: fix Identify Namespace handling (git-fixes). - nvmet: fix a memory leak (git-fixes). - nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes). - nvmet: fix a use-after-free (git-fixes). - nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes). - nvmet: fix mar and mor off-by-one errors (git-fixes). - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: force reconnect when number of queue changes (git-fixes). - nvmet: looks at the passthrough controller when initializing CAP (git-fixes). - nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes). - nvmet: only allocate a single slab for bvecs (git-fixes). - nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes). - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes). - objtool: Add a missing comma to avoid string concatenation (bsc#1207328). - ocfs2: Fix data corruption after failed write (bsc#1208542). - ocfs2: clear dinode links count in case of error (bsc#1207650). - ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649). - ocfs2: fix crash when mount with quota enabled (bsc#1207640). - ocfs2: fix defrag path triggering jbd2 ASSERT (bsc#1199304). - ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes). - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes). - ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652). - ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651). - ocfs2: fix non-auto defrag path not working issue (bsc#1199304). - ocfs2: fix non-auto defrag path not working issue (git-fixes). - ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770). - ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768). - ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771). - octeon: constify netdev->dev_addr (git-fixes). - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes). - octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes). - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes). - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes). - of/address: Return an error when no valid dma-ranges are found (git-fixes). - opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes). - pNFS/filelayout: Fix coalescing test for single DS (git-fixes). - panic: Consolidate open-coded panic_on_warn checks (bsc#1207328). - panic: Introduce warn_limit (bsc#1207328). - panic: unset panic_on_warn inside panic() (bsc#1207328). - pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes). - pci/aspm: Remove pcie_aspm_pm_state_change() (git-fixes). - pci/dpc: Await readiness of secondary bus after reset (git-fixes). - pci/edr: Clear Device Status after EDR error recovery (git-fixes). - pci/iov: Enlarge virtfn sysfs name buffer (git-fixes). - pci/pm: Always disable PTM for all devices during suspend (git-fixes). - pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes). - pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes). - pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes). - pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes). - pci: Add ACS quirk for Wangxun NICs (git-fixes). - pci: Add SolidRun vendor ID (git-fixes). - pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes). - pci: Align extra resources for hotplug bridges properly (git-fixes). - pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes). - pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes). - pci: Fix dropping valid root bus resources with .end = zero (git-fixes). - pci: Reduce warnings on possible RW1C corruption (git-fixes). - pci: Release resource invalidated by coalescing (git-fixes). - pci: Take other bus devices into account when distributing resources (git-fixes). - pci: Unify delay handling for reset and resume (git-fixes). - pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes). - pci: aardvark: Fix link training (git-fixes). - pci: cadence: Fix Gen2 Link Retraining process (git-fixes). - pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes). - pci: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes). - pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes). - pci: ftpci100: Release the clock resources (git-fixes). - pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes). - pci: hv: Add a per-bus mutex state_lock (bsc#1207185). - pci: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185). - pci: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185). - pci: hv: Use async probing to reduce boot time (bsc#1207185). - pci: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185). - pci: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes). - pci: imx6: Install the fault handler only on compatible match (git-fixes). - pci: loongson: Add more devices that need MRRS quirk (git-fixes). - pci: loongson: Prevent LS7A MRRS increases (git-fixes). - pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes). - pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes). - pci: pciehp: Cancel bringup sequence if card is not present (git-fixes). - pci: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes). - pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes). - pci: qcom: Fix host-init error handling (git-fixes). - pci: qcom: Fix pipe clock imbalance (git-fixes). - pci: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes). - pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes). - pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes). - pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes). - pci: rockchip: Set address alignment for endpoint mode (git-fixes). - pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes). - pci: rockchip: Write PCI Device ID to correct register (git-fixes). - pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes). - pci: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - pci: vmd: Reset VMD config register between soft reboots (git-fixes). - pci: xgene: Revert 'PCI: xgene: Use inbound resources for setup' (git-fixes). - perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes). - perf/core: Call LSM hook after copying perf_event_attr (git fixes). - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes). - perf/core: Fix the same task check in perf_event_set_output (git fixes). - perf/core: Inherit event_caps (git fixes). - perf/x86/amd: fix potential integer overflow on shift of a int (git fixes). - perf/x86/intel/cstate: Add Emerald Rapids (PED-4396). - perf/x86/intel/ds: Fix precise store latency handling (git fixes). - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes). - perf/x86/intel/pt: Fix sampling using single range output (git fixes). - perf/x86/intel/pt: Relax address filter validation (git fixes). - perf/x86/intel/uncore: Add Emerald Rapids (git fixes). - perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes). - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes). - perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes). - perf/x86/intel: Add Emerald Rapids (git fixes). - perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes). - perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes). - perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes). - perf/x86/intel: Fix event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for ADL (git fixes). - perf/x86/intel: Fix pebs event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for SPR (git fixes). - perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes). - perf/x86/msr: Add Emerald Rapids (git fixes). - perf/x86/rapl: Add support for Intel AlderLake-N (git fixes). - perf/x86/rapl: Add support for Intel Emerald Rapids (PED-4394). - perf/x86/rapl: Treat Tigerlake like Icelake (git fixes). - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes). - perf/x86/rapl: fix AMD event handling (git fixes). - perf/x86/uncore: Add Raptor Lake uncore support (git fixes). - perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes). - perf/x86/uncore: Add new Raptor Lake S support (git fixes). - perf/x86/uncore: Clean up uncore_pci_ids (git fixes). - perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf: Always wake the parent event (git fixes). - perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes). - perf: Fix possible memleak in pmu_dev_alloc() (git fixes). - perf: fix perf_event_context->time (git fixes). - phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes). - phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes). - phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes). - phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes). - phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes). - phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes). - pinctrl: amd: Disable and mask interrupts on resume (git-fixes). - pinctrl: aspeed: Fix confusing types in return value (git-fixes). - pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes). - pinctrl: at91-pio4: fix domain name assignment (git-fixes). - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes). - pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes). - pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes). - pinctrl: mediatek: Initialize variable *buf to zero (git-fixes). - pinctrl: mediatek: fix coding style (git-fixes). - pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes). - pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes). - pinctrl: ocelot: Fix alt mode for ocelot (git-fixes). - pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes). - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes). - pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes). - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes). - pinctrl: single: fix potential NULL dereference (git-fixes). - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes). - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes). - platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes). - platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd: Fix refcount leak in amd_pmc_probe (bsc#1210644). - platform/x86/amd: pmc: Add a module parameter to disable workarounds (bsc#1210644). - platform/x86/amd: pmc: Add a workaround for an s0i3 issue on Cezanne (bsc#1210644). - platform/x86/amd: pmc: Add defines for STB events (bsc#1210644). - platform/x86/amd: pmc: Add line break for readability (bsc#1210644). - platform/x86/amd: pmc: Add new ACPI ID AMDI0009 (bsc#1210644). - platform/x86/amd: pmc: Add num_samples message id support to STB (bsc#1210644). - platform/x86/amd: pmc: Add sysfs files for SMU (bsc#1210644). - platform/x86/amd: pmc: Always write to the STB (bsc#1210644). - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN (bsc#1210644). - platform/x86/amd: pmc: Do not dump data after resume from s0i3 on picasso (git-fixes). - platform/x86/amd: pmc: Do not try to read SMU version on Picasso (git-fixes). - platform/x86/amd: pmc: Fix build without debugfs (bsc#1210644). - platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() (bsc#1210644). - platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso (git-fixes). - platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` (git-fixes). - platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init (git-fixes). - platform/x86/amd: pmc: Read SMU version during suspend on Cezanne systems (bsc#1210644). - platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: Utilize SMN index 0 for driver probe (git-fixes). - platform/x86/amd: pmc: Write dummy postcode into the STB DRAM (bsc#1210644). - platform/x86/amd: pmc: add CONFIG_SERIO dependency (git-fixes). - platform/x86/amd: pmc: differentiate STB/SMU messaging prints (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_SUSPEND checks (bsc#1210644). - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes). - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420). - platform/x86: ISST: Remove 8 socket limit (bsc#1211836). - platform/x86: Move AMD platform drivers to separate directory (bsc#1210644). - platform/x86: amd-pmc: Add a message to print resume time info (bsc#1210644). - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Smart Trace Buffer (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Spill to DRAM STB feature (bsc#1210644). - platform/x86: amd-pmc: Avoid reading SMU version at probe time (bsc#1210644). - platform/x86: amd-pmc: Check s0i3 cycle status (bsc#1210644). - platform/x86: amd-pmc: Correct usage of SMU version (git-fixes). - platform/x86: amd-pmc: Downgrade dev_info message to dev_dbg (bsc#1210644). - platform/x86: amd-pmc: Drop CPU QoS workaround (bsc#1210644). - platform/x86: amd-pmc: Drop check for valid alarm time (bsc#1210644). - platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes). - platform/x86: amd-pmc: Fix build error unused-function (bsc#1210644). - platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes). - platform/x86: amd-pmc: Fix compilation without CONFIG_SUSPEND (bsc#1210644). - platform/x86: amd-pmc: Make amd_pmc_stb_debugfs_fops static (bsc#1210644). - platform/x86: amd-pmc: Move FCH init to first use (bsc#1210644). - platform/x86: amd-pmc: Move SMU logging setup out of init (bsc#1210644). - platform/x86: amd-pmc: Move to later in the suspend process (bsc#1210644). - platform/x86: amd-pmc: Only report STB errors when STB enabled (bsc#1210644). - platform/x86: amd-pmc: Output error codes in messages (bsc#1210644). - platform/x86: amd-pmc: Send command to dump data after clearing OS_HINT (bsc#1210644). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1210644). - platform/x86: amd-pmc: Shuffle location of amd_pmc_get_smu_version() (bsc#1210644). - platform/x86: amd-pmc: Simplify error handling and store the pci_dev in amd_pmc_dev structure (bsc#1210644). - platform/x86: amd-pmc: Validate entry into the deepest state on resume (bsc#1210644). - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd` (bsc#1210644). - platform/x86: amd-pmc: fix compilation without CONFIG_RTC_SYSTOHC_DEVICE (bsc#1210644). - platform/x86: amd-pmc: uninitialized variable in amd_pmc_s2d_init() (bsc#1210644). - platform/x86: amd: pmc: Remove __maybe_unused from amd_pmc_suspend_handler() (bsc#1210644). - platform/x86: amd: pmc: provide user message where s0ix is not supported (bsc#1210644). - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes). - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes). - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes). - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes). - platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes). - platform/x86: hp-wmi: Support touchpad on/off (git-fixes). - platform/x86: intel-uncore-freq: add Emerald Rapids support (PED-4390). - platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes). - platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes). - platform/x86: think-lmi: Certificate authentication support (bsc#1210050). - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes). - platform/x86: think-lmi: Correct NVME password handling (git-fixes). - platform/x86: think-lmi: Correct System password interface (git-fixes). - platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes). - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes). - platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050). - platform/x86: think-lmi: Opcode support (bsc#1210050). - platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050). - platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050). - platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050). - platform/x86: think-lmi: add debug_cmd (bsc#1210050). - platform/x86: think-lmi: add missing type attribute (git-fixes). - platform/x86: think-lmi: certificate support clean ups (bsc#1210050). - platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes). - platform/x86: think-lmi: only display possible_values if available (git-fixes). - platform/x86: think-lmi: use correct possible_values delimiters (git-fixes). - platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050). - platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050). - platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050). - platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050). - platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050). - platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050). - platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050). - platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050). - platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050). - platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050). - platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050). - platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050). - platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050). - platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050). - platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050). - platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050). - platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050). - platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050). - platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050). - platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes). - platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050). - platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050). - platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050). - platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050). - platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050). - platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050). - platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050). - platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050). - platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050). - platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050). - platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050). - platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050). - platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050). - platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050). - platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050). - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes). - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes). - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes). - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes). - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes). - pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes). - pm: hibernate: Do not get block device exclusively in test_resume mode (git-fixes). - pm: hibernate: Turn snapshot_test into global variable (git-fixes). - pm: hibernate: fix load_image_and_restore() error path (git-fixes). - power: supply: Fix logic checking if system is running from battery (git-fixes). - power: supply: Ratelimit no data debug output (git-fixes). - power: supply: ab8500: Fix external_power_changed race (git-fixes). - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes). - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes). - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes). - power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes). - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes). - power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes). - power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes). - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes). - power: supply: bq27xxx: expose battery data when CI=1 (git-fixes). - power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes). - power: supply: generic-adc-battery: fix unit scaling (git-fixes). - power: supply: leds: Fix blink to LED on transition (git-fixes). - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes). - power: supply: sc27xx: Fix external_power_changed race (git-fixes). - powercap: fix possible name leak in powercap_register_zone() (git-fixes). - powercap: intel_rapl: add support for Emerald Rapids (PED-4398). - powerpc/64: Always build with 128-bit long double (bsc#1194869). - powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869). - powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869). - powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729). - powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes). - powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612). - powerpc/hv-gpci: Fix hv_gpci event list (bsc#1207935). - powerpc/hv-gpci: Fix hv_gpci event list (git fixes). - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869). - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869). - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes). - powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701). - powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869). - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869). - powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869). - powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869). - powerpc/kexec_file: fix implicit decl error (bsc#1194869). - powerpc/mm: Fix false detection of read faults (bsc#1208864). - powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled (bsc#1210216 ltc#202189). - powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/purgatory: remove PGO flags (bsc#1194869). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729). - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869). - powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869). - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869). - powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869). - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869). - powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729). - powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662). - powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869). - powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662). - powerpc: declare unmodified attribute_group usages const (bsc#1207935). - powerpc: declare unmodified attribute_group usages const (git-fixes). - powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869). - printf: fix errname.c list (git-fixes). - prlimit: do_prlimit needs to have a speculation check (bsc#1209256). - pstore/ram: Add check for kstrdup (git-fixes). - pstore: Revert pmsg_lock back to a normal mutex (git-fixes). - purgatory: fix disabling debug info (git-fixes). - pwm: ab8500: Fix error code in probe() (git-fixes). - pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes). - pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes). - pwm: meson: Fix axg ao mux parents (git-fixes). - pwm: meson: Fix g12a ao clk81 name (git-fixes). - pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes). - pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes). - pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes). - qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001). - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (jsc#SLE-19001). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001). - qed/qede: Fix scheduling while atomic (git-fixes). - qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001). - qede: avoid uninitialized entries in coal_entry array (bsc#1205846). - qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001). - qede: fix interrupt coalescing configuration (bsc#1205846). - quota: Check next/prev free block number after reading from quota file (bsc#1206640). - quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: fix flow control issue of RTL8156A (git-fixes). - r8152: fix the poor throughput for 2.5G devices (git-fixes). - r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes). - r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes). - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes). - radeon: avoid double free in ci_dpm_init() (git-fixes). - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes). - rcu: Fix rcu_torture_read ftrace event (git-fixes). - rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159). - rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes) - rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes) - rdma/bnxt_re: Fix a possible memory leak (git-fixes) - rdma/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes) - rdma/bnxt_re: Fix the page_size used during the MR creation (git-fixes) - rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes) - rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes) - rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes) - rdma/bnxt_re: Remove unnecessary checks (git-fixes) - rdma/bnxt_re: Return directly without goto jumps (git-fixes) - rdma/bnxt_re: Use unique names while registering interrupts (git-fixes) - rdma/bnxt_re: wraparound mbox producer index (git-fixes) - rdma/cm: Trace icm_send_rej event before the cm state is reset (git-fixes) - rdma/cma: Allow UD qp_type to join multicast only (git-fixes) - rdma/cma: Always set static rate to 0 for RoCE (git-fixes) - rdma/core: Fix GID entry ref leak when create_ah fails (git-fixes) - rdma/core: Fix ib block iterator counter overflow (bsc#1207878). - rdma/core: Fix ib block iterator counter overflow (git-fixes) - rdma/core: Fix multiple -Warray-bounds warnings (git-fixes) - rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes) - rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes) - rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes) - rdma/efa: Fix unsupported page sizes in device (git-fixes) - rdma/hns: Fix base address table allocation (git-fixes) - rdma/hns: Fix hns_roce_table_get return value (git-fixes) - rdma/hns: Fix timeout attr in query qp for HIP08 (git-fixes) - rdma/hns: Modify the value of long message loopback slice (git-fixes) - rdma/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383). - rdma/irdma: Add ipv4 check to irdma_find_listener() (git-fixes) - rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383). - rdma/irdma: Fix Local Invalidate fencing (git-fixes) - rdma/irdma: Fix RQ completion opcode (jsc#SLE-18383). - rdma/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383). - rdma/irdma: Fix inline for multiple SGE's (jsc#SLE-18383). - rdma/irdma: Fix memory leak of PBLE objects (git-fixes) - rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes) - rdma/irdma: Increase iWARP CM default rexmit count (git-fixes) - rdma/irdma: Prevent QP use after free (git-fixes) - rdma/irdma: Remove enum irdma_status_code (jsc#SLE-18383). - rdma/irdma: Remove excess error variables (jsc#SLE-18383). - rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes) - rdma/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022). - rdma/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022). - rdma/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255). - rdma/mlx5: Create an indirect flow table for steering anchor (git-fixes) - rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes) - rdma/mlx5: Fix affinity assignment (git-fixes) - rdma/mlx5: Fix flow counter query via DEVX (git-fixes) - rdma/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes) - rdma/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes) - rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes) - rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253). - rdma/mlx5: Use correct device num_ports when modify DC (git-fixes) - rdma/mlx5: Use rdma_umem_for_each_dma_block() (git-fixes) - rdma/rdmavt: Delete unnecessary NULL check (git-fixes) - rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes) - rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes) - rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes) - rdma/rtrs: Fix the last iu->buf leak in err path (git-fixes) - rdma/rxe: Fix access checks in rxe_check_bind_mw (git-fixes) - rdma/rxe: Fix inaccurate constants in rxe_type_info (git-fixes) - rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes) - rdma/rxe: Fix mr->map double free (git-fixes) - rdma/rxe: Fix oops with zero length reads (git-fixes) - rdma/rxe: Fix packet length checks (git-fixes) - rdma/rxe: Fix ref count error in check_rkey() (git-fixes) - rdma/rxe: Fix rxe_cq_post (git-fixes) - rdma/rxe: Fix the error 'trying to register non-static key in rxe_cleanup_task' (git-fixes) - rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes) - rdma/rxe: Make responder handle RDMA Read failures (git-fixes) - rdma/rxe: Prevent faulty rkey generation (git-fixes) - rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes) - rdma/rxe: Remove tasklet call from rxe_cq.c (git-fixes) - rdma/rxe: Remove the unused variable obj (git-fixes) - rdma/rxe: Removed unused name from rxe_task struct (git-fixes) - rdma/siw: Fix potential page_array out of range access (git-fixes) - rdma/siw: Fix user page pinning accounting (git-fixes) - rdma/siw: Remove namespace check from siw_netdev_event() (git-fixes) - rdma/srp: Move large values to a new enum for gcc13 (git-fixes) - rdma/srpt: Add a check for valid 'mad_agent' pointer (git-fixes) - rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes) - rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes) - rdma/vmw_pvrdma: Remove unnecessary check on wr->opcode (git-fixes) - rdma: Handle the return code from dma_resv_wait_timeout() properly (git-fixes) - ref_tracker: use __GFP_NOFAIL more carefully (git-fixes). - regmap: Account for register length when chunking (git-fixes). - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes). - regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes). - regulator: Fix error checking for debugfs_create_dir (git-fixes). - regulator: Flag uncontrollable regulators as always_on (git-fixes). - regulator: Handle deferred clk (git-fixes). - regulator: core: Avoid lockdep reports when resolving supplies (git-fixes). - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes). - regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes). - regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes). - regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes). - regulator: core: Streamline debugfs operations (git-fixes). - regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes). - regulator: fan53555: Explicitly include bits header (git-fixes). - regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes). - regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes). - regulator: max77802: Bounds check regulator id against opmode (git-fixes). - regulator: mt6359: add read check for PMIC MT6359 (git-fixes). - regulator: pca9450: Fix BUCK2 enable_mask (git-fixes). - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes). - regulator: s5m8767: Bounds check id indexing into arrays (git-fixes). - regulator: stm32-pwr: fix of_iomap leak (git-fixes). - reiserfs: Add missing calls to reiserfs_security_free() (git-fixes). - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes). - remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes). - remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes). - remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes). - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes). - remoteproc: st: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes). - remove 'PCI: hv: Use async probing to reduce boot time' (bsc#1207185). - rethook: Reject getting a rethook if RCU is not watching (git-fixes). - rethook: fix a potential memleak in rethook_alloc() (git-fixes). - rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler (git-fixes). - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (git-fixes). - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes). - ring-buffer: Fix kernel-doc (git-fixes). - ring-buffer: Fix race while reader and writer are on the same page (git-fixes). - ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes). - ring-buffer: Sync IRQ works before buffer destruction (git-fixes). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE. - rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435) - rpm/kernel-obs-build.spec.in: Remove SLE11 cruft - rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches - rtc: allow rtc_read_alarm without read_alarm callback (git-fixes). - rtc: efi: Add wakeup support (bsc#1213116). - rtc: efi: Enable SET/GET WAKEUP services as optional (bsc#1213116). - rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116). - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes). - rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes). - rtc: pm8xxx: fix set-alarm race (git-fixes). - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes). - rtc: sun6i: Always export the internal oscillator (git-fixes). - rtmutex: Ensure that the top waiter is always woken up (git-fixes). - s390/ap: fix memory leak in ap_init_qci_info() (git-fixes). - s390/boot: simplify and fix kernel memory layout setup (bsc#1209600). - s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686). - s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes). - s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592). - s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687). - s390/dasd: fix no record found for raw_track_access (bsc#1207574). - s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes). - s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892). - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688). - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689). - s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690). - s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691). - s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692). - s390/pkey: zeroize key blobs (git-fixes bsc#1212619). - s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693). - s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes). - s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes). - s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714). - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() (git-fixes). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes) - sched/core: Avoid obvious double update_rq_clock warning (git-fixes) - sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes) - sched/core: Introduce sched_asym_cpucap_active() (git-fixes) - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes) - sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes) - sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)). - sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325). - sched/fair: sanitize vruntime of entity being placed (bsc#1203325). - sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)). - sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799). - sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes) - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes) - sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes) - sched: Fix DEBUG && !SCHEDSTATS warn (git-fixes) - sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)). - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (git-fixes). - scsi: aacraid: Allocate cmd_priv with scsicmd (git-fixes). - scsi: aic94xx: Add missing check for dma_map_single() (git-fixes). - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes). - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes). - scsi: core: Fix a procfs host directory removal regression (git-fixes). - scsi: core: Fix a source code comment (git-fixes). - scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes). - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes). - scsi: hisi_sas: Check devm_add_action() return value (git-fixes). - scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes). - scsi: hisi_sas: Revert change to limit max hw sectors for v3 HW (bsc#1210230). - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes). - scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes). - scsi: ipr: Work around fortify-string warning (git-fixes). - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes). - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes). - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: libsas: Add sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes). - scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847). - scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes). - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (bsc#1211847). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Update congestion warning notification period (bsc#1211847). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847). - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes). - scsi: megaraid_sas: Fix crash after a double completion (git-fixes). - scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (git-fixes). - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (git-fixes). - scsi: mpi3mr: Fix throttle_groups memory leak (git-fixes). - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (git-fixes). - scsi: mpi3mr: Suppress command reply debug prints (bsc#1211820). - scsi: mpt3sas: Do not print sense pool info twice (git-fixes). - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes). - scsi: mpt3sas: Fix a memory leak (git-fixes). - scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes). - scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix hang in task management (bsc#1211960). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix mem access after free (bsc#1211960). - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960). - scsi: qla2xxx: Fix task management cmd failure (bsc#1211960). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Multi-que support for TMF (bsc#1211960). - scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes). - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes). - scsi: scsi_ioctl: Validate command size (git-fixes). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Revert 'Rework asynchronous resume support' (bsc#1209092). - scsi: ses: Do not attach if enclosure has no components (git-fixes). - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes). - scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes). - scsi: smartpqi: Add controller cache flush during rmmod (bsc#1207315). - scsi: smartpqi: Add new controller PCI IDs (bsc#1207315). - scsi: smartpqi: Change sysfs raid_level attribute to N/A for controllers (bsc#1207315). - scsi: smartpqi: Change version to 2.1.20-035 (bsc#1207315). - scsi: smartpqi: Convert to host_tagset (bsc#1207315). - scsi: smartpqi: Correct device removal for multi-actuator devices (bsc#1207315). - scsi: smartpqi: Correct max LUN number (bsc#1207315). - scsi: smartpqi: Initialize feature section info (bsc#1207315). - scsi: smartpqi: Replace one-element array with flexible-array member (bsc#1207315). - scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes). - scsi: stex: Fix gcc 13 warnings (git-fixes). - scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes). - scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes). - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes). - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes). - scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes). - scsi: ufs: core: Enable link lost interrupt (git-fixes). - scsi_disk kABI: add back members (bsc#1209092). - sctp: fail if no bound addresses can be used for a given scope (bsc#1206677). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - seccomp: Move copy_seccomp() to no failure path (bsc#1210817). - sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes). - selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes). - selftests mount: Fix mount_setattr_test builds failed (git-fixes). - selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103). - selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103). - selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes). - selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232). - selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232). - selftests/powerpc: Move perror closer to its use (bsc#1206232). - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes). - selftests/resctrl: Allow ->setup() to return errors (git-fixes). - selftests/resctrl: Check for return value after write_schemata() (git-fixes). - selftests/resctrl: Extend CPU vendor detection (git-fixes). - selftests/resctrl: Move ->setup() call outside of test specific branches (git-fixes). - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes). - selftests/sgx: Add 'test_encl.elf' to TEST_FILES (git-fixes). - selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes). - selftests: Provide local define of __cpuid_count() (git-fixes). - selftests: forwarding: lib: quote the sysctl values (git-fixes). - selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: depend on SYN_COOKIES (git-fixes). - selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: sockopt: return error if wrong mark (git-fixes). - selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes). - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes). - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes). - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes). - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes). - selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes). - selftests: sigaltstack: fix -Wuninitialized (git-fixes). - selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes). - selftests: xsk: Disable IPv6 on VETH1 (git-fixes). - selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes). - selinux: do not use make's grouped targets feature yet (git-fixes). - selinux: ensure av_permissions.h is built when needed (git-fixes). - selinux: fix Makefile dependencies of flask.h (git-fixes). - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes). - serial: 8250: Add missing wakeup event reporting (git-fixes). - serial: 8250: Reinit port->pm on port specific driver unbind (git-fixes). - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes). - serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes). - serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes). - serial: 8250: omap: Fix freeing of resources on failed register (git-fixes). - serial: 8250_bcm7271: Fix arbitration handling (git-fixes). - serial: 8250_bcm7271: balance clk_enable calls (git-fixes). - serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes). - serial: 8250_dma: Fix DMA Rx rearm race (git-fixes). - serial: 8250_em: Fix UART port type (git-fixes). - serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes). - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes). - serial: 8250_fsl: fix handle_irq locking (git-fixes). - serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes). - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes). - serial: Add support for Advantech PCI-1611U card (git-fixes). - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes). - serial: atmel: do not enable IRQs prematurely (git-fixes). - serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes). - serial: fsl_lpuart: Fix comment typo (git-fixes). - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes). - serial: lantiq: add missing interrupt ack (git-fixes). - serial: qcom-geni: fix console shutdown hang (git-fixes). - serial: qcom-geni: fix enabling deactivated interrupt (git-fixes). - serial: sc16is7xx: setup GPIO controller later in probe (git-fixes). - serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes). - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes). - sfc: Change VF mac via PF as first preference if available (git-fixes). - sfc: Fix module EEPROM reporting for QSFP modules (git-fixes). - sfc: Fix use-after-free due to selftest_work (git-fixes). - sfc: correctly advertise tunneled IPv6 segmentation (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: ef10: do not overwrite offload features at NIC reset (git-fixes). - sfc: fix TX channel offset when using legacy interrupts (git-fixes). - sfc: fix considering that all channels have TX queues (git-fixes). - sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes). - sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes). - sfc: include vport_id in filter spec hash and equal() (git-fixes). - signal handling: do not use BUG_ON() for debugging (bsc#1210439). - signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861). - signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes). - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes). - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes). - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816). - signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816). - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816). - signal: Implement force_fatal_sig (git-fixes). - smb3.1.1: add new tree connect ShareFlags (bsc#1193629). - smb3: Add missing locks to protect deferred close file list (git-fixes). - smb3: Close all deferred handles of inode in case of handle lease break (bsc#1193629). - smb3: Close deferred file handles in case of handle lease break (bsc#1193629). - smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629). - smb3: display debug information better for encryption (bsc#1193629). - smb3: drop reference to cfile before sending oplock break (bsc#1193629). - smb3: fix problem remounting a share after shutdown (bsc#1193629). - smb3: fix unusable share after force unmount failure (bsc#1193629). - smb3: force unmount was failing to close deferred close files (bsc#1193629). - smb3: improve parallel reads of large files (bsc#1193629). - smb3: lower default deferred close timeout to address perf regression (bsc#1193629). - smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629). - smb3: move some common open context structs to smbfs_common (bsc#1193629). - soc/fsl/qe: fix usb.c build errors (git-fixes). - soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 (git-fixes). - soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes). - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes). - soundwire: cadence: Do not overflow the command FIFOs (git-fixes). - soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes). - soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes). - soundwire: qcom: fix storing port config out-of-bounds (git-fixes). - soundwire: qcom: gracefully handle too many ports in DT (git-fixes). - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes). - spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes). - spi: cadence-quadspi: fix suspend-resume implementations (git-fixes). - spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes). - spi: dw: Round of n_bytes to power of 2 (git-fixes). - spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes). - spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes). - spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes). - spi: lpspi: disable lpspi module irq in DMA mode (git-fixes). - spi: qup: Do not skip cleanup in remove's error path (git-fixes). - spi: qup: Request DMA before enabling clocks (git-fixes). - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes). - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (git-fixes). - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - spi: spidev: remove debug messages that access spidev->spi without locking (git-fixes). - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes). - spi: tegra210-quad: Fix combined sequence (bsc#1212584) - spi: tegra210-quad: Fix iterator outside loop (git-fixes). - spi: tegra210-quad: Fix validate combined sequence (git-fixes). - spi: tegra210-quad: Multi-cs support (bsc#1212584) - squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes). - staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes). - staging: iio: resolver: ads1210: fix config mode (git-fixes). - staging: mt7621-dts: change palmbus address to lower case (git-fixes). - staging: mt7621-dts: change some node hex addresses to lower case (git-fixes). - staging: octeon: delete my name from TODO contact (git-fixes). - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes). - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (git-fixes). - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (git-fixes). - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes). - stat: fix inconsistency between struct stat and struct compat_stat (git-fixes). - struct ci_hdrc: hide new member at end (git-fixes). - struct dwc3: mask new member (git-fixes). - struct uvc_device move flush_status new member to end (git-fixes). - sunrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes). - sunrpc: Clean up svc_deferred_class trace events (git-fixes). - sunrpc: Do not dereference xprt->snd_task if it's a cookie (git-fixes). - sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes). - sunrpc: Fix a server shutdown leak (git-fixes). - sunrpc: Fix missing release socket in rpc_sockname() (git-fixes). - sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes). - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes). - sunrpc: Fix socket waits for write buffer space (git-fixes). - sunrpc: Return true/false (not 1/0) from bool functions (git-fixes). - sunrpc: Update trace flags (git-fixes). - sunrpc: Use BIT() macro in rpc_show_xprt_state() (git-fixes). - sunrpc: ensure the matching upcall is in-flight upon downcall (git-fixes). - sunrpc: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775). - sunrpc: only free unix grouplist after RCU settles (git-fixes). - swim3: add missing major.h include (git-fixes). - swiotlb: Free tbl memory in swiotlb_exit() (jsc#PED-3259). - swiotlb: add a SWIOTLB_ANY flag to lift the low memory restriction (PED-3259). - swiotlb: avoid potential left shift overflow (PED-3259). - swiotlb: clean up some coding style and minor issues (PED-3259). - swiotlb: consolidate rounding up default_nslabs (PED-3259). - swiotlb: do not panic when the swiotlb buffer can't be allocated (PED-3259). - swiotlb: ensure a segment does not cross the area boundary (PED-3259). - swiotlb: fail map correctly with failed io_tlb_default_mem (PED-3259). - swiotlb: fix a typo (PED-3259). - swiotlb: fix passing local variable to debugfs_create_ulong() (PED-3259). - swiotlb: fix setting ->force_bounce (PED-3259). - swiotlb: fix use after free on error handling path (PED-3259). - swiotlb: make swiotlb_exit a no-op if SWIOTLB_FORCE is set (PED-3259). - swiotlb: make the swiotlb_init interface more useful (PED-3259). - swiotlb: merge swiotlb-xen initialization into swiotlb (jsc#PED-3259). - swiotlb: panic if nslabs is too small (PED-3259). - swiotlb: pass a gfp_mask argument to swiotlb_init_late (PED-3259). - swiotlb: provide swiotlb_init variants that remap the buffer (PED-3259). - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes). - swiotlb: remove a useless return in swiotlb_init (PED-3259). - swiotlb: remove swiotlb_init_with_tbl and swiotlb_init_late_with_tbl (PED-3259). - swiotlb: remove unused fields in io_tlb_mem (PED-3259). - swiotlb: rename swiotlb_late_init_with_default_size (PED-3259). - swiotlb: simplify debugfs setup (jsc#PED-3259). - swiotlb: simplify swiotlb_max_segment (PED-3259). - swiotlb: split up the global swiotlb lock (PED-3259). - swiotlb: use the right nslabs value in swiotlb_init_remap (PED-3259). - swiotlb: use the right nslabs-derived sizes in swiotlb_init_late (PED-3259). - sysctl: add a new register_sysctl_init() interface (bsc#1207328). - task_work: Decouple TIF_NOTIFY_SIGNAL and task_work (git-fixes). - task_work: Introduce task_work_pending (git-fixes). - test_firmware: Use kstrtobool() instead of strtobool() (git-fixes). - test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes). - test_firmware: prevent race conditions by a correct implementation of locking (git-fixes). - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes). - thermal/core: Remove duplicate information when an error occurs (git-fixes). - thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes). - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes). - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes). - thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes). - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes). - thermal/drivers/tsens: fix slope values for msm8939 (git-fixes). - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes). - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes). - thermal: intel: Fix unsigned comparison with less than zero (git-fixes). - thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes). - thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes). - thermal: intel: quark_dts: fix error pointer dereference (git-fixes). - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes). - thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Disable interrupt auto clear for rings (git-fixes). - thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165). - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes). - thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes). - thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes). - thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes). - timers: Prevent union confusion from unexpected (git-fixes) - tls: Skip tls_append_frag on zero copy size (git-fixes). - tools/iio/iio_utils:fix memory leak (git-fixes). - tools/virtio: compile with -pthread (git-fixes). - tools/virtio: fix the vringh test for virtio ring changes (git-fixes). - tools/virtio: fix virtio_test execution (git-fixes). - tools/virtio: initialize spinlocks in vring_test.c (git-fixes). - tools: bpftool: Remove invalid \' json escape (git-fixes). - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes). - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes). - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes). - tpm, tpm_tis: Request threaded interrupt handler (git-fixes). - tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes). - tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes). - trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes). - trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace_events_hist: add check for return value of 'create_hist_field' (git-fixes). - tracing/fprobe: Fix to check whether fprobe is registered correctly (git-fixes). - tracing/hist: Fix issue of losting command info in error_log (git-fixes). - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes). - tracing/hist: Fix wrong return value in parse_action_params() (git-fixes). - tracing/histograms: Allow variables to have some modifiers (git-fixes). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes). - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes). - tracing/probes: Handle system names with hyphens (git-fixes). - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes). - tracing: Add '__rel_loc' using trace event macros (git-fixes). - tracing: Add DYNAMIC flag for dynamic events (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - tracing: Add trace_array_puts() to write into instance (git-fixes). - tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes). - tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing: Avoid adding tracer option before update_tracer_options (git-fixes). - tracing: Check field value in hist_field_name() (git-fixes). - tracing: Do not let histogram values have some modifiers (git-fixes). - tracing: Do not use out-of-sync va_list in event printing (git-fixes). - tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes). - tracing: Fix a kmemleak false positive in tracing_map (git-fixes). - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes). - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes). - tracing: Fix issue of missing one synthetic field (git-fixes). - tracing: Fix mismatched comment in __string_len (git-fixes). - tracing: Fix permissions for the buffer_percent file (git-fixes). - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes). - tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes). - tracing: Fix race where histograms can be called before the event (git-fixes). - tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes). - tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes). - tracing: Fix warning on variable 'struct trace_array' (git-fixes). - tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes). - tracing: Free error logs of tracing instances (git-fixes). - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes). - tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350). - tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes). - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes). - tracing: Have type enum modifications copy the strings (git-fixes). - tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes). - tracing: Make splice_read available again (git-fixes). - tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes). - tracing: Make tp_printk work on syscall tracepoints (git-fixes). - tracing: Make tracepoint lockdep check actually test something (git-fixes). - tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350). - tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes). - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes). - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes). - tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes). - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes). - tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes). - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes). - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes). - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes). - tty: serial: imx: Handle RS485 DE signal active high (git-fixes). - tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes). - tty: serial: imx: fix rs485 rx after tx (git-fixes). - tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes). - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes). - tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes). - tun: annotate access to queue->trans_start (jsc#PED-370). - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes). - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - ubi: ensure that VID header offset + VID header size &lt;= alloc, size (bsc#1210584). - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328). - udf: Avoid double brelse() in udf_rename() (bsc#1213032). - udf: Check consistency of Space Bitmap Descriptor (bsc#1210771). - udf: Define EFSCORRUPTED error code (bsc#1213038). - udf: Detect system inodes linked into directory hierarchy (bsc#1213114). - udf: Discard preallocation before extending file with a hole (bsc#1213036). - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035). - udf: Do not bother merging very long extents (bsc#1213040). - udf: Do not update file length for failed writes to inline files (bsc#1213041). - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649). - udf: Fix error handling in udf_new_inode() (bsc#1213112). - udf: Fix extending file within last block (bsc#1213037). - udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034). - udf: Preserve link count of system files (bsc#1213113). - udf: Support splicing to file (bsc#1210770). - udf: Truncate added extents on failed expansion (bsc#1213039). - update internal module version number for cifs.ko (bsc#1193629). - usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes). - usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes). - usb: cdns3: Fix issue with using incorrect PCI device function (git-fixes). - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes). - usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes). - usb: cdnsp: Fixes issue with redundant Status Stage (git-fixes). - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes). - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes). - usb: chipidea: core: fix possible concurrent when switch role (git-fixes). - usb: chipidea: fix memory leak with using debugfs_lookup() (git-fixes). - usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes). - usb: chipidea: imx: avoid unnecessary probe defer (git-fixes). - usb: core: Add routines for endpoint checks in old drivers (git-fixes). - usb: core: Do not hold device lock while reading the 'descriptors' sysfs file (git-fixes). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes). - usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes). - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes). - usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes). - usb: dwc3: Align DWC3_EP_* flag macros (git-fixes). - usb: dwc3: Fix a repeated word checkpatch warning (git-fixes). - usb: dwc3: Fix a typo in field name (git-fixes). - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes). - usb: dwc3: core: Host wake up support from system suspend (git-fixes). - usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes). - usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes). - usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes). - usb: dwc3: fix memory leak with using debugfs_lookup() (git-fixes). - usb: dwc3: fix runtime pm imbalance on probe errors (git-fixes). - usb: dwc3: fix runtime pm imbalance on unbind (git-fixes). - usb: dwc3: fix use-after-free on core driver unbind (git-fixes). - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes). - usb: dwc3: gadget: Change condition for processing suspend event (git-fixes). - usb: dwc3: gadget: Delay issuing End Transfer (git-fixes). - usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes). - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes). - usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes). - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes). - usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes). - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes). - usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes). - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes). - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes). - usb: dwc3: qcom: Fix potential memory leak (git-fixes). - usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes). - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes). - usb: dwc3: qcom: clean up icc init (git-fixes). - usb: dwc3: qcom: clean up suspend callbacks (git-fixes). - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes). - usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes). - usb: dwc3: qcom: fix gadget-only builds (git-fixes). - usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes). - usb: dwc3: qcom: fix wakeup implementation (git-fixes). - usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes). - usb: dwc3: qcom: suppress unused-variable warning (git-fixes). - usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes). - usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes). - usb: ene_usb6250: Allocate enough memory for full object (git-fixes). - usb: fix memory leak with using debugfs_lookup() (git-fixes). - usb: fotg210: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes). - usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes). - usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes). - usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes). - usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes). - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes). - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes). - usb: gadget: f_hid: fix refcount leak on error path (git-fixes). - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes). - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes). - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes). - usb: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes). - usb: gadget: u_audio: do not let userspace block driver unbind (git-fixes). - usb: gadget: u_ether: Fix host MAC address case (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes). - usb: gadget: udc: do not clear gadget driver.bus (git-fixes). - usb: gadget: udc: fix NULL dereference in remove() (git-fixes). - usb: hide unused usbfs_notify_suspend/resume functions (git-fixes). - usb: host: xhci-rcar: remove leftover quirk handling (git-fixes). - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes). - usb: isp116x: fix memory leak with using debugfs_lookup() (git-fixes). - usb: isp1362: fix memory leak with using debugfs_lookup() (git-fixes). - usb: max-3421: Fix setting of I/O pins (git-fixes). - usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes). - usb: musb: Add and use inline function musb_otg_state_string (git-fixes). - usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes). - usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes). - usb: musb: remove schedule work called after flush (git-fixes). - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes). - usb: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes). - usb: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes). - usb: serial: option: add Quectel EC200U modem (git-fixes). - usb: serial: option: add Quectel EM05-G (CS) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (GR) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (RS) modem (git-fixes). - usb: serial: option: add Quectel EM05CN (SG) modem (git-fixes). - usb: serial: option: add Quectel EM05CN modem (git-fixes). - usb: serial: option: add Quectel EM061KGL series (git-fixes). - usb: serial: option: add Quectel RM500U-CN modem (git-fixes). - usb: serial: option: add Telit FE990 compositions (git-fixes). - usb: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes). - usb: serial: option: add support for VW/Skoda 'Carstick LTE' (git-fixes). - usb: sisusbvga: Add endpoint checks (git-fixes). - usb: sl811: fix memory leak with using debugfs_lookup() (git-fixes). - usb: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes). - usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes). - usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes). - usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes). - usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes). - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix multiple times discover svids error (git-fixes). - usb: typec: tcpm: fix warning when handle discover_identity message (git-fixes). - usb: typec: ucsi: Do not attempt to resume the ports before they exist (git-fixes). - usb: typec: ucsi: Do not warn on probe deferral (git-fixes). - usb: typec: ucsi: Fix command cancellation (git-fixes). - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes). - usb: ucsi: Fix ucsi->connector race (git-fixes). - usb: ucsi_acpi: Increase the command completion timeout (git-fixes). - usb: uhci: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes). - usb: uhci: fix memory leak with using debugfs_lookup() (git-fixes). - usb: usbfs: Enforce page requirements for mmap (git-fixes). - usb: usbfs: Use consistent mmap functions (git-fixes). - usb: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes). - usb: uvc: Enumerate valid values for color matching (git-fixes). - usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes). - usb: xhci: tegra: fix sleep in atomic call (git-fixes). - usrmerge: Adjust module path in the kernel sources (bsc#1212835). With the module path adjustment applied as source patch only ALP/Tumbleweed kernel built on SLE/Leap needs the path changed back to non-usrmerged. - usrmerge: Compatibility with earlier rpm (boo#1211796) - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (jsc#PED-1549). - vDPA: check virtio device features to detect MQ (jsc#PED-1549). - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (jsc#PED-1549). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: modify vcs_size() handling in vcs_read() (git-fixes). - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes). - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes). - vdpa/ifcvf: fix the calculation of queuepair (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#SLE-19253). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#PED-1549). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253). - vdpa/mlx5: Fix rule forwarding VLAN to TIR (jsc#PED-1549). - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253). - vdpa/mlx5: Fix wrong mac address deletion (jsc#PED-1549). - vdpa/mlx5: Initialize CVQ iotlb spinlock (jsc#PED-1549). - vdpa/mlx5: should not activate virtq object when suspended (jsc#PED-1549). - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (git-fixes). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#PED-1549). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253). - vdpa: Use BIT_ULL for bit operations (jsc#PED-1549). - vdpa: conditionally fill max max queue pair for stats (jsc#PED-1549). - vdpa: fix use-after-free on vp_vdpa_remove (git-fixes). - vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes). - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes). - vduse: Fix NULL pointer dereference on sysfs access (jsc#PED-1549). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (jsc#PED-1549). - vduse: avoid empty string for dev name (jsc#PED-1549). - vduse: check that offset is within bounds in get_config() (jsc#PED-1549). - vduse: fix memory corruption in vduse_dev_ioctl() (jsc#PED-1549). - vduse: prevent uninitialized memory accesses (jsc#PED-1549). - vfio/type1: prevent underflow of locked_vm via exec() (git-fixes). - vfio/type1: restore locked_vm (git-fixes). - vfio/type1: track locked_vm per dma (git-fixes). - vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642). - vfs: filename_create(): fix incorrect intent (bsc#1197534). - vfs: make sync_filesystem return errors from ->sync_fs (git-fixes). - vhost-vdpa: fix an iotlb memory leak (jsc#PED-1549). - vhost-vdpa: free iommu domain after last use during cleanup (jsc#PED-1549). - vhost/net: Clear the pending messages when the backend is removed (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (jsc#PED-1549). - vhost_vdpa: fix unmap process in no-batch mode (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253). - virt/coco/sev-guest: Add throttling awareness (bsc#1209927). - virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927). - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927). - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927). - virt/coco/sev-guest: Do some code style cleanups (bsc#1209927). - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927). - virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927). - virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449). - virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449). - virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449). - virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927). - virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449). - virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449). - virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449). - virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes). - virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes). - virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes). - virtio_net: split free_unused_bufs() (git-fixes). - virtio_net: suppress cpu stall when free_unused_bufs (git-fixes). - virtio_pci: modify ENOENT to EINVAL (git-fixes). - virtio_ring: do not update event idx on get_buf (git-fixes). - vmci: check context->notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes). - vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes). - vmxnet3: move rss code block under eop descriptor (bsc#1208212). - vmxnet3: use gro callback when UPT is enabled (bsc#1209739). - vp_vdpa: fix the crash in hot unplug with vp_vdpa (git-fixes). - w1: fix loop in w1_fini() (git-fixes). - w1: w1_therm: fix locking behavior in convert_t (git-fixes). - wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes) - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617). - watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes). - watchdog: allow building BCM7038_WDT for BCM4908 (bsc#1208619). - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes). - watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497). - watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497). - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes). - watchdog: ixp4xx: Implement restart (bsc#1208619). - watchdog: ixp4xx: Rewrite driver to use core (bsc#1208619). - watchdog: ixp4xx_wdt: Fix address space warning (bsc#1208619). - watchdog: menz069_wdt: fix watchdog initialisation (git-fixes). - watchdog: orion_wdt: support pretimeout on Armada-XP (bsc#1208619). - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes). - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes). - watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes). - wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes). - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes). - wifi: ath11k: allow system suspend to survive ath11k (git-fixes). - wifi: ath11k: fix SAC bug on peer addition with sta band migration (git-fixes). - wifi: ath11k: fix deinitialization of firmware resources (git-fixes). - wifi: ath11k: fix writing to unintended memory region (git-fixes). - wifi: ath11k: reduce the MHI timeout to 20s (bsc#1207948). - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes). - wifi: ath6kl: minor fix for allocation size (git-fixes). - wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes). - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes). - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes). - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes). - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: convert msecs to jiffies where needed (git-fixes). - wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes). - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes). - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes). - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes). - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes). - wifi: ath9k: use proper statements in conditionals (git-fixes). - wifi: ath: Silence memcpy run-time false positive warning (git-fixes). - wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes). - wifi: b43: fix incorrect __packed annotation (git-fixes). - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes). - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes). - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes). - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes). - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes). - wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes). - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes). - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes). - wifi: cfg80211: Fix use after free for wext (git-fixes). - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (git-fixes). - wifi: cfg80211: fix locking in regulatory disconnect (git-fixes). - wifi: cfg80211: fix locking in sched scan stop work (git-fixes). - wifi: cfg80211: rewrite merging of inherited elements (git-fixes). - wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes). - wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes). - wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes). - wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes). - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes). - wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes). - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes). - wifi: iwlwifi: fw: fix DBGI dump (git-fixes). - wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes). - wifi: iwlwifi: fw: move memset before early return (git-fixes). - wifi: iwlwifi: make the loop for card preparation effective (git-fixes). - wifi: iwlwifi: mvm: check firmware response size (git-fixes). - wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes). - wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes). - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes). - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes). - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (git-fixes). - wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes). - wifi: iwlwifi: mvm: initialize seq variable (git-fixes). - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes). - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes). - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes). - wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes). - wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes). - wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes). - wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes). - wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes). - wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (bsc#1209980). - wifi: mac80211: adjust scan cancel comment/check (git-fixes). - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes). - wifi: mac80211: fix min center freq offset tracing (git-fixes). - wifi: mac80211: fix qos on mesh interfaces (git-fixes). - wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes). - wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes). - wifi: mac80211: simplify chanctx allocation (git-fixes). - wifi: mt7601u: fix an integer underflow (git-fixes). - wifi: mt76: add flexible polling wait-interval support (git-fixes). - wifi: mt76: add memory barrier to SDIO queue kick (bsc#1209980). - wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes). - wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1209980). - wifi: mt76: fix 6GHz high channel not be scanned (git-fixes). - wifi: mt76: fix receiving LLC packets on mt7615/mt7915 (bsc#1209980). - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes). - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes). - wifi: mt76: mt7915: add missing of_node_put() (bsc#1209980). - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work (bsc#1209980). - wifi: mt76: mt7915: check return value before accessing free_block_num (bsc#1209980). - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() (bsc#1209980). - wifi: mt76: mt7915: expose device tree match table (git-fixes). - wifi: mt76: mt7915: fix mcs value in ht mode (bsc#1209980). - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit (git-fixes). - wifi: mt76: mt7915: fix mt7915_mac_set_timing() (bsc#1209980). - wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup (bsc#1209980). - wifi: mt76: mt7915: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() (bsc#1209980). - wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` (git-fixes). - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes). - wifi: mt76: mt7921e: fix crash in chip reset fail (bsc#1209980). - wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix rmmod crash in driver reload test (bsc#1209980). - wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes). - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (git-fixes). - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume (bsc#1209980). - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (bsc#1209980). - wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes). - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes). - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes). - wifi: mwifiex: mark OF related data as maybe unused (git-fixes). - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes). - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes). - wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes). - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes). - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes). - wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes). - wifi: rt2x00: Fix memory leak when handling surveys (git-fixes). - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes). - wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes). - wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes). - wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes). - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes). - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes). - wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes). - wifi: rtw89: Add missing check for alloc_workqueue (git-fixes). - wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes). - wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes). - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes). - wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wireguard: ratelimiter: use hrtimer in selftest (git-fixes) - workqueue: Fix hung time report of worker pools (bsc#1211044). - workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044). - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044). - workqueue: Warn when a new worker could not be created (bsc#1211044). - workqueue: Warn when a rescuer could not be created (bsc#1211044). - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769). - writeback: avoid use-after-free after removing device (bsc#1207638). - writeback: fix call of incorrect macro (bsc#1213024). - writeback: fix dereferencing NULL mapping->host on writeback_page_template (git-fixes). - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes). - x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes). - x86/ACPI/boot: Use FADT version to check support for online capable (git-fixes). - x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes). - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes). - x86/MCE/AMD: Use an u64 for bank_map (git-fixes). - x86/PAT: Have pat_enabled() properly reflect state when running on Xen (git-fixes). - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes). - x86/acpi/boot: Correct acpi_is_processor_usable() check (git-fixes). - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (git-fixes). - x86/alternative: Make debug-alternative selective (bsc#1206578). - x86/alternative: Report missing return thunk details (git-fixes). - x86/alternative: Support relocations in alternatives (bsc#1206578). - x86/amd: Use IBPB for firmware calls (git-fixes). - x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848). - x86/asm: Fix an assembler warning with current binutils (git-fixes). - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes). - x86/boot: Skip realmode init code when running as Xen PV guest (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes). - x86/bugs: Add 'unknown' reporting for MMIO Stale Data (git-fixes). - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes). - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes). - x86/bugs: Warn when 'ibrs' mitigation is selected on Enhanced IBRS parts (git-fixes). - x86/build: Avoid relocation information in final vmlinux (bsc#1187829). - x86/cpu: Add CPU model numbers for Meteor Lake (git fixes). - x86/cpu: Add Raptor Lake to Intel family (git fixes). - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes). - x86/cpu: Add new Raptor Lake CPU model number (git fixes). - x86/cpu: Add several Intel server CPU model numbers (git fixes). - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - x86/cpufeatures: Introduce x2AVIC CPUID bit (bsc#1208619). - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes). - x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes). - x86/entry: Avoid very early RET (git-fixes). - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes). - x86/entry: Do not call error_entry() for XENPV (git-fixes). - x86/entry: Move CLD to the start of the idtentry macro (git-fixes). - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes). - x86/entry: Switch the stack after error_entry() returns (git-fixes). - x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu: Cache xfeature flags from CPUID (git-fixes). - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes). - x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes). - x86/fpu: Mark init functions __init (bsc#1212448). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448). - x86/fpu: Prevent FPU state corruption (git-fixes). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes). - x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes). - x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes). - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes). - x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes). - x86/init: Initialize signal frame size late (bsc#1212448). - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes). - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes). - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes). - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes). - x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes). - x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes). - x86/microcode/AMD: Fix mixed steppings support (git-fixes). - x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes). - x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes). - x86/microcode: Add explicit CPU vendor dependency (git-fixes). - x86/microcode: Adjust late loading result reporting message (git-fixes). - x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes). - x86/microcode: Print previous version of microcode after reload (git-fixes). - x86/microcode: Rip out the OLD_INTERFACE (git-fixes). - x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes). - x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes). - x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Initialize text poking earlier (bsc#1212448). - x86/mm: Use mm_alloc() in poking_init() (bsc#1212448). - x86/mm: Use proper mask when setting PUD mapping (git-fixes). - x86/mm: fix poking_init() for Xen PV guests (git-fixes). - x86/msi: Fix msi message data shadow struct (git-fixes). - x86/msr: Add AMD CPPC MSR definitions (bsc#1212445). - x86/msr: Remove .fixup usage (git-fixes). - x86/nospec: Unwreck the RSB stuffing (git-fixes). - x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes). - x86/pat: Fix x86_has_pat_wp() (git-fixes). - x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes). - x86/perf/zhaoxin: Add stepping check for ZXC (git fixes). - x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes). - x86/perf: Default set FREEZE_ON_SMI for all (git fixes). - x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes). - x86/resctrl: Fix min_cbm_bits for AMD (git-fixes). - x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes). - x86/sgx: Fix free page accounting (git-fixes). - x86/sgx: Fix race between reclaimer and page fault handler (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/signal: Fix the value returned by strict_sas_size() (git-fixes). - x86/speculation/mmio: Print SMT warning (git-fixes). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes). - x86/static_call: Serialize __static_call_fixup() properly (git-fixes). - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes). - x86/topology: Fix duplicated core ID within a package (git-fixes). - x86/topology: Fix multiple packages shown on a single-package system (git-fixes). - x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes). - x86/tsx: Add a feature bit for TSX control MSR support (git-fixes). - x86/tsx: Disable TSX development mode at boot (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes). - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes). - x86/xen: fix secondary processor fpu initialization (bsc#1212869). - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Fix return value of __setup handlers (git-fixes). - x86: Handle idle=nomwait cmdline properly for x86_idle (bsc#1208619). - x86: Remove vendor checks from prefer_mwait_c1_over_halt (bsc#1208619). - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (git-fixes). - x86: centralize setting SWIOTLB_FORCE when guest memory encryption is enabled (jsc#PED-3259). - x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (git-fixes). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: remove cruft from &lt;asm/dma-mapping.h> (PED-3259). - xen-netfront: Fix NULL sring after live migration (git-fixes). - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes). - xen/arm: Fix race in RB-tree based P2M accounting (git-fixes) - xen/netback: do not do grant copy across page boundary (git-fixes). - xen/netback: do some code cleanup (git-fixes). - xen/netback: fix build warning (git-fixes). - xen/netback: use same error messages for same errors (git-fixes). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes). - xen/platform-pci: add missing free_irq() in error path (git-fixes). - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: convert ptag flags to unsigned (git-fixes). - xfs: do not assert fail on perag references on teardown (git-fixes). - xfs: do not leak btree cursor when insrec fails after a split (git-fixes). - xfs: estimate post-merge refcounts correctly (bsc#1208183). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix rm_offset flag handling in rmap keys (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: hoist refcount record merge predicates (bsc#1208183). - xfs: initialize the check_owner object fully (git-fixes). - xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: remove xfs_setattr_time() declaration (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes). - xfs: zero inode fork buffer at allocation (git-fixes). - xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci: Fix incorrect tracking of free space on transfer rings (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Free the command allocated for setting LPM if we return early (git-fixes). - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes). - xhci: fix debugfs register accesses while suspended (git-fixes). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes). - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes). - xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes). - zram: do not lookup algorithm in backends table (git-fixes). Important SUSE bug 1065729 SUSE bug 1109158 SUSE bug 1142685 SUSE bug 1152472 SUSE bug 1152489 SUSE bug 1155798 SUSE bug 1160435 SUSE bug 1166486 SUSE bug 1172073 SUSE bug 1174777 SUSE bug 1177529 SUSE bug 1186449 SUSE bug 1187829 SUSE bug 1189998 SUSE bug 1189999 SUSE bug 1191731 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1195175 SUSE bug 1195655 SUSE bug 1195921 SUSE bug 1196058 SUSE bug 1197534 SUSE bug 1197617 SUSE bug 1198101 SUSE bug 1198400 SUSE bug 1198438 SUSE bug 1198835 SUSE bug 1199304 SUSE bug 1199701 SUSE bug 1200054 SUSE bug 1202353 SUSE bug 1202633 SUSE bug 1203039 SUSE bug 1203200 SUSE bug 1203325 SUSE bug 1203331 SUSE bug 1203332 SUSE bug 1203693 SUSE bug 1203906 SUSE bug 1204356 SUSE bug 1204363 SUSE bug 1204662 SUSE bug 1204993 SUSE bug 1205153 SUSE bug 1205191 SUSE bug 1205205 SUSE bug 1205544 SUSE bug 1205650 SUSE bug 1205756 SUSE bug 1205758 SUSE bug 1205760 SUSE bug 1205762 SUSE bug 1205803 SUSE bug 1205846 SUSE bug 1206024 SUSE bug 1206036 SUSE bug 1206056 SUSE bug 1206057 SUSE bug 1206103 SUSE bug 1206224 SUSE bug 1206232 SUSE bug 1206340 SUSE bug 1206459 SUSE bug 1206492 SUSE bug 1206493 SUSE bug 1206552 SUSE bug 1206578 SUSE bug 1206640 SUSE bug 1206649 SUSE bug 1206677 SUSE bug 1206824 SUSE bug 1206843 SUSE bug 1206876 SUSE bug 1206877 SUSE bug 1206878 SUSE bug 1206880 SUSE bug 1206881 SUSE bug 1206882 SUSE bug 1206883 SUSE bug 1206884 SUSE bug 1206885 SUSE bug 1206886 SUSE bug 1206887 SUSE bug 1206888 SUSE bug 1206889 SUSE bug 1206890 SUSE bug 1206891 SUSE bug 1206893 SUSE bug 1206894 SUSE bug 1206935 SUSE bug 1206992 SUSE bug 1207034 SUSE bug 1207036 SUSE bug 1207050 SUSE bug 1207051 SUSE bug 1207088 SUSE bug 1207125 SUSE bug 1207149 SUSE bug 1207158 SUSE bug 1207168 SUSE bug 1207185 SUSE bug 1207270 SUSE bug 1207315 SUSE bug 1207328 SUSE bug 1207497 SUSE bug 1207500 SUSE bug 1207501 SUSE bug 1207506 SUSE bug 1207507 SUSE bug 1207521 SUSE bug 1207553 SUSE bug 1207560 SUSE bug 1207574 SUSE bug 1207588 SUSE bug 1207589 SUSE bug 1207590 SUSE bug 1207591 SUSE bug 1207592 SUSE bug 1207593 SUSE bug 1207594 SUSE bug 1207602 SUSE bug 1207603 SUSE bug 1207605 SUSE bug 1207606 SUSE bug 1207607 SUSE bug 1207608 SUSE bug 1207609 SUSE bug 1207610 SUSE bug 1207611 SUSE bug 1207612 SUSE bug 1207613 SUSE bug 1207614 SUSE bug 1207615 SUSE bug 1207616 SUSE bug 1207617 SUSE bug 1207618 SUSE bug 1207619 SUSE bug 1207620 SUSE bug 1207621 SUSE bug 1207622 SUSE bug 1207623 SUSE bug 1207624 SUSE bug 1207625 SUSE bug 1207626 SUSE bug 1207627 SUSE bug 1207628 SUSE bug 1207629 SUSE bug 1207630 SUSE bug 1207631 SUSE bug 1207632 SUSE bug 1207633 SUSE bug 1207634 SUSE bug 1207635 SUSE bug 1207636 SUSE bug 1207637 SUSE bug 1207638 SUSE bug 1207639 SUSE bug 1207640 SUSE bug 1207641 SUSE bug 1207642 SUSE bug 1207643 SUSE bug 1207644 SUSE bug 1207645 SUSE bug 1207646 SUSE bug 1207647 SUSE bug 1207648 SUSE bug 1207649 SUSE bug 1207650 SUSE bug 1207651 SUSE bug 1207652 SUSE bug 1207653 SUSE bug 1207734 SUSE bug 1207768 SUSE bug 1207769 SUSE bug 1207770 SUSE bug 1207771 SUSE bug 1207773 SUSE bug 1207795 SUSE bug 1207827 SUSE bug 1207842 SUSE bug 1207845 SUSE bug 1207875 SUSE bug 1207878 SUSE bug 1207933 SUSE bug 1207935 SUSE bug 1207948 SUSE bug 1208050 SUSE bug 1208076 SUSE bug 1208081 SUSE bug 1208105 SUSE bug 1208107 SUSE bug 1208128 SUSE bug 1208130 SUSE bug 1208149 SUSE bug 1208153 SUSE bug 1208183 SUSE bug 1208212 SUSE bug 1208219 SUSE bug 1208290 SUSE bug 1208368 SUSE bug 1208410 SUSE bug 1208420 SUSE bug 1208428 SUSE bug 1208429 SUSE bug 1208449 SUSE bug 1208534 SUSE bug 1208541 SUSE bug 1208542 SUSE bug 1208570 SUSE bug 1208588 SUSE bug 1208598 SUSE bug 1208599 SUSE bug 1208600 SUSE bug 1208601 SUSE bug 1208602 SUSE bug 1208604 SUSE bug 1208605 SUSE bug 1208607 SUSE bug 1208619 SUSE bug 1208628 SUSE bug 1208700 SUSE bug 1208741 SUSE bug 1208758 SUSE bug 1208759 SUSE bug 1208776 SUSE bug 1208777 SUSE bug 1208784 SUSE bug 1208787 SUSE bug 1208815 SUSE bug 1208816 SUSE bug 1208829 SUSE bug 1208837 SUSE bug 1208843 SUSE bug 1208845 SUSE bug 1208848 SUSE bug 1208864 SUSE bug 1208902 SUSE bug 1208948 SUSE bug 1208976 SUSE bug 1209008 SUSE bug 1209039 SUSE bug 1209052 SUSE bug 1209092 SUSE bug 1209159 SUSE bug 1209256 SUSE bug 1209258 SUSE bug 1209262 SUSE bug 1209287 SUSE bug 1209288 SUSE bug 1209290 SUSE bug 1209291 SUSE bug 1209292 SUSE bug 1209366 SUSE bug 1209367 SUSE bug 1209436 SUSE bug 1209457 SUSE bug 1209504 SUSE bug 1209532 SUSE bug 1209556 SUSE bug 1209600 SUSE bug 1209615 SUSE bug 1209635 SUSE bug 1209636 SUSE bug 1209637 SUSE bug 1209684 SUSE bug 1209687 SUSE bug 1209693 SUSE bug 1209739 SUSE bug 1209779 SUSE bug 1209780 SUSE bug 1209788 SUSE bug 1209798 SUSE bug 1209799 SUSE bug 1209804 SUSE bug 1209805 SUSE bug 1209856 SUSE bug 1209871 SUSE bug 1209927 SUSE bug 1209980 SUSE bug 1209982 SUSE bug 1209999 SUSE bug 1210034 SUSE bug 1210050 SUSE bug 1210158 SUSE bug 1210165 SUSE bug 1210202 SUSE bug 1210203 SUSE bug 1210206 SUSE bug 1210216 SUSE bug 1210230 SUSE bug 1210294 SUSE bug 1210301 SUSE bug 1210329 SUSE bug 1210335 SUSE bug 1210336 SUSE bug 1210337 SUSE bug 1210409 SUSE bug 1210439 SUSE bug 1210449 SUSE bug 1210450 SUSE bug 1210453 SUSE bug 1210454 SUSE bug 1210498 SUSE bug 1210506 SUSE bug 1210533 SUSE bug 1210551 SUSE bug 1210565 SUSE bug 1210584 SUSE bug 1210629 SUSE bug 1210644 SUSE bug 1210647 SUSE bug 1210725 SUSE bug 1210741 SUSE bug 1210762 SUSE bug 1210763 SUSE bug 1210764 SUSE bug 1210765 SUSE bug 1210766 SUSE bug 1210767 SUSE bug 1210768 SUSE bug 1210769 SUSE bug 1210770 SUSE bug 1210771 SUSE bug 1210775 SUSE bug 1210783 SUSE bug 1210791 SUSE bug 1210793 SUSE bug 1210806 SUSE bug 1210816 SUSE bug 1210817 SUSE bug 1210827 SUSE bug 1210853 SUSE bug 1210940 SUSE bug 1210943 SUSE bug 1210947 SUSE bug 1210953 SUSE bug 1210986 SUSE bug 1211014 SUSE bug 1211025 SUSE bug 1211037 SUSE bug 1211043 SUSE bug 1211044 SUSE bug 1211089 SUSE bug 1211105 SUSE bug 1211113 SUSE bug 1211131 SUSE bug 1211205 SUSE bug 1211263 SUSE bug 1211280 SUSE bug 1211281 SUSE bug 1211299 SUSE bug 1211346 SUSE bug 1211387 SUSE bug 1211400 SUSE bug 1211410 SUSE bug 1211414 SUSE bug 1211449 SUSE bug 1211465 SUSE bug 1211519 SUSE bug 1211564 SUSE bug 1211590 SUSE bug 1211592 SUSE bug 1211593 SUSE bug 1211595 SUSE bug 1211654 SUSE bug 1211686 SUSE bug 1211687 SUSE bug 1211688 SUSE bug 1211689 SUSE bug 1211690 SUSE bug 1211691 SUSE bug 1211692 SUSE bug 1211693 SUSE bug 1211714 SUSE bug 1211794 SUSE bug 1211796 SUSE bug 1211804 SUSE bug 1211807 SUSE bug 1211808 SUSE bug 1211820 SUSE bug 1211836 SUSE bug 1211847 SUSE bug 1211852 SUSE bug 1211855 SUSE bug 1211960 SUSE bug 1212051 SUSE bug 1212129 SUSE bug 1212154 SUSE bug 1212155 SUSE bug 1212158 SUSE bug 1212265 SUSE bug 1212350 SUSE bug 1212445 SUSE bug 1212448 SUSE bug 1212456 SUSE bug 1212494 SUSE bug 1212495 SUSE bug 1212504 SUSE bug 1212513 SUSE bug 1212540 SUSE bug 1212556 SUSE bug 1212561 SUSE bug 1212563 SUSE bug 1212564 SUSE bug 1212584 SUSE bug 1212592 SUSE bug 1212603 SUSE bug 1212605 SUSE bug 1212606 SUSE bug 1212619 SUSE bug 1212685 SUSE bug 1212701 SUSE bug 1212741 SUSE bug 1212835 SUSE bug 1212838 SUSE bug 1212842 SUSE bug 1212848 SUSE bug 1212861 SUSE bug 1212869 SUSE bug 1212892 SUSE bug 1212961 SUSE bug 1213010 SUSE bug 1213011 SUSE bug 1213012 SUSE bug 1213013 SUSE bug 1213014 SUSE bug 1213015 SUSE bug 1213016 SUSE bug 1213017 SUSE bug 1213018 SUSE bug 1213019 SUSE bug 1213020 SUSE bug 1213021 SUSE bug 1213024 SUSE bug 1213025 SUSE bug 1213032 SUSE bug 1213034 SUSE bug 1213035 SUSE bug 1213036 SUSE bug 1213037 SUSE bug 1213038 SUSE bug 1213039 SUSE bug 1213040 SUSE bug 1213041 SUSE bug 1213087 SUSE bug 1213088 SUSE bug 1213089 SUSE bug 1213090 SUSE bug 1213092 SUSE bug 1213093 SUSE bug 1213094 SUSE bug 1213095 SUSE bug 1213096 SUSE bug 1213098 SUSE bug 1213099 SUSE bug 1213100 SUSE bug 1213102 SUSE bug 1213103 SUSE bug 1213104 SUSE bug 1213105 SUSE bug 1213106 SUSE bug 1213107 SUSE bug 1213108 SUSE bug 1213109 SUSE bug 1213110 SUSE bug 1213111 SUSE bug 1213112 SUSE bug 1213113 SUSE bug 1213114 SUSE bug 1213116 SUSE bug 1213134 CVE-2022-36280 CVE-2022-38096 CVE-2022-4269 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2022-4744 CVE-2023-0045 CVE-2023-0122 CVE-2023-0179 CVE-2023-0394 CVE-2023-0461 CVE-2023-0469 CVE-2023-0590 CVE-2023-0597 CVE-2023-1075 CVE-2023-1076 CVE-2023-1077 CVE-2023-1079 CVE-2023-1095 CVE-2023-1118 CVE-2023-1249 CVE-2023-1382 CVE-2023-1513 CVE-2023-1582 CVE-2023-1583 CVE-2023-1611 CVE-2023-1637 CVE-2023-1652 CVE-2023-1670 CVE-2023-1829 CVE-2023-1838 CVE-2023-1855 CVE-2023-1989 CVE-2023-1998 CVE-2023-2002 CVE-2023-21102 CVE-2023-21106 CVE-2023-2124 CVE-2023-2156 CVE-2023-2162 CVE-2023-2176 CVE-2023-2235 CVE-2023-2269 CVE-2023-22998 CVE-2023-23000 CVE-2023-23001 CVE-2023-23004 CVE-2023-23006 CVE-2023-2430 CVE-2023-2483 CVE-2023-25012 CVE-2023-2513 CVE-2023-26545 CVE-2023-28327 CVE-2023-28410 CVE-2023-28464 CVE-2023-28866 CVE-2023-3006 CVE-2023-30456 CVE-2023-30772 CVE-2023-3090 CVE-2023-31084 CVE-2023-3111 CVE-2023-3141 CVE-2023-31436 CVE-2023-3161 CVE-2023-3212 CVE-2023-3220 CVE-2023-32233 CVE-2023-33288 CVE-2023-3357 CVE-2023-3358 CVE-2023-3389 CVE-2023-33951 CVE-2023-33952 CVE-2023-35788 CVE-2023-35823 CVE-2023-35828 CVE-2023-35829 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for dbus-1 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dbus-1 fixes the following issues: - CVE-2023-34969: Fixed a possible dbus-daemon crash by an unprivileged users (bsc#1212126). Moderate SUSE bug 1212126 CVE-2023-34969 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for perl (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for perl fixes the following issues: - CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999). Important SUSE bug 1210999 CVE-2023-31484 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for curl (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for curl fixes the following issues: - CVE-2023-32001: Fixed TOCTOU race condition (bsc#1213237). Moderate SUSE bug 1213237 CVE-2023-32001 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-1_1 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-1_1 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430). - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534). - Update further expiring certificates that affect tests (bsc#1201627) Important SUSE bug 1201627 SUSE bug 1207534 SUSE bug 1211430 CVE-2022-4304 CVE-2023-2650 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for samba (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for samba fixes the following issues: samba was updated to version 4.17.9: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173). - CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172). - CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171). - CVE-2023-3347: Fixed issue where SMB2 packet signing not enforced (bsc#1213170). - CVE-2020-25720: Fixed issue where creating child permission allowed full write to all attributes (bsc#1213386). Bugfixes: - Fixed trust relationship failure (bsc#1213384). - Backported --pidl-developer fixes. - Fixed smbd_scavenger crash when service smbd is stopped. - Fixed issue where vfs_fruit might cause a failing open for delete. - Fixed named crashes on DLZ zone update. - Fixed issue where winbind recurses into itself via rpcd_lsad. - Fixed cli_list looping 100% CPU against pre-lanman2 servers. - Fixed smbclient leaks fds with showacls. - Fixed aes256 smb3 encryption algorithms not allowed in smb3_sid_parse(). - Fixed winbindd getting stuck on NT_STATUS_RPC_SEC_PKG_ERROR. - Fixed smbget memory leak if failed to download files recursively. - Fixed log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower. - Fixed floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c. - Fixed test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners. - Reduce flapping of ridalloc test. - Fixed unreliable large_ldap test. - Fixed filename parser not checking veto files smb.conf parameter. - Fixed mdssvc may crash when initializing. - Fixed broken large directory optimization for non-lcomp path elements - Fixed streams_depot failing to create streams. - Fixed shadow_copy2 and streams_depot issues. - Fixed wbinfo -u fails on ad dc with >1000 users. - Fixed winbindd idmap child contacting the domain controller without a need. - Fixed idmap_autorid may fail to map sids of trusted domains for the first time. - Fixed idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings. - Fixed net ads search -P doesn't work against servers in other domains. - Fixed DS ACEs might be inherited to unrelated object classes. - Fixed temporary smbXsrv_tcon_global.tdb can't be parsed. - Fixed setting veto files = /.*/ breaking listing directories (bsc#1212375). - Fixed dsgetdcname assuming local system uses IPv4. Important SUSE bug 1212375 SUSE bug 1213170 SUSE bug 1213171 SUSE bug 1213172 SUSE bug 1213173 SUSE bug 1213174 SUSE bug 1213384 SUSE bug 1213386 CVE-2020-25720 CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for poppler (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for poppler fixes the following issues: - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272). Moderate SUSE bug 1199272 CVE-2022-27337 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssh (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were present on the victim's system and if the agent was forwarded to an attacker-controlled system. [bsc#1213504, CVE-2023-38408] - Close the right filedescriptor and also close fdh in read_hmac to avoid file descriptor leaks. [bsc#1209536] - Attempts to mitigate instances of secrets lingering in memory after a session exits. [bsc#1186673, bsc#1213004, bsc#1213008] Important SUSE bug 1186673 SUSE bug 1209536 SUSE bug 1213004 SUSE bug 1213008 SUSE bug 1213504 CVE-2023-38408 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for bind (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bind fixes the following issues: - CVE-2023-2828: Fixed denial-of-service against recursive resolvers related to cache-cleaning algorithm (bsc#1212544). Important SUSE bug 1212544 CVE-2023-2828 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-1_1 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-1_1 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487). Moderate SUSE bug 1213487 CVE-2023-3446 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libqt5-qtsvg (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libqt5-qtsvg fixes the following issues: - CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial-of-service (bsc#1196654). - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm variable (bsc#1211298). Moderate SUSE bug 1196654 SUSE bug 1211298 CVE-2021-45930 CVE-2023-32573 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-3 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-3 fixes the following issues: - CVE-2023-2975: Fixed AES-SIV implementation ignores empty associated data entries (bsc#1213383). - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487). Moderate SUSE bug 1213383 SUSE bug 1213487 CVE-2023-2975 CVE-2023-3446 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libqt5-qtbase (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libqt5-qtbase fixes the following issues: - CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994). - CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642). - CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797). - CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326). - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616). Important SUSE bug 1209616 SUSE bug 1211642 SUSE bug 1211797 SUSE bug 1211994 SUSE bug 1213326 CVE-2023-24607 CVE-2023-32762 CVE-2023-33285 CVE-2023-34410 CVE-2023-38197 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for kernel-firmware (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for kernel-firmware fixes the following issues: Updated to version 20230724 (git commit 59fbffa9ec8e): - CVE-2023-20593: Fixed AMD ucode for ZenBleed vulnerability (bsc#1213286). Bugfixes: - Fix qcom ASoC tglp WHENCE entry - Group all Conexant V4L devices together - Makefile, copy-firmware: support xz/zstd compressed firmware - Updated NXP SR150 UWB firmware - WHENCE: Cleanup Realtek BT firmware provenance - WHENCE: comment out duplicate MediaTek firmware - amdgpu: Add GC 11.0.4 firmware - amdgpu: Add PSP 13.0.11 firmware - amdgpu: DMCUB updates for DCN 3.1.4 and 3.1.5 - amdgpu: DMCUB updates for various AMDGPU asics - amdgpu: Update DCN 3.1.4 firmware - amdgpu: Update GC 11.0.1 and 11.0.4 - amdgpu: Update GC 11.0.1 firmware - amdgpu: Update PSP 13.0.4 firmware - amdgpu: Update SDMA 6.0.1 firmware - amdgpu: add initial GC 11.0.3 firmware - amdgpu: add initial PSP 13.0.10 firmware - amdgpu: add initial SDMA 6.0.3 firmware - amdgpu: add initial SMU 13.0.10 firmware - amdgpu: update 13.0.8 firmware for amd.5.5 release - amdgpu: update DCN 3.1.6 DMCUB firmware - amdgpu: update DMCUB to v0.0.172.0 for various AMDGPU ASICs - amdgpu: update DMCUB to v0.0.175.0 for various AMDGPU ASICs - amdgpu: update GC 10.3.6 firmware for amd.5.5 release - amdgpu: update GC 10.3.7 firmware for amd.5.5 release - amdgpu: update GC 11.0.0 firmware for amd.5.5 release - amdgpu: update GC 11.0.1 firmware for amd.5.5 release - amdgpu: update GC 11.0.2 firmware for amd.5.5 release - amdgpu: update GC 11.0.4 firmware for amd.5.5 release - amdgpu: update PSP 13.0.0 firmware for amd.5.5 release - amdgpu: update PSP 13.0.11 firmware for amd.5.5 release - amdgpu: update PSP 13.0.4 firmware for amd.5.5 release - amdgpu: update PSP 13.0.7 firmware for amd.5.5 release - amdgpu: update Picasso VCN firmware - amdgpu: update SDMA 6.0.1 firmware for amd.5.5 release - amdgpu: update SMU 13.0.0 firmware for amd.5.5 release - amdgpu: update SMU 13.0.7 firmware for amd.5.5 release - amdgpu: update VCN 4.0.0 firmware - amdgpu: update VCN 4.0.0 firmware for amd.5.5 release - amdgpu: update VCN 4.0.4 firmware for amd.5.5 release - amdgpu: update aldebaran firmware for amd.5.5 release - amdgpu: update arcturus firmware for amd.5.5 release - amdgpu: update beige goby firmware for amd.5.5 release - amdgpu: update dimgrey cavefish firmware for amd.5.5 release - amdgpu: update green sardine VCN firmware - amdgpu: update green sardine firmware for amd.5.5 release - amdgpu: update navi10 firmware for amd.5.5 release - amdgpu: update navi12 firmware for amd.5.5 release - amdgpu: update navi14 firmware for amd.5.5 release - amdgpu: update navy flounder firmware for amd.5.5 release - amdgpu: update psp 13.0.5 firmware for amd.5.5 release - amdgpu: update raven VCN firmware - amdgpu: update raven2 VCN firmware - amdgpu: update renoir VCN firmware - amdgpu: update renoir firmware for amd.5.5 release - amdgpu: update sienna cichlid firmware for amd.5.5 release - amdgpu: update vangogh firmware for amd.5.5 release - amdgpu: update vcn 3.1.2 firmware for amd.5.5 release - amdgpu: update vega10 firmware for amd.5.5 release - amdgpu: update vega12 firmware for amd.5.5 release - amdgpu: update vega20 firmware for amd.5.5 release - amdgpu: update yellow carp firmware for amd.5.5 release - ath10k: QCA4019 hw1.0: update board-2.bin - ath10k: QCA6174 hw3.0: update board-2.bin - ath10k: QCA9888 hw2.0: update board-2.bin - ath10k: QCA9984 hw1.0: update board-2.bin - ath10k: QCA99X0 hw2.0: update board-2.bin - ath11k: IPQ6018 hw1.0: update board-2.bin - ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1 - ath11k: IPQ8074 hw2.0: update board-2.bin - ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1 - ath11k: QCN9074 hw1.0: update to WLAN.HK.2.7.0.1-01744-QCAHKSWPL_SILICONZ-1 - ath11k: WCN6750 hw1.0: update to WLAN.MSL.1.0.1-01160-QCAMSLSWPLZ-1 - ath11k: WCN6855 hw2.0: update board-2.bin - brcm: Add symlinks from Pine64 devices to AW-CM256SM.txt - check_whence: Check link targets are valid - check_whence: error if File: is actually a link - check_whence: error if symlinks are in-tree - check_whence: error on directory listed as File - check_whence: error on duplicate file entries - check_whence: strip quotation marks - cirrus: Add CS35L41 firmware for ASUS ROG 2023 Models - cirrus: Add firmware and tuning files for HP G10 series laptops - cirrus: Add firmware and tuning files for Lenovo ThinkPad P1 Gen 6 - cirrus: Add firmware for new Asus ROG Laptops - cnm: update chips&media wave521c firmware. - copy-firmware: drop obsolete backticks, quote - copy-firmware: quote deskdir and dirname - copy-firmware: silence the last shellcheck warnings - copy-firmware: tweak sed invocation - cxgb4: Update firmware to revision 1.27.3.0 - fix broken cirrus firmware symlinks - i915: Add GuC v70.6.6 for MTL - i915: Add HuC v8.5.0 for MTL - i915: update DG2 GuC to v70.8.0 - i915: update to GuC 70.8.0 and HuC 8.5.1 for MTL - ice: update ice DDP comms package to 1.3.40.0 - ice: update ice DDP wireless_edge package to 1.3.10.0 - iwlwifi: add new FWs from core78-32 release - iwlwifi: add new FWs from core80-39 release - iwlwifi: update 9000-family firmwares to core78-32 - iwlwifi: update cc/Qu/QuZ firmwares for core80-39 release - linux-firmware: Add firmware for Cirrus CS35L41 on Lenovo Laptops - linux-firmware: Amphion: Update vpu firmware - linux-firmware: Update AMD cpu microcode - linux-firmware: Update AMD cpu microcode - linux-firmware: Update AMD fam17h cpu microcode - linux-firmware: Update firmware file for Intel Bluetooth AX200 - linux-firmware: Update firmware file for Intel Bluetooth AX201 - linux-firmware: Update firmware file for Intel Bluetooth AX203 - linux-firmware: Update firmware file for Intel Bluetooth AX210 - linux-firmware: Update firmware file for Intel Bluetooth AX211 - linux-firmware: add firmware for MT7981 - linux-firmware: update firmware for MT7916 - linux-firmware: update firmware for MT7921 WiFi device - linux-firmware: update firmware for MT7922 WiFi device - linux-firmware: update firmware for MT7981 - linux-firmware: update firmware for mediatek bluetooth chip (MT7921) - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update firmware for mediatek bluetooth chip (MT7922) - linux-firmware: update qat firmware - linux-firmware: wilc1000: update WILC1000 firmware to v16.0 - mediatek: Update mt8195 SCP firmware to support 10bit mode - mediatek: Update mt8195 SCP firmware to support hevc - mt76xx: Move the old Mediatek WiFi firmware to mediatek - nvidia: update Tu10x and Tu11x signed firmware to support newer Turing HW - qca: Update firmware files for BT chip WCN6750 - qcom: Add Audio firmware for SC8280XP X13s - qcom: Update the microcode files for Adreno a630 GPUs. - qcom: apq8016: add Dragonboard 410c WiFi and modem firmware - qcom: sdm845: rename the modem firmware - qcom: sdm845: update remoteproc firmware - rtl_bt: Add firmware and config files for RTL8851B - rtl_bt: Update RTL8761B BT UART firmware to 0x9DC6_D922 - rtl_bt: Update RTL8761B BT USB firmware to 0xDFC6_D922 - rtl_bt: Update RTL8852A BT USB firmware to 0xDAC7_480D - rtl_bt: Update RTL8852B BT USB firmware to 0xDBC6_B20F - rtl_bt: Update RTL8852C BT USB firmware to 0x040D_7225 - rtl_nic: update firmware of USB devices - rtlwifi: Add firmware v6.0 for RTL8192FU - rtlwifi: Update firmware for RTL8188EU to v28.0 - rtw88: 8822c: Update normal firmware to v9.9.15 - rtw89: 8851b: add firmware v0.29.41.0 - rtw89: 8852b: update format-1 fw to v0.29.29.1 - rtw89: 8852c: update fw to v0.27.56.13 - wfx: update to firmware 3.16.1 Moderate SUSE bug 1213286 CVE-2023-20593 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for librsvg (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for librsvg fixes the following issues: librsvg was updated to version 2.52.10: - CVE-2023-38633: Fixed directory traversal in URI decoder (bsc#1213502). Important SUSE bug 1213502 CVE-2023-38633 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for java-17-openjdk (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-17-openjdk fixes the following issues: Updated to version jdk-17.0.8+7 (July 2023 CPU): - CVE-2023-22006: Fixed vulnerability in the network component (bsc#1213473). - CVE-2023-22036: Fixed vulnerability in the utility component (bsc#1213474). - CVE-2023-22041: Fixed vulnerability in the hotspot component (bsc#1213475). - CVE-2023-22044: Fixed vulnerability in the hotspot component (bsc#1213479). - CVE-2023-22045: Fixed vulnerability in the hotspot component (bsc#1213481). - CVE-2023-22049: Fixed vulnerability in the libraries component (bsc#1213482). - CVE-2023-25193: Fixed vulnerability in the embedded harfbuzz module (bsc#1207922). - JDK-8294323: Improve Shared Class Data - JDK-8296565: Enhanced archival support - JDK-8298676, JDK-8300891: Enhanced Look and Feel - JDK-8300285: Enhance TLS data handling - JDK-8300596: Enhance Jar Signature validation - JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1 - JDK-8302475: Enhance HTTP client file downloading - JDK-8302483: Enhance ZIP performance - JDK-8303376: Better launching of JDI - JDK-8304460: Improve array usages - JDK-8304468: Better array usages - JDK-8305312: Enhanced path handling - JDK-8308682: Enhance AES performance Bugfixes: - JDK-8178806: Better exception logging in crypto code - JDK-8201516: DebugNonSafepoints generates incorrect information - JDK-8224768: Test ActalisCA.java fails - JDK-8227060: Optimize safepoint cleanup subtask order - JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java fails with AssertionError - JDK-8238274: (sctp) JDK-7118373 is not fixed for SctpChannel - JDK-8244976: vmTestbase/nsk/jdi/Event/request/request001.java doesn' initialize eName - JDK-8245877: assert(_value != __null) failed: resolving NULL _value in JvmtiExport::post_compiled_method_load - JDK-8248001: javadoc generates invalid HTML pages whose ftp:// links are broken - JDK-8252990: Intrinsify Unsafe.storeStoreFence - JDK-8254711: Add java.security.Provider.getService JFR Event - JDK-8257856: Make ClassFileVersionsTest.java robust to JDK version updates - JDK-8261495: Shenandoah: reconsider update references memory ordering - JDK-8268288: jdk/jfr/api/consumer/streaming/ /TestOutOfProcessMigration.java fails with 'Error: ShouldNotReachHere()' - JDK-8268298: jdk/jfr/api/consumer/log/TestVerbosity.java fails: unexpected log message - JDK-8268582: javadoc throws NPE with --ignore-source-errors option - JDK-8269821: Remove is-queue-active check in inner loop of write_ref_array_pre_work - JDK-8270434: JDI+UT: Unexpected event in JDI tests - JDK-8270859: Post JEP 411 refactoring: client libs with maximum covering > 10K - JDK-8270869: G1ServiceThread may not terminate - JDK-8271519: java/awt/event/SequencedEvent/ /MultipleContextsFunctionalTest.java failed with 'Total [200] - Expected [400]' - JDK-8273909: vmTestbase/nsk/jdi/Event/request/request001 can still fail with 'ERROR: new event is not ThreadStartEvent' - JDK-8274243: Implement fast-path for ASCII-compatible CharsetEncoders on aarch64 - JDK-8274615: Support relaxed atomic add for linux-aarch64 - JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile - JDK-8275233: Incorrect line number reported in exception stack trace thrown from a lambda expression - JDK-8275287: Relax memory ordering constraints on updating instance class and array class counters - JDK-8275721: Name of UTC timezone in a locale changes depending on previous code - JDK-8275735: [linux] Remove deprecated Metrics api (kernel memory limit) - JDK-8276058: Some swing test fails on specific CI macos system - JDK-8277407: javax/swing/plaf/synth/SynthButtonUI/6276188/ /bug6276188.java fails to compile after JDK-8276058 - JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java - add 4357905 - JDK-8278146: G1: Rework VM_G1Concurrent VMOp to clearly identify it as pause - JDK-8278434: timeouts in test java/time/test/java/time/ /format/TestZoneTextPrinterParser.java - JDK-8278834: Error 'Cannot read field 'sym' because 'this.lvar[od]' is null' when compiling - JDK-8282077: PKCS11 provider C_sign() impl should handle CKR_BUFFER_TOO_SMALL error - JDK-8282201: Consider removal of expiry check in VerifyCACerts.java test - JDK-8282227: Locale information for nb is not working properly - JDK-8282704: runtime/Thread/StopAtExit.java may leak memory - JDK-8283057: Update GCC to version 11.2.0 for Oracle builds on Linux - JDK-8283062: Uninitialized warnings in libgtest with GCC 11.2 - JDK-8283520: JFR: Memory leak in dcmd_arena - JDK-8283566: G1: Improve G1BarrierSet::enqueue performance - JDK-8284331: Add sanity check for signal handler modification warning. - JDK-8285635: javax/swing/JRootPane/DefaultButtonTest.java failed with Default Button not pressed for L&F: com.sun.java.swing.plaf.motif.MotifLookAndFeel - JDK-8285987: executing shell scripts without #! fails on Alpine linux - JDK-8286191: misc tests fail due to JDK-8285987 - JDK-8286287: Reading file as UTF-16 causes Error which 'shouldn't happen' - JDK-8286331: jni_GetStringUTFChars() uses wrong heap allocator - JDK-8286346: 3-parameter version of AllocateHeap should not ignore AllocFailType - JDK-8286398: Address possibly lossy conversions in jdk.internal.le - JDK-8287007: [cgroups] Consistently use stringStream throughout parsing code - JDK-8287246: DSAKeyValue should check for missing params instead of relying on KeyFactory provider - JDK-8287541: Files.writeString fails to throw IOException for charset 'windows-1252' - JDK-8287854: Dangling reference in ClassVerifier::verify_class - JDK-8287876: The recently de-problemlisted TestTitledBorderLeak test is unstable - JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md with information on 4th party dependencies - JDK-8288589: Files.readString ignores encoding errors for UTF-16 - JDK-8289509: Improve test coverage for XPath Axes: descendant, descendant-or-self, following, following-sibling - JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space - JDK-8289949: Improve test coverage for XPath: operators - JDK-8290822: C2: assert in PhaseIdealLoop::do_unroll() is subject to undefined behavior - JDK-8291226: Create Test Cases to cover scenarios for JDK-8278067 - JDK-8291637: HttpClient default keep alive timeout not followed if server sends invalid value - JDK-8291638: Keep-Alive timeout of 0 should close connection immediately - JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage() is lower than expected - JDK-8292301: [REDO v2] C2 crash when allocating array of size too large - JDK-8292407: Improve Weak CAS VarHandle/Unsafe tests resilience under spurious failures - JDK-8292713: Unsafe.allocateInstance should be intrinsified without UseUnalignedAccesses - JDK-8292755: Non-default method in interface leads to a stack overflow in JShell - JDK-8292990: Improve test coverage for XPath Axes: parent - JDK-8293295: Add type check asserts to java_lang_ref_Reference accessors - JDK-8293492: ShenandoahControlThread missing from hs-err log and thread dump - JDK-8293858: Change PKCS7 code to use default SecureRandom impl instead of SHA1PRNG - JDK-8293887: AArch64 build failure with GCC 12 due to maybe-uninitialized warning in libfdlibm k_rem_pio2.c - JDK-8294183: AArch64: Wrong macro check in SharedRuntime::generate_deopt_blob - JDK-8294281: Allow warnings to be disabled on a per-file basis - JDK-8294673: JFR: Add SecurityProviderService#threshold to TestActiveSettingEvent.java - JDK-8294717: (bf) DirectByteBuffer constructor will leak if allocating Deallocator or Cleaner fails with OOME - JDK-8294906: Memory leak in PKCS11 NSS TLS server - JDK-8295564: Norwegian Nynorsk Locale is missing formatting - JDK-8295974: jni_FatalError and Xcheck:jni warnings should print the native stack when there are no Java frames - JDK-8296084: javax/swing/JSpinner/4788637/bug4788637.java fails intermittently on a VM - JDK-8296318: use-def assert: special case undetected loops nested in infinite loops - JDK-8296343: CPVE thrown on missing content-length in OCSP response - JDK-8296412: Special case infinite loops with unmerged backedges in IdealLoopTree::check_safepts - JDK-8296545: C2 Blackholes should allow load optimizations - JDK-8296934: Write a test to verify whether Undecorated Frame can be iconified or not - JDK-8297000: [jib] Add more friendly warning for proxy issues - JDK-8297154: Improve safepoint cleanup logging - JDK-8297450: ScaledTextFieldBorderTest.java fails when run with -show parameter - JDK-8297587: Upgrade JLine to 3.22.0 - JDK-8297730: C2: Arraycopy intrinsic throws incorrect exception - JDK-8297955: LDAP CertStore should use LdapName and not String for DNs - JDK-8298488: [macos13] tools/jpackage tests failing with 'Exit code: 137' on macOS - JDK-8298887: On the latest macOS+XCode the Robot API may report wrong colors - JDK-8299179: ArrayFill with store on backedge needs to reduce length by 1 - JDK-8299259: C2: Div/Mod nodes without zero check could be split through iv phi of loop resulting in SIGFPE - JDK-8299544: Improve performance of CRC32C intrinsics (non-AVX-512) for small inputs - JDK-8299570: [JVMCI] Insufficient error handling when CodeBuffer is exhausted - JDK-8299959: C2: CmpU::Value must filter overflow computation against local sub computation - JDK-8300042: Improve CPU related JFR events descriptions - JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy due to constant NULL src argument - JDK-8300823: UB: Compile::_phase_optimize_finished is initialized too late - JDK-8300939: sun/security/provider/certpath/OCSP/ /OCSPNoContentLength.java fails due to network errors - JDK-8301050: Detect Xen Virtualization on Linux aarch64 - JDK-8301119: Support for GB18030-2022 - JDK-8301123: Enable Symbol refcounting underflow checks in PRODUCT - JDK-8301190: [vectorapi] The typeChar of LaneType is incorrect when default locale is tr - JDK-8301216: ForkJoinPool invokeAll() ignores timeout - JDK-8301338: Identical branch conditions in CompileBroker::print_heapinfo - JDK-8301491: C2: java.lang.StringUTF16::indexOfChar intrinsic called with negative character argument - JDK-8301637: ThreadLocalRandom.current().doubles().parallel() contention - JDK-8301661: Enhance os::pd_print_cpu_info on macOS and Windows - JDK-8302151: BMPImageReader throws an exception reading BMP images - JDK-8302172: [JVMCI] HotSpotResolvedJavaMethodImpl.canBeInlined must respect ForceInline - JDK-8302320: AsyncGetCallTrace obtains too few frames in sanity test - JDK-8302491: NoClassDefFoundError omits the original cause of an error - JDK-8302508: Add timestamp to the output TraceCompilerThreads - JDK-8302594: use-after-free in Node::destruct - JDK-8302595: use-after-free related to GraphKit::clone_map - JDK-8302791: Add specific ClassLoader object to Proxy IllegalArgumentException message - JDK-8302849: SurfaceManager might expose partially constructed object - JDK-8303069: Memory leak in CompilerOracle::parse_from_line - JDK-8303102: jcmd: ManagementAgent.status truncates the text longer than O_BUFLEN - JDK-8303130: Document required Accessibility permissions on macOS - JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m needs CFRelease call in early potential CHECK_NULL return - JDK-8303433: Bump update version for OpenJDK: jdk-17.0.8 - JDK-8303440: The 'ZonedDateTime.parse' may not accept the 'UTC+XX' zone id - JDK-8303465: KeyStore of type KeychainStore, provider Apple does not show all trusted certificates - JDK-8303476: Add the runtime version in the release file of a JDK image - JDK-8303482: Update LCMS to 2.15 - JDK-8303508: Vector.lane() gets wrong value on x86 - JDK-8303511: C2: assert(get_ctrl(n) == cle_out) during unrolling - JDK-8303564: C2: 'Bad graph detected in build_loop_late' after a CMove is wrongly split thru phi - JDK-8303575: adjust Xen handling on Linux aarch64 - JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs CFRelease call in early potential CHECK_NULL return - JDK-8303588: [JVMCI] make JVMCI source directories conform with standard layout - JDK-8303809: Dispose context in SPNEGO NegotiatorImpl - JDK-8303822: gtestMain should give more helpful output - JDK-8303861: Error handling step timeouts should never be blocked by OnError and others - JDK-8303937: Corrupted heap dumps due to missing retries for os::write() - JDK-8303949: gcc10 warning Linux ppc64le - note: the layout of aggregates containing vectors with 8-byte alignment has changed in GCC 5 - JDK-8304054: Linux: NullPointerException from FontConfiguration.getVersion in case no fonts are installed - JDK-8304063: tools/jpackage/share/AppLauncherEnvTest.java fails when checking LD_LIBRARY_PATH - JDK-8304134: jib bootstrapper fails to quote filename when checking download filetype - JDK-8304291: [AIX] Broken build after JDK-8301998 - JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998 - JDK-8304350: Font.getStringBounds calculates wrong width for TextAttribute.TRACKING other than 0.0 - JDK-8304671: javac regression: Compilation with --release 8 fails on underscore in enum identifiers - JDK-8304683: Memory leak in WB_IsMethodCompatible - JDK-8304760: Add 2 Microsoft TLS roots - JDK-8304867: Explicitly disable dtrace for ppc builds - JDK-8304880: [PPC64] VerifyOops code in C1 doesn't work with ZGC - JDK-8305088: SIGSEGV in Method::is_method_handle_intrinsic - JDK-8305113: (tz) Update Timezone Data to 2023c - JDK-8305400: ISO 4217 Amendment 175 Update - JDK-8305403: Shenandoah evacuation workers may deadlock - JDK-8305481: gtest is_first_C_frame failing on ARM - JDK-8305690: [X86] Do not emit two REX prefixes in Assembler::prefix - JDK-8305711: Arm: C2 always enters slowpath for monitorexit - JDK-8305721: add `make compile-commands` artifacts to .gitignore - JDK-8305975: Add TWCA Global Root CA - JDK-8305993: Add handleSocketErrorWithMessage to extend nio Net.c exception message - JDK-8305994: Guarantee eventual async monitor deflation - JDK-8306072: Open source several AWT MouseInfo related tests - JDK-8306133: Open source few AWT Drag & Drop related tests - JDK-8306409: Open source AWT KeyBoardFocusManger, LightWeightComponent related tests - JDK-8306432: Open source several AWT Text Component related tests - JDK-8306466: Open source more AWT Drag & Drop related tests - JDK-8306489: Open source AWT List related tests - JDK-8306543: GHA: MSVC installation is failing - JDK-8306640: Open source several AWT TextArea related tests - JDK-8306652: Open source AWT MenuItem related tests - JDK-8306658: GHA: MSVC installation could be optional since it might already be pre-installed - JDK-8306664: GHA: Update MSVC version to latest stepping - JDK-8306681: Open source more AWT DnD related tests - JDK-8306683: Open source several clipboard and color AWT tests - JDK-8306752: Open source several container and component AWT tests - JDK-8306753: Open source several container AWT tests - JDK-8306755: Open source few Swing JComponent and AbstractButton tests - JDK-8306768: CodeCache Analytics reports wrong threshold - JDK-8306774: Make runtime/Monitor/ /GuaranteedAsyncDeflationIntervalTest.java more reliable - JDK-8306825: Monitor deflation might be accidentally disabled by zero intervals - JDK-8306850: Open source AWT Modal related tests - JDK-8306871: Open source more AWT Drag & Drop tests - JDK-8306883: Thread stacksize is reported with wrong units in os::create_thread logging - JDK-8306941: Open source several datatransfer and dnd AWT tests - JDK-8306943: Open source several dnd AWT tests - JDK-8306954: Open source five Focus related tests - JDK-8306955: Open source several JComboBox jtreg tests - JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep - JDK-8306996: Open source Swing MenuItem related tests - JDK-8307080: Open source some more JComboBox jtreg tests - JDK-8307128: Open source some drag and drop tests 4 - JDK-8307130: Open source few Swing JMenu tests - JDK-8307133: Open source some JTable jtreg tests - JDK-8307134: Add GTS root CAs - JDK-8307135: java/awt/dnd/NotReallySerializableTest/ /NotReallySerializableTest.java failed - JDK-8307331: Correctly update line maps when class redefine rewrites bytecodes - JDK-8307346: Add missing gc+phases logging for ObjectCount(AfterGC) JFR event collection code - JDK-8307347: serviceability/sa/ClhsdbDumpclass.java could leave files owned by root on macOS - JDK-8307378: Allow collectors to provide specific values for GC notifications' actions - JDK-8307381: Open Source JFrame, JIF related Swing Tests - JDK-8307425: Socket input stream read burns CPU cycles with back-to-back poll(0) calls - JDK-8307799: Newly added java/awt/dnd/MozillaDnDTest.java has invalid jtreg `@requires` clause - JDK-8308554: [17u] Fix commit of 8286191. vm.musl was not removed from ExternalEditorTest - JDK-8308880: [17u] micro bench ZoneStrings missed in backport of 8278434 - JDK-8308884: [17u/11u] Backout JDK-8297951 - JDK-8311467: [17u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 17.0.8 Important SUSE bug 1207922 SUSE bug 1213473 SUSE bug 1213474 SUSE bug 1213475 SUSE bug 1213479 SUSE bug 1213481 SUSE bug 1213482 CVE-2023-22006 CVE-2023-22036 CVE-2023-22041 CVE-2023-22044 CVE-2023-22045 CVE-2023-22049 CVE-2023-25193 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libvirt (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libvirt fixes the following issues: Security fixes: - CVE-2023-3750: Fixed mproper locking in virStoragePoolObjListSearch that may lead to denial of service (bsc#1213447). Other fixes: - build library with support for modular daemons (bsc#1213352). Moderate SUSE bug 1213352 SUSE bug 1213447 CVE-2023-3750 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gcc13 (Important) (in QA) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the 'Development Tools' module. The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories. To use gcc13 compilers use: - install 'gcc13' or 'gcc13-c++' or one of the other 'gcc13-COMPILER' frontend packages. - override your Makefile to use CC=gcc13, CXX=g++13 and similar overrides for the other languages. For a full changelog with all new GCC13 features, check out https://gcc.gnu.org/gcc-13/changes.html Detailed changes: * CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052) - Turn cross compiler to s390x to a glibc cross. [bsc#1214460] - Also handle -static-pie in the default-PIE specs - Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101] - Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427] - Add new x86-related intrinsics (amxcomplexintrin.h). - RISC-V: Add support for inlining subword atomic operations - Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver. - Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC. - Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing. - Bump included newlib to version 4.3.0. - Also package libhwasan_preinit.o on aarch64. - Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite. - Package libhwasan_preinit.o on x86_64. - Fixed unwinding on aarch64 with pointer signing. [bsc#1206684] - Enable PRU flavour for gcc13 - update floatn fixinclude pickup to check each header separately (bsc#1206480) - Redo floatn fixinclude pick-up to simply keep what is there. - Bump libgo SONAME to libgo22. - Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers. - Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15. - Depend on at least LLVM 13 for GCN cross compiler. - Update embedded newlib to version 4.2.0 - Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the same build. This patch is currently in QA and not yet available for download. Important SUSE bug 1206480 SUSE bug 1206684 SUSE bug 1210557 SUSE bug 1211427 SUSE bug 1212101 SUSE bug 1213915 SUSE bug 1214052 SUSE bug 1214460 CVE-2023-4039 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for grub2 (Important) (in QA) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for grub2 fixes the following issues: Security fixes: - CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935) - CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936) Other fixes: - Fix a boot delay issue in PowerPC PXE boot (bsc#1201300) This patch is currently in QA and not yet available for download. Important SUSE bug 1201300 SUSE bug 1215935 SUSE bug 1215936 CVE-2023-4692 CVE-2023-4693 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for qemu (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for qemu fixes the following issues: - CVE-2023-3301: Fixed incorrect cleanup of the vdpa/vhost-net structures if peer nic is present (bsc#1213414). - CVE-2023-0330: Fixed reentrancy issues in the LSI controller (bsc#1207205). - CVE-2023-2861: Fixed opening special files in 9pfs (bsc#1212968). - CVE-2023-3255: Fixed infinite loop in inflate_buffer() leads to denial of service (bsc#1213001). Bugfixes: - hw/ide/piix: properly initialize the BMIBA register (bsc#bsc#1179993) - Fixed issue where Guest did not run on XEN SLES15SP2 (bsc#1181740). Important SUSE bug 1179993 SUSE bug 1181740 SUSE bug 1207205 SUSE bug 1212968 SUSE bug 1213001 SUSE bug 1213414 CVE-2023-0330 CVE-2023-2861 CVE-2023-3255 CVE-2023-3301 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for suse-module-tools (Important) (in QA) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for suse-module-tools fixes the following issues: - Update to version 15.5.3: - CVE-2023-1829: Blacklisted the Linux kernel tcindex classifier module (bsc#1210335). - CVE-2023-23559: Blacklisted the Linux kernel RNDIS modules (bsc#1205767, jsc#PED-5731). This patch is currently in QA and not yet available for download. Important SUSE bug 1205767 SUSE bug 1210335 CVE-2023-1829 CVE-2023-23559 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for salt (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for salt fixes the following issues: Security fixes: - CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741) Bug fixes: - Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994) - Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591) Moderate SUSE bug 1210994 SUSE bug 1211591 SUSE bug 1211741 CVE-2023-28370 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for SUSE Manager Client Tools (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update fixes the following issues: python-tornado: - Security fixes: * CVE-2023-28370: Fixed an open redirect issue in the static file handler (bsc#1211741) prometheus-blackbox_exporter: - Use obscpio for go modules service - Set version number - Set build date from SOURCE_DATE_EPOCH - Update to 0.24.0 (bsc#1212279, jsc#PED-4556) * Requires go1.19 - Avoid empty validation script - Add rc symlink for backwards compatibility spacecmd: - Version 4.3.22-1 * Bypass traditional systems check on older SUMA instances (bsc#1208612) Moderate SUSE bug 1208612 SUSE bug 1211741 SUSE bug 1212279 CVE-2023-28370 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). The following non-security bugs were fixed: - Dropped patch that caused issues with k3s (bsc#1213705). - ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes). - ASoC: SOF: topology: Fix logic for copying tuples (git-fixes). - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes). - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes). - Bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes). - Bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes). - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - Bluetooth: fix use-bdaddr-property quirk (git-fixes). - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - Bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes). - Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758) - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525). - PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes) - Revert 'drm/i915: Disable DSB usage for now' (git-fixes). - USB: dwc2: Fix some error handling paths (git-fixes). - USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). - USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). - USB: typec: Fix fast_role_swap_current show function (git-fixes). - Update config and supported.conf files due to renaming. - acpi: Fix suspend with Xen PV (git-fixes). - adreno: Shutdown the GPU properly (git-fixes). - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes) - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes) - arm64: vdso: Pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - can: bcm: Fix UAF in bcm_proc_show() (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in DebugData (bsc#1193629). - cifs: print client_guid in DebugData (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: tegra194: Fix module loading (git-fixes). - devlink: fix kernel-doc notation warnings (git-fixes). - dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: Add Z8 allow states to z-state support list (git-fixes). - drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes). - drm/amd/display: Add minimum Z8 residency debug option (git-fixes). - drm/amd/display: Add missing WA and MCLK validation (git-fixes). - drm/amd/display: Change default Z8 watermark values (git-fixes). - drm/amd/display: Correct DML calculation to align HW formula (git-fixes). - drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes). - drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes). - drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes). - drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes). - drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes). - drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes). - drm/amd/display: Fix Z8 support configurations (git-fixes). - drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes). - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: Have Payload Properly Created After Resume (git-fixes). - drm/amd/display: Lowering min Z8 residency time (git-fixes). - drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: Refactor eDP PSR codes (git-fixes). - drm/amd/display: Remove FPU guards from the DML folder (git-fixes). - drm/amd/display: Remove optimization for VRR updates (git-fixes). - drm/amd/display: Remove stutter only configurations (git-fixes). - drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes). - drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes). - drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes). - drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes). - drm/amd/pm: resolve reboot exception for si oland (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (git-fixes). - drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (git-fixes). - drm/amd/pm: workaround for compute workload type on some skus (git-fixes). - drm/amd: Add a new helper for loading/validating microcode (git-fixes). - drm/amd: Do not allow s0ix on APUs older than Raven (git-fixes). - drm/amd: Load MES microcode during early_init (git-fixes). - drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes). - drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (git-fixes). - drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes). - drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes). - drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes). - drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes). - drm/amdgpu/mes11: enable reg active poll (git-fixes). - drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes (git-fixes). - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes). - drm/amdgpu: Do not set struct drm_driver.output_poll_changed (git-fixes). - drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes). - drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes). - drm/amdgpu: Fix sdma v4 sw fini error (git-fixes). - drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes). - drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs (git-fixes). - drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes). - drm/amdgpu: change reserved vram info print (git-fixes). - drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes). - drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes). - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes). - drm/amdgpu: refine get gpu clock counter method (git-fixes). - drm/amdgpu: remove deprecated MES version vars (git-fixes). - drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes). - drm/amdgpu: set gfx9 onwards APU atomics support to be true (git-fixes). - drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes). - drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes). - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() (git-fixes). - drm/bridge: anx7625: Prevent endless probe loop (git-fixes). - drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes). - drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes). - drm/client: Fix memory leak in drm_client_target_cloned (git-fixes). - drm/display/dp_mst: Fix payload addition on a disconnected sink (git-fixes). - drm/display: Do not block HDR_OUTPUT_METADATA on unknown EOTF (git-fixes). - drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes). - drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes). - drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage (git-fixes). - drm/etnaviv: move idle mapping reaping into separate function (git-fixes). - drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes). - drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs (bsc#1213493). - drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes). - drm/i915/gt: Cleanup partial engine discovery failures (git-fixes). - drm/i915/guc: Add error-capture init warnings when needed (git-fixes). - drm/i915/guc: Fix missing ecodes (git-fixes). - drm/i915/guc: Limit scheduling properties to avoid overflow (git-fixes). - drm/i915/guc: Rename GuC register state capture node to be more obvious (git-fixes). - drm/i915/mtl: update scaler source and destination limits for MTL (git-fixes). - drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs (git-fixes). - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes). - drm/i915/tc: Fix TC port link ref init for DP MST during HW readout (git-fixes). - drm/i915: Allow panel fixed modes to have differing sync polarities (git-fixes). - drm/i915: Check pipe source size when using skl+ scalers (git-fixes). - drm/i915: Do panel VBT init early if the VBT declares an explicit panel type (git-fixes). - drm/i915: Fix TypeC mode initialization during system resume (git-fixes). - drm/i915: Fix a memory leak with reused mmap_offset (git-fixes). - drm/i915: Fix negative value passed as remaining time (git-fixes). - drm/i915: Fix one wrong caching mode enum usage (git-fixes). - drm/i915: Introduce intel_panel_init_alloc() (git-fixes). - drm/i915: Never return 0 if not all requests retired (git-fixes). - drm/i915: Populate encoder->devdata for DSI on icl+ (git-fixes). - drm/i915: Print return value on error (git-fixes). - drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes). - drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (git-fixes). - drm/msm/a5xx: really check for A510 in a5xx_gpu_init (git-fixes). - drm/msm/adreno: Simplify read64/write64 helpers (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: Add DSC hardware blocks to register snapshot (git-fixes). - drm/msm/dpu: Assign missing writeback log_mask (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes). - drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register (git-fixes). - drm/msm/hdmi: use devres helper for runtime PM management (git-fixes). - drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable (git-fixes). - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes). - drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes). - drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes). - drm/ttm: Do not leak a resource on swapout move error (git-fixes). - drm/virtio: Fix memory leak in virtio_gpu_object_create() (git-fixes). - drm/virtio: Simplify error handling of virtio_gpu_object_create() (git-fixes). - drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable (git-fixes). - drm/vmwgfx: Remove ttm object hashtable (git-fixes). - drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes). - drm/vmwgfx: Write the driver id registers (git-fixes). - drm: Add fixed-point helper to get rounded integer values (git-fixes). - drm: Add missing DP DSC extended capability definitions (git-fixes). - drm: Optimize drm buddy top-down allocation method (git-fixes). - drm: buddy_allocator: Fix buddy allocator init on 32-bit systems (git-fixes). - drm: panel-orientation-quirks: Add quirk for DynaBook K50 (git-fixes). - drm: rcar-du: Add quirk for H3 ES1.x pclk workaround (git-fixes). - drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes). - drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes). - fuse: ioctl: translate ENOSYS in outarg (bsc#1213524). - fuse: revalidate: do not invalidate if interrupted (bsc#1213523). - i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226). - irqchip/gic-v3: Claim iomem resources (bsc#1213533) - irqchip/gicv3: Handle resource request failure consistently (bsc#1213533) - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533) - kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243). - kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers - kabi/severities: ignore kABI of i915 module It's exported only for its sub-module, not really used by externals - kabi/severities: ignore kABI of vmwgfx The driver exports a function unnecessarily without used by anyone else. Ignore the kABI changes. - memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905). - net: mana: Add support for vlan tagging (bsc#1212301). - net: phy: prevent stale pointer dereference in phy_init() (git-fixes). - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (git-fixes). - net: qrtr: start MHI channel after endpoit creation (git-fixes). - nilfs2: reject devices with insufficient block count (git-fixes). - ocfs2: Switch to security_inode_init_security() (git-fixes). - ocfs2: check new file size on fallocate call (git-fixes). - ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes). - perf/x86/amd/core: Always clear status for idx (bsc#1213233). - pie: fix kernel-doc notation warning (git-fixes). - powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869). - powerpc/64s: Fix VAS mm use after free (bsc#1194869). - powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869). - powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869). - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869). - powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869). - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes). - powerpc/mm: Switch obsolete dssall to .long (bsc#1194869). - powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869). - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869). - powerpc/prom_init: Fix kernel config grep (bsc#1194869). - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (jsc#PED-542 git-fixes). - powerpc/secvar: fix refcount leak in format_show() (bsc#1194869). - powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869). - powerpc: clean vdso32 and vdso64 directories (bsc#1194869). - powerpc: define get_cycles macro for arch-override (bsc#1194869). - powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869). - rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*. - rsi: remove kernel-doc comment marker (git-fixes). - s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259). - s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258). - s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263). - s390/pci: clean up left over special treatment for function zero (bsc#1212525). - s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525). - s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525). - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252). - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt; 2.36 (git-fixes bsc#1213264). - s390: discard .interp section (git-fixes bsc#1213247). - security: keys: Modify mismatched function name (git-fixes). - selftests/ir: fix build with ancient kernel headers (git-fixes). - selftests: cgroup: fix unsigned comparison with less than zero (git-fixes). - selftests: forwarding: Fix packet matching in mirroring selftests (git-fixes). - selftests: tc: add 'ct' action kconfig dep (git-fixes). - selftests: tc: add ConnTrack procfs kconfig (git-fixes). - selftests: tc: set timeout to 15 minutes (git-fixes). - signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869). - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869). - smb3: do not reserve too many oplock credits (bsc#1193629). - smb3: missing null check in SMB2_change_notify (bsc#1193629). - smb: client: fix broken file attrs with nodfs mounts (bsc#1193629). - smb: client: fix missed ses refcounting (git-fixes). - smb: client: fix parsing of source mount option (bsc#1193629). - smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629). - smb: client: fix warning in CIFSFindFirst() (bsc#1193629). - smb: client: fix warning in CIFSFindNext() (bsc#1193629). - smb: client: fix warning in cifs_match_super() (bsc#1193629). - smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629). - smb: client: fix warning in generic_ip_connect() (bsc#1193629). - smb: client: improve DFS mount check (bsc#1193629). - smb: client: remove redundant pointer 'server' (bsc#1193629). - smb: delete an unnecessary statement (bsc#1193629). - smb: move client and server files to common directory fs/smb (bsc#1193629). - smb: remove obsolete comment (bsc#1193629). - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (git-fixes). - soundwire: cadence: Drain the RX FIFO after an IO timeout (git-fixes). - soundwire: stream: Add missing clear of alloc_slave_rt (git-fixes). - spi: bcm63xx: fix max prepend length (git-fixes). - swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes). - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes). - wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes). - wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart (git-fixes). - wifi: ath11k: Add missing check for ioremap (git-fixes). - wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes). - x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes). - x86/platform/uv: Add platform resolving #defines for misc GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Fix printed information in calc_mmioh_map (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Remove remaining BUG_ON() and BUG() calls (bsc#1212256 jsc#PED-4718). - x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Update UV platform code for SNC (bsc#1212256 jsc#PED-4718). - x86/platform/uv: When searching for minimums, start at INT_MAX not 99999 (bsc#1212256 jsc#PED-4718). - x86: Fix .brk attribute in linker script (git-fixes). - xfs: clean up the rtbitmap fsmap backend (git-fixes). - xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes). - xfs: do not reverse order of items in bulk AIL insertion (git-fixes). - xfs: fix getfsmap reporting past the last rt extent (git-fixes). - xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes). - xfs: fix interval filtering in multi-step fsmap queries (git-fixes). - xfs: fix logdev fsmap query result filtering (git-fixes). - xfs: fix off-by-one error when the last rt extent is in use (git-fixes). - xfs: fix uninitialized variable access (git-fixes). - xfs: make fsmap backend function key parameters const (git-fixes). - xfs: make the record pointer passed to query_range functions const (git-fixes). - xfs: pass explicit mount pointer to rtalloc query functions (git-fixes). Important SUSE bug 1150305 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1207894 SUSE bug 1208788 SUSE bug 1211243 SUSE bug 1211867 SUSE bug 1212256 SUSE bug 1212301 SUSE bug 1212525 SUSE bug 1212846 SUSE bug 1212905 SUSE bug 1213059 SUSE bug 1213061 SUSE bug 1213205 SUSE bug 1213206 SUSE bug 1213226 SUSE bug 1213233 SUSE bug 1213245 SUSE bug 1213247 SUSE bug 1213252 SUSE bug 1213258 SUSE bug 1213259 SUSE bug 1213263 SUSE bug 1213264 SUSE bug 1213286 SUSE bug 1213493 SUSE bug 1213523 SUSE bug 1213524 SUSE bug 1213533 SUSE bug 1213543 SUSE bug 1213705 CVE-2023-20593 CVE-2023-2985 CVE-2023-3117 CVE-2023-31248 CVE-2023-3390 CVE-2023-35001 CVE-2023-3812 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xtrans (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xtrans fixes the following issues: - CVE-2020-25697: Fixed local privilege escalation via TRANS_ABSTRACT on the client side (bsc#1178613). Low SUSE bug 1178613 CVE-2020-25697 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-1_1 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-1_1 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) Moderate SUSE bug 1213853 CVE-2023-3817 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-3 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-3 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) Moderate SUSE bug 1213853 CVE-2023-3817 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for keylime (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for keylime fixes the following issues: - CVE-2023-38200: Fixed a DoS attack against it's SSL connections. (bsc#1213310) Important SUSE bug 1213310 CVE-2023-38200 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gstreamer-plugins-good (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gstreamer-plugins-good fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow remote code execution vulnerability. (bsc#1213128) Important SUSE bug 1213128 CVE-2023-37327 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gstreamer-plugins-bad (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder which might trigger a crash or remote code execution. (bsc#1213126) Important SUSE bug 1213126 CVE-2023-37329 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gstreamer-plugins-base (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gstreamer-plugins-base fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow remote code execution vulnerability. (bsc#1213128) - CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow remote code execution vulnerability. (bsc#1213131) Important SUSE bug 1213128 SUSE bug 1213131 CVE-2023-37327 CVE-2023-37328 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for wireshark (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: Update to Wireshark 3.6.15: - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.6.15.html Security fixes: - CVE-2023-0667: Fixed failure to validate MS-MMS packet length (bsc#1212084). - CVE-2023-0668: Fixed IEEE C37.118 Synchrophasor dissector crash (bsc#1211710). - CVE-2023-2855: Fixed Candump log file parser crash (bsc#1211703). - CVE-2023-2856: Fixed VMS TCPIPtrace file parser crash (bsc#1211707). - CVE-2023-2857: Fixed BLF file parser crash (bsc#1211705). - CVE-2023-2858: Fixed NetScaler file parser crash (bsc#1211706). - CVE-2023-2879: Fixed GDSDB dissector infinite loop (bsc#1211793). - CVE-2023-2952: Fixed XRA dissector infinite loop (bsc#1211844). - CVE-2023-3648: Fixed Kafka dissector crash (bsc#1213319). Moderate SUSE bug 1211703 SUSE bug 1211705 SUSE bug 1211706 SUSE bug 1211707 SUSE bug 1211710 SUSE bug 1211793 SUSE bug 1211844 SUSE bug 1212084 SUSE bug 1213319 CVE-2023-0667 CVE-2023-0668 CVE-2023-2855 CVE-2023-2856 CVE-2023-2857 CVE-2023-2858 CVE-2023-2879 CVE-2023-2952 CVE-2023-3648 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for java-11-openjdk (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-11-openjdk fixes the following issues: Updated to jdk-11.0.20+8 (July 2023 CPU): - CVE-2023-22006: Fixed vulnerability in the network component (bsc#1213473). - CVE-2023-22036: Fixed vulnerability in the utility component (bsc#1213474). - CVE-2023-22041: Fixed vulnerability in the hotspot component (bsc#1213475). - CVE-2023-22044: Fixed vulnerability in the hotspot component (bsc#1213479). - CVE-2023-22045: Fixed vulnerability in the hotspot component (bsc#1213481). - CVE-2023-22049: Fixed vulnerability in the libraries component (bsc#1213482). - CVE-2023-25193: Fixed vulnerability in the embedded harfbuzz module (bsc#1207922). - JDK-8298676: Enhanced Look and Feel - JDK-8300285: Enhance TLS data handling - JDK-8300596: Enhance Jar Signature validation - JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1 - JDK-8302475: Enhance HTTP client file downloading - JDK-8302483: Enhance ZIP performance - JDK-8303376: Better launching of JDI - JDK-8304468: Better array usages - JDK-8305312: Enhanced path handling - JDK-8308682: Enhance AES performance Bugfixes: - JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with Stream closed - JDK-8178806: Better exception logging in crypto code - JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed out - JDK-8209167: Use CLDR's time zone mappings for Windows - JDK-8209546: Make sun/security/tools/keytool/autotest.sh to support macosx - JDK-8209880: tzdb.dat is not reproducibly built - JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java fails - JDK-8214459: NSS source should be removed - JDK-8214807: Improve handling of very old class files - JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from tests - JDK-8215575: C2 crash: assert(get_instanceKlass()->is_loaded()) failed: must be at least loaded - JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle - JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java fails with AssertionError - JDK-8232853: AuthenticationFilter.Cache::remove may throw ConcurrentModificationException - JDK-8243936: NonWriteable system properties are actually writeable - JDK-8246383: NullPointerException in JceSecurity.getVerificationResult when using Entrust provider - JDK-8248701: On Windows generated modules-deps.gmk can contain backslash-r (CR) characters - JDK-8257856: Make ClassFileVersionsTest.java robust to JDK version updates - JDK-8259530: Generated docs contain MIT/GPL-licenced works without reproducing the licence - JDK-8263420: Incorrect function name in NSAccessibilityStaticText native peer implementation - JDK-8264290: Create implementation for NSAccessibilityComponentGroup protocol peer - JDK-8264304: Create implementation for NSAccessibilityToolbar protocol peer - JDK-8265486: ProblemList javax/sound/midi/Sequencer/ /Recording.java on macosx-aarch64 - JDK-8268558: [TESTBUG] Case 2 in TestP11KeyFactoryGetRSAKeySpec is skipped - JDK-8269746: C2: assert(!in->is_CFG()) failed: CFG Node with no controlling input? - JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile - JDK-8275233: Incorrect line number reported in exception stack trace thrown from a lambda expression - JDK-8275721: Name of UTC timezone in a locale changes depending on previous code - JDK-8275735: [linux] Remove deprecated Metrics api (kernel memory limit) - JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir as unnecessary - JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java - add 4357905 - JDK-8278434: timeouts in test java/time/test/java/time/format/ /TestZoneTextPrinterParser.java - JDK-8280703: CipherCore.doFinal(...) causes potentially massive byte[] allocations during decryption - JDK-8282077: PKCS11 provider C_sign() impl should handle CKR_BUFFER_TOO_SMALL error - JDK-8282201: Consider removal of expiry check in VerifyCACerts.java test - JDK-8282467: add extra diagnostics for JDK-8268184 - JDK-8282600: SSLSocketImpl should not use user_canceled workaround when not necessary - JDK-8283059: Uninitialized warning in check_code.c with GCC 11.2 - JDK-8285497: Add system property for Java SE specification maintenance version - JDK-8286398: Address possibly lossy conversions in jdk.internal.le - JDK-8287007: [cgroups] Consistently use stringStream throughout parsing code - JDK-8287246: DSAKeyValue should check for missing params instead of relying on KeyFactory provider - JDK-8287876: The recently de-problemlisted TestTitledBorderLeak test is unstable - JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md with information on 4th party dependencies - JDK-8289301: P11Cipher should not throw out of bounds exception during padding - JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space - JDK-8291226: Create Test Cases to cover scenarios for JDK-8278067 - JDK-8291637: HttpClient default keep alive timeout not followed if server sends invalid value - JDK-8291638: Keep-Alive timeout of 0 should close connection immediately - JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage() is lower than expected - JDK-8293232: Fix race condition in pkcs11 SessionManager - JDK-8293815: P11PSSSignature.engineUpdate should not print debug messages during normal operation - JDK-8294548: Problem list SA core file tests on macosx-x64 due to JDK-8294316 - JDK-8294906: Memory leak in PKCS11 NSS TLS server - JDK-8295974: jni_FatalError and Xcheck:jni warnings should print the native stack when there are no Java frames - JDK-8296934: Write a test to verify whether Undecorated Frame can be iconified or not - JDK-8297000: [jib] Add more friendly warning for proxy issues - JDK-8297450: ScaledTextFieldBorderTest.java fails when run with -show parameter - JDK-8298887: On the latest macOS+XCode the Robot API may report wrong colors - JDK-8299259: C2: Div/Mod nodes without zero check could be split through iv phi of loop resulting in SIGFPE - JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy due to constant NULL src argument - JDK-8300205: Swing test bug8078268 make latch timeout configurable - JDK-8300490: Spaces in name of MacOS Code Signing Identity are not correctly handled after JDK-8293550 - JDK-8301119: Support for GB18030-2022 - JDK-8301170: perfMemory_windows.cpp add free_security_attr to early returns - JDK-8301401: Allow additional characters for GB18030-2022 support - JDK-8302151: BMPImageReader throws an exception reading BMP images - JDK-8302791: Add specific ClassLoader object to Proxy IllegalArgumentException message - JDK-8303102: jcmd: ManagementAgent.status truncates the text longer than O_BUFLEN - JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m needs CFRelease call in early potential CHECK_NULL return - JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20 - JDK-8303440: The 'ZonedDateTime.parse' may not accept the 'UTC+XX' zone id - JDK-8303465: KeyStore of type KeychainStore, provider Apple does not show all trusted certificates - JDK-8303476: Add the runtime version in the release file of a JDK image - JDK-8303482: Update LCMS to 2.15 - JDK-8303564: C2: 'Bad graph detected in build_loop_late' after a CMove is wrongly split thru phi - JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs CFRelease call in early potential CHECK_NULL return - JDK-8303822: gtestMain should give more helpful output - JDK-8303861: Error handling step timeouts should never be blocked by OnError and others - JDK-8303937: Corrupted heap dumps due to missing retries for os::write() - JDK-8304134: jib bootstrapper fails to quote filename when checking download filetype - JDK-8304291: [AIX] Broken build after JDK-8301998 - JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998 - JDK-8304350: Font.getStringBounds calculates wrong width for TextAttribute.TRACKING other than 0.0 - JDK-8304760: Add 2 Microsoft TLS roots - JDK-8305113: (tz) Update Timezone Data to 2023c - JDK-8305400: ISO 4217 Amendment 175 Update - JDK-8305528: [11u] Backport of JDK-8259530 breaks build with JDK10 bootstrap VM - JDK-8305682: Update the javadoc in the Character class to state support for GB 18030-2022 Implementation Level 2 - JDK-8305711: Arm: C2 always enters slowpath for monitorexit - JDK-8305721: add `make compile-commands` artifacts to .gitignore - JDK-8305975: Add TWCA Global Root CA - JDK-8306543: GHA: MSVC installation is failing - JDK-8306658: GHA: MSVC installation could be optional since it might already be pre-installed - JDK-8306664: GHA: Update MSVC version to latest stepping - JDK-8306768: CodeCache Analytics reports wrong threshold - JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep - JDK-8307134: Add GTS root CAs - JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest fails after backport of JDK-8303861 - JDK-8308006: Missing NMT memory tagging in CMS - JDK-8308884: [17u/11u] Backout JDK-8297951 - JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java fails intermittently - JDK-8311465: [11u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20 Important SUSE bug 1207922 SUSE bug 1213473 SUSE bug 1213474 SUSE bug 1213475 SUSE bug 1213479 SUSE bug 1213481 SUSE bug 1213482 CVE-2023-22006 CVE-2023-22036 CVE-2023-22041 CVE-2023-22044 CVE-2023-22045 CVE-2023-22049 CVE-2023-25193 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for poppler (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for poppler fixes the following issues: - CVE-2019-16115: Fixed an uninitialized memory error in GfxUnivariateShading::setupCache. (bsc#1150039) Moderate SUSE bug 1150039 CVE-2019-16115 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for kernel-firmware (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for kernel-firmware fixes the following issues: - CVE-2023-20569: Fixed AMD 19h ucode to mitigate a side channel vulnerability in some of the AMD CPUs. (bsc#1213287) Moderate SUSE bug 1213287 CVE-2023-20569 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libyajl (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libyajl fixes the following issues: - CVE-2023-33460: Fixed memory leak which could cause out-of-memory in server (bsc#1212928). Moderate SUSE bug 1212928 CVE-2023-33460 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627). - CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417). - CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812). The following non-security bugs were fixed: - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445). - ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445). - ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes). - ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes). - afs: Adjust ACK interpretation to try and cope with NAT (git-fixes). - afs: Fix access after dec in put functions (git-fixes). - afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes). - afs: Fix dynamic root getattr (git-fixes). - afs: Fix fileserver probe RTT handling (git-fixes). - afs: Fix infinite loop found by xfstest generic/676 (git-fixes). - afs: Fix lost servers_outstanding count (git-fixes). - afs: Fix server->active leak in afs_put_server (git-fixes). - afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes). - afs: Fix updating of i_size with dv jump from server (git-fixes). - afs: Fix vlserver probe RTT handling (git-fixes). - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes). - afs: Use refcount_t rather than atomic_t (git-fixes). - afs: Use the operation issue time instead of the reply time for callbacks (git-fixes). - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes). - ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes). - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes). - ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes). - ALSA: hda/realtek - remove 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes). - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes). - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes). - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129). - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes). - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes). - ALSA: usb-audio: Avoid unnecessary interface change at EP close (git-fixes). - ALSA: usb-audio: Clear fixed clock rate at closing EP (git-fixes). - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Drop superfluous interface setup at parsing (git-fixes). - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes). - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes). - ALSA: usb-audio: More refactoring of hw constraint rules (git-fixes). - ALSA: usb-audio: Properly refcounting clock rate (git-fixes). - ALSA: usb-audio: Rate limit usb_set_interface error reporting (git-fixes). - ALSA: usb-audio: Refcount multiple accesses on the single clock (git-fixes). - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (git-fixes). - ALSA: usb-audio: Update for native DSD support quirks (git-fixes). - ALSA: usb-audio: Use atomic_try_cmpxchg in ep_state_update (git-fixes). - ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes). - amd-pstate: Fix amd_pstate mode switch (git-fixes). - ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes). - ASoC: atmel: Fix the 8K sample parameter in I2SC master (git-fixes). - ASoc: codecs: ES8316: Fix DMIC config (git-fixes). - ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes). - ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes). - ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes). - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes). - ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes). - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes). - ASoC: da7219: Check for failure reading AAD IRQ events (git-fixes). - ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes). - ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes). - ASoC: fsl_spdif: Silence output on stop (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes). - ASoC: tegra: Fix ADX byte map (git-fixes). - ASoC: tegra: Fix AMX byte map (git-fixes). - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (git-fixes). - ata: pata_ns87415: mark ns87560_tf_read static (git-fixes). - block, bfq: Fix division by zero error on zero wsum (bsc#1213653). - block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes). - bus: mhi: add new interfaces to handle MHI channels directly (bsc#1207948). - bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948). - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes). - ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856). - coda: Avoid partial allocation of sig_inputArgs (git-fixes). - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State frequencies attributes (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State performance attributes (bsc#1212445). - cpufreq: amd-pstate: Add boost mode support for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445). - cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445). - cpufreq: amd-pstate: Add fast switch function for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: Add guided autonomous mode (bsc#1212445). - cpufreq: amd-pstate: Add guided mode control support via sysfs (bsc#1212445). - cpufreq: amd-pstate: Add more tracepoint for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: Add resume and suspend callbacks (bsc#1212445). - cpufreq: amd-pstate: Add trace for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445). - cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445). - cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445). - cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL register at init (bsc#1212445). - cpufreq: amd-pstate: Expose struct amd_cpudata (bsc#1212445). - cpufreq: amd-pstate: Fix initial highest_perf value (bsc#1212445). - cpufreq: amd-pstate: Fix invalid write to MSR_AMD_CPPC_REQ (bsc#1212445). - cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445). - cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment (bsc#1212445). - cpufreq: amd-pstate: fix white-space (bsc#1212445). - cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445). - cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445). - cpufreq: amd-pstate: implement Pstate EPP support for the AMD processors (bsc#1212445). - cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445). - cpufreq: amd-pstate: Introduce a new AMD P-State driver to support future processors (bsc#1212445). - cpufreq: amd-pstate: Introduce the support for the processors with shared memory solution (bsc#1212445). - cpufreq: amd-pstate: Let user know amd-pstate is disabled (bsc#1212445). - cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated (bsc#1212445). - cpufreq: amd-pstate: Make varaiable mode_state_machine static (bsc#1212445). - cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445). - cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (bsc#1212445). - cpufreq: amd-pstate: Remove fast_switch_possible flag from active driver (bsc#1212445). - cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules (bsc#1212445). - cpufreq: amd-pstate: Set a fallback policy based on preferred_profile (bsc#1212445). - cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445). - cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() (bsc#1212445). - cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445). - cpufreq: amd-pstate: Write CPPC enable bit per-socket (bsc#1212445). - crypto: kpp - Add helper to set reqsize (git-fixes). - crypto: qat - Use helper to set reqsize (git-fixes). - dlm: fix missing lkb refcount handling (git-fixes). - dlm: fix plock invalid read (git-fixes). - Documentation: cpufreq: amd-pstate: Move amd_pstate param to alphabetical order (bsc#1212445). - Documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes). - drm/amd/display: Add monitor specific edid quirk (git-fixes). - drm/amd/display: Add polling method to handle MST reply packet (bsc#1213578). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes). - drm/amd/display: Disable MPC split by default on special asic (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix seamless odm transitions (git-fixes). - drm/amd/display: Keep PHY active for DP displays on DCN31 (git-fixes). - drm/amd/display: only accept async flips for fast updates (git-fixes). - drm/amd/display: Only update link settings after successful MST link train (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() (git-fixes). - drm/amd: Fix an error handling mistake in psp_sw_init() (git-fixes). - drm/amdgpu: add the fan abnormal detection feature (git-fixes). - drm/amdgpu: avoid restore process run into dead loop (git-fixes). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes). - drm/amdgpu: Fix minmax warning (git-fixes). - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes). - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 (git-fixes). - drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes). - drm/amd/pm: share the code around SMU13 pcie parameters update (git-fixes). - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes). - drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (git-fixes). - drm/client: Fix memory leak in drm_client_modeset_probe (git-fixes). - drm/dp_mst: Clear MSG_RDY flag before sending new message (bsc#1213578). - drm: Fix null pointer dereference in drm_dp_atomic_find_time_slots() (bsc#1213578). - drm/i915: Do not preserve dpll_hw_state for slave crtc in Bigjoiner (git-fixes). - drm/i915/dpt: Use shmem for dpt objects (git-fixes). - drm/i915: Fix an error handling path in igt_write_huge() (git-fixes). - drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks (git-fixes). - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (git-fixes). - drm/radeon: Fix integer overflow in radeon_cs_parser_init (git-fixes). - drm/ttm: fix bulk_move corruption when adding a entry (git-fixes). - drm/ttm: fix warning that we shouldn't mix && and || (git-fixes). - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (bsc#1213632). - drm/vmwgfx: Remove explicit and broken vblank handling (bsc#1213632). - drm/vmwgfx: Remove rcu locks from user resources (bsc#1213632). - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes). - fbdev: imxfb: Removed unneeded release_mem_region (git-fixes). - fbdev: imxfb: warn about invalid left/right margin (git-fixes). - file: always lock position for FMODE_ATOMIC_POS (bsc#1213759). - fs: dlm: add midcomms init/start functions (git-fixes). - fs: dlm: do not set stop rx flag after node reset (git-fixes). - fs: dlm: filter user dlm messages for kernel locks (git-fixes). - fs: dlm: fix log of lowcomms vs midcomms (git-fixes). - fs: dlm: fix race between test_bit() and queue_work() (git-fixes). - fs: dlm: fix race in lowcomms (git-fixes). - fs: dlm: handle -EBUSY first in lock arg validation (git-fixes). - fs: dlm: move sending fin message into state change handling (git-fixes). - fs: dlm: retry accept() until -EAGAIN or error returns (git-fixes). - fs: dlm: return positive pid value for F_GETLK (git-fixes). - fs: dlm: start midcomms before scand (git-fixes). - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (git-fixes). - FS: JFS: Check for read-only mounted filesystem in txBegin (git-fixes). - FS: JFS: Fix null-ptr-deref Read in txBegin (git-fixes). - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (git-fixes). - gve: Set default duplex configuration to full (git-fixes). - gve: unify driver name usage (git-fixes). - hwmon: (adm1275) Allow setting sample averaging (git-fixes). - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (git-fixes). - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (git-fixes). - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes). - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes). - i2c: xiic: Do not try to handle more interrupt events after error (git-fixes). - iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED (git-fixes). - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes). - iavf: Fix out-of-bounds when setting channels on remove (git-fixes). - iavf: fix potential deadlock on allocation failure (git-fixes). - iavf: fix reset task race with iavf_remove() (git-fixes). - iavf: Fix use-after-free in free_netdev (git-fixes). - iavf: Move netdev_update_features() into watchdog task (git-fixes). - iavf: use internal state to free traffic IRQs (git-fixes). - iavf: Wait for reset in callbacks which trigger it (git-fixes). - IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes) - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - ice: handle extts in the miscellaneous interrupt thread (git-fixes). - igc: Check if hardware TX timestamping is enabled earlier (git-fixes). - igc: Enable and fix RX hash usage by netstack (git-fixes). - igc: Fix inserting of empty frame for launchtime (git-fixes). - igc: Fix Kernel Panic during ndo_tx_timeout callback (git-fixes). - igc: Fix launchtime before start of cycle (git-fixes). - igc: Fix race condition in PTP tx code (git-fixes). - igc: Handle PPS start time programming for past time values (git-fixes). - igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes). - igc: Remove delay during TX ring configuration (git-fixes). - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes). - igc: Work around HW bug causing missing timestamps (git-fixes). - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (git-fixes). - Input: iqs269a - do not poll during ATI (git-fixes). - Input: iqs269a - do not poll during suspend or resume (git-fixes). - jffs2: fix memory leak in jffs2_do_fill_super (git-fixes). - jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes). - jffs2: fix memory leak in jffs2_scan_medium (git-fixes). - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes). - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (git-fixes). - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes). - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (git-fixes). - kABI fix after Restore kABI for NVidia vGPU driver (bsc#1210825). - kabi/severities: relax kABI for ath11k local symbols (bsc#1207948) - kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes). - KVM: arm64: Do not read a HW interrupt pending state in user context (git-fixes) - KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620) - KVM: Do not null dereference ops->destroy (git-fixes) - KVM: downgrade two BUG_ONs to WARN_ON_ONCE (git-fixes) - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL (git-fixes) - KVM: s390: pv: fix index value of replaced ASCE (git-fixes bsc#1213867). - KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported (git-fixes). - KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) (git-fixes). - KVM: VMX: restore vmx_vmexit alignment (git-fixes). - KVM: x86: Account fastpath-only VM-Exits in vCPU stats (git-fixes). - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes). - libceph: harden msgr2.1 frame segment length checks (bsc#1213857). - MAINTAINERS: Add AMD P-State driver maintainer entry (bsc#1212445). - m ALSA: usb-audio: Add quirk for Tascam Model 12 (git-fixes). - md: add error_handlers for raid0 and linear (bsc#1212766). - media: staging: atomisp: select V4L2_FWNODE (git-fixes). - mhi_power_down() kABI workaround (bsc#1207948). - mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes). - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes). - net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes). - net: mana: Batch ringing RX queue doorbell on receiving packets (bsc#1212901). - net: mana: Use the correct WQE count for ringing RQ doorbell (bsc#1212901). - net/mlx5: DR, Support SW created encap actions for FW table (git-fixes). - net/mlx5e: Check for NOT_READY flag state after locking (git-fixes). - net/mlx5e: fix double free in mlx5e_destroy_flow_table (git-fixes). - net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (git-fixes). - net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes). - net/mlx5e: XDP, Allow growing tail for XDP multi buffer (git-fixes). - net/mlx5e: xsk: Set napi_id to support busy polling on XSK RQ (git-fixes). - net: phy: marvell10g: fix 88x3310 power up (git-fixes). - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585). - nfsd: add encoding of op_recall flag for write delegation (git-fixes). - nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes). - nfsd: Fix sparse warning (git-fixes). - nfsd: Remove open coding of string copy (git-fixes). - nfsv4.1: Always send a RECLAIM_COMPLETE after establishing lease (git-fixes). - nfsv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (git-fixes). - nvme: do not reject probe due to duplicate IDs for single-ported PCIe devices (git-fixes). - nvme: fix the NVME_ID_NS_NVM_STS_MASK definition (git-fixes). - nvme-pci: fix DMA direction of unmapping integrity data (git-fixes). - nvme-pci: remove nvme_queue from nvme_iod (git-fixes). - octeontx2-af: Move validation of ptp pointer before its usage (git-fixes). - octeontx2-pf: Add additional check for MCAM rules (git-fixes). - octeontx-af: fix hardware timestamp configuration (git-fixes). - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes). - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes). - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (git-fixes). - pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes). - pinctrl: amd: Do not show `Invalid config param` errors (git-fixes). - pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes). - pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes). - pinctrl: amd: Use amd_pinconf_set() for all config options (git-fixes). - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (git-fixes). - RDMA/bnxt_re: Fix hang during driver unload (git-fixes) - RDMA/bnxt_re: Prevent handling any completions after qp destroy (git-fixes) - RDMA/core: Update CMA destination address on rdma_resolve_addr (git-fixes) - RDMA/irdma: Add missing read barriers (git-fixes) - RDMA/irdma: Fix data race on CQP completion stats (git-fixes) - RDMA/irdma: Fix data race on CQP request done (git-fixes) - RDMA/irdma: Fix op_type reporting in CQEs (git-fixes) - RDMA/irdma: Report correct WC error (git-fixes) - RDMA/mlx4: Make check for invalid flags stricter (git-fixes) - RDMA/mthca: Fix crash when polling CQ for shared QPs (git-fixes) - regmap: Account for register length in SMBus I/O limits (git-fixes). - regmap: Drop initial version of maximum transfer length fixes (git-fixes). - Restore kABI for NVidia vGPU driver (bsc#1210825). - Revert 'ALSA: usb-audio: Drop superfluous interface setup at parsing' (git-fixes). - Revert 'debugfs, coccinelle: check for obsolete DEFINE_SIMPLE_ATTRIBUTE() usage' (git-fixes). - Revert 'Drop AMDGPU patches for fixing regression (bsc#1213304,bsc#1213777)' - Revert 'iavf: Detach device during reset task' (git-fixes). - Revert 'iavf: Do not restart Tx queues after reset task failure' (git-fixes). - Revert 'NFSv4: Retry LOCK on OLD_STATEID during delegation return' (git-fixes). - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (git-fixes). - Revert 'usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()' (git-fixes). - Revert 'usb: xhci: tegra: Fix error check' (git-fixes). - Revert 'xhci: add quirk for host controllers that do not update endpoint DCS' (git-fixes). - Revive drm_dp_mst_hpd_irq() function (bsc#1213578). - rxrpc, afs: Fix selection of abort codes (git-fixes). - s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870). - s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810). - s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872). - s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863). - s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870). - s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871). - s390/qeth: Fix vipa deletion (git-fixes bsc#1213713). - s390/vmem: fix empty page tables cleanup under KASAN (git-fixes bsc#1213715). - scftorture: Count reschedule IPIs (git-fixes). - scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected (bsc#1213756). - scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756). - scsi: lpfc: Clean up SLI-4 sysfs resource reporting (bsc#1213756). - scsi: lpfc: Copyright updates for 14.2.0.14 patches (bsc#1213756). - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (bsc#1213756). - scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756). - scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (bsc#1213756). - scsi: lpfc: Pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756). - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (bsc#1213756). - scsi: lpfc: Refactor cpu affinity assignment paths (bsc#1213756). - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (bsc#1213756). - scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (bsc#1213756). - scsi: lpfc: Replace one-element array with flexible-array member (bsc#1213756). - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756). - scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (bsc#1213756). - scsi: lpfc: Simplify fcp_abort transport callback log message (bsc#1213756). - scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756). - scsi: lpfc: Use struct_size() helper (bsc#1213756). - scsi: qla2xxx: Adjust IOCB resource on qpair create (bsc#1213747). - scsi: qla2xxx: Array index may go out of bound (bsc#1213747). - scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747). - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (bsc#1213747). - scsi: qla2xxx: Correct the index of array (bsc#1213747). - scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747). - scsi: qla2xxx: Fix buffer overrun (bsc#1213747). - scsi: qla2xxx: Fix command flush during TMF (bsc#1213747). - scsi: qla2xxx: Fix deletion race condition (bsc#1213747). - scsi: qla2xxx: Fix end of loop test (bsc#1213747). - scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747). - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (bsc#1213747). - scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747). - scsi: qla2xxx: Fix NULL pointer dereference in target mode (bsc#1213747). - scsi: qla2xxx: Fix potential NULL pointer dereference (bsc#1213747). - scsi: qla2xxx: Fix session hang in gnl (bsc#1213747). - scsi: qla2xxx: Fix TMF leak through (bsc#1213747). - scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747). - scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747). - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (bsc#1213747). - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (bsc#1213747). - scsi: qla2xxx: Silence a static checker warning (bsc#1213747). - scsi: qla2xxx: Turn off noisy message log (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747). - scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747). - selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes). - serial: qcom-geni: drop bogus runtime pm state update (git-fixes). - serial: sifive: Fix sifive_serial_console_setup() section (git-fixes). - series: udpate metadata Refresh - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - sfc: fix XDP queues mode with legacy IRQ (git-fixes). - sfc: use budget for TX completions (git-fixes). - soundwire: qcom: update status correctly with mask (git-fixes). - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes). - staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (git-fixes). - SUNRPC: always free ctxt when freeing deferred request (git-fixes). - SUNRPC: double free xprt_ctxt while still in use (git-fixes). - SUNRPC: Fix trace_svc_register() call site (git-fixes). - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (git-fixes). - SUNRPC: Remove dead code in svc_tcp_release_rqst() (git-fixes). - SUNRPC: remove the maximum number of retries in call_bind_status (git-fixes). - svcrdma: Prevent page release when nothing was received (git-fixes). - tpm_tis: Explicitly check for error code (git-fixes). - tty: n_gsm: fix UAF in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes). - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (git-fixes). - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (git-fixes). - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes). - ubifs: Fix AA deadlock when setting xattr for encrypted file (git-fixes). - ubifs: Fix build errors as symbol undefined (git-fixes). - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (git-fixes). - ubifs: Fix memory leak in alloc_wbufs() (git-fixes). - ubifs: Fix memory leak in do_rename (git-fixes). - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes). - ubifs: Fix to add refcount once page is set private (git-fixes). - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (git-fixes). - ubifs: Fix wrong dirty space budget for dirty inode (git-fixes). - ubifs: Free memory for tmpfile name (git-fixes). - ubifs: Rectify space amount budget for mkdir/tmpfile operations (git-fixes). - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes). - ubifs: Rectify space budget for ubifs_xrename() (git-fixes). - ubifs: Rename whiteout atomically (git-fixes). - ubifs: rename_whiteout: correct old_dir size computing (git-fixes). - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (git-fixes). - ubifs: Reserve one leb for each journal head while doing budget (git-fixes). - ubifs: Re-statistic cleaned znode count if commit failed (git-fixes). - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (git-fixes). - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (git-fixes). - Update config files: enable CONFIG_X86_AMD_PSTATE (bsc#1212445) - usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes). - usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes). - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (git-fixes). - usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). - USB: serial: option: add LARA-R6 01B PIDs (git-fixes). - usb: typec: Iterate pds array when showing the pd list (git-fixes). - usb: typec: Set port->pd before adding device for typec_port (git-fixes). - usb: typec: Use sysfs_emit_at when concatenating the string (git-fixes). - usb: xhci-mtk: set the dma max_seg_size (git-fixes). - vhost_net: revert upend_idx only on retriable error (git-fixes). - vhost: support PACKED when setting-getting vring_base (git-fixes). - virtio_net: Fix error unwinding of XDP initialization (git-fixes). - virtio-net: Maintain reverse cleanup order (git-fixes). - wifi: ath11k: add support for suspend in power down state (bsc#1207948). - wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948). - wifi: ath11k: handle thermal device registeration together with MAC (bsc#1207948). - wifi: ath11k: remove MHI LOOPBACK channels (bsc#1207948). - wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes). - wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes). - wl3501_cs: use eth_hw_addr_set() (git-fixes). - x86/PVH: obtain VGA console info in Dom0 (git-fixes). - xen/blkfront: Only check REQ_FUA for writes (git-fixes). - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes). - xfs: AIL needs asynchronous CIL forcing (bsc#1211811). - xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811). - xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811). - xfs: CIL work is serialised, not pipelined (bsc#1211811). - xfs: do not run shutdown callbacks on active iclogs (bsc#1211811). - xfs: drop async cache flushes from CIL commits (bsc#1211811). - xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811). - xfs: move the CIL workqueue to the CIL (bsc#1211811). - xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811). - xfs: order CIL checkpoint start records (bsc#1211811). - xfs: pass a CIL context to xlog_write() (bsc#1211811). - xfs: rework xlog_state_do_callback() (bsc#1211811). - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811). - xfs: separate out log shutdown callback processing (bsc#1211811). - xfs: wait iclog complete before tearing down AIL (bsc#1211811). - xfs: XLOG_STATE_IOERROR must die (bsc#1211811). - xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes). - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes). - xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes). Important SUSE bug 1206418 SUSE bug 1207129 SUSE bug 1207948 SUSE bug 1210627 SUSE bug 1210780 SUSE bug 1210825 SUSE bug 1211131 SUSE bug 1211738 SUSE bug 1211811 SUSE bug 1212445 SUSE bug 1212502 SUSE bug 1212604 SUSE bug 1212766 SUSE bug 1212901 SUSE bug 1213167 SUSE bug 1213272 SUSE bug 1213287 SUSE bug 1213304 SUSE bug 1213417 SUSE bug 1213578 SUSE bug 1213585 SUSE bug 1213586 SUSE bug 1213588 SUSE bug 1213601 SUSE bug 1213620 SUSE bug 1213632 SUSE bug 1213653 SUSE bug 1213713 SUSE bug 1213715 SUSE bug 1213747 SUSE bug 1213756 SUSE bug 1213759 SUSE bug 1213777 SUSE bug 1213810 SUSE bug 1213812 SUSE bug 1213856 SUSE bug 1213857 SUSE bug 1213863 SUSE bug 1213867 SUSE bug 1213870 SUSE bug 1213871 SUSE bug 1213872 CVE-2022-40982 CVE-2023-0459 CVE-2023-20569 CVE-2023-21400 CVE-2023-2156 CVE-2023-2166 CVE-2023-31083 CVE-2023-3268 CVE-2023-3567 CVE-2023-3609 CVE-2023-3611 CVE-2023-3776 CVE-2023-38409 CVE-2023-3863 CVE-2023-4004 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for krb5 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for krb5 fixes the following issues: - CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054) Important SUSE bug 1214054 CVE-2023-36054 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for pcre2 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for pcre2 fixes the following issues: - CVE-2022-41409: Fixed integer overflow vulnerability in pcre2test that allows attackers to cause a denial of service via negative input (bsc#1213514). Moderate SUSE bug 1213514 CVE-2022-41409 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for postgresql15 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postgresql15 fixes the following issues: - Update to 15.4 - CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059) - CVE-2023-39418: Fix MERGE to enforce row security. (bsc#1214061) Moderate SUSE bug 1214059 SUSE bug 1214061 CVE-2023-39417 CVE-2023-39418 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for re2c (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for re2c fixes the following issues: - CVE-2018-21232: Fixed excess stack consumption due to uncontrolled recursion in find_fixed_tags (bsc#1170890). Moderate SUSE bug 1170890 CVE-2018-21232 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-configobj (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-configobj fixes the following issues: - CVE-2023-26112: Fixed regular expression denial of service vulnerability in validate.py (bsc#1210070). Low SUSE bug 1210070 CVE-2023-26112 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ucode-intel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ucode-intel fixes the following issues: - Updated to Intel CPU Microcode 20230808 release. (bsc#1214099) - CVE-2022-40982: Fixed a potential security vulnerability in some Intel? Processors which may allow information disclosure. - CVE-2023-23908: Fixed a potential security vulnerability in some 3rd Generation Intel? Xeon? Scalable processors which may allow information disclosure. - CVE-2022-41804: Fixed a potential security vulnerability in some Intel? Xeon? Processors with Intel? Software Guard Extensions (SGX) which may allow escalation of privilege. Important SUSE bug 1206418 SUSE bug 1214099 CVE-2022-40982 CVE-2022-41804 CVE-2023-23908 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for postfix (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postfix fixes the following issues: - CVE-2023-32182: Fixed config_postfix SUSE specific script potentially bad /tmp file usage (bsc#1211196). - Update to from 3.7.2 to 3.7.3: - Fixes a bug where some messages were not delivered after 'warning: Unexpected record type 'X'. (bsc#1213515) Important SUSE bug 1211196 SUSE bug 1213515 CVE-2023-32182 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-38594: Fixed arbitrary code execution. - CVE-2023-38595: Fixed arbitrary code execution. - CVE-2023-38597: Fixed arbitrary code execution. - CVE-2023-38599: Fixed sensitive user information tracking. - CVE-2023-38600: Fixed arbitrary code execution. - CVE-2023-38611: Fixed arbitrary code execution. Update to version 2.40.3 (bsc#1212863): - CVE-2023-32439: Fixed a bug where processing maliciously crafted web content may lead to arbitrary code execution. (bsc#1212863) - CVE-2023-32435: Fixed a bug where processing web content may lead to arbitrary code execution. (bsc#1212863) - CVE-2022-48503: Fixed a bug where processing web content may lead to arbitrary code execution. (bsc#1212863) Important SUSE bug 1212863 SUSE bug 1213905 CVE-2022-48503 CVE-2023-32435 CVE-2023-32439 CVE-2023-38133 CVE-2023-38572 CVE-2023-38592 CVE-2023-38594 CVE-2023-38595 CVE-2023-38597 CVE-2023-38599 CVE-2023-38600 CVE-2023-38611 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ghostscript (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ghostscript fixes the following issues: - CVE-2023-38559: Fixed out-of-bounds read in devn_pcx_write_rle() that could result in DoS (bsc#1213637). Low SUSE bug 1213637 CVE-2023-38559 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gawk (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gawk fixes the following issues: - CVE-2023-4156: Fix a heap out of bound read by validating the index into argument list. (bsc#1214025) Low SUSE bug 1214025 CVE-2023-4156 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xen (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xen fixes the following issues: - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434) - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling'. (bsc#1214083, XSA-435) - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information. (bsc#1213616, XSA-433) Moderate SUSE bug 1027519 SUSE bug 1212684 SUSE bug 1213616 SUSE bug 1214082 SUSE bug 1214083 CVE-2022-40982 CVE-2023-20569 CVE-2023-20593 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ca-certificates-mozilla (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248) Added: - Atos TrustedRoot Root CA ECC G2 2020 - Atos TrustedRoot Root CA ECC TLS 2021 - Atos TrustedRoot Root CA RSA G2 2020 - Atos TrustedRoot Root CA RSA TLS 2021 - BJCA Global Root CA1 - BJCA Global Root CA2 - LAWtrust Root CA2 (4096) - Sectigo Public Email Protection Root E46 - Sectigo Public Email Protection Root R46 - Sectigo Public Server Authentication Root E46 - Sectigo Public Server Authentication Root R46 - SSL.com Client ECC Root CA 2022 - SSL.com Client RSA Root CA 2022 - SSL.com TLS ECC Root CA 2022 - SSL.com TLS RSA Root CA 2022 Removed CAs: - Chambers of Commerce Root - E-Tugra Certification Authority - E-Tugra Global Root CA ECC v3 - E-Tugra Global Root CA RSA v3 - Hongkong Post Root CA 1 Important SUSE bug 1214248 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for clamav (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for clamav fixes the following issues: - Update to 0.103.9 - CVE-2023-20197: Fixed a possible denial of service vulnerability in the HFS+ file parser. (bsc#1214342) Important SUSE bug 1214342 CVE-2023-20197 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for freetype2 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for freetype2 fixes the following issues: - CVE-2023-2004: Fixed integer overflow in tt_hvadvance_adjust (bsc#1210419). Moderate SUSE bug 1210419 CVE-2023-2004 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for procps (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for procps fixes the following issues: - CVE-2023-4016: Fixed ps buffer overflow (bsc#1214290). Low SUSE bug 1214290 CVE-2023-4016 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for vim (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for vim fixes the following issues: Updated to version 9.0 with patch level 1572. - CVE-2023-2426: Fixed Out-of-range Pointer Offset use (bsc#1210996). - CVE-2023-2609: Fixed NULL Pointer Dereference (bsc#1211256). - CVE-2023-2610: Fixed nteger Overflow or Wraparound (bsc#1211257). Important SUSE bug 1210996 SUSE bug 1211256 SUSE bug 1211257 SUSE bug 1211461 CVE-2023-2426 CVE-2023-2609 CVE-2023-2610 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for open-vm-tools (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for open-vm-tools fixes the following issues: - CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566). This update also ships a open-vm-tools-containerinfo plugin. (jsc#PED-3421) Important SUSE bug 1214566 CVE-2023-20900 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for keylime (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for keylime fixes the following issues: - CVE-2023-38201: Fixed a bug to avoid leaks of the authorization tag. (bsc#1213314) Important SUSE bug 1213314 CVE-2023-38201 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libssh2_org (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libssh2_org fixes the following issues: - CVE-2020-22218: Fixed a bug in _libssh2_packet_add() which allows to access out of bounds memory. (bsc#1214527) Important SUSE bug 1214527 CVE-2020-22218 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: - Provide/obsolete WebKit2GTK-%{_apiver}-lang (bsc#1214093) - Have the lang package provide libwebkit2gtk3-lang (bsc#1214093) - Adjustments of update version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581): + Added missing CVE references: CVE-2023-32393, CVE-2023-37450 Important SUSE bug 1213379 SUSE bug 1213581 SUSE bug 1213905 SUSE bug 1214093 CVE-2023-32393 CVE-2023-37450 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rekor (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of rekor fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for geoipupdate (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of geoipupdate fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for skopeo (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of skopeo fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for icu73_2 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for icu73_2 fixes the following issues: - Update to release 73.2 * CLDR extends the support for “short” Chinese sort orders to cover some additional, required characters for Level 2. This is carried over into ICU collation. * ICU has a modified character conversion table, mapping some GB18030 characters to Unicode characters that were encoded after GB18030-2005. - fixes builds where UCHAR_TYPE is re-defined such as libqt5-qtwebengine - Update to release 73.1 * Improved Japanese and Korean short-text line breaking * Reduction of C++ memory use in date formatting - Update to release 72.1 * Support for Unicode 15, including new characters, scripts, emoji, and corresponding API constants. * Support for CLDR 42 locale data with various additions and corrections. * Shift to tzdb 2022e. Pre-1970 data for a number of timezones has been removed. - bump library packagename to libicu71 to match the version. - update to 71.1: * updates to CLDR 41 locale data with various additions and corrections. * phrase-based line breaking for Japanese. Existing line breaking methods follow standards and conventions for body text but do not work well for short Japanese text, such as in titles and headings. This new feature is optimized for these use cases. * support for Hindi written in Latin letters (hi_Latn). The CLDR data for this increasingly popular locale has been significantly revised and expanded. Note that based on user expectations, hi_Latn incorporates a large amount of English, and can also be referred to as “Hinglish”. * time zone data updated to version 2022a. Note that pre-1970 data for a number of time zones has been removed, as has been the case in the upstream tzdata release since 2021b. - ICU-21793 Fix ucptrietest golden diff [bsc#1192935] - Update to release 70.1: * Unicode 14 (new characters, scripts, emoji, and API constants) * CLDR 40 (many additions and corrections) * Fixes for measurement unit formatting * Can now be built with up to C++20 compilers - ICU-21613 Fix undefined behaviour in ComplexUnitsConverter::applyRounder - Update to release 69.1 * CLDR 39 * For Norwegian, 'no' is back to being the canonical code, with 'nb' treated as equivalent. This aligns handling of Norwegian with other macro language codes. * Binary prefixes in measurement units (KiB, MiB, etc.) * Time zone offsets from local time: New APIs BasicTimeZone::getOffsetFromLocal() (C++) and ucal_getTimeZoneOffsetFromLocal() - Backport ICU-21366 (bsc#1182645) - Update to release 68.2 * Fix memory problem in FormattedStringBuilder * Fix assertion when setKeywordValue w/ long value. * Fix UBSan breakage on 8bit of rbbi * fix int32_t overflow in listFormat * Fix memory handling in MemoryPool::operator=() * Fix memory leak in AliasReplacer - Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361 - Update to release 68.1 * CLDR 38 * Measurement unit preferences * PluralRules selection for ranges of numbers * Locale ID canonicalization now conforms to the CLDR spec including edge cases * DateIntervalFormat supports output options such as capitalization * Measurement units are normalized in skeleton string output * Time zone data (tzdata) version 2020d - Add the provides for libicu to Make .Net core can install successfully. (bsc#1167603, bsc#1161007) - Update to version 67.1 * Unicode 13 (ICU-20893, same as in ICU 66) + Total of 5930 new characters + 4 new scripts + 55 new emoji characters, plus additional new sequences + New CJK extension, first characters in plane 3: U+30000..U+3134A * CLDR 37 + New language at Modern coverage: Nigerian Pidgin + New languages at Basic coverage: Fulah (Adlam), Maithili, Manipuri, Santali, Sindhi (Devanagari), Sundanese + Region containment: EU no longer includes GB + Unicode 13 root collation data and Chinese data for collation and transliteration * DateTimePatternGenerator now obeys the 'hc' preference in the locale identifier (ICU-20442) * Various other improvements for ECMA-402 conformance * Number skeletons have a new 'concise' form that can be used in MessageFormat strings (ICU-20418) * Currency formatting options for formal and other currency display name variants (ICU-20854) * ListFormatter: new public API to select the style & type (ICU-12863) * ListFormatter now selects the proper “and”/“or” form for Spanish & Hebrew (ICU-21016) * Locale ID canonicalization upgraded to implement the complete CLDR spec (ICU-20834, ICU-20272) * LocaleMatcher: New option to ignore one-way matches (ICU-20936), and other tweaks to the code (ICU-20916, ICU-20917) and data (from CLDR) * acceptLanguage() reimplemented via LocaleMatcher (ICU-20700) * Data build tool: tzdbNames.res moved from the 'zone_tree' category to the 'zone_supplemental' category (ICU-21073) * Fixed uses of u8'literals' broken by the C++20 introduction of the incompatible char8_t type (ICU-20972), * and added a few API overloads to reduce the need for reinterpret_cast (ICU-20984). * Support for manipulating CLDR 37 unit identifiers in MeasureUnit. * Fix potential integer overflow in UnicodeString:doAppend (bsc#1166844, CVE-2020-10531). - Update to version 66.1 * Unicode 13 support * Fix uses of u8'literals' broken by C++20 introduction of incompatible char8_t type. (ICU-20972) * use LocalMemory for cmd to prevent use after free (bsc#1193951 CVE-2020-21913). - Remove /usr/lib(64)/icu/current [bsc#1158955]. - Update to release 65.1 (jsc#SLE-11118). * Updated to CLDR 36 locale data with many additions and corrections, and some new measurement units. * The Java LocaleMatcher API is improved, and ported to C++. Moderate SUSE bug 1030253 SUSE bug 1095425 SUSE bug 1103893 SUSE bug 1112183 SUSE bug 1146907 SUSE bug 1158955 SUSE bug 1159131 SUSE bug 1161007 SUSE bug 1162882 SUSE bug 1166844 SUSE bug 1167603 SUSE bug 1182252 SUSE bug 1182645 SUSE bug 1192935 SUSE bug 1193951 SUSE bug 354372 SUSE bug 437293 SUSE bug 824262 CVE-2020-10531 CVE-2020-21913 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libwebp (Critical) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libwebp fixes the following issues: - CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231). Critical SUSE bug 1215231 CVE-2023-4863 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for flac (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for flac fixes the following issues: - CVE-2020-22219: Fixed a buffer overflow in function bitwriter_grow_ which might allow a remote attacker to run arbitrary code via crafted input to the encoder. (bsc#1214615) Moderate SUSE bug 1214615 CVE-2020-22219 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gcc12 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gcc12 fixes the following issues: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052). Important SUSE bug 1214052 CVE-2023-4039 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libxml2 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libxml2 fixes the following issues: - CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768). Important SUSE bug 1214768 CVE-2023-39615 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gcc7 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gcc7 fixes the following issues: Security issue fixed: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052). Other fixes: - Fixed KASAN kernel compile. [bsc#1205145] - Fixed ICE with C++17 code as reported in [bsc#1204505] - Fixed altivec.h redefining bool in C++ which makes bool unusable (bsc#1195517): - Adjust gnats idea of the target, fixing the build of gprbuild. [bsc#1196861] Important SUSE bug 1195517 SUSE bug 1196861 SUSE bug 1204505 SUSE bug 1205145 SUSE bug 1214052 CVE-2023-4039 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups fixes the following issues: - CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204). - CVE-2023-32360: Fixed Information leak through Cups-Get-Document operation (bsc#1214254). Important SUSE bug 1214254 SUSE bug 1215204 CVE-2023-32360 CVE-2023-4504 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_apiver}, then getting out of sync of what's being required and what's being provided. Now, any sub-package that was providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver} instead (bsc#1214835, bsc#1214640, bsc#1214093). - Require libwaylandclient0 >= 1.20. 15.4 originally had 1.19.0, but webkitgtk uses a function added in 1.20.0, so we need to ensure that the wayland update is pulled in (bsc#1215072). - Update to version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581 bsc#1215230): CVE-2023-38594, CVE-2023-38595, CVE-2023-38597, CVE-2023-38599, CVE-2023-38600, CVE-2023-38611, CVE-2023-40397, CVE-2023-37450, CVE-2023-28198, CVE-2023-32370 Important SUSE bug 1213379 SUSE bug 1213581 SUSE bug 1213905 SUSE bug 1214093 SUSE bug 1214640 SUSE bug 1214835 SUSE bug 1215072 SUSE bug 1215230 CVE-2023-28198 CVE-2023-32370 CVE-2023-37450 CVE-2023-38594 CVE-2023-38595 CVE-2023-38597 CVE-2023-38599 CVE-2023-38600 CVE-2023-38611 CVE-2023-40397 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for wireshark (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: - Wireshark update to v3.6.16. - CVE-2023-4512: Fixed a bug in CBOR dissector which could lead to crash. (bsc#1214561) - CVE-2023-4511: Fixed a bug in BT SDP dissector which could lead to an infinite loop. (bsc#1214560) - CVE-2023-4513: Fixed a bug in BT SDP dissector which could lead to a memory leak. (bsc#1214562) - CVE-2023-2906: Fixed a bug in CP2179 dissector which could lead to crash. (bsc#1214652) Moderate SUSE bug 1214560 SUSE bug 1214561 SUSE bug 1214562 SUSE bug 1214652 CVE-2023-2906 CVE-2023-4511 CVE-2023-4512 CVE-2023-4513 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for busybox (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for busybox fixes the following issues: - CVE-2022-48174: Fixed stack overflow vulnerability. (bsc#1214538) Important SUSE bug 1214538 CVE-2022-48174 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for bind (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bind fixes the following issues: Update to release 9.16.44: - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472). Update to release 9.16.43 * Processing already-queued queries received over TCP could cause an assertion failure, when the server was reconfigured at the same time or the cache was being flushed. This has been fixed. Important SUSE bug 1215472 CVE-2023-3341 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for supportutils (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for supportutils fixes the following issues: Security fixes: - CVE-2022-45154: Removed iSCSI passwords (bsc#1207598). Other Fixes: - Changes in version 3.1.26 + powerpc plugin to collect the slots and active memory (bsc#1210950) + A Cleartext Storage of Sensitive Information vulnerability CVE-2022-45154 + supportconfig: collect BPF information (pr#154) + Added additional iscsi information (pr#155) - Added run time detection (bsc#1213127) - Changes for supportutils version 3.1.25 + Removed iSCSI passwords CVE-2022-45154 (bsc#1207598) + powerpc: Collect lsslot,amsstat, and opal elogs (pr#149) + powerpc: collect invscout logs (pr#150) + powerpc: collect RMC status logs (pr#151) + Added missing nvme nbft commands (bsc#1211599) + Fixed invalid nvme commands (bsc#1211598) + Added missing podman information (PED-1703, bsc#1181477) + Removed dependency on sysfstools + Check for systool use (bsc#1210015) + Added selinux checking (bsc#1209979) + Updated SLES_VER matrix - Fixed missing status detail for apparmor (bsc#1196933) - Corrected invalid argument list in docker.txt (bsc#1206608) - Applies limit equally to sar data and text files (bsc#1207543) - Collects hwinfo hardware logs (bsc#1208928) - Collects lparnumascore logs (issue#148) - Add dependency to `numactl` on ppc64le and `s390x`, this enforces that `numactl --hardware` data is provided in supportconfigs - Changes to supportconfig.rc version 3.1.11-35 + Corrected _sanitize_file to include iscsi.conf and others (bsc#1206402) - Changes to supportconfig version 3.1.11-46.4 + Added plymouth_info - Changes to getappcore version 1.53.02 + The location of chkbin was updated earlier. This documents that change (bsc#1205533, bsc#1204942) Moderate SUSE bug 1181477 SUSE bug 1196933 SUSE bug 1204942 SUSE bug 1205533 SUSE bug 1206402 SUSE bug 1206608 SUSE bug 1207543 SUSE bug 1207598 SUSE bug 1208928 SUSE bug 1209979 SUSE bug 1210015 SUSE bug 1210950 SUSE bug 1211598 SUSE bug 1211599 SUSE bug 1213127 CVE-2022-45154 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for curl (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for curl fixes the following issues: - CVE-2023-38039: Fixed possible DoS when receiving too large HTTP header. (bsc#1215026) Important SUSE bug 1215026 CVE-2023-38039 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for binutils (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for binutils fixes the following issues: Update to version 2.41 [jsc#PED-5778]: * The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few implementation-specific integer instructions. * Objdump's --private option can now be used on PE format files to display the fields in the file header and section headers. * New versioned release of libsframe: libsframe.so.1. This release introduces versioned symbols with version node name LIBSFRAME_1.0. This release also updates the ABI in an incompatible way: this includes removal of sframe_get_funcdesc_with_addr API, change in the behavior of sframe_fre_get_ra_offset and sframe_fre_get_fp_offset APIs. * SFrame Version 2 is now the default (and only) format version supported by gas, ld, readelf and objdump. * Add command-line option, --strip-section-headers, to objcopy and strip to remove ELF section header from ELF file. * The RISC-V port now supports the following new standard extensions: - Zicond (conditional zero instructions) - Zfa (additional floating-point instructions) - Zvbb, Zvbc, Zvkg, Zvkned, Zvknh[ab], Zvksed, Zvksh, Zvkn, Zvknc, Zvkng, Zvks, Zvksc, Zvkg, Zvkt (vector crypto instructions) * The RISC-V port now supports the following vendor-defined extensions: - XVentanaCondOps * Add support for Intel FRED, LKGS and AMX-COMPLEX instructions. * A new .insn directive is recognized by x86 gas. * Add SME2 support to the AArch64 port. * The linker now accepts a command line option of --remap-inputs <PATTERN>=<FILE> to relace any input file that matches <PATTERN> with <FILE>. In addition the option --remap-inputs-file=<FILE> can be used to specify a file containing any number of these remapping directives. * The linker command line option --print-map-locals can be used to include local symbols in a linker map. (ELF targets only). * For most ELF based targets, if the --enable-linker-version option is used then the version of the linker will be inserted as a string into the .comment section. * The linker script syntax has a new command for output sections: ASCIZ 'string' This will insert a zero-terminated string at the current location. * Add command-line option, -z nosectionheader, to omit ELF section header. - Contains fixes for these non-CVEs (not security bugs per upstreams SECURITY.md): * bsc#1209642 aka CVE-2023-1579 aka PR29988 * bsc#1210297 aka CVE-2023-1972 aka PR30285 * bsc#1210733 aka CVE-2023-2222 aka PR29936 * bsc#1213458 aka CVE-2021-32256 aka PR105039 (gcc) * bsc#1214565 aka CVE-2020-19726 aka PR26240 * bsc#1214567 aka CVE-2022-35206 aka PR29290 * bsc#1214579 aka CVE-2022-35205 aka PR29289 * bsc#1214580 aka CVE-2022-44840 aka PR29732 * bsc#1214604 aka CVE-2022-45703 aka PR29799 * bsc#1214611 aka CVE-2022-48065 aka PR29925 * bsc#1214619 aka CVE-2022-48064 aka PR29922 * bsc#1214620 aka CVE-2022-48063 aka PR29924 * bsc#1214623 aka CVE-2022-47696 aka PR29677 * bsc#1214624 aka CVE-2022-47695 aka PR29846 * bsc#1214625 aka CVE-2022-47673 aka PR29876 - This only existed only for a very short while in SLE-15, as the main variant in devel:gcc subsumed this in binutils-revert-rela.diff. Hence: - Document fixed CVEs: * bsc#1208037 aka CVE-2023-25588 aka PR29677 * bsc#1208038 aka CVE-2023-25587 aka PR29846 * bsc#1208040 aka CVE-2023-25585 aka PR29892 * bsc#1208409 aka CVE-2023-0687 aka PR29444 - Enable bpf-none cross target and add bpf-none to the multitarget set of supported targets. - Disable packed-relative-relocs for old codestreams. They generate buggy relocations when binutils-revert-rela.diff is active. [bsc#1206556] - Disable ZSTD debug section compress by default. - Enable zstd compression algorithm (instead of zlib) for debug info sections by default. - Pack libgprofng only for supported platforms. - Move libgprofng-related libraries to the proper locations (packages). - Add --without=bootstrap for skipping of bootstrap (faster testing of the package). - Remove broken arm32-avoid-copyreloc.patch to fix [gcc#108515] Update to version 2.40: * Objdump has a new command line option --show-all-symbols which will make it display all symbols that match a given address when disassembling. (Normally only the first symbol that matches an address is shown). * Add --enable-colored-disassembly configure time option to enable colored disassembly output by default, if the output device is a terminal. Note, this configure option is disabled by default. * DCO signed contributions are now accepted. * objcopy --decompress-debug-sections now supports zstd compressed debug sections. The new option --compress-debug-sections=zstd compresses debug sections with zstd. * addr2line and objdump --dwarf now support zstd compressed debug sections. * The dlltool program now accepts --deterministic-libraries and --non-deterministic-libraries as command line options to control whether or not it generates deterministic output libraries. If neither of these options are used the default is whatever was set when the binutils were configured. * readelf and objdump now have a newly added option --sframe which dumps the SFrame section. * Add support for Intel RAO-INT instructions. * Add support for Intel AVX-NE-CONVERT instructions. * Add support for Intel MSRLIST instructions. * Add support for Intel WRMSRNS instructions. * Add support for Intel CMPccXADD instructions. * Add support for Intel AVX-VNNI-INT8 instructions. * Add support for Intel AVX-IFMA instructions. * Add support for Intel PREFETCHI instructions. * Add support for Intel AMX-FP16 instructions. * gas now supports --compress-debug-sections=zstd to compress debug sections with zstd. * Add --enable-default-compressed-debug-sections-algorithm={zlib,zstd} that selects the default compression algorithm for --enable-compressed-debug-sections. * Add support for various T-Head extensions (XTheadBa, XTheadBb, XTheadBs, XTheadCmo, XTheadCondMov, XTheadFMemIdx, XTheadFmv, XTheadInt, XTheadMemIdx, XTheadMemPair, XTheadMac, and XTheadSync) from version 2.0 of the T-Head ISA manual, which are implemented in the Allwinner D1. * Add support for the RISC-V Zawrs extension, version 1.0-rc4. * Add support for Cortex-X1C for Arm. * New command line option --gsframe to generate SFrame unwind information on x86_64 and aarch64 targets. * The linker has a new command line option to suppress the generation of any warning or error messages. This can be useful when there is a need to create a known non-working binary. The option is -w or --no-warnings. * ld now supports zstd compressed debug sections. The new option --compress-debug-sections=zstd compresses debug sections with zstd. * Add --enable-default-compressed-debug-sections-algorithm={zlib,zstd} that selects the default compression algorithm for --enable-compressed-debug-sections. * Remove support for -z bndplt (MPX prefix instructions). - Includes fixes for these CVEs: * bsc#1206080 aka CVE-2022-4285 aka PR29699 - Enable by default: --enable-colored-disassembly. - fix build on x86_64_vX platforms Important SUSE bug 1200962 SUSE bug 1206080 SUSE bug 1206556 SUSE bug 1208037 SUSE bug 1208038 SUSE bug 1208040 SUSE bug 1208409 SUSE bug 1209642 SUSE bug 1210297 SUSE bug 1210733 SUSE bug 1213458 SUSE bug 1214565 SUSE bug 1214567 SUSE bug 1214579 SUSE bug 1214580 SUSE bug 1214604 SUSE bug 1214611 SUSE bug 1214619 SUSE bug 1214620 SUSE bug 1214623 SUSE bug 1214624 SUSE bug 1214625 CVE-2020-19726 CVE-2021-32256 CVE-2022-35205 CVE-2022-35206 CVE-2022-4285 CVE-2022-44840 CVE-2022-45703 CVE-2022-47673 CVE-2022-47695 CVE-2022-47696 CVE-2022-48063 CVE-2022-48064 CVE-2022-48065 CVE-2023-0687 CVE-2023-1579 CVE-2023-1972 CVE-2023-2222 CVE-2023-25585 CVE-2023-25587 CVE-2023-25588 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for mutt (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for mutt fixes the following issues: - CVE-2023-4874: Fixed NULL pointer dereference when composing an email (bsc#1215189). - CVE-2023-4875: Fixed NULL pointer dereference when receiving an email (bsc#1215191). Moderate SUSE bug 1215189 SUSE bug 1215191 CVE-2023-4874 CVE-2023-4875 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python3 fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). Important SUSE bug 1214692 CVE-2023-40217 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xrdp (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xrdp fixes the following issues: - CVE-2023-40184: Fixed restriction bypass via improper session handling (bsc#1214805). Moderate SUSE bug 1214805 CVE-2023-40184 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xen (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xen fixes the following issues: - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). - CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). Important SUSE bug 1215145 SUSE bug 1215474 CVE-2023-20588 CVE-2023-34322 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Securitys update for open-vm-tools (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for open-vm-tools fixes the following issues: Update to 12.3.0 (build 22234872) (bsc#1214850) - There are no new features in the open-vm-tools 12.3.0 release. This is primarily a maintenance release that addresses a few critical problems, including: - This release integrates CVE-2023-20900 without the need for a patch. For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0019.html. - A tools.conf configuration setting is available to temporaily direct Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior of ignoring file systems already frozen. - Building of the VMware Guest Authentication Service (VGAuth) using 'xml-security-c' and 'xerces-c' is being deprecated. - A number of Coverity reported issues have been addressed. - A number of GitHub issues and pull requests have been handled. Please see the Resolves Issues section of the Release Notes. - For issues resolved in this release, see the Resolved Issues section of the Release Notes. - For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0 - Release Notes are available at https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md - The granular changes that have gone into the 12.3.0 release are in the ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog - Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests - jsc#PED-1344 - reinable building containerinfo plugin for SLES 15 SP4. Important SUSE bug 1205927 SUSE bug 1214850 CVE-2023-20900 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for salt (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441) - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. (bsc#1214797, bsc#1193948) Bugs fixed: - Create minion_id with reproducible mtime - Fix broken tests to make them running in the testsuite - Fix detection of Salt codename by 'salt_version' execution module - Fix inconsistency in reported version by egg-info metadata (bsc#1215489) - Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844) - Fix the regression of user.present state when group is unset (bsc#1212855) - Fix utf8 handling in 'pass' renderer and make it more robust - Fix zypper repositories always being reconfigured - Make sure configured user is properly set by Salt (bsc#1210994) - Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794) - Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses (bsc#1213960, bsc#1213630, bsc#1213257) Moderate SUSE bug 1193948 SUSE bug 1210994 SUSE bug 1212794 SUSE bug 1212844 SUSE bug 1212855 SUSE bug 1213257 SUSE bug 1213441 SUSE bug 1213630 SUSE bug 1213960 SUSE bug 1214796 SUSE bug 1214797 SUSE bug 1215489 CVE-2023-20897 CVE-2023-20898 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for Golang Prometheus (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for Golang Prometheus fixes the following issues: golang-github-prometheus-alertmanager: - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version. golang-github-prometheus-node_exporter: - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version. Important SUSE bug 1213880 CVE-2023-29409 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libqb (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libqb fixes the following issues: - CVE-2023-39976: Fixed potential buffer overflow with long log messages (bsc#1214066). Moderate SUSE bug 1214066 CVE-2023-39976 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libvpx (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778). Important SUSE bug 1215778 CVE-2023-5217 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libeconf (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libeconf fixes the following issues: Update to version 0.5.2. - CVE-2023-30078, CVE-2023-32181: Fixed a stack-buffer-overflow vulnerability in 'econf_writeFile' function (bsc#1211078). - CVE-2023-30079, CVE-2023-22652: Fixed a stack-buffer-overflow vulnerability in 'read_file' function. (bsc#1211078) Important SUSE bug 1211078 CVE-2023-22652 CVE-2023-30078 CVE-2023-30079 CVE-2023-32181 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libX11 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libX11 fixes the following issues: - CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage() (bsc#1215684). - CVE-2023-43787: Fixed integer overflow in XCreateImage() leading to a heap overflow (bsc#1215685). - CVE-2023-43785: Fixed out-of-bounds memory access in _XkbReadKeySyms() (bsc#1215683). Moderate SUSE bug 1215683 SUSE bug 1215684 SUSE bug 1215685 CVE-2023-43785 CVE-2023-43786 CVE-2023-43787 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libXpm (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libXpm fixes the following issues: - CVE-2023-43788: Fixed an out of bounds read when creating an image (bsc#1215686). - CVE-2023-43789: Fixed an out of bounds read when parsing an XPM file with a corrupted colormap (bsc#1215687). Moderate SUSE bug 1215686 SUSE bug 1215687 CVE-2023-43788 CVE-2023-43789 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330). - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727). - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729). The following non-security bugs were fixed: - ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305). - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes). - ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes). - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes). - ALSA: ac97: Fix possible error value of *rac97 (git-fixes). - ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes). - ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes). - ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes). - ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes). - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes). - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes). - ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes). - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes). - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes). - ARM: dts: imx6sll: fixup of operating points (git-fixes). - ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes). - ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes). - ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes). - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes). - ASoC: rt5665: add missed regulator_bulk_disable (git-fixes). - ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes). - ASoC: tegra: Fix SFC conversion for few rates (git-fixes). - Bluetooth: Fix potential use-after-free when clear keys (git-fixes). - Bluetooth: L2CAP: Fix use-after-free (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes). - Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes). - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes). - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b - CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123 - Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel. - Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes). - Documentation: devices.txt: Remove ttyIOC* (git-fixes). - Documentation: devices.txt: Remove ttySIOC* (git-fixes). - Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453). - Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453). - Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453). - Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453). - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453). - Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453). - Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453). - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453). - Drop amdgpu patch causing spamming (bsc#1215523) - Drop cfg80211 lock fix patches that caused a regression (bsc#1213757) - Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) - Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes). - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes). - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes). - HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes). - HID: wacom: remove the battery when the EKR is off (git-fixes). - HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes). - IB/hfi1: Fix possible panic during hotplug remove (git-fixes) - IB/uverbs: Fix an potential error pointer dereference (git-fixes) - Input: exc3000 - properly stop timer on shutdown (git-fixes). - KVM: s390: fix sthyi error handling (git-fixes bsc#1214370). - Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756). - Kbuild: move to -std=gnu11 (bsc#1214756). - PCI/ASPM: Avoid link retraining race (git-fixes). - PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes). - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes). - PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes). - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes). - PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453). - PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453). - PCI: meson: Remove cast between incompatible function type (git-fixes). - PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes). - PCI: microchip: Remove cast between incompatible function type (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: rockchip: Remove writes to unused registers (git-fixes). - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes). - PCI: tegra194: Fix possible array out of bounds access (git-fixes). - PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes). - RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes) - RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes) - RDMA/efa: Fix wrong resources deallocation order (git-fixes) - RDMA/hns: Fix CQ and QP cache affinity (git-fixes) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes) - RDMA/hns: Fix port active speed (git-fixes) - RDMA/irdma: Prevent zero-length STAG registration (git-fixes) - RDMA/irdma: Replace one-element array with flexible-array member (git-fixes) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes) - RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes) - RDMA/siw: Correct wrong debug message (git-fixes) - RDMA/umem: Set iova in ODP flow (git-fixes) - README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer. - Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes) - Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes). - SMB3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes). - Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - amba: bus: fix refcount leak (git-fixes). - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes). - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes). - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes). - audit: fix possible soft lockup in __audit_inode_child() (git-fixes). - backlight/bd6107: Compare against struct fb_info.device (git-fixes). - backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes). - backlight/lv5207lp: Compare against struct fb_info.device (git-fixes). - batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes). - batman-adv: Do not increase MTU when set by user (git-fixes). - batman-adv: Fix TT global entry leak when client roamed back (git-fixes). - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes). - batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes). - batman-adv: Trigger events for auto adjusted MTU (git-fixes). - bnx2x: fix page fault following EEH recovery (bsc#1214299). - bpf: Disable preemption in bpf_event_output (git-fixes). - bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924). - bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes). - bus: ti-sysc: Fix build warning for 64-bit build (git-fixes). - bus: ti-sysc: Fix cast to enum warning (git-fixes). - bus: ti-sysc: Flush posted write on enable before reset (git-fixes). - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes). - ceph: defer stopping mdsc delayed_work (bsc#1214392). - ceph: do not check for quotas on MDS stray dirs (bsc#1214238). - ceph: never send metrics if disable_send_metrics is set (bsc#1214180). - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. - cifs: add missing return value check for cifs_sb_tlink (bsc#1193629). - cifs: allow dumping keys for directories too (bsc#1193629). - cifs: fix mid leak during reconnection after timeout threshold (git-fixes). - cifs: if deferred close is disabled then close files immediately (git-fixes). - cifs: is_network_name_deleted should return a bool (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes). - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes). - clk: imx8mp: fix sai4 clock (git-fixes). - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes). - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes). - clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes). - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes). - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes). - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes). - clk: sunxi-ng: Modify mismatched function name (git-fixes). - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453). - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453). - clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453). - clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453). - clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453). - clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453). - cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes). - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659). - cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004). - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - crypto: caam - fix unchecked return value error (git-fixes). - crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes). - define more Hyper-V related constants (bsc#1206453). - dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes). - dma-buf/sync_file: Fix docs syntax (git-fixes). - dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes). - dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes). - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes). - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes). - docs/process/howto: Replace C89 with C11 (bsc#1214756). - docs: kernel-parameters: Refer to the correct bitmap function (git-fixes). - docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes). - docs: printk-formats: Fix hex printing of signed values (git-fixes). - driver core: test_async: fix an error code (git-fixes). - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes). - drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes). - drm/amd/display: Apply 60us prefetch for DCFCLK &lt;= 300Mhz (git-fixes). - drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes). - drm/amd/display: Do not set drr on pipe commit (git-fixes). - drm/amd/display: Enable dcn314 DPP RCO (git-fixes). - drm/amd/display: Ensure that planes are in the same order (git-fixes). - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes). - drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes). - drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes). - drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes). - drm/amd/display: disable RCO for DCN314 (git-fixes). - drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes). - drm/amd/display: limit DPIA link rate to HBR3 (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: trigger timing sync only if TG is running (git-fixes). - drm/amd/pm/smu7: move variables to where they are used (git-fixes). - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes). - drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes). - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes). - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes). - drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes). - drm/amd: flush any delayed gfxoff on suspend entry (git-fixes). - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes). - drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes). - drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes). - drm/amdgpu: Remove unnecessary domain argument (git-fixes). - drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes). - drm/amdgpu: add S/G display parameter (git-fixes). - drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes). - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes). - drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes). - drm/amdgpu: fix memory leak in mes self test (git-fixes). - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes). - drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes). - drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes). - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes). - drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes). - drm/ast: Fix DRAM init on AST2200 (git-fixes). - drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes). - drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes). - drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes). - drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes). - drm/bridge: fix -Wunused-const-variable= warning (git-fixes). - drm/bridge: tc358764: Fix debug print parameter order (git-fixes). - drm/etnaviv: fix dumping of active MMU context (git-fixes). - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes). - drm/i915/sdvo: fix panel_type initialization (git-fixes). - drm/i915: Fix premature release of request's reusable memory (git-fixes). - drm/mediatek: Fix dereference before null check (git-fixes). - drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes). - drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes). - drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes). - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes). - drm/msm/mdp5: Do not leak some plane state (git-fixes). - drm/msm: Update dev core dump to not print backwards (git-fixes). - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes). - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes). - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073). - drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes). - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes). - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes). - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes). - drm/qxl: fix UAF on handle creation (git-fixes). - drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes). - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes). - drm/rockchip: Do not spam logs in atomic check (git-fixes). - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes). - drm/stm: ltdc: fix late dereference check (git-fixes). - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes). - drm/ttm: check null pointer before accessing when swapping (git-fixes). - drm/ttm: never consider pinned BOs for eviction&swap (git-fixes). - drm/vmwgfx: Fix shader stage validation (git-fixes). - drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes). - drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes). - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes). - dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes). - dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes). - dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes). - e1000: Fix typos in comments (jsc#PED-5738). - e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738). - e1000: switch to napi_build_skb() (jsc#PED-5738). - e1000: switch to napi_consume_skb() (jsc#PED-5738). - exfat: fix unexpected EOF while reading dir (bsc#1214000). - exfat: release s_lock before calling dir_emit() (bsc#1214000). - exfat_iterate(): do not open-code file_inode(file) (bsc#1214000). - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes). - fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes). - fbdev: Improve performance of sys_imageblit() (git-fixes). - fbdev: Update fbdev source file paths (git-fixes). - fbdev: fix potential OOB read in fast_imageblit() (git-fixes). - fbdev: mmp: fix value check in mmphw_probe() (git-fixes). - file: reinstate f_pos locking optimization for regular files (bsc#1213759). - firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes). - firmware: cs_dsp: Fix new control name check (git-fixes). - firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes). - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes). - fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes). - fsi: aspeed: Reset master errors after CFAM reset (git-fixes). - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes). - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes). - gpio: mvebu: Make use of devm_pwmchip_add (git-fixes). - gpio: mvebu: fix irq domain leak (git-fixes). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes). - hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453). - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes). - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes). - hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes). - hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes). - hwrng: pic32 - use devm_clk_get_enabled (git-fixes). - i2c: Delete error messages for failed memory allocations (git-fixes). - i2c: Improve size determinations (git-fixes). - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes). - i2c: designware: Correct length byte validation logic (git-fixes). - i2c: designware: Handle invalid SMBus block data response length value (git-fixes). - i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes). - i2c: nomadik: Remove a useless call in the remove function (git-fixes). - i2c: nomadik: Remove unnecessary goto label (git-fixes). - i2c: nomadik: Use devm_clk_get_enabled() (git-fixes). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - iavf: fix potential races for FDIR filters (git-fixes). - ice: Fix RDMA VSI removal during queue rebuild (git-fixes). - ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes). - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes). - iio: adc: stx104: Implement and utilize register structures (git-fixes). - iio: adc: stx104: Utilize iomap interface (git-fixes). - iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes). - intel/e1000:fix repeated words in comments (jsc#PED-5738). - intel: remove unused macros (jsc#PED-5738). - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes). - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). - iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes). - iommu/amd: Fix compile warning in init code (git-fixes). - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes). - iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes). - iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes). - iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes). - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes). - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes). - iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes). - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes). - iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes). - iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes). - iommu/dma: Fix iova map result check bug (git-fixes). - iommu/dma: return error code from iommu_dma_map_sg() (git-fixes). - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes). - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes). - iommu/iova: Fix module config properly (git-fixes). - iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes). - iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes). - iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes). - iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes). - iommu/mediatek: Use component_match_add (git-fixes). - iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes). - iommu/omap: Fix buffer overflow in debugfs (git-fixes). - iommu/rockchip: fix permission bits in page table entries v2 (git-fixes). - iommu/s390: Fix duplicate domain attachments (git-fixes). - iommu/sun50i: Consider all fault sources for reset (git-fixes). - iommu/sun50i: Fix R/W permission check (git-fixes). - iommu/sun50i: Fix flush size (git-fixes). - iommu/sun50i: Fix reset release (git-fixes). - iommu/sun50i: Implement .iotlb_sync_map (git-fixes). - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes). - iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes). - iommu/vt-d: Check correct capability for sagaw determination (git-fixes). - iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes). - iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes). - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes). - iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes). - ipmi:ssif: Add check for kstrdup (git-fixes). - ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes). - ipmi_si: fix a memleak in try_smi_init() (git-fixes). - jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes). - kabi/severities: Ignore newly added SRSO mitigation functions - kabi: Allow extra bugsints (bsc#1213927). - kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there. - kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12. - kunit: make kunit_test_timeout compatible with comment (git-fixes). - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes). - leds: multicolor: Use rounded division when calculating color components (git-fixes). - leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes). - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes). - leds: turris-omnia: Drop unnecessary mutex locking (git-fixes). - lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes). - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes). - libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924). - libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924). - libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924). - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393). - md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916). - md/raid0: Fix performance regression for large sequential writes (bsc#1213916). - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes). - media: cx24120: Add retval check for cx24120_message_send() (git-fixes). - media: dib7000p: Fix potential division by zero (git-fixes). - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes). - media: go7007: Remove redundant if statement (git-fixes). - media: i2c: ccs: Check rules is non-NULL (git-fixes). - media: i2c: rdacm21: Fix uninitialized value (git-fixes). - media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes). - media: ov2680: Add ov2680_fill_format() helper function (git-fixes). - media: ov2680: Do not take the lock for try_fmt calls (git-fixes). - media: ov2680: Fix ov2680_bayer_order() (git-fixes). - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes). - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes). - media: ov2680: Fix vflip / hflip set functions (git-fixes). - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes). - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes). - media: rkvdec: increase max supported height for H.264 (git-fixes). - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes). - media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes). - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes). - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes). - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - mlxsw: pci: Add shutdown method in PCI driver (git-fixes). - mmc: block: Fix in_flight[issue_type] value error (git-fixes). - mmc: moxart: read scr register without changing byte order (git-fixes). - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes). - mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes). - mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes). - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes). - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes). - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes). - mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes). - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes). - mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes). - mtd: spi-nor: Check bus width while setting QE bit (git-fixes). - mtd: spinand: toshiba: Fix ecc_get_status (git-fixes). - n_tty: Rename tail to old_tail in n_tty_read() (git-fixes). - net: hns3: fix wrong bw weight of disabled tc issue (git-fixes). - net: ieee802154: at86rf230: Stop leaking skb's (git-fixes). - net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes). - net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes). - net: phy: broadcom: stub c45 read/write for 54810 (git-fixes). - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes). - net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733) - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes). - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946). - netfs: fix parameter of cleanup() (bsc#1214743). - nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes). - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes). - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes). - nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902). - nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902). - objtool/x86: Fix SRSO mess (git-fixes). - objtool/x86: Fixup frame-pointer vs rethunk (git-fixes). - objtool: Union instruction::{call_dest,jump_table} (git-fixes). - old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes). - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes). - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes). - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes). - phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes). - phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes). - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes). - pinctrl: amd: Mask wake bits on probe again (git-fixes). - pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes). - pinctrl: cherryview: fix address_space_handler() argument (git-fixes). - pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes). - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes). - platform/x86: dell-sysman: Fix reference leak (git-fixes). - powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106). - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106). - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106). - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106). - powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106). - powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106). - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106). - powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106). - powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes). - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106). - powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106). - powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106). - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/rtas: block error injection when locked down (bsc#1023051). - powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051). - powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). - powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869). - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes). - powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files. - powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503). - powerpc: fix typos in comments (bsc#1212091 ltc#199106). - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503). - pstore/ram: Check start of empty przs during init (git-fixes). - pwm: Add a stub for devm_pwmchip_add() (git-fixes). - pwm: meson: Simplify duplicated per-channel tracking (git-fixes). - pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes). - qed: Fix scheduling in a tasklet while getting stats (git-fixes). - regmap: rbtree: Use alloc_flags for memory allocations (git-fixes). - ring-buffer: Do not swap cpu_buffer during resize process (git-fixes). - ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes). - rpm/mkspec-dtb: support for nested subdirs - rpmsg: glink: Add check for kstrdup (git-fixes). - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976). - s390/purgatory: disable branch profiling (git-fixes bsc#1214372). - s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949). - sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes). - sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes). - sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: RDMA/srp: Fix residual handling (git-fixes) - scsi: bsg: Increase number of devices (bsc#1210048). - scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284). - scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: core: Improve warning message in scsi_device_block() (bsc#1209284). - scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: sg: Increase number of devices (bsc#1210048). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Always set no_report_opcodes (git-fixes). - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes). - scsi: storvsc: Handle SRB status value 0x30 (git-fixes). - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes). - scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371). - selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924). - selftests/futex: Order calls to futex_lock_pi (git-fixes). - selftests/harness: Actually report SKIP for signal tests (git-fixes). - selftests/resctrl: Close perf value read fd on errors (git-fixes). - selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes). - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes). - selftests/rseq: check if libc rseq support is registered (git-fixes). - selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes). - selftests: forwarding: Skip test when no interfaces are specified (git-fixes). - selftests: forwarding: Switch off timeout (git-fixes). - selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes). - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes). - selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes). - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes). - selftests: forwarding: tc_flower: Relax success criterion (git-fixes). - selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes). - serial: sc16is7xx: fix broken port 0 uart init (git-fixes). - serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes). - serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes). - serial: sprd: Fix DMA buffer leak issue (git-fixes). - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629). - smb: client: Fix -Wstringop-overflow issues (bsc#1193629). - smb: client: fix dfs link mount against w2k8 (bsc#1212142). - smb: client: fix null auth (git-fixes). - soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes). - soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes). - soundwire: fix enumeration completion (git-fixes). - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes). - supported.conf: fix typos for -!optional markers - swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453). - target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026). - target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873). - target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857). - target_core_rbd: remove snapshot existence validation code (bsc#1212857). - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes). - timers: Add shutdown mechanism to the internal functions (bsc#1213970). - timers: Provide timer_shutdown[_sync]() (bsc#1213970). - timers: Rename del_timer() to timer_delete() (bsc#1213970). - timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: Replace BUG_ON()s (bsc#1213970). - timers: Silently ignore timers with a NULL function (bsc#1213970). - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: Update kernel-doc for various functions (bsc#1213970). - timers: Use del_timer_sync() even on UP (bsc#1213970). - tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes). - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes). - tracing/probes: Fix not to count error code to total length (git-fixes). - tracing/probes: Fix to avoid double count of the string length on the array (git-fixes). - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes). - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes). - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes). - tracing: Fix memleak due to race between current_tracer and trace (git-fixes). - tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes). - tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes). - tracing: Fix warning in trace_buffered_event_disable() (git-fixes). - tty: fix hang on tty device with no_room set (git-fixes). - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes). - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes). - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes). - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes). - ubifs: Fix memleak when insert_old_idx() failed (git-fixes). - usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes). - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes). - usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes). - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes). - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes). - usb: dwc3: Fix typos in gadget.c (git-fixes). - usb: dwc3: Properly handle processing of pending events (git-fixes). - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes). - usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes). - usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes). - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes). - usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes). - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes). - usb: quirks: add quirk for Focusrite Scarlett (git-fixes). - usb: serial: option: add Quectel EC200A module support (git-fixes). - usb: serial: option: support Quectel EM060K_128 (git-fixes). - usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes). - usb: serial: simple: sort driver entries (git-fixes). - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes). - usb: typec: tcpm: Fix response to vsafe0V event (git-fixes). - usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes). - usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes). - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes). - wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes). - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes). - wifi: cfg80211: Fix return value in scan logic (git-fixes). - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes). - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes). - wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes). - wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes). - wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes). - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes). - wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes). - wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes). - wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes). - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes). - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes). - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes). - wifi: radiotap: fix kernel-doc notation warnings (git-fixes). - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes). - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes). - x86/alternative: Make custom return thunk unconditional (git-fixes). - x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes). - x86/cpu: Clean up SRSO return thunk mess (git-fixes). - x86/cpu: Cleanup the untrain mess (git-fixes). - x86/cpu: Fix __x86_return_thunk symbol type (git-fixes). - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes). - x86/cpu: Rename original retbleed methods (git-fixes). - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes). - x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453). - x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453). - x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453). - x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453). - x86/hyperv: Reorder code to facilitate future work (bsc#1206453). - x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453). - x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453). - x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes). - x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453). - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes). - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). - x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/speculation: Add cpu_show_gds() prototype (git-fixes). - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). - x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). - x86/srso: Disable the mitigation on unaffected configurations (git-fixes). - x86/srso: Explain the untraining sequences a bit more (git-fixes). - x86/srso: Fix build breakage with the LLVM linker (git-fixes). - x86/srso: Fix return thunks in generated code (git-fixes). - x86/static_call: Fix __static_call_fixup() (git-fixes). - x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453). - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453). - x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453). - x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453). - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453). - xfs: fix sb write verify for lazysbcount (bsc#1214661). Important SUSE bug 1023051 SUSE bug 1120059 SUSE bug 1177719 SUSE bug 1188885 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203329 SUSE bug 1203330 SUSE bug 1205462 SUSE bug 1206453 SUSE bug 1208902 SUSE bug 1208949 SUSE bug 1209284 SUSE bug 1209799 SUSE bug 1210048 SUSE bug 1210448 SUSE bug 1211220 SUSE bug 1212091 SUSE bug 1212142 SUSE bug 1212423 SUSE bug 1212526 SUSE bug 1212857 SUSE bug 1212873 SUSE bug 1213026 SUSE bug 1213123 SUSE bug 1213546 SUSE bug 1213580 SUSE bug 1213601 SUSE bug 1213666 SUSE bug 1213733 SUSE bug 1213757 SUSE bug 1213759 SUSE bug 1213916 SUSE bug 1213921 SUSE bug 1213927 SUSE bug 1213946 SUSE bug 1213949 SUSE bug 1213968 SUSE bug 1213970 SUSE bug 1213971 SUSE bug 1214000 SUSE bug 1214019 SUSE bug 1214073 SUSE bug 1214120 SUSE bug 1214149 SUSE bug 1214180 SUSE bug 1214233 SUSE bug 1214238 SUSE bug 1214285 SUSE bug 1214297 SUSE bug 1214299 SUSE bug 1214305 SUSE bug 1214350 SUSE bug 1214368 SUSE bug 1214370 SUSE bug 1214371 SUSE bug 1214372 SUSE bug 1214380 SUSE bug 1214386 SUSE bug 1214392 SUSE bug 1214393 SUSE bug 1214397 SUSE bug 1214404 SUSE bug 1214428 SUSE bug 1214451 SUSE bug 1214635 SUSE bug 1214659 SUSE bug 1214661 SUSE bug 1214727 SUSE bug 1214729 SUSE bug 1214742 SUSE bug 1214743 SUSE bug 1214756 SUSE bug 1214976 SUSE bug 1215522 SUSE bug 1215523 SUSE bug 1215552 SUSE bug 1215553 CVE-2022-38457 CVE-2022-40133 CVE-2023-2007 CVE-2023-20588 CVE-2023-34319 CVE-2023-3610 CVE-2023-37453 CVE-2023-3772 CVE-2023-3863 CVE-2023-40283 CVE-2023-4128 CVE-2023-4133 CVE-2023-4134 CVE-2023-4147 CVE-2023-4194 CVE-2023-4273 CVE-2023-4387 CVE-2023-4459 CVE-2023-4563 CVE-2023-4569 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ghostscript (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ghostscript fixes the following issues: - CVE-2023-43115: Fixed remote code execution via crafted PostScript documents in gdevijs.c (bsc#1215466). Important SUSE bug 1215466 CVE-2023-43115 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for nghttp2 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for nghttp2 fixes the following issues: - CVE-2023-35945: Fixed memory leak when PUSH_PROMISE or HEADERS frame cannot be sent (bsc#1215713). Important SUSE bug 1215713 CVE-2023-35945 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for poppler (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for poppler fixes the following issues: - CVE-2020-23804: Fixed uncontrolled recursion in pdfinfo and pdftops (bsc#1215422). - CVE-2020-36024: Fixed NULL Pointer Deference in `FoFiType1C:convertToType1` (bsc#1214257). - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622). - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621). - CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618). Important SUSE bug 1214257 SUSE bug 1214618 SUSE bug 1214621 SUSE bug 1214622 SUSE bug 1215422 CVE-2020-23804 CVE-2020-36024 CVE-2022-37050 CVE-2022-37051 CVE-2022-38349 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for shadow (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak (bsc#1214806). Low SUSE bug 1214806 CVE-2023-4641 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for curl (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for curl fixes the following issues: - CVE-2023-38545: Fixed a heap buffer overflow in SOCKS5. (bsc#1215888) - CVE-2023-38546: Fixed a cookie injection with none file. (bsc#1215889) Important SUSE bug 1215888 SUSE bug 1215889 CVE-2023-38545 CVE-2023-38546 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for samba (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for samba fixes the following issues: - CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904) - CVE-2023-42669: Fixed a bug in 'rpcecho' development server which allows Denial of Service via sleep() call on AD DC. (bsc#1215905) - CVE-2023-42670: Fixed the procedure number which was out of range when starting Active Directory Users and Computers. (bsc#1215906) - CVE-2023-3961: Fixed an unsanitized client pipe name passed to local_np_connect(). (bsc#1215907) - CVE-2023-4154: Fixed a bug in dirsync which allows SYSTEM access with only 'GUID_DRS_GET_CHANGES' right. (bsc#1215908) Important SUSE bug 1215904 SUSE bug 1215905 SUSE bug 1215906 SUSE bug 1215907 SUSE bug 1215908 CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xen (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xen fixes the following issues: - CVE-2023-34323: A transaction conflict can crash C Xenstored (XSA-440, bsc#1215744) - CVE-2023-34326: Missing IOMMU TLB flushing (XSA-442, bsc#1215746) - CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443, bsc#1215747) - CVE-2023-34327: Debug Mask handling (XSA-444, bsc#1215748) - CVE-2023-34328: Debug Mask handling (XSA-444, bsc#1215748) Important SUSE bug 1215744 SUSE bug 1215746 SUSE bug 1215747 SUSE bug 1215748 CVE-2023-34323 CVE-2023-34325 CVE-2023-34326 CVE-2023-34327 CVE-2023-34328 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rage-encryption (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rage-encryption fixes the following issues: -CVE-2023-42811: chosen ciphertext attack possible against aes-gcm (bsc#1215657) * update vendor.tar.zst to contain aes-gcm >= 0.10.3 - Update to version 0.9.2+0: * CI: Ensure `apt` repository is up-to-date before installing build deps * CI: Build Linux releases using `ubuntu-20.04` runner * CI: Remove most uses of `actions-rs` actions - Update to version 0.9.2+0: * Fix changelog bugs and add missing entry * Document `PINENTRY_PROGRAM` environment variable * age: Add `Decryptor::new_async_buffered` * age: `impl AsyncBufRead for ArmoredReader` * Pre-initialize vectors when the capacity is known, or use arrays * Use `PINENTRY_PROGRAM` as environment variable for `pinentry` * Document why `impl AsyncWrite for StreamWriter` doesn't loop indefinitely * cargo update * cargo vet prune * Migrate to `cargo-vet 0.7` * build(deps): bump svenstaro/upload-release-action from 2.5.0 to 2.6.1 * Correct spelling in documentation * build(deps): bump codecov/codecov-action from 3.1.1 to 3.1.4 * StreamWriter AsyncWrite: fix usage with futures::io::copy() * rage: Use `Decryptor::new_buffered` * age: Add `Decryptor::new_buffered` * age: `impl BufRead for ArmoredReader` * Update Homebrew formula to v0.9.1 * feat/pinentry: Use env var to define pinentry binary - Update to version 0.9.1+0: * ssh: Fix parsing of OpenSSH private key format * ssh: Support `aes256-gcm@openssh.com` ciphers for encrypted keys * ssh: Add `aes256-gcm@openssh.com` cipher to test cases * ssh: Extract common key material derivation logic for encrypted keys * ssh: Use associated constants for key and IV sizes * ssh: Add test cases for encrypted keys - Add shell completions for fish and zsh. Moderate SUSE bug 1215657 CVE-2023-42811 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861) - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860) - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858) - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467) - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899) - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022) - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes). - ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes). - ARM: pxa: remove use of symbol_get() (git-fixes). - arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes). - arm64: module-plts: inline linux/moduleloader.h (git-fixes) - arm64: module: Use module_init_layout_section() to spot init sections (git-fixes) - arm64: sdei: abort running SDEI handlers during crash (git-fixes) - arm64: tegra: Update AHUB clock parent and rate (git-fixes) - arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes) - arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453). - ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes). - ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes). - ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes). - ASoC: meson: spdifin: start hw on dai probe (git-fixes). - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5640: Revert 'Fix sleep in atomic context' (git-fixes). - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes). - ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes). - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes). - ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes). - ata: pata_falcon: fix IO base selection for Q40 (git-fixes). - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes). - ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes). - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes). - blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986). - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992). - block/mq-deadline: use correct way to throttling write requests (bsc#1214993). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes). - bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322). - bpf: Clear the probe_addr for uprobe (git-fixes). - btrfs: do not hold CPU for too long when defragging a file (bsc#1214988). - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453). - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453). - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453). - Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453). - drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes). - drm/amd/display: Add smu write msg id fail retry process (git-fixes). - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes). - drm/amd/display: fix the white screen issue when >= 64GB DRAM (git-fixes). - drm/amd/display: prevent potential division by zero errors (git-fixes). - drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes). - drm/amd/display: Remove wait while locked (git-fixes). - drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: * rename ast_device to ast_private - drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: * rename ast_device to ast_private * context changes - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808). - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes). - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes). - drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes). - drm/i915/gvt: Verify pfn is 'valid' before dereferencing 'struct page' (git-fixes). - drm/meson: fix memory leak on ->hpd_notify callback (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - ext4: avoid potential data overflow in next_linear_group (bsc#1214951). - ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954). - ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). - ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944). - ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942). - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941). - ext4: Remove ext4 locking of moved directory (bsc#1214957). - ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). - fs: do not update freeing inode i_io_list (bsc#1214813). - fs: Establish locking order for unrelated directories (bsc#1214958). - fs: Lock moved directories (bsc#1214959). - fs: lockd: avoid possible wrong NULL parameter (git-fixes). - fs: no need to check source (bsc#1215752). - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813). - fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581). - gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479). - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: use vmalloc_array and vcalloc (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - hwrng: virtio - add an internal buffer (git-fixes). - hwrng: virtio - always add a pending request (git-fixes). - hwrng: virtio - do not wait on cleanup (git-fixes). - hwrng: virtio - do not waste entropy (git-fixes). - hwrng: virtio - Fix race on data_avail and actual data (git-fixes). - i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes). - i3c: master: svc: fix probe failure when no i3c device exist (git-fixes). - i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes). - idr: fix param name in idr_alloc_cyclic() doc (git-fixes). - Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes). - iommu/virtio: Detach domain on endpoint release (git-fixes). - iommu/virtio: Return size mapped for a detached domain (git-fixes). - jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). - jbd2: correct the end of the journal recovery scan range (bsc#1214955). - jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). - jbd2: fix checkpoint cleanup performance regression (bsc#1214952). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). - jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). - jbd2: remove journal_clean_one_cp_list() (bsc#1214947). - jbd2: remove t_checkpoint_io_list (bsc#1214946). - jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). - kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025). - kabi/severities: ignore mlx4 internal symbols - kconfig: fix possible buffer overflow (git-fixes). - kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template. - kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist. - kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes). - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915). - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896). - KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916). - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894). - KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895). - KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911). - KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes). - KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes). - KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes). - KVM: x86/mmu: Include mmu.h in spte.h (git-fixes). - loop: Fix use-after-free issues (bsc#1214991). - loop: loop_set_status_from_info() check before assignment (bsc#1214990). - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236). - mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236). - mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236). - mlx4: Delete custom device management logic (bsc#1187236). - mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236). - mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236). - mlx4: Move the bond work to the core driver (bsc#1187236). - mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236). - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236). - mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236). - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236). - module: Expose module_init_layout_section() (git-fixes) - net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). - net: mana: Add page pool for RX buffers (bsc#1214040). - net: mana: Configure hwc timeout from hardware (bsc#1214037). - net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes). - net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). - net/mlx4: Remove many unnecessary NULL values (bsc#1187236). - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes). - NFS/blocklayout: Use the passed in gfp flags (git-fixes). - NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes). - NFSD: fix change_info in NFSv4 RENAME replies (git-fixes). - NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes). - NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes). - NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes). - NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes). - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes). - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes). - ntb: Clean up tx tail index on link down (git-fixes). - ntb: Drop packets when qp link is down (git-fixes). - ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes). - nvme-auth: use chap->s2 to indicate bidirectional authentication (bsc#1214543). - nvme-tcp: add recovery_delay to sysfs (bsc#1201284). - nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284). - nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284). - nvme-tcp: make 'err_work' a delayed work (bsc#1201284). - PCI: Free released resource after coalescing (git-fixes). - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes). - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes). - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes). - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes). - platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes). - platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes). - pNFS: Fix assignment of xprtdata.cred (git-fixes). - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582). - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). - powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). - printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875). - pwm: lpc32xx: Remove handling of PWM channels (git-fixes). - quota: add new helper dquot_active() (bsc#1214998). - quota: factor out dquot_write_dquot() (bsc#1214995). - quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963). - quota: fix warning in dqgrab() (bsc#1214962). - quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). - quota: rename dquot_active() to inode_quota_active() (bsc#1214997). - RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes) - s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes). - s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124). - s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023). - s390/ipl: add eckd dump support (jsc#PED-2025). - s390/ipl: add eckd support (jsc#PED-2023). - s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023). - s390/ipl: use octal values instead of S_* macros (jsc#PED-2023). - s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes). - s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes). - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes). - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes). - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes). - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes). - scsi: lpfc: Remove reftag check in DIF paths (git-fixes). - scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928). - scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928). - scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928). - scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928). - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928). - scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928). - scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928). - scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928). - scsi: qla2xxx: Remove unused declarations (bsc#1214928). - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928). - scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928). - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Handle additional SRB status values (git-fixes). - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941). - selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549). - selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes). - spi: Add TPM HW flow flag (bsc#1213534) - spi: tegra210-quad: Enable TPM wait polling (bsc#1213534) - spi: tegra210-quad: set half duplex flag (bsc#1213534) - SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes). - tcpm: Avoid soft reset when partner does not support get_status (git-fixes). - tpm_tis_spi: Add hardware wait polling (bsc#1213534) - tracing: Fix race issue between cpu buffer write and swap (git-fixes). - tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes). - tracing: Remove unnecessary copying of tr->current_trace (git-fixes). - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes). - udf: Fix extension of the last extent in the file (bsc#1214964). - udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965). - udf: Fix off-by-one error when discarding preallocation (bsc#1214966). - udf: Fix uninitialized array access for some pathnames (bsc#1214967). - Update metadata - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes). - usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes). - usb: ehci: move new member has_ci_pec_bug into hole (git-fixes). - usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). - usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). - usb: typec: tcpci: clear the fault status bit (git-fixes). - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (git-fixes). - vhost-scsi: unbreak any layout for response (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: fix hung thread due to erroneous iotlb entries (git-fixes). - vhost: handle error while adding split ranges to iotlb (git-fixes). - virtio_net: add checking sq is full inside xdp xmit (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: reorder some funcs (git-fixes). - virtio_net: separate the logic of checking whether sq is full (git-fixes). - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes). - virtio-blk: set req->state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes). - virtio-mmio: do not break lifecycle of vm_dev (git-fixes). - virtio-net: fix race between set queues and probe (git-fixes). - virtio-net: set queues after driver_ok (git-fixes). - virtio-rng: make device ready before making request (git-fixes). - virtio: acknowledge all features before access (git-fixes). - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582). - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes). - word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729). - x86/alternative: Fix race in try_get_desc() (git-fixes). - x86/boot/e820: Fix typo in e820.c comment (git-fixes). - x86/bugs: Reset speculation control settings on init (git-fixes). - x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453). - x86/coco: Export cc_vendor (bsc#1206453). - x86/cpu: Add Lunar Lake M (git-fixes). - x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes). - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes). - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes). - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453). - x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453). - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453). - x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453) - x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453). - x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453). - x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453). - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453). - x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453). - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453). - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453). - x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453). - x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453). - x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453). - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes). - x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes). - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes). - x86/mce: Retrieve poison range from hardware (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes). - x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes). - x86/purgatory: remove PGO flags (git-fixes). - x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes). - x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes). - x86/resctl: fix scheduler confusion with 'current' (git-fixes). - x86/resctrl: Fix task CLOSID/RMID update race (git-fixes). - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). - x86/rtc: Remove __init for runtime functions (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/sgx: Reduce delay and interference of enclave release (git-fixes). - x86/srso: Do not probe microcode in a guest (git-fixes). - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). - x86/srso: Fix srso_show_state() side effect (git-fixes). - x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes). - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes). - xen: remove a confusing comment on auto-translated guest I/O (git-fixes). - xprtrdma: Remap Receive buffers after a reconnect (git-fixes). Important SUSE bug 1152472 SUSE bug 1202845 SUSE bug 1206453 SUSE bug 1213808 SUSE bug 1214928 SUSE bug 1214942 SUSE bug 1214943 SUSE bug 1214944 SUSE bug 1214950 SUSE bug 1214951 SUSE bug 1214954 SUSE bug 1214957 SUSE bug 1214986 SUSE bug 1214988 SUSE bug 1214992 SUSE bug 1214993 SUSE bug 1215322 SUSE bug 1215877 SUSE bug 1215894 SUSE bug 1215895 SUSE bug 1215896 SUSE bug 1215911 SUSE bug 1215915 SUSE bug 1215916 CVE-2023-1192 CVE-2023-1206 CVE-2023-1859 CVE-2023-2177 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-4155 CVE-2023-42753 CVE-2023-42754 CVE-2023-4389 CVE-2023-4622 CVE-2023-4623 CVE-2023-4881 CVE-2023-4921 CVE-2023-5345 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for wireshark (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: Updated to version 3.6.17: - CVE-2023-5371: Fixed a memory leak issue in the RTPS dissector (bsc#1215959). Low SUSE bug 1215959 CVE-2023-5371 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for opensc (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for opensc fixes the following issues: - CVE-2023-40660: Fixed a PIN bypass that could be triggered when cards tracked their own login state (bsc#1215762). - CVE-2023-40661: Fixed several memory safety issues that could happen during the card enrollment process using pkcs15-init (bsc#1215761). Important SUSE bug 1215761 SUSE bug 1215762 CVE-2023-40660 CVE-2023-40661 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-gevent (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-gevent fixes the following issues: - CVE-2023-41419: Fixed a http request smuggling (bsc#1215469). Important SUSE bug 1215469 CVE-2023-41419 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-urllib3 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-urllib3 fixes the following issues: - CVE-2023-43804: Fixed a potential cookie leak via HTTP redirect if the user manually set the corresponding header (bsc#1215968). Moderate SUSE bug 1215968 CVE-2023-43804 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for glibc (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Basesystem 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931) Also a regression from a previous update was fixed: - elf: Align argument of __munmap to page size (bsc#1215891, BZ #28676) Important SUSE bug 1215286 SUSE bug 1215891 CVE-2023-4813 cpe:/o:suse:sle-module-basesystem:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for distribution (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for distribution fixes the following issues: Update to verison 2.8.2: - Revert registry/client: set `Accept: identity` header when getting layers - Parse `http` forbidden as denied - Fix CVE-2023-2253 runaway allocation on /v2/_catalog (bsc#1207705) - Fix panic in inmemory driver - update to go1.19.9 - Add code to handle pagination of parts. Fixes max layer size of 10GB bug - Dockerfile: fix filenames of artifacts Important SUSE bug 1207705 SUSE bug 1210428 CVE-2023-2253 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for kubernetes1.23 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for kubernetes1.23 fixes the following issues: - CVE-2023-2727: Fixed bypassing policies imposed by the ImagePolicyWebhook admission plugin (bsc#1211630). - CVE-2023-2728: Fixed bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin (bsc#1211631). Important SUSE bug 1211630 SUSE bug 1211631 CVE-2023-2727 CVE-2023-2728 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for kubernetes1.24 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for kubernetes1.24 fixes the following issues: - CVE-2023-2727: Fixed bypassing policies imposed by the ImagePolicyWebhook admission plugin (bsc#1211630). - CVE-2023-2728: Fixed bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin (bsc#1211631). Important SUSE bug 1211630 SUSE bug 1211631 CVE-2023-2727 CVE-2023-2728 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for container-suseconnect (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of container-suseconnect fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for kubernetes1.24 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of kubernetes1.24 fixes the following issues: - Update to version 1.24.15. - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for kubernetes1.23 (Low) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for kubernetes1.23 fixes the following issues: - CVE-2023-2431: Fixed a bypass issue of seccomp profile enforcement (bsc#1212493). Low SUSE bug 1212493 CVE-2023-2431 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for container-suseconnect (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of container-suseconnect fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for conmon (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for conmon fixes the following issues: conmon was updated to version 2.1.7: - Bumped go version to 1.19 (bsc#1209307). Bugfixes: - Fixed leaking symbolic links in the opt_socket_path directory - Fixed oom handling issues (bsc#1208737). - Fixed OOM watcher for cgroupv2 `oom_kill` events Important SUSE bug 1208737 SUSE bug 1209307 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for helm (Important) (in QA) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for helm fixes the following issues: helm was updated to version 3.13.1: * Fixing precedence issue with the import of values. * Add missing with clause to release gh action * FIX Default ServiceAccount yaml * fix(registry): unswallow error * remove useless print during prepareUpgrade * fix(registry): address anonymous pull issue * Fix missing run statement on release action * Write latest version to get.helm.sh bucket * Increased release information key name max length. helm was updated to version 3.13.0 (bsc#1215588): * Fix leaking goroutines in Install * Update Helm to use k8s 1.28.2 libraries * make the dependabot k8s.io group explicit * use dependabot's group support for k8s.io dependencies * doc:Executing helm rollback release 0 will roll back to the previous release * Use labels instead of selectorLabels for pod labels * fix(helm): fix GetPodLogs, the hooks should be sorted before get the logs of each hook * chore: HTTPGetter add default timeout * Avoid nil dereference if passing a nil resolver * Add required changes after merge * Fix #3352, add support for --ignore-not-found just like kubectl delete * Fix helm may identify achieve of the application/x-gzip as application/vnd.ms-fontobject * Restore `helm get metadata` command * Revert 'Add `helm get metadata` command' * test: replace `ensure.TempDir` with `t.TempDir` * use json api url + report curl/wget error on fail * Added error in case try to supply custom label with name of system label during install/upgrade * fix(main): fix basic auth for helm pull or push * cmd: support generating index in JSON format * repo: detect JSON and unmarshal efficiently * Tweaking new dry-run internal handling * bump kubernetes modules to v0.27.3 * Remove warning for template directory not found. * Added tests for created OCI annotation time format * Add created OCI annotation * Fix multiple bugs in values handling * chore: fix a typo in `manager.go` * add GetRegistryClient method * oci: add tests for plain HTTP and insecure HTTPS registries * oci: Add flag `--plain-http` to enable working with HTTP registries * docs: add an example for using the upgrade command with existing values * Replace `fmt.Fprintf` with `fmt.Fprint` in get_metadata.go * Replace `fmt.Fprintln` with `fmt.Fprintf` in get_metadata.go * update kubernetes dependencies from v0.27.0 to v0.27.1 * Add ClientOptResolver to test util file * Check that missing keys are still handled in tpl * tests: change crd golden file to match after #11870 * Adding details on the Factory interface * update autoscaling/v2beta1 to autoscaling/v2 in skeleton chart * feat(helm): add ability for --dry-run to do lookup functions When a helm command is run with the --dry-run flag, it will try to connect to the cluster to be able to render lookup functions. Closes #8137 * bugfix:(#11391) helm lint infinite loop when malformed template object * pkg/engine: fix nil-dereference * pkg/chartutil: fix nil-dereference * pkg/action: fix nil-dereference * full source path when output-dir is not provided * added Contributing.md section and ref link in the README * feat(helm): add ability for --dry-run to do lookup functions When a helm command is run with the --dry-run flag, it will try to connect to the cluster if the value is 'server' to be able to render lookup functions. Closes #8137 * feat(helm): add ability for --dry-run to do lookup functions * Add `CHART`, `VERSION` and `APP_VERSION` fields to `get all` command output * Adjust `get` command description to account metadata * add volumes and volumeMounts in chartutil * Seed a default switch to control `automountServiceAccountToken` * Avoid confusing error when passing in '--version X.Y.Z' * Add `helm get metadata` command * Use wrapped error so that ErrNoObjectsVisited can be compared after return. * Add exact version test. * strict file permissions of repository.yaml * Check redefinition of define and include in tpl * Check that `.Template` is passed through `tpl` * Make sure empty `tpl` values render empty. * Pick the test improvement out of PR#8371 * #11369 Use the correct index repo cache directory in the `parallelRepoUpdate` method as well * #11369 Add a test case to prove the bug and its resolution * ref(helm): export DescriptorPullSummary fields * feat(helm): add 'ClientOptResolver' ClientOption * Fix flaky TestSQLCreate test by making sqlmock ignore order of sql requests * Fixing tests after adding labels to release fixture * Make default release fixture contain custom labels to make tests check that labels are not lost * Added support for storing custom labels in SQL storage driver * Adding support merging new custom labels with original release labels during upgrade * Added note to install/upgrade commands that original release labels wouldn't be persisted in upgraded release * Added unit tests for implemented install/upgrade labels logic * Remove redudant types from util_test.go * Added tests for newly introduced util.go functions * Fix broken tests for SQL storage driver * Fix broken tests for configmap and secret storage drivers * Make superseded releases keep labels * Support configmap storage driver for install/upgrade actions --labels argument * Added upgrade --install labels argument support * Add labels support for install action with secret storage backend * test: added tests to load plugin from home dir with space * fix: plugin does not load when helm base dir contains space * Add priority class to kind sorter * Fixes #10566 * test(search): add mixedCase test case * fix(search): print repo search result in original case * Adjust error message wrongly claiming that there is a resource conflict * Throw an error from jobReady() if the job exceeds its BackoffLimit * github: add Asset Transparency action for GitHub releases Update to version 3.12.3: * bump kubernetes modules to v0.27.3 * Add priority class to kind sorter Update to version 3.12.2: * add GetRegistryClient method Update to version 3.12.1: * bugfix:(#11391) helm lint infinite loop when malformed template object * update autoscaling/v2beta1 to autoscaling/v2 in skeleton chart * test(search): add mixedCase test case * fix(search): print repo search result in original case * strict file permissions of repository.yaml * update kubernetes dependencies from v0.27.0 to v0.27.1 Update to version 3.12.0: * Attach annotations to OCI artifacts * Fix goroutine leak in action install * fix quiet lint does not fail on non-linting errors * create failing test for quietly linting a chart that doesn't exist * Fixes Readiness Check for statefulsets using partitioned rolling update. (#11774) * fix: failed testcase on windows * Fix 32bit-x86 typo in testsuite * Handle failed DNS case for Go 1.20+ * Updating the Go version in go.mod * Fix goroutine leak in perform * Properly invalidate client after CRD install * Provide a helper to set the registryClient in cmd * Reimplemented change in httpgetter for insecure TLS option * Added insecure option to login subcommand * Added support for insecure OCI registries * Enable custom certificates option for OCI * Add testing to default and release branches * Remove job dependency. Should have done when I moved job to new file * Remove check to run only in helm org * Add why comments * Convert remaining CircleCI config to GitHub Actions * Changed how the setup-go action sets go version * chore:Use http constants as http.request parameters * update k8s registry domain * don't mark issues as stale where a PR is in progress * Update to func handling * Add option to support cascade deletion options * the linter varcheck and deadcode are deprecated (since v1.49.0) * Check status code before retrying request * Fix improper use of Table request/response to k8s API * fix template --output-dir issue * Add protection for stack-overflows for nested keys * feature(helm): add --set-literal flag for literal string interpretation Update to version 3.11.3: * Fix goroutine leak in perform * Fix goroutine leak in action install * Fix 32bit-x86 typo in testsuite * Fixes Readiness Check for statefulsets using partitioned rolling update. (#11774) - avoid CGO to workaround missing gold dependency (bsc#1183043) This patch is currently in QA and not yet available for download. Important SUSE bug 1183043 SUSE bug 1215588 SUSE bug 1215711 CVE-2022-41723 CVE-2023-25173 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for container-suseconnect (Important) (in QA) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of container-suseconnect fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). This patch is currently in QA and not yet available for download. Important SUSE bug 1212475 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for container-suseconnect (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of container-suseconnect fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for docker (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for docker fixes the following issues: - Update to Docker 24.0.5-ce. See upstream changelong online at <https://docs.docker.com/engine/release-notes/24.0/#2405> bsc#1213229 - Update to Docker 24.0.4-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/24.0/#2404>. bsc#1213500 - Update to Docker 24.0.3-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/24.0/#2403>. bsc#1213120 - Recommend docker-rootless-extras instead of Require(ing) it, given it's an additional functionality and not inherently required for docker to function. - Add docker-rootless-extras subpackage (https://docs.docker.com/engine/security/rootless) - Update to Docker 24.0.2-ce. See upstream changelog online at <https://docs.docker.com/engine/release-notes/24.0/#2402>. bsc#1212368 * Includes the upstreamed fix for the mount table pollution issue. bsc#1210797 - Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as being provided by this package. - was rebuilt against current GO compiler. Moderate SUSE bug 1210797 SUSE bug 1212368 SUSE bug 1213120 SUSE bug 1213229 SUSE bug 1213500 SUSE bug 1214107 SUSE bug 1214108 SUSE bug 1214109 CVE-2023-28840 CVE-2023-28841 CVE-2023-28842 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for container-suseconnect (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of container-suseconnect fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for containerd (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of containerd fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for container-suseconnect (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of container-suseconnect fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for runc (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of runc fixes the following issues: - Update to runc v1.1.8. Upstream changelog is available from <https://github.com/opencontainers/runc/releases/tag/v1.1.8>. - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for conmon (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for conmon fixes the following issues: conmon is rebuild with go1.21 to capture current stability, bug and security fixes. (bsc#1215806) Important SUSE bug 1215806 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cni-plugins (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of cni-plugins fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 SUSE bug 1216006 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cni (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of cni fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 SUSE bug 1216006 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for buildah (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of buildah fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 SUSE bug 1216005 cpe:/o:suse:sle-module-containers:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libheif (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libheif fixes the following issues: - CVE-2023-29659: Fixed segfault caused by divide-by-zero (bsc#1211174). Moderate SUSE bug 1211174 CVE-2023-29659 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for texlive (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for texlive fixes the following issues: - CVE-2023-32700: Fixed arbitrary code execution in LuaTeX (bsc#1211389). Important SUSE bug 1211389 CVE-2023-32700 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for wireshark (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: Updated to version 3.6.14: - CVE-2023-2855: Fixed a crash in the Candump log file parser (boo#1211703). - CVE-2023-2856: Fixed a crash in the VMS TCPIPtrace file parser (boo#1211707). - CVE-2023-2857: Fixed a crash in the BLF file parser (boo#1211705). - CVE-2023-2858: Fixed a crash in the NetScaler file parser (boo#1211706). - CVE-2023-0668: Fixed a crash in the IEEE C37.118 Synchrophasor dissector (boo#1211710). - CVE-2023-2879: GDSDB dissector infinite loop (boo#1211793). Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html Moderate SUSE bug 1211703 SUSE bug 1211705 SUSE bug 1211706 SUSE bug 1211707 SUSE bug 1211710 SUSE bug 1211793 CVE-2023-0668 CVE-2023-2855 CVE-2023-2856 CVE-2023-2857 CVE-2023-2858 CVE-2023-2859 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ImageMagick (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ImageMagick fixes the following issues: - CVE-2023-34151: Fixed an undefined behavior issue due to floating point truncation (bsc#1211791). - CVE-2023-34153: Fixed a command injection issue when encoding or decoding VIDEO files (bsc#1211792). Important SUSE bug 1211791 SUSE bug 1211792 CVE-2023-34151 CVE-2023-34153 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups fixes the following issues: - CVE-2023-32324: Fixed a buffer overflow in format_log_line() which could cause a denial-of-service (bsc#1211643). Important SUSE bug 1211643 CVE-2023-32324 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaFirefox (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox fixes the following issues: Extended Support Release 102.12.0 ESR (bsc#1211922): - CVE-2023-34414: Click-jacking certificate exceptions through rendering lag - CVE-2023-34416: Memory safety bugs fixed in Firefox 114 and Firefox ESR 102.12 Important SUSE bug 1211922 CVE-2023-34414 CVE-2023-34416 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for bluez (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398). Important SUSE bug 1210398 CVE-2023-27349 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for open-vm-tools (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for open-vm-tools fixes the following issues: - CVE-2023-20867: Fixed authentication bypass vulnerability in the vgauth module (bsc#1212143). Bug fixes: - Fixed build problem with grpc 1.54 (bsc#1210695). Moderate SUSE bug 1210695 SUSE bug 1212143 CVE-2023-20867 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups fixes the following issues: - CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230). Important SUSE bug 1212230 CVE-2023-34241 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for dav1d (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for dav1d fixes the following issues: - CVE-2023-32570: Fixed possible crash when decoding a frame (bsc#1211262). Moderate SUSE bug 1211262 CVE-2023-32570 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: Add security patches (bsc#1211846): - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659). - CVE-2023-32373: Fixed processing of maliciously crafted web content that may lead to arbitrary code execution (bsc#1211658). Important SUSE bug 1211658 SUSE bug 1211659 SUSE bug 1211846 CVE-2023-28204 CVE-2023-32373 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for qt6-base (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for qt6-base fixes the following issues: - CVE-2023-32763: Fixed an overflow in QTextLayout (bsc#1211798). Important SUSE bug 1211798 CVE-2023-32763 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libqt5-qtbase (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libqt5-qtbase fixes the following issues: - CVE-2023-32763: Fixed an overflow in QTextLayout (bsc#1211798). Important SUSE bug 1211798 CVE-2023-32763 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ImageMagick (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ImageMagick fixes the following issues: - CVE-2023-34474: Fixed heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c (bsc#1212237). Moderate SUSE bug 1212237 CVE-2023-34474 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaFirefox, MozillaFirefox-branding-SLE (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox, MozillaFirefox-branding-SLE fixes the following issues: Changes in MozillaFirefox and MozillaFirefox-branding-SLE: This update provides Firefox Extended Support Release 115.0 ESR * New: - Required fields are now highlighted in PDF forms. - Improved performance on high-refresh rate monitors (120Hz+). - Buttons in the Tabs toolbar can now be reached with Tab, Shift+Tab, and Arrow keys. View this article for additional details. - Windows' 'Make text bigger' accessibility setting now affects all the UI and content pages, rather than only applying to system font sizes. - Non-breaking spaces are now preserved—preventing automatic line breaks—when copying text from a form control. - Fixed WebGL performance issues on NVIDIA binary drivers via DMA-Buf on Linux. - Fixed an issue in which Firefox startup could be significantly slowed down by the processing of Web content local storage. This had the greatest impact on users with platter hard drives and significant local storage. - Removed a configuration option to allow SHA-1 signatures in certificates: SHA-1 signatures in certificates—long since determined to no longer be secure enough—are now not supported. - Highlight color is preserved correctly after typing `Enter` in the mail composer of Yahoo Mail and Outlook. After bypassing the https only error page navigating back would take you to the error page that was previously dismissed. Back now takes you to the previous site that was visited. - Paste unformatted shortcut (shift+ctrl/cmd+v) now works in plain text contexts, such as input and text area. - Added an option to print only the current page from the print preview dialog. - Swipe to navigate (two fingers on a touchpad swiped left or right to perform history back or forward) on Windows is now enabled. - Stability on Windows is significantly improved as Firefox handles low-memory situations much better. - Touchpad scrolling on macOS was made more accessible by reducing unintended diagonal scrolling opposite of the intended scroll axis. - Firefox is less likely to run out of memory on Linux and performs more efficiently for the rest of the system when memory runs low. - It is now possible to edit PDFs: including writing text, drawing, and adding signatures. - Setting Firefox as your default browser now also makes it the default PDF application on Windows systems. - Swipe-to-navigate (two fingers on a touchpad swiped left or right to perform history back or forward) now works for Linux users on Wayland. - Text Recognition in images allows users on macOS 10.15 and higher to extract text from the selected image (such as a meme or screenshot). - Firefox View helps you get back to content you previously discovered. A pinned tab allows you to find and open recently closed tabs on your current device and access tabs from other devices (via our “Tab Pickup” feature). - Import maps, which allow web pages to control the behavior of JavaScript imports, are now enabled by default. - Processes used for background tabs now use efficiency mode on Windows 11 to limit resource use. - The shift+esc keyboard shortcut now opens the Process Manager, offering a way to quickly identify processes that are using too many resources. - Firefox now supports properly color correcting images tagged with ICCv4 profiles. - Support for non-English characters when saving and printing PDF forms. - The bookmarks toolbar's default 'Only show on New Tab' state works correctly for blank new tabs. As before, you can change the bookmark toolbar's behavior using the toolbar context menu. - Manifest Version 3 (MV3) extension support is now enabled by default (MV2 remains enabled/supported). This major update also ushers an exciting user interface change in the form of the new extensions button. - The Arbitrary Code Guard exploit protection has been enabled in the media playback utility processes, improving security for Windows users. - The native HTML date picker for date and datetime inputs can now be used with a keyboard alone, improving its accessibility for screen reader users. Users with limited mobility can also now use common keyboard shortcuts to navigate the calendar grid and month selection spinners. - Firefox builds in the Spanish from Spain (es-ES) and Spanish from Argentina (es-AR) locales now come with a built- in dictionary for the Firefox spellchecker. - On macOS, Ctrl or Cmd + trackpad or mouse wheel now scrolls the page instead of zooming. This avoids accidental zooming and matches the behavior of other web browsers on macOS. - It's now possible to import bookmarks, history and passwords not only from Edge, Chrome or Safari but also from Opera, Opera GX, and Vivaldi. - GPU sandboxing has been enabled on Windows. - On Windows, third-party modules can now be blocked from injecting themselves into Firefox, which can be helpful if they are causing crashes or other undesirable behavior. - Date, time, and datetime-local input fields can now be cleared with `Cmd+Backspace` and `Cmd+Delete` shortcut on macOS and `Ctrl+Backspace` and `Ctrl+Delete` on Windows and Linux. - GPU-accelerated Canvas2D is enabled by default on macOS and Linux. - WebGL performance improvement on Windows, MacOS and Linux. - Enables overlay of hardware-decoded video with non-Intel GPUs on Windows 10/11, improving video playback performance and video scaling quality. - Windows native notifications are now enabled. - Firefox Relay users can now opt-in to create Relay email masks directly from the Firefox credential manager. You must be signed in with your Firefox Account. - We’ve added two new locales: Silhe Friulian (fur) and Sardinian (sc). - Right-clicking on password fields now shows an option to reveal the password. - Private windows and ETP set to strict will now include email tracking protection. This will make it harder for email trackers to learn the browsing habits of Firefox users. You can check the Tracking Content in the sub-panel on the shield icon panel. - The deprecated U2F Javascript API is now disabled by default. The U2F protocol remains usable through the WebAuthn API. The U2F API can be re-enabled using the `security.webauth.u2f` preference. - Say hello to enhanced Picture-in-Picture! Rewind, check video duration, and effortlessly switch to full-screen mode on the web's most popular video websites. - Firefox's address bar is already a great place to search for what you're looking for. Now you'll always be able to see your web search terms and refine them while viewing your search's results - no additional scrolling needed! Also, a new result menu has been added making it easier to remove history results and dismiss sponsored Firefox Suggest entries. - Private windows now protect users even better by blocking third-party cookies and storage of content trackers. - Passwords automatically generated by Firefox now include special characters, giving users more secure passwords by default. - Firefox 115 introduces a redesigned accessibility engine which significantly improves the speed, responsiveness, and stability of Firefox when used with: - Screen readers, as well as certain other accessibility software; - East Asian input methods; - Enterprise single sign-on software; and - Other applications which use accessibility frameworks to access information. - Firefox 115 now supports AV1 Image Format files containing animations (AVIS), improving support for AVIF images across the web. - The Windows GPU sandbox first shipped in the Firefox 110 release has been tightened to enhance the security benefits it provides. - A 13-year-old feature request was fulfilled and Firefox now supports files being drag-and-dropped directly from Microsoft Outlook. A special thanks to volunteer contributor Marco Spiess for helping to get this across the finish line! - Users on macOS can now access the Services sub-menu directly from Firefox context menus. - On Windows, the elastic overscroll effect has been enabled by default. When two-finger scrolling on the touchpad or scrolling on the touchscreen, you will now see a bouncing animation when scrolling past the edge of a scroll container. - Firefox is now available in the Tajik (tg) language. - Added UI to manage the DNS over HTTPS exception list. - Bookmarks can now be searched from the Bookmarks menu. The Bookmarks menu is accessible by adding the Bookmarks menu button to the toolbar. - Restrict searches to your local browsing history by selecting Search history from the History, Library or Application menu buttons. - Mac users can now capture video from their cameras in all supported native resolutions. This enables resolutions higher than 1280x720. - It is now possible to reorder the extensions listed in the extensions panel. - Users on macOS, Linux, and Windows 7 can now use FIDO2 / WebAuthn authenticators over USB. Some advanced features, such as fully passwordless logins, require a PIN to be set on the authenticator. - Pocket Recommended content can now be seen in France, Italy, and Spain. - DNS over HTTPS settings are now part of the Privacy & Security section of the Settings page and allow the user to choose from all the supported modes. - Migrating from another browser? Now you can bring over payment methods you've saved in Chrome-based browsers to Firefox. - Hardware video decoding enabled for Intel GPUs on Linux. - The Tab Manager dropdown now features close buttons, so you can close tabs more quickly. - Windows Magnifier now follows the text cursor correctly when the Firefox title bar is visible. - Undo and redo are now available in Password fields. [1]:https://support.mozilla.org/kb/access-toolbar-functions- using-keyboard?_gl=1*16it7nj*_ga*MTEzNjg4MjY5NC4xNjQ1MjAxMDU3 *_ga_MQ7767QQQW*MTY1Njk2MzExMS43LjEuMTY1Njk2MzIzMy4w [2]:https://support.mozilla.org/kb/how-set-tab-pickup-firefox-view [3]:https://support.mozilla.org/kb/task-manager-tabs-or-extensions-are-slowing-firefox [4]:https://blog.mozilla.org/addons/2022/11/17/manifest-v3-signing-available-november-21-on-firefox-nightly/ [5]:https://blog.mozilla.org/addons/2022/05/18/manifest-v3-in-firefox-recap-next-steps/ [6]:https://support.mozilla.org/kb/unified-extensions [7]:https://support.mozilla.org/kb/import-data-another-browser [8]:https://support.mozilla.org/kb/identify-problems-third-party-modules-firefox-windows [9]:https://support.mozilla.org/kb/how-generate-secure-password-firefox [10]:https://blog.mozilla.org/accessibility/firefox-113-accessibility-performance/ * Fixed: Various security fixes. MFSA 2023-22 (bsc#1212438) * CVE-2023-3482 (bmo#1839464) Block all cookies bypass for localstorage * CVE-2023-37201 (bmo#1826002) Use-after-free in WebRTC certificate generation * CVE-2023-37202 (bmo#1834711) Potential use-after-free from compartment mismatch in SpiderMonkey * CVE-2023-37203 (bmo#291640) Drag and Drop API may provide access to local system files * CVE-2023-37204 (bmo#1832195) Fullscreen notification obscured via option element * CVE-2023-37205 (bmo#1704420) URL spoofing in address bar using RTL characters * CVE-2023-37206 (bmo#1813299) Insufficient validation of symlinks in the FileSystem API * CVE-2023-37207 (bmo#1816287) Fullscreen notification obscured * CVE-2023-37208 (bmo#1837675) Lack of warning when opening Diagcab files * CVE-2023-37209 (bmo#1837993) Use-after-free in `NotifyOnHistoryReload` * CVE-2023-37210 (bmo#1821886) Full-screen mode exit prevention * CVE-2023-37211 (bmo#1832306, bmo#1834862, bmo#1835886, bmo#1836550, bmo#1837450) Memory safety bugs fixed in Firefox 115, Firefox ESR 102.13, and Thunderbird 102.13 * CVE-2023-37212 (bmo#1750870, bmo#1825552, bmo#1826206, bmo#1827076, bmo#1828690, bmo#1833503, bmo#1835710, bmo#1838587) Memory safety bugs fixed in Firefox 115 - Fixed potential SIGILL on older CPUs (bsc#1212101) * Fixed: Various security fixes and other quality Important SUSE bug 1212101 SUSE bug 1212438 CVE-2023-3482 CVE-2023-37201 CVE-2023-37202 CVE-2023-37203 CVE-2023-37204 CVE-2023-37205 CVE-2023-37206 CVE-2023-37207 CVE-2023-37208 CVE-2023-37209 CVE-2023-37210 CVE-2023-37211 CVE-2023-37212 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssh (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssh fixes the following issues: - CVE-2023-38408: Fixed a condition where specific libaries loaded via ssh-agent(1)'s PKCS#11 support could be abused to achieve remote code execution via a forwarded agent socket if those libraries were present on the victim's system and if the agent was forwarded to an attacker-controlled system. [bsc#1213504, CVE-2023-38408] - Close the right filedescriptor and also close fdh in read_hmac to avoid file descriptor leaks. [bsc#1209536] - Attempts to mitigate instances of secrets lingering in memory after a session exits. [bsc#1186673, bsc#1213004, bsc#1213008] Important SUSE bug 1186673 SUSE bug 1209536 SUSE bug 1213004 SUSE bug 1213008 SUSE bug 1213504 CVE-2023-38408 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaFirefox (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox fixes the following issues: Firefox was updated to version 115.0.2 ESR (bsc#1213230): - CVE-2023-3600: Fixed Use-after-free in workers (bmo#1839703). Bugfixes: - Fixed a startup crash experienced by some Windows users by blocking instances of a malicious injected DLL (bmo#1841751). - Fixed a bug with displaying a caret in the text editor on some websites (bmo#1840804). - Fixed a bug with broken audio rendering on some websites (bmo#1841982). - Fixed a bug with patternTransform translate using the wrong units (bmo#1840746). - Fixed a crash affecting Windows 7 users related to the DLL blocklist. - Fixed a startup crash for Windows users with Kingsoft Antivirus software installed (bmo#1837242). Important SUSE bug 1213230 CVE-2023-3600 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libqt5-qtsvg (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libqt5-qtsvg fixes the following issues: - CVE-2021-45930: Fixed an out-of-bounds write that may have lead to a denial-of-service (bsc#1196654). - CVE-2023-32573: Fixed missing initialization of QtSvg QSvgFont m_unitsPerEm variable (bsc#1211298). Moderate SUSE bug 1196654 SUSE bug 1211298 CVE-2021-45930 CVE-2023-32573 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libqt5-qtbase (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libqt5-qtbase fixes the following issues: - CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994). - CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642). - CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797). - CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326). - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616). Important SUSE bug 1209616 SUSE bug 1211642 SUSE bug 1211797 SUSE bug 1211994 SUSE bug 1213326 CVE-2023-24607 CVE-2023-32762 CVE-2023-33285 CVE-2023-34410 CVE-2023-38197 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for librsvg (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for librsvg fixes the following issues: librsvg was updated to version 2.52.10: - CVE-2023-38633: Fixed directory traversal in URI decoder (bsc#1213502). Important SUSE bug 1213502 CVE-2023-38633 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaFirefox (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox fixes the following security issues: Firefox was updated to Extended Support Release 115.1.0 ESR (bsc#1213746): - CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876). - CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686). - CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073). - CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368). - CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658). - CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038). - CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420). - CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777). - CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561). - CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847). - CVE-2023-4057: Fixed memory safety bugs (bmo#1841682). Bugfixes: - Remove bashisms from startup-script (bsc#1213657) Important SUSE bug 1213657 SUSE bug 1213746 CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4052 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056 CVE-2023-4057 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for qt6-base (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for qt6-base fixes the following issues: - CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994). - CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642). - CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797). - CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326). - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616). Important SUSE bug 1209616 SUSE bug 1211642 SUSE bug 1211797 SUSE bug 1211994 SUSE bug 1213326 CVE-2023-24607 CVE-2023-32762 CVE-2023-33285 CVE-2023-34410 CVE-2023-38197 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gstreamer-plugins-bad (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder which might trigger a crash or remote code execution. (bsc#1213126) Important SUSE bug 1213126 CVE-2023-37329 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for wireshark (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: Update to Wireshark 3.6.15: - Further features, bug fixes and updated protocol support as listed in: https://www.wireshark.org/docs/relnotes/wireshark-3.6.15.html Security fixes: - CVE-2023-0667: Fixed failure to validate MS-MMS packet length (bsc#1212084). - CVE-2023-0668: Fixed IEEE C37.118 Synchrophasor dissector crash (bsc#1211710). - CVE-2023-2855: Fixed Candump log file parser crash (bsc#1211703). - CVE-2023-2856: Fixed VMS TCPIPtrace file parser crash (bsc#1211707). - CVE-2023-2857: Fixed BLF file parser crash (bsc#1211705). - CVE-2023-2858: Fixed NetScaler file parser crash (bsc#1211706). - CVE-2023-2879: Fixed GDSDB dissector infinite loop (bsc#1211793). - CVE-2023-2952: Fixed XRA dissector infinite loop (bsc#1211844). - CVE-2023-3648: Fixed Kafka dissector crash (bsc#1213319). Moderate SUSE bug 1211703 SUSE bug 1211705 SUSE bug 1211706 SUSE bug 1211707 SUSE bug 1211710 SUSE bug 1211793 SUSE bug 1211844 SUSE bug 1212084 SUSE bug 1213319 CVE-2023-0667 CVE-2023-0668 CVE-2023-2855 CVE-2023-2856 CVE-2023-2857 CVE-2023-2858 CVE-2023-2879 CVE-2023-2952 CVE-2023-3648 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for pipewire (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for pipewire fixes the following security issues: - Fixed issue where an app which only has permission to access one stream can also access other streams (bsc#1213682). Bugfixes: - Fixed division by 0 and other issues with invalid values (glfo#pipewire/pipewire#2953) - Fixed an overflow resulting in choppy sound in some cases (glfo#pipewire/pipewire#2680) Moderate SUSE bug 1213682 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-38594: Fixed arbitrary code execution. - CVE-2023-38595: Fixed arbitrary code execution. - CVE-2023-38597: Fixed arbitrary code execution. - CVE-2023-38599: Fixed sensitive user information tracking. - CVE-2023-38600: Fixed arbitrary code execution. - CVE-2023-38611: Fixed arbitrary code execution. Update to version 2.40.3 (bsc#1212863): - CVE-2023-32439: Fixed a bug where processing maliciously crafted web content may lead to arbitrary code execution. (bsc#1212863) - CVE-2023-32435: Fixed a bug where processing web content may lead to arbitrary code execution. (bsc#1212863) - CVE-2022-48503: Fixed a bug where processing web content may lead to arbitrary code execution. (bsc#1212863) Important SUSE bug 1212863 SUSE bug 1213905 CVE-2022-48503 CVE-2023-32435 CVE-2023-32439 CVE-2023-38133 CVE-2023-38572 CVE-2023-38592 CVE-2023-38594 CVE-2023-38595 CVE-2023-38597 CVE-2023-38599 CVE-2023-38600 CVE-2023-38611 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for freetype2 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for freetype2 fixes the following issues: - CVE-2023-2004: Fixed integer overflow in tt_hvadvance_adjust (bsc#1210419). Moderate SUSE bug 1210419 CVE-2023-2004 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for vim (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for vim fixes the following issues: Updated to version 9.0 with patch level 1572. - CVE-2023-2426: Fixed Out-of-range Pointer Offset use (bsc#1210996). - CVE-2023-2609: Fixed NULL Pointer Dereference (bsc#1211256). - CVE-2023-2610: Fixed nteger Overflow or Wraparound (bsc#1211257). Important SUSE bug 1210996 SUSE bug 1211256 SUSE bug 1211257 SUSE bug 1211461 CVE-2023-2426 CVE-2023-2609 CVE-2023-2610 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for open-vm-tools (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for open-vm-tools fixes the following issues: - CVE-2023-20900: Fixed SAML token signature bypass vulnerability (bsc#1214566). This update also ships a open-vm-tools-containerinfo plugin. (jsc#PED-3421) Important SUSE bug 1214566 CVE-2023-20900 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for exempi (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for exempi fixes the following issues: - CVE-2020-18652: Fixed buffer overflow vulnerability in WEBP_Support.cpp (bsc#1214488). Moderate SUSE bug 1214488 CVE-2020-18652 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaFirefox (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox fixes the following issues: Firefox was updated to Extended Support Release 115.2.0 ESR (MFSA 2023-36) (bsc#1214606). - CVE-2023-4574: Fixed memory corruption in IPC ColorPickerShownCallback (bmo#1846688) - CVE-2023-4575: Fixed memory corruption in IPC FilePickerShownCallback (bmo#1846689) - CVE-2023-4576: Fixed integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694) - CVE-2023-4577: Fixed memory corruption in JIT UpdateRegExpStatics (bmo#1847397) - CVE-2023-4051: Fixed full screen notification obscured by file open dialog (bmo#1821884) - CVE-2023-4578: Fixed Out of Memory Exception in SpiderMonkey could have triggered an (bmo#1839007) - CVE-2023-4053: Fixed full screen notification obscured by external program (bmo#1839079) - CVE-2023-4580: Fixed push notifications saved to disk unencrypted (bmo#1843046) - CVE-2023-4581: Fixed XLL file extensions downloadable without warnings (bmo#1843758) - CVE-2023-4582: Fixed buffer Overflow in WebGL glGetProgramiv (bmo#1773874) - CVE-2023-4583: Fixed browsing Context potentially not cleared when closing Private Window (bmo#1842030) - CVE-2023-4584: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) - CVE-2023-4585: Fixed memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2(bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999). Important SUSE bug 1214606 CVE-2023-4051 CVE-2023-4053 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576 CVE-2023-4577 CVE-2023-4578 CVE-2023-4580 CVE-2023-4581 CVE-2023-4582 CVE-2023-4583 CVE-2023-4584 CVE-2023-4585 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for djvulibre (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for djvulibre fixes the following issues: - CVE-2021-46310: Fixed divide by zero in IW44Image.cpp (bsc#1214670). - CVE-2021-46312: Fixed divide by zero in IW44EncodeCodec.cpp (bsc#1214672). Low SUSE bug 1214670 SUSE bug 1214672 CVE-2021-46310 CVE-2021-46312 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: - Provide/obsolete WebKit2GTK-%{_apiver}-lang (bsc#1214093) - Have the lang package provide libwebkit2gtk3-lang (bsc#1214093) - Adjustments of update version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581): + Added missing CVE references: CVE-2023-32393, CVE-2023-37450 Important SUSE bug 1213379 SUSE bug 1213581 SUSE bug 1213905 SUSE bug 1214093 CVE-2023-32393 CVE-2023-37450 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaFirefox (Critical) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox fixes the following issues: Firefox Extended Support Release 115.2.1 ESR (bsc#1215245). - CVE-2023-4863: Fixed heap buffer overflow in libwebp (MFSA 2023-40) (bsc#1215231). The following non-security bug was fixed: - Fix i586 build by reducing debug info to -g1 (bsc#1210168). Critical SUSE bug 1210168 SUSE bug 1215231 SUSE bug 1215245 CVE-2023-4863 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups fixes the following issues: - CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204). - CVE-2023-32360: Fixed Information leak through Cups-Get-Document operation (bsc#1214254). Important SUSE bug 1214254 SUSE bug 1215204 CVE-2023-32360 CVE-2023-4504 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_apiver}, then getting out of sync of what's being required and what's being provided. Now, any sub-package that was providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver} instead (bsc#1214835, bsc#1214640, bsc#1214093). - Require libwaylandclient0 >= 1.20. 15.4 originally had 1.19.0, but webkitgtk uses a function added in 1.20.0, so we need to ensure that the wayland update is pulled in (bsc#1215072). - Update to version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581 bsc#1215230): CVE-2023-38594, CVE-2023-38595, CVE-2023-38597, CVE-2023-38599, CVE-2023-38600, CVE-2023-38611, CVE-2023-40397, CVE-2023-37450, CVE-2023-28198, CVE-2023-32370 Important SUSE bug 1213379 SUSE bug 1213581 SUSE bug 1213905 SUSE bug 1214093 SUSE bug 1214640 SUSE bug 1214835 SUSE bug 1215072 SUSE bug 1215230 CVE-2023-28198 CVE-2023-32370 CVE-2023-37450 CVE-2023-38594 CVE-2023-38595 CVE-2023-38597 CVE-2023-38599 CVE-2023-38600 CVE-2023-38611 CVE-2023-40397 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for wireshark (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: - Wireshark update to v3.6.16. - CVE-2023-4512: Fixed a bug in CBOR dissector which could lead to crash. (bsc#1214561) - CVE-2023-4511: Fixed a bug in BT SDP dissector which could lead to an infinite loop. (bsc#1214560) - CVE-2023-4513: Fixed a bug in BT SDP dissector which could lead to a memory leak. (bsc#1214562) - CVE-2023-2906: Fixed a bug in CP2179 dissector which could lead to crash. (bsc#1214652) Moderate SUSE bug 1214560 SUSE bug 1214561 SUSE bug 1214562 SUSE bug 1214652 CVE-2023-2906 CVE-2023-4511 CVE-2023-4512 CVE-2023-4513 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ffmpeg (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ffmpeg fixes the following issues: - CVE-2021-28429: Fixed Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c (bsc#1214246). Moderate SUSE bug 1214246 CVE-2021-28429 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for exempi (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for exempi fixes the following issues: - CVE-2020-18651: Fixed a buffer overflow in ID3 support (bsc#1214486). Moderate SUSE bug 1214486 CVE-2020-18651 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Securitys update for open-vm-tools (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for open-vm-tools fixes the following issues: Update to 12.3.0 (build 22234872) (bsc#1214850) - There are no new features in the open-vm-tools 12.3.0 release. This is primarily a maintenance release that addresses a few critical problems, including: - This release integrates CVE-2023-20900 without the need for a patch. For more information on this vulnerability and its impact on VMware products, see https://www.vmware.com/security/advisories/VMSA-2023-0019.html. - A tools.conf configuration setting is available to temporaily direct Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior of ignoring file systems already frozen. - Building of the VMware Guest Authentication Service (VGAuth) using 'xml-security-c' and 'xerces-c' is being deprecated. - A number of Coverity reported issues have been addressed. - A number of GitHub issues and pull requests have been handled. Please see the Resolves Issues section of the Release Notes. - For issues resolved in this release, see the Resolved Issues section of the Release Notes. - For complete details, see: https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0 - Release Notes are available at https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md - The granular changes that have gone into the 12.3.0 release are in the ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog - Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests - jsc#PED-1344 - reinable building containerinfo plugin for SLES 15 SP4. Important SUSE bug 1205927 SUSE bug 1214850 CVE-2023-20900 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gsl (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gsl fixes the following issues: - CVE-2020-35357: Fixed a stack out of bounds read in gsl_stats_quantile_from_sorted_data(). (bsc#1214681) Moderate SUSE bug 1214681 CVE-2020-35357 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaFirefox (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 115.3.0 ESR (MFSA 2023-42, bsc#1215575): Security fixes: - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1 (bmo#1846683). - CVE-2023-5169: Out-of-bounds write in PathOps (bmo#1846685). - CVE-2023-5171: Use-after-free in Ion Compiler (bmo#1851599). - CVE-2023-5174: Double-free in process spawning on Windows (bmo#1848454). - CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195). Other fixes: - Fix broken build with newer binutils (bsc#1215309) Important SUSE bug 1215309 SUSE bug 1215575 CVE-2023-5168 CVE-2023-5169 CVE-2023-5171 CVE-2023-5174 CVE-2023-5176 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libvpx (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778). Important SUSE bug 1215778 CVE-2023-5217 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaFirefox (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 115.3.1 ESR, fixing a security issue: MFSA 2023-44 (bsc#1215814) * CVE-2023-5217: Fixed a heap buffer overflow in libvpx Important SUSE bug 1215814 CVE-2023-5217 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libraw (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. (bsc#1215308) Moderate SUSE bug 1215308 CVE-2020-22628 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ImageMagick (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ImageMagick fixes the following issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939) Moderate SUSE bug 1215939 CVE-2023-5341 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for wireshark (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for wireshark fixes the following issues: Updated to version 3.6.17: - CVE-2023-5371: Fixed a memory leak issue in the RTPS dissector (bsc#1215959). Low SUSE bug 1215959 CVE-2023-5371 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libcue (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Desktop Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libcue fixes the following issues: - CVE-2023-43641: Fixed a buffer overflow while parsing a malicious file (bsc#1215728). Important SUSE bug 1215728 CVE-2023-43641 cpe:/o:suse:sle-module-desktop-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for netty, netty-tcnative (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for netty, netty-tcnative fixes the following issues: netty: - Security fixes included in this version update from 4.1.75 to 4.1.90: * CVE-2022-24823: Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files for Java 6 and lower in io.netty:netty-codec-http (bsc#1199338) * CVE-2022-41881: HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360) * CVE-2022-41915: HTTP Response splitting from assigning header value iterator (bsc#1206379) - Other non-security bug fixes included in this version update from 4.1.75 to 4.1.90: * Build with Java 11 on ix86 architecture in order to avoid build failures * Fix `HttpHeaders.names` for non-String headers * Fix `FlowControlHandler` behaviour to pass read events when auto-reading is turned off * Fix brotli compression * Fix a bug in FlowControlHandler that broke auto-read * Fix a potential memory leak bug has been in the pooled allocator * Fix a scalability issue caused by instanceof and check-cast checks that lead to false-sharing on the `Klass::secondary_super_cache` field in the JVM * Fix a bug in our `PEMParser` when PEM files have multiple objects, and `BouncyCastle` is on the classpath * Fix several `NullPointerException` bugs * Fix a regression `SslContext` private key loading * Fix a bug in `SslContext` private key reading fall-back path * Fix a buffer leak regression in `HttpClientCodec` * Fix a bug where some `HttpMessage` implementations, that also implement `HttpContent`, were not handled correctly * Fix epoll bug when receiving zero-sized datagrams * Fix a bug in `SslHandler` so `handlerRemoved` works properly even if `handlerAdded` throws an exception * Fix an issue that allowed the multicast methods on `EpollDatagramChannel` to be called outside of an event-loop thread * Fix a bug where an OPT record was added to DNS queries that already had such a record * Fix a bug that caused an error when files uploaded with HTTP POST contained a backslash in their name * Fix an issue in the `BlockHound` integration that could occasionally cause NetUtil to be reported as performing blocking operation. A similar `BlockHound` issue was fixed for the `JdkSslContext` * Fix a bug that prevented preface or settings frames from being flushed, when an HTTP2 connection was established with prior-knowledge * Fix a bug where Netty fails to load a shaded native library * Fix and relax overly strict HTTP/2 header validation check that was rejecting requests from Chrome and Firefox * Fix OpenSSL and BoringSSL implementations to respect the `jdk.tls.client.protocols` and `jdk.tls.server.protocols` system properties, making them react to these in the same way the JDK SSL provider does * Fix inconsitencies in how `epoll`, `kqueue`, and `NIO` handle RDHUP * For a more detailed list of changes please consult the official release notes: + Changes from 4.1.90: https://netty.io/news/2023/03/14/4-1-90-Final.html + Changes from 4.1.89: https://netty.io/news/2023/02/13/4-1-89-Final.html + Changes from 4.1.88: https://netty.io/news/2023/02/12/4-1-88-Final.html + Changes from 4.1.87: https://netty.io/news/2023/01/12/4-1-87-Final.html + Changes from 4.1.86: https://netty.io/news/2022/12/12/4-1-86-Final.html + Changes from 4.1.85: https://netty.io/news/2022/11/09/4-1-85-Final.html + Changes from 4.1.84: https://netty.io/news/2022/10/11/4-1-84-Final.html + Changes from 4.1.82: https://netty.io/news/2022/09/13/4-1-82-Final.html + Changes from 4.1.81: https://netty.io/news/2022/09/08/4-1-81-Final.html + Changes from 4.1.80: https://netty.io/news/2022/08/26/4-1-80-Final.html + Changes from 4.1.79: https://netty.io/news/2022/07/11/4-1-79-Final.html + Changes from 4.1.78: https://netty.io/news/2022/06/14/4-1-78-Final.html + Changes from 4.1.77: https://netty.io/news/2022/05/06/2-1-77-Final.html + Changes from 4.1.76: https://netty.io/news/2022/04/12/4-1-76-Final.html netty-tcnative: - New artifact named `netty-tcnative-classes`, provided by this update is required by netty 4.1.90 which contains important security updates - No formal changelog present. This artifact is closely bound to the netty releases Important SUSE bug 1199338 SUSE bug 1206360 SUSE bug 1206379 CVE-2022-24823 CVE-2022-41881 CVE-2022-41915 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ImageMagick (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ImageMagick fixes the following issues: - CVE-2023-34151: Fixed an undefined behavior issue due to floating point truncation (bsc#1211791). - CVE-2023-34153: Fixed a command injection issue when encoding or decoding VIDEO files (bsc#1211792). Important SUSE bug 1211791 SUSE bug 1211792 CVE-2023-34151 CVE-2023-34153 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups fixes the following issues: - CVE-2023-32324: Fixed a buffer overflow in format_log_line() which could cause a denial-of-service (bsc#1211643). Important SUSE bug 1211643 CVE-2023-32324 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openldap2 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openldap2 fixes the following issues: - CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795). Moderate SUSE bug 1211795 CVE-2023-2953 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python3 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python3 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). - Fixed unittest.mock.patch.dict returns function when applied to coroutines (bsc#1211158). Moderate SUSE bug 1203750 SUSE bug 1211158 CVE-2007-4559 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.19 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.19 fixes the following issues: Update to go1.19.10 (bsc#1200441): - CVE-2023-29402: cmd/go: Fixed cgo code injection (bsc#1212073). - CVE-2023-29403: runtime: Fixed unexpected behavior of setuid/setgid binaries (bsc#1212074). - CVE-2023-29404: cmd/go: Fixed improper sanitization of LDFLAGS (bsc#1212075). - CVE-2023-29405: cmd/go: Fixed improper sanitization of LDFLAGS (bsc#1212076). Moderate SUSE bug 1200441 SUSE bug 1212073 SUSE bug 1212074 SUSE bug 1212075 SUSE bug 1212076 CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.20 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.20 fixes the following issues: Update to go1.20.5 (bsc#1206346): - CVE-2023-29402: cmd/go: Fixed cgo code injection (bsc#1212073). - CVE-2023-29403: runtime: Fixed unexpected behavior of setuid/setgid binaries (bsc#1212074). - CVE-2023-29404: cmd/go: Fixed improper sanitization of LDFLAGS (bsc#1212075). - CVE-2023-29405: cmd/go: Fixed improper sanitization of LDFLAGS (bsc#1212076). Moderate SUSE bug 1206346 SUSE bug 1212073 SUSE bug 1212074 SUSE bug 1212075 SUSE bug 1212076 CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for jetty-minimal (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for jetty-minimal fixes the following issues: Updated to version 9.4.51.v20230217: - CVE-2023-26048: Fixed an excessive memory consumption when processing a large multipart request (bsc#1210620) - CVE-2023-26049: Fixed a cookie exfiltration issue due to improper parsing (bsc#1210621). Moderate SUSE bug 1210620 SUSE bug 1210621 CVE-2023-26048 CVE-2023-26049 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rustup (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rustup fixes the following issues: - CVE-2022-31394: Fixed possible HTTP2 attacks by specifying the HTTP/2 SETTINGS_MAX_HEADER_LIST_SIZE (bsc#1208552). - CVE-2023-26964: Fixed high memory and CPU usage when stream stacking occurs when H2 processes HTTP2 RST_STREAM frames (bsc#1210345). Moderate SUSE bug 1208552 SUSE bug 1210345 CVE-2022-31394 CVE-2023-26964 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups fixes the following issues: - CVE-2023-34241: Fixed a use-after-free problem in cupsdAcceptClient() (bsc#1212230). Important SUSE bug 1212230 CVE-2023-34241 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for sccache (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for sccache fixes the following issues: - CVE-2023-1521: Fixed possible code injection via LD_PRELOAD to sccache server (bsc#1212407). - CVE-2022-31394: Fixed a denial-of-service vulnerability via header list size (bsc#1208553). Important SUSE bug 1208553 SUSE bug 1212407 CVE-2022-31394 CVE-2023-1521 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: Add security patches (bsc#1211846): - CVE-2023-28204: Fixed processing of web content that may disclose sensitive information (bsc#1211659). - CVE-2023-32373: Fixed processing of maliciously crafted web content that may lead to arbitrary code execution (bsc#1211658). Important SUSE bug 1211658 SUSE bug 1211659 SUSE bug 1211846 CVE-2023-28204 CVE-2023-32373 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for bouncycastle (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bouncycastle fixes the following issues: - CVE-2023-33201: Fixed an issue with the X509LDAPCertStoreSpi where a specially crafted certificate subject could be used to try and extract extra information out of an LDAP server (bsc#1212508). Important SUSE bug 1212508 CVE-2023-33201 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.19 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.19 fixes the following issues: go was updated to version 1.19.11 (bsc#1200441): - CVE-2023-29406: Fixed insufficient sanitization of Host header in net/http (bsc#1213229). Moderate SUSE bug 1200441 SUSE bug 1213229 CVE-2023-29406 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.20 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.20 fixes the following issues: go was updated to version 1.20.6 (bsc#1206346): - CVE-2023-29406: Fixed insufficient sanitization of Host header in net/http (bsc#1213229). Moderate SUSE bug 1206346 SUSE bug 1213229 CVE-2023-29406 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bsc#1207050). - CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034). - CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-0469: Fixed a use-after-free flaw in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent (bsc#1207521). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-1583: Fixed a NULL pointer dereference in io_file_bitmap_get in io_uring/filetable.c (bsc#1209637). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155). - CVE-2023-21106: Fixed possible memory corruption due to double free in adreno_set_param of adreno_gpu.c (bsc#1211654). - CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). - CVE-2023-2235: Fixed a use-after-free vulnerability in the Performance Events system that could have been exploited to achieve local privilege escalation (bsc#1210986). - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-23006: Fixed NULL vs IS_ERR checking in dr_domain_init_resources (bsc#1208845). - CVE-2023-2430: Fixed a missing lock on overflow for IOPOLL (bsc#1211014). - CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1209052). - CVE-2023-28866: Fixed an out-of-bounds access in net/bluetooth/hci_sync.c because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but did not (bsc#1209780). - CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855). - CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294). - CVE-2023-30772: Fixed race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265). - CVE-2023-3220: Fixed a NULL pointer dereference flaw in dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() (bsc#1212556). - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043). - CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590). - CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838). - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593). - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504). - CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494). - CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). - CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495). The following non-security bugs were fixed: - 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes). - Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes). - Avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529). - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Fix page corruption caused by racy check in __free_pages (bsc#1208149). - Get module prefix from kmod (bsc#1212835). - Move upstreamed x86, scsi and arm patches into sorted section - Fixed typo that might caused (bsc#1209457). - Fix bug introduced by broken backport (bsc#1208628). - Update patch for launch issue (bsc#1210853). - [infiniband] READ is 'data destination', not source... (git-fixes) - [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes). - acpi / x86: Add support for LPS0 callback handler (git-fixes). - acpi: Do not build ACPICA with '-Os' (git-fixes). - acpi: EC: Fix EC address space handler unregistration (bsc#1207149). - acpi: EC: Fix ECDT probe ordering issues (bsc#1207149). - acpi: EC: Fix oops when removing custom query handlers (git-fixes). - acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes). - acpi: PM: Do not turn of unused power resources on the Toshiba Click Mini (git-fixes). - acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - acpi: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (git-fixes). - acpi: VIOT: Initialize the correct IOMMU fwspec (git-fixes). - acpi: battery: Fix missing NUL-termination with large strings (git-fixes). - acpi: bus: Ensure that notify handlers are not running after removal (git-fixes). - acpi: cppc: Add AMD pstate energy performance preference cppc control (bsc#1212445). - acpi: cppc: Add auto select register read/write support (bsc#1212445). - acpi: cppc: Disable FIE if registers in PCC regions (bsc#1210953). - acpi: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - acpi: resource: Add IRQ override quirk for LG UltraPC 17U70P (git-fixes). - acpi: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models (git-fixes). - acpi: resource: Add Medion S17413 to IRQ override quirk (git-fixes). - acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - acpi: resource: Do IRQ override on all TongFang GMxRGxx (git-fixes). - acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes). - acpi: tables: Add support for NBFT (bsc#1195921). - acpi: tables: Add support for NBFT (bsc#1206340). - acpi: video: Add acpi_video_backlight_use_native() helper (bsc#1206843). - acpi: video: Allow GPU drivers to report no panels (bsc#1206843). - acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - acpi: video: Fix missing native backlight on Chromebooks (bsc#1206843). - acpi: video: Refactor acpi_video_get_backlight_type() a bit (bsc#1203693). - acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - acpi: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes). - acpica: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes). - acpica: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149). - acpica: Avoid undefined behavior: applying zero offset to null pointer (git-fixes). - acpica: Drop port I/O validation for some regions (git-fixes). - acpica: include/acpi/acpixf.h: Fix indentation (bsc#1207149). - acpica: nsrepair: handle cases without a return value correctly (git-fixes). - add mainline tags to five pci_hyperv patches - affs: initialize fsdata in affs_truncate() (git-fixes). - alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes) - alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes). - alsa: asihpi: check pao in control_message() (git-fixes). - alsa: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes). - alsa: cs46xx: mark snd_cs46xx_download_image as static (git-fixes). - alsa: emu10k1: do not create old pass-through playback device on Audigy (git-fixes). - alsa: emu10k1: fix capture interrupt handler unlinking (git-fixes). - alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - alsa: fireface: make read-only const array for model names static (git-fixes). - alsa: firewire-digi00x: prevent potential use after free (git-fixes). - alsa: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes). - alsa: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes). - alsa: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes). - alsa: hda/ca0132: minor fix for allocation size (git-fixes). - alsa: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes). - alsa: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes). - alsa: hda/conexant: add a new hda codec SN6180 (git-fixes). - alsa: hda/hdmi: Preserve the previous PCM device upon re-enablement (git-fixes). - alsa: hda/hdmi: disable KAE for Intel DG2 (git-fixes). - alsa: hda/realtek - fixed wrong gpio assigned (git-fixes). - alsa: hda/realtek: Add 'Intel Reference board' and 'NUC 13' SSID in the ALC256 (git-fixes). - alsa: hda/realtek: Add Acer Predator PH315-54 (git-fixes). - alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes). - alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes). - alsa: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes). - alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes). - alsa: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for Clevo L140AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo X370SNW (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - alsa: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes). - alsa: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes). - alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes). - alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes). - alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes). - alsa: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (git-fixes). - alsa: hda/realtek: Add quirks for some Clevo laptops (git-fixes). - alsa: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes). - alsa: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (git-fixes). - alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes). - alsa: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes). - alsa: hda/realtek: Fix support for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - alsa: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Whitespace fix (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes). - alsa: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes). - alsa: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes). - alsa: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes). - alsa: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes). - alsa: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes). - alsa: hda: Do not unset preset when cleaning up codec (git-fixes). - alsa: hda: Fix Oops by 9.1 surround channel names (git-fixes). - alsa: hda: Fix unhandled register update during auto-suspend period (git-fixes). - alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes). - alsa: hda: LNL: add HD Audio PCI ID (git-fixes). - alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - alsa: hda: cs35l41: Enable Amp High Pass Filter (git-fixes). - alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes). - alsa: hda: intel-dsp-config: add MTL PCI id (git-fixes). - alsa: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes). - alsa: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes). - alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - alsa: jack: Fix mutex call in snd_jack_report() (git-fixes). - alsa: memalloc: Workaround for Xen PV (git-fixes). - alsa: oss: avoid missing-prototype warnings (git-fixes). - alsa: oxfw: make read-only const array models static (git-fixes). - alsa: pci: lx6464es: fix a debug loop (git-fixes). - alsa: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes). - alsa: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes). - alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes). - alsa: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes). - alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes). - alsa: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes). - alsa: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes). - alsa: ymfpci: Fix BUG_ON in probe function (git-fixes). - amdgpu/nv.c: Corrected typo in the video capabilities resolution (git-fixes). - amdgpu: disable powerpc support for the newer display engine (bsc#1194869). - amdgpu: fix build on non-DCN platforms (git-fixes). - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes). - apparmor: add a kernel label to use on kernel objects (bsc#1211113). - apparmor: fix missing error check for rhashtable_insert_fast (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arch: fix broken BuildID for arm64 and riscv (bsc#1209798). - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64: Add missing Set/Way CMO encodings (git-fixes). - arm64: Always load shadow stack pointer directly from the task struct (git-fixes) - arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes) - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes). - arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes). - arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes) - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes). - arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes) - arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes) - arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes) - arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes). - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes). - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes). - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes). - arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes). - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes) - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes) - arm64: dts: imx8mp: correct usb clocks (git-fixes) - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes). - arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes) - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes) - arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: specify full DMC range (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes). - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes). - arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes). - arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes). - arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes). - arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes). - arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes). - arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes). - arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes). - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes). - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes). - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes). - arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes). - arm64: efi: Execute runtime services from a dedicated stack (git-fixes). - arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes). - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage. - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes). - arm64: make is_ttbrX_addr() noinstr-safe (git-fixes) - arm64: mm: kfence: only handle translation faults (git-fixes) - arm: 9290/1: uaccess: Fix KASAN false-positives (git-fixes). - arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes) - arm: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes). - arm: bcm2835_defconfig: Enable the framebuffer (git-fixes). - arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - arm: defconfig: drop CONFIG_DRM_RCAR_LVDS (git-fixes). - arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes). - arm: dts: am5748: keep usb4_tm disabled (git-fixes) - arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes). - arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes). - arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes). - arm: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes). - arm: dts: gta04: fix excess dma channel usage (git-fixes). - arm: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes) - arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes). - arm: dts: imx: Fix pca9547 i2c-mux node name (git-fixes). - arm: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes). - arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes) - arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes). - arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes). - arm: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes). - arm: dts: s5pv210: correct MIPI CSIS clock name (git-fixes). - arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes). - arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes) - arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes) - arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes). - arm: dts: vexpress: add missing cache properties (git-fixes). - arm: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes). - arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes). - arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes) - arm: oMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes). - arm: oMAP2+: Fix memory leak in realtime_counter_init() (git-fixes). - arm: omap: remove debug-leds driver (git-fixes) - arm: remove some dead code (git-fixes) - arm: renumber bits related to _TIF_WORK_MASK (git-fixes) - arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes). - arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes) - arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes). - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes). - asn.1: Fix check for strdup() success (git-fixes). - asoc: adau7118: do not disable regulators on device unbind (git-fixes). - asoc: amd: acp-es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes). - asoc: codecs: lpass: fix incorrect mclk rate (git-fixes). - asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes). - asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes). - asoc: cs35l41: Only disable internal boost (git-fixes). - asoc: cs42l56: fix DT probe (git-fixes). - asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes). - asoc: dwc: limit the number of overrun messages (git-fixes). - asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes). - asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes). - asoc: es8316: Handle optional IRQ assignment (git-fixes). - asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes). - asoc: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes). - asoc: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes). - asoc: fsl_micfil: Correct the number of steps on SX controls (git-fixes). - asoc: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes). - asoc: fsl_mqs: move of_node_put() to the correct location (git-fixes). - asoc: fsl_sai: Update to modern clocking terminology (git-fixes). - asoc: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes). - asoc: hdac_hdmi: use set_stream() instead of set_tdm_slots() (git-fixes). - asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes). - asoc: intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes). - asoc: intel: Skylake: Fix driver hang during shutdown (git-fixes). - asoc: intel: avs: Access path components under lock (git-fixes). - asoc: intel: avs: Fix declaration of enum avs_channel_config (git-fixes). - asoc: intel: avs: Implement PCI shutdown (git-fixes). - asoc: intel: avs: Use min_t instead of min with cast (git-fixes). - asoc: intel: boards: fix spelling in comments (git-fixes). - asoc: intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcht_es8316: move comment to the right place (git-fixes). - asoc: intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes). - asoc: intel: bytcr_rt5640: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: soc-acpi-byt: Fix 'WM510205' match no longer working (git-fixes). - asoc: intel: soc-acpi: fix copy-paste issue in topology names (git-fixes). - asoc: intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes). - asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes). - asoc: lpass: Fix for KASAN use_after_free out of bounds (git-fixes). - asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes). - asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes). - asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes). - asoc: mediatek: mt8173: Fix irq error path (git-fixes). - asoc: nau8824: Add quirk to active-high jack-detect (git-fixes). - asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes). - asoc: rsnd: fixup #endif position (git-fixes). - asoc: rt1308-sdw: add the default value of some registers (git-fixes). - asoc: rt5682: Disable jack detection interrupt during suspend (git-fixes). - asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes). - asoc: simple-card: Add missing of_node_put() in case of error (git-fixes). - asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes). - asoc: soc-compress: Inherit atomicity from DAI link for Compress FE (git-fixes). - asoc: soc-compress: Reposition and add pcm_mutex (git-fixes). - asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes). - asoc: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (git-fixes). - asoc: soc-pcm: test if a BE can be prepared (git-fixes). - asoc: sof: Intel: MTL: Fix the device description (git-fixes). - asoc: sof: ipc4-topology: set dmic dai index from copier (git-fixes). - asoc: sof: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data() (git-fixes). - asoc: ssm2602: Add workaround for playback distortions (git-fixes). - asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes). - asoc: topology: Properly access value coming from topology file (git-fixes). - asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes). - asoc: zl38060 add gpiolib dependency (git-fixes). - asoc: zl38060: Remove spurious gpiolib select (git-fixes). - ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes). - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes). - ata: libata: Set __ATA_BASE_SHT max_sectors (git-fixes). - ata: libata: fix NCQ autosense logic (git-fixes). - ata: pata_macio: Fix compilation warning (git-fixes). - ata: pata_octeon_cf: drop kernel-doc notation (git-fixes). - ata: pata_octeon_cf: fix call to trace_ata_bmdma_stop() (git-fixes). - ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes). - ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes). - ath9k: hif_usb: simplify if-if to if-else (git-fixes). - ath9k: htc: clean up statistics macros (git-fixes). - atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes). - audit: update the mailing list in MAINTAINERS (git-fixes). - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes). - backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes). - batman-adv: Broken sync while rescheduling delayed work (git-fixes). - bcache: Revert 'bcache: use bvec_virt' (git-fixes). - bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes). - bcache: fix wrong bdev parameter when calling bio_alloc_clone() in do_bio_hook() (git-fixes). - bcache: put bch_bio_map() back to correct location in journal_write_unlocked() (git-fixes). - bfq: fix use-after-free in bfq_dispatch_request (git-fixes). - bfq: fix waker_bfqq inconsistency crash (git-fixes). - Blacklist commit that might cause regression (bsc#1210947) - blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes). - blk-cgroup: properly pin the parent in blkcg_css_online (bsc#1208105). - blk-lib: fix blkdev_issue_secure_erase (git-fixes). - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (git-fixes). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: run queue no matter whether the request is the last request (git-fixes). - blk-throttle: fix that io throttle can only work for single bio (git-fixes). - blk-throttle: prevent overflow while calculating wait time (git-fixes). - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - block, bfq: do not move oom_bfqq (git-fixes). - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes). - block, bfq: fix possible uaf for 'bfqq->bic' (git-fixes). - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes). - block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bfq-iosched.c: use 'false' rather than 'BLK_RW_ASYNC' (git-fixes). - block/bfq_wf2q: correct weight to ioprio (git-fixes). - block/bio: remove duplicate append pages code (git-fixes). - block: Fix possible memory leak for rq_wb on add_disk failure (git-fixes). - block: add a bdev_max_zone_append_sectors helper (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: check minor range in device_add_disk() (git-fixes). - block: clear ->slave_dir when dropping the main slave_dir reference (git-fixes). - block: do not allow splitting of a REQ_NOWAIT bio (git-fixes). - block: do not allow the same type rq_qos add more than once (git-fixes). - block: do not reverse request order when flushing plug list (bsc#1208588 bsc#1208128). - block: ensure iov_iter advances for added pages (git-fixes). - block: fix and cleanup bio_check_ro (git-fixes). - block: fix default IO priority handling again (git-fixes). - block: fix infinite loop for invalid zone append (git-fixes). - block: fix leaking minors of hidden disks (git-fixes). - block: fix memory leak for elevator on add_disk failure (git-fixes). - block: fix missing blkcg_bio_issue_init (bsc#1208107). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (git-fixes). - block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes). - block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes). - block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes). - block: null_blk: Fix null_zone_write() (git-fixes). - block: pop cached rq before potentially blocking rq_qos_throttle() (git-fixes). - block: use bdev_get_queue() in bio.c (git-fixes). - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes). - bluetooth: Fix crash when replugging CSR fake controllers (git-fixes). - bluetooth: Fix double free in hci_conn_cleanup (bsc#1209052 CVE-2023-28464). - bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes). - bluetooth: Fix race condition in hci_cmd_sync_clear (git-fixes). - bluetooth: Fix race condition in hidp_session_thread (git-fixes). - bluetooth: Fix support for Read Local Supported Codecs V2 (git-fixes). - bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes). - bluetooth: HCI: Fix global-out-of-bounds (git-fixes). - bluetooth: ISO: Avoid circular locking dependency (git-fixes). - bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - bluetooth: ISO: do not try to remove CIG if there are bound CIS left (git-fixes). - bluetooth: ISO: fix timestamped HCI ISO data packet parsing (git-fixes). - bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes). - bluetooth: L2CAP: Fix potential user-after-free (git-fixes). - bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes). - bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes). - bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (git-fixes). - bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes). - bluetooth: Remove codec id field in vendor codec definition (git-fixes). - bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (git-fixes). - bluetooth: Set ISO Data Path on broadcast sink (git-fixes). - bluetooth: btintel: Add LE States quirk support (git-fixes). - bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes). - bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes). - bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - bluetooth: btusb: Remove detection of ISO packets over bulk (git-fixes). - bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes). - bluetooth: hci_conn: Fix memory leaks (git-fixes). - bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (git-fixes). - bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (git-fixes). - bluetooth: hci_conn: use HCI dst_type values also for BIS (git-fixes). - bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (git-fixes). - bluetooth: hci_core: fix error handling in hci_register_dev() (git-fixes). - bluetooth: hci_event: Fix Invalid wait context (git-fixes). - bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - bluetooth: hci_qca: fix debugfs registration (git-fixes). - bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes). - bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes). - bluetooth: hci_sync: Fix not indicating power state (git-fixes). - bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (git-fixes). - bluetooth: hci_sync: cancel cmd_timer if hci_open failed (git-fixes). - bnxt: Do not read past the end of test names (jsc#SLE-18978). - bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978). - bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978). - bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978). - bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978). - bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes). - bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978). - bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978). - bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978). - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes). - bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978). - bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978). - bonding: Fix negative jump label count on nested bonding (bsc#1212685). - bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes) - bpf, arm64: Clear prog->jited_len along prog->jited (git-fixes) - bpf, arm64: Feed byte-offset into bpf line info (git-fixes) - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes) - bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes). - bpf, x64: Factor out emission of REX byte in more cases (git-fixes). - bpf: Add extra path pointer check to d_path helper (git-fixes). - bpf: Fix UAF in task local storage (bsc#1212564). - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes). - bpf: Fix extable address check (git-fixes). - bpf: Fix extable fixup offset (git-fixes). - bpf: Skip task with pid=1 in send_signal_common() (git-fixes). - btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158). - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158). - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes). - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158). - btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158). - btrfs: qgroup: remove outdated TODO comments (bsc#1207158). - bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes). - bus: mhi: host: Fix race between channel preparation and M0 event (git-fixes). - bus: mhi: host: Range check CHDBOFF and ERDBOFF (git-fixes). - bus: mhi: host: Remove duplicate ee check for syserr (git-fixes). - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (git-fixes). - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes). - bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes). - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes). - ca8210: fix mac_len negative array access (git-fixes). - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes). - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes). - can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes). - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes). - can: j1939: change j1939_netdev_lock type to mutex (git-fixes). - can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes). - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes). - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes). - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes). - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes). - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes). - can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes). - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes). - can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes). - can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes). - can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes). - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes). - can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes). - can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes). - can: length: fix bitstuffing count (git-fixes). - can: length: fix description of the RRS field (git-fixes). - can: length: make header self contained (git-fixes). - cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes). - ceph: avoid use-after-free in ceph_fl_release_lock() (jsc#SES-1880). - ceph: blocklist the kclient when receiving corrupted snap trace (jsc#SES-1880). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540). - ceph: flush cap releases when the session is flushed (bsc#1208428). - ceph: flush cap releases when the session is flushed (jsc#SES-1880). - ceph: force updating the msg pointer in non-split case (bsc#1211804). - ceph: move mount state enum to super.h (jsc#SES-1880). - ceph: remove useless session parameter for check_caps() (jsc#SES-1880). - ceph: switch to vfs_inode_has_locks() to fix file lock bug (jsc#SES-1880). - ceph: try to check caps immediately after async creating finishes (jsc#SES-1880). - ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504). - ceph: use locks_inode_context helper (jsc#SES-1880). - cfg80211: allow continuous radar monitoring on offchannel chain (bsc#1209980). - cfg80211: fix possible NULL pointer dereference in cfg80211_stop_offchan_radar_detection (bsc#1209980). - cfg80211: implement APIs for dedicated radar detection HW (bsc#1209980). - cfg80211: move offchan_cac_event to a dedicated work (bsc#1209980). - cfg80211: rename offchannel_chain structs to background_chain to avoid confusion with ETSI standard (bsc#1209980). - cfg80211: schedule offchan_cac_abort_wk in cfg80211_radar_event (bsc#1209980). - cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906). - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827). - cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650). - cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650). - cgroup: Make cgroup_get_from_id() prettier (bsc#1205650). - cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650). - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563). - cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561). - cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (bsc#1205650). - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563). - cgroup: reduce dependency on cgroup_mutex (bsc#1205650). - cifs: Avoid a cast in add_lease_context() (bsc#1193629). - cifs: Check the lease context if we actually got a lease (bsc#1193629). - cifs: Convert struct fealist away from 1-element array (bsc#1193629). - cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (git-fixes). - cifs: Fix smb2_set_path_size() (git-fixes). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629). - cifs: Fix use-after-free in rdata->read_into_pages() (git-fixes). - cifs: Fix warning and UAF when destroy the MR list (git-fixes). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629). - cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes). - cifs: Replace remaining 1-element arrays (bsc#1193629). - cifs: Replace zero-length arrays with flexible-array members (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Use kstrtobool() instead of strtobool() (bsc#1193629). - cifs: append path to open_enter trace event (bsc#1193629). - cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758). - cifs: avoid race conditions with parallel reconnects (bsc#1193629). - cifs: avoid races in parallel reconnects in smb1 (bsc#1193629). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629). - cifs: check only tcon status on tcon related functions (bsc#1193629). - cifs: do not include page data when checking signature (git-fixes). - cifs: do not poll server interfaces too regularly (bsc#1193629). - cifs: do not take exclusive lock for updating target hints (bsc#1193629). - cifs: do not try to use rdma offload on encrypted connections (bsc#1193629). - cifs: double lock in cifs_reconnect_tcon() (git-fixes). - cifs: dump pending mids for all channels in DebugData (bsc#1193629). - cifs: empty interface list when server does not support query interfaces (bsc#1193629). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629). - cifs: fix dentry lookups in directory handle cache (bsc#1193629). - cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629). - cifs: fix mount on old smb servers (boo#1206935). - cifs: fix negotiate context parsing (bsc#1210301). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629). - cifs: fix potential deadlock in cache_refresh_path() (git-fixes). - cifs: fix potential race when tree connecting ipc (bsc#1208758). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629). - cifs: fix sharing of DFS connections (bsc#1208758). - cifs: fix smb1 mount regression (bsc#1193629). - cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629). - cifs: generate signkey for the channel that's reconnecting (bsc#1193629). - cifs: get rid of dead check in smb2_reconnect() (bsc#1193629). - cifs: get rid of dns resolve worker (bsc#1193629). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629). - cifs: handle cache lookup errors different than -ENOENT (bsc#1193629). - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629). - cifs: lock chan_lock outside match_session (bsc#1193629). - cifs: mapchars mount option ignored (bsc#1193629). - cifs: match even the scope id for ipv6 addresses (bsc#1193629). - cifs: missing lock when updating session status (bsc#1193629). - cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629). - cifs: prevent data race in smb2_reconnect() (bsc#1193629). - cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629). - cifs: print last update time for interface list (bsc#1193629). - cifs: print session id while listing open files (bsc#1193629). - cifs: print smb3_fs_context::source when mounting (bsc#1193629). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758). - cifs: protect session status check in smb2_reconnect() (bsc#1208758). - cifs: release leases for deferred close handles when freezing (bsc#1193629). - cifs: remove duplicate code in __refresh_tcon() (bsc#1193629). - cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629). - cifs: remove unused function (bsc#1193629). - cifs: return DFS root session id in DebugData (bsc#1193629). - cifs: return a single-use cfid if we did not get a lease (bsc#1193629). - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629). - cifs: sanitize paths in cifs_update_super_prepath (git-fixes). - cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629). - cifs: split out smb3_use_rdma_offload() helper (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - cifs: update ip_addr for ses only for primary chan setup (bsc#1193629). - cifs: use DFS root session instead of tcon ses (bsc#1193629). - cifs: use tcon allocation functions even for dummy tcon (git-fixes). - cifs: use the least loaded channel for sending requests (bsc#1193629). - clk: Fix memory leak in devm_clk_notifier_register() (git-fixes). - clk: HI655X: select REGMAP instead of depending on it (git-fixes). - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes). - clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes). - clk: at91: clk-sam9x60-pll: fix return value check (git-fixes). - clk: cdce925: check return value of kasprintf() (git-fixes). - clk: imx: avoid memory leak (git-fixes). - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes). - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes). - clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (git-fixes). - clk: keystone: sci-clk: check return value of kasprintf() (git-fixes). - clk: mxl: Add option to override gate clks (git-fixes). - clk: mxl: Fix a clk entry by adding relevant flags (git-fixes). - clk: mxl: Remove redundant spinlocks (git-fixes). - clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes). - clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes). - clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes). - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes). - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes). - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes). - clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes). - clk: qcom: regmap: add PHY clock source implementation (git-fixes). - clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes). - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes). - clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes). - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes). - clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes). - clk: si5341: check return value of {devm_}kasprintf() (git-fixes). - clk: si5341: free unused memory on probe failure (git-fixes). - clk: si5341: return error if one synth clock registration fails (git-fixes). - clk: sprd: set max_register according to mapping range (git-fixes). - clk: tegra20: fix gcc-7 constant overflow warning (git-fixes). - clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes). - clk: ti: clkctrl: check return value of kasprintf() (git-fixes). - clk: vc5: check memory returned by kasprintf() (git-fixes). - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes). - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes). - clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes). - clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes). - comedi: use menuconfig for main Comedi menu (git-fixes). - configfs: fix possible memory leak in configfs_create_dir() (git-fixes). - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes). - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953). - cpufreq: CPPC: Fix performance/frequency conversion (git-fixes). - cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - crypto: acomp - define max size for destination (jsc#PED-3692) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - crypto: caam - Clear some memory in instantiate_rng (git-fixes). - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes). - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes). - crypto: crypto4xx - Call dma_unmap_page when done (git-fixes). - crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes). - crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692) - crypto: essiv - Handle EBUSY correctly (git-fixes). - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (git-fixes). - crypto: marvell/cesa - Fix type mismatch warning (git-fixes). - crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes). - crypto: qat - Fix unsigned function returning negative (jsc#PED-3692) - crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692) - crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692) - crypto: qat - abstract PFVF receive logic (jsc#PED-3692) - crypto: qat - abstract PFVF send function (jsc#PED-3692) - crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692) - crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692) - crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692) - crypto: qat - add backlog mechanism (jsc#PED-3692) - crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692) - crypto: qat - add check to validate firmware images (jsc#PED-3692) - crypto: qat - add limit to linked list parsing (jsc#PED-3692) - crypto: qat - add misc workqueue (jsc#PED-3692) - crypto: qat - add missing restarting event notification in (jsc#PED-3692) - crypto: qat - add param check for DH (jsc#PED-3692) - crypto: qat - add param check for RSA (jsc#PED-3692) - crypto: qat - add pfvf_ops (jsc#PED-3692) - crypto: qat - add resubmit logic for decompression (jsc#PED-3692) - crypto: qat - add support for 401xx devices (jsc#PED-3692) - crypto: qat - add support for compression for 4xxx (jsc#PED-3692) - crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692) - crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692) - crypto: qat - change PFVF ACK behaviour (jsc#PED-3692) - crypto: qat - change behaviour of (jsc#PED-3692) - crypto: qat - change bufferlist logic interface (jsc#PED-3692) - crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692) - crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692) - crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692) - crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692) - crypto: qat - do not rely on min version (jsc#PED-3692) - crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692) - crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692) - crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692) - crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692) - crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692) - crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - extend buffer list interface (jsc#PED-3692) - crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692) - crypto: qat - extract send and wait from (jsc#PED-3692) - crypto: qat - fix DMA transfer direction (jsc#PED-3692) - crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692) - crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692) - crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692) - crypto: qat - fix a typo in a comment (jsc#PED-3692) - crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692) - crypto: qat - fix definition of ring reset results (jsc#PED-3692) - crypto: qat - fix error return code in adf_probe (git-fixes). - crypto: qat - fix error return code in adf_probe (jsc#PED-3692) - crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692) - crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692) - crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692) - crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692) - crypto: qat - fix out-of-bounds read (git-fixes). - crypto: qat - fix wording and formatting in code comment (jsc#PED-3692) - crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692) - crypto: qat - free irq in case of failure (jsc#PED-3692) - crypto: qat - free irqs only if allocated (jsc#PED-3692) - crypto: qat - generalize crypto request buffers (jsc#PED-3692) - crypto: qat - get compression extended capabilities (jsc#PED-3692) - crypto: qat - handle retries due to collisions in (jsc#PED-3692) - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692) - crypto: qat - improve logging of PFVF messages (jsc#PED-3692) - crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692) - crypto: qat - introduce support for PFVF block messages (jsc#PED-3692) - crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692) - crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692) - crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692) - crypto: qat - make PFVF message construction direction (jsc#PED-3692) - crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692) - crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692) - crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692) - crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692) - crypto: qat - move pfvf collision detection values (jsc#PED-3692) - crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692) - crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692) - crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692) - crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692) - crypto: qat - re-enable registration of algorithms (jsc#PED-3692) - crypto: qat - refactor PF top half for PFVF (jsc#PED-3692) - crypto: qat - refactor pfvf version request messages (jsc#PED-3692) - crypto: qat - refactor submission logic (jsc#PED-3692) - crypto: qat - relocate PFVF PF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF VF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF disabled function (jsc#PED-3692) - crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692) - crypto: qat - relocate backlog related structures (jsc#PED-3692) - crypto: qat - relocate bufferlist logic (jsc#PED-3692) - crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692) - crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692) - crypto: qat - remove empty sriov_configure() (jsc#PED-3692) - crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692) - crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692) - crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692) - crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692) - crypto: qat - remove unneeded assignment (jsc#PED-3692) - crypto: qat - remove unneeded braces (jsc#PED-3692) - crypto: qat - remove unneeded packed attribute (jsc#PED-3692) - crypto: qat - remove unused PFVF stubs (jsc#PED-3692) - crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692) - crypto: qat - rename bufferlist functions (jsc#PED-3692) - crypto: qat - rename pfvf collision constants (jsc#PED-3692) - crypto: qat - reorganize PFVF code (jsc#PED-3692) - crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692) - crypto: qat - replace deprecated MSI API (jsc#PED-3692) - crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692) - crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692) - crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692) - crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692) - crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692) - crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692) - crypto: qat - simplify adf_enable_aer() (jsc#PED-3692) - crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692) - crypto: qat - split PFVF message decoding from handling (jsc#PED-3692) - crypto: qat - stop using iommu_present() (jsc#PED-3692) - crypto: qat - store the PFVF protocol version of the (jsc#PED-3692) - crypto: qat - store the ring-to-service mapping (jsc#PED-3692) - crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692) - crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692) - crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692) - crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692) - crypto: qat - use hweight for bit counting (jsc#PED-3692) - crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692) - crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692) - crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692) - crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes). - crypto: sa2ul - Select CRYPTO_DES (git-fixes). - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes). - crypto: seqiv - Handle EBUSY correctly (git-fixes). - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes). - crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes). - crypto: xts - Handle EBUSY correctly (git-fixes). - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes). - device-dax: Fix duplicate 'hmem' device registration (bsc#1211400). - devlink: hold region lock when flushing snapshots (git-fixes). - disable two x86 PAT related patches (bsc#1212456) This may break i915 when booted with nopat, but fixes /dev/mem access in Xen PV domU. - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm clone: Fix UAF in clone_dtr() (git-fixes). - dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes). - dm integrity: clear the journal on suspend (git-fixes). - dm integrity: flush the journal on suspend (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm raid: fix address sanitizer warning in raid_resume (git-fixes). - dm raid: fix address sanitizer warning in raid_status (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes). - dm: fix alloc_dax error handling in alloc_dev (git-fixes). - dm: requeue IO if mapping table not yet available (git-fixes). - dma-buf: Use dma_fence_unwrap_for_each when importing fences (git-fixes). - dma-buf: cleanup kerneldoc of removed component (git-fixes). - dma-direct: use is_swiotlb_active in dma_direct_map_page (PED-3259). - dma-mapping: reformat comment to suppress htmldoc warning (git-fixes). - dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes). - dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes). - dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes). - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes). - dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes). - dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes). - dmaengine: dw-edma: Drop chancnt initialization (git-fixes). - dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes). - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes). - dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes). - dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes). - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes). - dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes). - dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes). - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes). - dmaengine: mv_xor_v2: Fix an error code (git-fixes). - dmaengine: pl330: rename _start to prevent build error (git-fixes). - dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes). - dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes). - dmaengine: tegra: Fix memory leak in terminate_all() (git-fixes). - do not reuse connection if share marked as isolated (bsc#1193629). - docs/memory-barriers.txt: Add a missed closing parenthesis (git-fixes). - docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes). - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (git-fixes). - docs: driver-api: firmware_loader: fix missing argument in usage example (git-fixes). - docs: ftrace: fix a issue with duplicated subtitle number (git-fixes). - docs: gdbmacros: print newest record (git-fixes). - docs: networking: Update codeaurora references for rmnet (git-fixes). - docs: networking: fix x25-iface.rst heading & index order (git-fixes). - documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes). - documentation: bonding: fix the doc of peer_notif_delay (git-fixes). - documentation: timers: hrtimers: Make hybrid union historical (git-fixes). - driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes). - driver core: fix potential null-ptr-deref in device_add() (git-fixes). - driver core: fix resource leak in device_add() (git-fixes). - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes). - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815). - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815). - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes). - drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: transport_class: fix possible memory leak (git-fixes). - drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes). - drivers: meson: secure-pwrc: always enable DMA domain (git-fixes). - drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes). - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes). - drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - drm-hyperv: Add a bug reference to two existing changes (bsc#1211281). - drm/amd/amdgpu: fix warning during suspend (bsc#1206843). - drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes). - drm/amd/display: Add DCN314 display SG Support (bsc#1206843). - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes). - drm/amd/display: Add NULL plane_state check for cursor disable logic (git-fixes). - drm/amd/display: Add check for DET fetch latency hiding for dcn32 (bsc#1206843). - drm/amd/display: Add logging for display MALL refresh setting (git-fixes). - drm/amd/display: Add minimal pipe split transition state (git-fixes). - drm/amd/display: Add missing brackets in calculation (bsc#1206843). - drm/amd/display: Add wrapper to call planes and stream update (git-fixes). - drm/amd/display: Adjust downscaling limits for dcn314 (bsc#1206843). - drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 (bsc#1206843). - drm/amd/display: Clear MST topology if it fails to resume (git-fixes). - drm/amd/display: Conversion to bool not necessary (git-fixes). - drm/amd/display: Defer DIG FIFO disable after VID stream enable (bsc#1206843). - drm/amd/display: Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now (bsc#1206843). - drm/amd/display: Do not clear GPINT register when releasing DMUB from reset (git-fixes). - drm/amd/display: Do not commit pipe when updating DRR (bsc#1206843). - drm/amd/display: Do not set DRR on pipe Commit (bsc#1206843). - drm/amd/display: Enable P-state validation checks for DCN314 (bsc#1206843). - drm/amd/display: Explicitly specify update type per plane info change (git-fixes). - drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes). - drm/amd/display: Fix DP MST sinks removal issue (git-fixes). - drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming (bsc#1206843). - drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes). - drm/amd/display: Fix display corruption w/ VSR enable (bsc#1206843). - drm/amd/display: Fix hang when skipping modeset (git-fixes). - drm/amd/display: Fix potential null dereference (git-fixes). - drm/amd/display: Fix potential null-deref in dm_resume (git-fixes). - drm/amd/display: Fix race condition in DPIA AUX transfer (bsc#1206843). - drm/amd/display: Fix set scaling doesn's work (git-fixes). - drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes). - drm/amd/display: Fixes for dcn32_clk_mgr implementation (git-fixes). - drm/amd/display: Include virtual signal to set k1 and k2 values (bsc#1206843). - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB (bsc#1206843). - drm/amd/display: Pass the right info to drm_dp_remove_payload (bsc#1206843). - drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes). - drm/amd/display: Properly reuse completion structure (bsc#1206843). - drm/amd/display: Reduce expected sdp bandwidth for dcn321 (bsc#1206843). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1206843). - drm/amd/display: Report to ACPI video if no panels were found (bsc#1206843). - drm/amd/display: Reset DMUB mailbox SW state after HW reset (bsc#1206843). - drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset (git-fixes). - drm/amd/display: Return error code on DSC atomic check failure (git-fixes). - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write (git-fixes). - drm/amd/display: Set dcn32 caps.seamless_odm (bsc#1206843). - drm/amd/display: Set hvm_enabled flag for S/G mode (bsc#1206843). - drm/amd/display: Simplify same effect if/else blocks (git-fixes). - drm/amd/display: Take FEC Overhead into Timeslot Calculation (bsc#1206843). - drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734). - drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 (bsc#1206843). - drm/amd/display: Uninitialized variables causing 4k60 UCLK to stay at DPM1 and not DPM0 (bsc#1206843). - drm/amd/display: Update bounding box values for DCN321 (git-fixes). - drm/amd/display: Update clock table to include highest clock setting (bsc#1206843). - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes). - drm/amd/display: Use dc_update_planes_and_stream (git-fixes). - drm/amd/display: Use min transition for SubVP into MPO (bsc#1206843). - drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit (bsc#1206843). - drm/amd/display: add a NULL pointer check (bsc#1212848, bsc#1212961). - drm/amd/display: adjust MALL size available for DCN32 and DCN321 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.4 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.5 (bsc#1206843). - drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848, bsc#1212961). - drm/amd/display: disconnect MPCC only on OTG change (bsc#1206843). - drm/amd/display: do not call dc_interrupt_set() for disabled crtcs (git-fixes). - drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes). - drm/amd/display: edp do not add non-edid timings (git-fixes). - drm/amd/display: fix FCLK pstate change underflow (bsc#1206843). - drm/amd/display: fix cursor offset on rotation 180 (git-fixes). - drm/amd/display: fix duplicate assignments (git-fixes). - drm/amd/display: fix flickering caused by S/G mode (git-fixes). - drm/amd/display: fix issues with driver unload (git-fixes). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1206843). - drm/amd/display: fix mapping to non-allocated address (bsc#1206843). - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes). - drm/amd/display: fix the system hang while disable PSR (git-fixes). - drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk (bsc#1206843). - drm/amd/display: move remaining FPU code to dml folder (bsc#1206843). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1206843). - drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes). - drm/amd/display: revert Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: skip commit minimal transition state (bsc#1206843). - drm/amd/display: wait for vblank during pipe programming (git-fixes). - drm/amd/pm/smu13: BACO is supported when it's in BACO state (bsc#1206843). - drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 (bsc#1206843). - drm/amd/pm: Fix output of pp_od_clk_voltage (git-fixes). - drm/amd/pm: Fix power context allocation in SMU13 (git-fixes). - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (bsc#1206843). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1206843). - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 (bsc#1206843). - drm/amd/pm: add missing SMU13.0.0 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add missing SMU13.0.7 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 (bsc#1206843). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.4 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU13.0.0 driver_if header to version 0x34 (bsc#1206843). - drm/amd/pm: correct SMU13.0.0 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 max shader clock reporting (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct the fan speed retrieving in PWM for some SMU13 asics (bsc#1206843). - drm/amd/pm: correct the pcie link state check for SMU13 (bsc#1206843). - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation (bsc#1206843). - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 (bsc#1206843). - drm/amd/pm: enable mode1 reset on smu_v13_0_10 (bsc#1206843). - drm/amd/pm: parse pp_handle under appropriate conditions (git-fixes). - drm/amd/pm: remove unused num_of_active_display variable (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes). - drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (bsc#1212848, bsc#1212961). - drm/amd/pm: update SMU13.0.0 reported maximum shader clock (bsc#1206843). - drm/amd/pm: update the LC_L1_INACTIVITY setting to address possible noise issue (bsc#1212848, bsc#1212961). - drm/amd: Avoid ASSERT for some message failures (bsc#1206843). - drm/amd: Avoid BUG() for case of SRIOV missing IP version (bsc#1206843). - drm/amd: Delay removal of the firmware framebuffer (git-fixes). - drm/amd: Disable PSR-SU on Parade 0803 TCON (bsc#1212848, bsc#1212961). - drm/amd: Do not try to enable secure display TA multiple times (bsc#1212848, bsc#1212961). - drm/amd: Fix an out of bounds error in BIOS parser (git-fixes). - drm/amd: Fix initialization for nbio 4.3.0 (bsc#1206843). - drm/amd: Fix initialization for nbio 7.5.1 (bsc#1206843). - drm/amd: Fix initialization mistake for NBIO 7.3.0 (bsc#1206843). - drm/amd: Make sure image is written to trigger VBIOS image update flow (git-fixes). - drm/amd: Tighten permissions on VBIOS flashing attributes (git-fixes). - drm/amdgpu/discovery: add PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable mes support for GC v11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 (bsc#1206843). - drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: set the APU flag for GC 11.0.4 (bsc#1206843). - drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments (bsc#1206843). - drm/amdgpu/display/mst: adjust the naming of mst_port and port of aconnector (bsc#1206843). - drm/amdgpu/display/mst: limit payload to be updated one by one (bsc#1206843). - drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD (bsc#1206843). - drm/amdgpu/dm/dp_mst: Do not grab mst_mgr->lock when computing DSC state (bsc#1206843). - drm/amdgpu/dm/mst: Fix uninitialized var in pre_compute_mst_dsc_configs_for_state() (bsc#1206843). - drm/amdgpu/dm/mst: Use the correct topology mgr pointer in amdgpu_dm_connector (bsc#1206843). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes). - drm/amdgpu/gfx10: Disable gfxoff before disabling powergating (git-fixes). - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes). - drm/amdgpu/mst: Stop ignoring error codes and deadlocking (bsc#1206843). - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (bsc#1206843). - drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 (bsc#1206843). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1206843). - drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 (bsc#1206843). - drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/soc21: do not expose AV1 if VCN0 is harvested (bsc#1206843). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1206843). - drm/amdgpu: Correct the power calcultion for Renior/Cezanne (git-fixes). - drm/amdgpu: Do not register backlight when another backlight should be used (v3) (bsc#1206843). - drm/amdgpu: Do not resume IOMMU after incomplete init (bsc#1206843). - drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN (bsc#1206843). - drm/amdgpu: Enable vclk dclk node for gc11.0.3 (bsc#1206843). - drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (bsc#1206843). - drm/amdgpu: Fix potential NULL dereference (bsc#1206843). - drm/amdgpu: Fix potential double free and null pointer dereference (bsc#1206843). - drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1206843). - drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes). - drm/amdgpu: Fixed bug on error when unloading amdgpu (bsc#1206843). - drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869). - drm/amdgpu: Register ACPI video backlight when skipping amdgpu backlight registration (bsc#1206843). - drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1206843). - drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes). - drm/amdgpu: Use the sched from entity for amdgpu_cs trace (git-fixes). - drm/amdgpu: Validate VM ioctl flags (git-fixes). - drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes). - drm/amdgpu: add gfx support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add gmc v11 support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add missing radeon secondary PCI ID (git-fixes). - drm/amdgpu: add smu 13 support for smu 13.0.11 (bsc#1206843). - drm/amdgpu: add soc21 common ip block support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add tmz support for GC 11.0.1 (bsc#1206843). - drm/amdgpu: add tmz support for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: allow more APUs to do mode2 reset when go to S4 (bsc#1206843). - drm/amdgpu: allow multipipe policy on ASICs with one MEC (bsc#1206843). - drm/amdgpu: change gfx 11.0.4 external_id range (git-fixes). - drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes). - drm/amdgpu: correct MEC number for gfx11 APUs (bsc#1206843). - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes). - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes). - drm/amdgpu: drop experimental flag on aldebaran (git-fixes). - drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable GFX IP v11.0.4 CG support (bsc#1206843). - drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable HDP SD for gfx 11.0.3 (bsc#1206843). - drm/amdgpu: enable PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu: enable VCN DPG for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram (git-fixes). - drm/amdgpu: fix amdgpu_job_free_resources v2 (bsc#1206843). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (bsc#1212848, bsc#1212961). - drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv (bsc#1206843). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 (bsc#1206843). - drm/amdgpu: fix mmhub register base coding error (git-fixes). - drm/amdgpu: fix number of fence calculations (bsc#1212848, bsc#1212961). - drm/amdgpu: fix return value check in kfd (git-fixes). - drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (bsc#1206843). - drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes). - drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume (git-fixes). - drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (git-fixes). - drm/amdgpu: reposition the gpu reset checking for reuse (bsc#1206843). - drm/amdgpu: set GC 11.0.4 family (bsc#1206843). - drm/amdgpu: skip ASIC reset for APUs when go to S4 (bsc#1206843). - drm/amdgpu: skip MES for S0ix as well since it's part of GFX (bsc#1206843). - drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes). - drm/amdgpu: skip mes self test after s0i3 resume for MES IP v11.0 (bsc#1206843). - drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset (git-fixes). - drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes). - drm/amdgpu: update wave data type to 3 for gfx11 (bsc#1206843). - drm/amdkfd: Add sync after creating vram bo (bsc#1206843). - drm/amdkfd: Fix BO offset for multi-VMA page migration (git-fixes). - drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU (bsc#1206843). - drm/amdkfd: Fix an illegal memory access (git-fixes). - drm/amdkfd: Fix double release compute pasid (bsc#1206843). - drm/amdkfd: Fix kfd_process_device_init_vm error handling (bsc#1206843). - drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes). - drm/amdkfd: Fix the memory overrun (bsc#1206843). - drm/amdkfd: Fix the warning of array-index-out-of-bounds (bsc#1206843). - drm/amdkfd: Fixed kfd_process cleanup on module exit (git-fixes). - drm/amdkfd: Get prange->offset after svm_range_vram_node_new (git-fixes). - drm/amdkfd: Page aligned memory reserve size (bsc#1206843). - drm/amdkfd: add GC 11.0.4 KFD support (bsc#1206843). - drm/amdkfd: fix a potential double free in pqm_create_queue (git-fixes). - drm/amdkfd: fix potential kgd_mem UAFs (git-fixes). - drm/amdkfd: introduce dummy cache info for property asic (bsc#1206843). - drm/armada: Fix a potential double free in an error handling path (git-fixes). - drm/ast: Fix ARM compatibility (git-fixes). - drm/bochs: fix blanking (git-fixes). - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes). - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes). - drm/bridge: it6505: Fix return value check for pm_runtime_get_sync (git-fixes). - drm/bridge: lt8912b: Add hot plug detection (git-fixes). - drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes). - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes). - drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes). - drm/bridge: lt9611: fix HPD reenablement (git-fixes). - drm/bridge: lt9611: fix clock calculation (git-fixes). - drm/bridge: lt9611: fix polarity programming (git-fixes). - drm/bridge: lt9611: fix programming of video modes (git-fixes). - drm/bridge: lt9611: fix sleep mode setup (git-fixes). - drm/bridge: lt9611: pass a pointer to the of node (git-fixes). - drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes). - drm/bridge: tc358768: always enable HS video mode (git-fixes). - drm/bridge: tc358768: fix PLL parameters computation (git-fixes). - drm/bridge: tc358768: fix PLL target frequency (git-fixes). - drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes). - drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec (git-fixes). - drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow (git-fixes). - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (git-fixes). - drm/connector: print max_requested_bpc in state debugfs (git-fixes). - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state() (bsc#1206843). - drm/display/dp_mst: Add helper for finding payloads in atomic MST state (bsc#1206843). - drm/display/dp_mst: Add helpers for serializing SST &lt;-> MST transitions (bsc#1206843). - drm/display/dp_mst: Add nonblocking helpers for DP MST (bsc#1206843). - drm/display/dp_mst: Call them time slots, not VCPI slots (bsc#1206843). - drm/display/dp_mst: Correct the kref of port (bsc#1206843). - drm/display/dp_mst: Do not open code modeset checks for releasing time slots (bsc#1206843). - drm/display/dp_mst: Drop all ports from topology on CSNs before queueing link address work (bsc#1206843). - drm/display/dp_mst: Fix confusing docs for drm_dp_atomic_release_time_slots() (bsc#1206843). - drm/display/dp_mst: Fix down message handling after a packet reception error (git-fixes). - drm/display/dp_mst: Fix down/up message handling after sink disconnect (git-fixes). - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (git-fixes). - drm/display/dp_mst: Fix modeset tracking in drm_dp_atomic_release_vcpi_slots() (bsc#1206843). - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload() (bsc#1206843). - drm/display/dp_mst: Maintain time slot allocations when deleting payloads (bsc#1206843). - drm/display/dp_mst: Move all payload info into the atomic state (bsc#1206843). - drm/display/dp_mst: Rename drm_dp_mst_vcpi_allocation (bsc#1206843). - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (git-fixes). - drm/displayid: add displayid_get_header() and check bounds better (git-fixes). - drm/dp: Do not rewrite link config when setting phy test pattern (git-fixes). - drm/dp_mst: Avoid deleting payloads for connectors staying enabled (bsc#1206843). - drm/dp_mst: fix drm_dp_dpcd_read return value checks (git-fixes). - drm/edid: fix AVI infoframe aspect ratio handling (git-fixes). - drm/edid: fix parsing of 3D modes from HDMI VSDB (git-fixes). - drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes). - drm/exynos: fix g2d_open/close helper function definitions (git-fixes). - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes). - drm/exynos: vidi: fix a wrong error return (git-fixes). - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes). - drm/fbdev-generic: prohibit potential out-of-bounds access (git-fixes). - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes). - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes). - drm/hyperv: Add error message for fb size greater than allocated (git-fixes). - drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes). - drm/i915/active: Fix missing debug object activation (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/adlp: Fix typo for reference clock (git-fixes). - drm/i915/color: Fix typo for Plane CSC indexes (git-fixes). - drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes). - drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes). - drm/i915/dg2: Drop one PCI ID (git-fixes). - drm/i915/dg2: Support 4k@30 on HDMI (git-fixes). - drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU (git-fixes). - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes). - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes). - drm/i915/display: Check source height is > 0 (git-fixes). - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes). - drm/i915/display: clean up comments (git-fixes). - drm/i915/dmc: Update DG2 DMC version to v2.08 (git-fixes). - drm/i915/dp: prevent potential div-by-zero (git-fixes). - drm/i915/dp_mst: Fix mst_mgr lookup during atomic check (bsc#1206843). - drm/i915/dp_mst: Fix payload removal during output disabling (bsc#1206843). - drm/i915/dpt: Treat the DPT BO as a framebuffer (git-fixes). - drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() (git-fixes). - drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes). - drm/i915/gem: Flush lmem contents after construction (git-fixes). - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes). - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes). - drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes). - drm/i915/gt: perform uc late init after probe error injection (git-fixes). - drm/i915/guc: Do not capture Gen8 regs on Xe devices (git-fixes). - drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes). - drm/i915/huc: always init the delayed load fence (git-fixes). - drm/i915/huc: bump timeout for delayed load and reduce print verbosity (git-fixes). - drm/i915/huc: fix leak of debug object in huc load fence on driver unload (git-fixes). - drm/i915/migrate: Account for the reserved_space (git-fixes). - drm/i915/migrate: fix corner case in CCS aux copying (git-fixes). - drm/i915/psr: Fix PSR_IMR/IIR field handling (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes). - drm/i915/pxp: use &lt;> instead of '' for headers in include/ (git-fixes). - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes). - drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes). - drm/i915/selftests: Add some missing error propagation (git-fixes). - drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes). - drm/i915/selftests: Stop using kthread_stop() (git-fixes). - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes). - drm/i915: Allow switching away via vga-switcheroo if uninitialized (git-fixes). - drm/i915: Avoid potential vm use-after-free (git-fixes). - drm/i915: Disable DC states for all commits (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes). - drm/i915: Fix NULL ptr deref by checking new_crtc_state (git-fixes). - drm/i915: Fix VBT DSI DVO port handling (git-fixes). - drm/i915: Fix context runtime accounting (git-fixes). - drm/i915: Fix fast wake AUX sync len (git-fixes). - drm/i915: Fix potential bit_17 double-free (git-fixes). - drm/i915: Fix potential context UAFs (git-fixes). - drm/i915: Fix request ref counting during error capture & debugfs dump (git-fixes). - drm/i915: Fix up locking around dumping requests lists (git-fixes). - drm/i915: Initialize the obj flags for shmem objects (git-fixes). - drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes). - drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on skl/glk (git-fixes). - drm/i915: Move fd_install after last use of fence (git-fixes). - drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes). - drm/i915: Remove __maybe_unused from mtl_info (git-fixes). - drm/i915: Remove unused bits of i915_vma/active api (git-fixes). - drm/i915: Remove unused variable (git-fixes). - drm/i915: Use 18 fast wake AUX sync len (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: move a Kconfig symbol to unbreak the menu presentation (git-fixes). - drm/i915: stop abusing swiotlb_max_segment (git-fixes). - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes). - drm/mediatek: Clean dangling pointer on bind error path (git-fixes). - drm/mediatek: Drop unbalanced obj unref (git-fixes). - drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes). - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes). - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes). - drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes). - drm/meson: fix missing component unbind on bind errors (git-fixes). - drm/meson: reorder driver deinit sequence to fix use-after-free bug (git-fixes). - drm/mgag200: Fix gamma lut not initialized (git-fixes). - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes). - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes). - drm/msm/a5xx: fix context faults during ring switch (git-fixes). - drm/msm/a5xx: fix highest bank bit for a530 (git-fixes). - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes). - drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes). - drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage (git-fixes). - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (git-fixes). - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes). - drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error (git-fixes). - drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at gpu load (git-fixes). - drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes). - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes). - drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes). - drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes). - drm/msm/dp: Free resources after unregistering them (git-fixes). - drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training (git-fixes). - drm/msm/dp: unregister audio driver during unbind (git-fixes). - drm/msm/dpu: Add INTF_5 interrupts (git-fixes). - drm/msm/dpu: Add check for cstate (git-fixes). - drm/msm/dpu: Add check for pstates (git-fixes). - drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes). - drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes). - drm/msm/dpu: Reject topologies for which no DSC blocks are available (git-fixes). - drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes). - drm/msm/dpu: Remove num_enc from topology struct in favour of num_dsc (git-fixes). - drm/msm/dpu: Wire up DSC mask for active CTL configuration (git-fixes). - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (git-fixes). - drm/msm/dpu: clear DSPP reservations in rm release (git-fixes). - drm/msm/dpu: correct MERGE_3D length (git-fixes). - drm/msm/dpu: disable features unsupported by QCM2290 (git-fixes). - drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes). - drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK (git-fixes). - drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes). - drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks (git-fixes). - drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes). - drm/msm/dpu: sc7180: add missing WB2 clock control (git-fixes). - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes). - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/dsi: Allow 2 CTRLs on v2.5.0 (git-fixes). - drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes). - drm/msm/gem: Add check for kmalloc (git-fixes). - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/mdp5: Add check for kzalloc (git-fixes). - drm/msm/mdp5: fix reading hw revision on db410c platform (git-fixes). - drm/msm: Be more shouty if per-process pgtables are not working (git-fixes). - drm/msm: Fix potential invalid ptr free (git-fixes). - drm/msm: Set max segment size earlier (git-fixes). - drm/msm: clean event_thread->worker in case of an error (git-fixes). - drm/msm: fix NULL-deref on irq uninstall (git-fixes). - drm/msm: fix NULL-deref on snapshot tear down (git-fixes). - drm/msm: fix drm device leak on bind errors (git-fixes). - drm/msm: fix missing wq allocation error handling (git-fixes). - drm/msm: fix vram leak on bind errors (git-fixes). - drm/msm: fix workqueue leak on bind errors (git-fixes). - drm/msm: use strscpy instead of strncpy (git-fixes). - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes). - drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes). - drm/nouveau/dp: check for NULL nv_connector->native_mode (git-fixes). - drm/nouveau/kms/nv50-: remove unused functions (git-fixes). - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes). - drm/nouveau/kms: Cache DP encoders in nouveau_connector (bsc#1206843). - drm/nouveau/kms: Pull mst state in for all modesets (bsc#1206843). - drm/nouveau: add nv_encoder pointer check for NULL (git-fixes). - drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes). - drm/omap: dsi: Fix excessive stack usage (git-fixes). - drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes). - drm/panel: novatek-nt35950: Improve error handling (git-fixes). - drm/panel: novatek-nt35950: Only unregister DSI1 if it exists (git-fixes). - drm/panel: otm8009a: Set backlight parent to panel device (git-fixes). - drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes). - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes). - drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes). - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes). - drm/probe-helper: Cancel previous job before starting new one (git-fixes). - drm/radeon: Drop legacy MST support (bsc#1206843). - drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes). - drm/radeon: fix possible division-by-zero errors (git-fixes). - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes). - drm/radeon: free iio for atombios when driver shutdown (git-fixes). - drm/radeon: reintroduce radeon_dp_work_func content (git-fixes). - drm/rockchip: Drop unbalanced obj unref (git-fixes). - drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes). - drm/sched: Remove redundant check (git-fixes). - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() (git-fixes). - drm/shmem-helper: Remove another errant put in error path (git-fixes). - drm/shmem-helper: Revert accidental non-GPL export (git-fixes). - drm/sun4i: fix missing component unbind on bind errors (git-fixes). - drm/tegra: Avoid potential 32-bit integer overflow (git-fixes). - drm/tegra: firewall: Check for is_addr_reg existence in IMM check (git-fixes). - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes). - drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes). - drm/ttm: Fix a NULL pointer dereference (git-fixes). - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (git-fixes). - drm/ttm: optimize pool allocations a bit v2 (git-fixes). - drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking (git-fixes). - drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: drv: Call component_unbind_all() (git-fixes). - drm/vc4: hdmi: Correct interlaced timings again (git-fixes). - drm/vc4: hdmi: make CEC adapter name unique (git-fixes). - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes). - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 (git-fixes). - drm/vc4: hvs: Set AXI panic modes (git-fixes). - drm/vc4: kms: Sort the CRTCs by output before assigning them (git-fixes). - drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes). - drm/vgem: add missing mutex_destroy (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - drm/virtio: exbuf->fence_fd unmodified on interrupted wait (git-fixes). - drm/vkms: Fix memory leak in vkms_init() (git-fixes). - drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes). - drm/vmwgfx: Do not drop the reference to the handle too soon (git-fixes). - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (git-fixes). - drm/vmwgfx: Fix race issue calling pin_user_pages (git-fixes). - drm/vmwgfx: Stop accessing buffer objects which failed init (git-fixes). - drm/vram-helper: fix function names in vram helper doc (git-fixes). - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes). - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes). - drm: amd: display: Fix memory leakage (git-fixes). - drm: bridge: adv7511: unregister cec i2c device after cec adapter (git-fixes). - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags (git-fixes). - drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes). - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC (git-fixes). - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes). - drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes). - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes). - drm: tidss: Fix pixel format definition (git-fixes). - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes). - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes). - dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes). - dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes). - dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes). - dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes). - dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes). - dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes). - dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes). - dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes). - dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes). - dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes). - dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes). - dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes). - dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes). - dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes). - dt-bindings: power: renesas,apmu: Fix cpus property limits (git-fixes). - dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes). - dt-bindings: remoteproc: st,stm32-rproc: Fix phandle-array parameters description (git-fixes). - dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes). - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes). - dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes). - dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes). - dt-bindings: usb: snps,dwc3: Fix 'snps,hsphy_interface' type (git-fixes). - e1000e: Disable TSO on i219-LM card to increase speed (git-fixes). - edac/i10nm: Add Intel Emerald Rapids server support (PED-4400). - eeprom: at24: also select REGMAP (git-fixes). - eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes). - efi/x86: libstub: Fix typo in __efi64_argmap* name (git-fixes). - efi: Accept version 2 of memory attributes table (git-fixes). - efi: efivars: Fix variable writes with unsupported query_variable_store() (git-fixes). - efi: efivars: Fix variable writes without query_variable_store() (git-fixes). - efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes). - efi: rt-wrapper: Add missing include (git-fixes). - efi: ssdt: Do not free memory if ACPI table was loaded successfully (git-fixes). - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes). - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes). - elevator: update the document of elevator_switch (git-fixes). - elf: correct note name comment (git-fixes). - ethernet: 3com/typhoon: do not write directly to netdev->dev_addr (git-fixes). - ethernet: 8390/etherh: do not write directly to netdev->dev_addr (git-fixes). - ethernet: i825xx: do not write directly to netdev->dev_addr (git-fixes). - ethernet: ice: avoid gcc-9 integer overflow warning (jsc#PED-376). - ethernet: seeq/ether3: do not write directly to netdev->dev_addr (git-fixes). - ethernet: tundra: do not write directly to netdev->dev_addr (git-fixes). - exit: Add and use make_task_dead (bsc#1207328). - exit: Allow oops_limit to be disabled (bsc#1207328). - exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328). - exit: Move force_uaccess back into do_exit (bsc#1207328). - exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328). - exit: Put an upper limit on how often we can oops (bsc#1207328). - exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328). - exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328). - ext4,f2fs: fix readahead of verity data (bsc#1207648). - ext4: Fix deadlock during directory rename (bsc#1210763). - ext4: Fix possible corruption when moving a directory (bsc#1210763). - ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020). - ext4: add EA_INODE checking to ext4_iget() (bsc#1213106). - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088). - ext4: add helper to check quota inums (bsc#1207618). - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617). - ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109). - ext4: add missing validation of fast-commit record lengths (bsc#1207626). - ext4: add strict range checks while freeing blocks (bsc#1213089). - ext4: allocate extended attribute value in vmalloc area (bsc#1207635). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016). - ext4: avoid resizing to a partial cluster size (bsc#1206880). - ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634). - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018). - ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090). - ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103). - ext4: continue to expand file system when the target size does not reach (bsc#1206882). - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592). - ext4: correct max_inline_xattr_value_size computing (bsc#1206878). - ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878). - ext4: disable fast-commit of encrypted dir operations (bsc#1207623). - ext4: disallow ea_inodes with extended attributes (bsc#1213108). - ext4: do not allow journal inode to have encrypt flag (bsc#1207621). - ext4: do not increase iversion counter for ea_inodes (bsc#1207605). - ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603). - ext4: do not set up encryption key during jbd2 transaction (bsc#1207624). - ext4: drop ineligible txn start stop APIs (bsc#1207588). - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606). - ext4: factor out ext4_fc_get_tl() (bsc#1207615). - ext4: fail ext4_iget if special inode unallocated (bsc#1213010). - ext4: fast commit may miss file actions (bsc#1207591). - ext4: fast commit may not fallback for ineligible commit (bsc#1207590). - ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886). - ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766). - ext4: fix WARNING in ext4_update_inline_data (bsc#1213012). - ext4: fix WARNING in mb_find_extent (bsc#1213099). - ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767). - ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076). - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1206881). - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620). - ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111). - ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594). - ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765). - ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891). - ext4: fix data races when using cached status extents (bsc#1213102). - ext4: fix deadlock due to mbcache entry corruption (bsc#1207653). - ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105). - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631). - ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608). - ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630). - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593). - ext4: fix extent status tree race in writeback error recovery path (bsc#1206877). - ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015). - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764). - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636). - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894). - ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625). - ext4: fix lockdep warning when enabling MMP (bsc#1213100). - ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609). - ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884). - ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628). - ext4: fix possible double unlock when moving a directory (bsc#1210763). - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611). - ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612). - ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616). - ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637). - ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096). - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021). - ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627). - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890). - ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893). - ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888). - ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622). - ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878). - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098). - ext4: fix warning in 'ext4_da_release_space' (bsc#1206887). - ext4: goto right label 'failed_mount3a' (bsc#1207610). - ext4: improve error handling from ext4_dirhash() (bsc#1213104). - ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017). - ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629). - ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633). - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614). - ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602). - ext4: make ext4_lazyinit_thread freezable (bsc#1206885). - ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011). - ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019). - ext4: place buffer head allocation before handle start (bsc#1207607). - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087). - ext4: refuse to create ea block when umounted (bsc#1213093). - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - ext4: simplify updating of fast commit stats (bsc#1207589). - ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110). - ext4: unconditionally enable the i_version counter (bsc#1211299). - ext4: update 'state->fc_regions_size' after successful memory allocation (bsc#1207613). - ext4: update s_journal_inum if it changes after journal replay (bsc#1213094). - ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876). - ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092). - ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793). - ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013). - extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes). - extcon: Fix kernel doc of property fields to avoid warnings (git-fixes). - extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes). - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes). - extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes). - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes). - extcon: usbc-tusb320: fix kernel-doc warning (git-fixes). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (git-fixes). - fbcon: Fix error paths in set_con2fb_map (git-fixes). - fbcon: Fix null-ptr-deref in soft_cursor (git-fixes). - fbcon: set_con2fb_map needs to set con2fb_map! (git-fixes). - fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472). - fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes). - fbdev: au1200fb: Fix potential divide by zero (git-fixes). - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes). - fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387). - fbdev: intelfb: Fix potential divide by zero (git-fixes). - fbdev: lxfb: Fix potential divide by zero (git-fixes). - fbdev: mmp: Fix deferred clk handling in mmphw_probe() (git-fixes). - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes). - fbdev: nvidia: Fix potential divide by zero (git-fixes). - fbdev: omapfb: avoid stack overflow warning (git-fixes). - fbdev: omapfb: cleanup inconsistent indentation (git-fixes). - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes). - fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes). - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes). - fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes). - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes). - fbdev: tgafb: Fix potential divide by zero (git-fixes). - fbdev: udlfb: Fix endpoint check (git-fixes). - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes). - filelock: new helper: vfs_inode_has_locks (jsc#SES-1880). - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes). - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes). - firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes). - firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes). - firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes). - firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes). - firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes). - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes). - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes). - firmware: qcom_scm: Clear download bit during reboot (git-fixes). - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes). - firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes). - flow_dissector: Do not count vlan tags inside tunnel payload (git-fixes). - fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258). - fotg210-udc: Add missing completion handler (git-fixes). - fpga: bridge: fix kernel-doc parameter description (git-fixes). - fpga: bridge: properly initialize bridge device before populating children (git-fixes). - fpga: m10bmc-sec: Fix probe rollback (git-fixes). - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes). - fprobe: Check rethook_alloc() return in rethook initialization (git-fixes). - fprobe: Fix smatch type mismatch warning (git-fixes). - fprobe: add recursion detection in fprobe_exit_handler (git-fixes). - fprobe: make fprobe_kprobe_handler recursion free (git-fixes). - fs/jfs: fix shift exponent db_agl2size negative (git-fixes). - fs: account for filesystem mappings (bsc#1205191). - fs: account for group membership (bsc#1205191). - fs: add i_user_ns() helper (bsc#1205191). - fs: dlm: do not call kernel_getpeername() in error_report() (bsc#1208130). - fs: dlm: use sk->sk_socket instead of con->sock (bsc#1208130). - fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632). - fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes). - fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes). - fs: move mapping helpers (bsc#1205191) - fs: remove __sync_filesystem (git-fixes). - fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes). - fs: tweak fsuidgid_has_mapping() (bsc#1205191). - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (bsc#1210409). - fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429). - ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes). - ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes). - ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes). - fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759). - fuse: always revalidate rename target dentry (bsc#1211808). - fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807). - futex: Resend potentially swallowed owner death notification (git-fixes). - genirq: Provide new interfaces for affinity hints (bsc#1208153). - git-sort: Add io_uring 6.3 fixes remote - google/gve:fix repeated words in comments (bsc#1211519). - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes). - gpio: davinci: Add irq chip flag to skip set wake (git-fixes). - gpio: mockup: Fix mode of debugfs files (git-fixes). - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes). - gpio: vf610: connect GPIO label to dev name (git-fixes). - gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes). - gpu: host1x: Fix mask for syncpoint increment register (git-fixes). - gpu: host1x: Fix potential double free if IOMMU is disabled (git-fixes). - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes). - gve: Adding a new AdminQ command to verify driver (bsc#1211519). - gve: Cache link_speed value from device (git-fixes). - gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519). - gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519). - gve: Handle alternate miss completions (bsc#1211519). - gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519). - gve: Remove the code of clearing PBA bit (git-fixes). - gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes). - gve: enhance no queue page list detection (bsc#1211519). - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes). - hfs/hfsplus: use WARN_ON for sanity check (git-fixes). - hfs: Fix OOB Write in hfs_asc2mac (git-fixes). - hfs: fix OOB Read in __hfs_brec_find (git-fixes). - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes). - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes). - hid: Add Mapping for System Microphone Mute (git-fixes). - hid: asus: use spinlock to protect concurrent accesses (git-fixes). - hid: asus: use spinlock to safely schedule workers (git-fixes). - hid: bigben: use spinlock to protect concurrent accesses (git-fixes). - hid: bigben: use spinlock to safely schedule workers (git-fixes). - hid: bigben_probe(): validate report count (git-fixes). - hid: bigben_worker() remove unneeded check on report_field (git-fixes). - hid: core: Fix deadloop in hid_apply_multiplier (git-fixes). - hid: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes). - hid: elecom: add support for TrackBall 056E:011C (git-fixes). - hid: google: add jewel USB id (git-fixes). - hid: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes). - hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes). - hid: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes). - hid: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes). - hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes). - hid: microsoft: Add rumble support to latest xbox controllers (bsc#1211280). - hid: multitouch: Add quirks for flipped axes (git-fixes). - hid: playstation: sanity check DualSense calibration data (git-fixes). - hid: retain initial quirks set up when creating HID devices (git-fixes). - hid: wacom: Add error check to wacom_parse_and_register() (git-fixes). - hid: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes). - hid: wacom: Force pen out of prox if no events have been received in a while (git-fixes). - hid: wacom: Set a default resolution for older tablets (git-fixes). - hid: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes). - hid: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes). - hid: wacom: generic: Set battery quirk only when we see battery data (git-fixes). - hv: fix comment typo in vmbus_channel/low_latency (git-fixes). - hv: hv_balloon: fix memory leak with using debugfs_lookup() (git-fixes). - hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes). - hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes). - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes). - hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861). - hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861). - hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861). - hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861). - hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861). - hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861). - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes). - hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes). - hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes). - hwmon: (coretemp) Simplify platform device handling (git-fixes). - hwmon: (ftsteutates) Fix scaling of measurements (git-fixes). - hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes). - hwmon: (ina3221) return prober error code (git-fixes). - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes). - hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848). - hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes). - hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes). - hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes). - hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes). - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes). - hwmon: fix potential sensor registration fail if of_node is missing (git-fixes). - hwmon: tmp512: drop of_match_ptr for ID table (git-fixes). - hwrng: imx-rngc - fix the timeout for init and self check (git-fixes). - hwrng: st - keep clock enabled while hwrng is registered (git-fixes). - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes). - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes). - i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes). - i2c: hisi: Avoid redundant interrupts (git-fixes). - i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes). - i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes). - i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes). - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes). - i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes). - i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes). - i2c: mv64xxx: Remove shutdown method from driver (git-fixes). - i2c: mxs: suppress probe-deferral error message (git-fixes). - i2c: ocores: generate stop condition after timeout in polling mode (git-fixes). - i2c: omap: Fix standard mode false ACK readings (git-fixes). - i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes). - i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes). - i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes). - i2c: tegra: Fix PEC support for SMBUS block read (git-fixes). - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes). - i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378). - i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378). - i40e: Fix DMA mappings leak (jsc#SLE-18378). - i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378). - i40e: Fix VF set max MTU size (jsc#SLE-18378). - i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378). - i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378). - i40e: Fix calculating the number of queue pairs (jsc#SLE-18378). - i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378). - i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378). - i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378). - i40e: Fix for VF MAC address 0 (jsc#SLE-18378). - i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378). - i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378). - i40e: Fix kernel crash during module removal (jsc#SLE-18378). - i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378). - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378). - i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378). - i40e: Refactor tc mqprio checks (jsc#SLE-18378). - i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378). - i40e: fix accessing vsi->active_filters without holding lock (jsc#SLE-18378). - i40e: fix flow director packet filter programming (jsc#SLE-18378). - i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378). - i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378). - i825xx: sni_82596: use eth_hw_addr_set() (git-fixes). - i915 kABI workaround (git-fixes). - i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes). - iavf/iavf_main: actually log ->src mask when talking about it (jsc#SLE-18385). - iavf: Detach device during reset task (jsc#SLE-18385). - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385). - iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385). - iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385). - iavf: Fix a crash during reset task (jsc#SLE-18385). - iavf: Fix bad page state (jsc#SLE-18385). - iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385). - iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385). - iavf: Fix max_rate limiting (jsc#SLE-18385). - iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385). - iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385). - iavf: do not track VLAN 0 filters (jsc#PED-835). - iavf: fix hang on reboot with ice (jsc#SLE-18385). - iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385). - iavf: fix temporary deadlock and failure to set MAC address (jsc#PED-835). - iavf: refactor VLAN filter states (jsc#PED-835). - iavf: remove active_cvlans and active_svlans bitmaps (jsc#PED-835). - iavf: remove mask from iavf_irq_enable_queues() (git-fixes). - iavf: schedule watchdog immediately when changing primary MAC (jsc#PED-835). - ib/hfi1: Assign npages earlier (git-fixes) - ib/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes) - ib/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes) - ib/hfi1: Fix expected receive setup error exit issues (git-fixes) - ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes) - ib/hfi1: Fix sdma.h tx->num_descs off-by-one errors (git-fixes) - ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes) - ib/hfi1: Immediately remove invalid memory from hardware (git-fixes) - ib/hfi1: Reject a zero-length user expected buffer (git-fixes) - ib/hfi1: Remove user expected buffer invalidate race (git-fixes) - ib/hfi1: Reserve user expected TIDs (git-fixes) - ib/hfi1: Restore allocated resources on failed copyout (git-fixes) - ib/hfi1: Update RMT size calculation (git-fixes) - ib/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes) - ib/iPoIB: Fix legacy IPoIB due to wrong number of queues (git-fixes) - ib/isert: Fix dead lock in ib_isert (git-fixes) - ib/isert: Fix incorrect release of isert connection (git-fixes) - ib/isert: Fix possible list corruption in CMA handler (git-fixes) - ib/mad: Do not call to function that might sleep while in atomic context (git-fixes). - ib/mlx5: Add support for 400G_8X lane speed (git-fixes) - ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes) - ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes) - ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604). - ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes). - ice: Add check for kzalloc (jsc#PED-376). - ice: Do not double unplug aux on peer initiated reset (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (jsc#PED-376). - ice: Fix DSCP PFC TLV creation (git-fixes). - ice: Fix DSCP PFC TLV creation (jsc#PED-376). - ice: Fix XDP memory leak when NIC is brought up and down (git-fixes). - ice: Fix disabling Rx VLAN filtering with port VLAN enabled (jsc#PED-376). - ice: Fix ice VF reset during iavf initialization (jsc#PED-376). - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields (jsc#PED-376). - ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes). - ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375). - ice: Fix memory corruption in VF driver (git-fixes). - ice: Fix potential memory leak in ice_gnss_tty_write() (jsc#PED-376). - ice: Ignore EEXIST when setting promisc mode (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (jsc#PED-376). - ice: Reset FDIR counter in FDIR init stage (git-fixes). - ice: Reset FDIR counter in FDIR init stage (jsc#PED-376). - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375). - ice: add profile conflict check for AVF FDIR (git-fixes). - ice: add profile conflict check for AVF FDIR (jsc#PED-376). - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158). - ice: block LAN in case of VF to VF offload (git-fixes). - ice: block LAN in case of VF to VF offload (jsc#PED-376). - ice: check if VF exists before mode check (jsc#PED-376). - ice: config netdev tc before setting queues number (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (jsc#PED-376). - ice: ethtool: Prohibit improper channel config for DCB (git-fixes). - ice: ethtool: advertise 1000M speeds properly (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (jsc#PED-376). - ice: fix lost multicast packets in promisc mode (jsc#PED-376). - ice: fix wrong fallback logic for FDIR (git-fixes). - ice: fix wrong fallback logic for FDIR (jsc#PED-376). - ice: handle E822 generic device ID in PLDM header (git-fixes). - ice: move devlink port creation/deletion (jsc#PED-376). - ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes). - ice: switch: fix potential memleak in ice_add_adv_recipe() (jsc#PED-376). - ice: use bitmap_free instead of devm_kfree (git-fixes). - ice: xsk: Fix cleaning of XDP_TX frames (jsc#PED-376). - ice: xsk: disable txq irq before flushing hw (jsc#PED-376). - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (jsc#PED-376). - ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes). - ieee80211: add TWT element definitions (bsc#1209980). - ieee802154: hwsim: Fix possible memory leaks (git-fixes). - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253). - igb: Add lock to avoid data race (jsc#SLE-18379). - igb: Enable SR-IOV after reinit (jsc#SLE-18379). - igb: Fix PPS input and output using 3rd and 4th SDP (jsc#PED-370). - igb: Fix extts capture value format for 82580/i354/i350 (git-fixes). - igb: Initialize mailbox message for VF reset (jsc#SLE-18379). - igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379). - igb: fix bit_shift to be in [1..8] range (git-fixes). - igb: fix nvm.ops.read() error handling (git-fixes). - igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379). - igbvf: Regard vf reset nack as success (jsc#SLE-18379). - igc: Add checking for basetime less than zero (jsc#SLE-18377). - igc: Add ndo_tx_timeout support (jsc#SLE-18377). - igc: Clean the TX buffer and TX descriptor ring (git-fixes). - igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377). - igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377). - igc: Fix possible system crash when loading module (git-fixes). - igc: Lift TAPRIO schedule restriction (jsc#SLE-18377). - igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377). - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377). - igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377). - igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377). - igc: fix the validation logic for taprio's gate list (jsc#SLE-18377). - igc: read before write to SRRCTL register (jsc#SLE-18377). - igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377). - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377). - iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes). - iio: accel: fxls8962af: fixup buffer scan element type (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes). - iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes). - iio: adc: ad7192: Change 'shorted' channels to differential (git-fixes). - iio: adc: ad7192: Fix internal/external clock selection (git-fixes). - iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes). - iio: adc: ad7791: fix IRQ flags (git-fixes). - iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes). - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes). - iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes). - iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes). - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes). - iio: adc: stm32-dfsdm: fill module aliases (git-fixes). - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes). - iio: adis16480: select CONFIG_CRC32 (git-fixes). - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes). - iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes). - iio: hid: fix the retval in accel_3d_capture_sample (git-fixes). - iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes). - iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes). - iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes). - iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes). - iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes). - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes). - iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes). - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes). - iio: imu: inv_icm42600: fix timestamp reset (git-fixes). - iio: light: cm32181: Unregister second I2C client if present (git-fixes). - iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes). - iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes). - iio: light: vcnl4035: fixed chip ID check (git-fixes). - iio:adc:twl6030: Enable measurement of VAC (git-fixes). - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes). - ima: Fix memory leak in __ima_inode_hash() (git-fixes). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448). - init: Provide arch_cpu_finalize_init() (bsc#1212448). - init: Remove check_bugs() leftovers (bsc#1212448). - inotify: Avoid reporting event with invalid wd (bsc#1213025). - input: ads7846 - always set last command to PWRDOWN (git-fixes). - input: ads7846 - do not check penirq immediately for 7845 (git-fixes). - input: ads7846 - do not report pressure for ads7845 (git-fixes). - input: adxl34x - do not hardcode interrupt trigger type (git-fixes). - input: alps - fix compatibility with -funsigned-char (bsc#1209805). - input: drv260x - fix typo in register value define (git-fixes). - input: drv260x - remove unused .reg_defaults (git-fixes). - input: drv260x - sleep between polling GO bit (git-fixes). - input: exc3000 - properly stop timer on shutdown (git-fixes). - input: fix open count when closing inhibited device (git-fixes). - input: focaltech - use explicitly signed char type (git-fixes). - input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes). - input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes). - input: iqs269a - configure device with a single block write (git-fixes). - input: iqs269a - drop unused device node references (git-fixes). - input: iqs269a - increase interrupt handler return delay (git-fixes). - input: iqs626a - drop unused device node references (git-fixes). - input: psmouse - fix OOB access in Elantech protocol (git-fixes). - input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes). - input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes). - input: xpad - add constants for GIP interface numbers (git-fixes). - input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes). - integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes). - intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379). - intel_idle: add Emerald Rapids Xeon support (PED-3849). - interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes). - interconnect: fix mem leak when freeing nodes (git-fixes). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes). - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128 (git-fixes). - io_uring/kbuf: fix not advancing READV kbuf ring (git-fixes). - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available (git-fixes). - io_uring: do not expose io_fill_cqe_aux() (bsc#1211014). - io_uring: do not gate task_work run on TIF_NOTIFY_SIGNAL (git-fixes). - io_uring: ensure that cached task references are always put on exit (git-fixes). - io_uring: fix CQ waiting timeout handling (git-fixes). - io_uring: fix fget leak when fs do not support nowait buffered read (bsc#1205205). - io_uring: fix ordering of args in io_uring_queue_async_work (git-fixes). - io_uring: fix return value when removing provided buffers (git-fixes). - io_uring: fix size calculation when registering buf ring (git-fixes). - io_uring: recycle kbuf recycle on tw requeue (git-fixes). - iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes). - iommu/vt-d: Add a fix for devices need extra dtlb flush (bsc#1208219). - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode (bsc#1208948). - iommu/vt-d: Fix buggy QAT device mask (bsc#1208219). - ipmi: fix SSIF not responding under certain cond (git-fixes). - ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459). - ipmi:ssif: Add a timer between request retries (bsc#1206459). - ipmi:ssif: Add send_retries increment (git-fixes). - ipmi:ssif: Increase the message retry time (bsc#1206459). - ipmi:ssif: Remove rtc_us_timer (bsc#1206459). - ipmi:ssif: resend_msg() cannot fail (bsc#1206459). - ipmi_ssif: Rename idle state and check (bsc#1206459). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes). - irqchip/ftintc010: Mark all function static (git-fixes). - irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes). - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes) - iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553). - ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384). - ixgbe: Enable setting RSS table to default values (jsc#SLE-18384). - ixgbe: Fix panic during XDP_TX with > 64 CPUs (jsc#SLE-18384). - ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384). - ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384). - ixgbe: fix pci device refcount leak (jsc#SLE-18384). - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384). - jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590). - jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641). - jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095). - jbd2: fix potential buffer head reference count leak (bsc#1207644). - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645). - jbd2: use the correct print format (git-fixes). - jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643). - jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014). - jfs: Fix fortify moan in symlink (git-fixes). - k-m-s: Drop Linux 2.6 support - kABI compatibility workaround for efivars (git-fixes). - kABI workaround for btbcm.c (git-fixes). - kABI workaround for cpp_acpi extensions for EPP (bsc#1212445). - kABI workaround for drm_dp_mst helper updates (bsc#1206843). - kABI workaround for hid quirks (git-fixes). - kABI workaround for ieee80211 and co (bsc#1209980). - kABI workaround for mt76_poll_msec() (git-fixes). - kABI workaround for struct acpi_ec (bsc#1207149). - kABI workaround for xhci (git-fixes). - kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest (git-fixes) - kABI: PCI: Reduce warnings on possible RW1C corruption (kabi). - kABI: PCI: dwc: Add dw_pcie_ops.host_deinit() callback (kabi). - kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi). - kABI: Preserve TRACE_EVENT_FL values (git-fixes). - kABI: Work around kABI changes after '20347fca71a3 swiotlb: split up the global swiotlb lock' (jsc#PED-3259). - kABI: x86/msi: Fix msi message data shadow struct (kabi). - kABI: x86/msr: Remove .fixup usage (kabi). - kabi FIX FOR NFSv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - kabi FIX FOR: NFS: Further optimisations for 'ls -l' (git-fixes). - kabi FIX FOR: NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - kabi FIX FOR: NFSv4.1 query for fs_location attr on a new file system (Never, kabi). - kabi FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi). - kabi fix for: NFSv3: handle out-of-order write replies (bsc#1205544). - kabi/severities: add mlx5 internal symbols - kabi/severities: added Microsoft mana symbold (bsc#1210551) - kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users. - kabi/severities: ignore kABI changes for mt76/* local modules (bsc#1209980) - kabi/severities: ignore kABI in bq27xxx_battery module Those are local symbols that are used only by child drivers - kasan: no need to unset panic_on_warn in end_report() (bsc#1207328). - kconfig: Update config changed flag before calling callback (git-fixes). - kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi - kernel-binary: install expoline.o (boo#1210791 bsc#1211089) - kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base. - kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741). - kernel-source: Remove unused macro variant_symbols - kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). rpm only supports full length release, no provides - kernel: Do not sign the vanilla kernel (bsc#1209008). - kernel: Kernel is locked down even though secure boot is disabled (bsc#1198101, bsc#1208976). - keys: Add missing function documentation (git-fixes). - keys: Create static version of public_key_verify_signature (git-fixes). - keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes). - keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - keys: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes). - keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes). - kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes) Update config/armv7hl/default too. - kprobe: reverse kp->flags when arm_kprobe failed (git-fixes). - kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes). - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes). - kprobes: Forbid probing on trampoline and BPF code areas (git-fixes). - kprobes: Prohibit probes in gate area (git-fixes). - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes). - kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes). - kvm/vfio: Fix potential deadlock on vfio group_lock (git-fixes) - kvm/vfio: Fix potential deadlock problem in vfio (git-fixes) - kvm: Destroy target device if coalesced MMIO unregistration fails (git-fixes) - kvm: Disallow user memslot with size that exceeds 'unsigned long' (git-fixes) - kvm: Do not create VM debugfs files outside of the VM directory (git-fixes) - kvm: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes) - kvm: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes). - kvm: Prevent module exit until all VMs are freed (git-fixes) - kvm: arm64: Do not arm a hrtimer for an already pending timer (git-fixes) - kvm: arm64: Do not hypercall before EL2 init (git-fixes) - kvm: arm64: Do not return from void function (git-fixes) - kvm: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes) - kvm: arm64: Fix S1PTW handling on RO memslots (git-fixes) - kvm: arm64: Fix bad dereference on MTE-enabled systems (git-fixes) - kvm: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes) - kvm: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes) - kvm: arm64: Free hypervisor allocations if vector slot init fails (git-fixes) - kvm: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes) - kvm: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes) - kvm: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes) - kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes) - kvm: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes) - kvm: arm64: Save PSTATE early on exit (git-fixes) - kvm: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes) - kvm: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes) - kvm: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes) - kvm: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes) - kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes) - kvm: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes). - kvm: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes). - kvm: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes). - kvm: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes). - kvm: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (git-fixes). - kvm: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes). - kvm: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes). - kvm: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes). - kvm: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes). - kvm: s390: selftest: memop: Fix integer literal (git-fixes). - kvm: svm: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes). - kvm: svm: Fix benign 'bool vs. int' comparison in svm_set_cr0() (git-fixes). - kvm: svm: Fix potential overflow in SEV's send|receive_update_data() (git-fixes). - kvm: svm: Require logical ID to be power-of-2 for AVIC entry (git-fixes). - kvm: svm: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes). - kvm: svm: hyper-v: placate modpost section mismatch error (git-fixes). - kvm: vmx: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes). - kvm: vmx: Resume guest immediately when injecting #GP on ECREATE (git-fixes). - kvm: vmx: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes). - kvm: vmx: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes). - kvm: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes). - kvm: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes). - kvm: x86/pmu: Ignore pmu->global_ctrl check if vPMU does not support global_ctrl (git-fixes). - kvm: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes). - kvm: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes). - kvm: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes). - kvm: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes). - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes). - kvm: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes). - kvm: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes). - kvm: x86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes). - kvm: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes). - kvm: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes). - kvm: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes). - kvm: x86: Protect the unused bits in MSR exiting flags (git-fixes). - kvm: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes). - kvm: x86: Report deprecated x87 features in supported CPUID (git-fixes). - kvm: x86: do not set st->preempted when going back to user space (git-fixes). - kvm: x86: fix sending PV IPI (git-fixes). - kvm: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes). - kvm: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes). - lan78xx: Add missing return code checks (git-fixes). - lan78xx: Fix exception on link speed change (git-fixes). - lan78xx: Fix memory allocation bug (git-fixes). - lan78xx: Fix partial packet errors on suspend/resume (git-fixes). - lan78xx: Fix race condition in disconnect handling (git-fixes). - lan78xx: Fix race conditions in suspend/resume handling (git-fixes). - lan78xx: Fix white space and style issues (git-fixes). - lan78xx: Remove unused pause frame queue (git-fixes). - lan78xx: Remove unused timer (git-fixes). - lan78xx: Set flow control threshold to prevent packet loss (git-fixes). - leds: Fix reference to led_set_brightness() in doc (git-fixes). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes). - leds: led-class: Add missing put_device() to led_put() (git-fixes). - leds: led-core: Fix refcount leak in of_led_get() (git-fixes). - leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes). - lib/mpi: Fix buffer overrun when SG is too long (git-fixes). - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (git-fixes). - lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes). - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes). - lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes). - locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552). - locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes). - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270). - locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270). - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270). - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270). - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270). - locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270). - locking/rwsem: Make handoff bit handling more consistent (bsc#1207270). - locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270). - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270). - locking: Add missing __sched attributes (bsc#1207270). - loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes). - loop: fix ioctl calls using compat_loop_info (git-fixes). - lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852). - lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852). - lpfc: Clean up SLI-4 CQE status handling (bsc#1211852). - lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852). - lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852). - lpfc: Enhance congestion statistics collection (bsc#1211852). - lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346). - lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852). - lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852). - lpfc: update metadata - mac80211: introduce individual TWT support in AP mode (bsc#1209980). - mac80211: introduce set_radar_offchan callback (bsc#1209980). - mac80211: twt: do not use potentially unaligned pointer (bsc#1209980). - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes). - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes). - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes). - mailbox: zynqmp: Fix IPI isr handling (git-fixes). - mailbox: zynqmp: Fix typo in IPI documentation (git-fixes). - mbcache: Avoid nesting of cache->c_list_lock under bit locks (bsc#1207647). - mbcache: Fixup kABI of mb_cache_entry (bsc#1207653). - mce: fix set_mce_nospec to always unmap the whole page (git-fixes). - md/bitmap: Fix bitmap chunk size overflow issues (git-fixes). - md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes). - md/raid5: Improve performance for sequential IO (bsc#1208081). - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes). - md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes). - md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes). - md: fix a crash in mempool_free (git-fixes). - md: protect md_unregister_thread from reentrancy (git-fixes). - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes). - media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes). - media: cec: core: do not set last_initiator if tx in progress (git-fixes). - media: cec: i2c: ch7322: also select REGMAP (git-fixes). - media: coda: Add check for dcoda_iram_alloc (git-fixes). - media: coda: Add check for kmalloc (git-fixes). - media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes). - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes). - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes). - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes). - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes). - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes). - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes). - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes). - media: dvb_ca_en50221: fix a size write bug (git-fixes). - media: dvb_demux: fix a bug for the continuity counter (git-fixes). - media: i2c: Correct format propagation for st-mipid02 (git-fixes). - media: i2c: imx219: Fix binning for RAW8 capture (git-fixes). - media: i2c: imx219: Split common registers from mode tables (git-fixes). - media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes). - media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes). - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes). - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes). - media: m5mols: fix off-by-one loop termination error (git-fixes). - media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes). - media: max9286: Free control handler (git-fixes). - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes). - media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes). - media: netup_unidvb: fix use-after-free at del_timer() (git-fixes). - media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes). - media: ov5640: Fix analogue gain control (git-fixes). - media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes). - media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes). - media: platform: ti: Add missing check for devm_regulator_get (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes). - media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes). - media: rc: gpio-ir-recv: add remove function (git-fixes). - media: rcar_fdp1: Fix the correct variable assignments (git-fixes). - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes). - media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes). - media: saa7134: Use video_unregister_device for radio_dev (git-fixes). - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes). - media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes). - media: usb: Check az6007_read() return value (git-fixes). - media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes). - media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes). - media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes). - media: uvcvideo: Check controls flags before accessing them (git-fixes). - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes). - media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes). - media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes). - media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes). - media: uvcvideo: Handle cameras with invalid descriptors (git-fixes). - media: uvcvideo: Handle errors from calls to usb_string (git-fixes). - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes). - media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes). - media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes). - media: uvcvideo: Use control names from framework (git-fixes). - media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes). - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes). - media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes). - media: venus: dec: Fix handling of the start cmd (git-fixes). - media: venus: helpers: Fix ALIGN() of non power of two (git-fixes). - media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes). - mei: bus-fixup:upon error print return values of send and receive (git-fixes). - mei: bus: fix unlink on bus in error path (git-fixes). - mei: me: add meteor lake point M DID (git-fixes). - mei: pxp: Use correct macros to initialize uuid_le (git-fixes). - memory: brcmstb_dpfe: fix testing array offset after use (git-fixes). - memstick: fix memory leak if card device is never registered (git-fixes). - memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449). - meson saradc: fix clock divider mask length (git-fixes). - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes). - mfd: cs5535: Do not build on UML (git-fixes). - mfd: dln2: Fix memory leak in dln2_probe() (git-fixes). - mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes). - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes). - mfd: pm8008: Fix module autoloading (git-fixes). - mfd: rt5033: Drop rt5033-battery sub-device (git-fixes). - mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes). - mfd: stmfx: Nullify stmfx->vdd in case of error (git-fixes). - mfd: stmpe: Only disable the regulators if they are enabled (git-fixes). - mfd: tqmx86: Correct board names for TQMxE39x (git-fixes). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes). - misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes). - misc: enclosure: Fix doc for enclosure_find() (git-fixes). - misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes). - misc: fastrpc: reject new invocations during device removal (git-fixes). - misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes). - misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes). - misc: pci_endpoint_test: Re-init completion for every test (git-fixes). - mkinitrd: Replace dependency with dracut (bsc#1202353). - mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253). - mlx5: fix possible ptp queue fifo use-after-free (jsc#PED-1549). - mlx5: fix skb leak while fifo resync and push (jsc#PED-1549). - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes). - mlxsw: minimal: Fix deadlock in ports creation (git-fixes). - mlxsw: spectrum: Allow driver to load with old firmware versions (git-fixes). - mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768). - mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410). - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769). - mm: Move mm_cachep initialization to mm_init() (bsc#1212448). - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262). - mm: memcg: fix swapcached stat accounting (bsc#1209804). - mm: mmap: remove newline at the end of the trace (git-fixes). - mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034). - mm: take a page reference when removing device exclusive entries (bsc#1211025). - mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410). - mmc: atmel-mci: fix race between stop command and start of next command (git-fixes). - mmc: bcm2835: fix deferred probing (git-fixes). - mmc: block: Remove error check of hw_reset on reset (git-fixes). - mmc: block: ensure error propagation for non-blk (git-fixes). - mmc: jz4740: Work around bug on JZ4760(B) (git-fixes). - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes). - mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes). - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes). - mmc: mmci: stm32: fix max busy timeout calculation (git-fixes). - mmc: mtk-sd: fix deferred probing (git-fixes). - mmc: mvsdio: fix deferred probing (git-fixes). - mmc: omap: fix deferred probing (git-fixes). - mmc: omap_hsmmc: fix deferred probing (git-fixes). - mmc: owl: fix deferred probing (git-fixes). - mmc: sdhci-acpi: fix deferred probing (git-fixes). - mmc: sdhci-esdhc-imx: make 'no-mmc-hs400' works (git-fixes). - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes). - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes). - mmc: sdhci-spear: fix deferred probing (git-fixes). - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes). - mmc: sdhci_am654: lower power-on failed message severity (git-fixes). - mmc: sdio: fix possible resource leaks in some error paths (git-fixes). - mmc: sh_mmcif: fix deferred probing (git-fixes). - mmc: sunxi: fix deferred probing (git-fixes). - mmc: usdhi60rol0: fix deferred probing (git-fixes). - mmc: vub300: fix invalid response handling (git-fixes). - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - mt76: Make use of the helper macro kthread_run() (bsc#1209980). - mt76: Print error message when reading EEPROM from mtd failed (bsc#1209980). - mt76: add 6GHz support (bsc#1209980). - mt76: add MT_RXQ_MAIN_WA for mt7916 (bsc#1209980). - mt76: add support for setting mcast rate (bsc#1209980). - mt76: allow drivers to drop rx packets early (bsc#1209980). - mt76: clear sta powersave flag after notifying driver (bsc#1209980). - mt76: connac: add 6 GHz support for wtbl and starec configuration (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss (bsc#1209980). - mt76: connac: add support for limiting to maximum regulatory Tx power (bsc#1209980). - mt76: connac: add support for passing the cipher field in bss_info (bsc#1209980). - mt76: connac: adjust wlan_idx size from u8 to u16 (bsc#1209980). - mt76: connac: align MCU_EXT definitions with 7915 driver (bsc#1209980). - mt76: connac: enable 6GHz band for hw scan (bsc#1209980). - mt76: connac: enable hw amsdu @ 6GHz (bsc#1209980). - mt76: connac: extend mcu_get_nic_capability (bsc#1209980). - mt76: connac: fix a theoretical NULL pointer dereference in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: fix last_chan configuration in mt76_connac_mcu_rate_txpower_band (bsc#1209980). - mt76: connac: fix unresolved symbols when CONFIG_PM is unset (bsc#1209980). - mt76: connac: introduce MCU_CE_CMD macro (bsc#1209980). - mt76: connac: introduce MCU_EXT macros (bsc#1209980). - mt76: connac: introduce MCU_UNI_CMD macro (bsc#1209980). - mt76: connac: introduce is_connac_v1 utility routine (bsc#1209980). - mt76: connac: make read-only array ba_range static const (bsc#1209980). - mt76: connac: move mcu reg access utility routines in mt76_connac_lib module (bsc#1209980). - mt76: connac: move mt76_connac_chan_bw in common code (bsc#1209980). - mt76: connac: move mt76_connac_lmac_mapping in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_add_key in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_basic_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_ext_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_omac_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_gen_dl_mode in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_get_cipher in common code (bsc#1209980). - mt76: connac: move mt76_connac_mcu_rdd_cmd in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_restart in common module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_set_pm in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_wtbl_update_hdr_trans in connac module (bsc#1209980). - mt76: connac: rely on MCU_CMD macro (bsc#1209980). - mt76: connac: rely on le16_add_cpu in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - mt76: connac: remove MCU_FW_PREFIX bit (bsc#1209980). - mt76: connac: remove PHY_MODE_AX_6G configuration in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2} (bsc#1209980). - mt76: connac: set 6G phymode in single-sku support (bsc#1209980). - mt76: debugfs: fix queue reporting for mt76-usb (bsc#1209980). - mt76: debugfs: improve queue node readability (bsc#1209980). - mt76: disable BH around napi_schedule() calls (bsc#1209980). - mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs (bsc#1209980). - mt76: do not always copy ethhdr in reverse_frag0_hdr_trans (bsc#1209980). - mt76: do not reset MIB counters in get_stats callback (bsc#1209980). - mt76: eeprom: tolerate corrected bit-flips (bsc#1209980). - mt76: fill boottime_ns in Rx path (bsc#1209980). - mt76: fix antenna config missing in 6G cap (bsc#1209980). - mt76: fix boolreturn.cocci warnings (bsc#1209980). - mt76: fix dfs state issue with 160 MHz channels (bsc#1209980). - mt76: fix endianness errors in reverse_frag0_hdr_trans (bsc#1209980). - mt76: fix invalid rssi report (bsc#1209980). - mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi (bsc#1209980). - mt76: fix monitor rx FCS error in DFS channel (bsc#1209980). - mt76: fix possible OOB issue in mt76_calculate_default_rate (bsc#1209980). - mt76: fix possible pktid leak (bsc#1209980). - mt76: fix the wiphy's available antennas to the correct value (bsc#1209980). - mt76: fix timestamp check in tx_status (bsc#1209980). - mt76: fix tx status related use-after-free race on station removal (bsc#1209980). - mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes). - mt76: fix wrong HE data rate in sniffer tool (bsc#1209980). - mt76: improve signal strength reporting (bsc#1209980). - mt76: introduce packet_id idr (bsc#1209980). - mt76: make mt76_sar_capa static (bsc#1209980). - mt76: move mt76_ethtool_worker_info in mt76 module (bsc#1209980). - mt76: move mt76_sta_stats in mt76.h (bsc#1209980). - mt76: move sar utilities to mt76-core module (bsc#1209980). - mt76: move sar_capa configuration in common code (bsc#1209980). - mt76: move spin_lock_bh to spin_lock in tasklet (bsc#1209980). - mt76: mt7603: improve reliability of tx powersave filtering (bsc#1209980). - mt76: mt7603: introduce SAR support (bsc#1209980). - mt76: mt7615: add support for LG LGSBWAC02 (MT7663BUN) (bsc#1209980). - mt76: mt7615: apply cached RF data for DBDC (bsc#1209980). - mt76: mt7615: clear mcu error interrupt status on mt7663 (bsc#1209980). - mt76: mt7615: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7615: fix compiler warning on frame size (bsc#1209980). - mt76: mt7615: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7615: fix throughput regression on DFS channels (bsc#1209980). - mt76: mt7615: fix unused tx antenna mask in testmode (bsc#1209980). - mt76: mt7615: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7615: honor ret from mt7615_mcu_restart in mt7663u_mcu_init (bsc#1209980). - mt76: mt7615: in debugfs queue stats, skip wmm index 3 on mt7663 (bsc#1209980). - mt76: mt7615: introduce SAR support (bsc#1209980). - mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module (bsc#1209980). - mt76: mt7615: remove dead code in get_omac_idx (bsc#1209980). - mt76: mt7615: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7615e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7663: disable 4addr capability (bsc#1209980). - mt76: mt7663s: flush runtime-pm queue after waking up the device (bsc#1209980). - mt76: mt7663s: rely on mcu reg access utility (bsc#1209980). - mt76: mt7663u: introduce mt7663u_mcu_power_on routine (bsc#1209980). - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (bsc#1209980). - mt76: mt76x02: improve tx hang detection (bsc#1209980). - mt76: mt76x02: introduce SAR support (bsc#1209980). - mt76: mt76x02: use mt76_phy_dfs_state to determine radar detector state (bsc#1209980). - mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset (bsc#1209980). - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() (bsc#1209980). - mt76: mt7915: Fix channel state update error issue (bsc#1209980). - mt76: mt7915: add 6 GHz support (bsc#1209980). - mt76: mt7915: add HE-LTF into fixed rate command (bsc#1209980). - mt76: mt7915: add LED support (bsc#1209980). - mt76: mt7915: add WA firmware log support (bsc#1209980). - mt76: mt7915: add control knobs for thermal throttling (bsc#1209980). - mt76: mt7915: add debugfs knobs for MCU utilization (bsc#1209980). - mt76: mt7915: add default calibrated data support (bsc#1209980). - mt76: mt7915: add device id for mt7916 (bsc#1209980). - mt76: mt7915: add ethtool stats support (bsc#1209980). - mt76: mt7915: add firmware support for mt7916 (bsc#1209980). - mt76: mt7915: add mib counters to ethtool stats (bsc#1209980). - mt76: mt7915: add missing DATA4_TB_SPTL_REUSE1 to mt7915_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7915: add more MIB registers (bsc#1209980). - mt76: mt7915: add mt7915_mmio_probe() as a common probing function (bsc#1209980). - mt76: mt7915: add mt7916 calibrated data support (bsc#1209980). - mt76: mt7915: add mu-mimo and ofdma debugfs knobs (bsc#1209980). - mt76: mt7915: add some per-station tx stats to ethtool (bsc#1209980). - mt76: mt7915: add support for MT7986 (bsc#1209980). - mt76: mt7915: add support for passing chip/firmware debug data to user space (bsc#1209980). - mt76: mt7915: add twt_stats knob in debugfs (bsc#1209980). - mt76: mt7915: add tx mu/su counters to mib (bsc#1209980). - mt76: mt7915: add tx stats gathered from tx-status callbacks (bsc#1209980). - mt76: mt7915: add txfree event v3 (bsc#1209980). - mt76: mt7915: add txpower init for 6GHz (bsc#1209980). - mt76: mt7915: allow beaconing on all chains (bsc#1209980). - mt76: mt7915: change max rx len limit of hw modules (bsc#1209980). - mt76: mt7915: check band idx for bcc event (bsc#1209980). - mt76: mt7915: check for devm_pinctrl_get() failure (bsc#1209980). - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set (bsc#1209980). - mt76: mt7915: enable HE UL MU-MIMO (bsc#1209980). - mt76: mt7915: enable configured beacon tx rate (bsc#1209980). - mt76: mt7915: enable radar background detection (bsc#1209980). - mt76: mt7915: enable radar trigger on rdd2 (bsc#1209980). - mt76: mt7915: enable twt responder capability (bsc#1209980). - mt76: mt7915: enlarge wcid size to 544 (bsc#1209980). - mt76: mt7915: fix DBDC default band selection on MT7915D (bsc#1209980). - mt76: mt7915: fix DFS no radar detection event (bsc#1209980). - mt76: mt7915: fix SMPS operation fail (bsc#1209980). - mt76: mt7915: fix WMM index on DBDC cards (bsc#1209980). - mt76: mt7915: fix beamforming mib stats (bsc#1209980). - mt76: mt7915: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7915: fix eeprom fields of txpower init values (bsc#1209980). - mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_debugfs_rx_fw_monitor (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_mac_tx_free() (bsc#1209980). - mt76: mt7915: fix he_mcs capabilities for 160mhz (bsc#1209980). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs() (bsc#1209980). - mt76: mt7915: fix missing HE phy cap (bsc#1209980). - mt76: mt7915: fix phy cap in mt7915_set_stream_he_txbf_caps() (bsc#1209980). - mt76: mt7915: fix polling firmware-own status (git-fixes). - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (git-fixes). - mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta (bsc#1209980). - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup (bsc#1209980). - mt76: mt7915: fix potential NPE in TXS processing (bsc#1209980). - mt76: mt7915: fix potential memory leak of fw monitor packets (bsc#1209980). - mt76: mt7915: fix return condition in mt7915_tm_reg_backup_restore() (bsc#1209980). - mt76: mt7915: fix the muru tlv issue (bsc#1209980). - mt76: mt7915: fix the nss setting in bitrates (bsc#1209980). - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev (bsc#1209980). - mt76: mt7915: fix txbf starec TLV issues (bsc#1209980). - mt76: mt7915: fix typos in comments (bsc#1209980). - mt76: mt7915: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7915: get rid of mt7915_mcu_set_fixed_rate routine (bsc#1209980). - mt76: mt7915: honor all possible error conditions in mt7915_mcu_init() (bsc#1209980). - mt76: mt7915: improve code readability for xmit-queue handler (bsc#1209980). - mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht (bsc#1209980). - mt76: mt7915: improve starec readability of txbf (bsc#1209980). - mt76: mt7915: improve wmm index allocation (bsc#1209980). - mt76: mt7915: initialize smps mode in mt7915_mcu_sta_rate_ctrl_tlv() (bsc#1209980). - mt76: mt7915: introduce SAR support (bsc#1209980). - mt76: mt7915: introduce __mt7915_get_tsf routine (bsc#1209980). - mt76: mt7915: introduce band_idx in mt7915_phy (bsc#1209980). - mt76: mt7915: introduce bss coloring support (bsc#1209980). - mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy (bsc#1209980). - mt76: mt7915: introduce mt76_vif in mt7915_vif (bsc#1209980). - mt76: mt7915: introduce mt7915_mac_add_twt_setup routine (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_beacon_check_caps() (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command (bsc#1209980). - mt76: mt7915: introduce mt7915_set_radar_background routine (bsc#1209980). - mt76: mt7915: introduce rdd_monitor debugfs node (bsc#1209980). - mt76: mt7915: move pci specific code back to pci.c (bsc#1209980). - mt76: mt7915: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7915: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7915: refine register definition (bsc#1209980). - mt76: mt7915: rely on mt76_connac definitions (bsc#1209980). - mt76: mt7915: rely on mt76_connac_get_phy utilities (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_add_tlv routine (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_sta_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_wtbl_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_init_download (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_patch_sem_ctrl/mt76_connac_mcu_start_patch (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_set_rts_thresh (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_basic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_uapsd (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_start_firmware (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_generic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_hdr_trans_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ht_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_smps_tlv (bsc#1209980). - mt76: mt7915: remove dead code in debugfs code (bsc#1209980). - mt76: mt7915: remove duplicated defs in mcu.h (bsc#1209980). - mt76: mt7915: remove mt7915_mcu_add_he() (bsc#1209980). - mt76: mt7915: rename debugfs tx-queues (bsc#1209980). - mt76: mt7915: report radar pattern if detected by rdd2 (bsc#1209980). - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate (bsc#1209980). - mt76: mt7915: rework .set_bitrate_mask() to support more options (bsc#1209980). - mt76: mt7915: rework debugfs fixed-rate knob (bsc#1209980). - mt76: mt7915: rework debugfs queue info (bsc#1209980). - mt76: mt7915: rework dma.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework eeprom.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework mt7915_mcu_sta_muru_tlv() (bsc#1209980). - mt76: mt7915: rework starec TLV tags (bsc#1209980). - mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex (bsc#1209980). - mt76: mt7915: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7915: set VTA bit in tx descriptor (bsc#1209980). - mt76: mt7915: set band1 TGID field in tx descriptor (bsc#1209980). - mt76: mt7915: set bssinfo/starec command when adding interface (bsc#1209980). - mt76: mt7915: set muru platform type (bsc#1209980). - mt76: mt7915: simplify conditional (bsc#1209980). - mt76: mt7915: switch proper tx arbiter mode in testmode (bsc#1209980). - mt76: mt7915: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7915: update mac timing settings (bsc#1209980). - mt76: mt7915: update max_mpdu_size in mt7915_mcu_sta_amsdu_tlv() (bsc#1209980). - mt76: mt7915: update mt7915_chan_mib_offs for mt7916 (bsc#1209980). - mt76: mt7915: update rx rate reporting for mt7916 (bsc#1209980). - mt76: mt7915: use min_t() to make code cleaner (bsc#1209980). - mt76: mt7915e: Add a hwmon attribute to get the actual throttle state (bsc#1209980). - mt76: mt7915e: Enable thermal management by default (bsc#1209980). - mt76: mt7915e: Fix degraded performance after temporary overheat (bsc#1209980). - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (git-fixes). - mt76: mt7921: add 6GHz support (bsc#1209980). - mt76: mt7921: add MT7921_COMMON module (bsc#1209980). - mt76: mt7921: add MU EDCA cmd support (bsc#1209980). - mt76: mt7921: add delay config for sched scan (bsc#1209980). - mt76: mt7921: add mt7921u driver (bsc#1209980). - mt76: mt7921: add per-vif counters in ethtool (bsc#1209980). - mt76: mt7921: add some more MIB counters (bsc#1209980). - mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb (bsc#1209980). - mt76: mt7921: add support for PCIe ID 0x0608/0x0616 (bsc#1209980). - mt76: mt7921: add support for tx status reporting (bsc#1209980). - mt76: mt7921: clear pm->suspended in mt7921_mac_reset_work (bsc#1209980). - mt76: mt7921: disable 4addr capability (bsc#1209980). - mt76: mt7921: disable runtime pm for usb (bsc#1209980). - mt76: mt7921: do not always disable fw runtime-pm (bsc#1209980). - mt76: mt7921: do not enable beacon filter when IEEE80211_CONF_CHANGE_MONITOR is set (bsc#1209980). - mt76: mt7921: do not update pm states in case of error (git-fixes). - mt76: mt7921: fix MT7921E reset failure (bsc#1209980). - mt76: mt7921: fix Wformat build warning (bsc#1209980). - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7921: fix boolreturn.cocci warning (bsc#1209980). - mt76: mt7921: fix build regression (bsc#1209980). - mt76: mt7921: fix endianness issues in mt7921_mcu_set_tx() (bsc#1209980). - mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap (bsc#1209980). - mt76: mt7921: fix ht mcs in mt7921_mac_add_txs_skb() (bsc#1209980). - mt76: mt7921: fix injected MPDU transmission to not use HW A-MSDU (bsc#1209980). - mt76: mt7921: fix kernel crash at mt7921_pci_remove (git-fixes). - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (git-fixes). - mt76: mt7921: fix mt7921s Kconfig (bsc#1209980). - mt76: mt7921: fix network buffer leak by txs missing (bsc#1209980). - mt76: mt7921: fix possible NULL pointer dereference in mt7921_mac_write_txwi (bsc#1209980). - mt76: mt7921: fix up the monitor mode (bsc#1209980). - mt76: mt7921: fix xmit-queue dump for usb and sdio (bsc#1209980). - mt76: mt7921: forbid the doze mode when coredump is in progress (bsc#1209980). - mt76: mt7921: get rid of monitor_vif (bsc#1209980). - mt76: mt7921: get rid of mt7921_mcu_get_eeprom (bsc#1209980). - mt76: mt7921: get rid of mt7921_wait_for_mcu_init declaration (bsc#1209980). - mt76: mt7921: honor mt76_connac_mcu_set_rate_txpower return value in mt7921_config (bsc#1209980). - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter (bsc#1209980). - mt76: mt7921: introduce 160 MHz channel bandwidth support (bsc#1209980). - mt76: mt7921: introduce mt7921s support (bsc#1209980). - mt76: mt7921: introduce stats reporting through ethtool (bsc#1209980). - mt76: mt7921: make all event parser reusable between mt7921s and mt7921e (bsc#1209980). - mt76: mt7921: make mt7921_init_tx_queues static (bsc#1209980). - mt76: mt7921: move mt76_connac_mcu_set_hif_suspend to bus-related files (bsc#1209980). - mt76: mt7921: move mt7921_init_hw in a dedicated work (bsc#1209980). - mt76: mt7921: move mt7921_queue_rx_skb to mac.c (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_complete_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_prepare_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_status_data in mac common code (bsc#1209980). - mt76: mt7921: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7921: reduce log severity levels for informative messages (bsc#1209980). - mt76: mt7921: refactor dma.c to be pcie specific (bsc#1209980). - mt76: mt7921: refactor init.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mac.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mcu.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mt7921_mcu_send_message (bsc#1209980). - mt76: mt7921: rely on mcu_get_nic_capability (bsc#1209980). - mt76: mt7921: remove dead definitions (bsc#1209980). - mt76: mt7921: remove duplicated code in mt7921_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7921: remove mcu rate reporting code (bsc#1209980). - mt76: mt7921: remove mt7921_sta_stats (bsc#1209980). - mt76: mt7921: report tx rate directly from tx status (bsc#1209980). - mt76: mt7921: robustify hardware initialization flow (bsc#1209980). - mt76: mt7921: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7921: set EDCA parameters with the MCU CE command (bsc#1209980). - mt76: mt7921: start reworking tx rate reporting (bsc#1209980). - mt76: mt7921: toggle runtime-pm adding a monitor vif (bsc#1209980). - mt76: mt7921: update mib counters dumping phy stats (bsc#1209980). - mt76: mt7921: update mt7921_skb_add_usb_sdio_hdr to support usb (bsc#1209980). - mt76: mt7921: use correct iftype data on 6GHz cap init (bsc#1209980). - mt76: mt7921: use mt76_hw instead of open coding it (bsc#1209980). - mt76: mt7921: use physical addr to unify register access (bsc#1209980). - mt76: mt7921e: fix possible probe failure after reboot (bsc#1198835). - mt76: mt7921e: make dev->fw_assert usage consistent (bsc#1209980). - mt76: mt7921e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7921s: add reset support (bsc#1209980). - mt76: mt7921s: clear MT76_STATE_MCU_RUNNING immediately after reset (bsc#1209980). - mt76: mt7921s: fix a possible memory leak in mt7921_load_patch (bsc#1209980). - mt76: mt7921s: fix bus hang with wrong privilege (bsc#1209980). - mt76: mt7921s: fix cmd timeout in throughput test (bsc#1209980). - mt76: mt7921s: fix firmware download random fail (bsc#1209980). - mt76: mt7921s: fix missing fc type/sub-type for 802.11 pkts (bsc#1209980). - mt76: mt7921s: fix mt7921s_mcu_[fw|drv]_pmctrl (bsc#1209980). - mt76: mt7921s: fix possible kernel crash due to invalid Rx count (bsc#1209980). - mt76: mt7921s: fix possible sdio deadlock in command fail (bsc#1209980). - mt76: mt7921s: fix suspend error with enlarging mcu timeout value (bsc#1209980). - mt76: mt7921s: fix the device cannot sleep deeply in suspend (bsc#1209980). - mt76: mt7921s: make pm->suspended usage consistent (bsc#1209980). - mt76: mt7921s: run sleep mode by default (bsc#1209980). - mt76: mt7921s: update mt7921s_wfsys_reset sequence (bsc#1209980). - mt76: only access ieee80211_hdr after mt76_insert_ccmp_hdr (bsc#1209980). - mt76: only set rx radiotap flag from within decoder functions (bsc#1209980). - mt76: redefine mt76_for_each_q_rx to adapt mt7986 changes (bsc#1209980). - mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature (bsc#1209980). - mt76: remove mt76_wcid pointer from mt76_tx_status_check signature (bsc#1209980). - mt76: remove variable set but not used (bsc#1209980). - mt76: reverse the first fragmented frame to 802.11 (bsc#1209980). - mt76: schedule status timeout at dma completion (bsc#1209980). - mt76: sdio: disable interrupt in mt76s_sdio_irq (bsc#1209980). - mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines (bsc#1209980). - mt76: sdio: extend sdio module to support CONNAC2 (bsc#1209980). - mt76: sdio: honor the largest Tx buffer the hardware can support (bsc#1209980). - mt76: sdio: introduce parse_irq callback (bsc#1209980). - mt76: sdio: lock sdio when it is needed (bsc#1209980). - mt76: sdio: move common code in mt76_sdio module (bsc#1209980). - mt76: set wlan_idx_hi on mt7916 (bsc#1209980). - mt76: split single ldpc cap bit into bits (bsc#1209980). - mt76: substitute sk_buff_head status_list with spinlock_t status_lock (bsc#1209980). - mt76: support reading EEPROM data embedded in fdt (bsc#1209980). - mt76: switch from 'pci_' to 'dma_' API (bsc#1209980). - mt76: testmode: add support to set MAC (bsc#1209980). - mt76: usb: add req_type to ___mt76u_rr signature (bsc#1209980). - mt76: usb: add req_type to ___mt76u_wr signature (bsc#1209980). - mt76: usb: introduce __mt76u_init utility routine (bsc#1209980). - mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD (bsc#1209980). - mt76: use a separate CCMP PN receive counter for management frames (bsc#1209980). - mt76: use le32/16_get_bits() whenever possible (bsc#1209980). - mt76x02: improve mac error check/reset reliability (bsc#1209980). - mtd: core: fix error path for nvmem provider (git-fixes). - mtd: core: fix nvmem error reporting (git-fixes). - mtd: core: provide unique name for nvmem device, take two (git-fixes). - mtd: dataflash: remove duplicate SPI ID table (git-fixes). - mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes). - mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes). - mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes). - mtd: rawnand: marvell: ensure timing values are written (git-fixes). - mtd: rawnand: meson: fix bitmask for length in command word (git-fixes). - mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes). - mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes). - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes). - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes). - mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes). - mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes). - mtd: spi-nor: Fix a trivial typo (git-fixes). - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes). - mtd: spi-nor: core: fix implicit declaration warning (git-fixes). - mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes). - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes). - mtdblock: tolerate corrected bit-flips (git-fixes). - nbd: Fix hung on disconnect request if socket is closed before (git-fixes). - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes). - nbd: Fix hungtask when nbd_config_put (git-fixes). - nbd: add missing definition of pr_fmt (git-fixes). - nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes). - nbd: fix io hung while disconnecting device (git-fixes). - nbd: fix race between nbd_alloc_config() and module removal (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#PED-1549). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253). - net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253). - net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253). - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253). - net/mlx5: Avoid recovery in probe flows (jsc#PED-1549 bsc#1211794). - net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#PED-1549). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253). - net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253). - net/mlx5: Collect command failures data only for known commands (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#PED-1549). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253). - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#PED-1549). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253). - net/mlx5: Devcom, serialize devcom registration (jsc#PED-1549). - net/mlx5: Disable eswitch before waiting for VF pages (jsc#PED-1549). - net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253). - net/mlx5: Do not use already freed action pointer (jsc#SLE-19253). - net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#PED-1549). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#PED-1549). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#PED-1549). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#PED-1549). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#PED-1549). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5: E-switch, Fix switchdev mode after devlink reload (jsc#PED-1549). - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules (jsc#PED-1549). - net/mlx5: ECPF, wait for VF pages only after disabling host PFs (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253). - net/mlx5: Expose SF firmware pages counter (jsc#PED-1549). - net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253). - net/mlx5: Fix RoCE setting at HCA level (jsc#PED-1549). - net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253). - net/mlx5: Fix command stats access after free (jsc#PED-1549). - net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253). - net/mlx5: Fix error message when failing to allocate device memory (jsc#PED-1549). - net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253). - net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253). - net/mlx5: Fix io_eq_size and event_eq_size params validation (jsc#PED-1549). - net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253). - net/mlx5: Fix ptp max frequency adjustment range (jsc#PED-1549). - net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253). - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#SLE-19253). - net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#PED-1549). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253). - net/mlx5: Handle pairing of E-switch via uplink un/load APIs (jsc#PED-1549). - net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253). - net/mlx5: Lag, fix failure to cancel delayed bond work (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#PED-1549). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253). - net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253). - net/mlx5: SF, Drain health before removing device (jsc#PED-1549). - net/mlx5: SF, Drain health before removing device (jsc#SLE-19253). - net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253). - net/mlx5: Serialize module cleanup with reload and remove (jsc#PED-1549). - net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253). - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver (jsc#PED-1549). - net/mlx5: Store page counters in a single array (jsc#PED-1549). - net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253). - net/mlx5: add IFC bits for bypassing port select flow table (git-fixes) - net/mlx5: check attr pointer validity before dereferencing it (jsc#PED-1549). - net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253). - net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253). - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253). - net/mlx5: fs, fail conflicting actions (jsc#SLE-19253). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#PED-1549). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253). - net/mlx5: fw_tracer, Fix event handling (jsc#PED-1549). - net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#PED-1549). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#PED-1549). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#PED-1549). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#PED-1549). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253). - net/mlx5e: CT: Fix ct debugfs folder name (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253). - net/mlx5e: Do not cache tunnel offloads capability (jsc#PED-1549). - net/mlx5e: Do not clone flow post action attributes second time (jsc#PED-1549). - net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253). - net/mlx5e: Do not support encap rules with gbp option (jsc#PED-1549). - net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253). - net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253). - net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253). - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253). - net/mlx5e: Fix RX reporter for XSK RQs (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253). - net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253). - net/mlx5e: Fix cleanup null-ptr deref on encap lock (jsc#PED-1549). - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (jsc#PED-1549). - net/mlx5e: Fix deadlock in tc route query code (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#PED-1549). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253). - net/mlx5e: Fix macsec ASO context alignment (jsc#PED-1549). - net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (jsc#PED-1549). - net/mlx5e: Fix macsec ssci attribute handling in offload path (jsc#PED-1549). - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253). - net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253). - net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253). - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253). - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (jsc#PED-1549). - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253). - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253). - net/mlx5e: Initialize link speed to zero (jsc#PED-1549). - net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253). - net/mlx5e: Nullify table pointer when failing to create (jsc#PED-1549). - net/mlx5e: Overcome slow response for first macsec ASO WQE (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5e: Remove redundant xsk pointer check in mlx5e_mpwrq_validate_xsk (jsc#PED-1549). - net/mlx5e: Set decap action based on attr for sample (jsc#PED-1549). - net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253). - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253). - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253). - net/mlx5e: Use correct encap attribute during invalidation (jsc#PED-1549). - net/mlx5e: Verify dev is present for fix features ndo (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#PED-1549). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253). - net/net_failover: fix txq exceeding warning (git-fixes). - net/rose: Fix to not accept on connected socket (git-fixes). - net/sched: fix initialization order when updating chain 0 head (git-fixes). - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes). - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes). - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842). - net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes). - net/x25: Fix to not accept on connected socket (git-fixes). - net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes). - net: add missing include in include/net/gro.h (git-fixes). - net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes). - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes). - net: devlink: Fix missing mutex_unlock() call (git-fixes). - net: ena: Account for the number of processed bytes in XDP (git-fixes). - net: ena: Do not register memory info on XDP exchange (git-fixes). - net: ena: Fix rx_copybreak value update (git-fixes). - net: ena: Fix toeplitz initial hash value (git-fixes). - net: ena: Set default value for RX interrupt moderation (git-fixes). - net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes). - net: ena: Use bitmask to indicate packet redirection (git-fixes). - net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes). - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes). - net: hns3: fix reset delay time to avoid configuration timeout (git-fixes). - net: hns3: fix sending pfc frames after reset issue (git-fixes). - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes). - net: linkwatch: be more careful about dev->linkwatch_dev_tracker (git-fixes). - net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982). - net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022). - net: mana: Add support for jumbo frame (bsc#1210551). - net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153). - net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551). - net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022). - net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022). - net: mana: Enable RX path to handle various MTU sizes (bsc#1210551). - net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875). - net: mana: Fix accessing freed irq affinity_hint (bsc#1208153). - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes). - net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022). - net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022). - net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022). - net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022). - net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551). - net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551). - net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022). - net: mana: Use napi_build_skb in RX path (bsc#1210551). - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes). - net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes). - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#PED-1549). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#SLE-19253). - net: natsemi: fix hw address initialization for jazz and xtensa (git-fixes). - net: of: fix stub of_net helpers for CONFIG_NET=n (git-fixes). - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes). - net: phy: Ensure state transitions are processed from phy_stop() (git-fixes). - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes). - net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes). - net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes). - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes). - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes). - net: phy: mxl-gpy: add MDINT workaround (git-fixes). - net: phy: nxp-c45-tja11xx: add remove callback (git-fixes). - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes). - net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes). - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes). - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes). - net: qrtr: correct types of trace event parameters (git-fixes). - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes). - net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes). - net: tun: avoid disabling NAPI twice (git-fixes). - net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes). - net: tun: stop NAPI when detaching queues (git-fixes). - net: tun: unlink NAPI from device on destruction (git-fixes). - net: usb: asix: remove redundant assignment to variable reg (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes). - net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes). - net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - net: usb: use eth_hw_addr_set() (git-fixes). - net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes). - netrom: Fix use-after-free caused by accept on already connected socket (git-fixes). - netrom: Fix use-after-free of a listening socket (git-fixes). - nfc: change order inside nfc_se_io error path (git-fixes). - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes). - nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes). - nfc: pn533: initialize struct pn533_out_arg properly (git-fixes). - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes). - nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes). - nfp: flower-ct: fix error return code in nfp_fl_ct_add_offload() (git-fixes). - nfp: flower: fix ingress police using matchall filter (git-fixes). - nfp: only report pause frame configuration for physical device (git-fixes). - nfs4: Fix kmemleak when allocate slot failed (git-fixes). - nfs4trace: fix state manager flag printing (git-fixes). - nfs: Always initialise fattr->label in nfs_fattr_alloc() (git-fixes). - nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes). - nfs: Cleanup unused rpc_clnt variable (git-fixes). - nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes). - nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes). - nfs: Fix an Oops in nfs_d_automount() (git-fixes). - nfs: Further optimisations for 'ls -l' (git-fixes). - nfs: Pass i_size to fscache_unuse_cookie() when a file is released (git-fixes). - nfs: fix disabling of swap (git-fixes). - nfs: nfs4clinet: check the return value of kstrdup() (git-fixes). - nfs: nfsiod should not block forever in mempool_alloc() (git-fixes). - nfsd: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (git-fixes). - nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes). - nfsd: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (git-fixes). - nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes). - nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes). - nfsd: Fix a memory leak in an error handling path (git-fixes). - nfsd: Fix handling of oversized NFSv4 COMPOUND requests (git-fixes). - nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes). - nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - nfsd: Protect against filesystem freezing (git-fixes). - nfsd: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - nfsd: call op_release, even when op_func returns an error (git-fixes). - nfsd: callback request does not use correct credential for AUTH_SYS (git-fixes). - nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes). - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes). - nfsd: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes). - nfsd: fix problems with cleanup on errors in nfsd4_copy (git-fixes). - nfsd: fix race to check ls_layouts (git-fixes). - nfsd: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes). - nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes). - nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes). - nfsd: shut down the NFSv4 state objects before the filecache (git-fixes). - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes). - nfsd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes). - nfsv3: handle out-of-order write replies (bsc#1205544). - nfsv4 expose nfs_parse_server_name function (git-fixes). - nfsv4 handle port presence in fs_location server string (git-fixes). - nfsv4 only print the label when its queried (git-fixes). - nfsv4 remove zero number of fs_locations entries error check (git-fixes). - nfsv4 store server support for fs_location attribute (git-fixes). - nfsv4.1 provide mount option to toggle trunking discovery (git-fixes). - nfsv4.1 query for fs_location attr on a new file system (git-fixes). - nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes). - nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - nfsv4.2: Fix initialisation of struct nfs4_label (git-fixes). - nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes). - nfsv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - nfsv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes). - nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes). - nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes). - nfsv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes). - nfsv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - nfsv4: Fix a potential state reclaim deadlock (git-fixes). - nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - nfsv4: Fix hangs when recovering open state after a server reboot (git-fixes). - nfsv4: Protect the state recovery thread against direct reclaim (git-fixes). - nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes). - nfsv4: keep state manager thread active if swap is enabled (git-fixes). - nilfs2: do not write dirty data after degenerating to read-only (git-fixes). - nilfs2: fix buffer corruption due to concurrent device reads (git-fixes). - nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes). - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes). - nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes). - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes). - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes). - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes). - nilfs2: fix sysfs interface lifetime (git-fixes). - nilfs2: fix underflow in second superblock position calculations (git-fixes). - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes). - nilfs2: initialize unused bytes in segment summary blocks (git-fixes). - nouveau: fix client work fence deletion race (git-fixes). - ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes). - ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes). - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes). - ntb: ntb_tool: Add check for devm_kcalloc (git-fixes). - ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes). - null_blk: fix ida error handling in null_add_dev() (git-fixes). - nvdimm: disable namespace on error (bsc#1166486). - nvme initialize core quirks before calling nvme_init_subsystem (git-fixes). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-core: fix dev_pm_qos memleak (git-fixes). - nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes). - nvme-core: fix memory leak in dhchap_secret_store (git-fixes). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes). - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (git-fixes). - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes). - nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes). - nvme-multipath: fix hang when disk goes live over reconnect (git-fixes). - nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes). - nvme-multipath: support io stats on the mpath device (bsc#1210565). - nvme-pci: add bogus ID quirk for ADATA SX6000PNP (bsc#1207827). - nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes). - nvme-pci: add quirks for Samsung X5 SSDs (git-fixes). - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes). - nvme-pci: clear the prp2 field when not used (git-fixes). - nvme-pci: disable write zeroes on various Kingston SSD (git-fixes). - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes). - nvme-pci: fix doorbell buffer value endianness (git-fixes). - nvme-pci: fix mempool alloc size (git-fixes). - nvme-pci: fix page size checks (git-fixes). - nvme-pci: fix timeout request state check (git-fixes). - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes). - nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes). - nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: always fail a request when sending it failed (bsc#1208902). - nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes). - nvme-tcp: fix bogus request completion when failing to send AER (git-fixes). - nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes). - nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes). - nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes). - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes). - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes). - nvme: add device name to warning in uuid_show() (git-fixes). - nvme: also return I/O command effects from nvme_command_effects (git-fixes). - nvme: bring back auto-removal of deleted namespaces during sequential scan (git-fixes). - nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes). - nvme: check for duplicate identifiers earlier (git-fixes). - nvme: cleanup __nvme_check_ids (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes). - nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes). - nvme: fix async event trace event (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix handling single range discard request (git-fixes). - nvme: fix interpretation of DMRSL (git-fixes). - nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes). - nvme: fix passthrough csi check (git-fixes). - nvme: fix per-namespace chardev deletion (git-fixes). - nvme: fix the CRIMS and CRWMS definitions to match the spec (git-fixes). - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes). - nvme: fix the name of Zone Append for verbose logging (git-fixes). - nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes). - nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes). - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes). - nvme: introduce nvme_start_request (bsc#1210565). - nvme: move nvme_multi_css into nvme.h (git-fixes). - nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes). - nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes). - nvme: return err on nvme_init_non_mdts_limits fail (git-fixes). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: set dma alignment to dword (git-fixes). - nvme: set non-mdts limits in nvme_scan_work (git-fixes). - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (git-fixes). - nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes). - nvmet-tcp: add bounds check on Transfer Tag (git-fixes). - nvmet-tcp: fix incomplete data digest send (git-fixes). - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes). - nvmet-tcp: fix regression in data_digest calculation (git-fixes). - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes). - nvmet: add helpers to set the result field for connect commands (git-fixes). - nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes). - nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes). - nvmet: fix I/O Command Set specific Identify Controller (git-fixes). - nvmet: fix Identify Active Namespace ID list handling (git-fixes). - nvmet: fix Identify Controller handling (git-fixes). - nvmet: fix Identify Namespace handling (git-fixes). - nvmet: fix a memory leak (git-fixes). - nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes). - nvmet: fix a use-after-free (git-fixes). - nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes). - nvmet: fix mar and mor off-by-one errors (git-fixes). - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: force reconnect when number of queue changes (git-fixes). - nvmet: looks at the passthrough controller when initializing CAP (git-fixes). - nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes). - nvmet: only allocate a single slab for bvecs (git-fixes). - nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes). - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes). - objtool: Add a missing comma to avoid string concatenation (bsc#1207328). - ocfs2: Fix data corruption after failed write (bsc#1208542). - ocfs2: clear dinode links count in case of error (bsc#1207650). - ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649). - ocfs2: fix crash when mount with quota enabled (bsc#1207640). - ocfs2: fix defrag path triggering jbd2 ASSERT (bsc#1199304). - ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes). - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes). - ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652). - ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651). - ocfs2: fix non-auto defrag path not working issue (bsc#1199304). - ocfs2: fix non-auto defrag path not working issue (git-fixes). - ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770). - ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768). - ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771). - octeon: constify netdev->dev_addr (git-fixes). - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes). - octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes). - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes). - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes). - of/address: Return an error when no valid dma-ranges are found (git-fixes). - opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes). - pNFS/filelayout: Fix coalescing test for single DS (git-fixes). - panic: Consolidate open-coded panic_on_warn checks (bsc#1207328). - panic: Introduce warn_limit (bsc#1207328). - panic: unset panic_on_warn inside panic() (bsc#1207328). - pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes). - pci/aspm: Remove pcie_aspm_pm_state_change() (git-fixes). - pci/dpc: Await readiness of secondary bus after reset (git-fixes). - pci/edr: Clear Device Status after EDR error recovery (git-fixes). - pci/iov: Enlarge virtfn sysfs name buffer (git-fixes). - pci/pm: Always disable PTM for all devices during suspend (git-fixes). - pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes). - pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes). - pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes). - pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes). - pci: Add ACS quirk for Wangxun NICs (git-fixes). - pci: Add SolidRun vendor ID (git-fixes). - pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes). - pci: Align extra resources for hotplug bridges properly (git-fixes). - pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes). - pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes). - pci: Fix dropping valid root bus resources with .end = zero (git-fixes). - pci: Reduce warnings on possible RW1C corruption (git-fixes). - pci: Release resource invalidated by coalescing (git-fixes). - pci: Take other bus devices into account when distributing resources (git-fixes). - pci: Unify delay handling for reset and resume (git-fixes). - pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes). - pci: aardvark: Fix link training (git-fixes). - pci: cadence: Fix Gen2 Link Retraining process (git-fixes). - pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes). - pci: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes). - pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes). - pci: ftpci100: Release the clock resources (git-fixes). - pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes). - pci: hv: Add a per-bus mutex state_lock (bsc#1207185). - pci: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185). - pci: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185). - pci: hv: Use async probing to reduce boot time (bsc#1207185). - pci: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185). - pci: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes). - pci: imx6: Install the fault handler only on compatible match (git-fixes). - pci: loongson: Add more devices that need MRRS quirk (git-fixes). - pci: loongson: Prevent LS7A MRRS increases (git-fixes). - pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes). - pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes). - pci: pciehp: Cancel bringup sequence if card is not present (git-fixes). - pci: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes). - pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes). - pci: qcom: Fix host-init error handling (git-fixes). - pci: qcom: Fix pipe clock imbalance (git-fixes). - pci: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes). - pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes). - pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes). - pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes). - pci: rockchip: Set address alignment for endpoint mode (git-fixes). - pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes). - pci: rockchip: Write PCI Device ID to correct register (git-fixes). - pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes). - pci: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - pci: vmd: Reset VMD config register between soft reboots (git-fixes). - pci: xgene: Revert 'PCI: xgene: Use inbound resources for setup' (git-fixes). - perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes). - perf/core: Call LSM hook after copying perf_event_attr (git fixes). - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes). - perf/core: Fix the same task check in perf_event_set_output (git fixes). - perf/core: Inherit event_caps (git fixes). - perf/x86/amd: fix potential integer overflow on shift of a int (git fixes). - perf/x86/intel/cstate: Add Emerald Rapids (PED-4396). - perf/x86/intel/ds: Fix precise store latency handling (git fixes). - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes). - perf/x86/intel/pt: Fix sampling using single range output (git fixes). - perf/x86/intel/pt: Relax address filter validation (git fixes). - perf/x86/intel/uncore: Add Emerald Rapids (git fixes). - perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes). - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes). - perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes). - perf/x86/intel: Add Emerald Rapids (git fixes). - perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes). - perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes). - perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes). - perf/x86/intel: Fix event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for ADL (git fixes). - perf/x86/intel: Fix pebs event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for SPR (git fixes). - perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes). - perf/x86/msr: Add Emerald Rapids (git fixes). - perf/x86/rapl: Add support for Intel AlderLake-N (git fixes). - perf/x86/rapl: Add support for Intel Emerald Rapids (PED-4394). - perf/x86/rapl: Treat Tigerlake like Icelake (git fixes). - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes). - perf/x86/rapl: fix AMD event handling (git fixes). - perf/x86/uncore: Add Raptor Lake uncore support (git fixes). - perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes). - perf/x86/uncore: Add new Raptor Lake S support (git fixes). - perf/x86/uncore: Clean up uncore_pci_ids (git fixes). - perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf: Always wake the parent event (git fixes). - perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes). - perf: Fix possible memleak in pmu_dev_alloc() (git fixes). - perf: fix perf_event_context->time (git fixes). - phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes). - phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes). - phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes). - phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes). - phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes). - phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes). - pinctrl: amd: Disable and mask interrupts on resume (git-fixes). - pinctrl: aspeed: Fix confusing types in return value (git-fixes). - pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes). - pinctrl: at91-pio4: fix domain name assignment (git-fixes). - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes). - pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes). - pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes). - pinctrl: mediatek: Initialize variable *buf to zero (git-fixes). - pinctrl: mediatek: fix coding style (git-fixes). - pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes). - pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes). - pinctrl: ocelot: Fix alt mode for ocelot (git-fixes). - pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes). - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes). - pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes). - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes). - pinctrl: single: fix potential NULL dereference (git-fixes). - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes). - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes). - platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes). - platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd: Fix refcount leak in amd_pmc_probe (bsc#1210644). - platform/x86/amd: pmc: Add a module parameter to disable workarounds (bsc#1210644). - platform/x86/amd: pmc: Add a workaround for an s0i3 issue on Cezanne (bsc#1210644). - platform/x86/amd: pmc: Add defines for STB events (bsc#1210644). - platform/x86/amd: pmc: Add line break for readability (bsc#1210644). - platform/x86/amd: pmc: Add new ACPI ID AMDI0009 (bsc#1210644). - platform/x86/amd: pmc: Add num_samples message id support to STB (bsc#1210644). - platform/x86/amd: pmc: Add sysfs files for SMU (bsc#1210644). - platform/x86/amd: pmc: Always write to the STB (bsc#1210644). - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN (bsc#1210644). - platform/x86/amd: pmc: Do not dump data after resume from s0i3 on picasso (git-fixes). - platform/x86/amd: pmc: Do not try to read SMU version on Picasso (git-fixes). - platform/x86/amd: pmc: Fix build without debugfs (bsc#1210644). - platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() (bsc#1210644). - platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso (git-fixes). - platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` (git-fixes). - platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init (git-fixes). - platform/x86/amd: pmc: Read SMU version during suspend on Cezanne systems (bsc#1210644). - platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: Utilize SMN index 0 for driver probe (git-fixes). - platform/x86/amd: pmc: Write dummy postcode into the STB DRAM (bsc#1210644). - platform/x86/amd: pmc: add CONFIG_SERIO dependency (git-fixes). - platform/x86/amd: pmc: differentiate STB/SMU messaging prints (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_SUSPEND checks (bsc#1210644). - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes). - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420). - platform/x86: ISST: Remove 8 socket limit (bsc#1211836). - platform/x86: Move AMD platform drivers to separate directory (bsc#1210644). - platform/x86: amd-pmc: Add a message to print resume time info (bsc#1210644). - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Smart Trace Buffer (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Spill to DRAM STB feature (bsc#1210644). - platform/x86: amd-pmc: Avoid reading SMU version at probe time (bsc#1210644). - platform/x86: amd-pmc: Check s0i3 cycle status (bsc#1210644). - platform/x86: amd-pmc: Correct usage of SMU version (git-fixes). - platform/x86: amd-pmc: Downgrade dev_info message to dev_dbg (bsc#1210644). - platform/x86: amd-pmc: Drop CPU QoS workaround (bsc#1210644). - platform/x86: amd-pmc: Drop check for valid alarm time (bsc#1210644). - platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes). - platform/x86: amd-pmc: Fix build error unused-function (bsc#1210644). - platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes). - platform/x86: amd-pmc: Fix compilation without CONFIG_SUSPEND (bsc#1210644). - platform/x86: amd-pmc: Make amd_pmc_stb_debugfs_fops static (bsc#1210644). - platform/x86: amd-pmc: Move FCH init to first use (bsc#1210644). - platform/x86: amd-pmc: Move SMU logging setup out of init (bsc#1210644). - platform/x86: amd-pmc: Move to later in the suspend process (bsc#1210644). - platform/x86: amd-pmc: Only report STB errors when STB enabled (bsc#1210644). - platform/x86: amd-pmc: Output error codes in messages (bsc#1210644). - platform/x86: amd-pmc: Send command to dump data after clearing OS_HINT (bsc#1210644). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1210644). - platform/x86: amd-pmc: Shuffle location of amd_pmc_get_smu_version() (bsc#1210644). - platform/x86: amd-pmc: Simplify error handling and store the pci_dev in amd_pmc_dev structure (bsc#1210644). - platform/x86: amd-pmc: Validate entry into the deepest state on resume (bsc#1210644). - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd` (bsc#1210644). - platform/x86: amd-pmc: fix compilation without CONFIG_RTC_SYSTOHC_DEVICE (bsc#1210644). - platform/x86: amd-pmc: uninitialized variable in amd_pmc_s2d_init() (bsc#1210644). - platform/x86: amd: pmc: Remove __maybe_unused from amd_pmc_suspend_handler() (bsc#1210644). - platform/x86: amd: pmc: provide user message where s0ix is not supported (bsc#1210644). - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes). - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes). - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes). - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes). - platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes). - platform/x86: hp-wmi: Support touchpad on/off (git-fixes). - platform/x86: intel-uncore-freq: add Emerald Rapids support (PED-4390). - platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes). - platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes). - platform/x86: think-lmi: Certificate authentication support (bsc#1210050). - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes). - platform/x86: think-lmi: Correct NVME password handling (git-fixes). - platform/x86: think-lmi: Correct System password interface (git-fixes). - platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes). - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes). - platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050). - platform/x86: think-lmi: Opcode support (bsc#1210050). - platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050). - platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050). - platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050). - platform/x86: think-lmi: add debug_cmd (bsc#1210050). - platform/x86: think-lmi: add missing type attribute (git-fixes). - platform/x86: think-lmi: certificate support clean ups (bsc#1210050). - platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes). - platform/x86: think-lmi: only display possible_values if available (git-fixes). - platform/x86: think-lmi: use correct possible_values delimiters (git-fixes). - platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050). - platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050). - platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050). - platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050). - platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050). - platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050). - platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050). - platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050). - platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050). - platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050). - platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050). - platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050). - platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050). - platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050). - platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050). - platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050). - platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050). - platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050). - platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050). - platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes). - platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050). - platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050). - platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050). - platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050). - platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050). - platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050). - platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050). - platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050). - platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050). - platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050). - platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050). - platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050). - platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050). - platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050). - platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050). - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes). - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes). - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes). - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes). - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes). - pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes). - pm: hibernate: Do not get block device exclusively in test_resume mode (git-fixes). - pm: hibernate: Turn snapshot_test into global variable (git-fixes). - pm: hibernate: fix load_image_and_restore() error path (git-fixes). - power: supply: Fix logic checking if system is running from battery (git-fixes). - power: supply: Ratelimit no data debug output (git-fixes). - power: supply: ab8500: Fix external_power_changed race (git-fixes). - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes). - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes). - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes). - power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes). - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes). - power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes). - power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes). - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes). - power: supply: bq27xxx: expose battery data when CI=1 (git-fixes). - power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes). - power: supply: generic-adc-battery: fix unit scaling (git-fixes). - power: supply: leds: Fix blink to LED on transition (git-fixes). - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes). - power: supply: sc27xx: Fix external_power_changed race (git-fixes). - powercap: fix possible name leak in powercap_register_zone() (git-fixes). - powercap: intel_rapl: add support for Emerald Rapids (PED-4398). - powerpc/64: Always build with 128-bit long double (bsc#1194869). - powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869). - powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869). - powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729). - powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes). - powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612). - powerpc/hv-gpci: Fix hv_gpci event list (bsc#1207935). - powerpc/hv-gpci: Fix hv_gpci event list (git fixes). - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869). - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869). - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes). - powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701). - powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869). - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869). - powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869). - powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869). - powerpc/kexec_file: fix implicit decl error (bsc#1194869). - powerpc/mm: Fix false detection of read faults (bsc#1208864). - powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled (bsc#1210216 ltc#202189). - powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/purgatory: remove PGO flags (bsc#1194869). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729). - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869). - powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869). - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869). - powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869). - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869). - powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729). - powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662). - powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869). - powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662). - powerpc: declare unmodified attribute_group usages const (bsc#1207935). - powerpc: declare unmodified attribute_group usages const (git-fixes). - powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869). - printf: fix errname.c list (git-fixes). - prlimit: do_prlimit needs to have a speculation check (bsc#1209256). - pstore/ram: Add check for kstrdup (git-fixes). - pstore: Revert pmsg_lock back to a normal mutex (git-fixes). - purgatory: fix disabling debug info (git-fixes). - pwm: ab8500: Fix error code in probe() (git-fixes). - pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes). - pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes). - pwm: meson: Fix axg ao mux parents (git-fixes). - pwm: meson: Fix g12a ao clk81 name (git-fixes). - pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes). - pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes). - pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes). - qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001). - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (jsc#SLE-19001). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001). - qed/qede: Fix scheduling while atomic (git-fixes). - qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001). - qede: avoid uninitialized entries in coal_entry array (bsc#1205846). - qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001). - qede: fix interrupt coalescing configuration (bsc#1205846). - quota: Check next/prev free block number after reading from quota file (bsc#1206640). - quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: fix flow control issue of RTL8156A (git-fixes). - r8152: fix the poor throughput for 2.5G devices (git-fixes). - r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes). - r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes). - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes). - radeon: avoid double free in ci_dpm_init() (git-fixes). - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes). - rcu: Fix rcu_torture_read ftrace event (git-fixes). - rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159). - rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes) - rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes) - rdma/bnxt_re: Fix a possible memory leak (git-fixes) - rdma/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes) - rdma/bnxt_re: Fix the page_size used during the MR creation (git-fixes) - rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes) - rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes) - rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes) - rdma/bnxt_re: Remove unnecessary checks (git-fixes) - rdma/bnxt_re: Return directly without goto jumps (git-fixes) - rdma/bnxt_re: Use unique names while registering interrupts (git-fixes) - rdma/bnxt_re: wraparound mbox producer index (git-fixes) - rdma/cm: Trace icm_send_rej event before the cm state is reset (git-fixes) - rdma/cma: Allow UD qp_type to join multicast only (git-fixes) - rdma/cma: Always set static rate to 0 for RoCE (git-fixes) - rdma/core: Fix GID entry ref leak when create_ah fails (git-fixes) - rdma/core: Fix ib block iterator counter overflow (bsc#1207878). - rdma/core: Fix ib block iterator counter overflow (git-fixes) - rdma/core: Fix multiple -Warray-bounds warnings (git-fixes) - rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes) - rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes) - rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes) - rdma/efa: Fix unsupported page sizes in device (git-fixes) - rdma/hns: Fix base address table allocation (git-fixes) - rdma/hns: Fix hns_roce_table_get return value (git-fixes) - rdma/hns: Fix timeout attr in query qp for HIP08 (git-fixes) - rdma/hns: Modify the value of long message loopback slice (git-fixes) - rdma/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383). - rdma/irdma: Add ipv4 check to irdma_find_listener() (git-fixes) - rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383). - rdma/irdma: Fix Local Invalidate fencing (git-fixes) - rdma/irdma: Fix RQ completion opcode (jsc#SLE-18383). - rdma/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383). - rdma/irdma: Fix inline for multiple SGE's (jsc#SLE-18383). - rdma/irdma: Fix memory leak of PBLE objects (git-fixes) - rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes) - rdma/irdma: Increase iWARP CM default rexmit count (git-fixes) - rdma/irdma: Prevent QP use after free (git-fixes) - rdma/irdma: Remove enum irdma_status_code (jsc#SLE-18383). - rdma/irdma: Remove excess error variables (jsc#SLE-18383). - rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes) - rdma/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022). - rdma/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022). - rdma/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255). - rdma/mlx5: Create an indirect flow table for steering anchor (git-fixes) - rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes) - rdma/mlx5: Fix affinity assignment (git-fixes) - rdma/mlx5: Fix flow counter query via DEVX (git-fixes) - rdma/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes) - rdma/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes) - rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes) - rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253). - rdma/mlx5: Use correct device num_ports when modify DC (git-fixes) - rdma/mlx5: Use rdma_umem_for_each_dma_block() (git-fixes) - rdma/rdmavt: Delete unnecessary NULL check (git-fixes) - rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes) - rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes) - rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes) - rdma/rtrs: Fix the last iu->buf leak in err path (git-fixes) - rdma/rxe: Fix access checks in rxe_check_bind_mw (git-fixes) - rdma/rxe: Fix inaccurate constants in rxe_type_info (git-fixes) - rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes) - rdma/rxe: Fix mr->map double free (git-fixes) - rdma/rxe: Fix oops with zero length reads (git-fixes) - rdma/rxe: Fix packet length checks (git-fixes) - rdma/rxe: Fix ref count error in check_rkey() (git-fixes) - rdma/rxe: Fix rxe_cq_post (git-fixes) - rdma/rxe: Fix the error 'trying to register non-static key in rxe_cleanup_task' (git-fixes) - rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes) - rdma/rxe: Make responder handle RDMA Read failures (git-fixes) - rdma/rxe: Prevent faulty rkey generation (git-fixes) - rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes) - rdma/rxe: Remove tasklet call from rxe_cq.c (git-fixes) - rdma/rxe: Remove the unused variable obj (git-fixes) - rdma/rxe: Removed unused name from rxe_task struct (git-fixes) - rdma/siw: Fix potential page_array out of range access (git-fixes) - rdma/siw: Fix user page pinning accounting (git-fixes) - rdma/siw: Remove namespace check from siw_netdev_event() (git-fixes) - rdma/srp: Move large values to a new enum for gcc13 (git-fixes) - rdma/srpt: Add a check for valid 'mad_agent' pointer (git-fixes) - rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes) - rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes) - rdma/vmw_pvrdma: Remove unnecessary check on wr->opcode (git-fixes) - rdma: Handle the return code from dma_resv_wait_timeout() properly (git-fixes) - ref_tracker: use __GFP_NOFAIL more carefully (git-fixes). - regmap: Account for register length when chunking (git-fixes). - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes). - regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes). - regulator: Fix error checking for debugfs_create_dir (git-fixes). - regulator: Flag uncontrollable regulators as always_on (git-fixes). - regulator: Handle deferred clk (git-fixes). - regulator: core: Avoid lockdep reports when resolving supplies (git-fixes). - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes). - regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes). - regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes). - regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes). - regulator: core: Streamline debugfs operations (git-fixes). - regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes). - regulator: fan53555: Explicitly include bits header (git-fixes). - regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes). - regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes). - regulator: max77802: Bounds check regulator id against opmode (git-fixes). - regulator: mt6359: add read check for PMIC MT6359 (git-fixes). - regulator: pca9450: Fix BUCK2 enable_mask (git-fixes). - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes). - regulator: s5m8767: Bounds check id indexing into arrays (git-fixes). - regulator: stm32-pwr: fix of_iomap leak (git-fixes). - reiserfs: Add missing calls to reiserfs_security_free() (git-fixes). - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes). - remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes). - remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes). - remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes). - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes). - remoteproc: st: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes). - remove 'PCI: hv: Use async probing to reduce boot time' (bsc#1207185). - rethook: Reject getting a rethook if RCU is not watching (git-fixes). - rethook: fix a potential memleak in rethook_alloc() (git-fixes). - rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler (git-fixes). - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (git-fixes). - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes). - ring-buffer: Fix kernel-doc (git-fixes). - ring-buffer: Fix race while reader and writer are on the same page (git-fixes). - ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes). - ring-buffer: Sync IRQ works before buffer destruction (git-fixes). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE. - rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435) - rpm/kernel-obs-build.spec.in: Remove SLE11 cruft - rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches - rtc: allow rtc_read_alarm without read_alarm callback (git-fixes). - rtc: efi: Add wakeup support (bsc#1213116). - rtc: efi: Enable SET/GET WAKEUP services as optional (bsc#1213116). - rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116). - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes). - rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes). - rtc: pm8xxx: fix set-alarm race (git-fixes). - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes). - rtc: sun6i: Always export the internal oscillator (git-fixes). - rtmutex: Ensure that the top waiter is always woken up (git-fixes). - s390/ap: fix memory leak in ap_init_qci_info() (git-fixes). - s390/boot: simplify and fix kernel memory layout setup (bsc#1209600). - s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686). - s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes). - s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592). - s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687). - s390/dasd: fix no record found for raw_track_access (bsc#1207574). - s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes). - s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892). - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688). - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689). - s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690). - s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691). - s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692). - s390/pkey: zeroize key blobs (git-fixes bsc#1212619). - s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693). - s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes). - s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes). - s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714). - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() (git-fixes). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes) - sched/core: Avoid obvious double update_rq_clock warning (git-fixes) - sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes) - sched/core: Introduce sched_asym_cpucap_active() (git-fixes) - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes) - sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes) - sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)). - sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325). - sched/fair: sanitize vruntime of entity being placed (bsc#1203325). - sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)). - sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799). - sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes) - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes) - sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes) - sched: Fix DEBUG && !SCHEDSTATS warn (git-fixes) - sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)). - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (git-fixes). - scsi: aacraid: Allocate cmd_priv with scsicmd (git-fixes). - scsi: aic94xx: Add missing check for dma_map_single() (git-fixes). - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes). - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes). - scsi: core: Fix a procfs host directory removal regression (git-fixes). - scsi: core: Fix a source code comment (git-fixes). - scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes). - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes). - scsi: hisi_sas: Check devm_add_action() return value (git-fixes). - scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes). - scsi: hisi_sas: Revert change to limit max hw sectors for v3 HW (bsc#1210230). - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes). - scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes). - scsi: ipr: Work around fortify-string warning (git-fixes). - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes). - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes). - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: libsas: Add sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes). - scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847). - scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes). - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (bsc#1211847). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Update congestion warning notification period (bsc#1211847). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847). - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes). - scsi: megaraid_sas: Fix crash after a double completion (git-fixes). - scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (git-fixes). - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (git-fixes). - scsi: mpi3mr: Fix throttle_groups memory leak (git-fixes). - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (git-fixes). - scsi: mpi3mr: Suppress command reply debug prints (bsc#1211820). - scsi: mpt3sas: Do not print sense pool info twice (git-fixes). - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes). - scsi: mpt3sas: Fix a memory leak (git-fixes). - scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes). - scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix hang in task management (bsc#1211960). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix mem access after free (bsc#1211960). - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960). - scsi: qla2xxx: Fix task management cmd failure (bsc#1211960). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Multi-que support for TMF (bsc#1211960). - scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes). - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes). - scsi: scsi_ioctl: Validate command size (git-fixes). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Revert 'Rework asynchronous resume support' (bsc#1209092). - scsi: ses: Do not attach if enclosure has no components (git-fixes). - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes). - scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes). - scsi: smartpqi: Add controller cache flush during rmmod (bsc#1207315). - scsi: smartpqi: Add new controller PCI IDs (bsc#1207315). - scsi: smartpqi: Change sysfs raid_level attribute to N/A for controllers (bsc#1207315). - scsi: smartpqi: Change version to 2.1.20-035 (bsc#1207315). - scsi: smartpqi: Convert to host_tagset (bsc#1207315). - scsi: smartpqi: Correct device removal for multi-actuator devices (bsc#1207315). - scsi: smartpqi: Correct max LUN number (bsc#1207315). - scsi: smartpqi: Initialize feature section info (bsc#1207315). - scsi: smartpqi: Replace one-element array with flexible-array member (bsc#1207315). - scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes). - scsi: stex: Fix gcc 13 warnings (git-fixes). - scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes). - scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes). - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes). - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes). - scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes). - scsi: ufs: core: Enable link lost interrupt (git-fixes). - scsi_disk kABI: add back members (bsc#1209092). - sctp: fail if no bound addresses can be used for a given scope (bsc#1206677). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - seccomp: Move copy_seccomp() to no failure path (bsc#1210817). - sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes). - selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes). - selftests mount: Fix mount_setattr_test builds failed (git-fixes). - selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103). - selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103). - selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes). - selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232). - selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232). - selftests/powerpc: Move perror closer to its use (bsc#1206232). - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes). - selftests/resctrl: Allow ->setup() to return errors (git-fixes). - selftests/resctrl: Check for return value after write_schemata() (git-fixes). - selftests/resctrl: Extend CPU vendor detection (git-fixes). - selftests/resctrl: Move ->setup() call outside of test specific branches (git-fixes). - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes). - selftests/sgx: Add 'test_encl.elf' to TEST_FILES (git-fixes). - selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes). - selftests: Provide local define of __cpuid_count() (git-fixes). - selftests: forwarding: lib: quote the sysctl values (git-fixes). - selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: depend on SYN_COOKIES (git-fixes). - selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: sockopt: return error if wrong mark (git-fixes). - selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes). - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes). - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes). - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes). - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes). - selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes). - selftests: sigaltstack: fix -Wuninitialized (git-fixes). - selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes). - selftests: xsk: Disable IPv6 on VETH1 (git-fixes). - selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes). - selinux: do not use make's grouped targets feature yet (git-fixes). - selinux: ensure av_permissions.h is built when needed (git-fixes). - selinux: fix Makefile dependencies of flask.h (git-fixes). - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes). - serial: 8250: Add missing wakeup event reporting (git-fixes). - serial: 8250: Reinit port->pm on port specific driver unbind (git-fixes). - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes). - serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes). - serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes). - serial: 8250: omap: Fix freeing of resources on failed register (git-fixes). - serial: 8250_bcm7271: Fix arbitration handling (git-fixes). - serial: 8250_bcm7271: balance clk_enable calls (git-fixes). - serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes). - serial: 8250_dma: Fix DMA Rx rearm race (git-fixes). - serial: 8250_em: Fix UART port type (git-fixes). - serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes). - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes). - serial: 8250_fsl: fix handle_irq locking (git-fixes). - serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes). - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes). - serial: Add support for Advantech PCI-1611U card (git-fixes). - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes). - serial: atmel: do not enable IRQs prematurely (git-fixes). - serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes). - serial: fsl_lpuart: Fix comment typo (git-fixes). - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes). - serial: lantiq: add missing interrupt ack (git-fixes). - serial: qcom-geni: fix console shutdown hang (git-fixes). - serial: qcom-geni: fix enabling deactivated interrupt (git-fixes). - serial: sc16is7xx: setup GPIO controller later in probe (git-fixes). - serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes). - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes). - sfc: Change VF mac via PF as first preference if available (git-fixes). - sfc: Fix module EEPROM reporting for QSFP modules (git-fixes). - sfc: Fix use-after-free due to selftest_work (git-fixes). - sfc: correctly advertise tunneled IPv6 segmentation (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: ef10: do not overwrite offload features at NIC reset (git-fixes). - sfc: fix TX channel offset when using legacy interrupts (git-fixes). - sfc: fix considering that all channels have TX queues (git-fixes). - sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes). - sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes). - sfc: include vport_id in filter spec hash and equal() (git-fixes). - signal handling: do not use BUG_ON() for debugging (bsc#1210439). - signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861). - signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes). - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes). - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes). - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816). - signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816). - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816). - signal: Implement force_fatal_sig (git-fixes). - smb3.1.1: add new tree connect ShareFlags (bsc#1193629). - smb3: Add missing locks to protect deferred close file list (git-fixes). - smb3: Close all deferred handles of inode in case of handle lease break (bsc#1193629). - smb3: Close deferred file handles in case of handle lease break (bsc#1193629). - smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629). - smb3: display debug information better for encryption (bsc#1193629). - smb3: drop reference to cfile before sending oplock break (bsc#1193629). - smb3: fix problem remounting a share after shutdown (bsc#1193629). - smb3: fix unusable share after force unmount failure (bsc#1193629). - smb3: force unmount was failing to close deferred close files (bsc#1193629). - smb3: improve parallel reads of large files (bsc#1193629). - smb3: lower default deferred close timeout to address perf regression (bsc#1193629). - smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629). - smb3: move some common open context structs to smbfs_common (bsc#1193629). - soc/fsl/qe: fix usb.c build errors (git-fixes). - soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 (git-fixes). - soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes). - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes). - soundwire: cadence: Do not overflow the command FIFOs (git-fixes). - soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes). - soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes). - soundwire: qcom: fix storing port config out-of-bounds (git-fixes). - soundwire: qcom: gracefully handle too many ports in DT (git-fixes). - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes). - spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes). - spi: cadence-quadspi: fix suspend-resume implementations (git-fixes). - spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes). - spi: dw: Round of n_bytes to power of 2 (git-fixes). - spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes). - spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes). - spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes). - spi: lpspi: disable lpspi module irq in DMA mode (git-fixes). - spi: qup: Do not skip cleanup in remove's error path (git-fixes). - spi: qup: Request DMA before enabling clocks (git-fixes). - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes). - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (git-fixes). - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - spi: spidev: remove debug messages that access spidev->spi without locking (git-fixes). - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes). - spi: tegra210-quad: Fix combined sequence (bsc#1212584) - spi: tegra210-quad: Fix iterator outside loop (git-fixes). - spi: tegra210-quad: Fix validate combined sequence (git-fixes). - spi: tegra210-quad: Multi-cs support (bsc#1212584) - squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes). - staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes). - staging: iio: resolver: ads1210: fix config mode (git-fixes). - staging: mt7621-dts: change palmbus address to lower case (git-fixes). - staging: mt7621-dts: change some node hex addresses to lower case (git-fixes). - staging: octeon: delete my name from TODO contact (git-fixes). - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes). - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (git-fixes). - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (git-fixes). - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes). - stat: fix inconsistency between struct stat and struct compat_stat (git-fixes). - struct ci_hdrc: hide new member at end (git-fixes). - struct dwc3: mask new member (git-fixes). - struct uvc_device move flush_status new member to end (git-fixes). - sunrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes). - sunrpc: Clean up svc_deferred_class trace events (git-fixes). - sunrpc: Do not dereference xprt->snd_task if it's a cookie (git-fixes). - sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes). - sunrpc: Fix a server shutdown leak (git-fixes). - sunrpc: Fix missing release socket in rpc_sockname() (git-fixes). - sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes). - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes). - sunrpc: Fix socket waits for write buffer space (git-fixes). - sunrpc: Return true/false (not 1/0) from bool functions (git-fixes). - sunrpc: Update trace flags (git-fixes). - sunrpc: Use BIT() macro in rpc_show_xprt_state() (git-fixes). - sunrpc: ensure the matching upcall is in-flight upon downcall (git-fixes). - sunrpc: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775). - sunrpc: only free unix grouplist after RCU settles (git-fixes). - swim3: add missing major.h include (git-fixes). - swiotlb: Free tbl memory in swiotlb_exit() (jsc#PED-3259). - swiotlb: add a SWIOTLB_ANY flag to lift the low memory restriction (PED-3259). - swiotlb: avoid potential left shift overflow (PED-3259). - swiotlb: clean up some coding style and minor issues (PED-3259). - swiotlb: consolidate rounding up default_nslabs (PED-3259). - swiotlb: do not panic when the swiotlb buffer can't be allocated (PED-3259). - swiotlb: ensure a segment does not cross the area boundary (PED-3259). - swiotlb: fail map correctly with failed io_tlb_default_mem (PED-3259). - swiotlb: fix a typo (PED-3259). - swiotlb: fix passing local variable to debugfs_create_ulong() (PED-3259). - swiotlb: fix setting ->force_bounce (PED-3259). - swiotlb: fix use after free on error handling path (PED-3259). - swiotlb: make swiotlb_exit a no-op if SWIOTLB_FORCE is set (PED-3259). - swiotlb: make the swiotlb_init interface more useful (PED-3259). - swiotlb: merge swiotlb-xen initialization into swiotlb (jsc#PED-3259). - swiotlb: panic if nslabs is too small (PED-3259). - swiotlb: pass a gfp_mask argument to swiotlb_init_late (PED-3259). - swiotlb: provide swiotlb_init variants that remap the buffer (PED-3259). - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes). - swiotlb: remove a useless return in swiotlb_init (PED-3259). - swiotlb: remove swiotlb_init_with_tbl and swiotlb_init_late_with_tbl (PED-3259). - swiotlb: remove unused fields in io_tlb_mem (PED-3259). - swiotlb: rename swiotlb_late_init_with_default_size (PED-3259). - swiotlb: simplify debugfs setup (jsc#PED-3259). - swiotlb: simplify swiotlb_max_segment (PED-3259). - swiotlb: split up the global swiotlb lock (PED-3259). - swiotlb: use the right nslabs value in swiotlb_init_remap (PED-3259). - swiotlb: use the right nslabs-derived sizes in swiotlb_init_late (PED-3259). - sysctl: add a new register_sysctl_init() interface (bsc#1207328). - task_work: Decouple TIF_NOTIFY_SIGNAL and task_work (git-fixes). - task_work: Introduce task_work_pending (git-fixes). - test_firmware: Use kstrtobool() instead of strtobool() (git-fixes). - test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes). - test_firmware: prevent race conditions by a correct implementation of locking (git-fixes). - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes). - thermal/core: Remove duplicate information when an error occurs (git-fixes). - thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes). - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes). - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes). - thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes). - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes). - thermal/drivers/tsens: fix slope values for msm8939 (git-fixes). - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes). - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes). - thermal: intel: Fix unsigned comparison with less than zero (git-fixes). - thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes). - thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes). - thermal: intel: quark_dts: fix error pointer dereference (git-fixes). - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes). - thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Disable interrupt auto clear for rings (git-fixes). - thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165). - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes). - thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes). - thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes). - thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes). - timers: Prevent union confusion from unexpected (git-fixes) - tls: Skip tls_append_frag on zero copy size (git-fixes). - tools/iio/iio_utils:fix memory leak (git-fixes). - tools/virtio: compile with -pthread (git-fixes). - tools/virtio: fix the vringh test for virtio ring changes (git-fixes). - tools/virtio: fix virtio_test execution (git-fixes). - tools/virtio: initialize spinlocks in vring_test.c (git-fixes). - tools: bpftool: Remove invalid \' json escape (git-fixes). - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes). - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes). - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes). - tpm, tpm_tis: Request threaded interrupt handler (git-fixes). - tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes). - tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes). - trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes). - trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace_events_hist: add check for return value of 'create_hist_field' (git-fixes). - tracing/fprobe: Fix to check whether fprobe is registered correctly (git-fixes). - tracing/hist: Fix issue of losting command info in error_log (git-fixes). - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes). - tracing/hist: Fix wrong return value in parse_action_params() (git-fixes). - tracing/histograms: Allow variables to have some modifiers (git-fixes). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes). - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes). - tracing/probes: Handle system names with hyphens (git-fixes). - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes). - tracing: Add '__rel_loc' using trace event macros (git-fixes). - tracing: Add DYNAMIC flag for dynamic events (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - tracing: Add trace_array_puts() to write into instance (git-fixes). - tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes). - tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing: Avoid adding tracer option before update_tracer_options (git-fixes). - tracing: Check field value in hist_field_name() (git-fixes). - tracing: Do not let histogram values have some modifiers (git-fixes). - tracing: Do not use out-of-sync va_list in event printing (git-fixes). - tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes). - tracing: Fix a kmemleak false positive in tracing_map (git-fixes). - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes). - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes). - tracing: Fix issue of missing one synthetic field (git-fixes). - tracing: Fix mismatched comment in __string_len (git-fixes). - tracing: Fix permissions for the buffer_percent file (git-fixes). - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes). - tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes). - tracing: Fix race where histograms can be called before the event (git-fixes). - tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes). - tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes). - tracing: Fix warning on variable 'struct trace_array' (git-fixes). - tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes). - tracing: Free error logs of tracing instances (git-fixes). - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes). - tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350). - tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes). - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes). - tracing: Have type enum modifications copy the strings (git-fixes). - tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes). - tracing: Make splice_read available again (git-fixes). - tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes). - tracing: Make tp_printk work on syscall tracepoints (git-fixes). - tracing: Make tracepoint lockdep check actually test something (git-fixes). - tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350). - tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes). - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes). - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes). - tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes). - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes). - tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes). - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes). - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes). - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes). - tty: serial: imx: Handle RS485 DE signal active high (git-fixes). - tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes). - tty: serial: imx: fix rs485 rx after tx (git-fixes). - tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes). - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes). - tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes). - tun: annotate access to queue->trans_start (jsc#PED-370). - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes). - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - ubi: ensure that VID header offset + VID header size &lt;= alloc, size (bsc#1210584). - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328). - udf: Avoid double brelse() in udf_rename() (bsc#1213032). - udf: Check consistency of Space Bitmap Descriptor (bsc#1210771). - udf: Define EFSCORRUPTED error code (bsc#1213038). - udf: Detect system inodes linked into directory hierarchy (bsc#1213114). - udf: Discard preallocation before extending file with a hole (bsc#1213036). - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035). - udf: Do not bother merging very long extents (bsc#1213040). - udf: Do not update file length for failed writes to inline files (bsc#1213041). - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649). - udf: Fix error handling in udf_new_inode() (bsc#1213112). - udf: Fix extending file within last block (bsc#1213037). - udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034). - udf: Preserve link count of system files (bsc#1213113). - udf: Support splicing to file (bsc#1210770). - udf: Truncate added extents on failed expansion (bsc#1213039). - update internal module version number for cifs.ko (bsc#1193629). - usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes). - usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes). - usb: cdns3: Fix issue with using incorrect PCI device function (git-fixes). - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes). - usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes). - usb: cdnsp: Fixes issue with redundant Status Stage (git-fixes). - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes). - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes). - usb: chipidea: core: fix possible concurrent when switch role (git-fixes). - usb: chipidea: fix memory leak with using debugfs_lookup() (git-fixes). - usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes). - usb: chipidea: imx: avoid unnecessary probe defer (git-fixes). - usb: core: Add routines for endpoint checks in old drivers (git-fixes). - usb: core: Do not hold device lock while reading the 'descriptors' sysfs file (git-fixes). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes). - usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes). - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes). - usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes). - usb: dwc3: Align DWC3_EP_* flag macros (git-fixes). - usb: dwc3: Fix a repeated word checkpatch warning (git-fixes). - usb: dwc3: Fix a typo in field name (git-fixes). - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes). - usb: dwc3: core: Host wake up support from system suspend (git-fixes). - usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes). - usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes). - usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes). - usb: dwc3: fix memory leak with using debugfs_lookup() (git-fixes). - usb: dwc3: fix runtime pm imbalance on probe errors (git-fixes). - usb: dwc3: fix runtime pm imbalance on unbind (git-fixes). - usb: dwc3: fix use-after-free on core driver unbind (git-fixes). - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes). - usb: dwc3: gadget: Change condition for processing suspend event (git-fixes). - usb: dwc3: gadget: Delay issuing End Transfer (git-fixes). - usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes). - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes). - usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes). - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes). - usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes). - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes). - usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes). - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes). - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes). - usb: dwc3: qcom: Fix potential memory leak (git-fixes). - usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes). - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes). - usb: dwc3: qcom: clean up icc init (git-fixes). - usb: dwc3: qcom: clean up suspend callbacks (git-fixes). - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes). - usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes). - usb: dwc3: qcom: fix gadget-only builds (git-fixes). - usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes). - usb: dwc3: qcom: fix wakeup implementation (git-fixes). - usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes). - usb: dwc3: qcom: suppress unused-variable warning (git-fixes). - usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes). - usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes). - usb: ene_usb6250: Allocate enough memory for full object (git-fixes). - usb: fix memory leak with using debugfs_lookup() (git-fixes). - usb: fotg210: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes). - usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes). - usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes). - usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes). - usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes). - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes). - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes). - usb: gadget: f_hid: fix refcount leak on error path (git-fixes). - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes). - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes). - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes). - usb: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes). - usb: gadget: u_audio: do not let userspace block driver unbind (git-fixes). - usb: gadget: u_ether: Fix host MAC address case (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes). - usb: gadget: udc: do not clear gadget driver.bus (git-fixes). - usb: gadget: udc: fix NULL dereference in remove() (git-fixes). - usb: hide unused usbfs_notify_suspend/resume functions (git-fixes). - usb: host: xhci-rcar: remove leftover quirk handling (git-fixes). - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes). - usb: isp116x: fix memory leak with using debugfs_lookup() (git-fixes). - usb: isp1362: fix memory leak with using debugfs_lookup() (git-fixes). - usb: max-3421: Fix setting of I/O pins (git-fixes). - usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes). - usb: musb: Add and use inline function musb_otg_state_string (git-fixes). - usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes). - usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes). - usb: musb: remove schedule work called after flush (git-fixes). - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes). - usb: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes). - usb: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes). - usb: serial: option: add Quectel EC200U modem (git-fixes). - usb: serial: option: add Quectel EM05-G (CS) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (GR) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (RS) modem (git-fixes). - usb: serial: option: add Quectel EM05CN (SG) modem (git-fixes). - usb: serial: option: add Quectel EM05CN modem (git-fixes). - usb: serial: option: add Quectel EM061KGL series (git-fixes). - usb: serial: option: add Quectel RM500U-CN modem (git-fixes). - usb: serial: option: add Telit FE990 compositions (git-fixes). - usb: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes). - usb: serial: option: add support for VW/Skoda 'Carstick LTE' (git-fixes). - usb: sisusbvga: Add endpoint checks (git-fixes). - usb: sl811: fix memory leak with using debugfs_lookup() (git-fixes). - usb: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes). - usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes). - usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes). - usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes). - usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes). - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix multiple times discover svids error (git-fixes). - usb: typec: tcpm: fix warning when handle discover_identity message (git-fixes). - usb: typec: ucsi: Do not attempt to resume the ports before they exist (git-fixes). - usb: typec: ucsi: Do not warn on probe deferral (git-fixes). - usb: typec: ucsi: Fix command cancellation (git-fixes). - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes). - usb: ucsi: Fix ucsi->connector race (git-fixes). - usb: ucsi_acpi: Increase the command completion timeout (git-fixes). - usb: uhci: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes). - usb: uhci: fix memory leak with using debugfs_lookup() (git-fixes). - usb: usbfs: Enforce page requirements for mmap (git-fixes). - usb: usbfs: Use consistent mmap functions (git-fixes). - usb: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes). - usb: uvc: Enumerate valid values for color matching (git-fixes). - usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes). - usb: xhci: tegra: fix sleep in atomic call (git-fixes). - usrmerge: Adjust module path in the kernel sources (bsc#1212835). With the module path adjustment applied as source patch only ALP/Tumbleweed kernel built on SLE/Leap needs the path changed back to non-usrmerged. - usrmerge: Compatibility with earlier rpm (boo#1211796) - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (jsc#PED-1549). - vDPA: check virtio device features to detect MQ (jsc#PED-1549). - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (jsc#PED-1549). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: modify vcs_size() handling in vcs_read() (git-fixes). - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes). - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes). - vdpa/ifcvf: fix the calculation of queuepair (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#SLE-19253). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#PED-1549). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253). - vdpa/mlx5: Fix rule forwarding VLAN to TIR (jsc#PED-1549). - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253). - vdpa/mlx5: Fix wrong mac address deletion (jsc#PED-1549). - vdpa/mlx5: Initialize CVQ iotlb spinlock (jsc#PED-1549). - vdpa/mlx5: should not activate virtq object when suspended (jsc#PED-1549). - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (git-fixes). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#PED-1549). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253). - vdpa: Use BIT_ULL for bit operations (jsc#PED-1549). - vdpa: conditionally fill max max queue pair for stats (jsc#PED-1549). - vdpa: fix use-after-free on vp_vdpa_remove (git-fixes). - vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes). - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes). - vduse: Fix NULL pointer dereference on sysfs access (jsc#PED-1549). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (jsc#PED-1549). - vduse: avoid empty string for dev name (jsc#PED-1549). - vduse: check that offset is within bounds in get_config() (jsc#PED-1549). - vduse: fix memory corruption in vduse_dev_ioctl() (jsc#PED-1549). - vduse: prevent uninitialized memory accesses (jsc#PED-1549). - vfio/type1: prevent underflow of locked_vm via exec() (git-fixes). - vfio/type1: restore locked_vm (git-fixes). - vfio/type1: track locked_vm per dma (git-fixes). - vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642). - vfs: filename_create(): fix incorrect intent (bsc#1197534). - vfs: make sync_filesystem return errors from ->sync_fs (git-fixes). - vhost-vdpa: fix an iotlb memory leak (jsc#PED-1549). - vhost-vdpa: free iommu domain after last use during cleanup (jsc#PED-1549). - vhost/net: Clear the pending messages when the backend is removed (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (jsc#PED-1549). - vhost_vdpa: fix unmap process in no-batch mode (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253). - virt/coco/sev-guest: Add throttling awareness (bsc#1209927). - virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927). - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927). - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927). - virt/coco/sev-guest: Do some code style cleanups (bsc#1209927). - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927). - virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927). - virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449). - virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449). - virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449). - virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927). - virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449). - virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449). - virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449). - virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes). - virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes). - virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes). - virtio_net: split free_unused_bufs() (git-fixes). - virtio_net: suppress cpu stall when free_unused_bufs (git-fixes). - virtio_pci: modify ENOENT to EINVAL (git-fixes). - virtio_ring: do not update event idx on get_buf (git-fixes). - vmci: check context->notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes). - vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes). - vmxnet3: move rss code block under eop descriptor (bsc#1208212). - vmxnet3: use gro callback when UPT is enabled (bsc#1209739). - vp_vdpa: fix the crash in hot unplug with vp_vdpa (git-fixes). - w1: fix loop in w1_fini() (git-fixes). - w1: w1_therm: fix locking behavior in convert_t (git-fixes). - wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes) - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617). - watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes). - watchdog: allow building BCM7038_WDT for BCM4908 (bsc#1208619). - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes). - watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497). - watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497). - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes). - watchdog: ixp4xx: Implement restart (bsc#1208619). - watchdog: ixp4xx: Rewrite driver to use core (bsc#1208619). - watchdog: ixp4xx_wdt: Fix address space warning (bsc#1208619). - watchdog: menz069_wdt: fix watchdog initialisation (git-fixes). - watchdog: orion_wdt: support pretimeout on Armada-XP (bsc#1208619). - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes). - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes). - watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes). - wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes). - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes). - wifi: ath11k: allow system suspend to survive ath11k (git-fixes). - wifi: ath11k: fix SAC bug on peer addition with sta band migration (git-fixes). - wifi: ath11k: fix deinitialization of firmware resources (git-fixes). - wifi: ath11k: fix writing to unintended memory region (git-fixes). - wifi: ath11k: reduce the MHI timeout to 20s (bsc#1207948). - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes). - wifi: ath6kl: minor fix for allocation size (git-fixes). - wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes). - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes). - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes). - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes). - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: convert msecs to jiffies where needed (git-fixes). - wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes). - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes). - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes). - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes). - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes). - wifi: ath9k: use proper statements in conditionals (git-fixes). - wifi: ath: Silence memcpy run-time false positive warning (git-fixes). - wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes). - wifi: b43: fix incorrect __packed annotation (git-fixes). - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes). - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes). - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes). - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes). - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes). - wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes). - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes). - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes). - wifi: cfg80211: Fix use after free for wext (git-fixes). - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (git-fixes). - wifi: cfg80211: fix locking in regulatory disconnect (git-fixes). - wifi: cfg80211: fix locking in sched scan stop work (git-fixes). - wifi: cfg80211: rewrite merging of inherited elements (git-fixes). - wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes). - wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes). - wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes). - wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes). - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes). - wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes). - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes). - wifi: iwlwifi: fw: fix DBGI dump (git-fixes). - wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes). - wifi: iwlwifi: fw: move memset before early return (git-fixes). - wifi: iwlwifi: make the loop for card preparation effective (git-fixes). - wifi: iwlwifi: mvm: check firmware response size (git-fixes). - wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes). - wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes). - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes). - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes). - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (git-fixes). - wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes). - wifi: iwlwifi: mvm: initialize seq variable (git-fixes). - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes). - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes). - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes). - wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes). - wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes). - wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes). - wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes). - wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes). - wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (bsc#1209980). - wifi: mac80211: adjust scan cancel comment/check (git-fixes). - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes). - wifi: mac80211: fix min center freq offset tracing (git-fixes). - wifi: mac80211: fix qos on mesh interfaces (git-fixes). - wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes). - wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes). - wifi: mac80211: simplify chanctx allocation (git-fixes). - wifi: mt7601u: fix an integer underflow (git-fixes). - wifi: mt76: add flexible polling wait-interval support (git-fixes). - wifi: mt76: add memory barrier to SDIO queue kick (bsc#1209980). - wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes). - wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1209980). - wifi: mt76: fix 6GHz high channel not be scanned (git-fixes). - wifi: mt76: fix receiving LLC packets on mt7615/mt7915 (bsc#1209980). - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes). - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes). - wifi: mt76: mt7915: add missing of_node_put() (bsc#1209980). - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work (bsc#1209980). - wifi: mt76: mt7915: check return value before accessing free_block_num (bsc#1209980). - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() (bsc#1209980). - wifi: mt76: mt7915: expose device tree match table (git-fixes). - wifi: mt76: mt7915: fix mcs value in ht mode (bsc#1209980). - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit (git-fixes). - wifi: mt76: mt7915: fix mt7915_mac_set_timing() (bsc#1209980). - wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup (bsc#1209980). - wifi: mt76: mt7915: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() (bsc#1209980). - wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` (git-fixes). - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes). - wifi: mt76: mt7921e: fix crash in chip reset fail (bsc#1209980). - wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix rmmod crash in driver reload test (bsc#1209980). - wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes). - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (git-fixes). - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume (bsc#1209980). - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (bsc#1209980). - wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes). - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes). - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes). - wifi: mwifiex: mark OF related data as maybe unused (git-fixes). - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes). - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes). - wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes). - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes). - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes). - wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes). - wifi: rt2x00: Fix memory leak when handling surveys (git-fixes). - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes). - wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes). - wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes). - wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes). - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes). - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes). - wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes). - wifi: rtw89: Add missing check for alloc_workqueue (git-fixes). - wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes). - wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes). - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes). - wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wireguard: ratelimiter: use hrtimer in selftest (git-fixes) - workqueue: Fix hung time report of worker pools (bsc#1211044). - workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044). - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044). - workqueue: Warn when a new worker could not be created (bsc#1211044). - workqueue: Warn when a rescuer could not be created (bsc#1211044). - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769). - writeback: avoid use-after-free after removing device (bsc#1207638). - writeback: fix call of incorrect macro (bsc#1213024). - writeback: fix dereferencing NULL mapping->host on writeback_page_template (git-fixes). - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes). - x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes). - x86/ACPI/boot: Use FADT version to check support for online capable (git-fixes). - x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes). - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes). - x86/MCE/AMD: Use an u64 for bank_map (git-fixes). - x86/PAT: Have pat_enabled() properly reflect state when running on Xen (git-fixes). - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes). - x86/acpi/boot: Correct acpi_is_processor_usable() check (git-fixes). - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (git-fixes). - x86/alternative: Make debug-alternative selective (bsc#1206578). - x86/alternative: Report missing return thunk details (git-fixes). - x86/alternative: Support relocations in alternatives (bsc#1206578). - x86/amd: Use IBPB for firmware calls (git-fixes). - x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848). - x86/asm: Fix an assembler warning with current binutils (git-fixes). - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes). - x86/boot: Skip realmode init code when running as Xen PV guest (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes). - x86/bugs: Add 'unknown' reporting for MMIO Stale Data (git-fixes). - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes). - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes). - x86/bugs: Warn when 'ibrs' mitigation is selected on Enhanced IBRS parts (git-fixes). - x86/build: Avoid relocation information in final vmlinux (bsc#1187829). - x86/cpu: Add CPU model numbers for Meteor Lake (git fixes). - x86/cpu: Add Raptor Lake to Intel family (git fixes). - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes). - x86/cpu: Add new Raptor Lake CPU model number (git fixes). - x86/cpu: Add several Intel server CPU model numbers (git fixes). - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - x86/cpufeatures: Introduce x2AVIC CPUID bit (bsc#1208619). - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes). - x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes). - x86/entry: Avoid very early RET (git-fixes). - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes). - x86/entry: Do not call error_entry() for XENPV (git-fixes). - x86/entry: Move CLD to the start of the idtentry macro (git-fixes). - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes). - x86/entry: Switch the stack after error_entry() returns (git-fixes). - x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu: Cache xfeature flags from CPUID (git-fixes). - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes). - x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes). - x86/fpu: Mark init functions __init (bsc#1212448). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448). - x86/fpu: Prevent FPU state corruption (git-fixes). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes). - x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes). - x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes). - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes). - x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes). - x86/init: Initialize signal frame size late (bsc#1212448). - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes). - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes). - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes). - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes). - x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes). - x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes). - x86/microcode/AMD: Fix mixed steppings support (git-fixes). - x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes). - x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes). - x86/microcode: Add explicit CPU vendor dependency (git-fixes). - x86/microcode: Adjust late loading result reporting message (git-fixes). - x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes). - x86/microcode: Print previous version of microcode after reload (git-fixes). - x86/microcode: Rip out the OLD_INTERFACE (git-fixes). - x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes). - x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes). - x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Initialize text poking earlier (bsc#1212448). - x86/mm: Use mm_alloc() in poking_init() (bsc#1212448). - x86/mm: Use proper mask when setting PUD mapping (git-fixes). - x86/mm: fix poking_init() for Xen PV guests (git-fixes). - x86/msi: Fix msi message data shadow struct (git-fixes). - x86/msr: Add AMD CPPC MSR definitions (bsc#1212445). - x86/msr: Remove .fixup usage (git-fixes). - x86/nospec: Unwreck the RSB stuffing (git-fixes). - x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes). - x86/pat: Fix x86_has_pat_wp() (git-fixes). - x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes). - x86/perf/zhaoxin: Add stepping check for ZXC (git fixes). - x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes). - x86/perf: Default set FREEZE_ON_SMI for all (git fixes). - x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes). - x86/resctrl: Fix min_cbm_bits for AMD (git-fixes). - x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes). - x86/sgx: Fix free page accounting (git-fixes). - x86/sgx: Fix race between reclaimer and page fault handler (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/signal: Fix the value returned by strict_sas_size() (git-fixes). - x86/speculation/mmio: Print SMT warning (git-fixes). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes). - x86/static_call: Serialize __static_call_fixup() properly (git-fixes). - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes). - x86/topology: Fix duplicated core ID within a package (git-fixes). - x86/topology: Fix multiple packages shown on a single-package system (git-fixes). - x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes). - x86/tsx: Add a feature bit for TSX control MSR support (git-fixes). - x86/tsx: Disable TSX development mode at boot (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes). - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes). - x86/xen: fix secondary processor fpu initialization (bsc#1212869). - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Fix return value of __setup handlers (git-fixes). - x86: Handle idle=nomwait cmdline properly for x86_idle (bsc#1208619). - x86: Remove vendor checks from prefer_mwait_c1_over_halt (bsc#1208619). - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (git-fixes). - x86: centralize setting SWIOTLB_FORCE when guest memory encryption is enabled (jsc#PED-3259). - x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (git-fixes). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: remove cruft from &lt;asm/dma-mapping.h> (PED-3259). - xen-netfront: Fix NULL sring after live migration (git-fixes). - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes). - xen/arm: Fix race in RB-tree based P2M accounting (git-fixes) - xen/netback: do not do grant copy across page boundary (git-fixes). - xen/netback: do some code cleanup (git-fixes). - xen/netback: fix build warning (git-fixes). - xen/netback: use same error messages for same errors (git-fixes). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes). - xen/platform-pci: add missing free_irq() in error path (git-fixes). - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: convert ptag flags to unsigned (git-fixes). - xfs: do not assert fail on perag references on teardown (git-fixes). - xfs: do not leak btree cursor when insrec fails after a split (git-fixes). - xfs: estimate post-merge refcounts correctly (bsc#1208183). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix rm_offset flag handling in rmap keys (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: hoist refcount record merge predicates (bsc#1208183). - xfs: initialize the check_owner object fully (git-fixes). - xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: remove xfs_setattr_time() declaration (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes). - xfs: zero inode fork buffer at allocation (git-fixes). - xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci: Fix incorrect tracking of free space on transfer rings (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Free the command allocated for setting LPM if we return early (git-fixes). - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes). - xhci: fix debugfs register accesses while suspended (git-fixes). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes). - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes). - xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes). - zram: do not lookup algorithm in backends table (git-fixes). Important SUSE bug 1065729 SUSE bug 1109158 SUSE bug 1142685 SUSE bug 1152472 SUSE bug 1152489 SUSE bug 1155798 SUSE bug 1160435 SUSE bug 1166486 SUSE bug 1172073 SUSE bug 1174777 SUSE bug 1177529 SUSE bug 1186449 SUSE bug 1187829 SUSE bug 1189998 SUSE bug 1189999 SUSE bug 1191731 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1195175 SUSE bug 1195655 SUSE bug 1195921 SUSE bug 1196058 SUSE bug 1197534 SUSE bug 1197617 SUSE bug 1198101 SUSE bug 1198400 SUSE bug 1198438 SUSE bug 1198835 SUSE bug 1199304 SUSE bug 1199701 SUSE bug 1200054 SUSE bug 1202353 SUSE bug 1202633 SUSE bug 1203039 SUSE bug 1203200 SUSE bug 1203325 SUSE bug 1203331 SUSE bug 1203332 SUSE bug 1203693 SUSE bug 1203906 SUSE bug 1204356 SUSE bug 1204363 SUSE bug 1204662 SUSE bug 1204993 SUSE bug 1205153 SUSE bug 1205191 SUSE bug 1205205 SUSE bug 1205544 SUSE bug 1205650 SUSE bug 1205756 SUSE bug 1205758 SUSE bug 1205760 SUSE bug 1205762 SUSE bug 1205803 SUSE bug 1205846 SUSE bug 1206024 SUSE bug 1206036 SUSE bug 1206056 SUSE bug 1206057 SUSE bug 1206103 SUSE bug 1206224 SUSE bug 1206232 SUSE bug 1206340 SUSE bug 1206459 SUSE bug 1206492 SUSE bug 1206493 SUSE bug 1206552 SUSE bug 1206578 SUSE bug 1206640 SUSE bug 1206649 SUSE bug 1206677 SUSE bug 1206824 SUSE bug 1206843 SUSE bug 1206876 SUSE bug 1206877 SUSE bug 1206878 SUSE bug 1206880 SUSE bug 1206881 SUSE bug 1206882 SUSE bug 1206883 SUSE bug 1206884 SUSE bug 1206885 SUSE bug 1206886 SUSE bug 1206887 SUSE bug 1206888 SUSE bug 1206889 SUSE bug 1206890 SUSE bug 1206891 SUSE bug 1206893 SUSE bug 1206894 SUSE bug 1206935 SUSE bug 1206992 SUSE bug 1207034 SUSE bug 1207036 SUSE bug 1207050 SUSE bug 1207051 SUSE bug 1207088 SUSE bug 1207125 SUSE bug 1207149 SUSE bug 1207158 SUSE bug 1207168 SUSE bug 1207185 SUSE bug 1207270 SUSE bug 1207315 SUSE bug 1207328 SUSE bug 1207497 SUSE bug 1207500 SUSE bug 1207501 SUSE bug 1207506 SUSE bug 1207507 SUSE bug 1207521 SUSE bug 1207553 SUSE bug 1207560 SUSE bug 1207574 SUSE bug 1207588 SUSE bug 1207589 SUSE bug 1207590 SUSE bug 1207591 SUSE bug 1207592 SUSE bug 1207593 SUSE bug 1207594 SUSE bug 1207602 SUSE bug 1207603 SUSE bug 1207605 SUSE bug 1207606 SUSE bug 1207607 SUSE bug 1207608 SUSE bug 1207609 SUSE bug 1207610 SUSE bug 1207611 SUSE bug 1207612 SUSE bug 1207613 SUSE bug 1207614 SUSE bug 1207615 SUSE bug 1207616 SUSE bug 1207617 SUSE bug 1207618 SUSE bug 1207619 SUSE bug 1207620 SUSE bug 1207621 SUSE bug 1207622 SUSE bug 1207623 SUSE bug 1207624 SUSE bug 1207625 SUSE bug 1207626 SUSE bug 1207627 SUSE bug 1207628 SUSE bug 1207629 SUSE bug 1207630 SUSE bug 1207631 SUSE bug 1207632 SUSE bug 1207633 SUSE bug 1207634 SUSE bug 1207635 SUSE bug 1207636 SUSE bug 1207637 SUSE bug 1207638 SUSE bug 1207639 SUSE bug 1207640 SUSE bug 1207641 SUSE bug 1207642 SUSE bug 1207643 SUSE bug 1207644 SUSE bug 1207645 SUSE bug 1207646 SUSE bug 1207647 SUSE bug 1207648 SUSE bug 1207649 SUSE bug 1207650 SUSE bug 1207651 SUSE bug 1207652 SUSE bug 1207653 SUSE bug 1207734 SUSE bug 1207768 SUSE bug 1207769 SUSE bug 1207770 SUSE bug 1207771 SUSE bug 1207773 SUSE bug 1207795 SUSE bug 1207827 SUSE bug 1207842 SUSE bug 1207845 SUSE bug 1207875 SUSE bug 1207878 SUSE bug 1207933 SUSE bug 1207935 SUSE bug 1207948 SUSE bug 1208050 SUSE bug 1208076 SUSE bug 1208081 SUSE bug 1208105 SUSE bug 1208107 SUSE bug 1208128 SUSE bug 1208130 SUSE bug 1208149 SUSE bug 1208153 SUSE bug 1208183 SUSE bug 1208212 SUSE bug 1208219 SUSE bug 1208290 SUSE bug 1208368 SUSE bug 1208410 SUSE bug 1208420 SUSE bug 1208428 SUSE bug 1208429 SUSE bug 1208449 SUSE bug 1208534 SUSE bug 1208541 SUSE bug 1208542 SUSE bug 1208570 SUSE bug 1208588 SUSE bug 1208598 SUSE bug 1208599 SUSE bug 1208600 SUSE bug 1208601 SUSE bug 1208602 SUSE bug 1208604 SUSE bug 1208605 SUSE bug 1208607 SUSE bug 1208619 SUSE bug 1208628 SUSE bug 1208700 SUSE bug 1208741 SUSE bug 1208758 SUSE bug 1208759 SUSE bug 1208776 SUSE bug 1208777 SUSE bug 1208784 SUSE bug 1208787 SUSE bug 1208815 SUSE bug 1208816 SUSE bug 1208829 SUSE bug 1208837 SUSE bug 1208843 SUSE bug 1208845 SUSE bug 1208848 SUSE bug 1208864 SUSE bug 1208902 SUSE bug 1208948 SUSE bug 1208976 SUSE bug 1209008 SUSE bug 1209039 SUSE bug 1209052 SUSE bug 1209092 SUSE bug 1209159 SUSE bug 1209256 SUSE bug 1209258 SUSE bug 1209262 SUSE bug 1209287 SUSE bug 1209288 SUSE bug 1209290 SUSE bug 1209291 SUSE bug 1209292 SUSE bug 1209366 SUSE bug 1209367 SUSE bug 1209436 SUSE bug 1209457 SUSE bug 1209504 SUSE bug 1209532 SUSE bug 1209556 SUSE bug 1209600 SUSE bug 1209615 SUSE bug 1209635 SUSE bug 1209636 SUSE bug 1209637 SUSE bug 1209684 SUSE bug 1209687 SUSE bug 1209693 SUSE bug 1209739 SUSE bug 1209779 SUSE bug 1209780 SUSE bug 1209788 SUSE bug 1209798 SUSE bug 1209799 SUSE bug 1209804 SUSE bug 1209805 SUSE bug 1209856 SUSE bug 1209871 SUSE bug 1209927 SUSE bug 1209980 SUSE bug 1209982 SUSE bug 1209999 SUSE bug 1210034 SUSE bug 1210050 SUSE bug 1210158 SUSE bug 1210165 SUSE bug 1210202 SUSE bug 1210203 SUSE bug 1210206 SUSE bug 1210216 SUSE bug 1210230 SUSE bug 1210294 SUSE bug 1210301 SUSE bug 1210329 SUSE bug 1210335 SUSE bug 1210336 SUSE bug 1210337 SUSE bug 1210409 SUSE bug 1210439 SUSE bug 1210449 SUSE bug 1210450 SUSE bug 1210453 SUSE bug 1210454 SUSE bug 1210498 SUSE bug 1210506 SUSE bug 1210533 SUSE bug 1210551 SUSE bug 1210565 SUSE bug 1210584 SUSE bug 1210629 SUSE bug 1210644 SUSE bug 1210647 SUSE bug 1210725 SUSE bug 1210741 SUSE bug 1210762 SUSE bug 1210763 SUSE bug 1210764 SUSE bug 1210765 SUSE bug 1210766 SUSE bug 1210767 SUSE bug 1210768 SUSE bug 1210769 SUSE bug 1210770 SUSE bug 1210771 SUSE bug 1210775 SUSE bug 1210783 SUSE bug 1210791 SUSE bug 1210793 SUSE bug 1210806 SUSE bug 1210816 SUSE bug 1210817 SUSE bug 1210827 SUSE bug 1210853 SUSE bug 1210940 SUSE bug 1210943 SUSE bug 1210947 SUSE bug 1210953 SUSE bug 1210986 SUSE bug 1211014 SUSE bug 1211025 SUSE bug 1211037 SUSE bug 1211043 SUSE bug 1211044 SUSE bug 1211089 SUSE bug 1211105 SUSE bug 1211113 SUSE bug 1211131 SUSE bug 1211205 SUSE bug 1211263 SUSE bug 1211280 SUSE bug 1211281 SUSE bug 1211299 SUSE bug 1211346 SUSE bug 1211387 SUSE bug 1211400 SUSE bug 1211410 SUSE bug 1211414 SUSE bug 1211449 SUSE bug 1211465 SUSE bug 1211519 SUSE bug 1211564 SUSE bug 1211590 SUSE bug 1211592 SUSE bug 1211593 SUSE bug 1211595 SUSE bug 1211654 SUSE bug 1211686 SUSE bug 1211687 SUSE bug 1211688 SUSE bug 1211689 SUSE bug 1211690 SUSE bug 1211691 SUSE bug 1211692 SUSE bug 1211693 SUSE bug 1211714 SUSE bug 1211794 SUSE bug 1211796 SUSE bug 1211804 SUSE bug 1211807 SUSE bug 1211808 SUSE bug 1211820 SUSE bug 1211836 SUSE bug 1211847 SUSE bug 1211852 SUSE bug 1211855 SUSE bug 1211960 SUSE bug 1212051 SUSE bug 1212129 SUSE bug 1212154 SUSE bug 1212155 SUSE bug 1212158 SUSE bug 1212265 SUSE bug 1212350 SUSE bug 1212445 SUSE bug 1212448 SUSE bug 1212456 SUSE bug 1212494 SUSE bug 1212495 SUSE bug 1212504 SUSE bug 1212513 SUSE bug 1212540 SUSE bug 1212556 SUSE bug 1212561 SUSE bug 1212563 SUSE bug 1212564 SUSE bug 1212584 SUSE bug 1212592 SUSE bug 1212603 SUSE bug 1212605 SUSE bug 1212606 SUSE bug 1212619 SUSE bug 1212685 SUSE bug 1212701 SUSE bug 1212741 SUSE bug 1212835 SUSE bug 1212838 SUSE bug 1212842 SUSE bug 1212848 SUSE bug 1212861 SUSE bug 1212869 SUSE bug 1212892 SUSE bug 1212961 SUSE bug 1213010 SUSE bug 1213011 SUSE bug 1213012 SUSE bug 1213013 SUSE bug 1213014 SUSE bug 1213015 SUSE bug 1213016 SUSE bug 1213017 SUSE bug 1213018 SUSE bug 1213019 SUSE bug 1213020 SUSE bug 1213021 SUSE bug 1213024 SUSE bug 1213025 SUSE bug 1213032 SUSE bug 1213034 SUSE bug 1213035 SUSE bug 1213036 SUSE bug 1213037 SUSE bug 1213038 SUSE bug 1213039 SUSE bug 1213040 SUSE bug 1213041 SUSE bug 1213087 SUSE bug 1213088 SUSE bug 1213089 SUSE bug 1213090 SUSE bug 1213092 SUSE bug 1213093 SUSE bug 1213094 SUSE bug 1213095 SUSE bug 1213096 SUSE bug 1213098 SUSE bug 1213099 SUSE bug 1213100 SUSE bug 1213102 SUSE bug 1213103 SUSE bug 1213104 SUSE bug 1213105 SUSE bug 1213106 SUSE bug 1213107 SUSE bug 1213108 SUSE bug 1213109 SUSE bug 1213110 SUSE bug 1213111 SUSE bug 1213112 SUSE bug 1213113 SUSE bug 1213114 SUSE bug 1213116 SUSE bug 1213134 CVE-2022-36280 CVE-2022-38096 CVE-2022-4269 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2022-4744 CVE-2023-0045 CVE-2023-0122 CVE-2023-0179 CVE-2023-0394 CVE-2023-0461 CVE-2023-0469 CVE-2023-0590 CVE-2023-0597 CVE-2023-1075 CVE-2023-1076 CVE-2023-1077 CVE-2023-1079 CVE-2023-1095 CVE-2023-1118 CVE-2023-1249 CVE-2023-1382 CVE-2023-1513 CVE-2023-1582 CVE-2023-1583 CVE-2023-1611 CVE-2023-1637 CVE-2023-1652 CVE-2023-1670 CVE-2023-1829 CVE-2023-1838 CVE-2023-1855 CVE-2023-1989 CVE-2023-1998 CVE-2023-2002 CVE-2023-21102 CVE-2023-21106 CVE-2023-2124 CVE-2023-2156 CVE-2023-2162 CVE-2023-2176 CVE-2023-2235 CVE-2023-2269 CVE-2023-22998 CVE-2023-23000 CVE-2023-23001 CVE-2023-23004 CVE-2023-23006 CVE-2023-2430 CVE-2023-2483 CVE-2023-25012 CVE-2023-2513 CVE-2023-26545 CVE-2023-28327 CVE-2023-28410 CVE-2023-28464 CVE-2023-28866 CVE-2023-3006 CVE-2023-30456 CVE-2023-30772 CVE-2023-3090 CVE-2023-31084 CVE-2023-3111 CVE-2023-3141 CVE-2023-31436 CVE-2023-3161 CVE-2023-3212 CVE-2023-3220 CVE-2023-32233 CVE-2023-33288 CVE-2023-3357 CVE-2023-3358 CVE-2023-3389 CVE-2023-33951 CVE-2023-33952 CVE-2023-35788 CVE-2023-35823 CVE-2023-35828 CVE-2023-35829 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ImageMagick (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ImageMagick fixes the following issues: - CVE-2023-34474: Fixed heap-based buffer overflow in ReadTIM2ImageData() function in coders/tim2.c (bsc#1212237). Moderate SUSE bug 1212237 CVE-2023-34474 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for perl (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for perl fixes the following issues: - CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999). Important SUSE bug 1210999 CVE-2023-31484 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for netty, netty-tcnative (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for netty, netty-tcnative fixes the following issues: Upgrade to upstream version 4.1.94: - CVE-2023-34462: Allow to limit the maximum lenght of the ClientHello (bsc#1212637). Moderate SUSE bug 1212637 CVE-2023-34462 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.20-openssl (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.20-openssl fixes the following issues: Update to version 1.20.6.1 (bsc#1206346): - CVE-2023-29406: Fixed insufficient sanitization of Host header (bsc#1213229). Moderate SUSE bug 1206346 SUSE bug 1213229 CVE-2023-29406 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gcc13 (Important) (in QA) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the 'Development Tools' module. The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories. To use gcc13 compilers use: - install 'gcc13' or 'gcc13-c++' or one of the other 'gcc13-COMPILER' frontend packages. - override your Makefile to use CC=gcc13, CXX=g++13 and similar overrides for the other languages. For a full changelog with all new GCC13 features, check out https://gcc.gnu.org/gcc-13/changes.html Detailed changes: * CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052) - Turn cross compiler to s390x to a glibc cross. [bsc#1214460] - Also handle -static-pie in the default-PIE specs - Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101] - Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427] - Add new x86-related intrinsics (amxcomplexintrin.h). - RISC-V: Add support for inlining subword atomic operations - Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver. - Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC. - Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing. - Bump included newlib to version 4.3.0. - Also package libhwasan_preinit.o on aarch64. - Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite. - Package libhwasan_preinit.o on x86_64. - Fixed unwinding on aarch64 with pointer signing. [bsc#1206684] - Enable PRU flavour for gcc13 - update floatn fixinclude pickup to check each header separately (bsc#1206480) - Redo floatn fixinclude pick-up to simply keep what is there. - Bump libgo SONAME to libgo22. - Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers. - Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15. - Depend on at least LLVM 13 for GCN cross compiler. - Update embedded newlib to version 4.2.0 - Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the same build. This patch is currently in QA and not yet available for download. Important SUSE bug 1206480 SUSE bug 1206684 SUSE bug 1210557 SUSE bug 1211427 SUSE bug 1212101 SUSE bug 1213915 SUSE bug 1214052 SUSE bug 1214460 CVE-2023-4039 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for eclipse-jgit, jsch (Important) (in QA) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for eclipse-jgit, jsch fixes the following issues: Security fix: - CVE-2023-4759: Fixed an arbitrary file overwrite which might have occurred with a specially crafted git repository and a case-insensitive filesystem. (bsc#1215298) Other fixes: jsch was updated to version 0.2.9: - Added support for various algorithms - Migrated from `com.jcraft:jsch` to `com.github.mwiede:jsch` fork (bsc#1211955): * Alias to the old artifact since the new one is drop-in replacement * Keep the old OSGi bundle symbolic name to avoid extensive patching of eclipse stack - Updated to version 0.2.9: * For the full list of changes please consult the upstream changelogs below for each version updated: + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.9 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.8 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.7 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.6 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.5 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.4 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.3 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.2 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.1 + https://github.com/mwiede/jsch/releases/tag/jsch-0.2.0 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.71 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.70 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.69 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.68 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.67 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.66 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.65 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.64 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.63 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.62 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.61 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.60 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.59 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.58 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.57 + https://github.com/mwiede/jsch/releases/tag/jsch-0.1.56 eclipse-jgit: - Craft the jgit script from the real Main class of the jar file instead of using a jar launcher (bsc#1209646) This patch is currently in QA and not yet available for download. Important SUSE bug 1209646 SUSE bug 1211955 SUSE bug 1215298 CVE-2023-4759 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for guava (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for guava fixes the following issues: Upgrade to guava 32.0.1: - CVE-2020-8908: Fixed predictable temporary files and directories used in FileBackedOutputStream (bsc#1179926). - CVE-2023-2976: Fixed a temp directory creation vulnerability (bsc#1212401). Moderate SUSE bug 1179926 SUSE bug 1212401 CVE-2020-8908 CVE-2023-2976 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for jetty-minimal (Important) (in QA) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for jetty-minimal fixes the following issues: - Updated to version 9.4.53.v20231009: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - CVE-2023-36478: Fixed an integer overflow in the HTTP/2 HPACK decoder (bsc#1216162). - CVE-2023-40167: Fixed a permissive HTTP header parsing issue that could potentially lead to HTTP smuggling attacks (bsc#1215417). - CVE-2023-36479: Fixed an incorrect command execution when sending requests with certain characters in requested filenames (bsc#1215415). - CVE-2023-41900: Fixed an issue where an invalidated session would be allowed to perform a single request (bsc#1215416). This patch is currently in QA and not yet available for download. Important SUSE bug 1215415 SUSE bug 1215416 SUSE bug 1215417 SUSE bug 1216162 SUSE bug 1216169 CVE-2023-36478 CVE-2023-36479 CVE-2023-40167 CVE-2023-41900 CVE-2023-44487 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for netty, netty-tcnative (Important) (in QA) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for netty, netty-tcnative fixes the following issues: - Updated netty to version 4.1.100: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - Updated netty-tcnative to version 2.0.62 Final. This patch is currently in QA and not yet available for download. Important SUSE bug 1216169 CVE-2023-44487 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for jtidy (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for jtidy fixes the following issues: - CVE-2023-34623: Prevent crash when parsing documents with excessive nesting (bsc#1212404). Moderate SUSE bug 1212404 CVE-2023-34623 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). The following non-security bugs were fixed: - Dropped patch that caused issues with k3s (bsc#1213705). - ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes). - ASoC: SOF: topology: Fix logic for copying tuples (git-fixes). - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes). - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes). - Bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes). - Bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes). - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - Bluetooth: fix use-bdaddr-property quirk (git-fixes). - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - Bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes). - Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758) - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525). - PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes) - Revert 'drm/i915: Disable DSB usage for now' (git-fixes). - USB: dwc2: Fix some error handling paths (git-fixes). - USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). - USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). - USB: typec: Fix fast_role_swap_current show function (git-fixes). - Update config and supported.conf files due to renaming. - acpi: Fix suspend with Xen PV (git-fixes). - adreno: Shutdown the GPU properly (git-fixes). - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes) - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes) - arm64: vdso: Pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - can: bcm: Fix UAF in bcm_proc_show() (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in DebugData (bsc#1193629). - cifs: print client_guid in DebugData (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: tegra194: Fix module loading (git-fixes). - devlink: fix kernel-doc notation warnings (git-fixes). - dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: Add Z8 allow states to z-state support list (git-fixes). - drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes). - drm/amd/display: Add minimum Z8 residency debug option (git-fixes). - drm/amd/display: Add missing WA and MCLK validation (git-fixes). - drm/amd/display: Change default Z8 watermark values (git-fixes). - drm/amd/display: Correct DML calculation to align HW formula (git-fixes). - drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes). - drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes). - drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes). - drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes). - drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes). - drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes). - drm/amd/display: Fix Z8 support configurations (git-fixes). - drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes). - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: Have Payload Properly Created After Resume (git-fixes). - drm/amd/display: Lowering min Z8 residency time (git-fixes). - drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: Refactor eDP PSR codes (git-fixes). - drm/amd/display: Remove FPU guards from the DML folder (git-fixes). - drm/amd/display: Remove optimization for VRR updates (git-fixes). - drm/amd/display: Remove stutter only configurations (git-fixes). - drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes). - drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes). - drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes). - drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes). - drm/amd/pm: resolve reboot exception for si oland (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (git-fixes). - drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (git-fixes). - drm/amd/pm: workaround for compute workload type on some skus (git-fixes). - drm/amd: Add a new helper for loading/validating microcode (git-fixes). - drm/amd: Do not allow s0ix on APUs older than Raven (git-fixes). - drm/amd: Load MES microcode during early_init (git-fixes). - drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes). - drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (git-fixes). - drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes). - drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes). - drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes). - drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes). - drm/amdgpu/mes11: enable reg active poll (git-fixes). - drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes (git-fixes). - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes). - drm/amdgpu: Do not set struct drm_driver.output_poll_changed (git-fixes). - drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes). - drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes). - drm/amdgpu: Fix sdma v4 sw fini error (git-fixes). - drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes). - drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs (git-fixes). - drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes). - drm/amdgpu: change reserved vram info print (git-fixes). - drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes). - drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes). - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes). - drm/amdgpu: refine get gpu clock counter method (git-fixes). - drm/amdgpu: remove deprecated MES version vars (git-fixes). - drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes). - drm/amdgpu: set gfx9 onwards APU atomics support to be true (git-fixes). - drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes). - drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes). - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() (git-fixes). - drm/bridge: anx7625: Prevent endless probe loop (git-fixes). - drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes). - drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes). - drm/client: Fix memory leak in drm_client_target_cloned (git-fixes). - drm/display/dp_mst: Fix payload addition on a disconnected sink (git-fixes). - drm/display: Do not block HDR_OUTPUT_METADATA on unknown EOTF (git-fixes). - drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes). - drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes). - drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage (git-fixes). - drm/etnaviv: move idle mapping reaping into separate function (git-fixes). - drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes). - drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs (bsc#1213493). - drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes). - drm/i915/gt: Cleanup partial engine discovery failures (git-fixes). - drm/i915/guc: Add error-capture init warnings when needed (git-fixes). - drm/i915/guc: Fix missing ecodes (git-fixes). - drm/i915/guc: Limit scheduling properties to avoid overflow (git-fixes). - drm/i915/guc: Rename GuC register state capture node to be more obvious (git-fixes). - drm/i915/mtl: update scaler source and destination limits for MTL (git-fixes). - drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs (git-fixes). - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes). - drm/i915/tc: Fix TC port link ref init for DP MST during HW readout (git-fixes). - drm/i915: Allow panel fixed modes to have differing sync polarities (git-fixes). - drm/i915: Check pipe source size when using skl+ scalers (git-fixes). - drm/i915: Do panel VBT init early if the VBT declares an explicit panel type (git-fixes). - drm/i915: Fix TypeC mode initialization during system resume (git-fixes). - drm/i915: Fix a memory leak with reused mmap_offset (git-fixes). - drm/i915: Fix negative value passed as remaining time (git-fixes). - drm/i915: Fix one wrong caching mode enum usage (git-fixes). - drm/i915: Introduce intel_panel_init_alloc() (git-fixes). - drm/i915: Never return 0 if not all requests retired (git-fixes). - drm/i915: Populate encoder->devdata for DSI on icl+ (git-fixes). - drm/i915: Print return value on error (git-fixes). - drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes). - drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (git-fixes). - drm/msm/a5xx: really check for A510 in a5xx_gpu_init (git-fixes). - drm/msm/adreno: Simplify read64/write64 helpers (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: Add DSC hardware blocks to register snapshot (git-fixes). - drm/msm/dpu: Assign missing writeback log_mask (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes). - drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register (git-fixes). - drm/msm/hdmi: use devres helper for runtime PM management (git-fixes). - drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable (git-fixes). - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes). - drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes). - drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes). - drm/ttm: Do not leak a resource on swapout move error (git-fixes). - drm/virtio: Fix memory leak in virtio_gpu_object_create() (git-fixes). - drm/virtio: Simplify error handling of virtio_gpu_object_create() (git-fixes). - drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable (git-fixes). - drm/vmwgfx: Remove ttm object hashtable (git-fixes). - drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes). - drm/vmwgfx: Write the driver id registers (git-fixes). - drm: Add fixed-point helper to get rounded integer values (git-fixes). - drm: Add missing DP DSC extended capability definitions (git-fixes). - drm: Optimize drm buddy top-down allocation method (git-fixes). - drm: buddy_allocator: Fix buddy allocator init on 32-bit systems (git-fixes). - drm: panel-orientation-quirks: Add quirk for DynaBook K50 (git-fixes). - drm: rcar-du: Add quirk for H3 ES1.x pclk workaround (git-fixes). - drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes). - drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes). - fuse: ioctl: translate ENOSYS in outarg (bsc#1213524). - fuse: revalidate: do not invalidate if interrupted (bsc#1213523). - i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226). - irqchip/gic-v3: Claim iomem resources (bsc#1213533) - irqchip/gicv3: Handle resource request failure consistently (bsc#1213533) - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533) - kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243). - kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers - kabi/severities: ignore kABI of i915 module It's exported only for its sub-module, not really used by externals - kabi/severities: ignore kABI of vmwgfx The driver exports a function unnecessarily without used by anyone else. Ignore the kABI changes. - memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905). - net: mana: Add support for vlan tagging (bsc#1212301). - net: phy: prevent stale pointer dereference in phy_init() (git-fixes). - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (git-fixes). - net: qrtr: start MHI channel after endpoit creation (git-fixes). - nilfs2: reject devices with insufficient block count (git-fixes). - ocfs2: Switch to security_inode_init_security() (git-fixes). - ocfs2: check new file size on fallocate call (git-fixes). - ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes). - perf/x86/amd/core: Always clear status for idx (bsc#1213233). - pie: fix kernel-doc notation warning (git-fixes). - powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869). - powerpc/64s: Fix VAS mm use after free (bsc#1194869). - powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869). - powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869). - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869). - powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869). - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes). - powerpc/mm: Switch obsolete dssall to .long (bsc#1194869). - powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869). - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869). - powerpc/prom_init: Fix kernel config grep (bsc#1194869). - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (jsc#PED-542 git-fixes). - powerpc/secvar: fix refcount leak in format_show() (bsc#1194869). - powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869). - powerpc: clean vdso32 and vdso64 directories (bsc#1194869). - powerpc: define get_cycles macro for arch-override (bsc#1194869). - powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869). - rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*. - rsi: remove kernel-doc comment marker (git-fixes). - s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259). - s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258). - s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263). - s390/pci: clean up left over special treatment for function zero (bsc#1212525). - s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525). - s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525). - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252). - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt; 2.36 (git-fixes bsc#1213264). - s390: discard .interp section (git-fixes bsc#1213247). - security: keys: Modify mismatched function name (git-fixes). - selftests/ir: fix build with ancient kernel headers (git-fixes). - selftests: cgroup: fix unsigned comparison with less than zero (git-fixes). - selftests: forwarding: Fix packet matching in mirroring selftests (git-fixes). - selftests: tc: add 'ct' action kconfig dep (git-fixes). - selftests: tc: add ConnTrack procfs kconfig (git-fixes). - selftests: tc: set timeout to 15 minutes (git-fixes). - signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869). - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869). - smb3: do not reserve too many oplock credits (bsc#1193629). - smb3: missing null check in SMB2_change_notify (bsc#1193629). - smb: client: fix broken file attrs with nodfs mounts (bsc#1193629). - smb: client: fix missed ses refcounting (git-fixes). - smb: client: fix parsing of source mount option (bsc#1193629). - smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629). - smb: client: fix warning in CIFSFindFirst() (bsc#1193629). - smb: client: fix warning in CIFSFindNext() (bsc#1193629). - smb: client: fix warning in cifs_match_super() (bsc#1193629). - smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629). - smb: client: fix warning in generic_ip_connect() (bsc#1193629). - smb: client: improve DFS mount check (bsc#1193629). - smb: client: remove redundant pointer 'server' (bsc#1193629). - smb: delete an unnecessary statement (bsc#1193629). - smb: move client and server files to common directory fs/smb (bsc#1193629). - smb: remove obsolete comment (bsc#1193629). - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (git-fixes). - soundwire: cadence: Drain the RX FIFO after an IO timeout (git-fixes). - soundwire: stream: Add missing clear of alloc_slave_rt (git-fixes). - spi: bcm63xx: fix max prepend length (git-fixes). - swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes). - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes). - wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes). - wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart (git-fixes). - wifi: ath11k: Add missing check for ioremap (git-fixes). - wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes). - x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes). - x86/platform/uv: Add platform resolving #defines for misc GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Fix printed information in calc_mmioh_map (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Remove remaining BUG_ON() and BUG() calls (bsc#1212256 jsc#PED-4718). - x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Update UV platform code for SNC (bsc#1212256 jsc#PED-4718). - x86/platform/uv: When searching for minimums, start at INT_MAX not 99999 (bsc#1212256 jsc#PED-4718). - x86: Fix .brk attribute in linker script (git-fixes). - xfs: clean up the rtbitmap fsmap backend (git-fixes). - xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes). - xfs: do not reverse order of items in bulk AIL insertion (git-fixes). - xfs: fix getfsmap reporting past the last rt extent (git-fixes). - xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes). - xfs: fix interval filtering in multi-step fsmap queries (git-fixes). - xfs: fix logdev fsmap query result filtering (git-fixes). - xfs: fix off-by-one error when the last rt extent is in use (git-fixes). - xfs: fix uninitialized variable access (git-fixes). - xfs: make fsmap backend function key parameters const (git-fixes). - xfs: make the record pointer passed to query_range functions const (git-fixes). - xfs: pass explicit mount pointer to rtalloc query functions (git-fixes). Important SUSE bug 1150305 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1207894 SUSE bug 1208788 SUSE bug 1211243 SUSE bug 1211867 SUSE bug 1212256 SUSE bug 1212301 SUSE bug 1212525 SUSE bug 1212846 SUSE bug 1212905 SUSE bug 1213059 SUSE bug 1213061 SUSE bug 1213205 SUSE bug 1213206 SUSE bug 1213226 SUSE bug 1213233 SUSE bug 1213245 SUSE bug 1213247 SUSE bug 1213252 SUSE bug 1213258 SUSE bug 1213259 SUSE bug 1213263 SUSE bug 1213264 SUSE bug 1213286 SUSE bug 1213493 SUSE bug 1213523 SUSE bug 1213524 SUSE bug 1213533 SUSE bug 1213543 SUSE bug 1213705 CVE-2023-20593 CVE-2023-2985 CVE-2023-3117 CVE-2023-31248 CVE-2023-3390 CVE-2023-35001 CVE-2023-3812 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.20 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.20 fixes the following issues: - Update to go v1.20.7 (released 2023-08-01) (bsc#1206346) - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) Important SUSE bug 1206346 SUSE bug 1213880 CVE-2023-29409 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rust1.71 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rust1.71 fixes the following issues: Update to version 1.71.1: - CVE-2023-38497: Fixed privilege escalation with Cargo not respecting umask when extracting dependencies (bsc#1213817). Important SUSE bug 1213817 CVE-2023-38497 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.19 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.19 fixes the following issues: - Update to go v1.19.12 (released 2023-08-01) (bsc#1200441) - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) Important SUSE bug 1200441 SUSE bug 1213880 CVE-2023-29409 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627). - CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417). - CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812). The following non-security bugs were fixed: - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445). - ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445). - ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes). - ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes). - afs: Adjust ACK interpretation to try and cope with NAT (git-fixes). - afs: Fix access after dec in put functions (git-fixes). - afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes). - afs: Fix dynamic root getattr (git-fixes). - afs: Fix fileserver probe RTT handling (git-fixes). - afs: Fix infinite loop found by xfstest generic/676 (git-fixes). - afs: Fix lost servers_outstanding count (git-fixes). - afs: Fix server->active leak in afs_put_server (git-fixes). - afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes). - afs: Fix updating of i_size with dv jump from server (git-fixes). - afs: Fix vlserver probe RTT handling (git-fixes). - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes). - afs: Use refcount_t rather than atomic_t (git-fixes). - afs: Use the operation issue time instead of the reply time for callbacks (git-fixes). - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes). - ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes). - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes). - ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes). - ALSA: hda/realtek - remove 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes). - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes). - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes). - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129). - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes). - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes). - ALSA: usb-audio: Avoid unnecessary interface change at EP close (git-fixes). - ALSA: usb-audio: Clear fixed clock rate at closing EP (git-fixes). - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Drop superfluous interface setup at parsing (git-fixes). - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes). - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes). - ALSA: usb-audio: More refactoring of hw constraint rules (git-fixes). - ALSA: usb-audio: Properly refcounting clock rate (git-fixes). - ALSA: usb-audio: Rate limit usb_set_interface error reporting (git-fixes). - ALSA: usb-audio: Refcount multiple accesses on the single clock (git-fixes). - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (git-fixes). - ALSA: usb-audio: Update for native DSD support quirks (git-fixes). - ALSA: usb-audio: Use atomic_try_cmpxchg in ep_state_update (git-fixes). - ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes). - amd-pstate: Fix amd_pstate mode switch (git-fixes). - ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes). - ASoC: atmel: Fix the 8K sample parameter in I2SC master (git-fixes). - ASoc: codecs: ES8316: Fix DMIC config (git-fixes). - ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes). - ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes). - ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes). - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes). - ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes). - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes). - ASoC: da7219: Check for failure reading AAD IRQ events (git-fixes). - ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes). - ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes). - ASoC: fsl_spdif: Silence output on stop (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes). - ASoC: tegra: Fix ADX byte map (git-fixes). - ASoC: tegra: Fix AMX byte map (git-fixes). - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (git-fixes). - ata: pata_ns87415: mark ns87560_tf_read static (git-fixes). - block, bfq: Fix division by zero error on zero wsum (bsc#1213653). - block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes). - bus: mhi: add new interfaces to handle MHI channels directly (bsc#1207948). - bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948). - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes). - ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856). - coda: Avoid partial allocation of sig_inputArgs (git-fixes). - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State frequencies attributes (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State performance attributes (bsc#1212445). - cpufreq: amd-pstate: Add boost mode support for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445). - cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445). - cpufreq: amd-pstate: Add fast switch function for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: Add guided autonomous mode (bsc#1212445). - cpufreq: amd-pstate: Add guided mode control support via sysfs (bsc#1212445). - cpufreq: amd-pstate: Add more tracepoint for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: Add resume and suspend callbacks (bsc#1212445). - cpufreq: amd-pstate: Add trace for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445). - cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445). - cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445). - cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL register at init (bsc#1212445). - cpufreq: amd-pstate: Expose struct amd_cpudata (bsc#1212445). - cpufreq: amd-pstate: Fix initial highest_perf value (bsc#1212445). - cpufreq: amd-pstate: Fix invalid write to MSR_AMD_CPPC_REQ (bsc#1212445). - cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445). - cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment (bsc#1212445). - cpufreq: amd-pstate: fix white-space (bsc#1212445). - cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445). - cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445). - cpufreq: amd-pstate: implement Pstate EPP support for the AMD processors (bsc#1212445). - cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445). - cpufreq: amd-pstate: Introduce a new AMD P-State driver to support future processors (bsc#1212445). - cpufreq: amd-pstate: Introduce the support for the processors with shared memory solution (bsc#1212445). - cpufreq: amd-pstate: Let user know amd-pstate is disabled (bsc#1212445). - cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated (bsc#1212445). - cpufreq: amd-pstate: Make varaiable mode_state_machine static (bsc#1212445). - cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445). - cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (bsc#1212445). - cpufreq: amd-pstate: Remove fast_switch_possible flag from active driver (bsc#1212445). - cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules (bsc#1212445). - cpufreq: amd-pstate: Set a fallback policy based on preferred_profile (bsc#1212445). - cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445). - cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() (bsc#1212445). - cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445). - cpufreq: amd-pstate: Write CPPC enable bit per-socket (bsc#1212445). - crypto: kpp - Add helper to set reqsize (git-fixes). - crypto: qat - Use helper to set reqsize (git-fixes). - dlm: fix missing lkb refcount handling (git-fixes). - dlm: fix plock invalid read (git-fixes). - Documentation: cpufreq: amd-pstate: Move amd_pstate param to alphabetical order (bsc#1212445). - Documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes). - drm/amd/display: Add monitor specific edid quirk (git-fixes). - drm/amd/display: Add polling method to handle MST reply packet (bsc#1213578). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes). - drm/amd/display: Disable MPC split by default on special asic (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix seamless odm transitions (git-fixes). - drm/amd/display: Keep PHY active for DP displays on DCN31 (git-fixes). - drm/amd/display: only accept async flips for fast updates (git-fixes). - drm/amd/display: Only update link settings after successful MST link train (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() (git-fixes). - drm/amd: Fix an error handling mistake in psp_sw_init() (git-fixes). - drm/amdgpu: add the fan abnormal detection feature (git-fixes). - drm/amdgpu: avoid restore process run into dead loop (git-fixes). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes). - drm/amdgpu: Fix minmax warning (git-fixes). - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes). - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 (git-fixes). - drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes). - drm/amd/pm: share the code around SMU13 pcie parameters update (git-fixes). - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes). - drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (git-fixes). - drm/client: Fix memory leak in drm_client_modeset_probe (git-fixes). - drm/dp_mst: Clear MSG_RDY flag before sending new message (bsc#1213578). - drm: Fix null pointer dereference in drm_dp_atomic_find_time_slots() (bsc#1213578). - drm/i915: Do not preserve dpll_hw_state for slave crtc in Bigjoiner (git-fixes). - drm/i915/dpt: Use shmem for dpt objects (git-fixes). - drm/i915: Fix an error handling path in igt_write_huge() (git-fixes). - drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks (git-fixes). - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (git-fixes). - drm/radeon: Fix integer overflow in radeon_cs_parser_init (git-fixes). - drm/ttm: fix bulk_move corruption when adding a entry (git-fixes). - drm/ttm: fix warning that we shouldn't mix && and || (git-fixes). - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (bsc#1213632). - drm/vmwgfx: Remove explicit and broken vblank handling (bsc#1213632). - drm/vmwgfx: Remove rcu locks from user resources (bsc#1213632). - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes). - fbdev: imxfb: Removed unneeded release_mem_region (git-fixes). - fbdev: imxfb: warn about invalid left/right margin (git-fixes). - file: always lock position for FMODE_ATOMIC_POS (bsc#1213759). - fs: dlm: add midcomms init/start functions (git-fixes). - fs: dlm: do not set stop rx flag after node reset (git-fixes). - fs: dlm: filter user dlm messages for kernel locks (git-fixes). - fs: dlm: fix log of lowcomms vs midcomms (git-fixes). - fs: dlm: fix race between test_bit() and queue_work() (git-fixes). - fs: dlm: fix race in lowcomms (git-fixes). - fs: dlm: handle -EBUSY first in lock arg validation (git-fixes). - fs: dlm: move sending fin message into state change handling (git-fixes). - fs: dlm: retry accept() until -EAGAIN or error returns (git-fixes). - fs: dlm: return positive pid value for F_GETLK (git-fixes). - fs: dlm: start midcomms before scand (git-fixes). - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (git-fixes). - FS: JFS: Check for read-only mounted filesystem in txBegin (git-fixes). - FS: JFS: Fix null-ptr-deref Read in txBegin (git-fixes). - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (git-fixes). - gve: Set default duplex configuration to full (git-fixes). - gve: unify driver name usage (git-fixes). - hwmon: (adm1275) Allow setting sample averaging (git-fixes). - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (git-fixes). - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (git-fixes). - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes). - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes). - i2c: xiic: Do not try to handle more interrupt events after error (git-fixes). - iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED (git-fixes). - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes). - iavf: Fix out-of-bounds when setting channels on remove (git-fixes). - iavf: fix potential deadlock on allocation failure (git-fixes). - iavf: fix reset task race with iavf_remove() (git-fixes). - iavf: Fix use-after-free in free_netdev (git-fixes). - iavf: Move netdev_update_features() into watchdog task (git-fixes). - iavf: use internal state to free traffic IRQs (git-fixes). - iavf: Wait for reset in callbacks which trigger it (git-fixes). - IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes) - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - ice: handle extts in the miscellaneous interrupt thread (git-fixes). - igc: Check if hardware TX timestamping is enabled earlier (git-fixes). - igc: Enable and fix RX hash usage by netstack (git-fixes). - igc: Fix inserting of empty frame for launchtime (git-fixes). - igc: Fix Kernel Panic during ndo_tx_timeout callback (git-fixes). - igc: Fix launchtime before start of cycle (git-fixes). - igc: Fix race condition in PTP tx code (git-fixes). - igc: Handle PPS start time programming for past time values (git-fixes). - igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes). - igc: Remove delay during TX ring configuration (git-fixes). - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes). - igc: Work around HW bug causing missing timestamps (git-fixes). - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (git-fixes). - Input: iqs269a - do not poll during ATI (git-fixes). - Input: iqs269a - do not poll during suspend or resume (git-fixes). - jffs2: fix memory leak in jffs2_do_fill_super (git-fixes). - jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes). - jffs2: fix memory leak in jffs2_scan_medium (git-fixes). - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes). - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (git-fixes). - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes). - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (git-fixes). - kABI fix after Restore kABI for NVidia vGPU driver (bsc#1210825). - kabi/severities: relax kABI for ath11k local symbols (bsc#1207948) - kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes). - KVM: arm64: Do not read a HW interrupt pending state in user context (git-fixes) - KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620) - KVM: Do not null dereference ops->destroy (git-fixes) - KVM: downgrade two BUG_ONs to WARN_ON_ONCE (git-fixes) - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL (git-fixes) - KVM: s390: pv: fix index value of replaced ASCE (git-fixes bsc#1213867). - KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported (git-fixes). - KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) (git-fixes). - KVM: VMX: restore vmx_vmexit alignment (git-fixes). - KVM: x86: Account fastpath-only VM-Exits in vCPU stats (git-fixes). - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes). - libceph: harden msgr2.1 frame segment length checks (bsc#1213857). - MAINTAINERS: Add AMD P-State driver maintainer entry (bsc#1212445). - m ALSA: usb-audio: Add quirk for Tascam Model 12 (git-fixes). - md: add error_handlers for raid0 and linear (bsc#1212766). - media: staging: atomisp: select V4L2_FWNODE (git-fixes). - mhi_power_down() kABI workaround (bsc#1207948). - mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes). - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes). - net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes). - net: mana: Batch ringing RX queue doorbell on receiving packets (bsc#1212901). - net: mana: Use the correct WQE count for ringing RQ doorbell (bsc#1212901). - net/mlx5: DR, Support SW created encap actions for FW table (git-fixes). - net/mlx5e: Check for NOT_READY flag state after locking (git-fixes). - net/mlx5e: fix double free in mlx5e_destroy_flow_table (git-fixes). - net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (git-fixes). - net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes). - net/mlx5e: XDP, Allow growing tail for XDP multi buffer (git-fixes). - net/mlx5e: xsk: Set napi_id to support busy polling on XSK RQ (git-fixes). - net: phy: marvell10g: fix 88x3310 power up (git-fixes). - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585). - nfsd: add encoding of op_recall flag for write delegation (git-fixes). - nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes). - nfsd: Fix sparse warning (git-fixes). - nfsd: Remove open coding of string copy (git-fixes). - nfsv4.1: Always send a RECLAIM_COMPLETE after establishing lease (git-fixes). - nfsv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (git-fixes). - nvme: do not reject probe due to duplicate IDs for single-ported PCIe devices (git-fixes). - nvme: fix the NVME_ID_NS_NVM_STS_MASK definition (git-fixes). - nvme-pci: fix DMA direction of unmapping integrity data (git-fixes). - nvme-pci: remove nvme_queue from nvme_iod (git-fixes). - octeontx2-af: Move validation of ptp pointer before its usage (git-fixes). - octeontx2-pf: Add additional check for MCAM rules (git-fixes). - octeontx-af: fix hardware timestamp configuration (git-fixes). - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes). - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes). - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (git-fixes). - pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes). - pinctrl: amd: Do not show `Invalid config param` errors (git-fixes). - pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes). - pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes). - pinctrl: amd: Use amd_pinconf_set() for all config options (git-fixes). - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (git-fixes). - RDMA/bnxt_re: Fix hang during driver unload (git-fixes) - RDMA/bnxt_re: Prevent handling any completions after qp destroy (git-fixes) - RDMA/core: Update CMA destination address on rdma_resolve_addr (git-fixes) - RDMA/irdma: Add missing read barriers (git-fixes) - RDMA/irdma: Fix data race on CQP completion stats (git-fixes) - RDMA/irdma: Fix data race on CQP request done (git-fixes) - RDMA/irdma: Fix op_type reporting in CQEs (git-fixes) - RDMA/irdma: Report correct WC error (git-fixes) - RDMA/mlx4: Make check for invalid flags stricter (git-fixes) - RDMA/mthca: Fix crash when polling CQ for shared QPs (git-fixes) - regmap: Account for register length in SMBus I/O limits (git-fixes). - regmap: Drop initial version of maximum transfer length fixes (git-fixes). - Restore kABI for NVidia vGPU driver (bsc#1210825). - Revert 'ALSA: usb-audio: Drop superfluous interface setup at parsing' (git-fixes). - Revert 'debugfs, coccinelle: check for obsolete DEFINE_SIMPLE_ATTRIBUTE() usage' (git-fixes). - Revert 'Drop AMDGPU patches for fixing regression (bsc#1213304,bsc#1213777)' - Revert 'iavf: Detach device during reset task' (git-fixes). - Revert 'iavf: Do not restart Tx queues after reset task failure' (git-fixes). - Revert 'NFSv4: Retry LOCK on OLD_STATEID during delegation return' (git-fixes). - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (git-fixes). - Revert 'usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()' (git-fixes). - Revert 'usb: xhci: tegra: Fix error check' (git-fixes). - Revert 'xhci: add quirk for host controllers that do not update endpoint DCS' (git-fixes). - Revive drm_dp_mst_hpd_irq() function (bsc#1213578). - rxrpc, afs: Fix selection of abort codes (git-fixes). - s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870). - s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810). - s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872). - s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863). - s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870). - s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871). - s390/qeth: Fix vipa deletion (git-fixes bsc#1213713). - s390/vmem: fix empty page tables cleanup under KASAN (git-fixes bsc#1213715). - scftorture: Count reschedule IPIs (git-fixes). - scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected (bsc#1213756). - scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756). - scsi: lpfc: Clean up SLI-4 sysfs resource reporting (bsc#1213756). - scsi: lpfc: Copyright updates for 14.2.0.14 patches (bsc#1213756). - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (bsc#1213756). - scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756). - scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (bsc#1213756). - scsi: lpfc: Pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756). - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (bsc#1213756). - scsi: lpfc: Refactor cpu affinity assignment paths (bsc#1213756). - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (bsc#1213756). - scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (bsc#1213756). - scsi: lpfc: Replace one-element array with flexible-array member (bsc#1213756). - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756). - scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (bsc#1213756). - scsi: lpfc: Simplify fcp_abort transport callback log message (bsc#1213756). - scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756). - scsi: lpfc: Use struct_size() helper (bsc#1213756). - scsi: qla2xxx: Adjust IOCB resource on qpair create (bsc#1213747). - scsi: qla2xxx: Array index may go out of bound (bsc#1213747). - scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747). - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (bsc#1213747). - scsi: qla2xxx: Correct the index of array (bsc#1213747). - scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747). - scsi: qla2xxx: Fix buffer overrun (bsc#1213747). - scsi: qla2xxx: Fix command flush during TMF (bsc#1213747). - scsi: qla2xxx: Fix deletion race condition (bsc#1213747). - scsi: qla2xxx: Fix end of loop test (bsc#1213747). - scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747). - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (bsc#1213747). - scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747). - scsi: qla2xxx: Fix NULL pointer dereference in target mode (bsc#1213747). - scsi: qla2xxx: Fix potential NULL pointer dereference (bsc#1213747). - scsi: qla2xxx: Fix session hang in gnl (bsc#1213747). - scsi: qla2xxx: Fix TMF leak through (bsc#1213747). - scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747). - scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747). - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (bsc#1213747). - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (bsc#1213747). - scsi: qla2xxx: Silence a static checker warning (bsc#1213747). - scsi: qla2xxx: Turn off noisy message log (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747). - scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747). - selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes). - serial: qcom-geni: drop bogus runtime pm state update (git-fixes). - serial: sifive: Fix sifive_serial_console_setup() section (git-fixes). - series: udpate metadata Refresh - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - sfc: fix XDP queues mode with legacy IRQ (git-fixes). - sfc: use budget for TX completions (git-fixes). - soundwire: qcom: update status correctly with mask (git-fixes). - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes). - staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (git-fixes). - SUNRPC: always free ctxt when freeing deferred request (git-fixes). - SUNRPC: double free xprt_ctxt while still in use (git-fixes). - SUNRPC: Fix trace_svc_register() call site (git-fixes). - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (git-fixes). - SUNRPC: Remove dead code in svc_tcp_release_rqst() (git-fixes). - SUNRPC: remove the maximum number of retries in call_bind_status (git-fixes). - svcrdma: Prevent page release when nothing was received (git-fixes). - tpm_tis: Explicitly check for error code (git-fixes). - tty: n_gsm: fix UAF in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes). - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (git-fixes). - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (git-fixes). - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes). - ubifs: Fix AA deadlock when setting xattr for encrypted file (git-fixes). - ubifs: Fix build errors as symbol undefined (git-fixes). - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (git-fixes). - ubifs: Fix memory leak in alloc_wbufs() (git-fixes). - ubifs: Fix memory leak in do_rename (git-fixes). - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes). - ubifs: Fix to add refcount once page is set private (git-fixes). - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (git-fixes). - ubifs: Fix wrong dirty space budget for dirty inode (git-fixes). - ubifs: Free memory for tmpfile name (git-fixes). - ubifs: Rectify space amount budget for mkdir/tmpfile operations (git-fixes). - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes). - ubifs: Rectify space budget for ubifs_xrename() (git-fixes). - ubifs: Rename whiteout atomically (git-fixes). - ubifs: rename_whiteout: correct old_dir size computing (git-fixes). - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (git-fixes). - ubifs: Reserve one leb for each journal head while doing budget (git-fixes). - ubifs: Re-statistic cleaned znode count if commit failed (git-fixes). - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (git-fixes). - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (git-fixes). - Update config files: enable CONFIG_X86_AMD_PSTATE (bsc#1212445) - usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes). - usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes). - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (git-fixes). - usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). - USB: serial: option: add LARA-R6 01B PIDs (git-fixes). - usb: typec: Iterate pds array when showing the pd list (git-fixes). - usb: typec: Set port->pd before adding device for typec_port (git-fixes). - usb: typec: Use sysfs_emit_at when concatenating the string (git-fixes). - usb: xhci-mtk: set the dma max_seg_size (git-fixes). - vhost_net: revert upend_idx only on retriable error (git-fixes). - vhost: support PACKED when setting-getting vring_base (git-fixes). - virtio_net: Fix error unwinding of XDP initialization (git-fixes). - virtio-net: Maintain reverse cleanup order (git-fixes). - wifi: ath11k: add support for suspend in power down state (bsc#1207948). - wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948). - wifi: ath11k: handle thermal device registeration together with MAC (bsc#1207948). - wifi: ath11k: remove MHI LOOPBACK channels (bsc#1207948). - wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes). - wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes). - wl3501_cs: use eth_hw_addr_set() (git-fixes). - x86/PVH: obtain VGA console info in Dom0 (git-fixes). - xen/blkfront: Only check REQ_FUA for writes (git-fixes). - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes). - xfs: AIL needs asynchronous CIL forcing (bsc#1211811). - xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811). - xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811). - xfs: CIL work is serialised, not pipelined (bsc#1211811). - xfs: do not run shutdown callbacks on active iclogs (bsc#1211811). - xfs: drop async cache flushes from CIL commits (bsc#1211811). - xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811). - xfs: move the CIL workqueue to the CIL (bsc#1211811). - xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811). - xfs: order CIL checkpoint start records (bsc#1211811). - xfs: pass a CIL context to xlog_write() (bsc#1211811). - xfs: rework xlog_state_do_callback() (bsc#1211811). - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811). - xfs: separate out log shutdown callback processing (bsc#1211811). - xfs: wait iclog complete before tearing down AIL (bsc#1211811). - xfs: XLOG_STATE_IOERROR must die (bsc#1211811). - xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes). - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes). - xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes). Important SUSE bug 1206418 SUSE bug 1207129 SUSE bug 1207948 SUSE bug 1210627 SUSE bug 1210780 SUSE bug 1210825 SUSE bug 1211131 SUSE bug 1211738 SUSE bug 1211811 SUSE bug 1212445 SUSE bug 1212502 SUSE bug 1212604 SUSE bug 1212766 SUSE bug 1212901 SUSE bug 1213167 SUSE bug 1213272 SUSE bug 1213287 SUSE bug 1213304 SUSE bug 1213417 SUSE bug 1213578 SUSE bug 1213585 SUSE bug 1213586 SUSE bug 1213588 SUSE bug 1213601 SUSE bug 1213620 SUSE bug 1213632 SUSE bug 1213653 SUSE bug 1213713 SUSE bug 1213715 SUSE bug 1213747 SUSE bug 1213756 SUSE bug 1213759 SUSE bug 1213777 SUSE bug 1213810 SUSE bug 1213812 SUSE bug 1213856 SUSE bug 1213857 SUSE bug 1213863 SUSE bug 1213867 SUSE bug 1213870 SUSE bug 1213871 SUSE bug 1213872 CVE-2022-40982 CVE-2023-0459 CVE-2023-20569 CVE-2023-21400 CVE-2023-2156 CVE-2023-2166 CVE-2023-31083 CVE-2023-3268 CVE-2023-3567 CVE-2023-3609 CVE-2023-3611 CVE-2023-3776 CVE-2023-38409 CVE-2023-3863 CVE-2023-4004 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: Update to version 2.40.5 (bsc#1213905): - CVE-2023-38133: Fixed information disclosure. - CVE-2023-38572: Fixed Same-Origin-Policy bypass. - CVE-2023-38592: Fixed arbitrary code execution. - CVE-2023-38594: Fixed arbitrary code execution. - CVE-2023-38595: Fixed arbitrary code execution. - CVE-2023-38597: Fixed arbitrary code execution. - CVE-2023-38599: Fixed sensitive user information tracking. - CVE-2023-38600: Fixed arbitrary code execution. - CVE-2023-38611: Fixed arbitrary code execution. Update to version 2.40.3 (bsc#1212863): - CVE-2023-32439: Fixed a bug where processing maliciously crafted web content may lead to arbitrary code execution. (bsc#1212863) - CVE-2023-32435: Fixed a bug where processing web content may lead to arbitrary code execution. (bsc#1212863) - CVE-2022-48503: Fixed a bug where processing web content may lead to arbitrary code execution. (bsc#1212863) Important SUSE bug 1212863 SUSE bug 1213905 CVE-2022-48503 CVE-2023-32435 CVE-2023-32439 CVE-2023-38133 CVE-2023-38572 CVE-2023-38592 CVE-2023-38594 CVE-2023-38595 CVE-2023-38597 CVE-2023-38599 CVE-2023-38600 CVE-2023-38611 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for indent (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for indent fixes the following issues: - CVE-2023-40305: Fixed a memory safety issues bug. (bsc#1214243) Low SUSE bug 1214243 CVE-2023-40305 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ca-certificates-mozilla (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ca-certificates-mozilla fixes the following issues: - Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248) Added: - Atos TrustedRoot Root CA ECC G2 2020 - Atos TrustedRoot Root CA ECC TLS 2021 - Atos TrustedRoot Root CA RSA G2 2020 - Atos TrustedRoot Root CA RSA TLS 2021 - BJCA Global Root CA1 - BJCA Global Root CA2 - LAWtrust Root CA2 (4096) - Sectigo Public Email Protection Root E46 - Sectigo Public Email Protection Root R46 - Sectigo Public Server Authentication Root E46 - Sectigo Public Server Authentication Root R46 - SSL.com Client ECC Root CA 2022 - SSL.com Client RSA Root CA 2022 - SSL.com TLS ECC Root CA 2022 - SSL.com TLS RSA Root CA 2022 Removed CAs: - Chambers of Commerce Root - E-Tugra Certification Authority - E-Tugra Global Root CA ECC v3 - E-Tugra Global Root CA RSA v3 - Hongkong Post Root CA 1 Important SUSE bug 1214248 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for sccache (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for sccache fixes the following issues: - Update to version 0.4.2. - CVE-2021-45710: Fixed a segmentation fault due to data race in tokio crate. (bsc#1194119) - CVE-2022-24713: Fixed a ReDoS issue due to vulnerable regex crate. (bsc#1196972) - CVE-2022-31394: Fixed a DoS issue due to the max header list size not settable. (bsc#1208553) - CVE-2023-1521: Fixed a local privilege escalation. (bsc#1212407) Important SUSE bug 1181400 SUSE bug 1194119 SUSE bug 1196972 SUSE bug 1208553 SUSE bug 1212407 CVE-2021-45710 CVE-2022-24713 CVE-2022-31394 CVE-2023-1521 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: - Provide/obsolete WebKit2GTK-%{_apiver}-lang (bsc#1214093) - Have the lang package provide libwebkit2gtk3-lang (bsc#1214093) - Adjustments of update version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581): + Added missing CVE references: CVE-2023-32393, CVE-2023-37450 Important SUSE bug 1213379 SUSE bug 1213581 SUSE bug 1213905 SUSE bug 1214093 CVE-2023-32393 CVE-2023-37450 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gcc12 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gcc12 fixes the following issues: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052). Important SUSE bug 1214052 CVE-2023-4039 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gcc7 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for gcc7 fixes the following issues: Security issue fixed: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052). Other fixes: - Fixed KASAN kernel compile. [bsc#1205145] - Fixed ICE with C++17 code as reported in [bsc#1204505] - Fixed altivec.h redefining bool in C++ which makes bool unusable (bsc#1195517): - Adjust gnats idea of the target, fixing the build of gprbuild. [bsc#1196861] Important SUSE bug 1195517 SUSE bug 1196861 SUSE bug 1204505 SUSE bug 1205145 SUSE bug 1214052 CVE-2023-4039 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.20 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.20 fixes the following issues: Update to go1.20.8 (bsc#1206346). - CVE-2023-39318: Fixed improper handling of HTML-like comments within script contexts in html/template (bsc#1215084). - CVE-2023-39319: Fixed improper handling of special tags within script contexts in html/template (bsc#1215085). The following non-security bug was fixed: - Add missing directory pprof html asset directory to package (bsc#1215090). Important SUSE bug 1206346 SUSE bug 1215084 SUSE bug 1215085 SUSE bug 1215090 CVE-2023-39318 CVE-2023-39319 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.21 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.21 fixes the following issues: Update to go1.21.1 (bsc#1212475). - CVE-2023-39318: Fixed improper handling of HTML-like comments within script contexts in html/template (bsc#1215084). - CVE-2023-39319: Fixed improper handling of special tags within script contexts in html/template (bsc#1215085). - CVE-2023-39320: Fixed arbitrary execution in go.mod toolchain directive (bsc#1215086). - CVE-2023-39321, CVE-2023-39322: Fixed a panic when processing post-handshake message on QUIC connections in crypto/tls (bsc#1215087). The following non-security bug was fixed: - Add missing directory pprof html asset directory to package (bsc#1215090). Important SUSE bug 1212475 SUSE bug 1215084 SUSE bug 1215085 SUSE bug 1215086 SUSE bug 1215087 SUSE bug 1215090 CVE-2023-39318 CVE-2023-39319 CVE-2023-39320 CVE-2023-39321 CVE-2023-39322 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cups (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cups fixes the following issues: - CVE-2023-4504: Fixed heap overflow in OpenPrinting CUPS Postscript Parsing (bsc#1215204). - CVE-2023-32360: Fixed Information leak through Cups-Get-Document operation (bsc#1214254). Important SUSE bug 1214254 SUSE bug 1215204 CVE-2023-32360 CVE-2023-4504 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rust, rust1.72 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rust, rust1.72 fixes the following issues: Changes in rust: - Update to version 1.72.0 - for details see the rust1.72 package Changes in rust1.72: - CVE-2023-40030: fix minor non-exploited issue in cargo (bsc#1214689) Version 1.72.0 (2023-08-24) ========================== Language -------- - Replace const eval limit by a lint and add an exponential backoff warning - expand: Change how `#![cfg(FALSE)]` behaves on crate root - Stabilize inline asm for LoongArch64 - Uplift `clippy::undropped_manually_drops` lint - Uplift `clippy::invalid_utf8_in_unchecked` lint - Uplift `clippy::cast_ref_to_mut` lint - Uplift `clippy::cmp_nan` lint - resolve: Remove artificial import ambiguity errors - Don't require associated types with Self: Sized bounds in `dyn Trait` objects Compiler -------- - Remember names of `cfg`-ed out items to mention them in diagnostics - Support for native WASM exceptions - Add support for NetBSD/aarch64-be (big-endian arm64). - Write to stdout if `-` is given as output file - Force all native libraries to be statically linked when linking a static binary - Add Tier 3 support for `loongarch64-unknown-none*` - Prevent `.eh_frame` from being emitted for `-C panic=abort` - Support 128-bit enum variant in debuginfo codegen - compiler: update solaris/illumos to enable tsan support. Refer to Rust's platform support page for more information on Rust's tiered platform support. Libraries --------- - Document memory orderings of `thread::{park, unpark}` - io: soften ‘at most one write attempt’ requirement in io::Write::write - Specify behavior of HashSet::insert - Relax implicit `T: Sized` bounds on `BufReader<T>`, `BufWriter<T>` and `LineWriter<T>` - Update runtime guarantee for `select_nth_unstable` - Return `Ok` on kill if process has already exited - Implement PartialOrd for `Vec`s over different allocators - Use 128 bits for TypeId hash - Don't drain-on-drop in DrainFilter impls of various collections. - Make `{Arc,Rc,Weak}::ptr_eq` ignore pointer metadata Rustdoc ------- - Allow whitespace as path separator like double colon - Add search result item types after their name - Search for slices and arrays by type with `[]` - Clean up type unification and 'unboxing' Stabilized APIs --------------- - `impl<T: Send> Sync for mpsc::Sender<T>` - `impl TryFrom<&OsStr> for &str` - `String::leak` These APIs are now stable in const contexts: - `CStr::from_bytes_with_nul` - `CStr::to_bytes` - `CStr::to_bytes_with_nul` - `CStr::to_str` Cargo ----- - Enable `-Zdoctest-in-workspace` by default. When running each documentation test, the working directory is set to the root directory of the package the test belongs to. - Add support of the 'default' keyword to reset previously set `build.jobs` parallelism back to the default. Compatibility Notes ------------------- - Alter `Display` for `Ipv6Addr` for IPv4-compatible addresses - Cargo changed feature name validation check to a hard error. The warning was added in Rust 1.49. These extended characters aren't allowed on crates.io, so this should only impact users of other registries, or people who don't publish to a registry. Moderate SUSE bug 1214689 CVE-2023-40030 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for webkit2gtk3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for webkit2gtk3 fixes the following issues: - Expand lang sub-package in spec file unconditionally to handle previous name change from WebKit2GTK-lang to WebKitGTK-lang. This change affected the automatic generated Requires tag on WebKit2GTK-%{_apiver}, then getting out of sync of what's being required and what's being provided. Now, any sub-package that was providing WebKit2GTK-%{_apiver} will provide WebKitGTK-%{_apiver} instead (bsc#1214835, bsc#1214640, bsc#1214093). - Require libwaylandclient0 >= 1.20. 15.4 originally had 1.19.0, but webkitgtk uses a function added in 1.20.0, so we need to ensure that the wayland update is pulled in (bsc#1215072). - Update to version 2.40.5 (bsc#1213905 bsc#1213379 bsc#1213581 bsc#1215230): CVE-2023-38594, CVE-2023-38595, CVE-2023-38597, CVE-2023-38599, CVE-2023-38600, CVE-2023-38611, CVE-2023-40397, CVE-2023-37450, CVE-2023-28198, CVE-2023-32370 Important SUSE bug 1213379 SUSE bug 1213581 SUSE bug 1213905 SUSE bug 1214093 SUSE bug 1214640 SUSE bug 1214835 SUSE bug 1215072 SUSE bug 1215230 CVE-2023-28198 CVE-2023-32370 CVE-2023-37450 CVE-2023-38594 CVE-2023-38595 CVE-2023-38597 CVE-2023-38599 CVE-2023-38600 CVE-2023-38611 CVE-2023-40397 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for binutils (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for binutils fixes the following issues: Update to version 2.41 [jsc#PED-5778]: * The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few implementation-specific integer instructions. * Objdump's --private option can now be used on PE format files to display the fields in the file header and section headers. * New versioned release of libsframe: libsframe.so.1. This release introduces versioned symbols with version node name LIBSFRAME_1.0. This release also updates the ABI in an incompatible way: this includes removal of sframe_get_funcdesc_with_addr API, change in the behavior of sframe_fre_get_ra_offset and sframe_fre_get_fp_offset APIs. * SFrame Version 2 is now the default (and only) format version supported by gas, ld, readelf and objdump. * Add command-line option, --strip-section-headers, to objcopy and strip to remove ELF section header from ELF file. * The RISC-V port now supports the following new standard extensions: - Zicond (conditional zero instructions) - Zfa (additional floating-point instructions) - Zvbb, Zvbc, Zvkg, Zvkned, Zvknh[ab], Zvksed, Zvksh, Zvkn, Zvknc, Zvkng, Zvks, Zvksc, Zvkg, Zvkt (vector crypto instructions) * The RISC-V port now supports the following vendor-defined extensions: - XVentanaCondOps * Add support for Intel FRED, LKGS and AMX-COMPLEX instructions. * A new .insn directive is recognized by x86 gas. * Add SME2 support to the AArch64 port. * The linker now accepts a command line option of --remap-inputs <PATTERN>=<FILE> to relace any input file that matches <PATTERN> with <FILE>. In addition the option --remap-inputs-file=<FILE> can be used to specify a file containing any number of these remapping directives. * The linker command line option --print-map-locals can be used to include local symbols in a linker map. (ELF targets only). * For most ELF based targets, if the --enable-linker-version option is used then the version of the linker will be inserted as a string into the .comment section. * The linker script syntax has a new command for output sections: ASCIZ 'string' This will insert a zero-terminated string at the current location. * Add command-line option, -z nosectionheader, to omit ELF section header. - Contains fixes for these non-CVEs (not security bugs per upstreams SECURITY.md): * bsc#1209642 aka CVE-2023-1579 aka PR29988 * bsc#1210297 aka CVE-2023-1972 aka PR30285 * bsc#1210733 aka CVE-2023-2222 aka PR29936 * bsc#1213458 aka CVE-2021-32256 aka PR105039 (gcc) * bsc#1214565 aka CVE-2020-19726 aka PR26240 * bsc#1214567 aka CVE-2022-35206 aka PR29290 * bsc#1214579 aka CVE-2022-35205 aka PR29289 * bsc#1214580 aka CVE-2022-44840 aka PR29732 * bsc#1214604 aka CVE-2022-45703 aka PR29799 * bsc#1214611 aka CVE-2022-48065 aka PR29925 * bsc#1214619 aka CVE-2022-48064 aka PR29922 * bsc#1214620 aka CVE-2022-48063 aka PR29924 * bsc#1214623 aka CVE-2022-47696 aka PR29677 * bsc#1214624 aka CVE-2022-47695 aka PR29846 * bsc#1214625 aka CVE-2022-47673 aka PR29876 - This only existed only for a very short while in SLE-15, as the main variant in devel:gcc subsumed this in binutils-revert-rela.diff. Hence: - Document fixed CVEs: * bsc#1208037 aka CVE-2023-25588 aka PR29677 * bsc#1208038 aka CVE-2023-25587 aka PR29846 * bsc#1208040 aka CVE-2023-25585 aka PR29892 * bsc#1208409 aka CVE-2023-0687 aka PR29444 - Enable bpf-none cross target and add bpf-none to the multitarget set of supported targets. - Disable packed-relative-relocs for old codestreams. They generate buggy relocations when binutils-revert-rela.diff is active. [bsc#1206556] - Disable ZSTD debug section compress by default. - Enable zstd compression algorithm (instead of zlib) for debug info sections by default. - Pack libgprofng only for supported platforms. - Move libgprofng-related libraries to the proper locations (packages). - Add --without=bootstrap for skipping of bootstrap (faster testing of the package). - Remove broken arm32-avoid-copyreloc.patch to fix [gcc#108515] Update to version 2.40: * Objdump has a new command line option --show-all-symbols which will make it display all symbols that match a given address when disassembling. (Normally only the first symbol that matches an address is shown). * Add --enable-colored-disassembly configure time option to enable colored disassembly output by default, if the output device is a terminal. Note, this configure option is disabled by default. * DCO signed contributions are now accepted. * objcopy --decompress-debug-sections now supports zstd compressed debug sections. The new option --compress-debug-sections=zstd compresses debug sections with zstd. * addr2line and objdump --dwarf now support zstd compressed debug sections. * The dlltool program now accepts --deterministic-libraries and --non-deterministic-libraries as command line options to control whether or not it generates deterministic output libraries. If neither of these options are used the default is whatever was set when the binutils were configured. * readelf and objdump now have a newly added option --sframe which dumps the SFrame section. * Add support for Intel RAO-INT instructions. * Add support for Intel AVX-NE-CONVERT instructions. * Add support for Intel MSRLIST instructions. * Add support for Intel WRMSRNS instructions. * Add support for Intel CMPccXADD instructions. * Add support for Intel AVX-VNNI-INT8 instructions. * Add support for Intel AVX-IFMA instructions. * Add support for Intel PREFETCHI instructions. * Add support for Intel AMX-FP16 instructions. * gas now supports --compress-debug-sections=zstd to compress debug sections with zstd. * Add --enable-default-compressed-debug-sections-algorithm={zlib,zstd} that selects the default compression algorithm for --enable-compressed-debug-sections. * Add support for various T-Head extensions (XTheadBa, XTheadBb, XTheadBs, XTheadCmo, XTheadCondMov, XTheadFMemIdx, XTheadFmv, XTheadInt, XTheadMemIdx, XTheadMemPair, XTheadMac, and XTheadSync) from version 2.0 of the T-Head ISA manual, which are implemented in the Allwinner D1. * Add support for the RISC-V Zawrs extension, version 1.0-rc4. * Add support for Cortex-X1C for Arm. * New command line option --gsframe to generate SFrame unwind information on x86_64 and aarch64 targets. * The linker has a new command line option to suppress the generation of any warning or error messages. This can be useful when there is a need to create a known non-working binary. The option is -w or --no-warnings. * ld now supports zstd compressed debug sections. The new option --compress-debug-sections=zstd compresses debug sections with zstd. * Add --enable-default-compressed-debug-sections-algorithm={zlib,zstd} that selects the default compression algorithm for --enable-compressed-debug-sections. * Remove support for -z bndplt (MPX prefix instructions). - Includes fixes for these CVEs: * bsc#1206080 aka CVE-2022-4285 aka PR29699 - Enable by default: --enable-colored-disassembly. - fix build on x86_64_vX platforms Important SUSE bug 1200962 SUSE bug 1206080 SUSE bug 1206556 SUSE bug 1208037 SUSE bug 1208038 SUSE bug 1208040 SUSE bug 1208409 SUSE bug 1209642 SUSE bug 1210297 SUSE bug 1210733 SUSE bug 1213458 SUSE bug 1214565 SUSE bug 1214567 SUSE bug 1214579 SUSE bug 1214580 SUSE bug 1214604 SUSE bug 1214611 SUSE bug 1214619 SUSE bug 1214620 SUSE bug 1214623 SUSE bug 1214624 SUSE bug 1214625 CVE-2020-19726 CVE-2021-32256 CVE-2022-35205 CVE-2022-35206 CVE-2022-4285 CVE-2022-44840 CVE-2022-45703 CVE-2022-47673 CVE-2022-47695 CVE-2022-47696 CVE-2022-48063 CVE-2022-48064 CVE-2022-48065 CVE-2023-0687 CVE-2023-1579 CVE-2023-1972 CVE-2023-2222 CVE-2023-25585 CVE-2023-25587 CVE-2023-25588 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python3 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python3 fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). Important SUSE bug 1214692 CVE-2023-40217 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.20-openssl (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.20-openssl fixes the following issues: Update to version 1.20.8 (bsc#1206346). - CVE-2023-29409: Fixed unrestricted RSA keys in certificates (bsc#1213880). - CVE-2023-39319: Fixed improper handling of special tags within script contexts in html/template (bsc#1215085). - CVE-2023-39318: Fixed improper handling of HTML-like comments within script contexts (bsc#1215084). The following non-security bug was fixed: - Add missing directory pprof html asset directory to package (bsc#1215090). Important SUSE bug 1206346 SUSE bug 1213880 SUSE bug 1215084 SUSE bug 1215085 SUSE bug 1215090 CVE-2023-29409 CVE-2023-39318 CVE-2023-39319 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.19-openssl (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.19-openssl fixes the following issues: Update to version 1.19.13 (bsc#1200441). - CVE-2023-29409: Fixed unrestricted RSA keys in certificates (bsc#1213880). - CVE-2023-29406: Fixed insufficient sanitization of Host header (bsc#1213229). The following non-security bug was fixed: - Add missing directory pprof html asset directory to package (bsc#1215090). Important SUSE bug 1200441 SUSE bug 1213229 SUSE bug 1213880 SUSE bug 1215090 CVE-2023-29406 CVE-2023-29409 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330). - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727). - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729). The following non-security bugs were fixed: - ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305). - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes). - ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes). - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes). - ALSA: ac97: Fix possible error value of *rac97 (git-fixes). - ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes). - ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes). - ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes). - ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes). - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes). - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes). - ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes). - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes). - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes). - ARM: dts: imx6sll: fixup of operating points (git-fixes). - ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes). - ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes). - ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes). - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes). - ASoC: rt5665: add missed regulator_bulk_disable (git-fixes). - ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes). - ASoC: tegra: Fix SFC conversion for few rates (git-fixes). - Bluetooth: Fix potential use-after-free when clear keys (git-fixes). - Bluetooth: L2CAP: Fix use-after-free (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes). - Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes). - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes). - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b - CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123 - Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel. - Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes). - Documentation: devices.txt: Remove ttyIOC* (git-fixes). - Documentation: devices.txt: Remove ttySIOC* (git-fixes). - Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453). - Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453). - Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453). - Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453). - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453). - Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453). - Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453). - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453). - Drop amdgpu patch causing spamming (bsc#1215523) - Drop cfg80211 lock fix patches that caused a regression (bsc#1213757) - Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) - Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes). - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes). - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes). - HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes). - HID: wacom: remove the battery when the EKR is off (git-fixes). - HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes). - IB/hfi1: Fix possible panic during hotplug remove (git-fixes) - IB/uverbs: Fix an potential error pointer dereference (git-fixes) - Input: exc3000 - properly stop timer on shutdown (git-fixes). - KVM: s390: fix sthyi error handling (git-fixes bsc#1214370). - Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756). - Kbuild: move to -std=gnu11 (bsc#1214756). - PCI/ASPM: Avoid link retraining race (git-fixes). - PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes). - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes). - PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes). - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes). - PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453). - PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453). - PCI: meson: Remove cast between incompatible function type (git-fixes). - PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes). - PCI: microchip: Remove cast between incompatible function type (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: rockchip: Remove writes to unused registers (git-fixes). - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes). - PCI: tegra194: Fix possible array out of bounds access (git-fixes). - PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes). - RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes) - RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes) - RDMA/efa: Fix wrong resources deallocation order (git-fixes) - RDMA/hns: Fix CQ and QP cache affinity (git-fixes) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes) - RDMA/hns: Fix port active speed (git-fixes) - RDMA/irdma: Prevent zero-length STAG registration (git-fixes) - RDMA/irdma: Replace one-element array with flexible-array member (git-fixes) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes) - RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes) - RDMA/siw: Correct wrong debug message (git-fixes) - RDMA/umem: Set iova in ODP flow (git-fixes) - README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer. - Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes) - Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes). - SMB3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes). - Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - amba: bus: fix refcount leak (git-fixes). - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes). - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes). - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes). - audit: fix possible soft lockup in __audit_inode_child() (git-fixes). - backlight/bd6107: Compare against struct fb_info.device (git-fixes). - backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes). - backlight/lv5207lp: Compare against struct fb_info.device (git-fixes). - batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes). - batman-adv: Do not increase MTU when set by user (git-fixes). - batman-adv: Fix TT global entry leak when client roamed back (git-fixes). - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes). - batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes). - batman-adv: Trigger events for auto adjusted MTU (git-fixes). - bnx2x: fix page fault following EEH recovery (bsc#1214299). - bpf: Disable preemption in bpf_event_output (git-fixes). - bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924). - bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes). - bus: ti-sysc: Fix build warning for 64-bit build (git-fixes). - bus: ti-sysc: Fix cast to enum warning (git-fixes). - bus: ti-sysc: Flush posted write on enable before reset (git-fixes). - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes). - ceph: defer stopping mdsc delayed_work (bsc#1214392). - ceph: do not check for quotas on MDS stray dirs (bsc#1214238). - ceph: never send metrics if disable_send_metrics is set (bsc#1214180). - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. - cifs: add missing return value check for cifs_sb_tlink (bsc#1193629). - cifs: allow dumping keys for directories too (bsc#1193629). - cifs: fix mid leak during reconnection after timeout threshold (git-fixes). - cifs: if deferred close is disabled then close files immediately (git-fixes). - cifs: is_network_name_deleted should return a bool (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes). - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes). - clk: imx8mp: fix sai4 clock (git-fixes). - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes). - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes). - clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes). - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes). - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes). - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes). - clk: sunxi-ng: Modify mismatched function name (git-fixes). - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453). - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453). - clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453). - clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453). - clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453). - clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453). - cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes). - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659). - cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004). - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - crypto: caam - fix unchecked return value error (git-fixes). - crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes). - define more Hyper-V related constants (bsc#1206453). - dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes). - dma-buf/sync_file: Fix docs syntax (git-fixes). - dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes). - dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes). - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes). - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes). - docs/process/howto: Replace C89 with C11 (bsc#1214756). - docs: kernel-parameters: Refer to the correct bitmap function (git-fixes). - docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes). - docs: printk-formats: Fix hex printing of signed values (git-fixes). - driver core: test_async: fix an error code (git-fixes). - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes). - drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes). - drm/amd/display: Apply 60us prefetch for DCFCLK &lt;= 300Mhz (git-fixes). - drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes). - drm/amd/display: Do not set drr on pipe commit (git-fixes). - drm/amd/display: Enable dcn314 DPP RCO (git-fixes). - drm/amd/display: Ensure that planes are in the same order (git-fixes). - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes). - drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes). - drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes). - drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes). - drm/amd/display: disable RCO for DCN314 (git-fixes). - drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes). - drm/amd/display: limit DPIA link rate to HBR3 (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: trigger timing sync only if TG is running (git-fixes). - drm/amd/pm/smu7: move variables to where they are used (git-fixes). - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes). - drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes). - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes). - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes). - drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes). - drm/amd: flush any delayed gfxoff on suspend entry (git-fixes). - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes). - drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes). - drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes). - drm/amdgpu: Remove unnecessary domain argument (git-fixes). - drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes). - drm/amdgpu: add S/G display parameter (git-fixes). - drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes). - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes). - drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes). - drm/amdgpu: fix memory leak in mes self test (git-fixes). - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes). - drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes). - drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes). - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes). - drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes). - drm/ast: Fix DRAM init on AST2200 (git-fixes). - drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes). - drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes). - drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes). - drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes). - drm/bridge: fix -Wunused-const-variable= warning (git-fixes). - drm/bridge: tc358764: Fix debug print parameter order (git-fixes). - drm/etnaviv: fix dumping of active MMU context (git-fixes). - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes). - drm/i915/sdvo: fix panel_type initialization (git-fixes). - drm/i915: Fix premature release of request's reusable memory (git-fixes). - drm/mediatek: Fix dereference before null check (git-fixes). - drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes). - drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes). - drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes). - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes). - drm/msm/mdp5: Do not leak some plane state (git-fixes). - drm/msm: Update dev core dump to not print backwards (git-fixes). - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes). - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes). - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073). - drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes). - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes). - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes). - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes). - drm/qxl: fix UAF on handle creation (git-fixes). - drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes). - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes). - drm/rockchip: Do not spam logs in atomic check (git-fixes). - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes). - drm/stm: ltdc: fix late dereference check (git-fixes). - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes). - drm/ttm: check null pointer before accessing when swapping (git-fixes). - drm/ttm: never consider pinned BOs for eviction&swap (git-fixes). - drm/vmwgfx: Fix shader stage validation (git-fixes). - drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes). - drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes). - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes). - dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes). - dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes). - dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes). - e1000: Fix typos in comments (jsc#PED-5738). - e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738). - e1000: switch to napi_build_skb() (jsc#PED-5738). - e1000: switch to napi_consume_skb() (jsc#PED-5738). - exfat: fix unexpected EOF while reading dir (bsc#1214000). - exfat: release s_lock before calling dir_emit() (bsc#1214000). - exfat_iterate(): do not open-code file_inode(file) (bsc#1214000). - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes). - fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes). - fbdev: Improve performance of sys_imageblit() (git-fixes). - fbdev: Update fbdev source file paths (git-fixes). - fbdev: fix potential OOB read in fast_imageblit() (git-fixes). - fbdev: mmp: fix value check in mmphw_probe() (git-fixes). - file: reinstate f_pos locking optimization for regular files (bsc#1213759). - firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes). - firmware: cs_dsp: Fix new control name check (git-fixes). - firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes). - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes). - fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes). - fsi: aspeed: Reset master errors after CFAM reset (git-fixes). - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes). - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes). - gpio: mvebu: Make use of devm_pwmchip_add (git-fixes). - gpio: mvebu: fix irq domain leak (git-fixes). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes). - hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453). - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes). - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes). - hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes). - hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes). - hwrng: pic32 - use devm_clk_get_enabled (git-fixes). - i2c: Delete error messages for failed memory allocations (git-fixes). - i2c: Improve size determinations (git-fixes). - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes). - i2c: designware: Correct length byte validation logic (git-fixes). - i2c: designware: Handle invalid SMBus block data response length value (git-fixes). - i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes). - i2c: nomadik: Remove a useless call in the remove function (git-fixes). - i2c: nomadik: Remove unnecessary goto label (git-fixes). - i2c: nomadik: Use devm_clk_get_enabled() (git-fixes). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - iavf: fix potential races for FDIR filters (git-fixes). - ice: Fix RDMA VSI removal during queue rebuild (git-fixes). - ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes). - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes). - iio: adc: stx104: Implement and utilize register structures (git-fixes). - iio: adc: stx104: Utilize iomap interface (git-fixes). - iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes). - intel/e1000:fix repeated words in comments (jsc#PED-5738). - intel: remove unused macros (jsc#PED-5738). - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes). - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). - iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes). - iommu/amd: Fix compile warning in init code (git-fixes). - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes). - iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes). - iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes). - iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes). - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes). - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes). - iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes). - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes). - iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes). - iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes). - iommu/dma: Fix iova map result check bug (git-fixes). - iommu/dma: return error code from iommu_dma_map_sg() (git-fixes). - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes). - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes). - iommu/iova: Fix module config properly (git-fixes). - iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes). - iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes). - iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes). - iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes). - iommu/mediatek: Use component_match_add (git-fixes). - iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes). - iommu/omap: Fix buffer overflow in debugfs (git-fixes). - iommu/rockchip: fix permission bits in page table entries v2 (git-fixes). - iommu/s390: Fix duplicate domain attachments (git-fixes). - iommu/sun50i: Consider all fault sources for reset (git-fixes). - iommu/sun50i: Fix R/W permission check (git-fixes). - iommu/sun50i: Fix flush size (git-fixes). - iommu/sun50i: Fix reset release (git-fixes). - iommu/sun50i: Implement .iotlb_sync_map (git-fixes). - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes). - iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes). - iommu/vt-d: Check correct capability for sagaw determination (git-fixes). - iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes). - iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes). - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes). - iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes). - ipmi:ssif: Add check for kstrdup (git-fixes). - ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes). - ipmi_si: fix a memleak in try_smi_init() (git-fixes). - jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes). - kabi/severities: Ignore newly added SRSO mitigation functions - kabi: Allow extra bugsints (bsc#1213927). - kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there. - kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12. - kunit: make kunit_test_timeout compatible with comment (git-fixes). - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes). - leds: multicolor: Use rounded division when calculating color components (git-fixes). - leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes). - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes). - leds: turris-omnia: Drop unnecessary mutex locking (git-fixes). - lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes). - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes). - libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924). - libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924). - libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924). - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393). - md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916). - md/raid0: Fix performance regression for large sequential writes (bsc#1213916). - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes). - media: cx24120: Add retval check for cx24120_message_send() (git-fixes). - media: dib7000p: Fix potential division by zero (git-fixes). - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes). - media: go7007: Remove redundant if statement (git-fixes). - media: i2c: ccs: Check rules is non-NULL (git-fixes). - media: i2c: rdacm21: Fix uninitialized value (git-fixes). - media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes). - media: ov2680: Add ov2680_fill_format() helper function (git-fixes). - media: ov2680: Do not take the lock for try_fmt calls (git-fixes). - media: ov2680: Fix ov2680_bayer_order() (git-fixes). - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes). - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes). - media: ov2680: Fix vflip / hflip set functions (git-fixes). - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes). - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes). - media: rkvdec: increase max supported height for H.264 (git-fixes). - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes). - media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes). - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes). - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes). - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - mlxsw: pci: Add shutdown method in PCI driver (git-fixes). - mmc: block: Fix in_flight[issue_type] value error (git-fixes). - mmc: moxart: read scr register without changing byte order (git-fixes). - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes). - mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes). - mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes). - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes). - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes). - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes). - mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes). - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes). - mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes). - mtd: spi-nor: Check bus width while setting QE bit (git-fixes). - mtd: spinand: toshiba: Fix ecc_get_status (git-fixes). - n_tty: Rename tail to old_tail in n_tty_read() (git-fixes). - net: hns3: fix wrong bw weight of disabled tc issue (git-fixes). - net: ieee802154: at86rf230: Stop leaking skb's (git-fixes). - net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes). - net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes). - net: phy: broadcom: stub c45 read/write for 54810 (git-fixes). - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes). - net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733) - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes). - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946). - netfs: fix parameter of cleanup() (bsc#1214743). - nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes). - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes). - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes). - nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902). - nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902). - objtool/x86: Fix SRSO mess (git-fixes). - objtool/x86: Fixup frame-pointer vs rethunk (git-fixes). - objtool: Union instruction::{call_dest,jump_table} (git-fixes). - old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes). - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes). - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes). - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes). - phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes). - phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes). - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes). - pinctrl: amd: Mask wake bits on probe again (git-fixes). - pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes). - pinctrl: cherryview: fix address_space_handler() argument (git-fixes). - pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes). - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes). - platform/x86: dell-sysman: Fix reference leak (git-fixes). - powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106). - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106). - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106). - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106). - powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106). - powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106). - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106). - powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106). - powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes). - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106). - powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106). - powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106). - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/rtas: block error injection when locked down (bsc#1023051). - powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051). - powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). - powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869). - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes). - powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files. - powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503). - powerpc: fix typos in comments (bsc#1212091 ltc#199106). - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503). - pstore/ram: Check start of empty przs during init (git-fixes). - pwm: Add a stub for devm_pwmchip_add() (git-fixes). - pwm: meson: Simplify duplicated per-channel tracking (git-fixes). - pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes). - qed: Fix scheduling in a tasklet while getting stats (git-fixes). - regmap: rbtree: Use alloc_flags for memory allocations (git-fixes). - ring-buffer: Do not swap cpu_buffer during resize process (git-fixes). - ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes). - rpm/mkspec-dtb: support for nested subdirs - rpmsg: glink: Add check for kstrdup (git-fixes). - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976). - s390/purgatory: disable branch profiling (git-fixes bsc#1214372). - s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949). - sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes). - sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes). - sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: RDMA/srp: Fix residual handling (git-fixes) - scsi: bsg: Increase number of devices (bsc#1210048). - scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284). - scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: core: Improve warning message in scsi_device_block() (bsc#1209284). - scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: sg: Increase number of devices (bsc#1210048). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Always set no_report_opcodes (git-fixes). - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes). - scsi: storvsc: Handle SRB status value 0x30 (git-fixes). - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes). - scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371). - selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924). - selftests/futex: Order calls to futex_lock_pi (git-fixes). - selftests/harness: Actually report SKIP for signal tests (git-fixes). - selftests/resctrl: Close perf value read fd on errors (git-fixes). - selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes). - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes). - selftests/rseq: check if libc rseq support is registered (git-fixes). - selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes). - selftests: forwarding: Skip test when no interfaces are specified (git-fixes). - selftests: forwarding: Switch off timeout (git-fixes). - selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes). - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes). - selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes). - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes). - selftests: forwarding: tc_flower: Relax success criterion (git-fixes). - selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes). - serial: sc16is7xx: fix broken port 0 uart init (git-fixes). - serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes). - serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes). - serial: sprd: Fix DMA buffer leak issue (git-fixes). - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629). - smb: client: Fix -Wstringop-overflow issues (bsc#1193629). - smb: client: fix dfs link mount against w2k8 (bsc#1212142). - smb: client: fix null auth (git-fixes). - soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes). - soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes). - soundwire: fix enumeration completion (git-fixes). - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes). - supported.conf: fix typos for -!optional markers - swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453). - target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026). - target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873). - target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857). - target_core_rbd: remove snapshot existence validation code (bsc#1212857). - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes). - timers: Add shutdown mechanism to the internal functions (bsc#1213970). - timers: Provide timer_shutdown[_sync]() (bsc#1213970). - timers: Rename del_timer() to timer_delete() (bsc#1213970). - timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: Replace BUG_ON()s (bsc#1213970). - timers: Silently ignore timers with a NULL function (bsc#1213970). - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: Update kernel-doc for various functions (bsc#1213970). - timers: Use del_timer_sync() even on UP (bsc#1213970). - tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes). - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes). - tracing/probes: Fix not to count error code to total length (git-fixes). - tracing/probes: Fix to avoid double count of the string length on the array (git-fixes). - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes). - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes). - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes). - tracing: Fix memleak due to race between current_tracer and trace (git-fixes). - tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes). - tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes). - tracing: Fix warning in trace_buffered_event_disable() (git-fixes). - tty: fix hang on tty device with no_room set (git-fixes). - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes). - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes). - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes). - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes). - ubifs: Fix memleak when insert_old_idx() failed (git-fixes). - usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes). - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes). - usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes). - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes). - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes). - usb: dwc3: Fix typos in gadget.c (git-fixes). - usb: dwc3: Properly handle processing of pending events (git-fixes). - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes). - usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes). - usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes). - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes). - usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes). - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes). - usb: quirks: add quirk for Focusrite Scarlett (git-fixes). - usb: serial: option: add Quectel EC200A module support (git-fixes). - usb: serial: option: support Quectel EM060K_128 (git-fixes). - usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes). - usb: serial: simple: sort driver entries (git-fixes). - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes). - usb: typec: tcpm: Fix response to vsafe0V event (git-fixes). - usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes). - usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes). - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes). - wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes). - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes). - wifi: cfg80211: Fix return value in scan logic (git-fixes). - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes). - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes). - wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes). - wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes). - wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes). - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes). - wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes). - wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes). - wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes). - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes). - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes). - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes). - wifi: radiotap: fix kernel-doc notation warnings (git-fixes). - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes). - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes). - x86/alternative: Make custom return thunk unconditional (git-fixes). - x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes). - x86/cpu: Clean up SRSO return thunk mess (git-fixes). - x86/cpu: Cleanup the untrain mess (git-fixes). - x86/cpu: Fix __x86_return_thunk symbol type (git-fixes). - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes). - x86/cpu: Rename original retbleed methods (git-fixes). - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes). - x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453). - x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453). - x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453). - x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453). - x86/hyperv: Reorder code to facilitate future work (bsc#1206453). - x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453). - x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453). - x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes). - x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453). - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes). - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). - x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/speculation: Add cpu_show_gds() prototype (git-fixes). - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). - x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). - x86/srso: Disable the mitigation on unaffected configurations (git-fixes). - x86/srso: Explain the untraining sequences a bit more (git-fixes). - x86/srso: Fix build breakage with the LLVM linker (git-fixes). - x86/srso: Fix return thunks in generated code (git-fixes). - x86/static_call: Fix __static_call_fixup() (git-fixes). - x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453). - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453). - x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453). - x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453). - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453). - xfs: fix sb write verify for lazysbcount (bsc#1214661). Important SUSE bug 1023051 SUSE bug 1120059 SUSE bug 1177719 SUSE bug 1188885 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203329 SUSE bug 1203330 SUSE bug 1205462 SUSE bug 1206453 SUSE bug 1208902 SUSE bug 1208949 SUSE bug 1209284 SUSE bug 1209799 SUSE bug 1210048 SUSE bug 1210448 SUSE bug 1211220 SUSE bug 1212091 SUSE bug 1212142 SUSE bug 1212423 SUSE bug 1212526 SUSE bug 1212857 SUSE bug 1212873 SUSE bug 1213026 SUSE bug 1213123 SUSE bug 1213546 SUSE bug 1213580 SUSE bug 1213601 SUSE bug 1213666 SUSE bug 1213733 SUSE bug 1213757 SUSE bug 1213759 SUSE bug 1213916 SUSE bug 1213921 SUSE bug 1213927 SUSE bug 1213946 SUSE bug 1213949 SUSE bug 1213968 SUSE bug 1213970 SUSE bug 1213971 SUSE bug 1214000 SUSE bug 1214019 SUSE bug 1214073 SUSE bug 1214120 SUSE bug 1214149 SUSE bug 1214180 SUSE bug 1214233 SUSE bug 1214238 SUSE bug 1214285 SUSE bug 1214297 SUSE bug 1214299 SUSE bug 1214305 SUSE bug 1214350 SUSE bug 1214368 SUSE bug 1214370 SUSE bug 1214371 SUSE bug 1214372 SUSE bug 1214380 SUSE bug 1214386 SUSE bug 1214392 SUSE bug 1214393 SUSE bug 1214397 SUSE bug 1214404 SUSE bug 1214428 SUSE bug 1214451 SUSE bug 1214635 SUSE bug 1214659 SUSE bug 1214661 SUSE bug 1214727 SUSE bug 1214729 SUSE bug 1214742 SUSE bug 1214743 SUSE bug 1214756 SUSE bug 1214976 SUSE bug 1215522 SUSE bug 1215523 SUSE bug 1215552 SUSE bug 1215553 CVE-2022-38457 CVE-2022-40133 CVE-2023-2007 CVE-2023-20588 CVE-2023-34319 CVE-2023-3610 CVE-2023-37453 CVE-2023-3772 CVE-2023-3863 CVE-2023-40283 CVE-2023-4128 CVE-2023-4133 CVE-2023-4134 CVE-2023-4147 CVE-2023-4194 CVE-2023-4273 CVE-2023-4387 CVE-2023-4459 CVE-2023-4563 CVE-2023-4569 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.21 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.21 fixes the following issues: - Updated to version 1.21.2 (bsc#1212475): - CVE-2023-39323: Fixed an arbitrary execution issue during build time due to path directive bypass (bsc#1215985). Important SUSE bug 1212475 SUSE bug 1215985 CVE-2023-39323 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.20 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.20 fixes the following issues: - Updated to version 1.20.9 (bsc#1206346): - CVE-2023-39323: Fixed an arbitrary execution issue during build time due to path directive bypass (bsc#1215985). Important SUSE bug 1206346 SUSE bug 1215985 CVE-2023-39323 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ImageMagick (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ImageMagick fixes the following issues: - CVE-2023-5341: Fixed a heap use-after-free in coders/bmp.c. (bsc#1215939) Moderate SUSE bug 1215939 CVE-2023-5341 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.20 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.20 fixes the following issues: - Update to go1.20.10 (bsc#1206346) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid stream resets causing excessive work. This is also known as CVE-2023-44487. (bsc#1216109) Important SUSE bug 1206346 SUSE bug 1216109 CVE-2023-39325 CVE-2023-44487 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for go1.21 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for go1.21 fixes the following issues: - Update to go1.21.3 (bsc#1212475) - CVE-2023-39325: Fixed a flaw that can lead to a DoS due to a rapid stream resets causing excessive work. This is also known as CVE-2023-44487. (bsc#1216109) Important SUSE bug 1212475 SUSE bug 1216109 CVE-2023-39325 CVE-2023-44487 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861) - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860) - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858) - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467) - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899) - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022) - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes). - ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes). - ARM: pxa: remove use of symbol_get() (git-fixes). - arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes). - arm64: module-plts: inline linux/moduleloader.h (git-fixes) - arm64: module: Use module_init_layout_section() to spot init sections (git-fixes) - arm64: sdei: abort running SDEI handlers during crash (git-fixes) - arm64: tegra: Update AHUB clock parent and rate (git-fixes) - arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes) - arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453). - ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes). - ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes). - ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes). - ASoC: meson: spdifin: start hw on dai probe (git-fixes). - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5640: Revert 'Fix sleep in atomic context' (git-fixes). - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes). - ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes). - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes). - ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes). - ata: pata_falcon: fix IO base selection for Q40 (git-fixes). - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes). - ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes). - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes). - blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986). - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992). - block/mq-deadline: use correct way to throttling write requests (bsc#1214993). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes). - bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322). - bpf: Clear the probe_addr for uprobe (git-fixes). - btrfs: do not hold CPU for too long when defragging a file (bsc#1214988). - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453). - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453). - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453). - Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453). - drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes). - drm/amd/display: Add smu write msg id fail retry process (git-fixes). - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes). - drm/amd/display: fix the white screen issue when >= 64GB DRAM (git-fixes). - drm/amd/display: prevent potential division by zero errors (git-fixes). - drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes). - drm/amd/display: Remove wait while locked (git-fixes). - drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: * rename ast_device to ast_private - drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: * rename ast_device to ast_private * context changes - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808). - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes). - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes). - drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes). - drm/i915/gvt: Verify pfn is 'valid' before dereferencing 'struct page' (git-fixes). - drm/meson: fix memory leak on ->hpd_notify callback (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - ext4: avoid potential data overflow in next_linear_group (bsc#1214951). - ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954). - ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). - ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944). - ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942). - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941). - ext4: Remove ext4 locking of moved directory (bsc#1214957). - ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). - fs: do not update freeing inode i_io_list (bsc#1214813). - fs: Establish locking order for unrelated directories (bsc#1214958). - fs: Lock moved directories (bsc#1214959). - fs: lockd: avoid possible wrong NULL parameter (git-fixes). - fs: no need to check source (bsc#1215752). - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813). - fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581). - gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479). - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: use vmalloc_array and vcalloc (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - hwrng: virtio - add an internal buffer (git-fixes). - hwrng: virtio - always add a pending request (git-fixes). - hwrng: virtio - do not wait on cleanup (git-fixes). - hwrng: virtio - do not waste entropy (git-fixes). - hwrng: virtio - Fix race on data_avail and actual data (git-fixes). - i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes). - i3c: master: svc: fix probe failure when no i3c device exist (git-fixes). - i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes). - idr: fix param name in idr_alloc_cyclic() doc (git-fixes). - Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes). - iommu/virtio: Detach domain on endpoint release (git-fixes). - iommu/virtio: Return size mapped for a detached domain (git-fixes). - jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). - jbd2: correct the end of the journal recovery scan range (bsc#1214955). - jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). - jbd2: fix checkpoint cleanup performance regression (bsc#1214952). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). - jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). - jbd2: remove journal_clean_one_cp_list() (bsc#1214947). - jbd2: remove t_checkpoint_io_list (bsc#1214946). - jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). - kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025). - kabi/severities: ignore mlx4 internal symbols - kconfig: fix possible buffer overflow (git-fixes). - kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template. - kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist. - kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes). - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915). - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896). - KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916). - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894). - KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895). - KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911). - KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes). - KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes). - KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes). - KVM: x86/mmu: Include mmu.h in spte.h (git-fixes). - loop: Fix use-after-free issues (bsc#1214991). - loop: loop_set_status_from_info() check before assignment (bsc#1214990). - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236). - mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236). - mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236). - mlx4: Delete custom device management logic (bsc#1187236). - mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236). - mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236). - mlx4: Move the bond work to the core driver (bsc#1187236). - mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236). - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236). - mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236). - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236). - module: Expose module_init_layout_section() (git-fixes) - net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). - net: mana: Add page pool for RX buffers (bsc#1214040). - net: mana: Configure hwc timeout from hardware (bsc#1214037). - net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes). - net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). - net/mlx4: Remove many unnecessary NULL values (bsc#1187236). - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes). - NFS/blocklayout: Use the passed in gfp flags (git-fixes). - NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes). - NFSD: fix change_info in NFSv4 RENAME replies (git-fixes). - NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes). - NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes). - NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes). - NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes). - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes). - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes). - ntb: Clean up tx tail index on link down (git-fixes). - ntb: Drop packets when qp link is down (git-fixes). - ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes). - nvme-auth: use chap->s2 to indicate bidirectional authentication (bsc#1214543). - nvme-tcp: add recovery_delay to sysfs (bsc#1201284). - nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284). - nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284). - nvme-tcp: make 'err_work' a delayed work (bsc#1201284). - PCI: Free released resource after coalescing (git-fixes). - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes). - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes). - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes). - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes). - platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes). - platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes). - pNFS: Fix assignment of xprtdata.cred (git-fixes). - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582). - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). - powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). - printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875). - pwm: lpc32xx: Remove handling of PWM channels (git-fixes). - quota: add new helper dquot_active() (bsc#1214998). - quota: factor out dquot_write_dquot() (bsc#1214995). - quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963). - quota: fix warning in dqgrab() (bsc#1214962). - quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). - quota: rename dquot_active() to inode_quota_active() (bsc#1214997). - RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes) - s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes). - s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124). - s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023). - s390/ipl: add eckd dump support (jsc#PED-2025). - s390/ipl: add eckd support (jsc#PED-2023). - s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023). - s390/ipl: use octal values instead of S_* macros (jsc#PED-2023). - s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes). - s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes). - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes). - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes). - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes). - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes). - scsi: lpfc: Remove reftag check in DIF paths (git-fixes). - scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928). - scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928). - scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928). - scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928). - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928). - scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928). - scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928). - scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928). - scsi: qla2xxx: Remove unused declarations (bsc#1214928). - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928). - scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928). - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Handle additional SRB status values (git-fixes). - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941). - selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549). - selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes). - spi: Add TPM HW flow flag (bsc#1213534) - spi: tegra210-quad: Enable TPM wait polling (bsc#1213534) - spi: tegra210-quad: set half duplex flag (bsc#1213534) - SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes). - tcpm: Avoid soft reset when partner does not support get_status (git-fixes). - tpm_tis_spi: Add hardware wait polling (bsc#1213534) - tracing: Fix race issue between cpu buffer write and swap (git-fixes). - tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes). - tracing: Remove unnecessary copying of tr->current_trace (git-fixes). - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes). - udf: Fix extension of the last extent in the file (bsc#1214964). - udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965). - udf: Fix off-by-one error when discarding preallocation (bsc#1214966). - udf: Fix uninitialized array access for some pathnames (bsc#1214967). - Update metadata - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes). - usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes). - usb: ehci: move new member has_ci_pec_bug into hole (git-fixes). - usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). - usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). - usb: typec: tcpci: clear the fault status bit (git-fixes). - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (git-fixes). - vhost-scsi: unbreak any layout for response (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: fix hung thread due to erroneous iotlb entries (git-fixes). - vhost: handle error while adding split ranges to iotlb (git-fixes). - virtio_net: add checking sq is full inside xdp xmit (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: reorder some funcs (git-fixes). - virtio_net: separate the logic of checking whether sq is full (git-fixes). - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes). - virtio-blk: set req->state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes). - virtio-mmio: do not break lifecycle of vm_dev (git-fixes). - virtio-net: fix race between set queues and probe (git-fixes). - virtio-net: set queues after driver_ok (git-fixes). - virtio-rng: make device ready before making request (git-fixes). - virtio: acknowledge all features before access (git-fixes). - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582). - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes). - word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729). - x86/alternative: Fix race in try_get_desc() (git-fixes). - x86/boot/e820: Fix typo in e820.c comment (git-fixes). - x86/bugs: Reset speculation control settings on init (git-fixes). - x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453). - x86/coco: Export cc_vendor (bsc#1206453). - x86/cpu: Add Lunar Lake M (git-fixes). - x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes). - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes). - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes). - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453). - x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453). - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453). - x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453) - x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453). - x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453). - x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453). - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453). - x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453). - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453). - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453). - x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453). - x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453). - x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453). - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes). - x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes). - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes). - x86/mce: Retrieve poison range from hardware (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes). - x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes). - x86/purgatory: remove PGO flags (git-fixes). - x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes). - x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes). - x86/resctl: fix scheduler confusion with 'current' (git-fixes). - x86/resctrl: Fix task CLOSID/RMID update race (git-fixes). - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). - x86/rtc: Remove __init for runtime functions (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/sgx: Reduce delay and interference of enclave release (git-fixes). - x86/srso: Do not probe microcode in a guest (git-fixes). - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). - x86/srso: Fix srso_show_state() side effect (git-fixes). - x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes). - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes). - xen: remove a confusing comment on auto-translated guest I/O (git-fixes). - xprtrdma: Remap Receive buffers after a reconnect (git-fixes). Important SUSE bug 1152472 SUSE bug 1202845 SUSE bug 1206453 SUSE bug 1213808 SUSE bug 1214928 SUSE bug 1214942 SUSE bug 1214943 SUSE bug 1214944 SUSE bug 1214950 SUSE bug 1214951 SUSE bug 1214954 SUSE bug 1214957 SUSE bug 1214986 SUSE bug 1214988 SUSE bug 1214992 SUSE bug 1214993 SUSE bug 1215322 SUSE bug 1215877 SUSE bug 1215894 SUSE bug 1215895 SUSE bug 1215896 SUSE bug 1215911 SUSE bug 1215915 SUSE bug 1215916 CVE-2023-1192 CVE-2023-1206 CVE-2023-1859 CVE-2023-2177 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-4155 CVE-2023-42753 CVE-2023-42754 CVE-2023-4389 CVE-2023-4622 CVE-2023-4623 CVE-2023-4881 CVE-2023-4921 CVE-2023-5345 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for glibc (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Development Tools 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for glibc fixes the following issues: Security issue fixed: - CVE-2023-4813: Fixed a potential use-after-free in gaih_inet() (bsc#1215286, BZ #28931) Also a regression from a previous update was fixed: - elf: Align argument of __munmap to page size (bsc#1215891, BZ #28676) Important SUSE bug 1215286 SUSE bug 1215891 CVE-2023-4813 cpe:/o:suse:sle-module-development-tools:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-scipy (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for HPC 15 SP5 This update for python-scipy fixes the following issues: - CVE-2023-25399: Fixed minor refcounting issue in Py_FindObjects (bsc#1213062). - CVE-2023-29824: Fixed use-after-free in Py_FindObjects (bsc#1213137). Moderate SUSE bug 1213062 SUSE bug 1213137 CVE-2023-25399 CVE-2023-29824 cpe:/o:suse:sle-module-hpc:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 Security update for pmix (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for HPC 15 SP5 This update for pmix fixes the following issues: - CVE-2023-41915: Fixed a potential vulnerability where a `chown` may follow a user-created link (bsc#1215190). - Install pmix-plugin-munge if munge is installed. Moderate SUSE bug 1215190 CVE-2023-41915 cpe:/o:suse:sle-module-hpc:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 Security update for java-1_8_0-openjdk (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-1_8_0-openjdk fixes the following issues: - Updated to version jdk8u372 (icedtea-3.27.0): - CVE-2023-21930: Fixed an issue in the JSSE component that could allow an attacker to access critical data without authorization (bsc#1210628). - CVE-2023-21937: Fixed an issue in the Networking component that could allow an attacker to update, insert or delete some data without authorization (bsc#1210631). - CVE-2023-21938: Fixed an issue in the Libraries component that could allow an attacker to update, insert or delete some data without authorization (bsc#1210632). - CVE-2023-21939: Fixed an issue in the Swing component that could allow an attacker to update, insert or delete some data without authorization (bsc#1210634). - CVE-2023-21954: Fixed an issue in the Hotspot component that could allow an attacker to access critical data without authorization (bsc#1210635). - CVE-2023-21967: Fixed an issue in the JSSE component that could allow an attacker to cause a hang or frequently repeatable crash without authorization (bsc#1210636). - CVE-2023-21968: Fixed an issue in the Libraries component that could allow an attacker to update, insert or delete some data without authorization (bsc#1210637). Important SUSE bug 1210628 SUSE bug 1210631 SUSE bug 1210632 SUSE bug 1210634 SUSE bug 1210635 SUSE bug 1210636 SUSE bug 1210637 CVE-2023-21930 CVE-2023-21937 CVE-2023-21938 CVE-2023-21939 CVE-2023-21954 CVE-2023-21967 CVE-2023-21968 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openvswitch (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openvswitch fixes the following issues: - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580). - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581). Important SUSE bug 1206580 SUSE bug 1206581 CVE-2022-4337 CVE-2022-4338 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openvswitch (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openvswitch fixes the following issues: - CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054). Important SUSE bug 1210054 CVE-2023-1668 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-1_0_0 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-1_0_0 fixes the following issues: - CVE-2023-2650: Fixed possible denial of service translating ASN.1 object identifiers (bsc#1211430). Important SUSE bug 1211430 CVE-2023-2650 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for java-1_8_0-ibm (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-1_8_0-ibm fixes the following issues: - CVE-2023-21930: Fixed possible compromise from unauthenticated attacker with network access via TLS (bsc#1210628). - CVE-2023-21937: Fixed vulnerability inside the networking component (bsc#1210631). - CVE-2023-21938: Fixed vulnerability inside the library component (bsc#1210632). - CVE-2023-21939: Fixed vulnerability inside the swing component (bsc#1210634). - CVE-2023-21968: Fixed vulnerability inside the library component (bsc#1210637). - CVE-2023-2597: Fixed buffer overflow in shared cache implementation (bsc#1211615). - CVE-2023-21967: Fixed vulnerability inside the JSSE component (bsc#1210636). - CVE-2023-21954: Fixed vulnerability inside the hotspot component (bsc#1210635). Additional reference fixed already in 8.0.7.15: - CVE-2023-30441: Fixed components that could have exposed sensitive information using a combination of flaws and configurations (bsc#1210711). Important SUSE bug 1210628 SUSE bug 1210631 SUSE bug 1210632 SUSE bug 1210634 SUSE bug 1210635 SUSE bug 1210636 SUSE bug 1210637 SUSE bug 1210711 SUSE bug 1210826 SUSE bug 1211615 CVE-2023-21930 CVE-2023-21937 CVE-2023-21938 CVE-2023-21939 CVE-2023-21954 CVE-2023-21967 CVE-2023-21968 CVE-2023-2597 CVE-2023-30441 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ntp (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for ntp fixes the following issues: - CVE-2023-26555: Fixed assertion failure on malformed RT-11 dates (bsc#1210390). Moderate SUSE bug 1210390 CVE-2023-26555 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-1_0_0 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-1_0_0 fixes the following issues: - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause a severe 2-3x performance regression in the typical use case (bsc#1207534). Moderate SUSE bug 1207534 CVE-2022-4304 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for php7 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7 fixes the following issues: - CVE-2023-3247: Fixed missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (bsc#1212349). Moderate SUSE bug 1212349 CVE-2023-3247 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for java-1_8_0-ibm (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-1_8_0-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 6 (bsc#1213000): - Fixed issue in Java Virtual Machine where outofmemory (OOM) killer terminates the jvm due to failure in control groups detection. Important SUSE bug 1213000 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bsc#1207050). - CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034). - CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-0469: Fixed a use-after-free flaw in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent (bsc#1207521). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-1583: Fixed a NULL pointer dereference in io_file_bitmap_get in io_uring/filetable.c (bsc#1209637). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155). - CVE-2023-21106: Fixed possible memory corruption due to double free in adreno_set_param of adreno_gpu.c (bsc#1211654). - CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). - CVE-2023-2235: Fixed a use-after-free vulnerability in the Performance Events system that could have been exploited to achieve local privilege escalation (bsc#1210986). - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-23006: Fixed NULL vs IS_ERR checking in dr_domain_init_resources (bsc#1208845). - CVE-2023-2430: Fixed a missing lock on overflow for IOPOLL (bsc#1211014). - CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1209052). - CVE-2023-28866: Fixed an out-of-bounds access in net/bluetooth/hci_sync.c because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but did not (bsc#1209780). - CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855). - CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294). - CVE-2023-30772: Fixed race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265). - CVE-2023-3220: Fixed a NULL pointer dereference flaw in dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() (bsc#1212556). - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043). - CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590). - CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838). - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593). - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504). - CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494). - CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). - CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495). The following non-security bugs were fixed: - 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes). - Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes). - Avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529). - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Fix page corruption caused by racy check in __free_pages (bsc#1208149). - Get module prefix from kmod (bsc#1212835). - Move upstreamed x86, scsi and arm patches into sorted section - Fixed typo that might caused (bsc#1209457). - Fix bug introduced by broken backport (bsc#1208628). - Update patch for launch issue (bsc#1210853). - [infiniband] READ is 'data destination', not source... (git-fixes) - [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes). - acpi / x86: Add support for LPS0 callback handler (git-fixes). - acpi: Do not build ACPICA with '-Os' (git-fixes). - acpi: EC: Fix EC address space handler unregistration (bsc#1207149). - acpi: EC: Fix ECDT probe ordering issues (bsc#1207149). - acpi: EC: Fix oops when removing custom query handlers (git-fixes). - acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes). - acpi: PM: Do not turn of unused power resources on the Toshiba Click Mini (git-fixes). - acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - acpi: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (git-fixes). - acpi: VIOT: Initialize the correct IOMMU fwspec (git-fixes). - acpi: battery: Fix missing NUL-termination with large strings (git-fixes). - acpi: bus: Ensure that notify handlers are not running after removal (git-fixes). - acpi: cppc: Add AMD pstate energy performance preference cppc control (bsc#1212445). - acpi: cppc: Add auto select register read/write support (bsc#1212445). - acpi: cppc: Disable FIE if registers in PCC regions (bsc#1210953). - acpi: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - acpi: resource: Add IRQ override quirk for LG UltraPC 17U70P (git-fixes). - acpi: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models (git-fixes). - acpi: resource: Add Medion S17413 to IRQ override quirk (git-fixes). - acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - acpi: resource: Do IRQ override on all TongFang GMxRGxx (git-fixes). - acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes). - acpi: tables: Add support for NBFT (bsc#1195921). - acpi: tables: Add support for NBFT (bsc#1206340). - acpi: video: Add acpi_video_backlight_use_native() helper (bsc#1206843). - acpi: video: Allow GPU drivers to report no panels (bsc#1206843). - acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - acpi: video: Fix missing native backlight on Chromebooks (bsc#1206843). - acpi: video: Refactor acpi_video_get_backlight_type() a bit (bsc#1203693). - acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - acpi: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes). - acpica: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes). - acpica: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149). - acpica: Avoid undefined behavior: applying zero offset to null pointer (git-fixes). - acpica: Drop port I/O validation for some regions (git-fixes). - acpica: include/acpi/acpixf.h: Fix indentation (bsc#1207149). - acpica: nsrepair: handle cases without a return value correctly (git-fixes). - add mainline tags to five pci_hyperv patches - affs: initialize fsdata in affs_truncate() (git-fixes). - alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes) - alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes). - alsa: asihpi: check pao in control_message() (git-fixes). - alsa: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes). - alsa: cs46xx: mark snd_cs46xx_download_image as static (git-fixes). - alsa: emu10k1: do not create old pass-through playback device on Audigy (git-fixes). - alsa: emu10k1: fix capture interrupt handler unlinking (git-fixes). - alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - alsa: fireface: make read-only const array for model names static (git-fixes). - alsa: firewire-digi00x: prevent potential use after free (git-fixes). - alsa: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes). - alsa: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes). - alsa: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes). - alsa: hda/ca0132: minor fix for allocation size (git-fixes). - alsa: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes). - alsa: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes). - alsa: hda/conexant: add a new hda codec SN6180 (git-fixes). - alsa: hda/hdmi: Preserve the previous PCM device upon re-enablement (git-fixes). - alsa: hda/hdmi: disable KAE for Intel DG2 (git-fixes). - alsa: hda/realtek - fixed wrong gpio assigned (git-fixes). - alsa: hda/realtek: Add 'Intel Reference board' and 'NUC 13' SSID in the ALC256 (git-fixes). - alsa: hda/realtek: Add Acer Predator PH315-54 (git-fixes). - alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes). - alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes). - alsa: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes). - alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes). - alsa: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for Clevo L140AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo X370SNW (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - alsa: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes). - alsa: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes). - alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes). - alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes). - alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes). - alsa: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (git-fixes). - alsa: hda/realtek: Add quirks for some Clevo laptops (git-fixes). - alsa: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes). - alsa: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (git-fixes). - alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes). - alsa: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes). - alsa: hda/realtek: Fix support for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - alsa: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Whitespace fix (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes). - alsa: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes). - alsa: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes). - alsa: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes). - alsa: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes). - alsa: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes). - alsa: hda: Do not unset preset when cleaning up codec (git-fixes). - alsa: hda: Fix Oops by 9.1 surround channel names (git-fixes). - alsa: hda: Fix unhandled register update during auto-suspend period (git-fixes). - alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes). - alsa: hda: LNL: add HD Audio PCI ID (git-fixes). - alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - alsa: hda: cs35l41: Enable Amp High Pass Filter (git-fixes). - alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes). - alsa: hda: intel-dsp-config: add MTL PCI id (git-fixes). - alsa: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes). - alsa: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes). - alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - alsa: jack: Fix mutex call in snd_jack_report() (git-fixes). - alsa: memalloc: Workaround for Xen PV (git-fixes). - alsa: oss: avoid missing-prototype warnings (git-fixes). - alsa: oxfw: make read-only const array models static (git-fixes). - alsa: pci: lx6464es: fix a debug loop (git-fixes). - alsa: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes). - alsa: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes). - alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes). - alsa: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes). - alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes). - alsa: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes). - alsa: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes). - alsa: ymfpci: Fix BUG_ON in probe function (git-fixes). - amdgpu/nv.c: Corrected typo in the video capabilities resolution (git-fixes). - amdgpu: disable powerpc support for the newer display engine (bsc#1194869). - amdgpu: fix build on non-DCN platforms (git-fixes). - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes). - apparmor: add a kernel label to use on kernel objects (bsc#1211113). - apparmor: fix missing error check for rhashtable_insert_fast (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arch: fix broken BuildID for arm64 and riscv (bsc#1209798). - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64: Add missing Set/Way CMO encodings (git-fixes). - arm64: Always load shadow stack pointer directly from the task struct (git-fixes) - arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes) - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes). - arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes). - arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes) - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes). - arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes) - arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes) - arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes) - arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes). - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes). - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes). - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes). - arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes). - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes) - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes) - arm64: dts: imx8mp: correct usb clocks (git-fixes) - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes). - arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes) - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes) - arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: specify full DMC range (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes). - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes). - arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes). - arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes). - arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes). - arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes). - arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes). - arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes). - arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes). - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes). - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes). - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes). - arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes). - arm64: efi: Execute runtime services from a dedicated stack (git-fixes). - arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes). - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage. - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes). - arm64: make is_ttbrX_addr() noinstr-safe (git-fixes) - arm64: mm: kfence: only handle translation faults (git-fixes) - arm: 9290/1: uaccess: Fix KASAN false-positives (git-fixes). - arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes) - arm: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes). - arm: bcm2835_defconfig: Enable the framebuffer (git-fixes). - arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - arm: defconfig: drop CONFIG_DRM_RCAR_LVDS (git-fixes). - arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes). - arm: dts: am5748: keep usb4_tm disabled (git-fixes) - arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes). - arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes). - arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes). - arm: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes). - arm: dts: gta04: fix excess dma channel usage (git-fixes). - arm: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes) - arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes). - arm: dts: imx: Fix pca9547 i2c-mux node name (git-fixes). - arm: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes). - arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes) - arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes). - arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes). - arm: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes). - arm: dts: s5pv210: correct MIPI CSIS clock name (git-fixes). - arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes). - arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes) - arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes) - arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes). - arm: dts: vexpress: add missing cache properties (git-fixes). - arm: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes). - arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes). - arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes) - arm: oMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes). - arm: oMAP2+: Fix memory leak in realtime_counter_init() (git-fixes). - arm: omap: remove debug-leds driver (git-fixes) - arm: remove some dead code (git-fixes) - arm: renumber bits related to _TIF_WORK_MASK (git-fixes) - arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes). - arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes) - arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes). - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes). - asn.1: Fix check for strdup() success (git-fixes). - asoc: adau7118: do not disable regulators on device unbind (git-fixes). - asoc: amd: acp-es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes). - asoc: codecs: lpass: fix incorrect mclk rate (git-fixes). - asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes). - asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes). - asoc: cs35l41: Only disable internal boost (git-fixes). - asoc: cs42l56: fix DT probe (git-fixes). - asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes). - asoc: dwc: limit the number of overrun messages (git-fixes). - asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes). - asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes). - asoc: es8316: Handle optional IRQ assignment (git-fixes). - asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes). - asoc: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes). - asoc: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes). - asoc: fsl_micfil: Correct the number of steps on SX controls (git-fixes). - asoc: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes). - asoc: fsl_mqs: move of_node_put() to the correct location (git-fixes). - asoc: fsl_sai: Update to modern clocking terminology (git-fixes). - asoc: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes). - asoc: hdac_hdmi: use set_stream() instead of set_tdm_slots() (git-fixes). - asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes). - asoc: intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes). - asoc: intel: Skylake: Fix driver hang during shutdown (git-fixes). - asoc: intel: avs: Access path components under lock (git-fixes). - asoc: intel: avs: Fix declaration of enum avs_channel_config (git-fixes). - asoc: intel: avs: Implement PCI shutdown (git-fixes). - asoc: intel: avs: Use min_t instead of min with cast (git-fixes). - asoc: intel: boards: fix spelling in comments (git-fixes). - asoc: intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcht_es8316: move comment to the right place (git-fixes). - asoc: intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes). - asoc: intel: bytcr_rt5640: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: soc-acpi-byt: Fix 'WM510205' match no longer working (git-fixes). - asoc: intel: soc-acpi: fix copy-paste issue in topology names (git-fixes). - asoc: intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes). - asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes). - asoc: lpass: Fix for KASAN use_after_free out of bounds (git-fixes). - asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes). - asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes). - asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes). - asoc: mediatek: mt8173: Fix irq error path (git-fixes). - asoc: nau8824: Add quirk to active-high jack-detect (git-fixes). - asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes). - asoc: rsnd: fixup #endif position (git-fixes). - asoc: rt1308-sdw: add the default value of some registers (git-fixes). - asoc: rt5682: Disable jack detection interrupt during suspend (git-fixes). - asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes). - asoc: simple-card: Add missing of_node_put() in case of error (git-fixes). - asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes). - asoc: soc-compress: Inherit atomicity from DAI link for Compress FE (git-fixes). - asoc: soc-compress: Reposition and add pcm_mutex (git-fixes). - asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes). - asoc: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (git-fixes). - asoc: soc-pcm: test if a BE can be prepared (git-fixes). - asoc: sof: Intel: MTL: Fix the device description (git-fixes). - asoc: sof: ipc4-topology: set dmic dai index from copier (git-fixes). - asoc: sof: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data() (git-fixes). - asoc: ssm2602: Add workaround for playback distortions (git-fixes). - asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes). - asoc: topology: Properly access value coming from topology file (git-fixes). - asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes). - asoc: zl38060 add gpiolib dependency (git-fixes). - asoc: zl38060: Remove spurious gpiolib select (git-fixes). - ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes). - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes). - ata: libata: Set __ATA_BASE_SHT max_sectors (git-fixes). - ata: libata: fix NCQ autosense logic (git-fixes). - ata: pata_macio: Fix compilation warning (git-fixes). - ata: pata_octeon_cf: drop kernel-doc notation (git-fixes). - ata: pata_octeon_cf: fix call to trace_ata_bmdma_stop() (git-fixes). - ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes). - ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes). - ath9k: hif_usb: simplify if-if to if-else (git-fixes). - ath9k: htc: clean up statistics macros (git-fixes). - atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes). - audit: update the mailing list in MAINTAINERS (git-fixes). - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes). - backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes). - batman-adv: Broken sync while rescheduling delayed work (git-fixes). - bcache: Revert 'bcache: use bvec_virt' (git-fixes). - bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes). - bcache: fix wrong bdev parameter when calling bio_alloc_clone() in do_bio_hook() (git-fixes). - bcache: put bch_bio_map() back to correct location in journal_write_unlocked() (git-fixes). - bfq: fix use-after-free in bfq_dispatch_request (git-fixes). - bfq: fix waker_bfqq inconsistency crash (git-fixes). - Blacklist commit that might cause regression (bsc#1210947) - blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes). - blk-cgroup: properly pin the parent in blkcg_css_online (bsc#1208105). - blk-lib: fix blkdev_issue_secure_erase (git-fixes). - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (git-fixes). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: run queue no matter whether the request is the last request (git-fixes). - blk-throttle: fix that io throttle can only work for single bio (git-fixes). - blk-throttle: prevent overflow while calculating wait time (git-fixes). - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - block, bfq: do not move oom_bfqq (git-fixes). - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes). - block, bfq: fix possible uaf for 'bfqq->bic' (git-fixes). - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes). - block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bfq-iosched.c: use 'false' rather than 'BLK_RW_ASYNC' (git-fixes). - block/bfq_wf2q: correct weight to ioprio (git-fixes). - block/bio: remove duplicate append pages code (git-fixes). - block: Fix possible memory leak for rq_wb on add_disk failure (git-fixes). - block: add a bdev_max_zone_append_sectors helper (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: check minor range in device_add_disk() (git-fixes). - block: clear ->slave_dir when dropping the main slave_dir reference (git-fixes). - block: do not allow splitting of a REQ_NOWAIT bio (git-fixes). - block: do not allow the same type rq_qos add more than once (git-fixes). - block: do not reverse request order when flushing plug list (bsc#1208588 bsc#1208128). - block: ensure iov_iter advances for added pages (git-fixes). - block: fix and cleanup bio_check_ro (git-fixes). - block: fix default IO priority handling again (git-fixes). - block: fix infinite loop for invalid zone append (git-fixes). - block: fix leaking minors of hidden disks (git-fixes). - block: fix memory leak for elevator on add_disk failure (git-fixes). - block: fix missing blkcg_bio_issue_init (bsc#1208107). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (git-fixes). - block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes). - block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes). - block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes). - block: null_blk: Fix null_zone_write() (git-fixes). - block: pop cached rq before potentially blocking rq_qos_throttle() (git-fixes). - block: use bdev_get_queue() in bio.c (git-fixes). - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes). - bluetooth: Fix crash when replugging CSR fake controllers (git-fixes). - bluetooth: Fix double free in hci_conn_cleanup (bsc#1209052 CVE-2023-28464). - bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes). - bluetooth: Fix race condition in hci_cmd_sync_clear (git-fixes). - bluetooth: Fix race condition in hidp_session_thread (git-fixes). - bluetooth: Fix support for Read Local Supported Codecs V2 (git-fixes). - bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes). - bluetooth: HCI: Fix global-out-of-bounds (git-fixes). - bluetooth: ISO: Avoid circular locking dependency (git-fixes). - bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - bluetooth: ISO: do not try to remove CIG if there are bound CIS left (git-fixes). - bluetooth: ISO: fix timestamped HCI ISO data packet parsing (git-fixes). - bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes). - bluetooth: L2CAP: Fix potential user-after-free (git-fixes). - bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes). - bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes). - bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (git-fixes). - bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes). - bluetooth: Remove codec id field in vendor codec definition (git-fixes). - bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (git-fixes). - bluetooth: Set ISO Data Path on broadcast sink (git-fixes). - bluetooth: btintel: Add LE States quirk support (git-fixes). - bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes). - bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes). - bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - bluetooth: btusb: Remove detection of ISO packets over bulk (git-fixes). - bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes). - bluetooth: hci_conn: Fix memory leaks (git-fixes). - bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (git-fixes). - bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (git-fixes). - bluetooth: hci_conn: use HCI dst_type values also for BIS (git-fixes). - bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (git-fixes). - bluetooth: hci_core: fix error handling in hci_register_dev() (git-fixes). - bluetooth: hci_event: Fix Invalid wait context (git-fixes). - bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - bluetooth: hci_qca: fix debugfs registration (git-fixes). - bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes). - bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes). - bluetooth: hci_sync: Fix not indicating power state (git-fixes). - bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (git-fixes). - bluetooth: hci_sync: cancel cmd_timer if hci_open failed (git-fixes). - bnxt: Do not read past the end of test names (jsc#SLE-18978). - bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978). - bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978). - bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978). - bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978). - bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes). - bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978). - bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978). - bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978). - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes). - bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978). - bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978). - bonding: Fix negative jump label count on nested bonding (bsc#1212685). - bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes) - bpf, arm64: Clear prog->jited_len along prog->jited (git-fixes) - bpf, arm64: Feed byte-offset into bpf line info (git-fixes) - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes) - bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes). - bpf, x64: Factor out emission of REX byte in more cases (git-fixes). - bpf: Add extra path pointer check to d_path helper (git-fixes). - bpf: Fix UAF in task local storage (bsc#1212564). - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes). - bpf: Fix extable address check (git-fixes). - bpf: Fix extable fixup offset (git-fixes). - bpf: Skip task with pid=1 in send_signal_common() (git-fixes). - btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158). - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158). - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes). - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158). - btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158). - btrfs: qgroup: remove outdated TODO comments (bsc#1207158). - bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes). - bus: mhi: host: Fix race between channel preparation and M0 event (git-fixes). - bus: mhi: host: Range check CHDBOFF and ERDBOFF (git-fixes). - bus: mhi: host: Remove duplicate ee check for syserr (git-fixes). - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (git-fixes). - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes). - bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes). - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes). - ca8210: fix mac_len negative array access (git-fixes). - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes). - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes). - can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes). - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes). - can: j1939: change j1939_netdev_lock type to mutex (git-fixes). - can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes). - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes). - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes). - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes). - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes). - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes). - can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes). - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes). - can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes). - can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes). - can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes). - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes). - can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes). - can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes). - can: length: fix bitstuffing count (git-fixes). - can: length: fix description of the RRS field (git-fixes). - can: length: make header self contained (git-fixes). - cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes). - ceph: avoid use-after-free in ceph_fl_release_lock() (jsc#SES-1880). - ceph: blocklist the kclient when receiving corrupted snap trace (jsc#SES-1880). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540). - ceph: flush cap releases when the session is flushed (bsc#1208428). - ceph: flush cap releases when the session is flushed (jsc#SES-1880). - ceph: force updating the msg pointer in non-split case (bsc#1211804). - ceph: move mount state enum to super.h (jsc#SES-1880). - ceph: remove useless session parameter for check_caps() (jsc#SES-1880). - ceph: switch to vfs_inode_has_locks() to fix file lock bug (jsc#SES-1880). - ceph: try to check caps immediately after async creating finishes (jsc#SES-1880). - ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504). - ceph: use locks_inode_context helper (jsc#SES-1880). - cfg80211: allow continuous radar monitoring on offchannel chain (bsc#1209980). - cfg80211: fix possible NULL pointer dereference in cfg80211_stop_offchan_radar_detection (bsc#1209980). - cfg80211: implement APIs for dedicated radar detection HW (bsc#1209980). - cfg80211: move offchan_cac_event to a dedicated work (bsc#1209980). - cfg80211: rename offchannel_chain structs to background_chain to avoid confusion with ETSI standard (bsc#1209980). - cfg80211: schedule offchan_cac_abort_wk in cfg80211_radar_event (bsc#1209980). - cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906). - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827). - cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650). - cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650). - cgroup: Make cgroup_get_from_id() prettier (bsc#1205650). - cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650). - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563). - cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561). - cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (bsc#1205650). - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563). - cgroup: reduce dependency on cgroup_mutex (bsc#1205650). - cifs: Avoid a cast in add_lease_context() (bsc#1193629). - cifs: Check the lease context if we actually got a lease (bsc#1193629). - cifs: Convert struct fealist away from 1-element array (bsc#1193629). - cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (git-fixes). - cifs: Fix smb2_set_path_size() (git-fixes). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629). - cifs: Fix use-after-free in rdata->read_into_pages() (git-fixes). - cifs: Fix warning and UAF when destroy the MR list (git-fixes). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629). - cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes). - cifs: Replace remaining 1-element arrays (bsc#1193629). - cifs: Replace zero-length arrays with flexible-array members (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Use kstrtobool() instead of strtobool() (bsc#1193629). - cifs: append path to open_enter trace event (bsc#1193629). - cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758). - cifs: avoid race conditions with parallel reconnects (bsc#1193629). - cifs: avoid races in parallel reconnects in smb1 (bsc#1193629). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629). - cifs: check only tcon status on tcon related functions (bsc#1193629). - cifs: do not include page data when checking signature (git-fixes). - cifs: do not poll server interfaces too regularly (bsc#1193629). - cifs: do not take exclusive lock for updating target hints (bsc#1193629). - cifs: do not try to use rdma offload on encrypted connections (bsc#1193629). - cifs: double lock in cifs_reconnect_tcon() (git-fixes). - cifs: dump pending mids for all channels in DebugData (bsc#1193629). - cifs: empty interface list when server does not support query interfaces (bsc#1193629). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629). - cifs: fix dentry lookups in directory handle cache (bsc#1193629). - cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629). - cifs: fix mount on old smb servers (boo#1206935). - cifs: fix negotiate context parsing (bsc#1210301). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629). - cifs: fix potential deadlock in cache_refresh_path() (git-fixes). - cifs: fix potential race when tree connecting ipc (bsc#1208758). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629). - cifs: fix sharing of DFS connections (bsc#1208758). - cifs: fix smb1 mount regression (bsc#1193629). - cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629). - cifs: generate signkey for the channel that's reconnecting (bsc#1193629). - cifs: get rid of dead check in smb2_reconnect() (bsc#1193629). - cifs: get rid of dns resolve worker (bsc#1193629). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629). - cifs: handle cache lookup errors different than -ENOENT (bsc#1193629). - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629). - cifs: lock chan_lock outside match_session (bsc#1193629). - cifs: mapchars mount option ignored (bsc#1193629). - cifs: match even the scope id for ipv6 addresses (bsc#1193629). - cifs: missing lock when updating session status (bsc#1193629). - cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629). - cifs: prevent data race in smb2_reconnect() (bsc#1193629). - cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629). - cifs: print last update time for interface list (bsc#1193629). - cifs: print session id while listing open files (bsc#1193629). - cifs: print smb3_fs_context::source when mounting (bsc#1193629). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758). - cifs: protect session status check in smb2_reconnect() (bsc#1208758). - cifs: release leases for deferred close handles when freezing (bsc#1193629). - cifs: remove duplicate code in __refresh_tcon() (bsc#1193629). - cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629). - cifs: remove unused function (bsc#1193629). - cifs: return DFS root session id in DebugData (bsc#1193629). - cifs: return a single-use cfid if we did not get a lease (bsc#1193629). - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629). - cifs: sanitize paths in cifs_update_super_prepath (git-fixes). - cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629). - cifs: split out smb3_use_rdma_offload() helper (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - cifs: update ip_addr for ses only for primary chan setup (bsc#1193629). - cifs: use DFS root session instead of tcon ses (bsc#1193629). - cifs: use tcon allocation functions even for dummy tcon (git-fixes). - cifs: use the least loaded channel for sending requests (bsc#1193629). - clk: Fix memory leak in devm_clk_notifier_register() (git-fixes). - clk: HI655X: select REGMAP instead of depending on it (git-fixes). - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes). - clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes). - clk: at91: clk-sam9x60-pll: fix return value check (git-fixes). - clk: cdce925: check return value of kasprintf() (git-fixes). - clk: imx: avoid memory leak (git-fixes). - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes). - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes). - clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (git-fixes). - clk: keystone: sci-clk: check return value of kasprintf() (git-fixes). - clk: mxl: Add option to override gate clks (git-fixes). - clk: mxl: Fix a clk entry by adding relevant flags (git-fixes). - clk: mxl: Remove redundant spinlocks (git-fixes). - clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes). - clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes). - clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes). - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes). - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes). - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes). - clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes). - clk: qcom: regmap: add PHY clock source implementation (git-fixes). - clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes). - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes). - clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes). - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes). - clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes). - clk: si5341: check return value of {devm_}kasprintf() (git-fixes). - clk: si5341: free unused memory on probe failure (git-fixes). - clk: si5341: return error if one synth clock registration fails (git-fixes). - clk: sprd: set max_register according to mapping range (git-fixes). - clk: tegra20: fix gcc-7 constant overflow warning (git-fixes). - clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes). - clk: ti: clkctrl: check return value of kasprintf() (git-fixes). - clk: vc5: check memory returned by kasprintf() (git-fixes). - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes). - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes). - clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes). - clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes). - comedi: use menuconfig for main Comedi menu (git-fixes). - configfs: fix possible memory leak in configfs_create_dir() (git-fixes). - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes). - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953). - cpufreq: CPPC: Fix performance/frequency conversion (git-fixes). - cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - crypto: acomp - define max size for destination (jsc#PED-3692) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - crypto: caam - Clear some memory in instantiate_rng (git-fixes). - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes). - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes). - crypto: crypto4xx - Call dma_unmap_page when done (git-fixes). - crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes). - crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692) - crypto: essiv - Handle EBUSY correctly (git-fixes). - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (git-fixes). - crypto: marvell/cesa - Fix type mismatch warning (git-fixes). - crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes). - crypto: qat - Fix unsigned function returning negative (jsc#PED-3692) - crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692) - crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692) - crypto: qat - abstract PFVF receive logic (jsc#PED-3692) - crypto: qat - abstract PFVF send function (jsc#PED-3692) - crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692) - crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692) - crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692) - crypto: qat - add backlog mechanism (jsc#PED-3692) - crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692) - crypto: qat - add check to validate firmware images (jsc#PED-3692) - crypto: qat - add limit to linked list parsing (jsc#PED-3692) - crypto: qat - add misc workqueue (jsc#PED-3692) - crypto: qat - add missing restarting event notification in (jsc#PED-3692) - crypto: qat - add param check for DH (jsc#PED-3692) - crypto: qat - add param check for RSA (jsc#PED-3692) - crypto: qat - add pfvf_ops (jsc#PED-3692) - crypto: qat - add resubmit logic for decompression (jsc#PED-3692) - crypto: qat - add support for 401xx devices (jsc#PED-3692) - crypto: qat - add support for compression for 4xxx (jsc#PED-3692) - crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692) - crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692) - crypto: qat - change PFVF ACK behaviour (jsc#PED-3692) - crypto: qat - change behaviour of (jsc#PED-3692) - crypto: qat - change bufferlist logic interface (jsc#PED-3692) - crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692) - crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692) - crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692) - crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692) - crypto: qat - do not rely on min version (jsc#PED-3692) - crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692) - crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692) - crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692) - crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692) - crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692) - crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - extend buffer list interface (jsc#PED-3692) - crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692) - crypto: qat - extract send and wait from (jsc#PED-3692) - crypto: qat - fix DMA transfer direction (jsc#PED-3692) - crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692) - crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692) - crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692) - crypto: qat - fix a typo in a comment (jsc#PED-3692) - crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692) - crypto: qat - fix definition of ring reset results (jsc#PED-3692) - crypto: qat - fix error return code in adf_probe (git-fixes). - crypto: qat - fix error return code in adf_probe (jsc#PED-3692) - crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692) - crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692) - crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692) - crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692) - crypto: qat - fix out-of-bounds read (git-fixes). - crypto: qat - fix wording and formatting in code comment (jsc#PED-3692) - crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692) - crypto: qat - free irq in case of failure (jsc#PED-3692) - crypto: qat - free irqs only if allocated (jsc#PED-3692) - crypto: qat - generalize crypto request buffers (jsc#PED-3692) - crypto: qat - get compression extended capabilities (jsc#PED-3692) - crypto: qat - handle retries due to collisions in (jsc#PED-3692) - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692) - crypto: qat - improve logging of PFVF messages (jsc#PED-3692) - crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692) - crypto: qat - introduce support for PFVF block messages (jsc#PED-3692) - crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692) - crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692) - crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692) - crypto: qat - make PFVF message construction direction (jsc#PED-3692) - crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692) - crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692) - crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692) - crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692) - crypto: qat - move pfvf collision detection values (jsc#PED-3692) - crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692) - crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692) - crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692) - crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692) - crypto: qat - re-enable registration of algorithms (jsc#PED-3692) - crypto: qat - refactor PF top half for PFVF (jsc#PED-3692) - crypto: qat - refactor pfvf version request messages (jsc#PED-3692) - crypto: qat - refactor submission logic (jsc#PED-3692) - crypto: qat - relocate PFVF PF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF VF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF disabled function (jsc#PED-3692) - crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692) - crypto: qat - relocate backlog related structures (jsc#PED-3692) - crypto: qat - relocate bufferlist logic (jsc#PED-3692) - crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692) - crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692) - crypto: qat - remove empty sriov_configure() (jsc#PED-3692) - crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692) - crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692) - crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692) - crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692) - crypto: qat - remove unneeded assignment (jsc#PED-3692) - crypto: qat - remove unneeded braces (jsc#PED-3692) - crypto: qat - remove unneeded packed attribute (jsc#PED-3692) - crypto: qat - remove unused PFVF stubs (jsc#PED-3692) - crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692) - crypto: qat - rename bufferlist functions (jsc#PED-3692) - crypto: qat - rename pfvf collision constants (jsc#PED-3692) - crypto: qat - reorganize PFVF code (jsc#PED-3692) - crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692) - crypto: qat - replace deprecated MSI API (jsc#PED-3692) - crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692) - crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692) - crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692) - crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692) - crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692) - crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692) - crypto: qat - simplify adf_enable_aer() (jsc#PED-3692) - crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692) - crypto: qat - split PFVF message decoding from handling (jsc#PED-3692) - crypto: qat - stop using iommu_present() (jsc#PED-3692) - crypto: qat - store the PFVF protocol version of the (jsc#PED-3692) - crypto: qat - store the ring-to-service mapping (jsc#PED-3692) - crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692) - crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692) - crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692) - crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692) - crypto: qat - use hweight for bit counting (jsc#PED-3692) - crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692) - crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692) - crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692) - crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes). - crypto: sa2ul - Select CRYPTO_DES (git-fixes). - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes). - crypto: seqiv - Handle EBUSY correctly (git-fixes). - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes). - crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes). - crypto: xts - Handle EBUSY correctly (git-fixes). - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes). - device-dax: Fix duplicate 'hmem' device registration (bsc#1211400). - devlink: hold region lock when flushing snapshots (git-fixes). - disable two x86 PAT related patches (bsc#1212456) This may break i915 when booted with nopat, but fixes /dev/mem access in Xen PV domU. - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm clone: Fix UAF in clone_dtr() (git-fixes). - dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes). - dm integrity: clear the journal on suspend (git-fixes). - dm integrity: flush the journal on suspend (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm raid: fix address sanitizer warning in raid_resume (git-fixes). - dm raid: fix address sanitizer warning in raid_status (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes). - dm: fix alloc_dax error handling in alloc_dev (git-fixes). - dm: requeue IO if mapping table not yet available (git-fixes). - dma-buf: Use dma_fence_unwrap_for_each when importing fences (git-fixes). - dma-buf: cleanup kerneldoc of removed component (git-fixes). - dma-direct: use is_swiotlb_active in dma_direct_map_page (PED-3259). - dma-mapping: reformat comment to suppress htmldoc warning (git-fixes). - dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes). - dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes). - dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes). - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes). - dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes). - dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes). - dmaengine: dw-edma: Drop chancnt initialization (git-fixes). - dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes). - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes). - dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes). - dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes). - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes). - dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes). - dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes). - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes). - dmaengine: mv_xor_v2: Fix an error code (git-fixes). - dmaengine: pl330: rename _start to prevent build error (git-fixes). - dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes). - dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes). - dmaengine: tegra: Fix memory leak in terminate_all() (git-fixes). - do not reuse connection if share marked as isolated (bsc#1193629). - docs/memory-barriers.txt: Add a missed closing parenthesis (git-fixes). - docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes). - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (git-fixes). - docs: driver-api: firmware_loader: fix missing argument in usage example (git-fixes). - docs: ftrace: fix a issue with duplicated subtitle number (git-fixes). - docs: gdbmacros: print newest record (git-fixes). - docs: networking: Update codeaurora references for rmnet (git-fixes). - docs: networking: fix x25-iface.rst heading & index order (git-fixes). - documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes). - documentation: bonding: fix the doc of peer_notif_delay (git-fixes). - documentation: timers: hrtimers: Make hybrid union historical (git-fixes). - driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes). - driver core: fix potential null-ptr-deref in device_add() (git-fixes). - driver core: fix resource leak in device_add() (git-fixes). - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes). - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815). - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815). - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes). - drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: transport_class: fix possible memory leak (git-fixes). - drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes). - drivers: meson: secure-pwrc: always enable DMA domain (git-fixes). - drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes). - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes). - drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - drm-hyperv: Add a bug reference to two existing changes (bsc#1211281). - drm/amd/amdgpu: fix warning during suspend (bsc#1206843). - drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes). - drm/amd/display: Add DCN314 display SG Support (bsc#1206843). - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes). - drm/amd/display: Add NULL plane_state check for cursor disable logic (git-fixes). - drm/amd/display: Add check for DET fetch latency hiding for dcn32 (bsc#1206843). - drm/amd/display: Add logging for display MALL refresh setting (git-fixes). - drm/amd/display: Add minimal pipe split transition state (git-fixes). - drm/amd/display: Add missing brackets in calculation (bsc#1206843). - drm/amd/display: Add wrapper to call planes and stream update (git-fixes). - drm/amd/display: Adjust downscaling limits for dcn314 (bsc#1206843). - drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 (bsc#1206843). - drm/amd/display: Clear MST topology if it fails to resume (git-fixes). - drm/amd/display: Conversion to bool not necessary (git-fixes). - drm/amd/display: Defer DIG FIFO disable after VID stream enable (bsc#1206843). - drm/amd/display: Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now (bsc#1206843). - drm/amd/display: Do not clear GPINT register when releasing DMUB from reset (git-fixes). - drm/amd/display: Do not commit pipe when updating DRR (bsc#1206843). - drm/amd/display: Do not set DRR on pipe Commit (bsc#1206843). - drm/amd/display: Enable P-state validation checks for DCN314 (bsc#1206843). - drm/amd/display: Explicitly specify update type per plane info change (git-fixes). - drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes). - drm/amd/display: Fix DP MST sinks removal issue (git-fixes). - drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming (bsc#1206843). - drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes). - drm/amd/display: Fix display corruption w/ VSR enable (bsc#1206843). - drm/amd/display: Fix hang when skipping modeset (git-fixes). - drm/amd/display: Fix potential null dereference (git-fixes). - drm/amd/display: Fix potential null-deref in dm_resume (git-fixes). - drm/amd/display: Fix race condition in DPIA AUX transfer (bsc#1206843). - drm/amd/display: Fix set scaling doesn's work (git-fixes). - drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes). - drm/amd/display: Fixes for dcn32_clk_mgr implementation (git-fixes). - drm/amd/display: Include virtual signal to set k1 and k2 values (bsc#1206843). - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB (bsc#1206843). - drm/amd/display: Pass the right info to drm_dp_remove_payload (bsc#1206843). - drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes). - drm/amd/display: Properly reuse completion structure (bsc#1206843). - drm/amd/display: Reduce expected sdp bandwidth for dcn321 (bsc#1206843). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1206843). - drm/amd/display: Report to ACPI video if no panels were found (bsc#1206843). - drm/amd/display: Reset DMUB mailbox SW state after HW reset (bsc#1206843). - drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset (git-fixes). - drm/amd/display: Return error code on DSC atomic check failure (git-fixes). - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write (git-fixes). - drm/amd/display: Set dcn32 caps.seamless_odm (bsc#1206843). - drm/amd/display: Set hvm_enabled flag for S/G mode (bsc#1206843). - drm/amd/display: Simplify same effect if/else blocks (git-fixes). - drm/amd/display: Take FEC Overhead into Timeslot Calculation (bsc#1206843). - drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734). - drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 (bsc#1206843). - drm/amd/display: Uninitialized variables causing 4k60 UCLK to stay at DPM1 and not DPM0 (bsc#1206843). - drm/amd/display: Update bounding box values for DCN321 (git-fixes). - drm/amd/display: Update clock table to include highest clock setting (bsc#1206843). - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes). - drm/amd/display: Use dc_update_planes_and_stream (git-fixes). - drm/amd/display: Use min transition for SubVP into MPO (bsc#1206843). - drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit (bsc#1206843). - drm/amd/display: add a NULL pointer check (bsc#1212848, bsc#1212961). - drm/amd/display: adjust MALL size available for DCN32 and DCN321 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.4 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.5 (bsc#1206843). - drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848, bsc#1212961). - drm/amd/display: disconnect MPCC only on OTG change (bsc#1206843). - drm/amd/display: do not call dc_interrupt_set() for disabled crtcs (git-fixes). - drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes). - drm/amd/display: edp do not add non-edid timings (git-fixes). - drm/amd/display: fix FCLK pstate change underflow (bsc#1206843). - drm/amd/display: fix cursor offset on rotation 180 (git-fixes). - drm/amd/display: fix duplicate assignments (git-fixes). - drm/amd/display: fix flickering caused by S/G mode (git-fixes). - drm/amd/display: fix issues with driver unload (git-fixes). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1206843). - drm/amd/display: fix mapping to non-allocated address (bsc#1206843). - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes). - drm/amd/display: fix the system hang while disable PSR (git-fixes). - drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk (bsc#1206843). - drm/amd/display: move remaining FPU code to dml folder (bsc#1206843). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1206843). - drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes). - drm/amd/display: revert Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: skip commit minimal transition state (bsc#1206843). - drm/amd/display: wait for vblank during pipe programming (git-fixes). - drm/amd/pm/smu13: BACO is supported when it's in BACO state (bsc#1206843). - drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 (bsc#1206843). - drm/amd/pm: Fix output of pp_od_clk_voltage (git-fixes). - drm/amd/pm: Fix power context allocation in SMU13 (git-fixes). - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (bsc#1206843). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1206843). - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 (bsc#1206843). - drm/amd/pm: add missing SMU13.0.0 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add missing SMU13.0.7 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 (bsc#1206843). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.4 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU13.0.0 driver_if header to version 0x34 (bsc#1206843). - drm/amd/pm: correct SMU13.0.0 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 max shader clock reporting (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct the fan speed retrieving in PWM for some SMU13 asics (bsc#1206843). - drm/amd/pm: correct the pcie link state check for SMU13 (bsc#1206843). - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation (bsc#1206843). - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 (bsc#1206843). - drm/amd/pm: enable mode1 reset on smu_v13_0_10 (bsc#1206843). - drm/amd/pm: parse pp_handle under appropriate conditions (git-fixes). - drm/amd/pm: remove unused num_of_active_display variable (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes). - drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (bsc#1212848, bsc#1212961). - drm/amd/pm: update SMU13.0.0 reported maximum shader clock (bsc#1206843). - drm/amd/pm: update the LC_L1_INACTIVITY setting to address possible noise issue (bsc#1212848, bsc#1212961). - drm/amd: Avoid ASSERT for some message failures (bsc#1206843). - drm/amd: Avoid BUG() for case of SRIOV missing IP version (bsc#1206843). - drm/amd: Delay removal of the firmware framebuffer (git-fixes). - drm/amd: Disable PSR-SU on Parade 0803 TCON (bsc#1212848, bsc#1212961). - drm/amd: Do not try to enable secure display TA multiple times (bsc#1212848, bsc#1212961). - drm/amd: Fix an out of bounds error in BIOS parser (git-fixes). - drm/amd: Fix initialization for nbio 4.3.0 (bsc#1206843). - drm/amd: Fix initialization for nbio 7.5.1 (bsc#1206843). - drm/amd: Fix initialization mistake for NBIO 7.3.0 (bsc#1206843). - drm/amd: Make sure image is written to trigger VBIOS image update flow (git-fixes). - drm/amd: Tighten permissions on VBIOS flashing attributes (git-fixes). - drm/amdgpu/discovery: add PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable mes support for GC v11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 (bsc#1206843). - drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: set the APU flag for GC 11.0.4 (bsc#1206843). - drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments (bsc#1206843). - drm/amdgpu/display/mst: adjust the naming of mst_port and port of aconnector (bsc#1206843). - drm/amdgpu/display/mst: limit payload to be updated one by one (bsc#1206843). - drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD (bsc#1206843). - drm/amdgpu/dm/dp_mst: Do not grab mst_mgr->lock when computing DSC state (bsc#1206843). - drm/amdgpu/dm/mst: Fix uninitialized var in pre_compute_mst_dsc_configs_for_state() (bsc#1206843). - drm/amdgpu/dm/mst: Use the correct topology mgr pointer in amdgpu_dm_connector (bsc#1206843). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes). - drm/amdgpu/gfx10: Disable gfxoff before disabling powergating (git-fixes). - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes). - drm/amdgpu/mst: Stop ignoring error codes and deadlocking (bsc#1206843). - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (bsc#1206843). - drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 (bsc#1206843). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1206843). - drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 (bsc#1206843). - drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/soc21: do not expose AV1 if VCN0 is harvested (bsc#1206843). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1206843). - drm/amdgpu: Correct the power calcultion for Renior/Cezanne (git-fixes). - drm/amdgpu: Do not register backlight when another backlight should be used (v3) (bsc#1206843). - drm/amdgpu: Do not resume IOMMU after incomplete init (bsc#1206843). - drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN (bsc#1206843). - drm/amdgpu: Enable vclk dclk node for gc11.0.3 (bsc#1206843). - drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (bsc#1206843). - drm/amdgpu: Fix potential NULL dereference (bsc#1206843). - drm/amdgpu: Fix potential double free and null pointer dereference (bsc#1206843). - drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1206843). - drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes). - drm/amdgpu: Fixed bug on error when unloading amdgpu (bsc#1206843). - drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869). - drm/amdgpu: Register ACPI video backlight when skipping amdgpu backlight registration (bsc#1206843). - drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1206843). - drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes). - drm/amdgpu: Use the sched from entity for amdgpu_cs trace (git-fixes). - drm/amdgpu: Validate VM ioctl flags (git-fixes). - drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes). - drm/amdgpu: add gfx support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add gmc v11 support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add missing radeon secondary PCI ID (git-fixes). - drm/amdgpu: add smu 13 support for smu 13.0.11 (bsc#1206843). - drm/amdgpu: add soc21 common ip block support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add tmz support for GC 11.0.1 (bsc#1206843). - drm/amdgpu: add tmz support for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: allow more APUs to do mode2 reset when go to S4 (bsc#1206843). - drm/amdgpu: allow multipipe policy on ASICs with one MEC (bsc#1206843). - drm/amdgpu: change gfx 11.0.4 external_id range (git-fixes). - drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes). - drm/amdgpu: correct MEC number for gfx11 APUs (bsc#1206843). - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes). - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes). - drm/amdgpu: drop experimental flag on aldebaran (git-fixes). - drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable GFX IP v11.0.4 CG support (bsc#1206843). - drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable HDP SD for gfx 11.0.3 (bsc#1206843). - drm/amdgpu: enable PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu: enable VCN DPG for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram (git-fixes). - drm/amdgpu: fix amdgpu_job_free_resources v2 (bsc#1206843). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (bsc#1212848, bsc#1212961). - drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv (bsc#1206843). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 (bsc#1206843). - drm/amdgpu: fix mmhub register base coding error (git-fixes). - drm/amdgpu: fix number of fence calculations (bsc#1212848, bsc#1212961). - drm/amdgpu: fix return value check in kfd (git-fixes). - drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (bsc#1206843). - drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes). - drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume (git-fixes). - drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (git-fixes). - drm/amdgpu: reposition the gpu reset checking for reuse (bsc#1206843). - drm/amdgpu: set GC 11.0.4 family (bsc#1206843). - drm/amdgpu: skip ASIC reset for APUs when go to S4 (bsc#1206843). - drm/amdgpu: skip MES for S0ix as well since it's part of GFX (bsc#1206843). - drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes). - drm/amdgpu: skip mes self test after s0i3 resume for MES IP v11.0 (bsc#1206843). - drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset (git-fixes). - drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes). - drm/amdgpu: update wave data type to 3 for gfx11 (bsc#1206843). - drm/amdkfd: Add sync after creating vram bo (bsc#1206843). - drm/amdkfd: Fix BO offset for multi-VMA page migration (git-fixes). - drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU (bsc#1206843). - drm/amdkfd: Fix an illegal memory access (git-fixes). - drm/amdkfd: Fix double release compute pasid (bsc#1206843). - drm/amdkfd: Fix kfd_process_device_init_vm error handling (bsc#1206843). - drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes). - drm/amdkfd: Fix the memory overrun (bsc#1206843). - drm/amdkfd: Fix the warning of array-index-out-of-bounds (bsc#1206843). - drm/amdkfd: Fixed kfd_process cleanup on module exit (git-fixes). - drm/amdkfd: Get prange->offset after svm_range_vram_node_new (git-fixes). - drm/amdkfd: Page aligned memory reserve size (bsc#1206843). - drm/amdkfd: add GC 11.0.4 KFD support (bsc#1206843). - drm/amdkfd: fix a potential double free in pqm_create_queue (git-fixes). - drm/amdkfd: fix potential kgd_mem UAFs (git-fixes). - drm/amdkfd: introduce dummy cache info for property asic (bsc#1206843). - drm/armada: Fix a potential double free in an error handling path (git-fixes). - drm/ast: Fix ARM compatibility (git-fixes). - drm/bochs: fix blanking (git-fixes). - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes). - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes). - drm/bridge: it6505: Fix return value check for pm_runtime_get_sync (git-fixes). - drm/bridge: lt8912b: Add hot plug detection (git-fixes). - drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes). - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes). - drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes). - drm/bridge: lt9611: fix HPD reenablement (git-fixes). - drm/bridge: lt9611: fix clock calculation (git-fixes). - drm/bridge: lt9611: fix polarity programming (git-fixes). - drm/bridge: lt9611: fix programming of video modes (git-fixes). - drm/bridge: lt9611: fix sleep mode setup (git-fixes). - drm/bridge: lt9611: pass a pointer to the of node (git-fixes). - drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes). - drm/bridge: tc358768: always enable HS video mode (git-fixes). - drm/bridge: tc358768: fix PLL parameters computation (git-fixes). - drm/bridge: tc358768: fix PLL target frequency (git-fixes). - drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes). - drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec (git-fixes). - drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow (git-fixes). - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (git-fixes). - drm/connector: print max_requested_bpc in state debugfs (git-fixes). - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state() (bsc#1206843). - drm/display/dp_mst: Add helper for finding payloads in atomic MST state (bsc#1206843). - drm/display/dp_mst: Add helpers for serializing SST &lt;-> MST transitions (bsc#1206843). - drm/display/dp_mst: Add nonblocking helpers for DP MST (bsc#1206843). - drm/display/dp_mst: Call them time slots, not VCPI slots (bsc#1206843). - drm/display/dp_mst: Correct the kref of port (bsc#1206843). - drm/display/dp_mst: Do not open code modeset checks for releasing time slots (bsc#1206843). - drm/display/dp_mst: Drop all ports from topology on CSNs before queueing link address work (bsc#1206843). - drm/display/dp_mst: Fix confusing docs for drm_dp_atomic_release_time_slots() (bsc#1206843). - drm/display/dp_mst: Fix down message handling after a packet reception error (git-fixes). - drm/display/dp_mst: Fix down/up message handling after sink disconnect (git-fixes). - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (git-fixes). - drm/display/dp_mst: Fix modeset tracking in drm_dp_atomic_release_vcpi_slots() (bsc#1206843). - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload() (bsc#1206843). - drm/display/dp_mst: Maintain time slot allocations when deleting payloads (bsc#1206843). - drm/display/dp_mst: Move all payload info into the atomic state (bsc#1206843). - drm/display/dp_mst: Rename drm_dp_mst_vcpi_allocation (bsc#1206843). - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (git-fixes). - drm/displayid: add displayid_get_header() and check bounds better (git-fixes). - drm/dp: Do not rewrite link config when setting phy test pattern (git-fixes). - drm/dp_mst: Avoid deleting payloads for connectors staying enabled (bsc#1206843). - drm/dp_mst: fix drm_dp_dpcd_read return value checks (git-fixes). - drm/edid: fix AVI infoframe aspect ratio handling (git-fixes). - drm/edid: fix parsing of 3D modes from HDMI VSDB (git-fixes). - drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes). - drm/exynos: fix g2d_open/close helper function definitions (git-fixes). - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes). - drm/exynos: vidi: fix a wrong error return (git-fixes). - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes). - drm/fbdev-generic: prohibit potential out-of-bounds access (git-fixes). - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes). - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes). - drm/hyperv: Add error message for fb size greater than allocated (git-fixes). - drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes). - drm/i915/active: Fix missing debug object activation (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/adlp: Fix typo for reference clock (git-fixes). - drm/i915/color: Fix typo for Plane CSC indexes (git-fixes). - drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes). - drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes). - drm/i915/dg2: Drop one PCI ID (git-fixes). - drm/i915/dg2: Support 4k@30 on HDMI (git-fixes). - drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU (git-fixes). - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes). - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes). - drm/i915/display: Check source height is > 0 (git-fixes). - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes). - drm/i915/display: clean up comments (git-fixes). - drm/i915/dmc: Update DG2 DMC version to v2.08 (git-fixes). - drm/i915/dp: prevent potential div-by-zero (git-fixes). - drm/i915/dp_mst: Fix mst_mgr lookup during atomic check (bsc#1206843). - drm/i915/dp_mst: Fix payload removal during output disabling (bsc#1206843). - drm/i915/dpt: Treat the DPT BO as a framebuffer (git-fixes). - drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() (git-fixes). - drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes). - drm/i915/gem: Flush lmem contents after construction (git-fixes). - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes). - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes). - drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes). - drm/i915/gt: perform uc late init after probe error injection (git-fixes). - drm/i915/guc: Do not capture Gen8 regs on Xe devices (git-fixes). - drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes). - drm/i915/huc: always init the delayed load fence (git-fixes). - drm/i915/huc: bump timeout for delayed load and reduce print verbosity (git-fixes). - drm/i915/huc: fix leak of debug object in huc load fence on driver unload (git-fixes). - drm/i915/migrate: Account for the reserved_space (git-fixes). - drm/i915/migrate: fix corner case in CCS aux copying (git-fixes). - drm/i915/psr: Fix PSR_IMR/IIR field handling (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes). - drm/i915/pxp: use &lt;> instead of '' for headers in include/ (git-fixes). - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes). - drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes). - drm/i915/selftests: Add some missing error propagation (git-fixes). - drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes). - drm/i915/selftests: Stop using kthread_stop() (git-fixes). - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes). - drm/i915: Allow switching away via vga-switcheroo if uninitialized (git-fixes). - drm/i915: Avoid potential vm use-after-free (git-fixes). - drm/i915: Disable DC states for all commits (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes). - drm/i915: Fix NULL ptr deref by checking new_crtc_state (git-fixes). - drm/i915: Fix VBT DSI DVO port handling (git-fixes). - drm/i915: Fix context runtime accounting (git-fixes). - drm/i915: Fix fast wake AUX sync len (git-fixes). - drm/i915: Fix potential bit_17 double-free (git-fixes). - drm/i915: Fix potential context UAFs (git-fixes). - drm/i915: Fix request ref counting during error capture & debugfs dump (git-fixes). - drm/i915: Fix up locking around dumping requests lists (git-fixes). - drm/i915: Initialize the obj flags for shmem objects (git-fixes). - drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes). - drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on skl/glk (git-fixes). - drm/i915: Move fd_install after last use of fence (git-fixes). - drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes). - drm/i915: Remove __maybe_unused from mtl_info (git-fixes). - drm/i915: Remove unused bits of i915_vma/active api (git-fixes). - drm/i915: Remove unused variable (git-fixes). - drm/i915: Use 18 fast wake AUX sync len (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: move a Kconfig symbol to unbreak the menu presentation (git-fixes). - drm/i915: stop abusing swiotlb_max_segment (git-fixes). - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes). - drm/mediatek: Clean dangling pointer on bind error path (git-fixes). - drm/mediatek: Drop unbalanced obj unref (git-fixes). - drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes). - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes). - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes). - drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes). - drm/meson: fix missing component unbind on bind errors (git-fixes). - drm/meson: reorder driver deinit sequence to fix use-after-free bug (git-fixes). - drm/mgag200: Fix gamma lut not initialized (git-fixes). - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes). - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes). - drm/msm/a5xx: fix context faults during ring switch (git-fixes). - drm/msm/a5xx: fix highest bank bit for a530 (git-fixes). - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes). - drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes). - drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage (git-fixes). - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (git-fixes). - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes). - drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error (git-fixes). - drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at gpu load (git-fixes). - drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes). - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes). - drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes). - drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes). - drm/msm/dp: Free resources after unregistering them (git-fixes). - drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training (git-fixes). - drm/msm/dp: unregister audio driver during unbind (git-fixes). - drm/msm/dpu: Add INTF_5 interrupts (git-fixes). - drm/msm/dpu: Add check for cstate (git-fixes). - drm/msm/dpu: Add check for pstates (git-fixes). - drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes). - drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes). - drm/msm/dpu: Reject topologies for which no DSC blocks are available (git-fixes). - drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes). - drm/msm/dpu: Remove num_enc from topology struct in favour of num_dsc (git-fixes). - drm/msm/dpu: Wire up DSC mask for active CTL configuration (git-fixes). - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (git-fixes). - drm/msm/dpu: clear DSPP reservations in rm release (git-fixes). - drm/msm/dpu: correct MERGE_3D length (git-fixes). - drm/msm/dpu: disable features unsupported by QCM2290 (git-fixes). - drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes). - drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK (git-fixes). - drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes). - drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks (git-fixes). - drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes). - drm/msm/dpu: sc7180: add missing WB2 clock control (git-fixes). - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes). - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/dsi: Allow 2 CTRLs on v2.5.0 (git-fixes). - drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes). - drm/msm/gem: Add check for kmalloc (git-fixes). - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/mdp5: Add check for kzalloc (git-fixes). - drm/msm/mdp5: fix reading hw revision on db410c platform (git-fixes). - drm/msm: Be more shouty if per-process pgtables are not working (git-fixes). - drm/msm: Fix potential invalid ptr free (git-fixes). - drm/msm: Set max segment size earlier (git-fixes). - drm/msm: clean event_thread->worker in case of an error (git-fixes). - drm/msm: fix NULL-deref on irq uninstall (git-fixes). - drm/msm: fix NULL-deref on snapshot tear down (git-fixes). - drm/msm: fix drm device leak on bind errors (git-fixes). - drm/msm: fix missing wq allocation error handling (git-fixes). - drm/msm: fix vram leak on bind errors (git-fixes). - drm/msm: fix workqueue leak on bind errors (git-fixes). - drm/msm: use strscpy instead of strncpy (git-fixes). - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes). - drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes). - drm/nouveau/dp: check for NULL nv_connector->native_mode (git-fixes). - drm/nouveau/kms/nv50-: remove unused functions (git-fixes). - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes). - drm/nouveau/kms: Cache DP encoders in nouveau_connector (bsc#1206843). - drm/nouveau/kms: Pull mst state in for all modesets (bsc#1206843). - drm/nouveau: add nv_encoder pointer check for NULL (git-fixes). - drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes). - drm/omap: dsi: Fix excessive stack usage (git-fixes). - drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes). - drm/panel: novatek-nt35950: Improve error handling (git-fixes). - drm/panel: novatek-nt35950: Only unregister DSI1 if it exists (git-fixes). - drm/panel: otm8009a: Set backlight parent to panel device (git-fixes). - drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes). - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes). - drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes). - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes). - drm/probe-helper: Cancel previous job before starting new one (git-fixes). - drm/radeon: Drop legacy MST support (bsc#1206843). - drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes). - drm/radeon: fix possible division-by-zero errors (git-fixes). - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes). - drm/radeon: free iio for atombios when driver shutdown (git-fixes). - drm/radeon: reintroduce radeon_dp_work_func content (git-fixes). - drm/rockchip: Drop unbalanced obj unref (git-fixes). - drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes). - drm/sched: Remove redundant check (git-fixes). - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() (git-fixes). - drm/shmem-helper: Remove another errant put in error path (git-fixes). - drm/shmem-helper: Revert accidental non-GPL export (git-fixes). - drm/sun4i: fix missing component unbind on bind errors (git-fixes). - drm/tegra: Avoid potential 32-bit integer overflow (git-fixes). - drm/tegra: firewall: Check for is_addr_reg existence in IMM check (git-fixes). - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes). - drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes). - drm/ttm: Fix a NULL pointer dereference (git-fixes). - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (git-fixes). - drm/ttm: optimize pool allocations a bit v2 (git-fixes). - drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking (git-fixes). - drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: drv: Call component_unbind_all() (git-fixes). - drm/vc4: hdmi: Correct interlaced timings again (git-fixes). - drm/vc4: hdmi: make CEC adapter name unique (git-fixes). - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes). - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 (git-fixes). - drm/vc4: hvs: Set AXI panic modes (git-fixes). - drm/vc4: kms: Sort the CRTCs by output before assigning them (git-fixes). - drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes). - drm/vgem: add missing mutex_destroy (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - drm/virtio: exbuf->fence_fd unmodified on interrupted wait (git-fixes). - drm/vkms: Fix memory leak in vkms_init() (git-fixes). - drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes). - drm/vmwgfx: Do not drop the reference to the handle too soon (git-fixes). - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (git-fixes). - drm/vmwgfx: Fix race issue calling pin_user_pages (git-fixes). - drm/vmwgfx: Stop accessing buffer objects which failed init (git-fixes). - drm/vram-helper: fix function names in vram helper doc (git-fixes). - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes). - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes). - drm: amd: display: Fix memory leakage (git-fixes). - drm: bridge: adv7511: unregister cec i2c device after cec adapter (git-fixes). - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags (git-fixes). - drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes). - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC (git-fixes). - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes). - drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes). - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes). - drm: tidss: Fix pixel format definition (git-fixes). - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes). - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes). - dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes). - dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes). - dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes). - dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes). - dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes). - dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes). - dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes). - dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes). - dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes). - dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes). - dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes). - dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes). - dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes). - dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes). - dt-bindings: power: renesas,apmu: Fix cpus property limits (git-fixes). - dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes). - dt-bindings: remoteproc: st,stm32-rproc: Fix phandle-array parameters description (git-fixes). - dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes). - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes). - dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes). - dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes). - dt-bindings: usb: snps,dwc3: Fix 'snps,hsphy_interface' type (git-fixes). - e1000e: Disable TSO on i219-LM card to increase speed (git-fixes). - edac/i10nm: Add Intel Emerald Rapids server support (PED-4400). - eeprom: at24: also select REGMAP (git-fixes). - eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes). - efi/x86: libstub: Fix typo in __efi64_argmap* name (git-fixes). - efi: Accept version 2 of memory attributes table (git-fixes). - efi: efivars: Fix variable writes with unsupported query_variable_store() (git-fixes). - efi: efivars: Fix variable writes without query_variable_store() (git-fixes). - efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes). - efi: rt-wrapper: Add missing include (git-fixes). - efi: ssdt: Do not free memory if ACPI table was loaded successfully (git-fixes). - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes). - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes). - elevator: update the document of elevator_switch (git-fixes). - elf: correct note name comment (git-fixes). - ethernet: 3com/typhoon: do not write directly to netdev->dev_addr (git-fixes). - ethernet: 8390/etherh: do not write directly to netdev->dev_addr (git-fixes). - ethernet: i825xx: do not write directly to netdev->dev_addr (git-fixes). - ethernet: ice: avoid gcc-9 integer overflow warning (jsc#PED-376). - ethernet: seeq/ether3: do not write directly to netdev->dev_addr (git-fixes). - ethernet: tundra: do not write directly to netdev->dev_addr (git-fixes). - exit: Add and use make_task_dead (bsc#1207328). - exit: Allow oops_limit to be disabled (bsc#1207328). - exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328). - exit: Move force_uaccess back into do_exit (bsc#1207328). - exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328). - exit: Put an upper limit on how often we can oops (bsc#1207328). - exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328). - exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328). - ext4,f2fs: fix readahead of verity data (bsc#1207648). - ext4: Fix deadlock during directory rename (bsc#1210763). - ext4: Fix possible corruption when moving a directory (bsc#1210763). - ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020). - ext4: add EA_INODE checking to ext4_iget() (bsc#1213106). - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088). - ext4: add helper to check quota inums (bsc#1207618). - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617). - ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109). - ext4: add missing validation of fast-commit record lengths (bsc#1207626). - ext4: add strict range checks while freeing blocks (bsc#1213089). - ext4: allocate extended attribute value in vmalloc area (bsc#1207635). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016). - ext4: avoid resizing to a partial cluster size (bsc#1206880). - ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634). - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018). - ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090). - ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103). - ext4: continue to expand file system when the target size does not reach (bsc#1206882). - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592). - ext4: correct max_inline_xattr_value_size computing (bsc#1206878). - ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878). - ext4: disable fast-commit of encrypted dir operations (bsc#1207623). - ext4: disallow ea_inodes with extended attributes (bsc#1213108). - ext4: do not allow journal inode to have encrypt flag (bsc#1207621). - ext4: do not increase iversion counter for ea_inodes (bsc#1207605). - ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603). - ext4: do not set up encryption key during jbd2 transaction (bsc#1207624). - ext4: drop ineligible txn start stop APIs (bsc#1207588). - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606). - ext4: factor out ext4_fc_get_tl() (bsc#1207615). - ext4: fail ext4_iget if special inode unallocated (bsc#1213010). - ext4: fast commit may miss file actions (bsc#1207591). - ext4: fast commit may not fallback for ineligible commit (bsc#1207590). - ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886). - ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766). - ext4: fix WARNING in ext4_update_inline_data (bsc#1213012). - ext4: fix WARNING in mb_find_extent (bsc#1213099). - ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767). - ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076). - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1206881). - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620). - ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111). - ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594). - ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765). - ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891). - ext4: fix data races when using cached status extents (bsc#1213102). - ext4: fix deadlock due to mbcache entry corruption (bsc#1207653). - ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105). - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631). - ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608). - ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630). - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593). - ext4: fix extent status tree race in writeback error recovery path (bsc#1206877). - ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015). - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764). - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636). - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894). - ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625). - ext4: fix lockdep warning when enabling MMP (bsc#1213100). - ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609). - ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884). - ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628). - ext4: fix possible double unlock when moving a directory (bsc#1210763). - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611). - ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612). - ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616). - ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637). - ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096). - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021). - ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627). - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890). - ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893). - ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888). - ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622). - ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878). - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098). - ext4: fix warning in 'ext4_da_release_space' (bsc#1206887). - ext4: goto right label 'failed_mount3a' (bsc#1207610). - ext4: improve error handling from ext4_dirhash() (bsc#1213104). - ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017). - ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629). - ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633). - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614). - ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602). - ext4: make ext4_lazyinit_thread freezable (bsc#1206885). - ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011). - ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019). - ext4: place buffer head allocation before handle start (bsc#1207607). - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087). - ext4: refuse to create ea block when umounted (bsc#1213093). - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - ext4: simplify updating of fast commit stats (bsc#1207589). - ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110). - ext4: unconditionally enable the i_version counter (bsc#1211299). - ext4: update 'state->fc_regions_size' after successful memory allocation (bsc#1207613). - ext4: update s_journal_inum if it changes after journal replay (bsc#1213094). - ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876). - ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092). - ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793). - ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013). - extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes). - extcon: Fix kernel doc of property fields to avoid warnings (git-fixes). - extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes). - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes). - extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes). - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes). - extcon: usbc-tusb320: fix kernel-doc warning (git-fixes). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (git-fixes). - fbcon: Fix error paths in set_con2fb_map (git-fixes). - fbcon: Fix null-ptr-deref in soft_cursor (git-fixes). - fbcon: set_con2fb_map needs to set con2fb_map! (git-fixes). - fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472). - fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes). - fbdev: au1200fb: Fix potential divide by zero (git-fixes). - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes). - fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387). - fbdev: intelfb: Fix potential divide by zero (git-fixes). - fbdev: lxfb: Fix potential divide by zero (git-fixes). - fbdev: mmp: Fix deferred clk handling in mmphw_probe() (git-fixes). - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes). - fbdev: nvidia: Fix potential divide by zero (git-fixes). - fbdev: omapfb: avoid stack overflow warning (git-fixes). - fbdev: omapfb: cleanup inconsistent indentation (git-fixes). - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes). - fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes). - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes). - fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes). - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes). - fbdev: tgafb: Fix potential divide by zero (git-fixes). - fbdev: udlfb: Fix endpoint check (git-fixes). - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes). - filelock: new helper: vfs_inode_has_locks (jsc#SES-1880). - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes). - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes). - firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes). - firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes). - firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes). - firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes). - firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes). - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes). - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes). - firmware: qcom_scm: Clear download bit during reboot (git-fixes). - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes). - firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes). - flow_dissector: Do not count vlan tags inside tunnel payload (git-fixes). - fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258). - fotg210-udc: Add missing completion handler (git-fixes). - fpga: bridge: fix kernel-doc parameter description (git-fixes). - fpga: bridge: properly initialize bridge device before populating children (git-fixes). - fpga: m10bmc-sec: Fix probe rollback (git-fixes). - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes). - fprobe: Check rethook_alloc() return in rethook initialization (git-fixes). - fprobe: Fix smatch type mismatch warning (git-fixes). - fprobe: add recursion detection in fprobe_exit_handler (git-fixes). - fprobe: make fprobe_kprobe_handler recursion free (git-fixes). - fs/jfs: fix shift exponent db_agl2size negative (git-fixes). - fs: account for filesystem mappings (bsc#1205191). - fs: account for group membership (bsc#1205191). - fs: add i_user_ns() helper (bsc#1205191). - fs: dlm: do not call kernel_getpeername() in error_report() (bsc#1208130). - fs: dlm: use sk->sk_socket instead of con->sock (bsc#1208130). - fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632). - fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes). - fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes). - fs: move mapping helpers (bsc#1205191) - fs: remove __sync_filesystem (git-fixes). - fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes). - fs: tweak fsuidgid_has_mapping() (bsc#1205191). - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (bsc#1210409). - fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429). - ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes). - ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes). - ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes). - fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759). - fuse: always revalidate rename target dentry (bsc#1211808). - fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807). - futex: Resend potentially swallowed owner death notification (git-fixes). - genirq: Provide new interfaces for affinity hints (bsc#1208153). - git-sort: Add io_uring 6.3 fixes remote - google/gve:fix repeated words in comments (bsc#1211519). - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes). - gpio: davinci: Add irq chip flag to skip set wake (git-fixes). - gpio: mockup: Fix mode of debugfs files (git-fixes). - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes). - gpio: vf610: connect GPIO label to dev name (git-fixes). - gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes). - gpu: host1x: Fix mask for syncpoint increment register (git-fixes). - gpu: host1x: Fix potential double free if IOMMU is disabled (git-fixes). - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes). - gve: Adding a new AdminQ command to verify driver (bsc#1211519). - gve: Cache link_speed value from device (git-fixes). - gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519). - gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519). - gve: Handle alternate miss completions (bsc#1211519). - gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519). - gve: Remove the code of clearing PBA bit (git-fixes). - gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes). - gve: enhance no queue page list detection (bsc#1211519). - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes). - hfs/hfsplus: use WARN_ON for sanity check (git-fixes). - hfs: Fix OOB Write in hfs_asc2mac (git-fixes). - hfs: fix OOB Read in __hfs_brec_find (git-fixes). - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes). - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes). - hid: Add Mapping for System Microphone Mute (git-fixes). - hid: asus: use spinlock to protect concurrent accesses (git-fixes). - hid: asus: use spinlock to safely schedule workers (git-fixes). - hid: bigben: use spinlock to protect concurrent accesses (git-fixes). - hid: bigben: use spinlock to safely schedule workers (git-fixes). - hid: bigben_probe(): validate report count (git-fixes). - hid: bigben_worker() remove unneeded check on report_field (git-fixes). - hid: core: Fix deadloop in hid_apply_multiplier (git-fixes). - hid: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes). - hid: elecom: add support for TrackBall 056E:011C (git-fixes). - hid: google: add jewel USB id (git-fixes). - hid: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes). - hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes). - hid: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes). - hid: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes). - hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes). - hid: microsoft: Add rumble support to latest xbox controllers (bsc#1211280). - hid: multitouch: Add quirks for flipped axes (git-fixes). - hid: playstation: sanity check DualSense calibration data (git-fixes). - hid: retain initial quirks set up when creating HID devices (git-fixes). - hid: wacom: Add error check to wacom_parse_and_register() (git-fixes). - hid: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes). - hid: wacom: Force pen out of prox if no events have been received in a while (git-fixes). - hid: wacom: Set a default resolution for older tablets (git-fixes). - hid: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes). - hid: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes). - hid: wacom: generic: Set battery quirk only when we see battery data (git-fixes). - hv: fix comment typo in vmbus_channel/low_latency (git-fixes). - hv: hv_balloon: fix memory leak with using debugfs_lookup() (git-fixes). - hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes). - hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes). - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes). - hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861). - hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861). - hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861). - hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861). - hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861). - hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861). - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes). - hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes). - hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes). - hwmon: (coretemp) Simplify platform device handling (git-fixes). - hwmon: (ftsteutates) Fix scaling of measurements (git-fixes). - hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes). - hwmon: (ina3221) return prober error code (git-fixes). - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes). - hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848). - hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes). - hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes). - hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes). - hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes). - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes). - hwmon: fix potential sensor registration fail if of_node is missing (git-fixes). - hwmon: tmp512: drop of_match_ptr for ID table (git-fixes). - hwrng: imx-rngc - fix the timeout for init and self check (git-fixes). - hwrng: st - keep clock enabled while hwrng is registered (git-fixes). - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes). - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes). - i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes). - i2c: hisi: Avoid redundant interrupts (git-fixes). - i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes). - i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes). - i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes). - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes). - i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes). - i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes). - i2c: mv64xxx: Remove shutdown method from driver (git-fixes). - i2c: mxs: suppress probe-deferral error message (git-fixes). - i2c: ocores: generate stop condition after timeout in polling mode (git-fixes). - i2c: omap: Fix standard mode false ACK readings (git-fixes). - i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes). - i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes). - i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes). - i2c: tegra: Fix PEC support for SMBUS block read (git-fixes). - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes). - i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378). - i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378). - i40e: Fix DMA mappings leak (jsc#SLE-18378). - i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378). - i40e: Fix VF set max MTU size (jsc#SLE-18378). - i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378). - i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378). - i40e: Fix calculating the number of queue pairs (jsc#SLE-18378). - i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378). - i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378). - i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378). - i40e: Fix for VF MAC address 0 (jsc#SLE-18378). - i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378). - i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378). - i40e: Fix kernel crash during module removal (jsc#SLE-18378). - i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378). - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378). - i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378). - i40e: Refactor tc mqprio checks (jsc#SLE-18378). - i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378). - i40e: fix accessing vsi->active_filters without holding lock (jsc#SLE-18378). - i40e: fix flow director packet filter programming (jsc#SLE-18378). - i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378). - i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378). - i825xx: sni_82596: use eth_hw_addr_set() (git-fixes). - i915 kABI workaround (git-fixes). - i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes). - iavf/iavf_main: actually log ->src mask when talking about it (jsc#SLE-18385). - iavf: Detach device during reset task (jsc#SLE-18385). - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385). - iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385). - iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385). - iavf: Fix a crash during reset task (jsc#SLE-18385). - iavf: Fix bad page state (jsc#SLE-18385). - iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385). - iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385). - iavf: Fix max_rate limiting (jsc#SLE-18385). - iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385). - iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385). - iavf: do not track VLAN 0 filters (jsc#PED-835). - iavf: fix hang on reboot with ice (jsc#SLE-18385). - iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385). - iavf: fix temporary deadlock and failure to set MAC address (jsc#PED-835). - iavf: refactor VLAN filter states (jsc#PED-835). - iavf: remove active_cvlans and active_svlans bitmaps (jsc#PED-835). - iavf: remove mask from iavf_irq_enable_queues() (git-fixes). - iavf: schedule watchdog immediately when changing primary MAC (jsc#PED-835). - ib/hfi1: Assign npages earlier (git-fixes) - ib/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes) - ib/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes) - ib/hfi1: Fix expected receive setup error exit issues (git-fixes) - ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes) - ib/hfi1: Fix sdma.h tx->num_descs off-by-one errors (git-fixes) - ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes) - ib/hfi1: Immediately remove invalid memory from hardware (git-fixes) - ib/hfi1: Reject a zero-length user expected buffer (git-fixes) - ib/hfi1: Remove user expected buffer invalidate race (git-fixes) - ib/hfi1: Reserve user expected TIDs (git-fixes) - ib/hfi1: Restore allocated resources on failed copyout (git-fixes) - ib/hfi1: Update RMT size calculation (git-fixes) - ib/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes) - ib/iPoIB: Fix legacy IPoIB due to wrong number of queues (git-fixes) - ib/isert: Fix dead lock in ib_isert (git-fixes) - ib/isert: Fix incorrect release of isert connection (git-fixes) - ib/isert: Fix possible list corruption in CMA handler (git-fixes) - ib/mad: Do not call to function that might sleep while in atomic context (git-fixes). - ib/mlx5: Add support for 400G_8X lane speed (git-fixes) - ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes) - ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes) - ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604). - ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes). - ice: Add check for kzalloc (jsc#PED-376). - ice: Do not double unplug aux on peer initiated reset (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (jsc#PED-376). - ice: Fix DSCP PFC TLV creation (git-fixes). - ice: Fix DSCP PFC TLV creation (jsc#PED-376). - ice: Fix XDP memory leak when NIC is brought up and down (git-fixes). - ice: Fix disabling Rx VLAN filtering with port VLAN enabled (jsc#PED-376). - ice: Fix ice VF reset during iavf initialization (jsc#PED-376). - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields (jsc#PED-376). - ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes). - ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375). - ice: Fix memory corruption in VF driver (git-fixes). - ice: Fix potential memory leak in ice_gnss_tty_write() (jsc#PED-376). - ice: Ignore EEXIST when setting promisc mode (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (jsc#PED-376). - ice: Reset FDIR counter in FDIR init stage (git-fixes). - ice: Reset FDIR counter in FDIR init stage (jsc#PED-376). - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375). - ice: add profile conflict check for AVF FDIR (git-fixes). - ice: add profile conflict check for AVF FDIR (jsc#PED-376). - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158). - ice: block LAN in case of VF to VF offload (git-fixes). - ice: block LAN in case of VF to VF offload (jsc#PED-376). - ice: check if VF exists before mode check (jsc#PED-376). - ice: config netdev tc before setting queues number (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (jsc#PED-376). - ice: ethtool: Prohibit improper channel config for DCB (git-fixes). - ice: ethtool: advertise 1000M speeds properly (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (jsc#PED-376). - ice: fix lost multicast packets in promisc mode (jsc#PED-376). - ice: fix wrong fallback logic for FDIR (git-fixes). - ice: fix wrong fallback logic for FDIR (jsc#PED-376). - ice: handle E822 generic device ID in PLDM header (git-fixes). - ice: move devlink port creation/deletion (jsc#PED-376). - ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes). - ice: switch: fix potential memleak in ice_add_adv_recipe() (jsc#PED-376). - ice: use bitmap_free instead of devm_kfree (git-fixes). - ice: xsk: Fix cleaning of XDP_TX frames (jsc#PED-376). - ice: xsk: disable txq irq before flushing hw (jsc#PED-376). - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (jsc#PED-376). - ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes). - ieee80211: add TWT element definitions (bsc#1209980). - ieee802154: hwsim: Fix possible memory leaks (git-fixes). - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253). - igb: Add lock to avoid data race (jsc#SLE-18379). - igb: Enable SR-IOV after reinit (jsc#SLE-18379). - igb: Fix PPS input and output using 3rd and 4th SDP (jsc#PED-370). - igb: Fix extts capture value format for 82580/i354/i350 (git-fixes). - igb: Initialize mailbox message for VF reset (jsc#SLE-18379). - igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379). - igb: fix bit_shift to be in [1..8] range (git-fixes). - igb: fix nvm.ops.read() error handling (git-fixes). - igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379). - igbvf: Regard vf reset nack as success (jsc#SLE-18379). - igc: Add checking for basetime less than zero (jsc#SLE-18377). - igc: Add ndo_tx_timeout support (jsc#SLE-18377). - igc: Clean the TX buffer and TX descriptor ring (git-fixes). - igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377). - igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377). - igc: Fix possible system crash when loading module (git-fixes). - igc: Lift TAPRIO schedule restriction (jsc#SLE-18377). - igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377). - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377). - igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377). - igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377). - igc: fix the validation logic for taprio's gate list (jsc#SLE-18377). - igc: read before write to SRRCTL register (jsc#SLE-18377). - igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377). - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377). - iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes). - iio: accel: fxls8962af: fixup buffer scan element type (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes). - iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes). - iio: adc: ad7192: Change 'shorted' channels to differential (git-fixes). - iio: adc: ad7192: Fix internal/external clock selection (git-fixes). - iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes). - iio: adc: ad7791: fix IRQ flags (git-fixes). - iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes). - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes). - iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes). - iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes). - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes). - iio: adc: stm32-dfsdm: fill module aliases (git-fixes). - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes). - iio: adis16480: select CONFIG_CRC32 (git-fixes). - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes). - iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes). - iio: hid: fix the retval in accel_3d_capture_sample (git-fixes). - iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes). - iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes). - iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes). - iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes). - iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes). - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes). - iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes). - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes). - iio: imu: inv_icm42600: fix timestamp reset (git-fixes). - iio: light: cm32181: Unregister second I2C client if present (git-fixes). - iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes). - iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes). - iio: light: vcnl4035: fixed chip ID check (git-fixes). - iio:adc:twl6030: Enable measurement of VAC (git-fixes). - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes). - ima: Fix memory leak in __ima_inode_hash() (git-fixes). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448). - init: Provide arch_cpu_finalize_init() (bsc#1212448). - init: Remove check_bugs() leftovers (bsc#1212448). - inotify: Avoid reporting event with invalid wd (bsc#1213025). - input: ads7846 - always set last command to PWRDOWN (git-fixes). - input: ads7846 - do not check penirq immediately for 7845 (git-fixes). - input: ads7846 - do not report pressure for ads7845 (git-fixes). - input: adxl34x - do not hardcode interrupt trigger type (git-fixes). - input: alps - fix compatibility with -funsigned-char (bsc#1209805). - input: drv260x - fix typo in register value define (git-fixes). - input: drv260x - remove unused .reg_defaults (git-fixes). - input: drv260x - sleep between polling GO bit (git-fixes). - input: exc3000 - properly stop timer on shutdown (git-fixes). - input: fix open count when closing inhibited device (git-fixes). - input: focaltech - use explicitly signed char type (git-fixes). - input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes). - input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes). - input: iqs269a - configure device with a single block write (git-fixes). - input: iqs269a - drop unused device node references (git-fixes). - input: iqs269a - increase interrupt handler return delay (git-fixes). - input: iqs626a - drop unused device node references (git-fixes). - input: psmouse - fix OOB access in Elantech protocol (git-fixes). - input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes). - input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes). - input: xpad - add constants for GIP interface numbers (git-fixes). - input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes). - integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes). - intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379). - intel_idle: add Emerald Rapids Xeon support (PED-3849). - interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes). - interconnect: fix mem leak when freeing nodes (git-fixes). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes). - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128 (git-fixes). - io_uring/kbuf: fix not advancing READV kbuf ring (git-fixes). - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available (git-fixes). - io_uring: do not expose io_fill_cqe_aux() (bsc#1211014). - io_uring: do not gate task_work run on TIF_NOTIFY_SIGNAL (git-fixes). - io_uring: ensure that cached task references are always put on exit (git-fixes). - io_uring: fix CQ waiting timeout handling (git-fixes). - io_uring: fix fget leak when fs do not support nowait buffered read (bsc#1205205). - io_uring: fix ordering of args in io_uring_queue_async_work (git-fixes). - io_uring: fix return value when removing provided buffers (git-fixes). - io_uring: fix size calculation when registering buf ring (git-fixes). - io_uring: recycle kbuf recycle on tw requeue (git-fixes). - iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes). - iommu/vt-d: Add a fix for devices need extra dtlb flush (bsc#1208219). - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode (bsc#1208948). - iommu/vt-d: Fix buggy QAT device mask (bsc#1208219). - ipmi: fix SSIF not responding under certain cond (git-fixes). - ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459). - ipmi:ssif: Add a timer between request retries (bsc#1206459). - ipmi:ssif: Add send_retries increment (git-fixes). - ipmi:ssif: Increase the message retry time (bsc#1206459). - ipmi:ssif: Remove rtc_us_timer (bsc#1206459). - ipmi:ssif: resend_msg() cannot fail (bsc#1206459). - ipmi_ssif: Rename idle state and check (bsc#1206459). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes). - irqchip/ftintc010: Mark all function static (git-fixes). - irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes). - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes) - iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553). - ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384). - ixgbe: Enable setting RSS table to default values (jsc#SLE-18384). - ixgbe: Fix panic during XDP_TX with > 64 CPUs (jsc#SLE-18384). - ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384). - ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384). - ixgbe: fix pci device refcount leak (jsc#SLE-18384). - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384). - jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590). - jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641). - jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095). - jbd2: fix potential buffer head reference count leak (bsc#1207644). - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645). - jbd2: use the correct print format (git-fixes). - jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643). - jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014). - jfs: Fix fortify moan in symlink (git-fixes). - k-m-s: Drop Linux 2.6 support - kABI compatibility workaround for efivars (git-fixes). - kABI workaround for btbcm.c (git-fixes). - kABI workaround for cpp_acpi extensions for EPP (bsc#1212445). - kABI workaround for drm_dp_mst helper updates (bsc#1206843). - kABI workaround for hid quirks (git-fixes). - kABI workaround for ieee80211 and co (bsc#1209980). - kABI workaround for mt76_poll_msec() (git-fixes). - kABI workaround for struct acpi_ec (bsc#1207149). - kABI workaround for xhci (git-fixes). - kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest (git-fixes) - kABI: PCI: Reduce warnings on possible RW1C corruption (kabi). - kABI: PCI: dwc: Add dw_pcie_ops.host_deinit() callback (kabi). - kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi). - kABI: Preserve TRACE_EVENT_FL values (git-fixes). - kABI: Work around kABI changes after '20347fca71a3 swiotlb: split up the global swiotlb lock' (jsc#PED-3259). - kABI: x86/msi: Fix msi message data shadow struct (kabi). - kABI: x86/msr: Remove .fixup usage (kabi). - kabi FIX FOR NFSv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - kabi FIX FOR: NFS: Further optimisations for 'ls -l' (git-fixes). - kabi FIX FOR: NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - kabi FIX FOR: NFSv4.1 query for fs_location attr on a new file system (Never, kabi). - kabi FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi). - kabi fix for: NFSv3: handle out-of-order write replies (bsc#1205544). - kabi/severities: add mlx5 internal symbols - kabi/severities: added Microsoft mana symbold (bsc#1210551) - kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users. - kabi/severities: ignore kABI changes for mt76/* local modules (bsc#1209980) - kabi/severities: ignore kABI in bq27xxx_battery module Those are local symbols that are used only by child drivers - kasan: no need to unset panic_on_warn in end_report() (bsc#1207328). - kconfig: Update config changed flag before calling callback (git-fixes). - kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi - kernel-binary: install expoline.o (boo#1210791 bsc#1211089) - kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base. - kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741). - kernel-source: Remove unused macro variant_symbols - kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). rpm only supports full length release, no provides - kernel: Do not sign the vanilla kernel (bsc#1209008). - kernel: Kernel is locked down even though secure boot is disabled (bsc#1198101, bsc#1208976). - keys: Add missing function documentation (git-fixes). - keys: Create static version of public_key_verify_signature (git-fixes). - keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes). - keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - keys: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes). - keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes). - kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes) Update config/armv7hl/default too. - kprobe: reverse kp->flags when arm_kprobe failed (git-fixes). - kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes). - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes). - kprobes: Forbid probing on trampoline and BPF code areas (git-fixes). - kprobes: Prohibit probes in gate area (git-fixes). - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes). - kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes). - kvm/vfio: Fix potential deadlock on vfio group_lock (git-fixes) - kvm/vfio: Fix potential deadlock problem in vfio (git-fixes) - kvm: Destroy target device if coalesced MMIO unregistration fails (git-fixes) - kvm: Disallow user memslot with size that exceeds 'unsigned long' (git-fixes) - kvm: Do not create VM debugfs files outside of the VM directory (git-fixes) - kvm: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes) - kvm: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes). - kvm: Prevent module exit until all VMs are freed (git-fixes) - kvm: arm64: Do not arm a hrtimer for an already pending timer (git-fixes) - kvm: arm64: Do not hypercall before EL2 init (git-fixes) - kvm: arm64: Do not return from void function (git-fixes) - kvm: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes) - kvm: arm64: Fix S1PTW handling on RO memslots (git-fixes) - kvm: arm64: Fix bad dereference on MTE-enabled systems (git-fixes) - kvm: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes) - kvm: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes) - kvm: arm64: Free hypervisor allocations if vector slot init fails (git-fixes) - kvm: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes) - kvm: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes) - kvm: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes) - kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes) - kvm: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes) - kvm: arm64: Save PSTATE early on exit (git-fixes) - kvm: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes) - kvm: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes) - kvm: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes) - kvm: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes) - kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes) - kvm: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes). - kvm: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes). - kvm: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes). - kvm: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes). - kvm: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (git-fixes). - kvm: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes). - kvm: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes). - kvm: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes). - kvm: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes). - kvm: s390: selftest: memop: Fix integer literal (git-fixes). - kvm: svm: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes). - kvm: svm: Fix benign 'bool vs. int' comparison in svm_set_cr0() (git-fixes). - kvm: svm: Fix potential overflow in SEV's send|receive_update_data() (git-fixes). - kvm: svm: Require logical ID to be power-of-2 for AVIC entry (git-fixes). - kvm: svm: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes). - kvm: svm: hyper-v: placate modpost section mismatch error (git-fixes). - kvm: vmx: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes). - kvm: vmx: Resume guest immediately when injecting #GP on ECREATE (git-fixes). - kvm: vmx: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes). - kvm: vmx: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes). - kvm: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes). - kvm: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes). - kvm: x86/pmu: Ignore pmu->global_ctrl check if vPMU does not support global_ctrl (git-fixes). - kvm: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes). - kvm: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes). - kvm: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes). - kvm: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes). - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes). - kvm: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes). - kvm: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes). - kvm: x86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes). - kvm: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes). - kvm: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes). - kvm: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes). - kvm: x86: Protect the unused bits in MSR exiting flags (git-fixes). - kvm: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes). - kvm: x86: Report deprecated x87 features in supported CPUID (git-fixes). - kvm: x86: do not set st->preempted when going back to user space (git-fixes). - kvm: x86: fix sending PV IPI (git-fixes). - kvm: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes). - kvm: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes). - lan78xx: Add missing return code checks (git-fixes). - lan78xx: Fix exception on link speed change (git-fixes). - lan78xx: Fix memory allocation bug (git-fixes). - lan78xx: Fix partial packet errors on suspend/resume (git-fixes). - lan78xx: Fix race condition in disconnect handling (git-fixes). - lan78xx: Fix race conditions in suspend/resume handling (git-fixes). - lan78xx: Fix white space and style issues (git-fixes). - lan78xx: Remove unused pause frame queue (git-fixes). - lan78xx: Remove unused timer (git-fixes). - lan78xx: Set flow control threshold to prevent packet loss (git-fixes). - leds: Fix reference to led_set_brightness() in doc (git-fixes). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes). - leds: led-class: Add missing put_device() to led_put() (git-fixes). - leds: led-core: Fix refcount leak in of_led_get() (git-fixes). - leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes). - lib/mpi: Fix buffer overrun when SG is too long (git-fixes). - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (git-fixes). - lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes). - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes). - lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes). - locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552). - locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes). - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270). - locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270). - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270). - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270). - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270). - locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270). - locking/rwsem: Make handoff bit handling more consistent (bsc#1207270). - locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270). - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270). - locking: Add missing __sched attributes (bsc#1207270). - loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes). - loop: fix ioctl calls using compat_loop_info (git-fixes). - lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852). - lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852). - lpfc: Clean up SLI-4 CQE status handling (bsc#1211852). - lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852). - lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852). - lpfc: Enhance congestion statistics collection (bsc#1211852). - lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346). - lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852). - lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852). - lpfc: update metadata - mac80211: introduce individual TWT support in AP mode (bsc#1209980). - mac80211: introduce set_radar_offchan callback (bsc#1209980). - mac80211: twt: do not use potentially unaligned pointer (bsc#1209980). - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes). - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes). - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes). - mailbox: zynqmp: Fix IPI isr handling (git-fixes). - mailbox: zynqmp: Fix typo in IPI documentation (git-fixes). - mbcache: Avoid nesting of cache->c_list_lock under bit locks (bsc#1207647). - mbcache: Fixup kABI of mb_cache_entry (bsc#1207653). - mce: fix set_mce_nospec to always unmap the whole page (git-fixes). - md/bitmap: Fix bitmap chunk size overflow issues (git-fixes). - md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes). - md/raid5: Improve performance for sequential IO (bsc#1208081). - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes). - md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes). - md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes). - md: fix a crash in mempool_free (git-fixes). - md: protect md_unregister_thread from reentrancy (git-fixes). - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes). - media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes). - media: cec: core: do not set last_initiator if tx in progress (git-fixes). - media: cec: i2c: ch7322: also select REGMAP (git-fixes). - media: coda: Add check for dcoda_iram_alloc (git-fixes). - media: coda: Add check for kmalloc (git-fixes). - media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes). - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes). - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes). - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes). - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes). - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes). - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes). - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes). - media: dvb_ca_en50221: fix a size write bug (git-fixes). - media: dvb_demux: fix a bug for the continuity counter (git-fixes). - media: i2c: Correct format propagation for st-mipid02 (git-fixes). - media: i2c: imx219: Fix binning for RAW8 capture (git-fixes). - media: i2c: imx219: Split common registers from mode tables (git-fixes). - media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes). - media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes). - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes). - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes). - media: m5mols: fix off-by-one loop termination error (git-fixes). - media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes). - media: max9286: Free control handler (git-fixes). - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes). - media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes). - media: netup_unidvb: fix use-after-free at del_timer() (git-fixes). - media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes). - media: ov5640: Fix analogue gain control (git-fixes). - media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes). - media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes). - media: platform: ti: Add missing check for devm_regulator_get (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes). - media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes). - media: rc: gpio-ir-recv: add remove function (git-fixes). - media: rcar_fdp1: Fix the correct variable assignments (git-fixes). - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes). - media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes). - media: saa7134: Use video_unregister_device for radio_dev (git-fixes). - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes). - media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes). - media: usb: Check az6007_read() return value (git-fixes). - media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes). - media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes). - media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes). - media: uvcvideo: Check controls flags before accessing them (git-fixes). - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes). - media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes). - media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes). - media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes). - media: uvcvideo: Handle cameras with invalid descriptors (git-fixes). - media: uvcvideo: Handle errors from calls to usb_string (git-fixes). - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes). - media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes). - media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes). - media: uvcvideo: Use control names from framework (git-fixes). - media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes). - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes). - media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes). - media: venus: dec: Fix handling of the start cmd (git-fixes). - media: venus: helpers: Fix ALIGN() of non power of two (git-fixes). - media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes). - mei: bus-fixup:upon error print return values of send and receive (git-fixes). - mei: bus: fix unlink on bus in error path (git-fixes). - mei: me: add meteor lake point M DID (git-fixes). - mei: pxp: Use correct macros to initialize uuid_le (git-fixes). - memory: brcmstb_dpfe: fix testing array offset after use (git-fixes). - memstick: fix memory leak if card device is never registered (git-fixes). - memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449). - meson saradc: fix clock divider mask length (git-fixes). - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes). - mfd: cs5535: Do not build on UML (git-fixes). - mfd: dln2: Fix memory leak in dln2_probe() (git-fixes). - mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes). - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes). - mfd: pm8008: Fix module autoloading (git-fixes). - mfd: rt5033: Drop rt5033-battery sub-device (git-fixes). - mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes). - mfd: stmfx: Nullify stmfx->vdd in case of error (git-fixes). - mfd: stmpe: Only disable the regulators if they are enabled (git-fixes). - mfd: tqmx86: Correct board names for TQMxE39x (git-fixes). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes). - misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes). - misc: enclosure: Fix doc for enclosure_find() (git-fixes). - misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes). - misc: fastrpc: reject new invocations during device removal (git-fixes). - misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes). - misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes). - misc: pci_endpoint_test: Re-init completion for every test (git-fixes). - mkinitrd: Replace dependency with dracut (bsc#1202353). - mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253). - mlx5: fix possible ptp queue fifo use-after-free (jsc#PED-1549). - mlx5: fix skb leak while fifo resync and push (jsc#PED-1549). - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes). - mlxsw: minimal: Fix deadlock in ports creation (git-fixes). - mlxsw: spectrum: Allow driver to load with old firmware versions (git-fixes). - mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768). - mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410). - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769). - mm: Move mm_cachep initialization to mm_init() (bsc#1212448). - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262). - mm: memcg: fix swapcached stat accounting (bsc#1209804). - mm: mmap: remove newline at the end of the trace (git-fixes). - mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034). - mm: take a page reference when removing device exclusive entries (bsc#1211025). - mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410). - mmc: atmel-mci: fix race between stop command and start of next command (git-fixes). - mmc: bcm2835: fix deferred probing (git-fixes). - mmc: block: Remove error check of hw_reset on reset (git-fixes). - mmc: block: ensure error propagation for non-blk (git-fixes). - mmc: jz4740: Work around bug on JZ4760(B) (git-fixes). - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes). - mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes). - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes). - mmc: mmci: stm32: fix max busy timeout calculation (git-fixes). - mmc: mtk-sd: fix deferred probing (git-fixes). - mmc: mvsdio: fix deferred probing (git-fixes). - mmc: omap: fix deferred probing (git-fixes). - mmc: omap_hsmmc: fix deferred probing (git-fixes). - mmc: owl: fix deferred probing (git-fixes). - mmc: sdhci-acpi: fix deferred probing (git-fixes). - mmc: sdhci-esdhc-imx: make 'no-mmc-hs400' works (git-fixes). - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes). - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes). - mmc: sdhci-spear: fix deferred probing (git-fixes). - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes). - mmc: sdhci_am654: lower power-on failed message severity (git-fixes). - mmc: sdio: fix possible resource leaks in some error paths (git-fixes). - mmc: sh_mmcif: fix deferred probing (git-fixes). - mmc: sunxi: fix deferred probing (git-fixes). - mmc: usdhi60rol0: fix deferred probing (git-fixes). - mmc: vub300: fix invalid response handling (git-fixes). - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - mt76: Make use of the helper macro kthread_run() (bsc#1209980). - mt76: Print error message when reading EEPROM from mtd failed (bsc#1209980). - mt76: add 6GHz support (bsc#1209980). - mt76: add MT_RXQ_MAIN_WA for mt7916 (bsc#1209980). - mt76: add support for setting mcast rate (bsc#1209980). - mt76: allow drivers to drop rx packets early (bsc#1209980). - mt76: clear sta powersave flag after notifying driver (bsc#1209980). - mt76: connac: add 6 GHz support for wtbl and starec configuration (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss (bsc#1209980). - mt76: connac: add support for limiting to maximum regulatory Tx power (bsc#1209980). - mt76: connac: add support for passing the cipher field in bss_info (bsc#1209980). - mt76: connac: adjust wlan_idx size from u8 to u16 (bsc#1209980). - mt76: connac: align MCU_EXT definitions with 7915 driver (bsc#1209980). - mt76: connac: enable 6GHz band for hw scan (bsc#1209980). - mt76: connac: enable hw amsdu @ 6GHz (bsc#1209980). - mt76: connac: extend mcu_get_nic_capability (bsc#1209980). - mt76: connac: fix a theoretical NULL pointer dereference in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: fix last_chan configuration in mt76_connac_mcu_rate_txpower_band (bsc#1209980). - mt76: connac: fix unresolved symbols when CONFIG_PM is unset (bsc#1209980). - mt76: connac: introduce MCU_CE_CMD macro (bsc#1209980). - mt76: connac: introduce MCU_EXT macros (bsc#1209980). - mt76: connac: introduce MCU_UNI_CMD macro (bsc#1209980). - mt76: connac: introduce is_connac_v1 utility routine (bsc#1209980). - mt76: connac: make read-only array ba_range static const (bsc#1209980). - mt76: connac: move mcu reg access utility routines in mt76_connac_lib module (bsc#1209980). - mt76: connac: move mt76_connac_chan_bw in common code (bsc#1209980). - mt76: connac: move mt76_connac_lmac_mapping in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_add_key in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_basic_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_ext_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_omac_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_gen_dl_mode in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_get_cipher in common code (bsc#1209980). - mt76: connac: move mt76_connac_mcu_rdd_cmd in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_restart in common module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_set_pm in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_wtbl_update_hdr_trans in connac module (bsc#1209980). - mt76: connac: rely on MCU_CMD macro (bsc#1209980). - mt76: connac: rely on le16_add_cpu in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - mt76: connac: remove MCU_FW_PREFIX bit (bsc#1209980). - mt76: connac: remove PHY_MODE_AX_6G configuration in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2} (bsc#1209980). - mt76: connac: set 6G phymode in single-sku support (bsc#1209980). - mt76: debugfs: fix queue reporting for mt76-usb (bsc#1209980). - mt76: debugfs: improve queue node readability (bsc#1209980). - mt76: disable BH around napi_schedule() calls (bsc#1209980). - mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs (bsc#1209980). - mt76: do not always copy ethhdr in reverse_frag0_hdr_trans (bsc#1209980). - mt76: do not reset MIB counters in get_stats callback (bsc#1209980). - mt76: eeprom: tolerate corrected bit-flips (bsc#1209980). - mt76: fill boottime_ns in Rx path (bsc#1209980). - mt76: fix antenna config missing in 6G cap (bsc#1209980). - mt76: fix boolreturn.cocci warnings (bsc#1209980). - mt76: fix dfs state issue with 160 MHz channels (bsc#1209980). - mt76: fix endianness errors in reverse_frag0_hdr_trans (bsc#1209980). - mt76: fix invalid rssi report (bsc#1209980). - mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi (bsc#1209980). - mt76: fix monitor rx FCS error in DFS channel (bsc#1209980). - mt76: fix possible OOB issue in mt76_calculate_default_rate (bsc#1209980). - mt76: fix possible pktid leak (bsc#1209980). - mt76: fix the wiphy's available antennas to the correct value (bsc#1209980). - mt76: fix timestamp check in tx_status (bsc#1209980). - mt76: fix tx status related use-after-free race on station removal (bsc#1209980). - mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes). - mt76: fix wrong HE data rate in sniffer tool (bsc#1209980). - mt76: improve signal strength reporting (bsc#1209980). - mt76: introduce packet_id idr (bsc#1209980). - mt76: make mt76_sar_capa static (bsc#1209980). - mt76: move mt76_ethtool_worker_info in mt76 module (bsc#1209980). - mt76: move mt76_sta_stats in mt76.h (bsc#1209980). - mt76: move sar utilities to mt76-core module (bsc#1209980). - mt76: move sar_capa configuration in common code (bsc#1209980). - mt76: move spin_lock_bh to spin_lock in tasklet (bsc#1209980). - mt76: mt7603: improve reliability of tx powersave filtering (bsc#1209980). - mt76: mt7603: introduce SAR support (bsc#1209980). - mt76: mt7615: add support for LG LGSBWAC02 (MT7663BUN) (bsc#1209980). - mt76: mt7615: apply cached RF data for DBDC (bsc#1209980). - mt76: mt7615: clear mcu error interrupt status on mt7663 (bsc#1209980). - mt76: mt7615: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7615: fix compiler warning on frame size (bsc#1209980). - mt76: mt7615: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7615: fix throughput regression on DFS channels (bsc#1209980). - mt76: mt7615: fix unused tx antenna mask in testmode (bsc#1209980). - mt76: mt7615: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7615: honor ret from mt7615_mcu_restart in mt7663u_mcu_init (bsc#1209980). - mt76: mt7615: in debugfs queue stats, skip wmm index 3 on mt7663 (bsc#1209980). - mt76: mt7615: introduce SAR support (bsc#1209980). - mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module (bsc#1209980). - mt76: mt7615: remove dead code in get_omac_idx (bsc#1209980). - mt76: mt7615: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7615e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7663: disable 4addr capability (bsc#1209980). - mt76: mt7663s: flush runtime-pm queue after waking up the device (bsc#1209980). - mt76: mt7663s: rely on mcu reg access utility (bsc#1209980). - mt76: mt7663u: introduce mt7663u_mcu_power_on routine (bsc#1209980). - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (bsc#1209980). - mt76: mt76x02: improve tx hang detection (bsc#1209980). - mt76: mt76x02: introduce SAR support (bsc#1209980). - mt76: mt76x02: use mt76_phy_dfs_state to determine radar detector state (bsc#1209980). - mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset (bsc#1209980). - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() (bsc#1209980). - mt76: mt7915: Fix channel state update error issue (bsc#1209980). - mt76: mt7915: add 6 GHz support (bsc#1209980). - mt76: mt7915: add HE-LTF into fixed rate command (bsc#1209980). - mt76: mt7915: add LED support (bsc#1209980). - mt76: mt7915: add WA firmware log support (bsc#1209980). - mt76: mt7915: add control knobs for thermal throttling (bsc#1209980). - mt76: mt7915: add debugfs knobs for MCU utilization (bsc#1209980). - mt76: mt7915: add default calibrated data support (bsc#1209980). - mt76: mt7915: add device id for mt7916 (bsc#1209980). - mt76: mt7915: add ethtool stats support (bsc#1209980). - mt76: mt7915: add firmware support for mt7916 (bsc#1209980). - mt76: mt7915: add mib counters to ethtool stats (bsc#1209980). - mt76: mt7915: add missing DATA4_TB_SPTL_REUSE1 to mt7915_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7915: add more MIB registers (bsc#1209980). - mt76: mt7915: add mt7915_mmio_probe() as a common probing function (bsc#1209980). - mt76: mt7915: add mt7916 calibrated data support (bsc#1209980). - mt76: mt7915: add mu-mimo and ofdma debugfs knobs (bsc#1209980). - mt76: mt7915: add some per-station tx stats to ethtool (bsc#1209980). - mt76: mt7915: add support for MT7986 (bsc#1209980). - mt76: mt7915: add support for passing chip/firmware debug data to user space (bsc#1209980). - mt76: mt7915: add twt_stats knob in debugfs (bsc#1209980). - mt76: mt7915: add tx mu/su counters to mib (bsc#1209980). - mt76: mt7915: add tx stats gathered from tx-status callbacks (bsc#1209980). - mt76: mt7915: add txfree event v3 (bsc#1209980). - mt76: mt7915: add txpower init for 6GHz (bsc#1209980). - mt76: mt7915: allow beaconing on all chains (bsc#1209980). - mt76: mt7915: change max rx len limit of hw modules (bsc#1209980). - mt76: mt7915: check band idx for bcc event (bsc#1209980). - mt76: mt7915: check for devm_pinctrl_get() failure (bsc#1209980). - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set (bsc#1209980). - mt76: mt7915: enable HE UL MU-MIMO (bsc#1209980). - mt76: mt7915: enable configured beacon tx rate (bsc#1209980). - mt76: mt7915: enable radar background detection (bsc#1209980). - mt76: mt7915: enable radar trigger on rdd2 (bsc#1209980). - mt76: mt7915: enable twt responder capability (bsc#1209980). - mt76: mt7915: enlarge wcid size to 544 (bsc#1209980). - mt76: mt7915: fix DBDC default band selection on MT7915D (bsc#1209980). - mt76: mt7915: fix DFS no radar detection event (bsc#1209980). - mt76: mt7915: fix SMPS operation fail (bsc#1209980). - mt76: mt7915: fix WMM index on DBDC cards (bsc#1209980). - mt76: mt7915: fix beamforming mib stats (bsc#1209980). - mt76: mt7915: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7915: fix eeprom fields of txpower init values (bsc#1209980). - mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_debugfs_rx_fw_monitor (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_mac_tx_free() (bsc#1209980). - mt76: mt7915: fix he_mcs capabilities for 160mhz (bsc#1209980). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs() (bsc#1209980). - mt76: mt7915: fix missing HE phy cap (bsc#1209980). - mt76: mt7915: fix phy cap in mt7915_set_stream_he_txbf_caps() (bsc#1209980). - mt76: mt7915: fix polling firmware-own status (git-fixes). - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (git-fixes). - mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta (bsc#1209980). - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup (bsc#1209980). - mt76: mt7915: fix potential NPE in TXS processing (bsc#1209980). - mt76: mt7915: fix potential memory leak of fw monitor packets (bsc#1209980). - mt76: mt7915: fix return condition in mt7915_tm_reg_backup_restore() (bsc#1209980). - mt76: mt7915: fix the muru tlv issue (bsc#1209980). - mt76: mt7915: fix the nss setting in bitrates (bsc#1209980). - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev (bsc#1209980). - mt76: mt7915: fix txbf starec TLV issues (bsc#1209980). - mt76: mt7915: fix typos in comments (bsc#1209980). - mt76: mt7915: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7915: get rid of mt7915_mcu_set_fixed_rate routine (bsc#1209980). - mt76: mt7915: honor all possible error conditions in mt7915_mcu_init() (bsc#1209980). - mt76: mt7915: improve code readability for xmit-queue handler (bsc#1209980). - mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht (bsc#1209980). - mt76: mt7915: improve starec readability of txbf (bsc#1209980). - mt76: mt7915: improve wmm index allocation (bsc#1209980). - mt76: mt7915: initialize smps mode in mt7915_mcu_sta_rate_ctrl_tlv() (bsc#1209980). - mt76: mt7915: introduce SAR support (bsc#1209980). - mt76: mt7915: introduce __mt7915_get_tsf routine (bsc#1209980). - mt76: mt7915: introduce band_idx in mt7915_phy (bsc#1209980). - mt76: mt7915: introduce bss coloring support (bsc#1209980). - mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy (bsc#1209980). - mt76: mt7915: introduce mt76_vif in mt7915_vif (bsc#1209980). - mt76: mt7915: introduce mt7915_mac_add_twt_setup routine (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_beacon_check_caps() (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command (bsc#1209980). - mt76: mt7915: introduce mt7915_set_radar_background routine (bsc#1209980). - mt76: mt7915: introduce rdd_monitor debugfs node (bsc#1209980). - mt76: mt7915: move pci specific code back to pci.c (bsc#1209980). - mt76: mt7915: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7915: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7915: refine register definition (bsc#1209980). - mt76: mt7915: rely on mt76_connac definitions (bsc#1209980). - mt76: mt7915: rely on mt76_connac_get_phy utilities (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_add_tlv routine (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_sta_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_wtbl_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_init_download (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_patch_sem_ctrl/mt76_connac_mcu_start_patch (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_set_rts_thresh (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_basic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_uapsd (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_start_firmware (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_generic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_hdr_trans_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ht_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_smps_tlv (bsc#1209980). - mt76: mt7915: remove dead code in debugfs code (bsc#1209980). - mt76: mt7915: remove duplicated defs in mcu.h (bsc#1209980). - mt76: mt7915: remove mt7915_mcu_add_he() (bsc#1209980). - mt76: mt7915: rename debugfs tx-queues (bsc#1209980). - mt76: mt7915: report radar pattern if detected by rdd2 (bsc#1209980). - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate (bsc#1209980). - mt76: mt7915: rework .set_bitrate_mask() to support more options (bsc#1209980). - mt76: mt7915: rework debugfs fixed-rate knob (bsc#1209980). - mt76: mt7915: rework debugfs queue info (bsc#1209980). - mt76: mt7915: rework dma.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework eeprom.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework mt7915_mcu_sta_muru_tlv() (bsc#1209980). - mt76: mt7915: rework starec TLV tags (bsc#1209980). - mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex (bsc#1209980). - mt76: mt7915: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7915: set VTA bit in tx descriptor (bsc#1209980). - mt76: mt7915: set band1 TGID field in tx descriptor (bsc#1209980). - mt76: mt7915: set bssinfo/starec command when adding interface (bsc#1209980). - mt76: mt7915: set muru platform type (bsc#1209980). - mt76: mt7915: simplify conditional (bsc#1209980). - mt76: mt7915: switch proper tx arbiter mode in testmode (bsc#1209980). - mt76: mt7915: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7915: update mac timing settings (bsc#1209980). - mt76: mt7915: update max_mpdu_size in mt7915_mcu_sta_amsdu_tlv() (bsc#1209980). - mt76: mt7915: update mt7915_chan_mib_offs for mt7916 (bsc#1209980). - mt76: mt7915: update rx rate reporting for mt7916 (bsc#1209980). - mt76: mt7915: use min_t() to make code cleaner (bsc#1209980). - mt76: mt7915e: Add a hwmon attribute to get the actual throttle state (bsc#1209980). - mt76: mt7915e: Enable thermal management by default (bsc#1209980). - mt76: mt7915e: Fix degraded performance after temporary overheat (bsc#1209980). - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (git-fixes). - mt76: mt7921: add 6GHz support (bsc#1209980). - mt76: mt7921: add MT7921_COMMON module (bsc#1209980). - mt76: mt7921: add MU EDCA cmd support (bsc#1209980). - mt76: mt7921: add delay config for sched scan (bsc#1209980). - mt76: mt7921: add mt7921u driver (bsc#1209980). - mt76: mt7921: add per-vif counters in ethtool (bsc#1209980). - mt76: mt7921: add some more MIB counters (bsc#1209980). - mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb (bsc#1209980). - mt76: mt7921: add support for PCIe ID 0x0608/0x0616 (bsc#1209980). - mt76: mt7921: add support for tx status reporting (bsc#1209980). - mt76: mt7921: clear pm->suspended in mt7921_mac_reset_work (bsc#1209980). - mt76: mt7921: disable 4addr capability (bsc#1209980). - mt76: mt7921: disable runtime pm for usb (bsc#1209980). - mt76: mt7921: do not always disable fw runtime-pm (bsc#1209980). - mt76: mt7921: do not enable beacon filter when IEEE80211_CONF_CHANGE_MONITOR is set (bsc#1209980). - mt76: mt7921: do not update pm states in case of error (git-fixes). - mt76: mt7921: fix MT7921E reset failure (bsc#1209980). - mt76: mt7921: fix Wformat build warning (bsc#1209980). - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7921: fix boolreturn.cocci warning (bsc#1209980). - mt76: mt7921: fix build regression (bsc#1209980). - mt76: mt7921: fix endianness issues in mt7921_mcu_set_tx() (bsc#1209980). - mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap (bsc#1209980). - mt76: mt7921: fix ht mcs in mt7921_mac_add_txs_skb() (bsc#1209980). - mt76: mt7921: fix injected MPDU transmission to not use HW A-MSDU (bsc#1209980). - mt76: mt7921: fix kernel crash at mt7921_pci_remove (git-fixes). - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (git-fixes). - mt76: mt7921: fix mt7921s Kconfig (bsc#1209980). - mt76: mt7921: fix network buffer leak by txs missing (bsc#1209980). - mt76: mt7921: fix possible NULL pointer dereference in mt7921_mac_write_txwi (bsc#1209980). - mt76: mt7921: fix up the monitor mode (bsc#1209980). - mt76: mt7921: fix xmit-queue dump for usb and sdio (bsc#1209980). - mt76: mt7921: forbid the doze mode when coredump is in progress (bsc#1209980). - mt76: mt7921: get rid of monitor_vif (bsc#1209980). - mt76: mt7921: get rid of mt7921_mcu_get_eeprom (bsc#1209980). - mt76: mt7921: get rid of mt7921_wait_for_mcu_init declaration (bsc#1209980). - mt76: mt7921: honor mt76_connac_mcu_set_rate_txpower return value in mt7921_config (bsc#1209980). - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter (bsc#1209980). - mt76: mt7921: introduce 160 MHz channel bandwidth support (bsc#1209980). - mt76: mt7921: introduce mt7921s support (bsc#1209980). - mt76: mt7921: introduce stats reporting through ethtool (bsc#1209980). - mt76: mt7921: make all event parser reusable between mt7921s and mt7921e (bsc#1209980). - mt76: mt7921: make mt7921_init_tx_queues static (bsc#1209980). - mt76: mt7921: move mt76_connac_mcu_set_hif_suspend to bus-related files (bsc#1209980). - mt76: mt7921: move mt7921_init_hw in a dedicated work (bsc#1209980). - mt76: mt7921: move mt7921_queue_rx_skb to mac.c (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_complete_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_prepare_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_status_data in mac common code (bsc#1209980). - mt76: mt7921: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7921: reduce log severity levels for informative messages (bsc#1209980). - mt76: mt7921: refactor dma.c to be pcie specific (bsc#1209980). - mt76: mt7921: refactor init.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mac.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mcu.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mt7921_mcu_send_message (bsc#1209980). - mt76: mt7921: rely on mcu_get_nic_capability (bsc#1209980). - mt76: mt7921: remove dead definitions (bsc#1209980). - mt76: mt7921: remove duplicated code in mt7921_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7921: remove mcu rate reporting code (bsc#1209980). - mt76: mt7921: remove mt7921_sta_stats (bsc#1209980). - mt76: mt7921: report tx rate directly from tx status (bsc#1209980). - mt76: mt7921: robustify hardware initialization flow (bsc#1209980). - mt76: mt7921: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7921: set EDCA parameters with the MCU CE command (bsc#1209980). - mt76: mt7921: start reworking tx rate reporting (bsc#1209980). - mt76: mt7921: toggle runtime-pm adding a monitor vif (bsc#1209980). - mt76: mt7921: update mib counters dumping phy stats (bsc#1209980). - mt76: mt7921: update mt7921_skb_add_usb_sdio_hdr to support usb (bsc#1209980). - mt76: mt7921: use correct iftype data on 6GHz cap init (bsc#1209980). - mt76: mt7921: use mt76_hw instead of open coding it (bsc#1209980). - mt76: mt7921: use physical addr to unify register access (bsc#1209980). - mt76: mt7921e: fix possible probe failure after reboot (bsc#1198835). - mt76: mt7921e: make dev->fw_assert usage consistent (bsc#1209980). - mt76: mt7921e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7921s: add reset support (bsc#1209980). - mt76: mt7921s: clear MT76_STATE_MCU_RUNNING immediately after reset (bsc#1209980). - mt76: mt7921s: fix a possible memory leak in mt7921_load_patch (bsc#1209980). - mt76: mt7921s: fix bus hang with wrong privilege (bsc#1209980). - mt76: mt7921s: fix cmd timeout in throughput test (bsc#1209980). - mt76: mt7921s: fix firmware download random fail (bsc#1209980). - mt76: mt7921s: fix missing fc type/sub-type for 802.11 pkts (bsc#1209980). - mt76: mt7921s: fix mt7921s_mcu_[fw|drv]_pmctrl (bsc#1209980). - mt76: mt7921s: fix possible kernel crash due to invalid Rx count (bsc#1209980). - mt76: mt7921s: fix possible sdio deadlock in command fail (bsc#1209980). - mt76: mt7921s: fix suspend error with enlarging mcu timeout value (bsc#1209980). - mt76: mt7921s: fix the device cannot sleep deeply in suspend (bsc#1209980). - mt76: mt7921s: make pm->suspended usage consistent (bsc#1209980). - mt76: mt7921s: run sleep mode by default (bsc#1209980). - mt76: mt7921s: update mt7921s_wfsys_reset sequence (bsc#1209980). - mt76: only access ieee80211_hdr after mt76_insert_ccmp_hdr (bsc#1209980). - mt76: only set rx radiotap flag from within decoder functions (bsc#1209980). - mt76: redefine mt76_for_each_q_rx to adapt mt7986 changes (bsc#1209980). - mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature (bsc#1209980). - mt76: remove mt76_wcid pointer from mt76_tx_status_check signature (bsc#1209980). - mt76: remove variable set but not used (bsc#1209980). - mt76: reverse the first fragmented frame to 802.11 (bsc#1209980). - mt76: schedule status timeout at dma completion (bsc#1209980). - mt76: sdio: disable interrupt in mt76s_sdio_irq (bsc#1209980). - mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines (bsc#1209980). - mt76: sdio: extend sdio module to support CONNAC2 (bsc#1209980). - mt76: sdio: honor the largest Tx buffer the hardware can support (bsc#1209980). - mt76: sdio: introduce parse_irq callback (bsc#1209980). - mt76: sdio: lock sdio when it is needed (bsc#1209980). - mt76: sdio: move common code in mt76_sdio module (bsc#1209980). - mt76: set wlan_idx_hi on mt7916 (bsc#1209980). - mt76: split single ldpc cap bit into bits (bsc#1209980). - mt76: substitute sk_buff_head status_list with spinlock_t status_lock (bsc#1209980). - mt76: support reading EEPROM data embedded in fdt (bsc#1209980). - mt76: switch from 'pci_' to 'dma_' API (bsc#1209980). - mt76: testmode: add support to set MAC (bsc#1209980). - mt76: usb: add req_type to ___mt76u_rr signature (bsc#1209980). - mt76: usb: add req_type to ___mt76u_wr signature (bsc#1209980). - mt76: usb: introduce __mt76u_init utility routine (bsc#1209980). - mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD (bsc#1209980). - mt76: use a separate CCMP PN receive counter for management frames (bsc#1209980). - mt76: use le32/16_get_bits() whenever possible (bsc#1209980). - mt76x02: improve mac error check/reset reliability (bsc#1209980). - mtd: core: fix error path for nvmem provider (git-fixes). - mtd: core: fix nvmem error reporting (git-fixes). - mtd: core: provide unique name for nvmem device, take two (git-fixes). - mtd: dataflash: remove duplicate SPI ID table (git-fixes). - mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes). - mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes). - mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes). - mtd: rawnand: marvell: ensure timing values are written (git-fixes). - mtd: rawnand: meson: fix bitmask for length in command word (git-fixes). - mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes). - mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes). - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes). - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes). - mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes). - mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes). - mtd: spi-nor: Fix a trivial typo (git-fixes). - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes). - mtd: spi-nor: core: fix implicit declaration warning (git-fixes). - mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes). - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes). - mtdblock: tolerate corrected bit-flips (git-fixes). - nbd: Fix hung on disconnect request if socket is closed before (git-fixes). - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes). - nbd: Fix hungtask when nbd_config_put (git-fixes). - nbd: add missing definition of pr_fmt (git-fixes). - nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes). - nbd: fix io hung while disconnecting device (git-fixes). - nbd: fix race between nbd_alloc_config() and module removal (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#PED-1549). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253). - net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253). - net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253). - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253). - net/mlx5: Avoid recovery in probe flows (jsc#PED-1549 bsc#1211794). - net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#PED-1549). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253). - net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253). - net/mlx5: Collect command failures data only for known commands (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#PED-1549). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253). - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#PED-1549). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253). - net/mlx5: Devcom, serialize devcom registration (jsc#PED-1549). - net/mlx5: Disable eswitch before waiting for VF pages (jsc#PED-1549). - net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253). - net/mlx5: Do not use already freed action pointer (jsc#SLE-19253). - net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#PED-1549). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#PED-1549). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#PED-1549). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#PED-1549). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#PED-1549). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5: E-switch, Fix switchdev mode after devlink reload (jsc#PED-1549). - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules (jsc#PED-1549). - net/mlx5: ECPF, wait for VF pages only after disabling host PFs (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253). - net/mlx5: Expose SF firmware pages counter (jsc#PED-1549). - net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253). - net/mlx5: Fix RoCE setting at HCA level (jsc#PED-1549). - net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253). - net/mlx5: Fix command stats access after free (jsc#PED-1549). - net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253). - net/mlx5: Fix error message when failing to allocate device memory (jsc#PED-1549). - net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253). - net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253). - net/mlx5: Fix io_eq_size and event_eq_size params validation (jsc#PED-1549). - net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253). - net/mlx5: Fix ptp max frequency adjustment range (jsc#PED-1549). - net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253). - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#SLE-19253). - net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#PED-1549). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253). - net/mlx5: Handle pairing of E-switch via uplink un/load APIs (jsc#PED-1549). - net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253). - net/mlx5: Lag, fix failure to cancel delayed bond work (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#PED-1549). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253). - net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253). - net/mlx5: SF, Drain health before removing device (jsc#PED-1549). - net/mlx5: SF, Drain health before removing device (jsc#SLE-19253). - net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253). - net/mlx5: Serialize module cleanup with reload and remove (jsc#PED-1549). - net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253). - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver (jsc#PED-1549). - net/mlx5: Store page counters in a single array (jsc#PED-1549). - net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253). - net/mlx5: add IFC bits for bypassing port select flow table (git-fixes) - net/mlx5: check attr pointer validity before dereferencing it (jsc#PED-1549). - net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253). - net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253). - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253). - net/mlx5: fs, fail conflicting actions (jsc#SLE-19253). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#PED-1549). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253). - net/mlx5: fw_tracer, Fix event handling (jsc#PED-1549). - net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#PED-1549). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#PED-1549). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#PED-1549). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#PED-1549). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253). - net/mlx5e: CT: Fix ct debugfs folder name (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253). - net/mlx5e: Do not cache tunnel offloads capability (jsc#PED-1549). - net/mlx5e: Do not clone flow post action attributes second time (jsc#PED-1549). - net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253). - net/mlx5e: Do not support encap rules with gbp option (jsc#PED-1549). - net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253). - net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253). - net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253). - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253). - net/mlx5e: Fix RX reporter for XSK RQs (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253). - net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253). - net/mlx5e: Fix cleanup null-ptr deref on encap lock (jsc#PED-1549). - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (jsc#PED-1549). - net/mlx5e: Fix deadlock in tc route query code (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#PED-1549). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253). - net/mlx5e: Fix macsec ASO context alignment (jsc#PED-1549). - net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (jsc#PED-1549). - net/mlx5e: Fix macsec ssci attribute handling in offload path (jsc#PED-1549). - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253). - net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253). - net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253). - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253). - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (jsc#PED-1549). - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253). - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253). - net/mlx5e: Initialize link speed to zero (jsc#PED-1549). - net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253). - net/mlx5e: Nullify table pointer when failing to create (jsc#PED-1549). - net/mlx5e: Overcome slow response for first macsec ASO WQE (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5e: Remove redundant xsk pointer check in mlx5e_mpwrq_validate_xsk (jsc#PED-1549). - net/mlx5e: Set decap action based on attr for sample (jsc#PED-1549). - net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253). - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253). - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253). - net/mlx5e: Use correct encap attribute during invalidation (jsc#PED-1549). - net/mlx5e: Verify dev is present for fix features ndo (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#PED-1549). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253). - net/net_failover: fix txq exceeding warning (git-fixes). - net/rose: Fix to not accept on connected socket (git-fixes). - net/sched: fix initialization order when updating chain 0 head (git-fixes). - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes). - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes). - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842). - net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes). - net/x25: Fix to not accept on connected socket (git-fixes). - net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes). - net: add missing include in include/net/gro.h (git-fixes). - net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes). - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes). - net: devlink: Fix missing mutex_unlock() call (git-fixes). - net: ena: Account for the number of processed bytes in XDP (git-fixes). - net: ena: Do not register memory info on XDP exchange (git-fixes). - net: ena: Fix rx_copybreak value update (git-fixes). - net: ena: Fix toeplitz initial hash value (git-fixes). - net: ena: Set default value for RX interrupt moderation (git-fixes). - net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes). - net: ena: Use bitmask to indicate packet redirection (git-fixes). - net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes). - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes). - net: hns3: fix reset delay time to avoid configuration timeout (git-fixes). - net: hns3: fix sending pfc frames after reset issue (git-fixes). - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes). - net: linkwatch: be more careful about dev->linkwatch_dev_tracker (git-fixes). - net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982). - net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022). - net: mana: Add support for jumbo frame (bsc#1210551). - net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153). - net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551). - net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022). - net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022). - net: mana: Enable RX path to handle various MTU sizes (bsc#1210551). - net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875). - net: mana: Fix accessing freed irq affinity_hint (bsc#1208153). - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes). - net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022). - net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022). - net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022). - net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022). - net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551). - net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551). - net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022). - net: mana: Use napi_build_skb in RX path (bsc#1210551). - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes). - net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes). - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#PED-1549). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#SLE-19253). - net: natsemi: fix hw address initialization for jazz and xtensa (git-fixes). - net: of: fix stub of_net helpers for CONFIG_NET=n (git-fixes). - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes). - net: phy: Ensure state transitions are processed from phy_stop() (git-fixes). - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes). - net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes). - net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes). - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes). - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes). - net: phy: mxl-gpy: add MDINT workaround (git-fixes). - net: phy: nxp-c45-tja11xx: add remove callback (git-fixes). - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes). - net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes). - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes). - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes). - net: qrtr: correct types of trace event parameters (git-fixes). - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes). - net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes). - net: tun: avoid disabling NAPI twice (git-fixes). - net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes). - net: tun: stop NAPI when detaching queues (git-fixes). - net: tun: unlink NAPI from device on destruction (git-fixes). - net: usb: asix: remove redundant assignment to variable reg (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes). - net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes). - net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - net: usb: use eth_hw_addr_set() (git-fixes). - net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes). - netrom: Fix use-after-free caused by accept on already connected socket (git-fixes). - netrom: Fix use-after-free of a listening socket (git-fixes). - nfc: change order inside nfc_se_io error path (git-fixes). - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes). - nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes). - nfc: pn533: initialize struct pn533_out_arg properly (git-fixes). - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes). - nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes). - nfp: flower-ct: fix error return code in nfp_fl_ct_add_offload() (git-fixes). - nfp: flower: fix ingress police using matchall filter (git-fixes). - nfp: only report pause frame configuration for physical device (git-fixes). - nfs4: Fix kmemleak when allocate slot failed (git-fixes). - nfs4trace: fix state manager flag printing (git-fixes). - nfs: Always initialise fattr->label in nfs_fattr_alloc() (git-fixes). - nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes). - nfs: Cleanup unused rpc_clnt variable (git-fixes). - nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes). - nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes). - nfs: Fix an Oops in nfs_d_automount() (git-fixes). - nfs: Further optimisations for 'ls -l' (git-fixes). - nfs: Pass i_size to fscache_unuse_cookie() when a file is released (git-fixes). - nfs: fix disabling of swap (git-fixes). - nfs: nfs4clinet: check the return value of kstrdup() (git-fixes). - nfs: nfsiod should not block forever in mempool_alloc() (git-fixes). - nfsd: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (git-fixes). - nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes). - nfsd: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (git-fixes). - nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes). - nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes). - nfsd: Fix a memory leak in an error handling path (git-fixes). - nfsd: Fix handling of oversized NFSv4 COMPOUND requests (git-fixes). - nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes). - nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - nfsd: Protect against filesystem freezing (git-fixes). - nfsd: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - nfsd: call op_release, even when op_func returns an error (git-fixes). - nfsd: callback request does not use correct credential for AUTH_SYS (git-fixes). - nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes). - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes). - nfsd: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes). - nfsd: fix problems with cleanup on errors in nfsd4_copy (git-fixes). - nfsd: fix race to check ls_layouts (git-fixes). - nfsd: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes). - nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes). - nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes). - nfsd: shut down the NFSv4 state objects before the filecache (git-fixes). - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes). - nfsd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes). - nfsv3: handle out-of-order write replies (bsc#1205544). - nfsv4 expose nfs_parse_server_name function (git-fixes). - nfsv4 handle port presence in fs_location server string (git-fixes). - nfsv4 only print the label when its queried (git-fixes). - nfsv4 remove zero number of fs_locations entries error check (git-fixes). - nfsv4 store server support for fs_location attribute (git-fixes). - nfsv4.1 provide mount option to toggle trunking discovery (git-fixes). - nfsv4.1 query for fs_location attr on a new file system (git-fixes). - nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes). - nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - nfsv4.2: Fix initialisation of struct nfs4_label (git-fixes). - nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes). - nfsv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - nfsv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes). - nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes). - nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes). - nfsv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes). - nfsv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - nfsv4: Fix a potential state reclaim deadlock (git-fixes). - nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - nfsv4: Fix hangs when recovering open state after a server reboot (git-fixes). - nfsv4: Protect the state recovery thread against direct reclaim (git-fixes). - nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes). - nfsv4: keep state manager thread active if swap is enabled (git-fixes). - nilfs2: do not write dirty data after degenerating to read-only (git-fixes). - nilfs2: fix buffer corruption due to concurrent device reads (git-fixes). - nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes). - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes). - nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes). - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes). - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes). - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes). - nilfs2: fix sysfs interface lifetime (git-fixes). - nilfs2: fix underflow in second superblock position calculations (git-fixes). - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes). - nilfs2: initialize unused bytes in segment summary blocks (git-fixes). - nouveau: fix client work fence deletion race (git-fixes). - ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes). - ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes). - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes). - ntb: ntb_tool: Add check for devm_kcalloc (git-fixes). - ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes). - null_blk: fix ida error handling in null_add_dev() (git-fixes). - nvdimm: disable namespace on error (bsc#1166486). - nvme initialize core quirks before calling nvme_init_subsystem (git-fixes). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-core: fix dev_pm_qos memleak (git-fixes). - nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes). - nvme-core: fix memory leak in dhchap_secret_store (git-fixes). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes). - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (git-fixes). - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes). - nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes). - nvme-multipath: fix hang when disk goes live over reconnect (git-fixes). - nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes). - nvme-multipath: support io stats on the mpath device (bsc#1210565). - nvme-pci: add bogus ID quirk for ADATA SX6000PNP (bsc#1207827). - nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes). - nvme-pci: add quirks for Samsung X5 SSDs (git-fixes). - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes). - nvme-pci: clear the prp2 field when not used (git-fixes). - nvme-pci: disable write zeroes on various Kingston SSD (git-fixes). - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes). - nvme-pci: fix doorbell buffer value endianness (git-fixes). - nvme-pci: fix mempool alloc size (git-fixes). - nvme-pci: fix page size checks (git-fixes). - nvme-pci: fix timeout request state check (git-fixes). - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes). - nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes). - nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: always fail a request when sending it failed (bsc#1208902). - nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes). - nvme-tcp: fix bogus request completion when failing to send AER (git-fixes). - nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes). - nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes). - nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes). - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes). - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes). - nvme: add device name to warning in uuid_show() (git-fixes). - nvme: also return I/O command effects from nvme_command_effects (git-fixes). - nvme: bring back auto-removal of deleted namespaces during sequential scan (git-fixes). - nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes). - nvme: check for duplicate identifiers earlier (git-fixes). - nvme: cleanup __nvme_check_ids (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes). - nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes). - nvme: fix async event trace event (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix handling single range discard request (git-fixes). - nvme: fix interpretation of DMRSL (git-fixes). - nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes). - nvme: fix passthrough csi check (git-fixes). - nvme: fix per-namespace chardev deletion (git-fixes). - nvme: fix the CRIMS and CRWMS definitions to match the spec (git-fixes). - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes). - nvme: fix the name of Zone Append for verbose logging (git-fixes). - nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes). - nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes). - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes). - nvme: introduce nvme_start_request (bsc#1210565). - nvme: move nvme_multi_css into nvme.h (git-fixes). - nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes). - nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes). - nvme: return err on nvme_init_non_mdts_limits fail (git-fixes). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: set dma alignment to dword (git-fixes). - nvme: set non-mdts limits in nvme_scan_work (git-fixes). - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (git-fixes). - nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes). - nvmet-tcp: add bounds check on Transfer Tag (git-fixes). - nvmet-tcp: fix incomplete data digest send (git-fixes). - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes). - nvmet-tcp: fix regression in data_digest calculation (git-fixes). - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes). - nvmet: add helpers to set the result field for connect commands (git-fixes). - nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes). - nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes). - nvmet: fix I/O Command Set specific Identify Controller (git-fixes). - nvmet: fix Identify Active Namespace ID list handling (git-fixes). - nvmet: fix Identify Controller handling (git-fixes). - nvmet: fix Identify Namespace handling (git-fixes). - nvmet: fix a memory leak (git-fixes). - nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes). - nvmet: fix a use-after-free (git-fixes). - nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes). - nvmet: fix mar and mor off-by-one errors (git-fixes). - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: force reconnect when number of queue changes (git-fixes). - nvmet: looks at the passthrough controller when initializing CAP (git-fixes). - nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes). - nvmet: only allocate a single slab for bvecs (git-fixes). - nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes). - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes). - objtool: Add a missing comma to avoid string concatenation (bsc#1207328). - ocfs2: Fix data corruption after failed write (bsc#1208542). - ocfs2: clear dinode links count in case of error (bsc#1207650). - ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649). - ocfs2: fix crash when mount with quota enabled (bsc#1207640). - ocfs2: fix defrag path triggering jbd2 ASSERT (bsc#1199304). - ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes). - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes). - ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652). - ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651). - ocfs2: fix non-auto defrag path not working issue (bsc#1199304). - ocfs2: fix non-auto defrag path not working issue (git-fixes). - ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770). - ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768). - ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771). - octeon: constify netdev->dev_addr (git-fixes). - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes). - octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes). - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes). - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes). - of/address: Return an error when no valid dma-ranges are found (git-fixes). - opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes). - pNFS/filelayout: Fix coalescing test for single DS (git-fixes). - panic: Consolidate open-coded panic_on_warn checks (bsc#1207328). - panic: Introduce warn_limit (bsc#1207328). - panic: unset panic_on_warn inside panic() (bsc#1207328). - pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes). - pci/aspm: Remove pcie_aspm_pm_state_change() (git-fixes). - pci/dpc: Await readiness of secondary bus after reset (git-fixes). - pci/edr: Clear Device Status after EDR error recovery (git-fixes). - pci/iov: Enlarge virtfn sysfs name buffer (git-fixes). - pci/pm: Always disable PTM for all devices during suspend (git-fixes). - pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes). - pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes). - pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes). - pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes). - pci: Add ACS quirk for Wangxun NICs (git-fixes). - pci: Add SolidRun vendor ID (git-fixes). - pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes). - pci: Align extra resources for hotplug bridges properly (git-fixes). - pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes). - pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes). - pci: Fix dropping valid root bus resources with .end = zero (git-fixes). - pci: Reduce warnings on possible RW1C corruption (git-fixes). - pci: Release resource invalidated by coalescing (git-fixes). - pci: Take other bus devices into account when distributing resources (git-fixes). - pci: Unify delay handling for reset and resume (git-fixes). - pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes). - pci: aardvark: Fix link training (git-fixes). - pci: cadence: Fix Gen2 Link Retraining process (git-fixes). - pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes). - pci: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes). - pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes). - pci: ftpci100: Release the clock resources (git-fixes). - pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes). - pci: hv: Add a per-bus mutex state_lock (bsc#1207185). - pci: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185). - pci: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185). - pci: hv: Use async probing to reduce boot time (bsc#1207185). - pci: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185). - pci: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes). - pci: imx6: Install the fault handler only on compatible match (git-fixes). - pci: loongson: Add more devices that need MRRS quirk (git-fixes). - pci: loongson: Prevent LS7A MRRS increases (git-fixes). - pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes). - pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes). - pci: pciehp: Cancel bringup sequence if card is not present (git-fixes). - pci: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes). - pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes). - pci: qcom: Fix host-init error handling (git-fixes). - pci: qcom: Fix pipe clock imbalance (git-fixes). - pci: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes). - pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes). - pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes). - pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes). - pci: rockchip: Set address alignment for endpoint mode (git-fixes). - pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes). - pci: rockchip: Write PCI Device ID to correct register (git-fixes). - pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes). - pci: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - pci: vmd: Reset VMD config register between soft reboots (git-fixes). - pci: xgene: Revert 'PCI: xgene: Use inbound resources for setup' (git-fixes). - perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes). - perf/core: Call LSM hook after copying perf_event_attr (git fixes). - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes). - perf/core: Fix the same task check in perf_event_set_output (git fixes). - perf/core: Inherit event_caps (git fixes). - perf/x86/amd: fix potential integer overflow on shift of a int (git fixes). - perf/x86/intel/cstate: Add Emerald Rapids (PED-4396). - perf/x86/intel/ds: Fix precise store latency handling (git fixes). - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes). - perf/x86/intel/pt: Fix sampling using single range output (git fixes). - perf/x86/intel/pt: Relax address filter validation (git fixes). - perf/x86/intel/uncore: Add Emerald Rapids (git fixes). - perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes). - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes). - perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes). - perf/x86/intel: Add Emerald Rapids (git fixes). - perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes). - perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes). - perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes). - perf/x86/intel: Fix event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for ADL (git fixes). - perf/x86/intel: Fix pebs event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for SPR (git fixes). - perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes). - perf/x86/msr: Add Emerald Rapids (git fixes). - perf/x86/rapl: Add support for Intel AlderLake-N (git fixes). - perf/x86/rapl: Add support for Intel Emerald Rapids (PED-4394). - perf/x86/rapl: Treat Tigerlake like Icelake (git fixes). - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes). - perf/x86/rapl: fix AMD event handling (git fixes). - perf/x86/uncore: Add Raptor Lake uncore support (git fixes). - perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes). - perf/x86/uncore: Add new Raptor Lake S support (git fixes). - perf/x86/uncore: Clean up uncore_pci_ids (git fixes). - perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf: Always wake the parent event (git fixes). - perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes). - perf: Fix possible memleak in pmu_dev_alloc() (git fixes). - perf: fix perf_event_context->time (git fixes). - phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes). - phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes). - phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes). - phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes). - phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes). - phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes). - pinctrl: amd: Disable and mask interrupts on resume (git-fixes). - pinctrl: aspeed: Fix confusing types in return value (git-fixes). - pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes). - pinctrl: at91-pio4: fix domain name assignment (git-fixes). - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes). - pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes). - pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes). - pinctrl: mediatek: Initialize variable *buf to zero (git-fixes). - pinctrl: mediatek: fix coding style (git-fixes). - pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes). - pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes). - pinctrl: ocelot: Fix alt mode for ocelot (git-fixes). - pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes). - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes). - pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes). - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes). - pinctrl: single: fix potential NULL dereference (git-fixes). - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes). - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes). - platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes). - platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd: Fix refcount leak in amd_pmc_probe (bsc#1210644). - platform/x86/amd: pmc: Add a module parameter to disable workarounds (bsc#1210644). - platform/x86/amd: pmc: Add a workaround for an s0i3 issue on Cezanne (bsc#1210644). - platform/x86/amd: pmc: Add defines for STB events (bsc#1210644). - platform/x86/amd: pmc: Add line break for readability (bsc#1210644). - platform/x86/amd: pmc: Add new ACPI ID AMDI0009 (bsc#1210644). - platform/x86/amd: pmc: Add num_samples message id support to STB (bsc#1210644). - platform/x86/amd: pmc: Add sysfs files for SMU (bsc#1210644). - platform/x86/amd: pmc: Always write to the STB (bsc#1210644). - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN (bsc#1210644). - platform/x86/amd: pmc: Do not dump data after resume from s0i3 on picasso (git-fixes). - platform/x86/amd: pmc: Do not try to read SMU version on Picasso (git-fixes). - platform/x86/amd: pmc: Fix build without debugfs (bsc#1210644). - platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() (bsc#1210644). - platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso (git-fixes). - platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` (git-fixes). - platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init (git-fixes). - platform/x86/amd: pmc: Read SMU version during suspend on Cezanne systems (bsc#1210644). - platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: Utilize SMN index 0 for driver probe (git-fixes). - platform/x86/amd: pmc: Write dummy postcode into the STB DRAM (bsc#1210644). - platform/x86/amd: pmc: add CONFIG_SERIO dependency (git-fixes). - platform/x86/amd: pmc: differentiate STB/SMU messaging prints (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_SUSPEND checks (bsc#1210644). - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes). - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420). - platform/x86: ISST: Remove 8 socket limit (bsc#1211836). - platform/x86: Move AMD platform drivers to separate directory (bsc#1210644). - platform/x86: amd-pmc: Add a message to print resume time info (bsc#1210644). - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Smart Trace Buffer (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Spill to DRAM STB feature (bsc#1210644). - platform/x86: amd-pmc: Avoid reading SMU version at probe time (bsc#1210644). - platform/x86: amd-pmc: Check s0i3 cycle status (bsc#1210644). - platform/x86: amd-pmc: Correct usage of SMU version (git-fixes). - platform/x86: amd-pmc: Downgrade dev_info message to dev_dbg (bsc#1210644). - platform/x86: amd-pmc: Drop CPU QoS workaround (bsc#1210644). - platform/x86: amd-pmc: Drop check for valid alarm time (bsc#1210644). - platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes). - platform/x86: amd-pmc: Fix build error unused-function (bsc#1210644). - platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes). - platform/x86: amd-pmc: Fix compilation without CONFIG_SUSPEND (bsc#1210644). - platform/x86: amd-pmc: Make amd_pmc_stb_debugfs_fops static (bsc#1210644). - platform/x86: amd-pmc: Move FCH init to first use (bsc#1210644). - platform/x86: amd-pmc: Move SMU logging setup out of init (bsc#1210644). - platform/x86: amd-pmc: Move to later in the suspend process (bsc#1210644). - platform/x86: amd-pmc: Only report STB errors when STB enabled (bsc#1210644). - platform/x86: amd-pmc: Output error codes in messages (bsc#1210644). - platform/x86: amd-pmc: Send command to dump data after clearing OS_HINT (bsc#1210644). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1210644). - platform/x86: amd-pmc: Shuffle location of amd_pmc_get_smu_version() (bsc#1210644). - platform/x86: amd-pmc: Simplify error handling and store the pci_dev in amd_pmc_dev structure (bsc#1210644). - platform/x86: amd-pmc: Validate entry into the deepest state on resume (bsc#1210644). - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd` (bsc#1210644). - platform/x86: amd-pmc: fix compilation without CONFIG_RTC_SYSTOHC_DEVICE (bsc#1210644). - platform/x86: amd-pmc: uninitialized variable in amd_pmc_s2d_init() (bsc#1210644). - platform/x86: amd: pmc: Remove __maybe_unused from amd_pmc_suspend_handler() (bsc#1210644). - platform/x86: amd: pmc: provide user message where s0ix is not supported (bsc#1210644). - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes). - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes). - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes). - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes). - platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes). - platform/x86: hp-wmi: Support touchpad on/off (git-fixes). - platform/x86: intel-uncore-freq: add Emerald Rapids support (PED-4390). - platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes). - platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes). - platform/x86: think-lmi: Certificate authentication support (bsc#1210050). - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes). - platform/x86: think-lmi: Correct NVME password handling (git-fixes). - platform/x86: think-lmi: Correct System password interface (git-fixes). - platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes). - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes). - platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050). - platform/x86: think-lmi: Opcode support (bsc#1210050). - platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050). - platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050). - platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050). - platform/x86: think-lmi: add debug_cmd (bsc#1210050). - platform/x86: think-lmi: add missing type attribute (git-fixes). - platform/x86: think-lmi: certificate support clean ups (bsc#1210050). - platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes). - platform/x86: think-lmi: only display possible_values if available (git-fixes). - platform/x86: think-lmi: use correct possible_values delimiters (git-fixes). - platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050). - platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050). - platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050). - platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050). - platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050). - platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050). - platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050). - platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050). - platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050). - platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050). - platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050). - platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050). - platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050). - platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050). - platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050). - platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050). - platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050). - platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050). - platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050). - platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes). - platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050). - platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050). - platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050). - platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050). - platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050). - platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050). - platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050). - platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050). - platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050). - platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050). - platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050). - platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050). - platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050). - platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050). - platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050). - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes). - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes). - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes). - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes). - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes). - pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes). - pm: hibernate: Do not get block device exclusively in test_resume mode (git-fixes). - pm: hibernate: Turn snapshot_test into global variable (git-fixes). - pm: hibernate: fix load_image_and_restore() error path (git-fixes). - power: supply: Fix logic checking if system is running from battery (git-fixes). - power: supply: Ratelimit no data debug output (git-fixes). - power: supply: ab8500: Fix external_power_changed race (git-fixes). - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes). - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes). - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes). - power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes). - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes). - power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes). - power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes). - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes). - power: supply: bq27xxx: expose battery data when CI=1 (git-fixes). - power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes). - power: supply: generic-adc-battery: fix unit scaling (git-fixes). - power: supply: leds: Fix blink to LED on transition (git-fixes). - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes). - power: supply: sc27xx: Fix external_power_changed race (git-fixes). - powercap: fix possible name leak in powercap_register_zone() (git-fixes). - powercap: intel_rapl: add support for Emerald Rapids (PED-4398). - powerpc/64: Always build with 128-bit long double (bsc#1194869). - powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869). - powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869). - powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729). - powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes). - powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612). - powerpc/hv-gpci: Fix hv_gpci event list (bsc#1207935). - powerpc/hv-gpci: Fix hv_gpci event list (git fixes). - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869). - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869). - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes). - powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701). - powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869). - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869). - powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869). - powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869). - powerpc/kexec_file: fix implicit decl error (bsc#1194869). - powerpc/mm: Fix false detection of read faults (bsc#1208864). - powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled (bsc#1210216 ltc#202189). - powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/purgatory: remove PGO flags (bsc#1194869). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729). - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869). - powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869). - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869). - powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869). - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869). - powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729). - powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662). - powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869). - powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662). - powerpc: declare unmodified attribute_group usages const (bsc#1207935). - powerpc: declare unmodified attribute_group usages const (git-fixes). - powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869). - printf: fix errname.c list (git-fixes). - prlimit: do_prlimit needs to have a speculation check (bsc#1209256). - pstore/ram: Add check for kstrdup (git-fixes). - pstore: Revert pmsg_lock back to a normal mutex (git-fixes). - purgatory: fix disabling debug info (git-fixes). - pwm: ab8500: Fix error code in probe() (git-fixes). - pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes). - pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes). - pwm: meson: Fix axg ao mux parents (git-fixes). - pwm: meson: Fix g12a ao clk81 name (git-fixes). - pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes). - pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes). - pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes). - qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001). - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (jsc#SLE-19001). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001). - qed/qede: Fix scheduling while atomic (git-fixes). - qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001). - qede: avoid uninitialized entries in coal_entry array (bsc#1205846). - qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001). - qede: fix interrupt coalescing configuration (bsc#1205846). - quota: Check next/prev free block number after reading from quota file (bsc#1206640). - quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: fix flow control issue of RTL8156A (git-fixes). - r8152: fix the poor throughput for 2.5G devices (git-fixes). - r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes). - r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes). - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes). - radeon: avoid double free in ci_dpm_init() (git-fixes). - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes). - rcu: Fix rcu_torture_read ftrace event (git-fixes). - rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159). - rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes) - rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes) - rdma/bnxt_re: Fix a possible memory leak (git-fixes) - rdma/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes) - rdma/bnxt_re: Fix the page_size used during the MR creation (git-fixes) - rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes) - rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes) - rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes) - rdma/bnxt_re: Remove unnecessary checks (git-fixes) - rdma/bnxt_re: Return directly without goto jumps (git-fixes) - rdma/bnxt_re: Use unique names while registering interrupts (git-fixes) - rdma/bnxt_re: wraparound mbox producer index (git-fixes) - rdma/cm: Trace icm_send_rej event before the cm state is reset (git-fixes) - rdma/cma: Allow UD qp_type to join multicast only (git-fixes) - rdma/cma: Always set static rate to 0 for RoCE (git-fixes) - rdma/core: Fix GID entry ref leak when create_ah fails (git-fixes) - rdma/core: Fix ib block iterator counter overflow (bsc#1207878). - rdma/core: Fix ib block iterator counter overflow (git-fixes) - rdma/core: Fix multiple -Warray-bounds warnings (git-fixes) - rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes) - rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes) - rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes) - rdma/efa: Fix unsupported page sizes in device (git-fixes) - rdma/hns: Fix base address table allocation (git-fixes) - rdma/hns: Fix hns_roce_table_get return value (git-fixes) - rdma/hns: Fix timeout attr in query qp for HIP08 (git-fixes) - rdma/hns: Modify the value of long message loopback slice (git-fixes) - rdma/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383). - rdma/irdma: Add ipv4 check to irdma_find_listener() (git-fixes) - rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383). - rdma/irdma: Fix Local Invalidate fencing (git-fixes) - rdma/irdma: Fix RQ completion opcode (jsc#SLE-18383). - rdma/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383). - rdma/irdma: Fix inline for multiple SGE's (jsc#SLE-18383). - rdma/irdma: Fix memory leak of PBLE objects (git-fixes) - rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes) - rdma/irdma: Increase iWARP CM default rexmit count (git-fixes) - rdma/irdma: Prevent QP use after free (git-fixes) - rdma/irdma: Remove enum irdma_status_code (jsc#SLE-18383). - rdma/irdma: Remove excess error variables (jsc#SLE-18383). - rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes) - rdma/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022). - rdma/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022). - rdma/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255). - rdma/mlx5: Create an indirect flow table for steering anchor (git-fixes) - rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes) - rdma/mlx5: Fix affinity assignment (git-fixes) - rdma/mlx5: Fix flow counter query via DEVX (git-fixes) - rdma/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes) - rdma/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes) - rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes) - rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253). - rdma/mlx5: Use correct device num_ports when modify DC (git-fixes) - rdma/mlx5: Use rdma_umem_for_each_dma_block() (git-fixes) - rdma/rdmavt: Delete unnecessary NULL check (git-fixes) - rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes) - rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes) - rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes) - rdma/rtrs: Fix the last iu->buf leak in err path (git-fixes) - rdma/rxe: Fix access checks in rxe_check_bind_mw (git-fixes) - rdma/rxe: Fix inaccurate constants in rxe_type_info (git-fixes) - rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes) - rdma/rxe: Fix mr->map double free (git-fixes) - rdma/rxe: Fix oops with zero length reads (git-fixes) - rdma/rxe: Fix packet length checks (git-fixes) - rdma/rxe: Fix ref count error in check_rkey() (git-fixes) - rdma/rxe: Fix rxe_cq_post (git-fixes) - rdma/rxe: Fix the error 'trying to register non-static key in rxe_cleanup_task' (git-fixes) - rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes) - rdma/rxe: Make responder handle RDMA Read failures (git-fixes) - rdma/rxe: Prevent faulty rkey generation (git-fixes) - rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes) - rdma/rxe: Remove tasklet call from rxe_cq.c (git-fixes) - rdma/rxe: Remove the unused variable obj (git-fixes) - rdma/rxe: Removed unused name from rxe_task struct (git-fixes) - rdma/siw: Fix potential page_array out of range access (git-fixes) - rdma/siw: Fix user page pinning accounting (git-fixes) - rdma/siw: Remove namespace check from siw_netdev_event() (git-fixes) - rdma/srp: Move large values to a new enum for gcc13 (git-fixes) - rdma/srpt: Add a check for valid 'mad_agent' pointer (git-fixes) - rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes) - rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes) - rdma/vmw_pvrdma: Remove unnecessary check on wr->opcode (git-fixes) - rdma: Handle the return code from dma_resv_wait_timeout() properly (git-fixes) - ref_tracker: use __GFP_NOFAIL more carefully (git-fixes). - regmap: Account for register length when chunking (git-fixes). - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes). - regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes). - regulator: Fix error checking for debugfs_create_dir (git-fixes). - regulator: Flag uncontrollable regulators as always_on (git-fixes). - regulator: Handle deferred clk (git-fixes). - regulator: core: Avoid lockdep reports when resolving supplies (git-fixes). - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes). - regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes). - regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes). - regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes). - regulator: core: Streamline debugfs operations (git-fixes). - regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes). - regulator: fan53555: Explicitly include bits header (git-fixes). - regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes). - regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes). - regulator: max77802: Bounds check regulator id against opmode (git-fixes). - regulator: mt6359: add read check for PMIC MT6359 (git-fixes). - regulator: pca9450: Fix BUCK2 enable_mask (git-fixes). - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes). - regulator: s5m8767: Bounds check id indexing into arrays (git-fixes). - regulator: stm32-pwr: fix of_iomap leak (git-fixes). - reiserfs: Add missing calls to reiserfs_security_free() (git-fixes). - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes). - remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes). - remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes). - remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes). - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes). - remoteproc: st: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes). - remove 'PCI: hv: Use async probing to reduce boot time' (bsc#1207185). - rethook: Reject getting a rethook if RCU is not watching (git-fixes). - rethook: fix a potential memleak in rethook_alloc() (git-fixes). - rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler (git-fixes). - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (git-fixes). - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes). - ring-buffer: Fix kernel-doc (git-fixes). - ring-buffer: Fix race while reader and writer are on the same page (git-fixes). - ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes). - ring-buffer: Sync IRQ works before buffer destruction (git-fixes). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE. - rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435) - rpm/kernel-obs-build.spec.in: Remove SLE11 cruft - rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches - rtc: allow rtc_read_alarm without read_alarm callback (git-fixes). - rtc: efi: Add wakeup support (bsc#1213116). - rtc: efi: Enable SET/GET WAKEUP services as optional (bsc#1213116). - rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116). - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes). - rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes). - rtc: pm8xxx: fix set-alarm race (git-fixes). - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes). - rtc: sun6i: Always export the internal oscillator (git-fixes). - rtmutex: Ensure that the top waiter is always woken up (git-fixes). - s390/ap: fix memory leak in ap_init_qci_info() (git-fixes). - s390/boot: simplify and fix kernel memory layout setup (bsc#1209600). - s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686). - s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes). - s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592). - s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687). - s390/dasd: fix no record found for raw_track_access (bsc#1207574). - s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes). - s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892). - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688). - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689). - s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690). - s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691). - s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692). - s390/pkey: zeroize key blobs (git-fixes bsc#1212619). - s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693). - s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes). - s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes). - s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714). - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() (git-fixes). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes) - sched/core: Avoid obvious double update_rq_clock warning (git-fixes) - sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes) - sched/core: Introduce sched_asym_cpucap_active() (git-fixes) - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes) - sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes) - sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)). - sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325). - sched/fair: sanitize vruntime of entity being placed (bsc#1203325). - sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)). - sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799). - sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes) - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes) - sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes) - sched: Fix DEBUG && !SCHEDSTATS warn (git-fixes) - sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)). - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (git-fixes). - scsi: aacraid: Allocate cmd_priv with scsicmd (git-fixes). - scsi: aic94xx: Add missing check for dma_map_single() (git-fixes). - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes). - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes). - scsi: core: Fix a procfs host directory removal regression (git-fixes). - scsi: core: Fix a source code comment (git-fixes). - scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes). - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes). - scsi: hisi_sas: Check devm_add_action() return value (git-fixes). - scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes). - scsi: hisi_sas: Revert change to limit max hw sectors for v3 HW (bsc#1210230). - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes). - scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes). - scsi: ipr: Work around fortify-string warning (git-fixes). - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes). - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes). - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: libsas: Add sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes). - scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847). - scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes). - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (bsc#1211847). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Update congestion warning notification period (bsc#1211847). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847). - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes). - scsi: megaraid_sas: Fix crash after a double completion (git-fixes). - scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (git-fixes). - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (git-fixes). - scsi: mpi3mr: Fix throttle_groups memory leak (git-fixes). - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (git-fixes). - scsi: mpi3mr: Suppress command reply debug prints (bsc#1211820). - scsi: mpt3sas: Do not print sense pool info twice (git-fixes). - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes). - scsi: mpt3sas: Fix a memory leak (git-fixes). - scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes). - scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix hang in task management (bsc#1211960). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix mem access after free (bsc#1211960). - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960). - scsi: qla2xxx: Fix task management cmd failure (bsc#1211960). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Multi-que support for TMF (bsc#1211960). - scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes). - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes). - scsi: scsi_ioctl: Validate command size (git-fixes). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Revert 'Rework asynchronous resume support' (bsc#1209092). - scsi: ses: Do not attach if enclosure has no components (git-fixes). - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes). - scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes). - scsi: smartpqi: Add controller cache flush during rmmod (bsc#1207315). - scsi: smartpqi: Add new controller PCI IDs (bsc#1207315). - scsi: smartpqi: Change sysfs raid_level attribute to N/A for controllers (bsc#1207315). - scsi: smartpqi: Change version to 2.1.20-035 (bsc#1207315). - scsi: smartpqi: Convert to host_tagset (bsc#1207315). - scsi: smartpqi: Correct device removal for multi-actuator devices (bsc#1207315). - scsi: smartpqi: Correct max LUN number (bsc#1207315). - scsi: smartpqi: Initialize feature section info (bsc#1207315). - scsi: smartpqi: Replace one-element array with flexible-array member (bsc#1207315). - scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes). - scsi: stex: Fix gcc 13 warnings (git-fixes). - scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes). - scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes). - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes). - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes). - scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes). - scsi: ufs: core: Enable link lost interrupt (git-fixes). - scsi_disk kABI: add back members (bsc#1209092). - sctp: fail if no bound addresses can be used for a given scope (bsc#1206677). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - seccomp: Move copy_seccomp() to no failure path (bsc#1210817). - sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes). - selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes). - selftests mount: Fix mount_setattr_test builds failed (git-fixes). - selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103). - selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103). - selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes). - selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232). - selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232). - selftests/powerpc: Move perror closer to its use (bsc#1206232). - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes). - selftests/resctrl: Allow ->setup() to return errors (git-fixes). - selftests/resctrl: Check for return value after write_schemata() (git-fixes). - selftests/resctrl: Extend CPU vendor detection (git-fixes). - selftests/resctrl: Move ->setup() call outside of test specific branches (git-fixes). - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes). - selftests/sgx: Add 'test_encl.elf' to TEST_FILES (git-fixes). - selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes). - selftests: Provide local define of __cpuid_count() (git-fixes). - selftests: forwarding: lib: quote the sysctl values (git-fixes). - selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: depend on SYN_COOKIES (git-fixes). - selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: sockopt: return error if wrong mark (git-fixes). - selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes). - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes). - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes). - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes). - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes). - selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes). - selftests: sigaltstack: fix -Wuninitialized (git-fixes). - selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes). - selftests: xsk: Disable IPv6 on VETH1 (git-fixes). - selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes). - selinux: do not use make's grouped targets feature yet (git-fixes). - selinux: ensure av_permissions.h is built when needed (git-fixes). - selinux: fix Makefile dependencies of flask.h (git-fixes). - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes). - serial: 8250: Add missing wakeup event reporting (git-fixes). - serial: 8250: Reinit port->pm on port specific driver unbind (git-fixes). - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes). - serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes). - serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes). - serial: 8250: omap: Fix freeing of resources on failed register (git-fixes). - serial: 8250_bcm7271: Fix arbitration handling (git-fixes). - serial: 8250_bcm7271: balance clk_enable calls (git-fixes). - serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes). - serial: 8250_dma: Fix DMA Rx rearm race (git-fixes). - serial: 8250_em: Fix UART port type (git-fixes). - serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes). - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes). - serial: 8250_fsl: fix handle_irq locking (git-fixes). - serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes). - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes). - serial: Add support for Advantech PCI-1611U card (git-fixes). - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes). - serial: atmel: do not enable IRQs prematurely (git-fixes). - serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes). - serial: fsl_lpuart: Fix comment typo (git-fixes). - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes). - serial: lantiq: add missing interrupt ack (git-fixes). - serial: qcom-geni: fix console shutdown hang (git-fixes). - serial: qcom-geni: fix enabling deactivated interrupt (git-fixes). - serial: sc16is7xx: setup GPIO controller later in probe (git-fixes). - serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes). - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes). - sfc: Change VF mac via PF as first preference if available (git-fixes). - sfc: Fix module EEPROM reporting for QSFP modules (git-fixes). - sfc: Fix use-after-free due to selftest_work (git-fixes). - sfc: correctly advertise tunneled IPv6 segmentation (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: ef10: do not overwrite offload features at NIC reset (git-fixes). - sfc: fix TX channel offset when using legacy interrupts (git-fixes). - sfc: fix considering that all channels have TX queues (git-fixes). - sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes). - sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes). - sfc: include vport_id in filter spec hash and equal() (git-fixes). - signal handling: do not use BUG_ON() for debugging (bsc#1210439). - signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861). - signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes). - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes). - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes). - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816). - signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816). - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816). - signal: Implement force_fatal_sig (git-fixes). - smb3.1.1: add new tree connect ShareFlags (bsc#1193629). - smb3: Add missing locks to protect deferred close file list (git-fixes). - smb3: Close all deferred handles of inode in case of handle lease break (bsc#1193629). - smb3: Close deferred file handles in case of handle lease break (bsc#1193629). - smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629). - smb3: display debug information better for encryption (bsc#1193629). - smb3: drop reference to cfile before sending oplock break (bsc#1193629). - smb3: fix problem remounting a share after shutdown (bsc#1193629). - smb3: fix unusable share after force unmount failure (bsc#1193629). - smb3: force unmount was failing to close deferred close files (bsc#1193629). - smb3: improve parallel reads of large files (bsc#1193629). - smb3: lower default deferred close timeout to address perf regression (bsc#1193629). - smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629). - smb3: move some common open context structs to smbfs_common (bsc#1193629). - soc/fsl/qe: fix usb.c build errors (git-fixes). - soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 (git-fixes). - soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes). - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes). - soundwire: cadence: Do not overflow the command FIFOs (git-fixes). - soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes). - soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes). - soundwire: qcom: fix storing port config out-of-bounds (git-fixes). - soundwire: qcom: gracefully handle too many ports in DT (git-fixes). - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes). - spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes). - spi: cadence-quadspi: fix suspend-resume implementations (git-fixes). - spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes). - spi: dw: Round of n_bytes to power of 2 (git-fixes). - spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes). - spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes). - spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes). - spi: lpspi: disable lpspi module irq in DMA mode (git-fixes). - spi: qup: Do not skip cleanup in remove's error path (git-fixes). - spi: qup: Request DMA before enabling clocks (git-fixes). - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes). - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (git-fixes). - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - spi: spidev: remove debug messages that access spidev->spi without locking (git-fixes). - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes). - spi: tegra210-quad: Fix combined sequence (bsc#1212584) - spi: tegra210-quad: Fix iterator outside loop (git-fixes). - spi: tegra210-quad: Fix validate combined sequence (git-fixes). - spi: tegra210-quad: Multi-cs support (bsc#1212584) - squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes). - staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes). - staging: iio: resolver: ads1210: fix config mode (git-fixes). - staging: mt7621-dts: change palmbus address to lower case (git-fixes). - staging: mt7621-dts: change some node hex addresses to lower case (git-fixes). - staging: octeon: delete my name from TODO contact (git-fixes). - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes). - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (git-fixes). - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (git-fixes). - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes). - stat: fix inconsistency between struct stat and struct compat_stat (git-fixes). - struct ci_hdrc: hide new member at end (git-fixes). - struct dwc3: mask new member (git-fixes). - struct uvc_device move flush_status new member to end (git-fixes). - sunrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes). - sunrpc: Clean up svc_deferred_class trace events (git-fixes). - sunrpc: Do not dereference xprt->snd_task if it's a cookie (git-fixes). - sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes). - sunrpc: Fix a server shutdown leak (git-fixes). - sunrpc: Fix missing release socket in rpc_sockname() (git-fixes). - sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes). - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes). - sunrpc: Fix socket waits for write buffer space (git-fixes). - sunrpc: Return true/false (not 1/0) from bool functions (git-fixes). - sunrpc: Update trace flags (git-fixes). - sunrpc: Use BIT() macro in rpc_show_xprt_state() (git-fixes). - sunrpc: ensure the matching upcall is in-flight upon downcall (git-fixes). - sunrpc: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775). - sunrpc: only free unix grouplist after RCU settles (git-fixes). - swim3: add missing major.h include (git-fixes). - swiotlb: Free tbl memory in swiotlb_exit() (jsc#PED-3259). - swiotlb: add a SWIOTLB_ANY flag to lift the low memory restriction (PED-3259). - swiotlb: avoid potential left shift overflow (PED-3259). - swiotlb: clean up some coding style and minor issues (PED-3259). - swiotlb: consolidate rounding up default_nslabs (PED-3259). - swiotlb: do not panic when the swiotlb buffer can't be allocated (PED-3259). - swiotlb: ensure a segment does not cross the area boundary (PED-3259). - swiotlb: fail map correctly with failed io_tlb_default_mem (PED-3259). - swiotlb: fix a typo (PED-3259). - swiotlb: fix passing local variable to debugfs_create_ulong() (PED-3259). - swiotlb: fix setting ->force_bounce (PED-3259). - swiotlb: fix use after free on error handling path (PED-3259). - swiotlb: make swiotlb_exit a no-op if SWIOTLB_FORCE is set (PED-3259). - swiotlb: make the swiotlb_init interface more useful (PED-3259). - swiotlb: merge swiotlb-xen initialization into swiotlb (jsc#PED-3259). - swiotlb: panic if nslabs is too small (PED-3259). - swiotlb: pass a gfp_mask argument to swiotlb_init_late (PED-3259). - swiotlb: provide swiotlb_init variants that remap the buffer (PED-3259). - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes). - swiotlb: remove a useless return in swiotlb_init (PED-3259). - swiotlb: remove swiotlb_init_with_tbl and swiotlb_init_late_with_tbl (PED-3259). - swiotlb: remove unused fields in io_tlb_mem (PED-3259). - swiotlb: rename swiotlb_late_init_with_default_size (PED-3259). - swiotlb: simplify debugfs setup (jsc#PED-3259). - swiotlb: simplify swiotlb_max_segment (PED-3259). - swiotlb: split up the global swiotlb lock (PED-3259). - swiotlb: use the right nslabs value in swiotlb_init_remap (PED-3259). - swiotlb: use the right nslabs-derived sizes in swiotlb_init_late (PED-3259). - sysctl: add a new register_sysctl_init() interface (bsc#1207328). - task_work: Decouple TIF_NOTIFY_SIGNAL and task_work (git-fixes). - task_work: Introduce task_work_pending (git-fixes). - test_firmware: Use kstrtobool() instead of strtobool() (git-fixes). - test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes). - test_firmware: prevent race conditions by a correct implementation of locking (git-fixes). - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes). - thermal/core: Remove duplicate information when an error occurs (git-fixes). - thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes). - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes). - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes). - thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes). - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes). - thermal/drivers/tsens: fix slope values for msm8939 (git-fixes). - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes). - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes). - thermal: intel: Fix unsigned comparison with less than zero (git-fixes). - thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes). - thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes). - thermal: intel: quark_dts: fix error pointer dereference (git-fixes). - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes). - thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Disable interrupt auto clear for rings (git-fixes). - thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165). - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes). - thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes). - thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes). - thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes). - timers: Prevent union confusion from unexpected (git-fixes) - tls: Skip tls_append_frag on zero copy size (git-fixes). - tools/iio/iio_utils:fix memory leak (git-fixes). - tools/virtio: compile with -pthread (git-fixes). - tools/virtio: fix the vringh test for virtio ring changes (git-fixes). - tools/virtio: fix virtio_test execution (git-fixes). - tools/virtio: initialize spinlocks in vring_test.c (git-fixes). - tools: bpftool: Remove invalid \' json escape (git-fixes). - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes). - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes). - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes). - tpm, tpm_tis: Request threaded interrupt handler (git-fixes). - tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes). - tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes). - trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes). - trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace_events_hist: add check for return value of 'create_hist_field' (git-fixes). - tracing/fprobe: Fix to check whether fprobe is registered correctly (git-fixes). - tracing/hist: Fix issue of losting command info in error_log (git-fixes). - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes). - tracing/hist: Fix wrong return value in parse_action_params() (git-fixes). - tracing/histograms: Allow variables to have some modifiers (git-fixes). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes). - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes). - tracing/probes: Handle system names with hyphens (git-fixes). - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes). - tracing: Add '__rel_loc' using trace event macros (git-fixes). - tracing: Add DYNAMIC flag for dynamic events (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - tracing: Add trace_array_puts() to write into instance (git-fixes). - tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes). - tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing: Avoid adding tracer option before update_tracer_options (git-fixes). - tracing: Check field value in hist_field_name() (git-fixes). - tracing: Do not let histogram values have some modifiers (git-fixes). - tracing: Do not use out-of-sync va_list in event printing (git-fixes). - tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes). - tracing: Fix a kmemleak false positive in tracing_map (git-fixes). - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes). - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes). - tracing: Fix issue of missing one synthetic field (git-fixes). - tracing: Fix mismatched comment in __string_len (git-fixes). - tracing: Fix permissions for the buffer_percent file (git-fixes). - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes). - tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes). - tracing: Fix race where histograms can be called before the event (git-fixes). - tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes). - tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes). - tracing: Fix warning on variable 'struct trace_array' (git-fixes). - tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes). - tracing: Free error logs of tracing instances (git-fixes). - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes). - tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350). - tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes). - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes). - tracing: Have type enum modifications copy the strings (git-fixes). - tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes). - tracing: Make splice_read available again (git-fixes). - tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes). - tracing: Make tp_printk work on syscall tracepoints (git-fixes). - tracing: Make tracepoint lockdep check actually test something (git-fixes). - tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350). - tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes). - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes). - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes). - tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes). - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes). - tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes). - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes). - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes). - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes). - tty: serial: imx: Handle RS485 DE signal active high (git-fixes). - tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes). - tty: serial: imx: fix rs485 rx after tx (git-fixes). - tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes). - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes). - tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes). - tun: annotate access to queue->trans_start (jsc#PED-370). - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes). - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - ubi: ensure that VID header offset + VID header size &lt;= alloc, size (bsc#1210584). - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328). - udf: Avoid double brelse() in udf_rename() (bsc#1213032). - udf: Check consistency of Space Bitmap Descriptor (bsc#1210771). - udf: Define EFSCORRUPTED error code (bsc#1213038). - udf: Detect system inodes linked into directory hierarchy (bsc#1213114). - udf: Discard preallocation before extending file with a hole (bsc#1213036). - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035). - udf: Do not bother merging very long extents (bsc#1213040). - udf: Do not update file length for failed writes to inline files (bsc#1213041). - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649). - udf: Fix error handling in udf_new_inode() (bsc#1213112). - udf: Fix extending file within last block (bsc#1213037). - udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034). - udf: Preserve link count of system files (bsc#1213113). - udf: Support splicing to file (bsc#1210770). - udf: Truncate added extents on failed expansion (bsc#1213039). - update internal module version number for cifs.ko (bsc#1193629). - usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes). - usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes). - usb: cdns3: Fix issue with using incorrect PCI device function (git-fixes). - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes). - usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes). - usb: cdnsp: Fixes issue with redundant Status Stage (git-fixes). - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes). - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes). - usb: chipidea: core: fix possible concurrent when switch role (git-fixes). - usb: chipidea: fix memory leak with using debugfs_lookup() (git-fixes). - usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes). - usb: chipidea: imx: avoid unnecessary probe defer (git-fixes). - usb: core: Add routines for endpoint checks in old drivers (git-fixes). - usb: core: Do not hold device lock while reading the 'descriptors' sysfs file (git-fixes). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes). - usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes). - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes). - usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes). - usb: dwc3: Align DWC3_EP_* flag macros (git-fixes). - usb: dwc3: Fix a repeated word checkpatch warning (git-fixes). - usb: dwc3: Fix a typo in field name (git-fixes). - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes). - usb: dwc3: core: Host wake up support from system suspend (git-fixes). - usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes). - usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes). - usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes). - usb: dwc3: fix memory leak with using debugfs_lookup() (git-fixes). - usb: dwc3: fix runtime pm imbalance on probe errors (git-fixes). - usb: dwc3: fix runtime pm imbalance on unbind (git-fixes). - usb: dwc3: fix use-after-free on core driver unbind (git-fixes). - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes). - usb: dwc3: gadget: Change condition for processing suspend event (git-fixes). - usb: dwc3: gadget: Delay issuing End Transfer (git-fixes). - usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes). - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes). - usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes). - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes). - usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes). - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes). - usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes). - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes). - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes). - usb: dwc3: qcom: Fix potential memory leak (git-fixes). - usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes). - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes). - usb: dwc3: qcom: clean up icc init (git-fixes). - usb: dwc3: qcom: clean up suspend callbacks (git-fixes). - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes). - usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes). - usb: dwc3: qcom: fix gadget-only builds (git-fixes). - usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes). - usb: dwc3: qcom: fix wakeup implementation (git-fixes). - usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes). - usb: dwc3: qcom: suppress unused-variable warning (git-fixes). - usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes). - usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes). - usb: ene_usb6250: Allocate enough memory for full object (git-fixes). - usb: fix memory leak with using debugfs_lookup() (git-fixes). - usb: fotg210: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes). - usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes). - usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes). - usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes). - usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes). - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes). - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes). - usb: gadget: f_hid: fix refcount leak on error path (git-fixes). - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes). - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes). - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes). - usb: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes). - usb: gadget: u_audio: do not let userspace block driver unbind (git-fixes). - usb: gadget: u_ether: Fix host MAC address case (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes). - usb: gadget: udc: do not clear gadget driver.bus (git-fixes). - usb: gadget: udc: fix NULL dereference in remove() (git-fixes). - usb: hide unused usbfs_notify_suspend/resume functions (git-fixes). - usb: host: xhci-rcar: remove leftover quirk handling (git-fixes). - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes). - usb: isp116x: fix memory leak with using debugfs_lookup() (git-fixes). - usb: isp1362: fix memory leak with using debugfs_lookup() (git-fixes). - usb: max-3421: Fix setting of I/O pins (git-fixes). - usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes). - usb: musb: Add and use inline function musb_otg_state_string (git-fixes). - usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes). - usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes). - usb: musb: remove schedule work called after flush (git-fixes). - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes). - usb: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes). - usb: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes). - usb: serial: option: add Quectel EC200U modem (git-fixes). - usb: serial: option: add Quectel EM05-G (CS) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (GR) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (RS) modem (git-fixes). - usb: serial: option: add Quectel EM05CN (SG) modem (git-fixes). - usb: serial: option: add Quectel EM05CN modem (git-fixes). - usb: serial: option: add Quectel EM061KGL series (git-fixes). - usb: serial: option: add Quectel RM500U-CN modem (git-fixes). - usb: serial: option: add Telit FE990 compositions (git-fixes). - usb: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes). - usb: serial: option: add support for VW/Skoda 'Carstick LTE' (git-fixes). - usb: sisusbvga: Add endpoint checks (git-fixes). - usb: sl811: fix memory leak with using debugfs_lookup() (git-fixes). - usb: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes). - usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes). - usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes). - usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes). - usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes). - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix multiple times discover svids error (git-fixes). - usb: typec: tcpm: fix warning when handle discover_identity message (git-fixes). - usb: typec: ucsi: Do not attempt to resume the ports before they exist (git-fixes). - usb: typec: ucsi: Do not warn on probe deferral (git-fixes). - usb: typec: ucsi: Fix command cancellation (git-fixes). - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes). - usb: ucsi: Fix ucsi->connector race (git-fixes). - usb: ucsi_acpi: Increase the command completion timeout (git-fixes). - usb: uhci: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes). - usb: uhci: fix memory leak with using debugfs_lookup() (git-fixes). - usb: usbfs: Enforce page requirements for mmap (git-fixes). - usb: usbfs: Use consistent mmap functions (git-fixes). - usb: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes). - usb: uvc: Enumerate valid values for color matching (git-fixes). - usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes). - usb: xhci: tegra: fix sleep in atomic call (git-fixes). - usrmerge: Adjust module path in the kernel sources (bsc#1212835). With the module path adjustment applied as source patch only ALP/Tumbleweed kernel built on SLE/Leap needs the path changed back to non-usrmerged. - usrmerge: Compatibility with earlier rpm (boo#1211796) - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (jsc#PED-1549). - vDPA: check virtio device features to detect MQ (jsc#PED-1549). - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (jsc#PED-1549). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: modify vcs_size() handling in vcs_read() (git-fixes). - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes). - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes). - vdpa/ifcvf: fix the calculation of queuepair (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#SLE-19253). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#PED-1549). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253). - vdpa/mlx5: Fix rule forwarding VLAN to TIR (jsc#PED-1549). - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253). - vdpa/mlx5: Fix wrong mac address deletion (jsc#PED-1549). - vdpa/mlx5: Initialize CVQ iotlb spinlock (jsc#PED-1549). - vdpa/mlx5: should not activate virtq object when suspended (jsc#PED-1549). - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (git-fixes). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#PED-1549). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253). - vdpa: Use BIT_ULL for bit operations (jsc#PED-1549). - vdpa: conditionally fill max max queue pair for stats (jsc#PED-1549). - vdpa: fix use-after-free on vp_vdpa_remove (git-fixes). - vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes). - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes). - vduse: Fix NULL pointer dereference on sysfs access (jsc#PED-1549). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (jsc#PED-1549). - vduse: avoid empty string for dev name (jsc#PED-1549). - vduse: check that offset is within bounds in get_config() (jsc#PED-1549). - vduse: fix memory corruption in vduse_dev_ioctl() (jsc#PED-1549). - vduse: prevent uninitialized memory accesses (jsc#PED-1549). - vfio/type1: prevent underflow of locked_vm via exec() (git-fixes). - vfio/type1: restore locked_vm (git-fixes). - vfio/type1: track locked_vm per dma (git-fixes). - vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642). - vfs: filename_create(): fix incorrect intent (bsc#1197534). - vfs: make sync_filesystem return errors from ->sync_fs (git-fixes). - vhost-vdpa: fix an iotlb memory leak (jsc#PED-1549). - vhost-vdpa: free iommu domain after last use during cleanup (jsc#PED-1549). - vhost/net: Clear the pending messages when the backend is removed (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (jsc#PED-1549). - vhost_vdpa: fix unmap process in no-batch mode (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253). - virt/coco/sev-guest: Add throttling awareness (bsc#1209927). - virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927). - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927). - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927). - virt/coco/sev-guest: Do some code style cleanups (bsc#1209927). - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927). - virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927). - virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449). - virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449). - virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449). - virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927). - virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449). - virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449). - virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449). - virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes). - virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes). - virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes). - virtio_net: split free_unused_bufs() (git-fixes). - virtio_net: suppress cpu stall when free_unused_bufs (git-fixes). - virtio_pci: modify ENOENT to EINVAL (git-fixes). - virtio_ring: do not update event idx on get_buf (git-fixes). - vmci: check context->notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes). - vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes). - vmxnet3: move rss code block under eop descriptor (bsc#1208212). - vmxnet3: use gro callback when UPT is enabled (bsc#1209739). - vp_vdpa: fix the crash in hot unplug with vp_vdpa (git-fixes). - w1: fix loop in w1_fini() (git-fixes). - w1: w1_therm: fix locking behavior in convert_t (git-fixes). - wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes) - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617). - watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes). - watchdog: allow building BCM7038_WDT for BCM4908 (bsc#1208619). - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes). - watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497). - watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497). - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes). - watchdog: ixp4xx: Implement restart (bsc#1208619). - watchdog: ixp4xx: Rewrite driver to use core (bsc#1208619). - watchdog: ixp4xx_wdt: Fix address space warning (bsc#1208619). - watchdog: menz069_wdt: fix watchdog initialisation (git-fixes). - watchdog: orion_wdt: support pretimeout on Armada-XP (bsc#1208619). - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes). - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes). - watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes). - wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes). - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes). - wifi: ath11k: allow system suspend to survive ath11k (git-fixes). - wifi: ath11k: fix SAC bug on peer addition with sta band migration (git-fixes). - wifi: ath11k: fix deinitialization of firmware resources (git-fixes). - wifi: ath11k: fix writing to unintended memory region (git-fixes). - wifi: ath11k: reduce the MHI timeout to 20s (bsc#1207948). - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes). - wifi: ath6kl: minor fix for allocation size (git-fixes). - wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes). - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes). - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes). - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes). - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: convert msecs to jiffies where needed (git-fixes). - wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes). - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes). - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes). - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes). - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes). - wifi: ath9k: use proper statements in conditionals (git-fixes). - wifi: ath: Silence memcpy run-time false positive warning (git-fixes). - wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes). - wifi: b43: fix incorrect __packed annotation (git-fixes). - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes). - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes). - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes). - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes). - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes). - wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes). - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes). - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes). - wifi: cfg80211: Fix use after free for wext (git-fixes). - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (git-fixes). - wifi: cfg80211: fix locking in regulatory disconnect (git-fixes). - wifi: cfg80211: fix locking in sched scan stop work (git-fixes). - wifi: cfg80211: rewrite merging of inherited elements (git-fixes). - wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes). - wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes). - wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes). - wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes). - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes). - wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes). - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes). - wifi: iwlwifi: fw: fix DBGI dump (git-fixes). - wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes). - wifi: iwlwifi: fw: move memset before early return (git-fixes). - wifi: iwlwifi: make the loop for card preparation effective (git-fixes). - wifi: iwlwifi: mvm: check firmware response size (git-fixes). - wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes). - wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes). - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes). - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes). - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (git-fixes). - wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes). - wifi: iwlwifi: mvm: initialize seq variable (git-fixes). - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes). - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes). - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes). - wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes). - wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes). - wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes). - wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes). - wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes). - wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (bsc#1209980). - wifi: mac80211: adjust scan cancel comment/check (git-fixes). - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes). - wifi: mac80211: fix min center freq offset tracing (git-fixes). - wifi: mac80211: fix qos on mesh interfaces (git-fixes). - wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes). - wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes). - wifi: mac80211: simplify chanctx allocation (git-fixes). - wifi: mt7601u: fix an integer underflow (git-fixes). - wifi: mt76: add flexible polling wait-interval support (git-fixes). - wifi: mt76: add memory barrier to SDIO queue kick (bsc#1209980). - wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes). - wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1209980). - wifi: mt76: fix 6GHz high channel not be scanned (git-fixes). - wifi: mt76: fix receiving LLC packets on mt7615/mt7915 (bsc#1209980). - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes). - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes). - wifi: mt76: mt7915: add missing of_node_put() (bsc#1209980). - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work (bsc#1209980). - wifi: mt76: mt7915: check return value before accessing free_block_num (bsc#1209980). - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() (bsc#1209980). - wifi: mt76: mt7915: expose device tree match table (git-fixes). - wifi: mt76: mt7915: fix mcs value in ht mode (bsc#1209980). - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit (git-fixes). - wifi: mt76: mt7915: fix mt7915_mac_set_timing() (bsc#1209980). - wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup (bsc#1209980). - wifi: mt76: mt7915: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() (bsc#1209980). - wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` (git-fixes). - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes). - wifi: mt76: mt7921e: fix crash in chip reset fail (bsc#1209980). - wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix rmmod crash in driver reload test (bsc#1209980). - wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes). - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (git-fixes). - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume (bsc#1209980). - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (bsc#1209980). - wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes). - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes). - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes). - wifi: mwifiex: mark OF related data as maybe unused (git-fixes). - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes). - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes). - wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes). - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes). - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes). - wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes). - wifi: rt2x00: Fix memory leak when handling surveys (git-fixes). - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes). - wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes). - wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes). - wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes). - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes). - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes). - wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes). - wifi: rtw89: Add missing check for alloc_workqueue (git-fixes). - wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes). - wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes). - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes). - wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wireguard: ratelimiter: use hrtimer in selftest (git-fixes) - workqueue: Fix hung time report of worker pools (bsc#1211044). - workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044). - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044). - workqueue: Warn when a new worker could not be created (bsc#1211044). - workqueue: Warn when a rescuer could not be created (bsc#1211044). - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769). - writeback: avoid use-after-free after removing device (bsc#1207638). - writeback: fix call of incorrect macro (bsc#1213024). - writeback: fix dereferencing NULL mapping->host on writeback_page_template (git-fixes). - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes). - x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes). - x86/ACPI/boot: Use FADT version to check support for online capable (git-fixes). - x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes). - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes). - x86/MCE/AMD: Use an u64 for bank_map (git-fixes). - x86/PAT: Have pat_enabled() properly reflect state when running on Xen (git-fixes). - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes). - x86/acpi/boot: Correct acpi_is_processor_usable() check (git-fixes). - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (git-fixes). - x86/alternative: Make debug-alternative selective (bsc#1206578). - x86/alternative: Report missing return thunk details (git-fixes). - x86/alternative: Support relocations in alternatives (bsc#1206578). - x86/amd: Use IBPB for firmware calls (git-fixes). - x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848). - x86/asm: Fix an assembler warning with current binutils (git-fixes). - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes). - x86/boot: Skip realmode init code when running as Xen PV guest (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes). - x86/bugs: Add 'unknown' reporting for MMIO Stale Data (git-fixes). - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes). - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes). - x86/bugs: Warn when 'ibrs' mitigation is selected on Enhanced IBRS parts (git-fixes). - x86/build: Avoid relocation information in final vmlinux (bsc#1187829). - x86/cpu: Add CPU model numbers for Meteor Lake (git fixes). - x86/cpu: Add Raptor Lake to Intel family (git fixes). - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes). - x86/cpu: Add new Raptor Lake CPU model number (git fixes). - x86/cpu: Add several Intel server CPU model numbers (git fixes). - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - x86/cpufeatures: Introduce x2AVIC CPUID bit (bsc#1208619). - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes). - x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes). - x86/entry: Avoid very early RET (git-fixes). - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes). - x86/entry: Do not call error_entry() for XENPV (git-fixes). - x86/entry: Move CLD to the start of the idtentry macro (git-fixes). - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes). - x86/entry: Switch the stack after error_entry() returns (git-fixes). - x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu: Cache xfeature flags from CPUID (git-fixes). - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes). - x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes). - x86/fpu: Mark init functions __init (bsc#1212448). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448). - x86/fpu: Prevent FPU state corruption (git-fixes). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes). - x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes). - x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes). - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes). - x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes). - x86/init: Initialize signal frame size late (bsc#1212448). - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes). - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes). - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes). - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes). - x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes). - x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes). - x86/microcode/AMD: Fix mixed steppings support (git-fixes). - x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes). - x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes). - x86/microcode: Add explicit CPU vendor dependency (git-fixes). - x86/microcode: Adjust late loading result reporting message (git-fixes). - x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes). - x86/microcode: Print previous version of microcode after reload (git-fixes). - x86/microcode: Rip out the OLD_INTERFACE (git-fixes). - x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes). - x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes). - x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Initialize text poking earlier (bsc#1212448). - x86/mm: Use mm_alloc() in poking_init() (bsc#1212448). - x86/mm: Use proper mask when setting PUD mapping (git-fixes). - x86/mm: fix poking_init() for Xen PV guests (git-fixes). - x86/msi: Fix msi message data shadow struct (git-fixes). - x86/msr: Add AMD CPPC MSR definitions (bsc#1212445). - x86/msr: Remove .fixup usage (git-fixes). - x86/nospec: Unwreck the RSB stuffing (git-fixes). - x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes). - x86/pat: Fix x86_has_pat_wp() (git-fixes). - x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes). - x86/perf/zhaoxin: Add stepping check for ZXC (git fixes). - x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes). - x86/perf: Default set FREEZE_ON_SMI for all (git fixes). - x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes). - x86/resctrl: Fix min_cbm_bits for AMD (git-fixes). - x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes). - x86/sgx: Fix free page accounting (git-fixes). - x86/sgx: Fix race between reclaimer and page fault handler (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/signal: Fix the value returned by strict_sas_size() (git-fixes). - x86/speculation/mmio: Print SMT warning (git-fixes). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes). - x86/static_call: Serialize __static_call_fixup() properly (git-fixes). - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes). - x86/topology: Fix duplicated core ID within a package (git-fixes). - x86/topology: Fix multiple packages shown on a single-package system (git-fixes). - x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes). - x86/tsx: Add a feature bit for TSX control MSR support (git-fixes). - x86/tsx: Disable TSX development mode at boot (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes). - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes). - x86/xen: fix secondary processor fpu initialization (bsc#1212869). - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Fix return value of __setup handlers (git-fixes). - x86: Handle idle=nomwait cmdline properly for x86_idle (bsc#1208619). - x86: Remove vendor checks from prefer_mwait_c1_over_halt (bsc#1208619). - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (git-fixes). - x86: centralize setting SWIOTLB_FORCE when guest memory encryption is enabled (jsc#PED-3259). - x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (git-fixes). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: remove cruft from &lt;asm/dma-mapping.h> (PED-3259). - xen-netfront: Fix NULL sring after live migration (git-fixes). - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes). - xen/arm: Fix race in RB-tree based P2M accounting (git-fixes) - xen/netback: do not do grant copy across page boundary (git-fixes). - xen/netback: do some code cleanup (git-fixes). - xen/netback: fix build warning (git-fixes). - xen/netback: use same error messages for same errors (git-fixes). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes). - xen/platform-pci: add missing free_irq() in error path (git-fixes). - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: convert ptag flags to unsigned (git-fixes). - xfs: do not assert fail on perag references on teardown (git-fixes). - xfs: do not leak btree cursor when insrec fails after a split (git-fixes). - xfs: estimate post-merge refcounts correctly (bsc#1208183). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix rm_offset flag handling in rmap keys (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: hoist refcount record merge predicates (bsc#1208183). - xfs: initialize the check_owner object fully (git-fixes). - xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: remove xfs_setattr_time() declaration (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes). - xfs: zero inode fork buffer at allocation (git-fixes). - xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci: Fix incorrect tracking of free space on transfer rings (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Free the command allocated for setting LPM if we return early (git-fixes). - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes). - xhci: fix debugfs register accesses while suspended (git-fixes). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes). - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes). - xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes). - zram: do not lookup algorithm in backends table (git-fixes). Important SUSE bug 1065729 SUSE bug 1109158 SUSE bug 1142685 SUSE bug 1152472 SUSE bug 1152489 SUSE bug 1155798 SUSE bug 1160435 SUSE bug 1166486 SUSE bug 1172073 SUSE bug 1174777 SUSE bug 1177529 SUSE bug 1186449 SUSE bug 1187829 SUSE bug 1189998 SUSE bug 1189999 SUSE bug 1191731 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1195175 SUSE bug 1195655 SUSE bug 1195921 SUSE bug 1196058 SUSE bug 1197534 SUSE bug 1197617 SUSE bug 1198101 SUSE bug 1198400 SUSE bug 1198438 SUSE bug 1198835 SUSE bug 1199304 SUSE bug 1199701 SUSE bug 1200054 SUSE bug 1202353 SUSE bug 1202633 SUSE bug 1203039 SUSE bug 1203200 SUSE bug 1203325 SUSE bug 1203331 SUSE bug 1203332 SUSE bug 1203693 SUSE bug 1203906 SUSE bug 1204356 SUSE bug 1204363 SUSE bug 1204662 SUSE bug 1204993 SUSE bug 1205153 SUSE bug 1205191 SUSE bug 1205205 SUSE bug 1205544 SUSE bug 1205650 SUSE bug 1205756 SUSE bug 1205758 SUSE bug 1205760 SUSE bug 1205762 SUSE bug 1205803 SUSE bug 1205846 SUSE bug 1206024 SUSE bug 1206036 SUSE bug 1206056 SUSE bug 1206057 SUSE bug 1206103 SUSE bug 1206224 SUSE bug 1206232 SUSE bug 1206340 SUSE bug 1206459 SUSE bug 1206492 SUSE bug 1206493 SUSE bug 1206552 SUSE bug 1206578 SUSE bug 1206640 SUSE bug 1206649 SUSE bug 1206677 SUSE bug 1206824 SUSE bug 1206843 SUSE bug 1206876 SUSE bug 1206877 SUSE bug 1206878 SUSE bug 1206880 SUSE bug 1206881 SUSE bug 1206882 SUSE bug 1206883 SUSE bug 1206884 SUSE bug 1206885 SUSE bug 1206886 SUSE bug 1206887 SUSE bug 1206888 SUSE bug 1206889 SUSE bug 1206890 SUSE bug 1206891 SUSE bug 1206893 SUSE bug 1206894 SUSE bug 1206935 SUSE bug 1206992 SUSE bug 1207034 SUSE bug 1207036 SUSE bug 1207050 SUSE bug 1207051 SUSE bug 1207088 SUSE bug 1207125 SUSE bug 1207149 SUSE bug 1207158 SUSE bug 1207168 SUSE bug 1207185 SUSE bug 1207270 SUSE bug 1207315 SUSE bug 1207328 SUSE bug 1207497 SUSE bug 1207500 SUSE bug 1207501 SUSE bug 1207506 SUSE bug 1207507 SUSE bug 1207521 SUSE bug 1207553 SUSE bug 1207560 SUSE bug 1207574 SUSE bug 1207588 SUSE bug 1207589 SUSE bug 1207590 SUSE bug 1207591 SUSE bug 1207592 SUSE bug 1207593 SUSE bug 1207594 SUSE bug 1207602 SUSE bug 1207603 SUSE bug 1207605 SUSE bug 1207606 SUSE bug 1207607 SUSE bug 1207608 SUSE bug 1207609 SUSE bug 1207610 SUSE bug 1207611 SUSE bug 1207612 SUSE bug 1207613 SUSE bug 1207614 SUSE bug 1207615 SUSE bug 1207616 SUSE bug 1207617 SUSE bug 1207618 SUSE bug 1207619 SUSE bug 1207620 SUSE bug 1207621 SUSE bug 1207622 SUSE bug 1207623 SUSE bug 1207624 SUSE bug 1207625 SUSE bug 1207626 SUSE bug 1207627 SUSE bug 1207628 SUSE bug 1207629 SUSE bug 1207630 SUSE bug 1207631 SUSE bug 1207632 SUSE bug 1207633 SUSE bug 1207634 SUSE bug 1207635 SUSE bug 1207636 SUSE bug 1207637 SUSE bug 1207638 SUSE bug 1207639 SUSE bug 1207640 SUSE bug 1207641 SUSE bug 1207642 SUSE bug 1207643 SUSE bug 1207644 SUSE bug 1207645 SUSE bug 1207646 SUSE bug 1207647 SUSE bug 1207648 SUSE bug 1207649 SUSE bug 1207650 SUSE bug 1207651 SUSE bug 1207652 SUSE bug 1207653 SUSE bug 1207734 SUSE bug 1207768 SUSE bug 1207769 SUSE bug 1207770 SUSE bug 1207771 SUSE bug 1207773 SUSE bug 1207795 SUSE bug 1207827 SUSE bug 1207842 SUSE bug 1207845 SUSE bug 1207875 SUSE bug 1207878 SUSE bug 1207933 SUSE bug 1207935 SUSE bug 1207948 SUSE bug 1208050 SUSE bug 1208076 SUSE bug 1208081 SUSE bug 1208105 SUSE bug 1208107 SUSE bug 1208128 SUSE bug 1208130 SUSE bug 1208149 SUSE bug 1208153 SUSE bug 1208183 SUSE bug 1208212 SUSE bug 1208219 SUSE bug 1208290 SUSE bug 1208368 SUSE bug 1208410 SUSE bug 1208420 SUSE bug 1208428 SUSE bug 1208429 SUSE bug 1208449 SUSE bug 1208534 SUSE bug 1208541 SUSE bug 1208542 SUSE bug 1208570 SUSE bug 1208588 SUSE bug 1208598 SUSE bug 1208599 SUSE bug 1208600 SUSE bug 1208601 SUSE bug 1208602 SUSE bug 1208604 SUSE bug 1208605 SUSE bug 1208607 SUSE bug 1208619 SUSE bug 1208628 SUSE bug 1208700 SUSE bug 1208741 SUSE bug 1208758 SUSE bug 1208759 SUSE bug 1208776 SUSE bug 1208777 SUSE bug 1208784 SUSE bug 1208787 SUSE bug 1208815 SUSE bug 1208816 SUSE bug 1208829 SUSE bug 1208837 SUSE bug 1208843 SUSE bug 1208845 SUSE bug 1208848 SUSE bug 1208864 SUSE bug 1208902 SUSE bug 1208948 SUSE bug 1208976 SUSE bug 1209008 SUSE bug 1209039 SUSE bug 1209052 SUSE bug 1209092 SUSE bug 1209159 SUSE bug 1209256 SUSE bug 1209258 SUSE bug 1209262 SUSE bug 1209287 SUSE bug 1209288 SUSE bug 1209290 SUSE bug 1209291 SUSE bug 1209292 SUSE bug 1209366 SUSE bug 1209367 SUSE bug 1209436 SUSE bug 1209457 SUSE bug 1209504 SUSE bug 1209532 SUSE bug 1209556 SUSE bug 1209600 SUSE bug 1209615 SUSE bug 1209635 SUSE bug 1209636 SUSE bug 1209637 SUSE bug 1209684 SUSE bug 1209687 SUSE bug 1209693 SUSE bug 1209739 SUSE bug 1209779 SUSE bug 1209780 SUSE bug 1209788 SUSE bug 1209798 SUSE bug 1209799 SUSE bug 1209804 SUSE bug 1209805 SUSE bug 1209856 SUSE bug 1209871 SUSE bug 1209927 SUSE bug 1209980 SUSE bug 1209982 SUSE bug 1209999 SUSE bug 1210034 SUSE bug 1210050 SUSE bug 1210158 SUSE bug 1210165 SUSE bug 1210202 SUSE bug 1210203 SUSE bug 1210206 SUSE bug 1210216 SUSE bug 1210230 SUSE bug 1210294 SUSE bug 1210301 SUSE bug 1210329 SUSE bug 1210335 SUSE bug 1210336 SUSE bug 1210337 SUSE bug 1210409 SUSE bug 1210439 SUSE bug 1210449 SUSE bug 1210450 SUSE bug 1210453 SUSE bug 1210454 SUSE bug 1210498 SUSE bug 1210506 SUSE bug 1210533 SUSE bug 1210551 SUSE bug 1210565 SUSE bug 1210584 SUSE bug 1210629 SUSE bug 1210644 SUSE bug 1210647 SUSE bug 1210725 SUSE bug 1210741 SUSE bug 1210762 SUSE bug 1210763 SUSE bug 1210764 SUSE bug 1210765 SUSE bug 1210766 SUSE bug 1210767 SUSE bug 1210768 SUSE bug 1210769 SUSE bug 1210770 SUSE bug 1210771 SUSE bug 1210775 SUSE bug 1210783 SUSE bug 1210791 SUSE bug 1210793 SUSE bug 1210806 SUSE bug 1210816 SUSE bug 1210817 SUSE bug 1210827 SUSE bug 1210853 SUSE bug 1210940 SUSE bug 1210943 SUSE bug 1210947 SUSE bug 1210953 SUSE bug 1210986 SUSE bug 1211014 SUSE bug 1211025 SUSE bug 1211037 SUSE bug 1211043 SUSE bug 1211044 SUSE bug 1211089 SUSE bug 1211105 SUSE bug 1211113 SUSE bug 1211131 SUSE bug 1211205 SUSE bug 1211263 SUSE bug 1211280 SUSE bug 1211281 SUSE bug 1211299 SUSE bug 1211346 SUSE bug 1211387 SUSE bug 1211400 SUSE bug 1211410 SUSE bug 1211414 SUSE bug 1211449 SUSE bug 1211465 SUSE bug 1211519 SUSE bug 1211564 SUSE bug 1211590 SUSE bug 1211592 SUSE bug 1211593 SUSE bug 1211595 SUSE bug 1211654 SUSE bug 1211686 SUSE bug 1211687 SUSE bug 1211688 SUSE bug 1211689 SUSE bug 1211690 SUSE bug 1211691 SUSE bug 1211692 SUSE bug 1211693 SUSE bug 1211714 SUSE bug 1211794 SUSE bug 1211796 SUSE bug 1211804 SUSE bug 1211807 SUSE bug 1211808 SUSE bug 1211820 SUSE bug 1211836 SUSE bug 1211847 SUSE bug 1211852 SUSE bug 1211855 SUSE bug 1211960 SUSE bug 1212051 SUSE bug 1212129 SUSE bug 1212154 SUSE bug 1212155 SUSE bug 1212158 SUSE bug 1212265 SUSE bug 1212350 SUSE bug 1212445 SUSE bug 1212448 SUSE bug 1212456 SUSE bug 1212494 SUSE bug 1212495 SUSE bug 1212504 SUSE bug 1212513 SUSE bug 1212540 SUSE bug 1212556 SUSE bug 1212561 SUSE bug 1212563 SUSE bug 1212564 SUSE bug 1212584 SUSE bug 1212592 SUSE bug 1212603 SUSE bug 1212605 SUSE bug 1212606 SUSE bug 1212619 SUSE bug 1212685 SUSE bug 1212701 SUSE bug 1212741 SUSE bug 1212835 SUSE bug 1212838 SUSE bug 1212842 SUSE bug 1212848 SUSE bug 1212861 SUSE bug 1212869 SUSE bug 1212892 SUSE bug 1212961 SUSE bug 1213010 SUSE bug 1213011 SUSE bug 1213012 SUSE bug 1213013 SUSE bug 1213014 SUSE bug 1213015 SUSE bug 1213016 SUSE bug 1213017 SUSE bug 1213018 SUSE bug 1213019 SUSE bug 1213020 SUSE bug 1213021 SUSE bug 1213024 SUSE bug 1213025 SUSE bug 1213032 SUSE bug 1213034 SUSE bug 1213035 SUSE bug 1213036 SUSE bug 1213037 SUSE bug 1213038 SUSE bug 1213039 SUSE bug 1213040 SUSE bug 1213041 SUSE bug 1213087 SUSE bug 1213088 SUSE bug 1213089 SUSE bug 1213090 SUSE bug 1213092 SUSE bug 1213093 SUSE bug 1213094 SUSE bug 1213095 SUSE bug 1213096 SUSE bug 1213098 SUSE bug 1213099 SUSE bug 1213100 SUSE bug 1213102 SUSE bug 1213103 SUSE bug 1213104 SUSE bug 1213105 SUSE bug 1213106 SUSE bug 1213107 SUSE bug 1213108 SUSE bug 1213109 SUSE bug 1213110 SUSE bug 1213111 SUSE bug 1213112 SUSE bug 1213113 SUSE bug 1213114 SUSE bug 1213116 SUSE bug 1213134 CVE-2022-36280 CVE-2022-38096 CVE-2022-4269 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2022-4744 CVE-2023-0045 CVE-2023-0122 CVE-2023-0179 CVE-2023-0394 CVE-2023-0461 CVE-2023-0469 CVE-2023-0590 CVE-2023-0597 CVE-2023-1075 CVE-2023-1076 CVE-2023-1077 CVE-2023-1079 CVE-2023-1095 CVE-2023-1118 CVE-2023-1249 CVE-2023-1382 CVE-2023-1513 CVE-2023-1582 CVE-2023-1583 CVE-2023-1611 CVE-2023-1637 CVE-2023-1652 CVE-2023-1670 CVE-2023-1829 CVE-2023-1838 CVE-2023-1855 CVE-2023-1989 CVE-2023-1998 CVE-2023-2002 CVE-2023-21102 CVE-2023-21106 CVE-2023-2124 CVE-2023-2156 CVE-2023-2162 CVE-2023-2176 CVE-2023-2235 CVE-2023-2269 CVE-2023-22998 CVE-2023-23000 CVE-2023-23001 CVE-2023-23004 CVE-2023-23006 CVE-2023-2430 CVE-2023-2483 CVE-2023-25012 CVE-2023-2513 CVE-2023-26545 CVE-2023-28327 CVE-2023-28410 CVE-2023-28464 CVE-2023-28866 CVE-2023-3006 CVE-2023-30456 CVE-2023-30772 CVE-2023-3090 CVE-2023-31084 CVE-2023-3111 CVE-2023-3141 CVE-2023-31436 CVE-2023-3161 CVE-2023-3212 CVE-2023-3220 CVE-2023-32233 CVE-2023-33288 CVE-2023-3357 CVE-2023-3358 CVE-2023-3389 CVE-2023-33951 CVE-2023-33952 CVE-2023-35788 CVE-2023-35823 CVE-2023-35828 CVE-2023-35829 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-1_0_0 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-1_0_0 fixes the following issues: - CVE-2023-3446: Fixed DH_check() excessive time with over sized modulus (bsc#1213487). Moderate SUSE bug 1213487 CVE-2023-3446 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). The following non-security bugs were fixed: - Dropped patch that caused issues with k3s (bsc#1213705). - ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes). - ASoC: SOF: topology: Fix logic for copying tuples (git-fixes). - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes). - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes). - Bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes). - Bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes). - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - Bluetooth: fix use-bdaddr-property quirk (git-fixes). - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - Bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes). - Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758) - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525). - PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes) - Revert 'drm/i915: Disable DSB usage for now' (git-fixes). - USB: dwc2: Fix some error handling paths (git-fixes). - USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). - USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). - USB: typec: Fix fast_role_swap_current show function (git-fixes). - Update config and supported.conf files due to renaming. - acpi: Fix suspend with Xen PV (git-fixes). - adreno: Shutdown the GPU properly (git-fixes). - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes) - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes) - arm64: vdso: Pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - can: bcm: Fix UAF in bcm_proc_show() (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in DebugData (bsc#1193629). - cifs: print client_guid in DebugData (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: tegra194: Fix module loading (git-fixes). - devlink: fix kernel-doc notation warnings (git-fixes). - dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: Add Z8 allow states to z-state support list (git-fixes). - drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes). - drm/amd/display: Add minimum Z8 residency debug option (git-fixes). - drm/amd/display: Add missing WA and MCLK validation (git-fixes). - drm/amd/display: Change default Z8 watermark values (git-fixes). - drm/amd/display: Correct DML calculation to align HW formula (git-fixes). - drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes). - drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes). - drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes). - drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes). - drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes). - drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes). - drm/amd/display: Fix Z8 support configurations (git-fixes). - drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes). - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: Have Payload Properly Created After Resume (git-fixes). - drm/amd/display: Lowering min Z8 residency time (git-fixes). - drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: Refactor eDP PSR codes (git-fixes). - drm/amd/display: Remove FPU guards from the DML folder (git-fixes). - drm/amd/display: Remove optimization for VRR updates (git-fixes). - drm/amd/display: Remove stutter only configurations (git-fixes). - drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes). - drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes). - drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes). - drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes). - drm/amd/pm: resolve reboot exception for si oland (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (git-fixes). - drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (git-fixes). - drm/amd/pm: workaround for compute workload type on some skus (git-fixes). - drm/amd: Add a new helper for loading/validating microcode (git-fixes). - drm/amd: Do not allow s0ix on APUs older than Raven (git-fixes). - drm/amd: Load MES microcode during early_init (git-fixes). - drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes). - drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (git-fixes). - drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes). - drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes). - drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes). - drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes). - drm/amdgpu/mes11: enable reg active poll (git-fixes). - drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes (git-fixes). - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes). - drm/amdgpu: Do not set struct drm_driver.output_poll_changed (git-fixes). - drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes). - drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes). - drm/amdgpu: Fix sdma v4 sw fini error (git-fixes). - drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes). - drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs (git-fixes). - drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes). - drm/amdgpu: change reserved vram info print (git-fixes). - drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes). - drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes). - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes). - drm/amdgpu: refine get gpu clock counter method (git-fixes). - drm/amdgpu: remove deprecated MES version vars (git-fixes). - drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes). - drm/amdgpu: set gfx9 onwards APU atomics support to be true (git-fixes). - drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes). - drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes). - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() (git-fixes). - drm/bridge: anx7625: Prevent endless probe loop (git-fixes). - drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes). - drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes). - drm/client: Fix memory leak in drm_client_target_cloned (git-fixes). - drm/display/dp_mst: Fix payload addition on a disconnected sink (git-fixes). - drm/display: Do not block HDR_OUTPUT_METADATA on unknown EOTF (git-fixes). - drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes). - drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes). - drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage (git-fixes). - drm/etnaviv: move idle mapping reaping into separate function (git-fixes). - drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes). - drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs (bsc#1213493). - drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes). - drm/i915/gt: Cleanup partial engine discovery failures (git-fixes). - drm/i915/guc: Add error-capture init warnings when needed (git-fixes). - drm/i915/guc: Fix missing ecodes (git-fixes). - drm/i915/guc: Limit scheduling properties to avoid overflow (git-fixes). - drm/i915/guc: Rename GuC register state capture node to be more obvious (git-fixes). - drm/i915/mtl: update scaler source and destination limits for MTL (git-fixes). - drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs (git-fixes). - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes). - drm/i915/tc: Fix TC port link ref init for DP MST during HW readout (git-fixes). - drm/i915: Allow panel fixed modes to have differing sync polarities (git-fixes). - drm/i915: Check pipe source size when using skl+ scalers (git-fixes). - drm/i915: Do panel VBT init early if the VBT declares an explicit panel type (git-fixes). - drm/i915: Fix TypeC mode initialization during system resume (git-fixes). - drm/i915: Fix a memory leak with reused mmap_offset (git-fixes). - drm/i915: Fix negative value passed as remaining time (git-fixes). - drm/i915: Fix one wrong caching mode enum usage (git-fixes). - drm/i915: Introduce intel_panel_init_alloc() (git-fixes). - drm/i915: Never return 0 if not all requests retired (git-fixes). - drm/i915: Populate encoder->devdata for DSI on icl+ (git-fixes). - drm/i915: Print return value on error (git-fixes). - drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes). - drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (git-fixes). - drm/msm/a5xx: really check for A510 in a5xx_gpu_init (git-fixes). - drm/msm/adreno: Simplify read64/write64 helpers (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: Add DSC hardware blocks to register snapshot (git-fixes). - drm/msm/dpu: Assign missing writeback log_mask (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes). - drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register (git-fixes). - drm/msm/hdmi: use devres helper for runtime PM management (git-fixes). - drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable (git-fixes). - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes). - drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes). - drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes). - drm/ttm: Do not leak a resource on swapout move error (git-fixes). - drm/virtio: Fix memory leak in virtio_gpu_object_create() (git-fixes). - drm/virtio: Simplify error handling of virtio_gpu_object_create() (git-fixes). - drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable (git-fixes). - drm/vmwgfx: Remove ttm object hashtable (git-fixes). - drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes). - drm/vmwgfx: Write the driver id registers (git-fixes). - drm: Add fixed-point helper to get rounded integer values (git-fixes). - drm: Add missing DP DSC extended capability definitions (git-fixes). - drm: Optimize drm buddy top-down allocation method (git-fixes). - drm: buddy_allocator: Fix buddy allocator init on 32-bit systems (git-fixes). - drm: panel-orientation-quirks: Add quirk for DynaBook K50 (git-fixes). - drm: rcar-du: Add quirk for H3 ES1.x pclk workaround (git-fixes). - drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes). - drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes). - fuse: ioctl: translate ENOSYS in outarg (bsc#1213524). - fuse: revalidate: do not invalidate if interrupted (bsc#1213523). - i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226). - irqchip/gic-v3: Claim iomem resources (bsc#1213533) - irqchip/gicv3: Handle resource request failure consistently (bsc#1213533) - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533) - kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243). - kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers - kabi/severities: ignore kABI of i915 module It's exported only for its sub-module, not really used by externals - kabi/severities: ignore kABI of vmwgfx The driver exports a function unnecessarily without used by anyone else. Ignore the kABI changes. - memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905). - net: mana: Add support for vlan tagging (bsc#1212301). - net: phy: prevent stale pointer dereference in phy_init() (git-fixes). - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (git-fixes). - net: qrtr: start MHI channel after endpoit creation (git-fixes). - nilfs2: reject devices with insufficient block count (git-fixes). - ocfs2: Switch to security_inode_init_security() (git-fixes). - ocfs2: check new file size on fallocate call (git-fixes). - ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes). - perf/x86/amd/core: Always clear status for idx (bsc#1213233). - pie: fix kernel-doc notation warning (git-fixes). - powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869). - powerpc/64s: Fix VAS mm use after free (bsc#1194869). - powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869). - powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869). - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869). - powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869). - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes). - powerpc/mm: Switch obsolete dssall to .long (bsc#1194869). - powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869). - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869). - powerpc/prom_init: Fix kernel config grep (bsc#1194869). - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (jsc#PED-542 git-fixes). - powerpc/secvar: fix refcount leak in format_show() (bsc#1194869). - powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869). - powerpc: clean vdso32 and vdso64 directories (bsc#1194869). - powerpc: define get_cycles macro for arch-override (bsc#1194869). - powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869). - rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*. - rsi: remove kernel-doc comment marker (git-fixes). - s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259). - s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258). - s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263). - s390/pci: clean up left over special treatment for function zero (bsc#1212525). - s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525). - s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525). - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252). - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt; 2.36 (git-fixes bsc#1213264). - s390: discard .interp section (git-fixes bsc#1213247). - security: keys: Modify mismatched function name (git-fixes). - selftests/ir: fix build with ancient kernel headers (git-fixes). - selftests: cgroup: fix unsigned comparison with less than zero (git-fixes). - selftests: forwarding: Fix packet matching in mirroring selftests (git-fixes). - selftests: tc: add 'ct' action kconfig dep (git-fixes). - selftests: tc: add ConnTrack procfs kconfig (git-fixes). - selftests: tc: set timeout to 15 minutes (git-fixes). - signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869). - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869). - smb3: do not reserve too many oplock credits (bsc#1193629). - smb3: missing null check in SMB2_change_notify (bsc#1193629). - smb: client: fix broken file attrs with nodfs mounts (bsc#1193629). - smb: client: fix missed ses refcounting (git-fixes). - smb: client: fix parsing of source mount option (bsc#1193629). - smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629). - smb: client: fix warning in CIFSFindFirst() (bsc#1193629). - smb: client: fix warning in CIFSFindNext() (bsc#1193629). - smb: client: fix warning in cifs_match_super() (bsc#1193629). - smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629). - smb: client: fix warning in generic_ip_connect() (bsc#1193629). - smb: client: improve DFS mount check (bsc#1193629). - smb: client: remove redundant pointer 'server' (bsc#1193629). - smb: delete an unnecessary statement (bsc#1193629). - smb: move client and server files to common directory fs/smb (bsc#1193629). - smb: remove obsolete comment (bsc#1193629). - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (git-fixes). - soundwire: cadence: Drain the RX FIFO after an IO timeout (git-fixes). - soundwire: stream: Add missing clear of alloc_slave_rt (git-fixes). - spi: bcm63xx: fix max prepend length (git-fixes). - swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes). - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes). - wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes). - wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart (git-fixes). - wifi: ath11k: Add missing check for ioremap (git-fixes). - wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes). - x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes). - x86/platform/uv: Add platform resolving #defines for misc GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Fix printed information in calc_mmioh_map (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Remove remaining BUG_ON() and BUG() calls (bsc#1212256 jsc#PED-4718). - x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Update UV platform code for SNC (bsc#1212256 jsc#PED-4718). - x86/platform/uv: When searching for minimums, start at INT_MAX not 99999 (bsc#1212256 jsc#PED-4718). - x86: Fix .brk attribute in linker script (git-fixes). - xfs: clean up the rtbitmap fsmap backend (git-fixes). - xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes). - xfs: do not reverse order of items in bulk AIL insertion (git-fixes). - xfs: fix getfsmap reporting past the last rt extent (git-fixes). - xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes). - xfs: fix interval filtering in multi-step fsmap queries (git-fixes). - xfs: fix logdev fsmap query result filtering (git-fixes). - xfs: fix off-by-one error when the last rt extent is in use (git-fixes). - xfs: fix uninitialized variable access (git-fixes). - xfs: make fsmap backend function key parameters const (git-fixes). - xfs: make the record pointer passed to query_range functions const (git-fixes). - xfs: pass explicit mount pointer to rtalloc query functions (git-fixes). Important SUSE bug 1150305 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1207894 SUSE bug 1208788 SUSE bug 1211243 SUSE bug 1211867 SUSE bug 1212256 SUSE bug 1212301 SUSE bug 1212525 SUSE bug 1212846 SUSE bug 1212905 SUSE bug 1213059 SUSE bug 1213061 SUSE bug 1213205 SUSE bug 1213206 SUSE bug 1213226 SUSE bug 1213233 SUSE bug 1213245 SUSE bug 1213247 SUSE bug 1213252 SUSE bug 1213258 SUSE bug 1213259 SUSE bug 1213263 SUSE bug 1213264 SUSE bug 1213286 SUSE bug 1213493 SUSE bug 1213523 SUSE bug 1213524 SUSE bug 1213533 SUSE bug 1213543 SUSE bug 1213705 CVE-2023-20593 CVE-2023-2985 CVE-2023-3117 CVE-2023-31248 CVE-2023-3390 CVE-2023-35001 CVE-2023-3812 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627). - CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417). - CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812). The following non-security bugs were fixed: - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445). - ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445). - ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes). - ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes). - afs: Adjust ACK interpretation to try and cope with NAT (git-fixes). - afs: Fix access after dec in put functions (git-fixes). - afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes). - afs: Fix dynamic root getattr (git-fixes). - afs: Fix fileserver probe RTT handling (git-fixes). - afs: Fix infinite loop found by xfstest generic/676 (git-fixes). - afs: Fix lost servers_outstanding count (git-fixes). - afs: Fix server->active leak in afs_put_server (git-fixes). - afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes). - afs: Fix updating of i_size with dv jump from server (git-fixes). - afs: Fix vlserver probe RTT handling (git-fixes). - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes). - afs: Use refcount_t rather than atomic_t (git-fixes). - afs: Use the operation issue time instead of the reply time for callbacks (git-fixes). - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes). - ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes). - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes). - ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes). - ALSA: hda/realtek - remove 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes). - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes). - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes). - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129). - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes). - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes). - ALSA: usb-audio: Avoid unnecessary interface change at EP close (git-fixes). - ALSA: usb-audio: Clear fixed clock rate at closing EP (git-fixes). - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Drop superfluous interface setup at parsing (git-fixes). - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes). - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes). - ALSA: usb-audio: More refactoring of hw constraint rules (git-fixes). - ALSA: usb-audio: Properly refcounting clock rate (git-fixes). - ALSA: usb-audio: Rate limit usb_set_interface error reporting (git-fixes). - ALSA: usb-audio: Refcount multiple accesses on the single clock (git-fixes). - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (git-fixes). - ALSA: usb-audio: Update for native DSD support quirks (git-fixes). - ALSA: usb-audio: Use atomic_try_cmpxchg in ep_state_update (git-fixes). - ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes). - amd-pstate: Fix amd_pstate mode switch (git-fixes). - ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes). - ASoC: atmel: Fix the 8K sample parameter in I2SC master (git-fixes). - ASoc: codecs: ES8316: Fix DMIC config (git-fixes). - ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes). - ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes). - ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes). - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes). - ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes). - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes). - ASoC: da7219: Check for failure reading AAD IRQ events (git-fixes). - ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes). - ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes). - ASoC: fsl_spdif: Silence output on stop (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes). - ASoC: tegra: Fix ADX byte map (git-fixes). - ASoC: tegra: Fix AMX byte map (git-fixes). - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (git-fixes). - ata: pata_ns87415: mark ns87560_tf_read static (git-fixes). - block, bfq: Fix division by zero error on zero wsum (bsc#1213653). - block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes). - bus: mhi: add new interfaces to handle MHI channels directly (bsc#1207948). - bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948). - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes). - ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856). - coda: Avoid partial allocation of sig_inputArgs (git-fixes). - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State frequencies attributes (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State performance attributes (bsc#1212445). - cpufreq: amd-pstate: Add boost mode support for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445). - cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445). - cpufreq: amd-pstate: Add fast switch function for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: Add guided autonomous mode (bsc#1212445). - cpufreq: amd-pstate: Add guided mode control support via sysfs (bsc#1212445). - cpufreq: amd-pstate: Add more tracepoint for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: Add resume and suspend callbacks (bsc#1212445). - cpufreq: amd-pstate: Add trace for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445). - cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445). - cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445). - cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL register at init (bsc#1212445). - cpufreq: amd-pstate: Expose struct amd_cpudata (bsc#1212445). - cpufreq: amd-pstate: Fix initial highest_perf value (bsc#1212445). - cpufreq: amd-pstate: Fix invalid write to MSR_AMD_CPPC_REQ (bsc#1212445). - cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445). - cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment (bsc#1212445). - cpufreq: amd-pstate: fix white-space (bsc#1212445). - cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445). - cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445). - cpufreq: amd-pstate: implement Pstate EPP support for the AMD processors (bsc#1212445). - cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445). - cpufreq: amd-pstate: Introduce a new AMD P-State driver to support future processors (bsc#1212445). - cpufreq: amd-pstate: Introduce the support for the processors with shared memory solution (bsc#1212445). - cpufreq: amd-pstate: Let user know amd-pstate is disabled (bsc#1212445). - cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated (bsc#1212445). - cpufreq: amd-pstate: Make varaiable mode_state_machine static (bsc#1212445). - cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445). - cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (bsc#1212445). - cpufreq: amd-pstate: Remove fast_switch_possible flag from active driver (bsc#1212445). - cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules (bsc#1212445). - cpufreq: amd-pstate: Set a fallback policy based on preferred_profile (bsc#1212445). - cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445). - cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() (bsc#1212445). - cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445). - cpufreq: amd-pstate: Write CPPC enable bit per-socket (bsc#1212445). - crypto: kpp - Add helper to set reqsize (git-fixes). - crypto: qat - Use helper to set reqsize (git-fixes). - dlm: fix missing lkb refcount handling (git-fixes). - dlm: fix plock invalid read (git-fixes). - Documentation: cpufreq: amd-pstate: Move amd_pstate param to alphabetical order (bsc#1212445). - Documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes). - drm/amd/display: Add monitor specific edid quirk (git-fixes). - drm/amd/display: Add polling method to handle MST reply packet (bsc#1213578). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes). - drm/amd/display: Disable MPC split by default on special asic (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix seamless odm transitions (git-fixes). - drm/amd/display: Keep PHY active for DP displays on DCN31 (git-fixes). - drm/amd/display: only accept async flips for fast updates (git-fixes). - drm/amd/display: Only update link settings after successful MST link train (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() (git-fixes). - drm/amd: Fix an error handling mistake in psp_sw_init() (git-fixes). - drm/amdgpu: add the fan abnormal detection feature (git-fixes). - drm/amdgpu: avoid restore process run into dead loop (git-fixes). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes). - drm/amdgpu: Fix minmax warning (git-fixes). - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes). - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 (git-fixes). - drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes). - drm/amd/pm: share the code around SMU13 pcie parameters update (git-fixes). - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes). - drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (git-fixes). - drm/client: Fix memory leak in drm_client_modeset_probe (git-fixes). - drm/dp_mst: Clear MSG_RDY flag before sending new message (bsc#1213578). - drm: Fix null pointer dereference in drm_dp_atomic_find_time_slots() (bsc#1213578). - drm/i915: Do not preserve dpll_hw_state for slave crtc in Bigjoiner (git-fixes). - drm/i915/dpt: Use shmem for dpt objects (git-fixes). - drm/i915: Fix an error handling path in igt_write_huge() (git-fixes). - drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks (git-fixes). - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (git-fixes). - drm/radeon: Fix integer overflow in radeon_cs_parser_init (git-fixes). - drm/ttm: fix bulk_move corruption when adding a entry (git-fixes). - drm/ttm: fix warning that we shouldn't mix && and || (git-fixes). - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (bsc#1213632). - drm/vmwgfx: Remove explicit and broken vblank handling (bsc#1213632). - drm/vmwgfx: Remove rcu locks from user resources (bsc#1213632). - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes). - fbdev: imxfb: Removed unneeded release_mem_region (git-fixes). - fbdev: imxfb: warn about invalid left/right margin (git-fixes). - file: always lock position for FMODE_ATOMIC_POS (bsc#1213759). - fs: dlm: add midcomms init/start functions (git-fixes). - fs: dlm: do not set stop rx flag after node reset (git-fixes). - fs: dlm: filter user dlm messages for kernel locks (git-fixes). - fs: dlm: fix log of lowcomms vs midcomms (git-fixes). - fs: dlm: fix race between test_bit() and queue_work() (git-fixes). - fs: dlm: fix race in lowcomms (git-fixes). - fs: dlm: handle -EBUSY first in lock arg validation (git-fixes). - fs: dlm: move sending fin message into state change handling (git-fixes). - fs: dlm: retry accept() until -EAGAIN or error returns (git-fixes). - fs: dlm: return positive pid value for F_GETLK (git-fixes). - fs: dlm: start midcomms before scand (git-fixes). - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (git-fixes). - FS: JFS: Check for read-only mounted filesystem in txBegin (git-fixes). - FS: JFS: Fix null-ptr-deref Read in txBegin (git-fixes). - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (git-fixes). - gve: Set default duplex configuration to full (git-fixes). - gve: unify driver name usage (git-fixes). - hwmon: (adm1275) Allow setting sample averaging (git-fixes). - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (git-fixes). - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (git-fixes). - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes). - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes). - i2c: xiic: Do not try to handle more interrupt events after error (git-fixes). - iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED (git-fixes). - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes). - iavf: Fix out-of-bounds when setting channels on remove (git-fixes). - iavf: fix potential deadlock on allocation failure (git-fixes). - iavf: fix reset task race with iavf_remove() (git-fixes). - iavf: Fix use-after-free in free_netdev (git-fixes). - iavf: Move netdev_update_features() into watchdog task (git-fixes). - iavf: use internal state to free traffic IRQs (git-fixes). - iavf: Wait for reset in callbacks which trigger it (git-fixes). - IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes) - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - ice: handle extts in the miscellaneous interrupt thread (git-fixes). - igc: Check if hardware TX timestamping is enabled earlier (git-fixes). - igc: Enable and fix RX hash usage by netstack (git-fixes). - igc: Fix inserting of empty frame for launchtime (git-fixes). - igc: Fix Kernel Panic during ndo_tx_timeout callback (git-fixes). - igc: Fix launchtime before start of cycle (git-fixes). - igc: Fix race condition in PTP tx code (git-fixes). - igc: Handle PPS start time programming for past time values (git-fixes). - igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes). - igc: Remove delay during TX ring configuration (git-fixes). - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes). - igc: Work around HW bug causing missing timestamps (git-fixes). - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (git-fixes). - Input: iqs269a - do not poll during ATI (git-fixes). - Input: iqs269a - do not poll during suspend or resume (git-fixes). - jffs2: fix memory leak in jffs2_do_fill_super (git-fixes). - jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes). - jffs2: fix memory leak in jffs2_scan_medium (git-fixes). - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes). - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (git-fixes). - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes). - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (git-fixes). - kABI fix after Restore kABI for NVidia vGPU driver (bsc#1210825). - kabi/severities: relax kABI for ath11k local symbols (bsc#1207948) - kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes). - KVM: arm64: Do not read a HW interrupt pending state in user context (git-fixes) - KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620) - KVM: Do not null dereference ops->destroy (git-fixes) - KVM: downgrade two BUG_ONs to WARN_ON_ONCE (git-fixes) - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL (git-fixes) - KVM: s390: pv: fix index value of replaced ASCE (git-fixes bsc#1213867). - KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported (git-fixes). - KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) (git-fixes). - KVM: VMX: restore vmx_vmexit alignment (git-fixes). - KVM: x86: Account fastpath-only VM-Exits in vCPU stats (git-fixes). - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes). - libceph: harden msgr2.1 frame segment length checks (bsc#1213857). - MAINTAINERS: Add AMD P-State driver maintainer entry (bsc#1212445). - m ALSA: usb-audio: Add quirk for Tascam Model 12 (git-fixes). - md: add error_handlers for raid0 and linear (bsc#1212766). - media: staging: atomisp: select V4L2_FWNODE (git-fixes). - mhi_power_down() kABI workaround (bsc#1207948). - mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes). - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes). - net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes). - net: mana: Batch ringing RX queue doorbell on receiving packets (bsc#1212901). - net: mana: Use the correct WQE count for ringing RQ doorbell (bsc#1212901). - net/mlx5: DR, Support SW created encap actions for FW table (git-fixes). - net/mlx5e: Check for NOT_READY flag state after locking (git-fixes). - net/mlx5e: fix double free in mlx5e_destroy_flow_table (git-fixes). - net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (git-fixes). - net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes). - net/mlx5e: XDP, Allow growing tail for XDP multi buffer (git-fixes). - net/mlx5e: xsk: Set napi_id to support busy polling on XSK RQ (git-fixes). - net: phy: marvell10g: fix 88x3310 power up (git-fixes). - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585). - nfsd: add encoding of op_recall flag for write delegation (git-fixes). - nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes). - nfsd: Fix sparse warning (git-fixes). - nfsd: Remove open coding of string copy (git-fixes). - nfsv4.1: Always send a RECLAIM_COMPLETE after establishing lease (git-fixes). - nfsv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (git-fixes). - nvme: do not reject probe due to duplicate IDs for single-ported PCIe devices (git-fixes). - nvme: fix the NVME_ID_NS_NVM_STS_MASK definition (git-fixes). - nvme-pci: fix DMA direction of unmapping integrity data (git-fixes). - nvme-pci: remove nvme_queue from nvme_iod (git-fixes). - octeontx2-af: Move validation of ptp pointer before its usage (git-fixes). - octeontx2-pf: Add additional check for MCAM rules (git-fixes). - octeontx-af: fix hardware timestamp configuration (git-fixes). - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes). - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes). - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (git-fixes). - pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes). - pinctrl: amd: Do not show `Invalid config param` errors (git-fixes). - pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes). - pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes). - pinctrl: amd: Use amd_pinconf_set() for all config options (git-fixes). - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (git-fixes). - RDMA/bnxt_re: Fix hang during driver unload (git-fixes) - RDMA/bnxt_re: Prevent handling any completions after qp destroy (git-fixes) - RDMA/core: Update CMA destination address on rdma_resolve_addr (git-fixes) - RDMA/irdma: Add missing read barriers (git-fixes) - RDMA/irdma: Fix data race on CQP completion stats (git-fixes) - RDMA/irdma: Fix data race on CQP request done (git-fixes) - RDMA/irdma: Fix op_type reporting in CQEs (git-fixes) - RDMA/irdma: Report correct WC error (git-fixes) - RDMA/mlx4: Make check for invalid flags stricter (git-fixes) - RDMA/mthca: Fix crash when polling CQ for shared QPs (git-fixes) - regmap: Account for register length in SMBus I/O limits (git-fixes). - regmap: Drop initial version of maximum transfer length fixes (git-fixes). - Restore kABI for NVidia vGPU driver (bsc#1210825). - Revert 'ALSA: usb-audio: Drop superfluous interface setup at parsing' (git-fixes). - Revert 'debugfs, coccinelle: check for obsolete DEFINE_SIMPLE_ATTRIBUTE() usage' (git-fixes). - Revert 'Drop AMDGPU patches for fixing regression (bsc#1213304,bsc#1213777)' - Revert 'iavf: Detach device during reset task' (git-fixes). - Revert 'iavf: Do not restart Tx queues after reset task failure' (git-fixes). - Revert 'NFSv4: Retry LOCK on OLD_STATEID during delegation return' (git-fixes). - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (git-fixes). - Revert 'usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()' (git-fixes). - Revert 'usb: xhci: tegra: Fix error check' (git-fixes). - Revert 'xhci: add quirk for host controllers that do not update endpoint DCS' (git-fixes). - Revive drm_dp_mst_hpd_irq() function (bsc#1213578). - rxrpc, afs: Fix selection of abort codes (git-fixes). - s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870). - s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810). - s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872). - s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863). - s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870). - s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871). - s390/qeth: Fix vipa deletion (git-fixes bsc#1213713). - s390/vmem: fix empty page tables cleanup under KASAN (git-fixes bsc#1213715). - scftorture: Count reschedule IPIs (git-fixes). - scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected (bsc#1213756). - scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756). - scsi: lpfc: Clean up SLI-4 sysfs resource reporting (bsc#1213756). - scsi: lpfc: Copyright updates for 14.2.0.14 patches (bsc#1213756). - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (bsc#1213756). - scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756). - scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (bsc#1213756). - scsi: lpfc: Pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756). - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (bsc#1213756). - scsi: lpfc: Refactor cpu affinity assignment paths (bsc#1213756). - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (bsc#1213756). - scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (bsc#1213756). - scsi: lpfc: Replace one-element array with flexible-array member (bsc#1213756). - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756). - scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (bsc#1213756). - scsi: lpfc: Simplify fcp_abort transport callback log message (bsc#1213756). - scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756). - scsi: lpfc: Use struct_size() helper (bsc#1213756). - scsi: qla2xxx: Adjust IOCB resource on qpair create (bsc#1213747). - scsi: qla2xxx: Array index may go out of bound (bsc#1213747). - scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747). - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (bsc#1213747). - scsi: qla2xxx: Correct the index of array (bsc#1213747). - scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747). - scsi: qla2xxx: Fix buffer overrun (bsc#1213747). - scsi: qla2xxx: Fix command flush during TMF (bsc#1213747). - scsi: qla2xxx: Fix deletion race condition (bsc#1213747). - scsi: qla2xxx: Fix end of loop test (bsc#1213747). - scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747). - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (bsc#1213747). - scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747). - scsi: qla2xxx: Fix NULL pointer dereference in target mode (bsc#1213747). - scsi: qla2xxx: Fix potential NULL pointer dereference (bsc#1213747). - scsi: qla2xxx: Fix session hang in gnl (bsc#1213747). - scsi: qla2xxx: Fix TMF leak through (bsc#1213747). - scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747). - scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747). - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (bsc#1213747). - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (bsc#1213747). - scsi: qla2xxx: Silence a static checker warning (bsc#1213747). - scsi: qla2xxx: Turn off noisy message log (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747). - scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747). - selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes). - serial: qcom-geni: drop bogus runtime pm state update (git-fixes). - serial: sifive: Fix sifive_serial_console_setup() section (git-fixes). - series: udpate metadata Refresh - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - sfc: fix XDP queues mode with legacy IRQ (git-fixes). - sfc: use budget for TX completions (git-fixes). - soundwire: qcom: update status correctly with mask (git-fixes). - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes). - staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (git-fixes). - SUNRPC: always free ctxt when freeing deferred request (git-fixes). - SUNRPC: double free xprt_ctxt while still in use (git-fixes). - SUNRPC: Fix trace_svc_register() call site (git-fixes). - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (git-fixes). - SUNRPC: Remove dead code in svc_tcp_release_rqst() (git-fixes). - SUNRPC: remove the maximum number of retries in call_bind_status (git-fixes). - svcrdma: Prevent page release when nothing was received (git-fixes). - tpm_tis: Explicitly check for error code (git-fixes). - tty: n_gsm: fix UAF in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes). - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (git-fixes). - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (git-fixes). - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes). - ubifs: Fix AA deadlock when setting xattr for encrypted file (git-fixes). - ubifs: Fix build errors as symbol undefined (git-fixes). - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (git-fixes). - ubifs: Fix memory leak in alloc_wbufs() (git-fixes). - ubifs: Fix memory leak in do_rename (git-fixes). - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes). - ubifs: Fix to add refcount once page is set private (git-fixes). - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (git-fixes). - ubifs: Fix wrong dirty space budget for dirty inode (git-fixes). - ubifs: Free memory for tmpfile name (git-fixes). - ubifs: Rectify space amount budget for mkdir/tmpfile operations (git-fixes). - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes). - ubifs: Rectify space budget for ubifs_xrename() (git-fixes). - ubifs: Rename whiteout atomically (git-fixes). - ubifs: rename_whiteout: correct old_dir size computing (git-fixes). - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (git-fixes). - ubifs: Reserve one leb for each journal head while doing budget (git-fixes). - ubifs: Re-statistic cleaned znode count if commit failed (git-fixes). - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (git-fixes). - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (git-fixes). - Update config files: enable CONFIG_X86_AMD_PSTATE (bsc#1212445) - usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes). - usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes). - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (git-fixes). - usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). - USB: serial: option: add LARA-R6 01B PIDs (git-fixes). - usb: typec: Iterate pds array when showing the pd list (git-fixes). - usb: typec: Set port->pd before adding device for typec_port (git-fixes). - usb: typec: Use sysfs_emit_at when concatenating the string (git-fixes). - usb: xhci-mtk: set the dma max_seg_size (git-fixes). - vhost_net: revert upend_idx only on retriable error (git-fixes). - vhost: support PACKED when setting-getting vring_base (git-fixes). - virtio_net: Fix error unwinding of XDP initialization (git-fixes). - virtio-net: Maintain reverse cleanup order (git-fixes). - wifi: ath11k: add support for suspend in power down state (bsc#1207948). - wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948). - wifi: ath11k: handle thermal device registeration together with MAC (bsc#1207948). - wifi: ath11k: remove MHI LOOPBACK channels (bsc#1207948). - wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes). - wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes). - wl3501_cs: use eth_hw_addr_set() (git-fixes). - x86/PVH: obtain VGA console info in Dom0 (git-fixes). - xen/blkfront: Only check REQ_FUA for writes (git-fixes). - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes). - xfs: AIL needs asynchronous CIL forcing (bsc#1211811). - xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811). - xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811). - xfs: CIL work is serialised, not pipelined (bsc#1211811). - xfs: do not run shutdown callbacks on active iclogs (bsc#1211811). - xfs: drop async cache flushes from CIL commits (bsc#1211811). - xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811). - xfs: move the CIL workqueue to the CIL (bsc#1211811). - xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811). - xfs: order CIL checkpoint start records (bsc#1211811). - xfs: pass a CIL context to xlog_write() (bsc#1211811). - xfs: rework xlog_state_do_callback() (bsc#1211811). - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811). - xfs: separate out log shutdown callback processing (bsc#1211811). - xfs: wait iclog complete before tearing down AIL (bsc#1211811). - xfs: XLOG_STATE_IOERROR must die (bsc#1211811). - xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes). - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes). - xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes). Important SUSE bug 1206418 SUSE bug 1207129 SUSE bug 1207948 SUSE bug 1210627 SUSE bug 1210780 SUSE bug 1210825 SUSE bug 1211131 SUSE bug 1211738 SUSE bug 1211811 SUSE bug 1212445 SUSE bug 1212502 SUSE bug 1212604 SUSE bug 1212766 SUSE bug 1212901 SUSE bug 1213167 SUSE bug 1213272 SUSE bug 1213287 SUSE bug 1213304 SUSE bug 1213417 SUSE bug 1213578 SUSE bug 1213585 SUSE bug 1213586 SUSE bug 1213588 SUSE bug 1213601 SUSE bug 1213620 SUSE bug 1213632 SUSE bug 1213653 SUSE bug 1213713 SUSE bug 1213715 SUSE bug 1213747 SUSE bug 1213756 SUSE bug 1213759 SUSE bug 1213777 SUSE bug 1213810 SUSE bug 1213812 SUSE bug 1213856 SUSE bug 1213857 SUSE bug 1213863 SUSE bug 1213867 SUSE bug 1213870 SUSE bug 1213871 SUSE bug 1213872 CVE-2022-40982 CVE-2023-0459 CVE-2023-20569 CVE-2023-21400 CVE-2023-2156 CVE-2023-2166 CVE-2023-31083 CVE-2023-3268 CVE-2023-3567 CVE-2023-3609 CVE-2023-3611 CVE-2023-3776 CVE-2023-38409 CVE-2023-3863 CVE-2023-4004 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openssl-1_0_0 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openssl-1_0_0 fixes the following issues: - CVE-2023-3817: Fixed a potential DoS due to excessive time spent checking DH q parameter value. (bsc#1213853) Moderate SUSE bug 1213853 CVE-2023-3817 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for postgresql15 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postgresql15 fixes the following issues: - Update to 14.9 - CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059) Moderate SUSE bug 1214059 CVE-2023-39417 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for postfix (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postfix fixes the following issues: - CVE-2023-32182: Fixed config_postfix SUSE specific script potentially bad /tmp file usage (bsc#1211196). - Update to from 3.7.2 to 3.7.3: - Fixes a bug where some messages were not delivered after 'warning: Unexpected record type 'X'. (bsc#1213515) Important SUSE bug 1211196 SUSE bug 1213515 CVE-2023-32182 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for java-1_8_0-ibm (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-1_8_0-ibm fixes the following issues: - Update to Java 8.0 Service Refresh 8 Fix Pack 10 (bsc#1213541) - CVE-2022-40609: Fixed an unsafe deserialization flaw which could allow a remote attacker to execute arbitrary code on the system. (bsc#1213934) - CVE-2023-22041: Fixed a flaw whcih could allow unauthorized access to critical data or complete access. (bsc#1213475) - CVE-2023-22049: Fixed a flaw which could result in unauthorized update. (bsc#1213482) - CVE-2023-22045: Fixed a flaw which could result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data. (bsc#1213481) - CVE-2023-22044: Fixed a flaw which could result in unauthorized read access to a subset of Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK accessible data. (bsc#1213479) - CVE-2023-22036: Fixed a flaw which could result in unauthorized ability to cause a partial denial of service. (bsc#1213474) - CVE-2023-25193: Fixed a flaw which could allows attackers to trigger O(n^2) growth via consecutive marks during the process of looking back for base glyphs when attaching marks. (bsc#1207922) - CVE-2023-22006: Fixed a flaw which could result in unauthorized update, insert or delete access for JDK accessible data. (bsc#1213473) Important SUSE bug 1207922 SUSE bug 1213473 SUSE bug 1213474 SUSE bug 1213475 SUSE bug 1213479 SUSE bug 1213481 SUSE bug 1213482 SUSE bug 1213541 SUSE bug 1213934 SUSE bug 1214431 CVE-2022-40609 CVE-2023-22006 CVE-2023-22036 CVE-2023-22041 CVE-2023-22044 CVE-2023-22045 CVE-2023-22049 CVE-2023-25193 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for java-1_8_0-openjdk (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for java-1_8_0-openjdk fixes the following issues: Update to version jdk8u382 (icedtea-3.28.0): - CVE-2023-22045: Fixed a difficult to exploit vulnerability that allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK (bsc#1213481). - CVE-2023-22049: Fixed a difficult to exploit vulnerability that allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK (bsc#1213482). Moderate SUSE bug 1213481 SUSE bug 1213482 CVE-2023-22045 CVE-2023-22049 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for php7 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) - CVE-2023-3824: Fixed a buffer overflow in phar_dir_read(). (bsc#1214103) Important SUSE bug 1214103 SUSE bug 1214106 CVE-2023-3823 CVE-2023-3824 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330). - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727). - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729). The following non-security bugs were fixed: - ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305). - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes). - ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes). - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes). - ALSA: ac97: Fix possible error value of *rac97 (git-fixes). - ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes). - ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes). - ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes). - ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes). - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes). - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes). - ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes). - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes). - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes). - ARM: dts: imx6sll: fixup of operating points (git-fixes). - ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes). - ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes). - ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes). - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes). - ASoC: rt5665: add missed regulator_bulk_disable (git-fixes). - ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes). - ASoC: tegra: Fix SFC conversion for few rates (git-fixes). - Bluetooth: Fix potential use-after-free when clear keys (git-fixes). - Bluetooth: L2CAP: Fix use-after-free (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes). - Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes). - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes). - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b - CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123 - Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel. - Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes). - Documentation: devices.txt: Remove ttyIOC* (git-fixes). - Documentation: devices.txt: Remove ttySIOC* (git-fixes). - Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453). - Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453). - Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453). - Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453). - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453). - Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453). - Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453). - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453). - Drop amdgpu patch causing spamming (bsc#1215523) - Drop cfg80211 lock fix patches that caused a regression (bsc#1213757) - Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) - Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes). - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes). - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes). - HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes). - HID: wacom: remove the battery when the EKR is off (git-fixes). - HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes). - IB/hfi1: Fix possible panic during hotplug remove (git-fixes) - IB/uverbs: Fix an potential error pointer dereference (git-fixes) - Input: exc3000 - properly stop timer on shutdown (git-fixes). - KVM: s390: fix sthyi error handling (git-fixes bsc#1214370). - Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756). - Kbuild: move to -std=gnu11 (bsc#1214756). - PCI/ASPM: Avoid link retraining race (git-fixes). - PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes). - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes). - PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes). - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes). - PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453). - PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453). - PCI: meson: Remove cast between incompatible function type (git-fixes). - PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes). - PCI: microchip: Remove cast between incompatible function type (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: rockchip: Remove writes to unused registers (git-fixes). - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes). - PCI: tegra194: Fix possible array out of bounds access (git-fixes). - PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes). - RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes) - RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes) - RDMA/efa: Fix wrong resources deallocation order (git-fixes) - RDMA/hns: Fix CQ and QP cache affinity (git-fixes) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes) - RDMA/hns: Fix port active speed (git-fixes) - RDMA/irdma: Prevent zero-length STAG registration (git-fixes) - RDMA/irdma: Replace one-element array with flexible-array member (git-fixes) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes) - RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes) - RDMA/siw: Correct wrong debug message (git-fixes) - RDMA/umem: Set iova in ODP flow (git-fixes) - README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer. - Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes) - Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes). - SMB3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes). - Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - amba: bus: fix refcount leak (git-fixes). - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes). - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes). - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes). - audit: fix possible soft lockup in __audit_inode_child() (git-fixes). - backlight/bd6107: Compare against struct fb_info.device (git-fixes). - backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes). - backlight/lv5207lp: Compare against struct fb_info.device (git-fixes). - batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes). - batman-adv: Do not increase MTU when set by user (git-fixes). - batman-adv: Fix TT global entry leak when client roamed back (git-fixes). - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes). - batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes). - batman-adv: Trigger events for auto adjusted MTU (git-fixes). - bnx2x: fix page fault following EEH recovery (bsc#1214299). - bpf: Disable preemption in bpf_event_output (git-fixes). - bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924). - bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes). - bus: ti-sysc: Fix build warning for 64-bit build (git-fixes). - bus: ti-sysc: Fix cast to enum warning (git-fixes). - bus: ti-sysc: Flush posted write on enable before reset (git-fixes). - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes). - ceph: defer stopping mdsc delayed_work (bsc#1214392). - ceph: do not check for quotas on MDS stray dirs (bsc#1214238). - ceph: never send metrics if disable_send_metrics is set (bsc#1214180). - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. - cifs: add missing return value check for cifs_sb_tlink (bsc#1193629). - cifs: allow dumping keys for directories too (bsc#1193629). - cifs: fix mid leak during reconnection after timeout threshold (git-fixes). - cifs: if deferred close is disabled then close files immediately (git-fixes). - cifs: is_network_name_deleted should return a bool (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes). - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes). - clk: imx8mp: fix sai4 clock (git-fixes). - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes). - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes). - clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes). - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes). - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes). - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes). - clk: sunxi-ng: Modify mismatched function name (git-fixes). - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453). - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453). - clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453). - clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453). - clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453). - clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453). - cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes). - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659). - cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004). - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - crypto: caam - fix unchecked return value error (git-fixes). - crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes). - define more Hyper-V related constants (bsc#1206453). - dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes). - dma-buf/sync_file: Fix docs syntax (git-fixes). - dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes). - dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes). - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes). - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes). - docs/process/howto: Replace C89 with C11 (bsc#1214756). - docs: kernel-parameters: Refer to the correct bitmap function (git-fixes). - docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes). - docs: printk-formats: Fix hex printing of signed values (git-fixes). - driver core: test_async: fix an error code (git-fixes). - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes). - drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes). - drm/amd/display: Apply 60us prefetch for DCFCLK &lt;= 300Mhz (git-fixes). - drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes). - drm/amd/display: Do not set drr on pipe commit (git-fixes). - drm/amd/display: Enable dcn314 DPP RCO (git-fixes). - drm/amd/display: Ensure that planes are in the same order (git-fixes). - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes). - drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes). - drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes). - drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes). - drm/amd/display: disable RCO for DCN314 (git-fixes). - drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes). - drm/amd/display: limit DPIA link rate to HBR3 (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: trigger timing sync only if TG is running (git-fixes). - drm/amd/pm/smu7: move variables to where they are used (git-fixes). - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes). - drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes). - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes). - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes). - drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes). - drm/amd: flush any delayed gfxoff on suspend entry (git-fixes). - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes). - drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes). - drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes). - drm/amdgpu: Remove unnecessary domain argument (git-fixes). - drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes). - drm/amdgpu: add S/G display parameter (git-fixes). - drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes). - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes). - drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes). - drm/amdgpu: fix memory leak in mes self test (git-fixes). - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes). - drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes). - drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes). - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes). - drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes). - drm/ast: Fix DRAM init on AST2200 (git-fixes). - drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes). - drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes). - drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes). - drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes). - drm/bridge: fix -Wunused-const-variable= warning (git-fixes). - drm/bridge: tc358764: Fix debug print parameter order (git-fixes). - drm/etnaviv: fix dumping of active MMU context (git-fixes). - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes). - drm/i915/sdvo: fix panel_type initialization (git-fixes). - drm/i915: Fix premature release of request's reusable memory (git-fixes). - drm/mediatek: Fix dereference before null check (git-fixes). - drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes). - drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes). - drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes). - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes). - drm/msm/mdp5: Do not leak some plane state (git-fixes). - drm/msm: Update dev core dump to not print backwards (git-fixes). - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes). - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes). - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073). - drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes). - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes). - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes). - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes). - drm/qxl: fix UAF on handle creation (git-fixes). - drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes). - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes). - drm/rockchip: Do not spam logs in atomic check (git-fixes). - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes). - drm/stm: ltdc: fix late dereference check (git-fixes). - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes). - drm/ttm: check null pointer before accessing when swapping (git-fixes). - drm/ttm: never consider pinned BOs for eviction&swap (git-fixes). - drm/vmwgfx: Fix shader stage validation (git-fixes). - drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes). - drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes). - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes). - dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes). - dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes). - dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes). - e1000: Fix typos in comments (jsc#PED-5738). - e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738). - e1000: switch to napi_build_skb() (jsc#PED-5738). - e1000: switch to napi_consume_skb() (jsc#PED-5738). - exfat: fix unexpected EOF while reading dir (bsc#1214000). - exfat: release s_lock before calling dir_emit() (bsc#1214000). - exfat_iterate(): do not open-code file_inode(file) (bsc#1214000). - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes). - fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes). - fbdev: Improve performance of sys_imageblit() (git-fixes). - fbdev: Update fbdev source file paths (git-fixes). - fbdev: fix potential OOB read in fast_imageblit() (git-fixes). - fbdev: mmp: fix value check in mmphw_probe() (git-fixes). - file: reinstate f_pos locking optimization for regular files (bsc#1213759). - firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes). - firmware: cs_dsp: Fix new control name check (git-fixes). - firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes). - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes). - fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes). - fsi: aspeed: Reset master errors after CFAM reset (git-fixes). - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes). - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes). - gpio: mvebu: Make use of devm_pwmchip_add (git-fixes). - gpio: mvebu: fix irq domain leak (git-fixes). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes). - hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453). - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes). - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes). - hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes). - hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes). - hwrng: pic32 - use devm_clk_get_enabled (git-fixes). - i2c: Delete error messages for failed memory allocations (git-fixes). - i2c: Improve size determinations (git-fixes). - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes). - i2c: designware: Correct length byte validation logic (git-fixes). - i2c: designware: Handle invalid SMBus block data response length value (git-fixes). - i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes). - i2c: nomadik: Remove a useless call in the remove function (git-fixes). - i2c: nomadik: Remove unnecessary goto label (git-fixes). - i2c: nomadik: Use devm_clk_get_enabled() (git-fixes). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - iavf: fix potential races for FDIR filters (git-fixes). - ice: Fix RDMA VSI removal during queue rebuild (git-fixes). - ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes). - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes). - iio: adc: stx104: Implement and utilize register structures (git-fixes). - iio: adc: stx104: Utilize iomap interface (git-fixes). - iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes). - intel/e1000:fix repeated words in comments (jsc#PED-5738). - intel: remove unused macros (jsc#PED-5738). - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes). - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). - iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes). - iommu/amd: Fix compile warning in init code (git-fixes). - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes). - iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes). - iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes). - iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes). - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes). - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes). - iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes). - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes). - iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes). - iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes). - iommu/dma: Fix iova map result check bug (git-fixes). - iommu/dma: return error code from iommu_dma_map_sg() (git-fixes). - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes). - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes). - iommu/iova: Fix module config properly (git-fixes). - iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes). - iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes). - iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes). - iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes). - iommu/mediatek: Use component_match_add (git-fixes). - iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes). - iommu/omap: Fix buffer overflow in debugfs (git-fixes). - iommu/rockchip: fix permission bits in page table entries v2 (git-fixes). - iommu/s390: Fix duplicate domain attachments (git-fixes). - iommu/sun50i: Consider all fault sources for reset (git-fixes). - iommu/sun50i: Fix R/W permission check (git-fixes). - iommu/sun50i: Fix flush size (git-fixes). - iommu/sun50i: Fix reset release (git-fixes). - iommu/sun50i: Implement .iotlb_sync_map (git-fixes). - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes). - iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes). - iommu/vt-d: Check correct capability for sagaw determination (git-fixes). - iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes). - iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes). - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes). - iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes). - ipmi:ssif: Add check for kstrdup (git-fixes). - ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes). - ipmi_si: fix a memleak in try_smi_init() (git-fixes). - jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes). - kabi/severities: Ignore newly added SRSO mitigation functions - kabi: Allow extra bugsints (bsc#1213927). - kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there. - kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12. - kunit: make kunit_test_timeout compatible with comment (git-fixes). - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes). - leds: multicolor: Use rounded division when calculating color components (git-fixes). - leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes). - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes). - leds: turris-omnia: Drop unnecessary mutex locking (git-fixes). - lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes). - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes). - libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924). - libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924). - libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924). - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393). - md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916). - md/raid0: Fix performance regression for large sequential writes (bsc#1213916). - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes). - media: cx24120: Add retval check for cx24120_message_send() (git-fixes). - media: dib7000p: Fix potential division by zero (git-fixes). - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes). - media: go7007: Remove redundant if statement (git-fixes). - media: i2c: ccs: Check rules is non-NULL (git-fixes). - media: i2c: rdacm21: Fix uninitialized value (git-fixes). - media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes). - media: ov2680: Add ov2680_fill_format() helper function (git-fixes). - media: ov2680: Do not take the lock for try_fmt calls (git-fixes). - media: ov2680: Fix ov2680_bayer_order() (git-fixes). - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes). - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes). - media: ov2680: Fix vflip / hflip set functions (git-fixes). - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes). - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes). - media: rkvdec: increase max supported height for H.264 (git-fixes). - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes). - media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes). - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes). - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes). - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - mlxsw: pci: Add shutdown method in PCI driver (git-fixes). - mmc: block: Fix in_flight[issue_type] value error (git-fixes). - mmc: moxart: read scr register without changing byte order (git-fixes). - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes). - mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes). - mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes). - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes). - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes). - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes). - mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes). - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes). - mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes). - mtd: spi-nor: Check bus width while setting QE bit (git-fixes). - mtd: spinand: toshiba: Fix ecc_get_status (git-fixes). - n_tty: Rename tail to old_tail in n_tty_read() (git-fixes). - net: hns3: fix wrong bw weight of disabled tc issue (git-fixes). - net: ieee802154: at86rf230: Stop leaking skb's (git-fixes). - net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes). - net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes). - net: phy: broadcom: stub c45 read/write for 54810 (git-fixes). - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes). - net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733) - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes). - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946). - netfs: fix parameter of cleanup() (bsc#1214743). - nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes). - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes). - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes). - nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902). - nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902). - objtool/x86: Fix SRSO mess (git-fixes). - objtool/x86: Fixup frame-pointer vs rethunk (git-fixes). - objtool: Union instruction::{call_dest,jump_table} (git-fixes). - old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes). - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes). - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes). - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes). - phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes). - phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes). - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes). - pinctrl: amd: Mask wake bits on probe again (git-fixes). - pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes). - pinctrl: cherryview: fix address_space_handler() argument (git-fixes). - pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes). - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes). - platform/x86: dell-sysman: Fix reference leak (git-fixes). - powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106). - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106). - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106). - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106). - powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106). - powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106). - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106). - powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106). - powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes). - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106). - powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106). - powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106). - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/rtas: block error injection when locked down (bsc#1023051). - powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051). - powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). - powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869). - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes). - powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files. - powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503). - powerpc: fix typos in comments (bsc#1212091 ltc#199106). - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503). - pstore/ram: Check start of empty przs during init (git-fixes). - pwm: Add a stub for devm_pwmchip_add() (git-fixes). - pwm: meson: Simplify duplicated per-channel tracking (git-fixes). - pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes). - qed: Fix scheduling in a tasklet while getting stats (git-fixes). - regmap: rbtree: Use alloc_flags for memory allocations (git-fixes). - ring-buffer: Do not swap cpu_buffer during resize process (git-fixes). - ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes). - rpm/mkspec-dtb: support for nested subdirs - rpmsg: glink: Add check for kstrdup (git-fixes). - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976). - s390/purgatory: disable branch profiling (git-fixes bsc#1214372). - s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949). - sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes). - sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes). - sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: RDMA/srp: Fix residual handling (git-fixes) - scsi: bsg: Increase number of devices (bsc#1210048). - scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284). - scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: core: Improve warning message in scsi_device_block() (bsc#1209284). - scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: sg: Increase number of devices (bsc#1210048). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Always set no_report_opcodes (git-fixes). - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes). - scsi: storvsc: Handle SRB status value 0x30 (git-fixes). - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes). - scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371). - selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924). - selftests/futex: Order calls to futex_lock_pi (git-fixes). - selftests/harness: Actually report SKIP for signal tests (git-fixes). - selftests/resctrl: Close perf value read fd on errors (git-fixes). - selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes). - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes). - selftests/rseq: check if libc rseq support is registered (git-fixes). - selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes). - selftests: forwarding: Skip test when no interfaces are specified (git-fixes). - selftests: forwarding: Switch off timeout (git-fixes). - selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes). - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes). - selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes). - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes). - selftests: forwarding: tc_flower: Relax success criterion (git-fixes). - selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes). - serial: sc16is7xx: fix broken port 0 uart init (git-fixes). - serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes). - serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes). - serial: sprd: Fix DMA buffer leak issue (git-fixes). - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629). - smb: client: Fix -Wstringop-overflow issues (bsc#1193629). - smb: client: fix dfs link mount against w2k8 (bsc#1212142). - smb: client: fix null auth (git-fixes). - soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes). - soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes). - soundwire: fix enumeration completion (git-fixes). - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes). - supported.conf: fix typos for -!optional markers - swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453). - target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026). - target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873). - target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857). - target_core_rbd: remove snapshot existence validation code (bsc#1212857). - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes). - timers: Add shutdown mechanism to the internal functions (bsc#1213970). - timers: Provide timer_shutdown[_sync]() (bsc#1213970). - timers: Rename del_timer() to timer_delete() (bsc#1213970). - timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: Replace BUG_ON()s (bsc#1213970). - timers: Silently ignore timers with a NULL function (bsc#1213970). - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: Update kernel-doc for various functions (bsc#1213970). - timers: Use del_timer_sync() even on UP (bsc#1213970). - tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes). - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes). - tracing/probes: Fix not to count error code to total length (git-fixes). - tracing/probes: Fix to avoid double count of the string length on the array (git-fixes). - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes). - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes). - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes). - tracing: Fix memleak due to race between current_tracer and trace (git-fixes). - tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes). - tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes). - tracing: Fix warning in trace_buffered_event_disable() (git-fixes). - tty: fix hang on tty device with no_room set (git-fixes). - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes). - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes). - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes). - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes). - ubifs: Fix memleak when insert_old_idx() failed (git-fixes). - usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes). - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes). - usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes). - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes). - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes). - usb: dwc3: Fix typos in gadget.c (git-fixes). - usb: dwc3: Properly handle processing of pending events (git-fixes). - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes). - usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes). - usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes). - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes). - usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes). - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes). - usb: quirks: add quirk for Focusrite Scarlett (git-fixes). - usb: serial: option: add Quectel EC200A module support (git-fixes). - usb: serial: option: support Quectel EM060K_128 (git-fixes). - usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes). - usb: serial: simple: sort driver entries (git-fixes). - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes). - usb: typec: tcpm: Fix response to vsafe0V event (git-fixes). - usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes). - usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes). - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes). - wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes). - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes). - wifi: cfg80211: Fix return value in scan logic (git-fixes). - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes). - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes). - wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes). - wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes). - wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes). - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes). - wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes). - wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes). - wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes). - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes). - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes). - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes). - wifi: radiotap: fix kernel-doc notation warnings (git-fixes). - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes). - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes). - x86/alternative: Make custom return thunk unconditional (git-fixes). - x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes). - x86/cpu: Clean up SRSO return thunk mess (git-fixes). - x86/cpu: Cleanup the untrain mess (git-fixes). - x86/cpu: Fix __x86_return_thunk symbol type (git-fixes). - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes). - x86/cpu: Rename original retbleed methods (git-fixes). - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes). - x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453). - x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453). - x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453). - x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453). - x86/hyperv: Reorder code to facilitate future work (bsc#1206453). - x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453). - x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453). - x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes). - x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453). - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes). - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). - x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/speculation: Add cpu_show_gds() prototype (git-fixes). - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). - x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). - x86/srso: Disable the mitigation on unaffected configurations (git-fixes). - x86/srso: Explain the untraining sequences a bit more (git-fixes). - x86/srso: Fix build breakage with the LLVM linker (git-fixes). - x86/srso: Fix return thunks in generated code (git-fixes). - x86/static_call: Fix __static_call_fixup() (git-fixes). - x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453). - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453). - x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453). - x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453). - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453). - xfs: fix sb write verify for lazysbcount (bsc#1214661). Important SUSE bug 1023051 SUSE bug 1120059 SUSE bug 1177719 SUSE bug 1188885 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203329 SUSE bug 1203330 SUSE bug 1205462 SUSE bug 1206453 SUSE bug 1208902 SUSE bug 1208949 SUSE bug 1209284 SUSE bug 1209799 SUSE bug 1210048 SUSE bug 1210448 SUSE bug 1211220 SUSE bug 1212091 SUSE bug 1212142 SUSE bug 1212423 SUSE bug 1212526 SUSE bug 1212857 SUSE bug 1212873 SUSE bug 1213026 SUSE bug 1213123 SUSE bug 1213546 SUSE bug 1213580 SUSE bug 1213601 SUSE bug 1213666 SUSE bug 1213733 SUSE bug 1213757 SUSE bug 1213759 SUSE bug 1213916 SUSE bug 1213921 SUSE bug 1213927 SUSE bug 1213946 SUSE bug 1213949 SUSE bug 1213968 SUSE bug 1213970 SUSE bug 1213971 SUSE bug 1214000 SUSE bug 1214019 SUSE bug 1214073 SUSE bug 1214120 SUSE bug 1214149 SUSE bug 1214180 SUSE bug 1214233 SUSE bug 1214238 SUSE bug 1214285 SUSE bug 1214297 SUSE bug 1214299 SUSE bug 1214305 SUSE bug 1214350 SUSE bug 1214368 SUSE bug 1214370 SUSE bug 1214371 SUSE bug 1214372 SUSE bug 1214380 SUSE bug 1214386 SUSE bug 1214392 SUSE bug 1214393 SUSE bug 1214397 SUSE bug 1214404 SUSE bug 1214428 SUSE bug 1214451 SUSE bug 1214635 SUSE bug 1214659 SUSE bug 1214661 SUSE bug 1214727 SUSE bug 1214729 SUSE bug 1214742 SUSE bug 1214743 SUSE bug 1214756 SUSE bug 1214976 SUSE bug 1215522 SUSE bug 1215523 SUSE bug 1215552 SUSE bug 1215553 CVE-2022-38457 CVE-2022-40133 CVE-2023-2007 CVE-2023-20588 CVE-2023-34319 CVE-2023-3610 CVE-2023-37453 CVE-2023-3772 CVE-2023-3863 CVE-2023-40283 CVE-2023-4128 CVE-2023-4133 CVE-2023-4134 CVE-2023-4147 CVE-2023-4194 CVE-2023-4273 CVE-2023-4387 CVE-2023-4459 CVE-2023-4563 CVE-2023-4569 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Legacy 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861) - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860) - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858) - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467) - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899) - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022) - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes). - ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes). - ARM: pxa: remove use of symbol_get() (git-fixes). - arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes). - arm64: module-plts: inline linux/moduleloader.h (git-fixes) - arm64: module: Use module_init_layout_section() to spot init sections (git-fixes) - arm64: sdei: abort running SDEI handlers during crash (git-fixes) - arm64: tegra: Update AHUB clock parent and rate (git-fixes) - arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes) - arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453). - ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes). - ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes). - ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes). - ASoC: meson: spdifin: start hw on dai probe (git-fixes). - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5640: Revert 'Fix sleep in atomic context' (git-fixes). - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes). - ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes). - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes). - ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes). - ata: pata_falcon: fix IO base selection for Q40 (git-fixes). - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes). - ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes). - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes). - blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986). - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992). - block/mq-deadline: use correct way to throttling write requests (bsc#1214993). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes). - bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322). - bpf: Clear the probe_addr for uprobe (git-fixes). - btrfs: do not hold CPU for too long when defragging a file (bsc#1214988). - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453). - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453). - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453). - Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453). - drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes). - drm/amd/display: Add smu write msg id fail retry process (git-fixes). - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes). - drm/amd/display: fix the white screen issue when >= 64GB DRAM (git-fixes). - drm/amd/display: prevent potential division by zero errors (git-fixes). - drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes). - drm/amd/display: Remove wait while locked (git-fixes). - drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: * rename ast_device to ast_private - drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: * rename ast_device to ast_private * context changes - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808). - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes). - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes). - drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes). - drm/i915/gvt: Verify pfn is 'valid' before dereferencing 'struct page' (git-fixes). - drm/meson: fix memory leak on ->hpd_notify callback (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - ext4: avoid potential data overflow in next_linear_group (bsc#1214951). - ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954). - ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). - ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944). - ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942). - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941). - ext4: Remove ext4 locking of moved directory (bsc#1214957). - ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). - fs: do not update freeing inode i_io_list (bsc#1214813). - fs: Establish locking order for unrelated directories (bsc#1214958). - fs: Lock moved directories (bsc#1214959). - fs: lockd: avoid possible wrong NULL parameter (git-fixes). - fs: no need to check source (bsc#1215752). - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813). - fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581). - gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479). - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: use vmalloc_array and vcalloc (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - hwrng: virtio - add an internal buffer (git-fixes). - hwrng: virtio - always add a pending request (git-fixes). - hwrng: virtio - do not wait on cleanup (git-fixes). - hwrng: virtio - do not waste entropy (git-fixes). - hwrng: virtio - Fix race on data_avail and actual data (git-fixes). - i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes). - i3c: master: svc: fix probe failure when no i3c device exist (git-fixes). - i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes). - idr: fix param name in idr_alloc_cyclic() doc (git-fixes). - Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes). - iommu/virtio: Detach domain on endpoint release (git-fixes). - iommu/virtio: Return size mapped for a detached domain (git-fixes). - jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). - jbd2: correct the end of the journal recovery scan range (bsc#1214955). - jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). - jbd2: fix checkpoint cleanup performance regression (bsc#1214952). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). - jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). - jbd2: remove journal_clean_one_cp_list() (bsc#1214947). - jbd2: remove t_checkpoint_io_list (bsc#1214946). - jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). - kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025). - kabi/severities: ignore mlx4 internal symbols - kconfig: fix possible buffer overflow (git-fixes). - kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template. - kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist. - kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes). - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915). - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896). - KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916). - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894). - KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895). - KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911). - KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes). - KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes). - KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes). - KVM: x86/mmu: Include mmu.h in spte.h (git-fixes). - loop: Fix use-after-free issues (bsc#1214991). - loop: loop_set_status_from_info() check before assignment (bsc#1214990). - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236). - mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236). - mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236). - mlx4: Delete custom device management logic (bsc#1187236). - mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236). - mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236). - mlx4: Move the bond work to the core driver (bsc#1187236). - mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236). - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236). - mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236). - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236). - module: Expose module_init_layout_section() (git-fixes) - net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). - net: mana: Add page pool for RX buffers (bsc#1214040). - net: mana: Configure hwc timeout from hardware (bsc#1214037). - net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes). - net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). - net/mlx4: Remove many unnecessary NULL values (bsc#1187236). - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes). - NFS/blocklayout: Use the passed in gfp flags (git-fixes). - NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes). - NFSD: fix change_info in NFSv4 RENAME replies (git-fixes). - NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes). - NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes). - NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes). - NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes). - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes). - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes). - ntb: Clean up tx tail index on link down (git-fixes). - ntb: Drop packets when qp link is down (git-fixes). - ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes). - nvme-auth: use chap->s2 to indicate bidirectional authentication (bsc#1214543). - nvme-tcp: add recovery_delay to sysfs (bsc#1201284). - nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284). - nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284). - nvme-tcp: make 'err_work' a delayed work (bsc#1201284). - PCI: Free released resource after coalescing (git-fixes). - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes). - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes). - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes). - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes). - platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes). - platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes). - pNFS: Fix assignment of xprtdata.cred (git-fixes). - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582). - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). - powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). - printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875). - pwm: lpc32xx: Remove handling of PWM channels (git-fixes). - quota: add new helper dquot_active() (bsc#1214998). - quota: factor out dquot_write_dquot() (bsc#1214995). - quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963). - quota: fix warning in dqgrab() (bsc#1214962). - quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). - quota: rename dquot_active() to inode_quota_active() (bsc#1214997). - RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes) - s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes). - s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124). - s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023). - s390/ipl: add eckd dump support (jsc#PED-2025). - s390/ipl: add eckd support (jsc#PED-2023). - s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023). - s390/ipl: use octal values instead of S_* macros (jsc#PED-2023). - s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes). - s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes). - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes). - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes). - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes). - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes). - scsi: lpfc: Remove reftag check in DIF paths (git-fixes). - scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928). - scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928). - scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928). - scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928). - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928). - scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928). - scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928). - scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928). - scsi: qla2xxx: Remove unused declarations (bsc#1214928). - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928). - scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928). - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Handle additional SRB status values (git-fixes). - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941). - selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549). - selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes). - spi: Add TPM HW flow flag (bsc#1213534) - spi: tegra210-quad: Enable TPM wait polling (bsc#1213534) - spi: tegra210-quad: set half duplex flag (bsc#1213534) - SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes). - tcpm: Avoid soft reset when partner does not support get_status (git-fixes). - tpm_tis_spi: Add hardware wait polling (bsc#1213534) - tracing: Fix race issue between cpu buffer write and swap (git-fixes). - tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes). - tracing: Remove unnecessary copying of tr->current_trace (git-fixes). - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes). - udf: Fix extension of the last extent in the file (bsc#1214964). - udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965). - udf: Fix off-by-one error when discarding preallocation (bsc#1214966). - udf: Fix uninitialized array access for some pathnames (bsc#1214967). - Update metadata - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes). - usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes). - usb: ehci: move new member has_ci_pec_bug into hole (git-fixes). - usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). - usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). - usb: typec: tcpci: clear the fault status bit (git-fixes). - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (git-fixes). - vhost-scsi: unbreak any layout for response (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: fix hung thread due to erroneous iotlb entries (git-fixes). - vhost: handle error while adding split ranges to iotlb (git-fixes). - virtio_net: add checking sq is full inside xdp xmit (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: reorder some funcs (git-fixes). - virtio_net: separate the logic of checking whether sq is full (git-fixes). - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes). - virtio-blk: set req->state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes). - virtio-mmio: do not break lifecycle of vm_dev (git-fixes). - virtio-net: fix race between set queues and probe (git-fixes). - virtio-net: set queues after driver_ok (git-fixes). - virtio-rng: make device ready before making request (git-fixes). - virtio: acknowledge all features before access (git-fixes). - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582). - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes). - word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729). - x86/alternative: Fix race in try_get_desc() (git-fixes). - x86/boot/e820: Fix typo in e820.c comment (git-fixes). - x86/bugs: Reset speculation control settings on init (git-fixes). - x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453). - x86/coco: Export cc_vendor (bsc#1206453). - x86/cpu: Add Lunar Lake M (git-fixes). - x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes). - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes). - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes). - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453). - x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453). - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453). - x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453) - x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453). - x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453). - x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453). - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453). - x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453). - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453). - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453). - x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453). - x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453). - x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453). - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes). - x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes). - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes). - x86/mce: Retrieve poison range from hardware (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes). - x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes). - x86/purgatory: remove PGO flags (git-fixes). - x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes). - x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes). - x86/resctl: fix scheduler confusion with 'current' (git-fixes). - x86/resctrl: Fix task CLOSID/RMID update race (git-fixes). - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). - x86/rtc: Remove __init for runtime functions (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/sgx: Reduce delay and interference of enclave release (git-fixes). - x86/srso: Do not probe microcode in a guest (git-fixes). - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). - x86/srso: Fix srso_show_state() side effect (git-fixes). - x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes). - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes). - xen: remove a confusing comment on auto-translated guest I/O (git-fixes). - xprtrdma: Remap Receive buffers after a reconnect (git-fixes). Important SUSE bug 1152472 SUSE bug 1202845 SUSE bug 1206453 SUSE bug 1213808 SUSE bug 1214928 SUSE bug 1214942 SUSE bug 1214943 SUSE bug 1214944 SUSE bug 1214950 SUSE bug 1214951 SUSE bug 1214954 SUSE bug 1214957 SUSE bug 1214986 SUSE bug 1214988 SUSE bug 1214992 SUSE bug 1214993 SUSE bug 1215322 SUSE bug 1215877 SUSE bug 1215894 SUSE bug 1215895 SUSE bug 1215896 SUSE bug 1215911 SUSE bug 1215915 SUSE bug 1215916 CVE-2023-1192 CVE-2023-1206 CVE-2023-1859 CVE-2023-2177 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-4155 CVE-2023-42753 CVE-2023-42754 CVE-2023-4389 CVE-2023-4622 CVE-2023-4623 CVE-2023-4881 CVE-2023-4921 CVE-2023-5345 cpe:/o:suse:sle-module-legacy:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-24588: Fixed a bug that could allow an adversary to abuse devices that support receiving non-SSP A-MSDU frames to inject arbitrary network packets (bsc#1185861). - CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992). - CVE-2022-3523: Fixed a use after free related to device private page handling (bsc#1204363). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bsc#1207050). - CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034). - CVE-2023-0386: A flaw was found where unauthorized access to the execution of the setuid file with capabilities was found in the OverlayFS subsystem, when a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allowed a local user to escalate their privileges on the system (bsc#1209615). - CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-0469: Fixed a use-after-free flaw in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent (bsc#1207521). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-1078: Fixed a heap out-of-bounds write in rds_rm_zerocopy_callback (bsc#1208601). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-1583: Fixed a NULL pointer dereference in io_file_bitmap_get in io_uring/filetable.c (bsc#1209637). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779, bsc#1198400). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155). - CVE-2023-21106: Fixed possible memory corruption due to double free in adreno_set_param of adreno_gpu.c (bsc#1211654). - CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). - CVE-2023-2235: Fixed a use-after-free vulnerability in the Performance Events system that could have been exploited to achieve local privilege escalation (bsc#1210986). - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-23006: Fixed NULL vs IS_ERR checking in dr_domain_init_resources (bsc#1208845). - CVE-2023-23454: Fixed a type confusion bug in the CBQ network scheduler which could lead to a use-after-free (bsc#1207036). - CVE-2023-23455: Fixed a denial of service inside atm_tc_enqueue in net/sched/sch_atm.c because of type confusion (non-negative numbers can sometimes indicate a TC_ACT_SHOT condition rather than valid classification results) (bsc#1207125). - CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1209052). - CVE-2023-28866: Fixed an out-of-bounds access in net/bluetooth/hci_sync.c because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but did not (bsc#1209780). - CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855, bsc#1205153). - CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294). - CVE-2023-30772: Fixed race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3220: Fixed a NULL pointer dereference flaw in dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() (bsc#1212556). - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043). - CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590). - CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593). - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504). - CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494). - CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). - CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495). The following non-security bugs were fixed: - Add 42a11bf5c543 cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly - Add Intel QAT GEN 4 inflate and deflate feature (jsc#PED-3692). - Add a bug reference to two existing drm-hyperv changes (bsc#1211281). - Add cherry-picked IDs and resort DRM patches (bsc#1206843) - Add eee878537941 cgroup/cpuset: Add cpuset_can_fork() and cpuset_cancel_fork() methods - Add missing IP_VERSION checks for psr for DCN314/315 (bsc#1206843) - Add the kABI workaround for drm_dp_remove_payload() (bsc#1206843) - Also include kernel-docs build requirements for ALP - Avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529). - Avoid unsuported tar parameter on SLE12 - Backport MANA features and support for InfiniBand (jsc#PED-4022). - Correct the bq24190 fix patch to apply at the right place (CVE-2023-33288 bsc#1211590) - Delete for regression addressed (bsc#1207933) - Fixed broken kABI (bsc#1208050 bsc#1211414). - Fixed an Oops / hang at boot (bsc#1209436). - Delete patches causing bsc#1209798, which were restored by accident. - Do not sign the vanilla kernel (bsc#1209008). - Drop a buggy dvb-core fix patch (bsc#1205758) - Drop build fix patch causing a regression on aarch64 (bsc#1209798) - Drop doubly-applied AMDGPU S3 workaround patch (bsc#1206843) - Enable USB NCM drivers (jsc#PED-3759, jsc#PED-3750). - Enable kernel modules bttv bt878 and snd-bt878 (jsc#PED-3931). - Fix bug introduced by broken backport (bsc#1208628). - Fix error path in pci-hyperv to unlock the mutex state_lock - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Fix page corruption caused by racy check in __free_pages (bsc#1208149). - Fix usrmerge error (boo#1211796) - Include Performance Fix ' swiotlb: split up the global swiotlb lock' (jsc#PED-3259). - Makefile: link with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - Makefile: link with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - Recover the dropped aspm check in AMDGPU driver (bsc#1206843) - Remove obsolete KMP obsoletes (bsc#1210469). - Remove obsolete rpm spec constructs defattr does not need to be specified anymore buildroot does not need to be specified anymore - Remove orphaned CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT (bsc#1189998 git-fixes). - Remove usrmerge compatibility symlink in buildroot (boo#1211796) Besides Makefile depmod.sh needs to be patched to prefix /lib/modules. Requires corresponding patch to kmod. - Replace mkinitrd dependency with dracut (bsc#1202353). Also update mkinitrd refrences in documentation and comments. - Require suse-kernel-rpm-scriptlets at all times. The kernel packages call scriptlets for each stage, add the dependency to make it clear to libzypp that the scriptlets are required. There is no special dependency for posttrans, these scriptlets run when transactions are resolved. The plain dependency has to be used to support posttrans. - Revert 'Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work' (git-fixes). - Revert 'HID: logitech-hidpp: add a module parameter to keep firmware gestures' (git-fixes). - Revert 'Input: synaptics - switch touchpad on HP Laptop 15-da3001TU to RMI mode' (git-fixes). - Revert 'KVM: set owner of cpu and vm file operations' (git-fixes) - Revert 'Makefile: link with -z noexecstack --no-warn-rwx-segments' (bsc#1209798) This reverts commit 34f9acb95470d2d2543e314cadd40a0e1c0ee6e1. It causes problems on aarch64: ... BuildID Mismatch vmlinux= vmlinux_debuginfo= - Revert 'PCI: hv: Fix a timing issue which causes kdump to fail occasionally' (bsc#1207185). - Revert 'Revert 'Makefile: link with -z noexecstack --no-warn-rwx-segments' (bsc#1209798)' This reverts commit 7db37fcbd312a083337d722b2c5543e6bf3a5c70. - Revert 'Revert 'block, bfq: honor already-setup queue merges'' (git-fixes). - Revert 'Revert 'x86: link vdso and boot with -z noexecstack' (bsc#1209798)' This reverts commit 26c6d5069004c3a470d53c3a53228ad5d44aa2a5. - Revert 'Update config files. (bsc#1198101)' This reverts commit 924d3f9978137dc25cb49a295c832a32144bc64e. (bsc#1198101, bsc#1208976) Joey Lee: - Revert 'block: freeze the queue earlier in del_gendisk' (git-fixes). - Revert 'bpf: Add support to inline bpf_get_func_ip helper on x86' (git-fixes). - Revert 'char: pcmcia: cm4000_cs: Replace mdelay with usleep_range in set_protocol' (git-fixes). - Revert 'crypto: rsa-pkcs1pad - Replace GFP_ATOMIC with GFP_KERNEL in pkcs1pad_encrypt_sign_complete' (git-fixes). - Revert 'drm/amdgpu: TA unload messages are not actually sent to psp when amdgpu is uninstalled' (bsc#1206843). - Revert 'pinctrl: amd: Disable and mask interrupts on resume' (git-fixes). - Revert 'supported.conf: Add a guard for unsupported DVB modules' The fix has been merged to the upstream and will be backported - Revert 'usb: dwc3: qcom: Keep power domain on to retain controller status' (git-fixes). - Revert 'x86: link vdso and boot with -z noexecstack' (bsc#1209798) This reverts commit dc30142edffcbb9537e3cc47b176cb97109792c7. It causes problems on aarch64: ... BuildID Mismatch vmlinux= vmlinux_debuginfo= - Set references for 'drm/vmwgfx: Validate the box size for the snooped cursor' (bsc#1203332 CVE-2022-36280) - Set references for 'drm/vmwgfx: Validate the box size for the snooped cursor' (bsc#1203332 CVE-2022-36280) - Update commit 52b1b46c39ae ('of: Create platform devices for OF framebuffers') (bsc#1212405) Add missing changes to drivers/of/platform.c. - Update config and supported.conf for MT7921 updates (bsc#1209980) - Update config and supported.conf for mt76 updates (bsc#1209980) - Update config files. (bsc#1198101) Using CONFIG_LOCK_DOWN_KERNEL_FORCE_INTEGRITY instead of CONFIG_LOCK_DOWN_KERNEL_FORCE_NONE because Microsoft signed shim be used to load vanilla kernel. - Update reference for BT fix (CVE-2023-1989 bsc#1210336) - Update the thunderbolt fix to the latest upstream version (bsc#1210165) - Update to the latest version of HPWDT for aarch64 environments (jsc#PED-3210). - [infiniband] READ is 'data destination', not source... (git-fixes) - [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes). - 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes). - acpi / x86: Add support for LPS0 callback handler (git-fixes). - acpi: Do not build ACPICA with '-Os' (git-fixes). - acpi: battery: Fix missing NUL-termination with large strings (git-fixes). - acpi: bus: Ensure that notify handlers are not running after removal (git-fixes). - acpi: cppc: Add AMD pstate energy performance preference cppc control (bsc#1212445). - acpi: cppc: Add auto select register read/write support (bsc#1212445). - acpi: cppc: Disable FIE if registers in PCC regions (bsc#1210953). - acpi: ec: Fix EC address space handler unregistration (bsc#1207149). - acpi: ec: Fix ECDT probe ordering issues (bsc#1207149). - acpi: ec: Fix oops when removing custom query handlers (git-fixes). - acpi: nfit: fix a potential deadlock during NFIT teardown (git-fixes). - acpi: pm: Do not turn of unused power resources on the Toshiba Click Mini (git-fixes). - acpi: pm: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - acpi: pm: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - acpi: pptt: Fix to avoid sleep in the atomic context when PPTT is absent (git-fixes). - acpi: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - acpi: resource: Add IRQ override quirk for LG UltraPC 17U70P (git-fixes). - acpi: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models (git-fixes). - acpi: resource: Add Medion S17413 to IRQ override quirk (git-fixes). - acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - acpi: resource: Do IRQ override on all TongFang GMxRGxx (git-fixes). - acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes). - acpi: tables: Add support for NBFT (bsc#1195921). - acpi: tables: Add support for NBFT (bsc#1206340). - acpi: video: Add acpi_video_backlight_use_native() helper (bsc#1206843). - acpi: video: Allow GPU drivers to report no panels (bsc#1206843). - acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - acpi: video: Fix missing native backlight on Chromebooks (bsc#1206843). - acpi: video: Refactor acpi_video_get_backlight_type() a bit (bsc#1203693). - acpi: viot: Initialize the correct IOMMU fwspec (git-fixes). - acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - acpi: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes). - acpica: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes). - acpica: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149). - acpica: Avoid undefined behavior: applying zero offset to null pointer (git-fixes). - acpica: Drop port I/O validation for some regions (git-fixes). - acpica: include/acpi/acpixf.h: Fix indentation (bsc#1207149). - acpica: nsrepair: handle cases without a return value correctly (git-fixes). - act_mirred: use the backlog for nested calls to mirred ingress (CVE-2022-4269 bsc#1206024). - af_unix: Get user_ns from in_skb in unix_diag_get_exact() (bsc#1209290 CVE-2023-28327). - af_unix: Get user_ns from in_skb in unix_diag_get_exact() (bsc#1209290 CVE-2023-28327). - affs: initialize fsdata in affs_truncate() (git-fixes). - alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes) - alsa: asihpi: check pao in control_message() (git-fixes). - alsa: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes). - alsa: cs46xx: mark snd_cs46xx_download_image as static (git-fixes). - alsa: emu10k1: do not create old pass-through playback device on Audigy (git-fixes). - alsa: emu10k1: fix capture interrupt handler unlinking (git-fixes). - alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - alsa: firewire-digi00x: prevent potential use after free (git-fixes). - alsa: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes). - alsa: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes). - alsa: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes). - alsa: hda/ca0132: minor fix for allocation size (git-fixes). - alsa: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes). - alsa: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes). - alsa: hda/conexant: add a new hda codec SN6180 (git-fixes). - alsa: hda/hdmi: Preserve the previous PCM device upon re-enablement (git-fixes). - alsa: hda/hdmi: disable KAE for Intel DG2 (git-fixes). - alsa: hda/realtek - fixed wrong gpio assigned (git-fixes). - alsa: hda/realtek: Add 'Intel Reference board' and 'NUC 13' SSID in the ALC256 (git-fixes). - alsa: hda/realtek: Add Acer Predator PH315-54 (git-fixes). - alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes). - alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes). - alsa: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes). - alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes). - alsa: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for Clevo L140AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo X370SNW (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - alsa: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes). - alsa: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes). - alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes). - alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes). - alsa: hda/realtek: Add quirks for some Clevo laptops (git-fixes). - alsa: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (git-fixes). - alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes). - alsa: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes). - alsa: hda/realtek: Fix support for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - alsa: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes). - alsa: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes). - alsa: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes). - alsa: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes). - alsa: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes). - alsa: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes). - alsa: hda: Do not unset preset when cleaning up codec (git-fixes). - alsa: hda: Fix Oops by 9.1 surround channel names (git-fixes). - alsa: hda: Fix unhandled register update during auto-suspend period (git-fixes). - alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes). - alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - alsa: hda: cs35l41: Enable Amp High Pass Filter (git-fixes). - alsa: hda: intel-dsp-config: add MTL PCI id (git-fixes). - alsa: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes). - alsa: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes). - alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - alsa: memalloc: Workaround for Xen PV (git-fixes). - alsa: oss: avoid missing-prototype warnings (git-fixes). - alsa: pci: lx6464es: fix a debug loop (git-fixes). - alsa: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes). - alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes). - alsa: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes). - alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes). - alsa: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes). - alsa: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes). - alsa: ymfpci: Fix BUG_ON in probe function (git-fixes). - amdgpu/nv.c: Corrected typo in the video capabilities resolution (git-fixes). - amdgpu: disable powerpc support for the newer display engine (bsc#1194869). - amdgpu: fix build on non-DCN platforms (git-fixes). - apparmor: add a kernel label to use on kernel objects (bsc#1211113). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arch: fix broken BuildID for arm64 and riscv (bsc#1209798). - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64: Always load shadow stack pointer directly from the task struct (git-fixes) - arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes) - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes). - arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes). - arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes) - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes). - arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes) - arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes) - arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes) - arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes). - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes). - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes). - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes). - arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes). - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes) - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes) - arm64: dts: imx8mp: correct usb clocks (git-fixes) - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes). - arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes) - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes) - arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: specify full DMC range (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes). - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes). - arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes). - arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes). - arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes). - arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes). - arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes). - arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes). - arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes). - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes). - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes). - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes). - arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes). - arm64: efi: Execute runtime services from a dedicated stack (git-fixes). - arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes). - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage. - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes). - arm64: make is_ttbrX_addr() noinstr-safe (git-fixes) - arm64: mm: kfence: only handle translation faults (git-fixes) - arm: 9290/1: uaccess: Fix KASAN false-positives (git-fixes). - arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes) - arm: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes). - arm: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes). - arm: OMAP2+: Fix memory leak in realtime_counter_init() (git-fixes). - arm: bcm2835_defconfig: Enable the framebuffer (git-fixes). - arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - arm: defconfig: drop CONFIG_DRM_RCAR_LVDS (git-fixes). - arm: dts: am5748: keep usb4_tm disabled (git-fixes) - arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes). - arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes). - arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes). - arm: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes). - arm: dts: gta04: fix excess dma channel usage (git-fixes). - arm: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes) - arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes). - arm: dts: imx: Fix pca9547 i2c-mux node name (git-fixes). - arm: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes). - arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes) - arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes). - arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes). - arm: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes). - arm: dts: s5pv210: correct MIPI CSIS clock name (git-fixes). - arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes). - arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes) - arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes) - arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes). - arm: dts: vexpress: add missing cache properties (git-fixes). - arm: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes). - arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes). - arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes) - arm: omap: remove debug-leds driver (git-fixes) - arm: remove some dead code (git-fixes) - arm: renumber bits related to _TIF_WORK_MASK (git-fixes) - arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes). - arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes) - arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes). - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes). - asn.1: Fix check for strdup() success (git-fixes). - asoc: Intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes). - asoc: Intel: Skylake: Fix driver hang during shutdown (git-fixes). - asoc: Intel: avs: Access path components under lock (git-fixes). - asoc: Intel: avs: Fix declaration of enum avs_channel_config (git-fixes). - asoc: Intel: avs: Implement PCI shutdown (git-fixes). - asoc: Intel: avs: Use min_t instead of min with cast (git-fixes). - asoc: Intel: boards: fix spelling in comments (git-fixes). - asoc: Intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - asoc: Intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - asoc: Intel: bytcht_es8316: move comment to the right place (git-fixes). - asoc: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes). - asoc: Intel: bytcr_rt5640: Drop reference count of ACPI device after use (git-fixes). - asoc: Intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes). - asoc: Intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes). - asoc: Intel: soc-acpi-byt: Fix 'WM510205' match no longer working (git-fixes). - asoc: Intel: soc-acpi: fix copy-paste issue in topology names (git-fixes). - asoc: Intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes). - asoc: Intel: sof_es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: Intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes). - asoc: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes). - asoc: SOF: Intel: MTL: Fix the device description (git-fixes). - asoc: SOF: ipc4-topology: set dmic dai index from copier (git-fixes). - asoc: SOF: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data() (git-fixes). - asoc: adau7118: do not disable regulators on device unbind (git-fixes). - asoc: amd: acp-es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes). - asoc: codecs: lpass: fix incorrect mclk rate (git-fixes). - asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes). - asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes). - asoc: cs35l41: Only disable internal boost (git-fixes). - asoc: cs42l56: fix DT probe (git-fixes). - asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes). - asoc: dwc: limit the number of overrun messages (git-fixes). - asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes). - asoc: es8316: Handle optional IRQ assignment (git-fixes). - asoc: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes). - asoc: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes). - asoc: fsl_micfil: Correct the number of steps on SX controls (git-fixes). - asoc: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes). - asoc: fsl_mqs: move of_node_put() to the correct location (git-fixes). - asoc: fsl_sai: Update to modern clocking terminology (git-fixes). - asoc: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes). - asoc: hdac_hdmi: use set_stream() instead of set_tdm_slots() (git-fixes). - asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes). - asoc: lpass: Fix for KASAN use_after_free out of bounds (git-fixes). - asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes). - asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes). - asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes). - asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes). - asoc: rsnd: fixup #endif position (git-fixes). - asoc: rt1308-sdw: add the default value of some registers (git-fixes). - asoc: rt5682: Disable jack detection interrupt during suspend (git-fixes). - asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes). - asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes). - asoc: soc-compress: Inherit atomicity from DAI link for Compress FE (git-fixes). - asoc: soc-compress: Reposition and add pcm_mutex (git-fixes). - asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes). - asoc: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (git-fixes). - asoc: soc-pcm: test if a BE can be prepared (git-fixes). - asoc: ssm2602: Add workaround for playback distortions (git-fixes). - asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes). - asoc: topology: Properly access value coming from topology file (git-fixes). - asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes). - asoc: zl38060 add gpiolib dependency (git-fixes). - asoc: zl38060: Remove spurious gpiolib select (git-fixes). - ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes). - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes). - ata: libata: Set __ATA_BASE_SHT max_sectors (git-fixes). - ata: libata: fix NCQ autosense logic (git-fixes). - ata: pata_macio: Fix compilation warning (git-fixes). - ata: pata_octeon_cf: drop kernel-doc notation (git-fixes). - ata: pata_octeon_cf: fix call to trace_ata_bmdma_stop() (git-fixes). - ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes). - ath11k_hw_params unremane cal_size (bsc#1199701 CVE-2020-24588). - ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes). - ath9k: hif_usb: simplify if-if to if-else (git-fixes). - ath9k: htc: clean up statistics macros (git-fixes). - atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes). - audit: update the mailing list in MAINTAINERS (git-fixes). - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes). - backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes). - batman-adv: Broken sync while rescheduling delayed work (git-fixes). - bcache: Revert 'bcache: use bvec_virt' (git-fixes). - bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes). - bcache: fix wrong bdev parameter when calling bio_alloc_clone() in do_bio_hook() (git-fixes). - bcache: put bch_bio_map() back to correct location in journal_write_unlocked() (git-fixes). - bfq: fix use-after-free in bfq_dispatch_request (git-fixes). - bfq: fix waker_bfqq inconsistency crash (git-fixes). - binfmt_elf: Take the mmap lock when walking the VMA list (bsc#1209039 CVE-2023-1249). - blacklist.conf: the commit might cause regression (bsc#1210947) - blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes). - blk-cgroup: properly pin the parent in blkcg_css_online (bsc#1208105). - blk-lib: fix blkdev_issue_secure_erase (git-fixes). - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (git-fixes). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: run queue no matter whether the request is the last request (git-fixes). - blk-throttle: fix that io throttle can only work for single bio (git-fixes). - blk-throttle: prevent overflow while calculating wait time (git-fixes). - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - block, bfq: do not move oom_bfqq (git-fixes). - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes). - block, bfq: fix possible uaf for 'bfqq->bic' (git-fixes). - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes). - block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bfq-iosched.c: use 'false' rather than 'BLK_RW_ASYNC' (git-fixes). - block/bfq_wf2q: correct weight to ioprio (git-fixes). - block/bio: remove duplicate append pages code (git-fixes). - block: Fix possible memory leak for rq_wb on add_disk failure (git-fixes). - block: add a bdev_max_zone_append_sectors helper (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: check minor range in device_add_disk() (git-fixes). - block: clear ->slave_dir when dropping the main slave_dir reference (git-fixes). - block: do not allow splitting of a REQ_NOWAIT bio (git-fixes). - block: do not allow the same type rq_qos add more than once (git-fixes). - block: do not reverse request order when flushing plug list (bsc#1208588 bsc#1208128). - block: ensure iov_iter advances for added pages (git-fixes). - block: fix and cleanup bio_check_ro (git-fixes). - block: fix default IO priority handling again (git-fixes). - block: fix infinite loop for invalid zone append (git-fixes). - block: fix leaking minors of hidden disks (git-fixes). - block: fix memory leak for elevator on add_disk failure (git-fixes). - block: fix missing blkcg_bio_issue_init (bsc#1208107). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (git-fixes). - block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes). - block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes). - block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes). - block: null_blk: Fix null_zone_write() (git-fixes). - block: pop cached rq before potentially blocking rq_qos_throttle() (git-fixes). - block: use bdev_get_queue() in bio.c (git-fixes). - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes). - bluetooth: Fix crash when replugging CSR fake controllers (git-fixes). - bluetooth: Fix double free in hci_conn_cleanup (bsc#1209052 CVE-2023-28464). - bluetooth: Fix double free in hci_conn_cleanup (bsc#1209052 CVE-2023-28464). - bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes). - bluetooth: Fix race condition in hci_cmd_sync_clear (git-fixes). - bluetooth: Fix race condition in hidp_session_thread (git-fixes). - bluetooth: Fix support for Read Local Supported Codecs V2 (git-fixes). - bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes). - bluetooth: HCI: Fix global-out-of-bounds (git-fixes). - bluetooth: ISO: Avoid circular locking dependency (git-fixes). - bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - bluetooth: ISO: do not try to remove CIG if there are bound CIS left (git-fixes). - bluetooth: ISO: fix timestamped HCI ISO data packet parsing (git-fixes). - bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes). - bluetooth: L2CAP: Fix potential user-after-free (git-fixes). - bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes). - bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes). - bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (git-fixes). - bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes). - bluetooth: Remove codec id field in vendor codec definition (git-fixes). - bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (git-fixes). - bluetooth: Set ISO Data Path on broadcast sink (git-fixes). - bluetooth: btintel: Add LE States quirk support (git-fixes). - bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes). - bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes). - bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - bluetooth: btusb: Remove detection of ISO packets over bulk (git-fixes). - bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes). - bluetooth: hci_conn: Fix memory leaks (git-fixes). - bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (git-fixes). - bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (git-fixes). - bluetooth: hci_conn: use HCI dst_type values also for BIS (git-fixes). - bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (git-fixes). - bluetooth: hci_core: fix error handling in hci_register_dev() (git-fixes). - bluetooth: hci_event: Fix Invalid wait context (git-fixes). - bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - bluetooth: hci_qca: fix debugfs registration (git-fixes). - bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes). - bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes). - bluetooth: hci_sync: Fix not indicating power state (git-fixes). - bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (git-fixes). - bluetooth: hci_sync: cancel cmd_timer if hci_open failed (git-fixes). - bnxt: Do not read past the end of test names (jsc#SLE-18978). - bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978). - bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978). - bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978). - bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978). - bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes). - bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978). - bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978). - bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978). - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes). - bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978). - bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978). - bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes) - bpf, arm64: Clear prog->jited_len along prog->jited (git-fixes) - bpf, arm64: Feed byte-offset into bpf line info (git-fixes) - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes) - bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes). - bpf, x64: Factor out emission of REX byte in more cases (git-fixes). - bpf: Add extra path pointer check to d_path helper (git-fixes). - bpf: Fix UAF in task local storage (bsc#1212564). - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes). - bpf: Fix extable address check (git-fixes). - bpf: Fix extable fixup offset (git-fixes). - bpf: Skip task with pid=1 in send_signal_common() (git-fixes). - btrfs: fix race between quota disable and quota assign ioctls (CVE-2023-1611 bsc#1209687). - btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158). - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158). - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes). - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158). - btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158). - btrfs: qgroup: remove outdated TODO comments (bsc#1207158). - bus: mhi: host: Fix race between channel preparation and M0 event (git-fixes). - bus: mhi: host: Range check CHDBOFF and ERDBOFF (git-fixes). - bus: mhi: host: Remove duplicate ee check for syserr (git-fixes). - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (git-fixes). - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes). - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes). - ca8210: fix mac_len negative array access (git-fixes). - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes). - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes). - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes). - can: j1939: change j1939_netdev_lock type to mutex (git-fixes). - can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes). - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes). - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes). - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes). - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes). - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes). - can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes). - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes). - can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes). - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes). - can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes). - can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes). - cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes). - ceph: avoid use-after-free in ceph_fl_release_lock() (jsc#SES-1880). - ceph: blocklist the kclient when receiving corrupted snap trace (jsc#SES-1880). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540). - ceph: flush cap releases when the session is flushed (bsc#1208428). - ceph: flush cap releases when the session is flushed (jsc#SES-1880). - ceph: force updating the msg pointer in non-split case (bsc#1211804). - ceph: move mount state enum to super.h (jsc#SES-1880). - ceph: remove useless session parameter for check_caps() (jsc#SES-1880). - ceph: switch to vfs_inode_has_locks() to fix file lock bug (jsc#SES-1880). - ceph: try to check caps immediately after async creating finishes (jsc#SES-1880). - ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504). - ceph: use locks_inode_context helper (jsc#SES-1880). - cfg80211: allow continuous radar monitoring on offchannel chain (bsc#1209980). - cfg80211: fix possible NULL pointer dereference in cfg80211_stop_offchan_radar_detection (bsc#1209980). - cfg80211: implement APIs for dedicated radar detection HW (bsc#1209980). - cfg80211: move offchan_cac_event to a dedicated work (bsc#1209980). - cfg80211: rename offchannel_chain structs to background_chain to avoid confusion with ETSI standard (bsc#1209980). - cfg80211: schedule offchan_cac_abort_wk in cfg80211_radar_event (bsc#1209980). - cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906). - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827). - cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650). - cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650). - cgroup: Make cgroup_get_from_id() prettier (bsc#1205650). - cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650). - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563). - cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561). - cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (bsc#1205650). - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563). - cgroup: reduce dependency on cgroup_mutex (bsc#1205650). - cifs: Avoid a cast in add_lease_context() (bsc#1193629). - cifs: Check the lease context if we actually got a lease (bsc#1193629). - cifs: Convert struct fealist away from 1-element array (bsc#1193629). - cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (git-fixes). - cifs: Fix smb2_set_path_size() (git-fixes). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629). - cifs: Fix use-after-free in rdata->read_into_pages() (git-fixes). - cifs: Fix warning and UAF when destroy the MR list (git-fixes). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629). - cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes). - cifs: Replace remaining 1-element arrays (bsc#1193629). - cifs: Replace zero-length arrays with flexible-array members (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Use kstrtobool() instead of strtobool() (bsc#1193629). - cifs: append path to open_enter trace event (bsc#1193629). - cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758). - cifs: avoid race conditions with parallel reconnects (bsc#1193629). - cifs: avoid races in parallel reconnects in smb1 (bsc#1193629). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629). - cifs: check only tcon status on tcon related functions (bsc#1193629). - cifs: do not include page data when checking signature (git-fixes). - cifs: do not poll server interfaces too regularly (bsc#1193629). - cifs: do not take exclusive lock for updating target hints (bsc#1193629). - cifs: do not try to use rdma offload on encrypted connections (bsc#1193629). - cifs: double lock in cifs_reconnect_tcon() (git-fixes). - cifs: dump pending mids for all channels in DebugData (bsc#1193629). - cifs: empty interface list when server does not support query interfaces (bsc#1193629). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629). - cifs: fix dentry lookups in directory handle cache (bsc#1193629). - cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629). - cifs: fix mount on old smb servers (boo#1206935). - cifs: fix negotiate context parsing (bsc#1210301). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629). - cifs: fix potential deadlock in cache_refresh_path() (git-fixes). - cifs: fix potential race when tree connecting ipc (bsc#1208758). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629). - cifs: fix sharing of DFS connections (bsc#1208758). - cifs: fix smb1 mount regression (bsc#1193629). - cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629). - cifs: generate signkey for the channel that's reconnecting (bsc#1193629). - cifs: get rid of dead check in smb2_reconnect() (bsc#1193629). - cifs: get rid of dns resolve worker (bsc#1193629). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629). - cifs: handle cache lookup errors different than -ENOENT (bsc#1193629). - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629). - cifs: lock chan_lock outside match_session (bsc#1193629). - cifs: mapchars mount option ignored (bsc#1193629). - cifs: match even the scope id for ipv6 addresses (bsc#1193629). - cifs: missing lock when updating session status (bsc#1193629). - cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629). - cifs: prevent data race in smb2_reconnect() (bsc#1193629). - cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629). - cifs: print last update time for interface list (bsc#1193629). - cifs: print session id while listing open files (bsc#1193629). - cifs: print smb3_fs_context::source when mounting (bsc#1193629). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758). - cifs: protect session status check in smb2_reconnect() (bsc#1208758). - cifs: release leases for deferred close handles when freezing (bsc#1193629). - cifs: remove duplicate code in __refresh_tcon() (bsc#1193629). - cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629). - cifs: remove unused function (bsc#1193629). - cifs: return DFS root session id in DebugData (bsc#1193629). - cifs: return a single-use cfid if we did not get a lease (bsc#1193629). - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629). - cifs: sanitize paths in cifs_update_super_prepath (git-fixes). - cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629). - cifs: split out smb3_use_rdma_offload() helper (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - cifs: update ip_addr for ses only for primary chan setup (bsc#1193629). - cifs: use DFS root session instead of tcon ses (bsc#1193629). - cifs: use tcon allocation functions even for dummy tcon (git-fixes). - cifs: use the least loaded channel for sending requests (bsc#1193629). - clk: HI655X: select REGMAP instead of depending on it (git-fixes). - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes). - clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes). - clk: at91: clk-sam9x60-pll: fix return value check (git-fixes). - clk: imx: avoid memory leak (git-fixes). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (git-fixes). - clk: mxl: Add option to override gate clks (git-fixes). - clk: mxl: Fix a clk entry by adding relevant flags (git-fixes). - clk: mxl: Remove redundant spinlocks (git-fixes). - clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes). - clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes). - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes). - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes). - clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes). - clk: qcom: regmap: add PHY clock source implementation (git-fixes). - clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes). - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes). - clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes). - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes). - clk: sprd: set max_register according to mapping range (git-fixes). - clk: tegra20: fix gcc-7 constant overflow warning (git-fixes). - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes). - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes). - clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes). - clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes). - comedi: use menuconfig for main Comedi menu (git-fixes). - configfs: fix possible memory leak in configfs_create_dir() (git-fixes). - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes). - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953). - cpufreq: CPPC: Fix performance/frequency conversion (git-fixes). - cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - crypto: acomp - define max size for destination (jsc#PED-3692) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - crypto: caam - Clear some memory in instantiate_rng (git-fixes). - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes). - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes). - crypto: crypto4xx - Call dma_unmap_page when done (git-fixes). - crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes). - crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692) - crypto: essiv - Handle EBUSY correctly (git-fixes). - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (git-fixes). - crypto: qat - Fix unsigned function returning negative (jsc#PED-3692) - crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692) - crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692) - crypto: qat - abstract PFVF receive logic (jsc#PED-3692) - crypto: qat - abstract PFVF send function (jsc#PED-3692) - crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692) - crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692) - crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692) - crypto: qat - add backlog mechanism (jsc#PED-3692) - crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692) - crypto: qat - add check to validate firmware images (jsc#PED-3692) - crypto: qat - add limit to linked list parsing (jsc#PED-3692) - crypto: qat - add misc workqueue (jsc#PED-3692) - crypto: qat - add missing restarting event notification in (jsc#PED-3692) - crypto: qat - add param check for DH (jsc#PED-3692) - crypto: qat - add param check for RSA (jsc#PED-3692) - crypto: qat - add pfvf_ops (jsc#PED-3692) - crypto: qat - add resubmit logic for decompression (jsc#PED-3692) - crypto: qat - add support for 401xx devices (jsc#PED-3692) - crypto: qat - add support for compression for 4xxx (jsc#PED-3692) - crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692) - crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692) - crypto: qat - change PFVF ACK behaviour (jsc#PED-3692) - crypto: qat - change behaviour of (jsc#PED-3692) - crypto: qat - change bufferlist logic interface (jsc#PED-3692) - crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692) - crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692) - crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692) - crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692) - crypto: qat - do not rely on min version (jsc#PED-3692) - crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692) - crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692) - crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692) - crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692) - crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692) - crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - extend buffer list interface (jsc#PED-3692) - crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692) - crypto: qat - extract send and wait from (jsc#PED-3692) - crypto: qat - fix DMA transfer direction (jsc#PED-3692) - crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692) - crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692) - crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692) - crypto: qat - fix a typo in a comment (jsc#PED-3692) - crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692) - crypto: qat - fix definition of ring reset results (jsc#PED-3692) - crypto: qat - fix error return code in adf_probe (git-fixes). - crypto: qat - fix error return code in adf_probe (jsc#PED-3692) - crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692) - crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692) - crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692) - crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692) - crypto: qat - fix out-of-bounds read (git-fixes). - crypto: qat - fix wording and formatting in code comment (jsc#PED-3692) - crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692) - crypto: qat - free irq in case of failure (jsc#PED-3692) - crypto: qat - free irqs only if allocated (jsc#PED-3692) - crypto: qat - generalize crypto request buffers (jsc#PED-3692) - crypto: qat - get compression extended capabilities (jsc#PED-3692) - crypto: qat - handle retries due to collisions in (jsc#PED-3692) - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692) - crypto: qat - improve logging of PFVF messages (jsc#PED-3692) - crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692) - crypto: qat - introduce support for PFVF block messages (jsc#PED-3692) - crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692) - crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692) - crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692) - crypto: qat - make PFVF message construction direction (jsc#PED-3692) - crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692) - crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692) - crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692) - crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692) - crypto: qat - move pfvf collision detection values (jsc#PED-3692) - crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692) - crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692) - crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692) - crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692) - crypto: qat - re-enable registration of algorithms (jsc#PED-3692) - crypto: qat - refactor PF top half for PFVF (jsc#PED-3692) - crypto: qat - refactor pfvf version request messages (jsc#PED-3692) - crypto: qat - refactor submission logic (jsc#PED-3692) - crypto: qat - relocate PFVF PF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF VF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF disabled function (jsc#PED-3692) - crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692) - crypto: qat - relocate backlog related structures (jsc#PED-3692) - crypto: qat - relocate bufferlist logic (jsc#PED-3692) - crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692) - crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692) - crypto: qat - remove empty sriov_configure() (jsc#PED-3692) - crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692) - crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692) - crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692) - crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692) - crypto: qat - remove unneeded assignment (jsc#PED-3692) - crypto: qat - remove unneeded braces (jsc#PED-3692) - crypto: qat - remove unneeded packed attribute (jsc#PED-3692) - crypto: qat - remove unused PFVF stubs (jsc#PED-3692) - crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692) - crypto: qat - rename bufferlist functions (jsc#PED-3692) - crypto: qat - rename pfvf collision constants (jsc#PED-3692) - crypto: qat - reorganize PFVF code (jsc#PED-3692) - crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692) - crypto: qat - replace deprecated MSI API (jsc#PED-3692) - crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692) - crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692) - crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692) - crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692) - crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692) - crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692) - crypto: qat - simplify adf_enable_aer() (jsc#PED-3692) - crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692) - crypto: qat - split PFVF message decoding from handling (jsc#PED-3692) - crypto: qat - stop using iommu_present() (jsc#PED-3692) - crypto: qat - store the PFVF protocol version of the (jsc#PED-3692) - crypto: qat - store the ring-to-service mapping (jsc#PED-3692) - crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692) - crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692) - crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692) - crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692) - crypto: qat - use hweight for bit counting (jsc#PED-3692) - crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692) - crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692) - crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692) - crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes). - crypto: sa2ul - Select CRYPTO_DES (git-fixes). - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes). - crypto: seqiv - Handle EBUSY correctly (git-fixes). - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes). - crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes). - crypto: xts - Handle EBUSY correctly (git-fixes). - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes). - device-dax: Fix duplicate 'hmem' device registration (bsc#1211400). - devlink: hold region lock when flushing snapshots (git-fixes). - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm clone: Fix UAF in clone_dtr() (git-fixes). - dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes). - dm integrity: clear the journal on suspend (git-fixes). - dm integrity: flush the journal on suspend (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (bsc#1210806, CVE-2023-2269). - dm ioctl: fix nested locking in table_clear() to remove deadlock concern (bsc#1210806, CVE-2023-2269). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm raid: fix address sanitizer warning in raid_resume (git-fixes). - dm raid: fix address sanitizer warning in raid_status (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes). - dm: fix alloc_dax error handling in alloc_dev (git-fixes). - dm: requeue IO if mapping table not yet available (git-fixes). - dma-buf: Use dma_fence_unwrap_for_each when importing fences (git-fixes). - dma-buf: cleanup kerneldoc of removed component (git-fixes). - dma-direct: use is_swiotlb_active in dma_direct_map_page (PED-3259). - dma-mapping: reformat comment to suppress htmldoc warning (git-fixes). - dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes). - dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes). - dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes). - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes). - dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes). - dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes). - dmaengine: dw-edma: Drop chancnt initialization (git-fixes). - dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes). - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes). - dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes). - dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes). - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes). - dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes). - dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes). - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes). - dmaengine: mv_xor_v2: Fix an error code (git-fixes). - dmaengine: pl330: rename _start to prevent build error (git-fixes). - dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes). - dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes). - dmaengine: tegra: Fix memory leak in terminate_all() (git-fixes). - do not reuse connection if share marked as isolated (bsc#1193629). - docs/memory-barriers.txt: Add a missed closing parenthesis (git-fixes). - docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes). - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (git-fixes). - docs: driver-api: firmware_loader: fix missing argument in usage example (git-fixes). - docs: ftrace: fix a issue with duplicated subtitle number (git-fixes). - docs: gdbmacros: print newest record (git-fixes). - docs: networking: fix x25-iface.rst heading & index order (git-fixes). - documentation/filesystems: ramfs-rootfs-initramfs: use :Author: (git-fixes). - documentation/filesystems: sharedsubtree: add section headings (git-fixes). - documentation/hw-vuln: Document the interaction between IBRS and STIBP (git-fixes). - documentation: devlink: add add devlink-selftests to the table of contents (git-fixes). - documentation: devlink: mlx5.rst: Fix htmldoc build warning (git-fixes). - documentation: simplify and clarify DCO contribution example language (git-fixes). - driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes). - driver core: fix potential null-ptr-deref in device_add() (git-fixes). - driver core: fix resource leak in device_add() (git-fixes). - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes). - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815). - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815). - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes). - drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: transport_class: fix possible memory leak (git-fixes). - drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes). - drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes). - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes). - drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - drm/amd/amdgpu: fix warning during suspend (bsc#1206843). - drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes). - drm/amd/display: Add DCN314 display SG Support (bsc#1206843). - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes). - drm/amd/display: Add NULL plane_state check for cursor disable logic (git-fixes). - drm/amd/display: Add check for DET fetch latency hiding for dcn32 (bsc#1206843). - drm/amd/display: Add missing brackets in calculation (bsc#1206843). - drm/amd/display: Adjust downscaling limits for dcn314 (bsc#1206843). - drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 (bsc#1206843). - drm/amd/display: Clear MST topology if it fails to resume (git-fixes). - drm/amd/display: Conversion to bool not necessary (git-fixes). - drm/amd/display: Defer DIG FIFO disable after VID stream enable (bsc#1206843). - drm/amd/display: Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now (bsc#1206843). - drm/amd/display: Do not clear GPINT register when releasing DMUB from reset (git-fixes). - drm/amd/display: Do not commit pipe when updating DRR (bsc#1206843). - drm/amd/display: Do not set DRR on pipe Commit (bsc#1206843). - drm/amd/display: Enable P-state validation checks for DCN314 (bsc#1206843). - drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes). - drm/amd/display: Fix DP MST sinks removal issue (git-fixes). - drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming (bsc#1206843). - drm/amd/display: Fix display corruption w/ VSR enable (bsc#1206843). - drm/amd/display: Fix hang when skipping modeset (git-fixes). - drm/amd/display: Fix potential null dereference (git-fixes). - drm/amd/display: Fix potential null-deref in dm_resume (git-fixes). - drm/amd/display: Fix race condition in DPIA AUX transfer (bsc#1206843). - drm/amd/display: Fix set scaling doesn's work (git-fixes). - drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes). - drm/amd/display: Fixes for dcn32_clk_mgr implementation (git-fixes). - drm/amd/display: Include virtual signal to set k1 and k2 values (bsc#1206843). - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB (bsc#1206843). - drm/amd/display: Pass the right info to drm_dp_remove_payload (bsc#1206843). - drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes). - drm/amd/display: Properly reuse completion structure (bsc#1206843). - drm/amd/display: Reduce expected sdp bandwidth for dcn321 (bsc#1206843). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1206843). - drm/amd/display: Report to ACPI video if no panels were found (bsc#1206843). - drm/amd/display: Reset DMUB mailbox SW state after HW reset (bsc#1206843). - drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset (git-fixes). - drm/amd/display: Return error code on DSC atomic check failure (git-fixes). - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write (git-fixes). - drm/amd/display: Set dcn32 caps.seamless_odm (bsc#1206843). - drm/amd/display: Set hvm_enabled flag for S/G mode (bsc#1206843). - drm/amd/display: Simplify same effect if/else blocks (git-fixes). - drm/amd/display: Take FEC Overhead into Timeslot Calculation (bsc#1206843). - drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734). - drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 (bsc#1206843). - drm/amd/display: Uninitialized variables causing 4k60 UCLK to stay at DPM1 and not DPM0 (bsc#1206843). - drm/amd/display: Update bounding box values for DCN321 (git-fixes). - drm/amd/display: Update clock table to include highest clock setting (bsc#1206843). - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes). - drm/amd/display: Use min transition for SubVP into MPO (bsc#1206843). - drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit (bsc#1206843). - drm/amd/display: adjust MALL size available for DCN32 and DCN321 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.4 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.5 (bsc#1206843). - drm/amd/display: disconnect MPCC only on OTG change (bsc#1206843). - drm/amd/display: do not call dc_interrupt_set() for disabled crtcs (git-fixes). - drm/amd/display: edp do not add non-edid timings (git-fixes). - drm/amd/display: fix FCLK pstate change underflow (bsc#1206843). - drm/amd/display: fix cursor offset on rotation 180 (git-fixes). - drm/amd/display: fix duplicate assignments (git-fixes). - drm/amd/display: fix flickering caused by S/G mode (git-fixes). - drm/amd/display: fix issues with driver unload (git-fixes). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1206843). - drm/amd/display: fix mapping to non-allocated address (bsc#1206843). - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes). - drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk (bsc#1206843). - drm/amd/display: move remaining FPU code to dml folder (bsc#1206843). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1206843). - drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes). - drm/amd/display: revert Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: skip commit minimal transition state (bsc#1206843). - drm/amd/display: wait for vblank during pipe programming (git-fixes). - drm/amd/pm/smu13: BACO is supported when it's in BACO state (bsc#1206843). - drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 (bsc#1206843). - drm/amd/pm: Fix output of pp_od_clk_voltage (git-fixes). - drm/amd/pm: Fix power context allocation in SMU13 (git-fixes). - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (bsc#1206843). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1206843). - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 (bsc#1206843). - drm/amd/pm: add missing SMU13.0.0 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add missing SMU13.0.7 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 (bsc#1206843). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.4 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU13.0.0 driver_if header to version 0x34 (bsc#1206843). - drm/amd/pm: correct SMU13.0.0 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 max shader clock reporting (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct the fan speed retrieving in PWM for some SMU13 asics (bsc#1206843). - drm/amd/pm: correct the pcie link state check for SMU13 (bsc#1206843). - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation (bsc#1206843). - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 (bsc#1206843). - drm/amd/pm: enable mode1 reset on smu_v13_0_10 (bsc#1206843). - drm/amd/pm: parse pp_handle under appropriate conditions (git-fixes). - drm/amd/pm: remove unused num_of_active_display variable (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes). - drm/amd/pm: update SMU13.0.0 reported maximum shader clock (bsc#1206843). - drm/amd: Avoid ASSERT for some message failures (bsc#1206843). - drm/amd: Avoid BUG() for case of SRIOV missing IP version (bsc#1206843). - drm/amd: Delay removal of the firmware framebuffer (git-fixes). - drm/amd: Fix an out of bounds error in BIOS parser (git-fixes). - drm/amd: Fix initialization for nbio 4.3.0 (bsc#1206843). - drm/amd: Fix initialization for nbio 7.5.1 (bsc#1206843). - drm/amd: Fix initialization mistake for NBIO 7.3.0 (bsc#1206843). - drm/amd: Make sure image is written to trigger VBIOS image update flow (git-fixes). - drm/amd: Tighten permissions on VBIOS flashing attributes (git-fixes). - drm/amdgpu/discovery: add PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable mes support for GC v11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 (bsc#1206843). - drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: set the APU flag for GC 11.0.4 (bsc#1206843). - drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments (bsc#1206843). - drm/amdgpu/display/mst: adjust the naming of mst_port and port of aconnector (bsc#1206843). - drm/amdgpu/display/mst: limit payload to be updated one by one (bsc#1206843). - drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD (bsc#1206843). - drm/amdgpu/dm/dp_mst: Do not grab mst_mgr->lock when computing DSC state (bsc#1206843). - drm/amdgpu/dm/mst: Fix uninitialized var in pre_compute_mst_dsc_configs_for_state() (bsc#1206843). - drm/amdgpu/dm/mst: Use the correct topology mgr pointer in amdgpu_dm_connector (bsc#1206843). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes). - drm/amdgpu/gfx10: Disable gfxoff before disabling powergating (git-fixes). - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes). - drm/amdgpu/mst: Stop ignoring error codes and deadlocking (bsc#1206843). - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (bsc#1206843). - drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 (bsc#1206843). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1206843). - drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 (bsc#1206843). - drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/soc21: do not expose AV1 if VCN0 is harvested (bsc#1206843). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1206843). - drm/amdgpu: Correct the power calcultion for Renior/Cezanne (git-fixes). - drm/amdgpu: Do not register backlight when another backlight should be used (v3) (bsc#1206843). - drm/amdgpu: Do not resume IOMMU after incomplete init (bsc#1206843). - drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN (bsc#1206843). - drm/amdgpu: Enable vclk dclk node for gc11.0.3 (bsc#1206843). - drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (bsc#1206843). - drm/amdgpu: Fix potential NULL dereference (bsc#1206843). - drm/amdgpu: Fix potential double free and null pointer dereference (bsc#1206843). - drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1206843). - drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes). - drm/amdgpu: Fixed bug on error when unloading amdgpu (bsc#1206843). - drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869). - drm/amdgpu: Register ACPI video backlight when skipping amdgpu backlight registration (bsc#1206843). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1206843). - drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes). - drm/amdgpu: Use the sched from entity for amdgpu_cs trace (git-fixes). - drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes). - drm/amdgpu: add gfx support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add gmc v11 support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add missing radeon secondary PCI ID (git-fixes). - drm/amdgpu: add smu 13 support for smu 13.0.11 (bsc#1206843). - drm/amdgpu: add soc21 common ip block support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add tmz support for GC 11.0.1 (bsc#1206843). - drm/amdgpu: add tmz support for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: allow more APUs to do mode2 reset when go to S4 (bsc#1206843). - drm/amdgpu: allow multipipe policy on ASICs with one MEC (bsc#1206843). - drm/amdgpu: change gfx 11.0.4 external_id range (git-fixes). - drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes). - drm/amdgpu: correct MEC number for gfx11 APUs (bsc#1206843). - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes). - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes). - drm/amdgpu: drop experimental flag on aldebaran (git-fixes). - drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable GFX IP v11.0.4 CG support (bsc#1206843). - drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable HDP SD for gfx 11.0.3 (bsc#1206843). - drm/amdgpu: enable PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu: enable VCN DPG for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram (git-fixes). - drm/amdgpu: fix amdgpu_job_free_resources v2 (bsc#1206843). - drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv (bsc#1206843). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 (bsc#1206843). - drm/amdgpu: fix mmhub register base coding error (git-fixes). - drm/amdgpu: fix return value check in kfd (git-fixes). - drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (bsc#1206843). - drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes). - drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume (git-fixes). - drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (git-fixes). - drm/amdgpu: reposition the gpu reset checking for reuse (bsc#1206843). - drm/amdgpu: set GC 11.0.4 family (bsc#1206843). - drm/amdgpu: skip ASIC reset for APUs when go to S4 (bsc#1206843). - drm/amdgpu: skip MES for S0ix as well since it's part of GFX (bsc#1206843). - drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes). - drm/amdgpu: skip mes self test after s0i3 resume for MES IP v11.0 (bsc#1206843). - drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset (git-fixes). - drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes). - drm/amdgpu: update wave data type to 3 for gfx11 (bsc#1206843). - drm/amdkfd: Add sync after creating vram bo (bsc#1206843). - drm/amdkfd: Fix BO offset for multi-VMA page migration (git-fixes). - drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU (bsc#1206843). - drm/amdkfd: Fix an illegal memory access (git-fixes). - drm/amdkfd: Fix double release compute pasid (bsc#1206843). - drm/amdkfd: Fix kfd_process_device_init_vm error handling (bsc#1206843). - drm/amdkfd: Fix the memory overrun (bsc#1206843). - drm/amdkfd: Fix the warning of array-index-out-of-bounds (bsc#1206843). - drm/amdkfd: Fixed kfd_process cleanup on module exit (git-fixes). - drm/amdkfd: Get prange->offset after svm_range_vram_node_new (git-fixes). - drm/amdkfd: Page aligned memory reserve size (bsc#1206843). - drm/amdkfd: add GC 11.0.4 KFD support (bsc#1206843). - drm/amdkfd: fix a potential double free in pqm_create_queue (git-fixes). - drm/amdkfd: fix potential kgd_mem UAFs (git-fixes). - drm/amdkfd: introduce dummy cache info for property asic (bsc#1206843). - drm/armada: Fix a potential double free in an error handling path (git-fixes). - drm/ast: Fix ARM compatibility (git-fixes). - drm/bochs: fix blanking (git-fixes). - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes). - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes). - drm/bridge: it6505: Fix return value check for pm_runtime_get_sync (git-fixes). - drm/bridge: lt8912b: Add hot plug detection (git-fixes). - drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes). - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes). - drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes). - drm/bridge: lt9611: fix HPD reenablement (git-fixes). - drm/bridge: lt9611: fix clock calculation (git-fixes). - drm/bridge: lt9611: fix polarity programming (git-fixes). - drm/bridge: lt9611: fix programming of video modes (git-fixes). - drm/bridge: lt9611: fix sleep mode setup (git-fixes). - drm/bridge: lt9611: pass a pointer to the of node (git-fixes). - drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes). - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec (git-fixes). - drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow (git-fixes). - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (git-fixes). - drm/connector: print max_requested_bpc in state debugfs (git-fixes). - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state() (bsc#1206843). - drm/display/dp_mst: Add helper for finding payloads in atomic MST state (bsc#1206843). - drm/display/dp_mst: Add helpers for serializing SST &lt;-> MST transitions (bsc#1206843). - drm/display/dp_mst: Add nonblocking helpers for DP MST (bsc#1206843). - drm/display/dp_mst: Call them time slots, not VCPI slots (bsc#1206843). - drm/display/dp_mst: Correct the kref of port (bsc#1206843). - drm/display/dp_mst: Do not open code modeset checks for releasing time slots (bsc#1206843). - drm/display/dp_mst: Drop all ports from topology on CSNs before queueing link address work (bsc#1206843). - drm/display/dp_mst: Fix confusing docs for drm_dp_atomic_release_time_slots() (bsc#1206843). - drm/display/dp_mst: Fix down message handling after a packet reception error (git-fixes). - drm/display/dp_mst: Fix down/up message handling after sink disconnect (git-fixes). - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (git-fixes). - drm/display/dp_mst: Fix modeset tracking in drm_dp_atomic_release_vcpi_slots() (bsc#1206843). - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload() (bsc#1206843). - drm/display/dp_mst: Maintain time slot allocations when deleting payloads (bsc#1206843). - drm/display/dp_mst: Move all payload info into the atomic state (bsc#1206843). - drm/display/dp_mst: Rename drm_dp_mst_vcpi_allocation (bsc#1206843). - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (git-fixes). - drm/displayid: add displayid_get_header() and check bounds better (git-fixes). - drm/dp: Do not rewrite link config when setting phy test pattern (git-fixes). - drm/dp_mst: Avoid deleting payloads for connectors staying enabled (bsc#1206843). - drm/dp_mst: fix drm_dp_dpcd_read return value checks (git-fixes). - drm/edid: fix AVI infoframe aspect ratio handling (git-fixes). - drm/edid: fix parsing of 3D modes from HDMI VSDB (git-fixes). - drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes). - drm/exynos: fix g2d_open/close helper function definitions (git-fixes). - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes). - drm/fbdev-generic: prohibit potential out-of-bounds access (git-fixes). - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes). - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes). - drm/hyperv: Add error message for fb size greater than allocated (git-fixes). - drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes). - drm/i915/active: Fix missing debug object activation (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/adlp: Fix typo for reference clock (git-fixes). - drm/i915/color: Fix typo for Plane CSC indexes (git-fixes). - drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes). - drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes). - drm/i915/dg2: Drop one PCI ID (git-fixes). - drm/i915/dg2: Support 4k@30 on HDMI (git-fixes). - drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU (git-fixes). - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes). - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes). - drm/i915/display: Check source height is > 0 (git-fixes). - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes). - drm/i915/display: clean up comments (git-fixes). - drm/i915/dmc: Update DG2 DMC version to v2.08 (git-fixes). - drm/i915/dp: prevent potential div-by-zero (git-fixes). - drm/i915/dp_mst: Fix mst_mgr lookup during atomic check (bsc#1206843). - drm/i915/dp_mst: Fix payload removal during output disabling (bsc#1206843). - drm/i915/dpt: Treat the DPT BO as a framebuffer (git-fixes). - drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() (git-fixes). - drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes). - drm/i915/gem: Flush lmem contents after construction (git-fixes). - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes). - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes). - drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes). - drm/i915/gt: perform uc late init after probe error injection (git-fixes). - drm/i915/guc: Do not capture Gen8 regs on Xe devices (git-fixes). - drm/i915/huc: always init the delayed load fence (git-fixes). - drm/i915/huc: bump timeout for delayed load and reduce print verbosity (git-fixes). - drm/i915/huc: fix leak of debug object in huc load fence on driver unload (git-fixes). - drm/i915/migrate: Account for the reserved_space (git-fixes). - drm/i915/migrate: fix corner case in CCS aux copying (git-fixes). - drm/i915/psr: Fix PSR_IMR/IIR field handling (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/pxp: use &lt;> instead of '' for headers in include/ (git-fixes). - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes). - drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes). - drm/i915/selftests: Add some missing error propagation (git-fixes). - drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes). - drm/i915/selftests: Stop using kthread_stop() (git-fixes). - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes). - drm/i915: Allow switching away via vga-switcheroo if uninitialized (git-fixes). - drm/i915: Avoid potential vm use-after-free (git-fixes). - drm/i915: Disable DC states for all commits (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes). - drm/i915: Fix NULL ptr deref by checking new_crtc_state (git-fixes). - drm/i915: Fix VBT DSI DVO port handling (git-fixes). - drm/i915: Fix context runtime accounting (git-fixes). - drm/i915: Fix fast wake AUX sync len (git-fixes). - drm/i915: Fix potential bit_17 double-free (git-fixes). - drm/i915: Fix potential context UAFs (git-fixes). - drm/i915: Fix request ref counting during error capture & debugfs dump (git-fixes). - drm/i915: Fix up locking around dumping requests lists (git-fixes). - drm/i915: Initialize the obj flags for shmem objects (git-fixes). - drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes). - drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on skl/glk (git-fixes). - drm/i915: Move fd_install after last use of fence (git-fixes). - drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes). - drm/i915: Remove __maybe_unused from mtl_info (git-fixes). - drm/i915: Remove unused bits of i915_vma/active api (git-fixes). - drm/i915: Remove unused variable (git-fixes). - drm/i915: Use 18 fast wake AUX sync len (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: move a Kconfig symbol to unbreak the menu presentation (git-fixes). - drm/i915: stop abusing swiotlb_max_segment (git-fixes). - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes). - drm/mediatek: Clean dangling pointer on bind error path (git-fixes). - drm/mediatek: Drop unbalanced obj unref (git-fixes). - drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes). - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes). - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes). - drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes). - drm/meson: fix missing component unbind on bind errors (git-fixes). - drm/meson: reorder driver deinit sequence to fix use-after-free bug (git-fixes). - drm/mgag200: Fix gamma lut not initialized (git-fixes). - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes). - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes). - drm/msm/a5xx: fix context faults during ring switch (git-fixes). - drm/msm/a5xx: fix highest bank bit for a530 (git-fixes). - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes). - drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes). - drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage (git-fixes). - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (git-fixes). - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes). - drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error (git-fixes). - drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at gpu load (git-fixes). - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes). - drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes). - drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes). - drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training (git-fixes). - drm/msm/dp: unregister audio driver during unbind (git-fixes). - drm/msm/dpu: Add INTF_5 interrupts (git-fixes). - drm/msm/dpu: Add check for cstate (git-fixes). - drm/msm/dpu: Add check for pstates (git-fixes). - drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes). - drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes). - drm/msm/dpu: Reject topologies for which no DSC blocks are available (git-fixes). - drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes). - drm/msm/dpu: Remove num_enc from topology struct in favour of num_dsc (git-fixes). - drm/msm/dpu: Wire up DSC mask for active CTL configuration (git-fixes). - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (git-fixes). - drm/msm/dpu: clear DSPP reservations in rm release (git-fixes). - drm/msm/dpu: disable features unsupported by QCM2290 (git-fixes). - drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK (git-fixes). - drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes). - drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks (git-fixes). - drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes). - drm/msm/dpu: sc7180: add missing WB2 clock control (git-fixes). - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes). - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/dsi: Allow 2 CTRLs on v2.5.0 (git-fixes). - drm/msm/gem: Add check for kmalloc (git-fixes). - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/mdp5: Add check for kzalloc (git-fixes). - drm/msm/mdp5: fix reading hw revision on db410c platform (git-fixes). - drm/msm: Be more shouty if per-process pgtables are not working (git-fixes). - drm/msm: Fix potential invalid ptr free (git-fixes). - drm/msm: Set max segment size earlier (git-fixes). - drm/msm: clean event_thread->worker in case of an error (git-fixes). - drm/msm: fix NULL-deref on irq uninstall (git-fixes). - drm/msm: fix NULL-deref on snapshot tear down (git-fixes). - drm/msm: fix drm device leak on bind errors (git-fixes). - drm/msm: fix missing wq allocation error handling (git-fixes). - drm/msm: fix vram leak on bind errors (git-fixes). - drm/msm: fix workqueue leak on bind errors (git-fixes). - drm/msm: use strscpy instead of strncpy (git-fixes). - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes). - drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes). - drm/nouveau/dp: check for NULL nv_connector->native_mode (git-fixes). - drm/nouveau/kms/nv50-: remove unused functions (git-fixes). - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes). - drm/nouveau/kms: Cache DP encoders in nouveau_connector (bsc#1206843). - drm/nouveau/kms: Pull mst state in for all modesets (bsc#1206843). - drm/nouveau: add nv_encoder pointer check for NULL (git-fixes). - drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes). - drm/omap: dsi: Fix excessive stack usage (git-fixes). - drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes). - drm/panel: novatek-nt35950: Improve error handling (git-fixes). - drm/panel: novatek-nt35950: Only unregister DSI1 if it exists (git-fixes). - drm/panel: otm8009a: Set backlight parent to panel device (git-fixes). - drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes). - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes). - drm/probe-helper: Cancel previous job before starting new one (git-fixes). - drm/radeon: Drop legacy MST support (bsc#1206843). - drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes). - drm/radeon: free iio for atombios when driver shutdown (git-fixes). - drm/radeon: reintroduce radeon_dp_work_func content (git-fixes). - drm/rockchip: Drop unbalanced obj unref (git-fixes). - drm/sched: Remove redundant check (git-fixes). - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() (git-fixes). - drm/shmem-helper: Remove another errant put in error path (git-fixes). - drm/shmem-helper: Revert accidental non-GPL export (git-fixes). - drm/sun4i: fix missing component unbind on bind errors (git-fixes). - drm/tegra: Avoid potential 32-bit integer overflow (git-fixes). - drm/tegra: firewall: Check for is_addr_reg existence in IMM check (git-fixes). - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes). - drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes). - drm/ttm: Fix a NULL pointer dereference (git-fixes). - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (git-fixes). - drm/ttm: optimize pool allocations a bit v2 (git-fixes). - drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking (git-fixes). - drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: drv: Call component_unbind_all() (git-fixes). - drm/vc4: hdmi: Correct interlaced timings again (git-fixes). - drm/vc4: hdmi: make CEC adapter name unique (git-fixes). - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes). - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 (git-fixes). - drm/vc4: hvs: Set AXI panic modes (git-fixes). - drm/vc4: kms: Sort the CRTCs by output before assigning them (git-fixes). - drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes). - drm/vgem: add missing mutex_destroy (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Fix NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776 CVE-2023-22998). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - drm/virtio: exbuf->fence_fd unmodified on interrupted wait (git-fixes). - drm/vkms: Fix memory leak in vkms_init() (git-fixes). - drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes). - drm/vmwgfx: Avoid NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331 CVE-2022-38096) - drm/vmwgfx: Do not drop the reference to the handle too soon (git-fixes). - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (git-fixes). - drm/vmwgfx: Fix race issue calling pin_user_pages (git-fixes). - drm/vmwgfx: Stop accessing buffer objects which failed init (git-fixes). - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes). - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes). - drm: amd: display: Fix memory leakage (git-fixes). - drm: bridge: adv7511: unregister cec i2c device after cec adapter (git-fixes). - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags (git-fixes). - drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes). - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC (git-fixes). - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes). - drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes). - drm: tidss: Fix pixel format definition (git-fixes). - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes). - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes). - dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes). - dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes). - dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes). - dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes). - dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes). - dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes). - dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes). - dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes). - dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes). - dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes). - dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes). - dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes). - dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes). - dt-bindings: power: renesas,apmu: Fix cpus property limits (git-fixes). - dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes). - dt-bindings: remoteproc: st,stm32-rproc: Fix phandle-array parameters description (git-fixes). - dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes). - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes). - dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes). - dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes). - dt-bindings: usb: snps,dwc3: Fix 'snps,hsphy_interface' type (git-fixes). - e1000e: Disable TSO on i219-LM card to increase speed (git-fixes). - edac/i10nm: Add Intel Emerald Rapids server support (PED-4400). - eeprom: at24: also select REGMAP (git-fixes). - eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes). - efi/x86: libstub: Fix typo in __efi64_argmap* name (git-fixes). - efi: Accept version 2 of memory attributes table (git-fixes). - efi: efivars: Fix variable writes with unsupported query_variable_store() (git-fixes). - efi: efivars: Fix variable writes without query_variable_store() (git-fixes). - efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes). - efi: rt-wrapper: Add missing include (git-fixes). - efi: ssdt: Do not free memory if ACPI table was loaded successfully (git-fixes). - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes). - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes). - elevator: update the document of elevator_switch (git-fixes). - ethernet: 3com/typhoon: do not write directly to netdev->dev_addr (git-fixes). - ethernet: 8390/etherh: do not write directly to netdev->dev_addr (git-fixes). - ethernet: i825xx: do not write directly to netdev->dev_addr (git-fixes). - ethernet: ice: avoid gcc-9 integer overflow warning (jsc#PED-376). - ethernet: seeq/ether3: do not write directly to netdev->dev_addr (git-fixes). - ethernet: tundra: do not write directly to netdev->dev_addr (git-fixes). - exit: Add and use make_task_dead (bsc#1207328). - exit: Allow oops_limit to be disabled (bsc#1207328). - exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328). - exit: Move force_uaccess back into do_exit (bsc#1207328). - exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328). - exit: Put an upper limit on how often we can oops (bsc#1207328). - exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328). - exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328). - ext4,f2fs: fix readahead of verity data (bsc#1207648). - ext4: Fix deadlock during directory rename (bsc#1210763). - ext4: Fix possible corruption when moving a directory (bsc#1210763). - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add helper to check quota inums (bsc#1207618). - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617). - ext4: add missing validation of fast-commit record lengths (bsc#1207626). - ext4: allocate extended attribute value in vmalloc area (bsc#1207635). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid resizing to a partial cluster size (bsc#1206880). - ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634). - ext4: continue to expand file system when the target size does not reach (bsc#1206882). - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592). - ext4: correct max_inline_xattr_value_size computing (bsc#1206878). - ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878). - ext4: disable fast-commit of encrypted dir operations (bsc#1207623). - ext4: do not allow journal inode to have encrypt flag (bsc#1207621). - ext4: do not increase iversion counter for ea_inodes (bsc#1207605). - ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603). - ext4: do not set up encryption key during jbd2 transaction (bsc#1207624). - ext4: drop ineligible txn start stop APIs (bsc#1207588). - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606). - ext4: factor out ext4_fc_get_tl() (bsc#1207615). - ext4: fast commit may miss file actions (bsc#1207591). - ext4: fast commit may not fallback for ineligible commit (bsc#1207590). - ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886). - ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766). - ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767). - ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076). - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1206881). - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620). - ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594). - ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765). - ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891). - ext4: fix deadlock due to mbcache entry corruption (bsc#1207653). - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631). - ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608). - ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630). - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593). - ext4: fix extent status tree race in writeback error recovery path (bsc#1206877). - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764). - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636). - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894). - ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625). - ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609). - ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884). - ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628). - ext4: fix possible double unlock when moving a directory (bsc#1210763). - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611). - ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612). - ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616). - ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637). - ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627). - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890). - ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893). - ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888). - ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622). - ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878). - ext4: fix warning in 'ext4_da_release_space' (bsc#1206887). - ext4: goto right label 'failed_mount3a' (bsc#1207610). - ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629). - ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633). - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614). - ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602). - ext4: make ext4_lazyinit_thread freezable (bsc#1206885). - ext4: place buffer head allocation before handle start (bsc#1207607). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - ext4: simplify updating of fast commit stats (bsc#1207589). - ext4: unconditionally enable the i_version counter (bsc#1211299). - ext4: update 'state->fc_regions_size' after successful memory allocation (bsc#1207613). - ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876). - ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793). - extcon: usbc-tusb320: fix kernel-doc warning (git-fixes). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (git-fixes). - fbcon: Fix error paths in set_con2fb_map (git-fixes). - fbcon: Fix null-ptr-deref in soft_cursor (git-fixes). - fbcon: set_con2fb_map needs to set con2fb_map! (git-fixes). - fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472) Backporting changes: * replace refcount_read() with atomic_read() - fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes). - fbdev: au1200fb: Fix potential divide by zero (git-fixes). - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes). - fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387). - fbdev: intelfb: Fix potential divide by zero (git-fixes). - fbdev: lxfb: Fix potential divide by zero (git-fixes). - fbdev: mmp: Fix deferred clk handling in mmphw_probe() (git-fixes). - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes). - fbdev: nvidia: Fix potential divide by zero (git-fixes). - fbdev: omapfb: avoid stack overflow warning (git-fixes). - fbdev: omapfb: cleanup inconsistent indentation (git-fixes). - fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes). - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes). - fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes). - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes). - fbdev: tgafb: Fix potential divide by zero (git-fixes). - fbdev: udlfb: Fix endpoint check (git-fixes). - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes). - filelock: new helper: vfs_inode_has_locks (jsc#SES-1880). - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes). - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes). - firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes). - firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes). - firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes). - firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes). - firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes). - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes). - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes). - firmware: qcom_scm: Clear download bit during reboot (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes). - firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes). - flow_dissector: Do not count vlan tags inside tunnel payload (git-fixes). - fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258). - fotg210-udc: Add missing completion handler (git-fixes). - fpga: bridge: fix kernel-doc parameter description (git-fixes). - fpga: bridge: properly initialize bridge device before populating children (git-fixes). - fpga: m10bmc-sec: Fix probe rollback (git-fixes). - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes). - fprobe: Check rethook_alloc() return in rethook initialization (git-fixes). - fprobe: Fix smatch type mismatch warning (git-fixes). - fprobe: add recursion detection in fprobe_exit_handler (git-fixes). - fprobe: make fprobe_kprobe_handler recursion free (git-fixes). - fs/jfs: fix shift exponent db_agl2size negative (git-fixes). - fs/proc: task_mmu.c: do not read mapcount for migration entry (CVE-2023-1582, bsc#1209636). - fs: account for filesystem mappings (bsc#1205191). - fs: account for group membership (bsc#1205191). - fs: add i_user_ns() helper (bsc#1205191). - fs: dlm: do not call kernel_getpeername() in error_report() (bsc#1208130). - fs: dlm: use sk->sk_socket instead of con->sock (bsc#1208130). - fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632). - fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes). - fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes). - fs: move mapping helpers (bsc#1205191). - fs: remove __sync_filesystem (git-fixes). - fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes). - fs: tweak fsuidgid_has_mapping() (bsc#1205191). - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (bsc#1210409). - fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429). - ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes). - ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes). - ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes). - fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759). - fuse: always revalidate rename target dentry (bsc#1211808). - fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807). - futex: Resend potentially swallowed owner death notification (git-fixes). - genirq: Provide new interfaces for affinity hints (bsc#1208153). - git-sort: Add io_uring 6.3 fixes remote - google/gve:fix repeated words in comments (bsc#1211519). - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes). - gpio: davinci: Add irq chip flag to skip set wake (git-fixes). - gpio: mockup: Fix mode of debugfs files (git-fixes). - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes). - gpio: vf610: connect GPIO label to dev name (git-fixes). - gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes). - gpu: host1x: Fix mask for syncpoint increment register (git-fixes). - gpu: host1x: Fix potential double free if IOMMU is disabled (git-fixes). - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes). - gve: Adding a new AdminQ command to verify driver (bsc#1211519). - gve: Cache link_speed value from device (git-fixes). - gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519). - gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519). - gve: Handle alternate miss completions (bsc#1211519). - gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519). - gve: Remove the code of clearing PBA bit (git-fixes). - gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes). - gve: enhance no queue page list detection (bsc#1211519). - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes). - hfs/hfsplus: use WARN_ON for sanity check (git-fixes). - hfs: Fix OOB Write in hfs_asc2mac (git-fixes). - hfs: fix OOB Read in __hfs_brec_find (git-fixes). - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes). - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes). - hid: Add Mapping for System Microphone Mute (git-fixes). - hid: amd_sfh: Add missing check for dma_alloc_coherent (bsc#1212605 CVE-2023-3357). - hid: amd_sfh: Add missing check for dma_alloc_coherent (bsc#1212605 CVE-2023-3357). - hid: asus: use spinlock to protect concurrent accesses (git-fixes). - hid: asus: use spinlock to safely schedule workers (git-fixes). - hid: bigben: use spinlock to protect concurrent accesses (git-fixes). - hid: bigben: use spinlock to safely schedule workers (git-fixes). - hid: bigben_probe(): validate report count (git-fixes). - hid: bigben_worker() remove unneeded check on report_field (git-fixes). - hid: core: Fix deadloop in hid_apply_multiplier (git-fixes). - hid: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes). - hid: elecom: add support for TrackBall 056E:011C (git-fixes). - hid: google: add jewel USB id (git-fixes). - hid: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes). - hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes). - hid: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes). - hid: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes). - hid: microsoft: Add rumble support to latest xbox controllers (bsc#1211280). - hid: multitouch: Add quirks for flipped axes (git-fixes). - hid: playstation: sanity check DualSense calibration data (git-fixes). - hid: retain initial quirks set up when creating HID devices (git-fixes). - hid: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes). - hid: wacom: Force pen out of prox if no events have been received in a while (git-fixes). - hid: wacom: Set a default resolution for older tablets (git-fixes). - hid: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes). - hid: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes). - hid: wacom: generic: Set battery quirk only when we see battery data (git-fixes). - hv: fix comment typo in vmbus_channel/low_latency (git-fixes). - hv: hv_balloon: fix memory leak with using debugfs_lookup() (git-fixes). - hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes). - hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes). - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes). - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes). - hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes). - hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes). - hwmon: (coretemp) Simplify platform device handling (git-fixes). - hwmon: (ftsteutates) Fix scaling of measurements (git-fixes). - hwmon: (ina3221) return prober error code (git-fixes). - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes). - hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848). - hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes). - hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes). - hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes). - hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes). - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes). - hwmon: fix potential sensor registration fail if of_node is missing (git-fixes). - hwmon: tmp512: drop of_match_ptr for ID table (git-fixes). - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes). - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes). - i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes). - i2c: hisi: Avoid redundant interrupts (git-fixes). - i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes). - i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes). - i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes). - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes). - i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes). - i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes). - i2c: mv64xxx: Remove shutdown method from driver (git-fixes). - i2c: mxs: suppress probe-deferral error message (git-fixes). - i2c: ocores: generate stop condition after timeout in polling mode (git-fixes). - i2c: omap: Fix standard mode false ACK readings (git-fixes). - i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes). - i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes). - i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes). - i2c: tegra: Fix PEC support for SMBUS block read (git-fixes). - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes). - i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378). - i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378). - i40e: Fix DMA mappings leak (jsc#SLE-18378). - i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378). - i40e: Fix VF set max MTU size (jsc#SLE-18378). - i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378). - i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378). - i40e: Fix calculating the number of queue pairs (jsc#SLE-18378). - i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378). - i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378). - i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378). - i40e: Fix for VF MAC address 0 (jsc#SLE-18378). - i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378). - i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378). - i40e: Fix kernel crash during module removal (jsc#SLE-18378). - i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378). - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378). - i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378). - i40e: Refactor tc mqprio checks (jsc#SLE-18378). - i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378). - i40e: fix accessing vsi->active_filters without holding lock (jsc#SLE-18378). - i40e: fix flow director packet filter programming (jsc#SLE-18378). - i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378). - i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378). - i825xx: sni_82596: use eth_hw_addr_set() (git-fixes). - i915 kABI workaround (git-fixes). - i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes). - iavf/iavf_main: actually log ->src mask when talking about it (jsc#SLE-18385). - iavf: Detach device during reset task (jsc#SLE-18385). - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385). - iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385). - iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385). - iavf: Fix a crash during reset task (jsc#SLE-18385). - iavf: Fix bad page state (jsc#SLE-18385). - iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385). - iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385). - iavf: Fix max_rate limiting (jsc#SLE-18385). - iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385). - iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385). - iavf: do not track VLAN 0 filters (jsc#PED-835). - iavf: fix hang on reboot with ice (jsc#SLE-18385). - iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385). - iavf: fix temporary deadlock and failure to set MAC address (jsc#PED-835). - iavf: refactor VLAN filter states (jsc#PED-835). - iavf: remove active_cvlans and active_svlans bitmaps (jsc#PED-835). - iavf: remove mask from iavf_irq_enable_queues() (git-fixes). - iavf: schedule watchdog immediately when changing primary MAC (jsc#PED-835). - ib/hfi1: Assign npages earlier (git-fixes) - ib/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes) - ib/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes) - ib/hfi1: Fix expected receive setup error exit issues (git-fixes) - ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes) - ib/hfi1: Fix sdma.h tx->num_descs off-by-one errors (git-fixes) - ib/hfi1: Immediately remove invalid memory from hardware (git-fixes) - ib/hfi1: Reject a zero-length user expected buffer (git-fixes) - ib/hfi1: Remove user expected buffer invalidate race (git-fixes) - ib/hfi1: Reserve user expected TIDs (git-fixes) - ib/hfi1: Restore allocated resources on failed copyout (git-fixes) - ib/hfi1: Update RMT size calculation (git-fixes) - ib/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes) - ib/ipoib: Fix legacy IPoIB due to wrong number of queues (git-fixes) - ib/mad: Do not call to function that might sleep while in atomic context (git-fixes). - ib/mlx5: Add support for 400G_8X lane speed (git-fixes) - ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes) - ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes). - ice: Add check for kzalloc (jsc#PED-376). - ice: Do not double unplug aux on peer initiated reset (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (jsc#PED-376). - ice: Fix DSCP PFC TLV creation (git-fixes). - ice: Fix DSCP PFC TLV creation (jsc#PED-376). - ice: Fix XDP memory leak when NIC is brought up and down (git-fixes). - ice: Fix disabling Rx VLAN filtering with port VLAN enabled (jsc#PED-376). - ice: Fix ice VF reset during iavf initialization (jsc#PED-376). - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields (jsc#PED-376). - ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes). - ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375). - ice: Fix memory corruption in VF driver (git-fixes). - ice: Fix potential memory leak in ice_gnss_tty_write() (jsc#PED-376). - ice: Ignore EEXIST when setting promisc mode (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (jsc#PED-376). - ice: Reset FDIR counter in FDIR init stage (git-fixes). - ice: Reset FDIR counter in FDIR init stage (jsc#PED-376). - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375). - ice: add profile conflict check for AVF FDIR (git-fixes). - ice: add profile conflict check for AVF FDIR (jsc#PED-376). - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158). - ice: block LAN in case of VF to VF offload (git-fixes). - ice: block LAN in case of VF to VF offload (jsc#PED-376). - ice: check if VF exists before mode check (jsc#PED-376). - ice: config netdev tc before setting queues number (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (jsc#PED-376). - ice: ethtool: Prohibit improper channel config for DCB (git-fixes). - ice: ethtool: advertise 1000M speeds properly (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (jsc#PED-376). - ice: fix lost multicast packets in promisc mode (jsc#PED-376). - ice: fix wrong fallback logic for FDIR (git-fixes). - ice: fix wrong fallback logic for FDIR (jsc#PED-376). - ice: handle E822 generic device ID in PLDM header (git-fixes). - ice: move devlink port creation/deletion (jsc#PED-376). - ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes). - ice: switch: fix potential memleak in ice_add_adv_recipe() (jsc#PED-376). - ice: use bitmap_free instead of devm_kfree (git-fixes). - ice: xsk: Fix cleaning of XDP_TX frames (jsc#PED-376). - ice: xsk: disable txq irq before flushing hw (jsc#PED-376). - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (jsc#PED-376). - ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes). - ieee80211: add TWT element definitions (bsc#1209980). - ieee802154: hwsim: Fix possible memory leaks (git-fixes). - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253). - igb: Add lock to avoid data race (jsc#SLE-18379). - igb: Enable SR-IOV after reinit (jsc#SLE-18379). - igb: Fix PPS input and output using 3rd and 4th SDP (jsc#PED-370). - igb: Fix extts capture value format for 82580/i354/i350 (git-fixes). - igb: Initialize mailbox message for VF reset (jsc#SLE-18379). - igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379). - igb: fix bit_shift to be in [1..8] range (git-fixes). - igb: fix nvm.ops.read() error handling (git-fixes). - igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379). - igbvf: Regard vf reset nack as success (jsc#SLE-18379). - igc: Add checking for basetime less than zero (jsc#SLE-18377). - igc: Add ndo_tx_timeout support (jsc#SLE-18377). - igc: Clean the TX buffer and TX descriptor ring (git-fixes). - igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377). - igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377). - igc: Fix possible system crash when loading module (git-fixes). - igc: Lift TAPRIO schedule restriction (jsc#SLE-18377). - igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377). - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377). - igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377). - igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377). - igc: fix the validation logic for taprio's gate list (jsc#SLE-18377). - igc: read before write to SRRCTL register (jsc#SLE-18377). - igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377). - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes). - iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes). - iio: adc: ad7192: Change 'shorted' channels to differential (git-fixes). - iio: adc: ad7791: fix IRQ flags (git-fixes). - iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes). - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes). - iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes). - iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes). - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes). - iio: adc: stm32-dfsdm: fill module aliases (git-fixes). - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes). - iio: adis16480: select CONFIG_CRC32 (git-fixes). - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes). - iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes). - iio: hid: fix the retval in accel_3d_capture_sample (git-fixes). - iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes). - iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes). - iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes). - iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes). - iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes). - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes). - iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes). - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes). - iio: imu: inv_icm42600: fix timestamp reset (git-fixes). - iio: light: cm32181: Unregister second I2C client if present (git-fixes). - iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes). - iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes). - iio: light: vcnl4035: fixed chip ID check (git-fixes). - iio:adc:twl6030: Enable measurement of VAC (git-fixes). - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes). - ima: Fix memory leak in __ima_inode_hash() (git-fixes). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448). - init: Provide arch_cpu_finalize_init() (bsc#1212448). - init: Remove check_bugs() leftovers (bsc#1212448). - input: ads7846 - always set last command to PWRDOWN (git-fixes). - input: ads7846 - do not check penirq immediately for 7845 (git-fixes). - input: ads7846 - do not report pressure for ads7845 (git-fixes). - input: alps - fix compatibility with -funsigned-char (bsc#1209805). - input: exc3000 - properly stop timer on shutdown (git-fixes). - input: fix open count when closing inhibited device (git-fixes). - input: focaltech - use explicitly signed char type (git-fixes). - input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes). - input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes). - input: iqs269a - configure device with a single block write (git-fixes). - input: iqs269a - drop unused device node references (git-fixes). - input: iqs269a - increase interrupt handler return delay (git-fixes). - input: iqs626a - drop unused device node references (git-fixes). - input: psmouse - fix OOB access in Elantech protocol (git-fixes). - input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes). - input: xpad - add constants for GIP interface numbers (git-fixes). - input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes). - intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379). - intel_idle: add Emerald Rapids Xeon support (PED-3849). - interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes). - interconnect: fix mem leak when freeing nodes (git-fixes). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes). - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128 (git-fixes). - io_uring/filetable: fix file reference underflow (git-fixes bsc#1207521 CVE-2023-0469). - io_uring/kbuf: fix not advancing READV kbuf ring (git-fixes). - io_uring/rsrc: fix null-ptr-deref in io_file_bitmap_get() (bsc#1209637 CVE-2023-1583). - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available (git-fixes). - io_uring: do not gate task_work run on TIF_NOTIFY_SIGNAL (git-fixes). - io_uring: ensure that cached task references are always put on exit (git-fixes). - io_uring: fix CQ waiting timeout handling (git-fixes). - io_uring: fix fget leak when fs do not support nowait buffered read (bsc#1205205). - io_uring: fix ordering of args in io_uring_queue_async_work (git-fixes). - io_uring: fix return value when removing provided buffers (git-fixes). - io_uring: fix size calculation when registering buf ring (git-fixes). - io_uring: recycle kbuf recycle on tw requeue (git-fixes). - iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes). - iommu/vt-d: Add a fix for devices need extra dtlb flush (bsc#1208219). - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode (bsc#1208948). - iommu/vt-d: Fix buggy QAT device mask (bsc#1208219). - ipmi: fix SSIF not responding under certain cond (git-fixes). - ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459). - ipmi:ssif: Add a timer between request retries (bsc#1206459). - ipmi:ssif: Add send_retries increment (git-fixes). - ipmi:ssif: Increase the message retry time (bsc#1206459). - ipmi:ssif: Remove rtc_us_timer (bsc#1206459). - ipmi:ssif: resend_msg() cannot fail (bsc#1206459). - ipmi_ssif: Rename idle state and check (bsc#1206459). - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168 CVE-2023-0394). - ipv6: raw: Deduct extension header length in rawv6_push_pending_frames (bsc#1207168 CVE-2023-0394). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes). - irqchip/ftintc010: Mark all function static (git-fixes). - irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes). - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes) - iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553). - ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384). - ixgbe: Enable setting RSS table to default values (jsc#SLE-18384). - ixgbe: Fix panic during XDP_TX with > 64 CPUs (jsc#SLE-18384). - ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384). - ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384). - ixgbe: fix pci device refcount leak (jsc#SLE-18384). - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384). - jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590). - jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641). - jbd2: fix potential buffer head reference count leak (bsc#1207644). - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645). - jbd2: use the correct print format (git-fixes). - jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643). - jfs: Fix fortify moan in symlink (git-fixes). - k-m-s: Drop Linux 2.6 support - kABI compatibility workaround for efivars (git-fixes). - kABI workaround for btbcm.c (git-fixes). - kABI workaround for cpp_acpi extensions for EPP (bsc#1212445). - kABI workaround for drm_dp_mst helper updates (bsc#1206843). - kABI workaround for hid quirks (git-fixes). - kABI workaround for ieee80211 and co (bsc#1209980). - kABI workaround for mt76_poll_msec() (git-fixes). - kABI workaround for struct acpi_ec (bsc#1207149). - kABI workaround for xhci (git-fixes). - kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest (git-fixes) - kABI: PCI: Reduce warnings on possible RW1C corruption (kabi). - kABI: PCI: dwc: Add dw_pcie_ops.host_deinit() callback (kabi). - kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi). - kABI: Preserve TRACE_EVENT_FL values (git-fixes). - kABI: Work around kABI changes after '20347fca71a3 swiotlb: split up the global swiotlb lock' (jsc#PED-3259). - kABI: x86/msi: Fix msi message data shadow struct (kabi). - kABI: x86/msr: Remove .fixup usage (kabi). - kabi/severities: add mlx5 internal symbols - kabi/severities: added Microsoft mana symbold (bsc#1210551) - kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users. - kabi/severities: ignore kABI changes for mt76/* local modules (bsc#1209980) - kabi/severities: ignore kABI in bq27xxx_battery module Those are local symbols that are used only by child drivers - kabi: FIX FOR NFSv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - kabi: FIX FOR: NFS: Further optimisations for 'ls -l' (git-fixes). - kabi: FIX FOR: NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - kabi: FIX FOR: NFSv4.1 query for fs_location attr on a new file system (Never, kabi). - kabi: FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi). - kabi: fix for: NFSv3: handle out-of-order write replies (bsc#1205544). - kasan: no need to unset panic_on_warn in end_report() (bsc#1207328). - kconfig: Update config changed flag before calling callback (git-fixes). - kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi - kernel-binary: install expoline.o (boo#1210791 bsc#1211089) - kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base. - kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741). - kernel-source: Remove unused macro variant_symbols - kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). rpm only supports full length release, no provides - keys: Add missing function documentation (git-fixes). - keys: Create static version of public_key_verify_signature (git-fixes). - keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes). - keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - keys: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes). - keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes). - kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes) Update config/armv7hl/default too. - kprobe: reverse kp->flags when arm_kprobe failed (git-fixes). - kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes). - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes). - kprobes: Forbid probing on trampoline and BPF code areas (git-fixes). - kprobes: Prohibit probes in gate area (git-fixes). - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes). - kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes). - kvm/vfio: Fix potential deadlock on vfio group_lock (git-fixes) - kvm/vfio: Fix potential deadlock problem in vfio (git-fixes) - kvm: Destroy target device if coalesced MMIO unregistration fails (git-fixes) - kvm: Disallow user memslot with size that exceeds 'unsigned long' (git-fixes) - kvm: Do not create VM debugfs files outside of the VM directory (git-fixes) - kvm: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes) - kvm: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes). - kvm: Prevent module exit until all VMs are freed (git-fixes) - kvm: SVM: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes). - kvm: SVM: Fix benign 'bool vs. int' comparison in svm_set_cr0() (git-fixes). - kvm: SVM: Fix potential overflow in SEV's send|receive_update_data() (git-fixes). - kvm: SVM: Require logical ID to be power-of-2 for AVIC entry (git-fixes). - kvm: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes). - kvm: SVM: hyper-v: placate modpost section mismatch error (git-fixes). - kvm: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992 CVE-2022-2196). - kvm: VMX: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes). - kvm: VMX: Resume guest immediately when injecting #GP on ECREATE (git-fixes). - kvm: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes). - kvm: VMX: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes). - kvm: X86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes). - kvm: arm64: Do not arm a hrtimer for an already pending timer (git-fixes) - kvm: arm64: Do not hypercall before EL2 init (git-fixes) - kvm: arm64: Do not return from void function (git-fixes) - kvm: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes) - kvm: arm64: Fix S1PTW handling on RO memslots (git-fixes) - kvm: arm64: Fix bad dereference on MTE-enabled systems (git-fixes) - kvm: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes) - kvm: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes) - kvm: arm64: Free hypervisor allocations if vector slot init fails (git-fixes) - kvm: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes) - kvm: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes) - kvm: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes) - kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes) - kvm: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes) - kvm: arm64: Save PSTATE early on exit (git-fixes) - kvm: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes) - kvm: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes) - kvm: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes) - kvm: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes) - kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes) - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (bsc#1209532 CVE-2023-1513). - kvm: initialize all of the kvm_debugregs structure before sending it to userspace (bsc#1209532 CVE-2023-1513). - kvm: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes). - kvm: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes). - kvm: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes). - kvm: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes). - kvm: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (git-fixes). - kvm: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes). - kvm: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes). - kvm: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes). - kvm: nVMX: add missing consistency checks for CR0 and CR4 (bsc#1210294 CVE-2023-30456). - kvm: nVMX: add missing consistency checks for CR0 and CR4 (bsc#1210294 CVE-2023-30456). - kvm: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes). - kvm: s390: selftest: memop: Fix integer literal (git-fixes). - kvm: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes). - kvm: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes). - kvm: x86/pmu: Ignore pmu->global_ctrl check if vPMU does not support global_ctrl (git-fixes). - kvm: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes). - kvm: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes). - kvm: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes). - kvm: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes). - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes). - kvm: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes). - kvm: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes). - kvm: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes). - kvm: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes). - kvm: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes). - kvm: x86: Protect the unused bits in MSR exiting flags (git-fixes). - kvm: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes). - kvm: x86: Report deprecated x87 features in supported CPUID (git-fixes). - kvm: x86: do not set st->preempted when going back to user space (git-fixes). - kvm: x86: fix sending PV IPI (git-fixes). - kvm: x86: fix sending PV IPI (git-fixes). - kvm: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes). - kvm: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes). - lan78xx: Add missing return code checks (git-fixes). - lan78xx: Fix exception on link speed change (git-fixes). - lan78xx: Fix memory allocation bug (git-fixes). - lan78xx: Fix partial packet errors on suspend/resume (git-fixes). - lan78xx: Fix race condition in disconnect handling (git-fixes). - lan78xx: Fix race conditions in suspend/resume handling (git-fixes). - lan78xx: Fix white space and style issues (git-fixes). - lan78xx: Remove unused pause frame queue (git-fixes). - lan78xx: Remove unused timer (git-fixes). - lan78xx: Set flow control threshold to prevent packet loss (git-fixes). - leds: Fix reference to led_set_brightness() in doc (git-fixes). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes). - leds: led-class: Add missing put_device() to led_put() (git-fixes). - leds: led-core: Fix refcount leak in of_led_get() (git-fixes). - leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes). - lib/mpi: Fix buffer overrun when SG is too long (git-fixes). - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (git-fixes). - lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes). - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes). - lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes). - locking/rwbase: Mitigate indefinite writer starvation. Move out of sorted as the patch has moved within the tip tree. - locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes). - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270). - locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270). - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270). - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270). - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270). - locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270). - locking/rwsem: Make handoff bit handling more consistent (bsc#1207270). - locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270). - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270). - locking: Add missing __sched attributes (bsc#1207270). - loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes). - loop: fix ioctl calls using compat_loop_info (git-fixes). - lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852). - lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852). - lpfc: Clean up SLI-4 CQE status handling (bsc#1211852). - lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852). - lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852). - lpfc: Enhance congestion statistics collection (bsc#1211852). - lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346). - lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852). - lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852). - lpfc: update metadata - mac80211: introduce individual TWT support in AP mode (bsc#1209980). - mac80211: introduce set_radar_offchan callback (bsc#1209980). - mac80211: twt: do not use potentially unaligned pointer (bsc#1209980). - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes). - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes). - mailbox: zynqmp: Fix IPI isr handling (git-fixes). - mailbox: zynqmp: Fix typo in IPI documentation (git-fixes). - malidp: Fix NULL vs IS_ERR() checking (bsc#1208843 CVE-2023-23004). - mbcache: Avoid nesting of cache->c_list_lock under bit locks (bsc#1207647). - mbcache: Fixup kABI of mb_cache_entry (bsc#1207653). - mce: fix set_mce_nospec to always unmap the whole page (git-fixes). - md/bitmap: Fix bitmap chunk size overflow issues (git-fixes). - md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes). - md/raid5: Improve performance for sequential IO (bsc#1208081). - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes). - md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes). - md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes). - md: fix a crash in mempool_free (git-fixes). - md: protect md_unregister_thread from reentrancy (git-fixes). - media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes). - media: coda: Add check for dcoda_iram_alloc (git-fixes). - media: coda: Add check for kmalloc (git-fixes). - media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes). - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes). - media: dvb-core: Fix kernel WARNING for blocking operation in wait_event*() (CVE-2023-31084 bsc#1210783). - media: dvb-core: Fix use-after-free due on race condition at dvb_net (CVE-2022-45886 bsc#1205760). - media: dvb-core: Fix use-after-free due to race at dvb_register_device() (CVE-2022-45884 bsc#1205756). - media: dvb-core: Fix use-after-free due to race condition at dvb_ca_en50221 (CVE-2022-45919 bsc#1205803). - media: dvb-core: Fix use-after-free on race condition at dvb_frontend (CVE-2022-45885 bsc#1205758). - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes). - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes). - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes). - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes). - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes). - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes). - media: dvb_ca_en50221: fix a size write bug (git-fixes). - media: dvb_demux: fix a bug for the continuity counter (git-fixes). - media: dvb_frontend: kABI workaround (CVE-2022-45885 bsc#1205758). - media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760). - media: i2c: imx219: Fix binning for RAW8 capture (git-fixes). - media: i2c: imx219: Split common registers from mode tables (git-fixes). - media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes). - media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes). - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes). - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes). - media: m5mols: fix off-by-one loop termination error (git-fixes). - media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes). - media: max9286: Free control handler (git-fixes). - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes). - media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes). - media: netup_unidvb: fix use-after-free at del_timer() (git-fixes). - media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes). - media: ov5640: Fix analogue gain control (git-fixes). - media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes). - media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes). - media: platform: ti: Add missing check for devm_regulator_get (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes). - media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes). - media: rc: gpio-ir-recv: add remove function (git-fixes). - media: rcar_fdp1: Fix the correct variable assignments (git-fixes). - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes). - media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes). - media: saa7134: Use video_unregister_device for radio_dev (git-fixes). - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes). - media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes). - media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb() (CVE-2022-45887 bsc#1205762). - media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes). - media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes). - media: uvcvideo: Check controls flags before accessing them (git-fixes). - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes). - media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes). - media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes). - media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes). - media: uvcvideo: Handle cameras with invalid descriptors (git-fixes). - media: uvcvideo: Handle errors from calls to usb_string (git-fixes). - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes). - media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes). - media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes). - media: uvcvideo: Use control names from framework (git-fixes). - media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes). - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes). - media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes). - media: venus: dec: Fix handling of the start cmd (git-fixes). - mei: bus-fixup:upon error print return values of send and receive (git-fixes). - mei: bus: fix unlink on bus in error path (git-fixes). - mei: me: add meteor lake point M DID (git-fixes). - mei: pxp: Use correct macros to initialize uuid_le (git-fixes). - memstick: fix memory leak if card device is never registered (git-fixes). - memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449). - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes). - mfd: cs5535: Do not build on UML (git-fixes). - mfd: dln2: Fix memory leak in dln2_probe() (git-fixes). - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes). - mfd: tqmx86: Correct board names for TQMxE39x (git-fixes). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes). - misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes). - misc: enclosure: Fix doc for enclosure_find() (git-fixes). - misc: fastrpc: reject new invocations during device removal (git-fixes). - misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes). - mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253). - mlx5: fix possible ptp queue fifo use-after-free (jsc#PED-1549). - mlx5: fix skb leak while fifo resync and push (jsc#PED-1549). - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes). - mlxsw: minimal: Fix deadlock in ports creation (git-fixes). - mlxsw: spectrum: Allow driver to load with old firmware versions (git-fixes). - mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768). - mm/memory.c: fix race when faulting a device private page (CVE-2022-3523, bsc#1204363). nouveau: fix migrate_to_ram() for faulting page (CVE-2022-3523, bsc#1204363). mm/memory: return vm_fault_t result from migrate_to_ram() callback (CVE-2022-3523, bsc#1204363). kabi: workaround for migrate_vma.fault_page (CVE-2022-3523, bsc#1204363). - mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410). - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769). - mm: Move mm_cachep initialization to mm_init() (bsc#1212448). - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262). - mm: memcg: fix swapcached stat accounting (bsc#1209804). - mm: mmap: remove newline at the end of the trace (git-fixes). - mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034). - mm: take a page reference when removing device exclusive entries (bsc#1211025). - mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410). - mmc: atmel-mci: fix race between stop command and start of next command (git-fixes). - mmc: bcm2835: fix deferred probing (git-fixes). - mmc: block: Remove error check of hw_reset on reset (git-fixes). - mmc: block: ensure error propagation for non-blk (git-fixes). - mmc: jz4740: Work around bug on JZ4760(B) (git-fixes). - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes). - mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes). - mmc: mmci: stm32: fix max busy timeout calculation (git-fixes). - mmc: mtk-sd: fix deferred probing (git-fixes). - mmc: mvsdio: fix deferred probing (git-fixes). - mmc: omap: fix deferred probing (git-fixes). - mmc: omap_hsmmc: fix deferred probing (git-fixes). - mmc: owl: fix deferred probing (git-fixes). - mmc: sdhci-acpi: fix deferred probing (git-fixes). - mmc: sdhci-esdhc-imx: make 'no-mmc-hs400' works (git-fixes). - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes). - mmc: sdhci-spear: fix deferred probing (git-fixes). - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes). - mmc: sdhci_am654: lower power-on failed message severity (git-fixes). - mmc: sdio: fix possible resource leaks in some error paths (git-fixes). - mmc: sh_mmcif: fix deferred probing (git-fixes). - mmc: sunxi: fix deferred probing (git-fixes). - mmc: usdhi60rol0: fix deferred probing (git-fixes). - mmc: vub300: fix invalid response handling (git-fixes). - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - mt76: Make use of the helper macro kthread_run() (bsc#1209980). - mt76: Print error message when reading EEPROM from mtd failed (bsc#1209980). - mt76: add 6GHz support (bsc#1209980). - mt76: add MT_RXQ_MAIN_WA for mt7916 (bsc#1209980). - mt76: add support for setting mcast rate (bsc#1209980). - mt76: allow drivers to drop rx packets early (bsc#1209980). - mt76: clear sta powersave flag after notifying driver (bsc#1209980). - mt76: connac: add 6 GHz support for wtbl and starec configuration (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss (bsc#1209980). - mt76: connac: add support for limiting to maximum regulatory Tx power (bsc#1209980). - mt76: connac: add support for passing the cipher field in bss_info (bsc#1209980). - mt76: connac: adjust wlan_idx size from u8 to u16 (bsc#1209980). - mt76: connac: align MCU_EXT definitions with 7915 driver (bsc#1209980). - mt76: connac: enable 6GHz band for hw scan (bsc#1209980). - mt76: connac: enable hw amsdu @ 6GHz (bsc#1209980). - mt76: connac: extend mcu_get_nic_capability (bsc#1209980). - mt76: connac: fix a theoretical NULL pointer dereference in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: fix last_chan configuration in mt76_connac_mcu_rate_txpower_band (bsc#1209980). - mt76: connac: fix unresolved symbols when CONFIG_PM is unset (bsc#1209980). - mt76: connac: introduce MCU_CE_CMD macro (bsc#1209980). - mt76: connac: introduce MCU_EXT macros (bsc#1209980). - mt76: connac: introduce MCU_UNI_CMD macro (bsc#1209980). - mt76: connac: introduce is_connac_v1 utility routine (bsc#1209980). - mt76: connac: make read-only array ba_range static const (bsc#1209980). - mt76: connac: move mcu reg access utility routines in mt76_connac_lib module (bsc#1209980). - mt76: connac: move mt76_connac_chan_bw in common code (bsc#1209980). - mt76: connac: move mt76_connac_lmac_mapping in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_add_key in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_basic_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_ext_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_omac_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_gen_dl_mode in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_get_cipher in common code (bsc#1209980). - mt76: connac: move mt76_connac_mcu_rdd_cmd in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_restart in common module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_set_pm in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_wtbl_update_hdr_trans in connac module (bsc#1209980). - mt76: connac: rely on MCU_CMD macro (bsc#1209980). - mt76: connac: rely on le16_add_cpu in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - mt76: connac: remove MCU_FW_PREFIX bit (bsc#1209980). - mt76: connac: remove PHY_MODE_AX_6G configuration in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2} (bsc#1209980). - mt76: connac: set 6G phymode in single-sku support (bsc#1209980). - mt76: debugfs: fix queue reporting for mt76-usb (bsc#1209980). - mt76: debugfs: improve queue node readability (bsc#1209980). - mt76: disable BH around napi_schedule() calls (bsc#1209980). - mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs (bsc#1209980). - mt76: do not always copy ethhdr in reverse_frag0_hdr_trans (bsc#1209980). - mt76: do not reset MIB counters in get_stats callback (bsc#1209980). - mt76: eeprom: tolerate corrected bit-flips (bsc#1209980). - mt76: fill boottime_ns in Rx path (bsc#1209980). - mt76: fix antenna config missing in 6G cap (bsc#1209980). - mt76: fix boolreturn.cocci warnings (bsc#1209980). - mt76: fix dfs state issue with 160 MHz channels (bsc#1209980). - mt76: fix endianness errors in reverse_frag0_hdr_trans (bsc#1209980). - mt76: fix invalid rssi report (bsc#1209980). - mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi (bsc#1209980). - mt76: fix monitor rx FCS error in DFS channel (bsc#1209980). - mt76: fix possible OOB issue in mt76_calculate_default_rate (bsc#1209980). - mt76: fix possible pktid leak (bsc#1209980). - mt76: fix the wiphy's available antennas to the correct value (bsc#1209980). - mt76: fix timestamp check in tx_status (bsc#1209980). - mt76: fix tx status related use-after-free race on station removal (bsc#1209980). - mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes). - mt76: fix wrong HE data rate in sniffer tool (bsc#1209980). - mt76: improve signal strength reporting (bsc#1209980). - mt76: introduce packet_id idr (bsc#1209980). - mt76: make mt76_sar_capa static (bsc#1209980). - mt76: move mt76_ethtool_worker_info in mt76 module (bsc#1209980). - mt76: move mt76_sta_stats in mt76.h (bsc#1209980). - mt76: move sar utilities to mt76-core module (bsc#1209980). - mt76: move sar_capa configuration in common code (bsc#1209980). - mt76: move spin_lock_bh to spin_lock in tasklet (bsc#1209980). - mt76: mt7603: improve reliability of tx powersave filtering (bsc#1209980). - mt76: mt7603: introduce SAR support (bsc#1209980). - mt76: mt7615: add support for LG LGSBWAC02 (MT7663BUN) (bsc#1209980). - mt76: mt7615: apply cached RF data for DBDC (bsc#1209980). - mt76: mt7615: clear mcu error interrupt status on mt7663 (bsc#1209980). - mt76: mt7615: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7615: fix compiler warning on frame size (bsc#1209980). - mt76: mt7615: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7615: fix throughput regression on DFS channels (bsc#1209980). - mt76: mt7615: fix unused tx antenna mask in testmode (bsc#1209980). - mt76: mt7615: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7615: honor ret from mt7615_mcu_restart in mt7663u_mcu_init (bsc#1209980). - mt76: mt7615: in debugfs queue stats, skip wmm index 3 on mt7663 (bsc#1209980). - mt76: mt7615: introduce SAR support (bsc#1209980). - mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module (bsc#1209980). - mt76: mt7615: remove dead code in get_omac_idx (bsc#1209980). - mt76: mt7615: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7615e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7663: disable 4addr capability (bsc#1209980). - mt76: mt7663s: flush runtime-pm queue after waking up the device (bsc#1209980). - mt76: mt7663s: rely on mcu reg access utility (bsc#1209980). - mt76: mt7663u: introduce mt7663u_mcu_power_on routine (bsc#1209980). - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (bsc#1209980). - mt76: mt76x02: improve tx hang detection (bsc#1209980). - mt76: mt76x02: introduce SAR support (bsc#1209980). - mt76: mt76x02: use mt76_phy_dfs_state to determine radar detector state (bsc#1209980). - mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset (bsc#1209980). - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() (bsc#1209980). - mt76: mt7915: Fix channel state update error issue (bsc#1209980). - mt76: mt7915: add 6 GHz support (bsc#1209980). - mt76: mt7915: add HE-LTF into fixed rate command (bsc#1209980). - mt76: mt7915: add LED support (bsc#1209980). - mt76: mt7915: add WA firmware log support (bsc#1209980). - mt76: mt7915: add control knobs for thermal throttling (bsc#1209980). - mt76: mt7915: add debugfs knobs for MCU utilization (bsc#1209980). - mt76: mt7915: add default calibrated data support (bsc#1209980). - mt76: mt7915: add device id for mt7916 (bsc#1209980). - mt76: mt7915: add ethtool stats support (bsc#1209980). - mt76: mt7915: add firmware support for mt7916 (bsc#1209980). - mt76: mt7915: add mib counters to ethtool stats (bsc#1209980). - mt76: mt7915: add missing DATA4_TB_SPTL_REUSE1 to mt7915_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7915: add more MIB registers (bsc#1209980). - mt76: mt7915: add mt7915_mmio_probe() as a common probing function (bsc#1209980). - mt76: mt7915: add mt7916 calibrated data support (bsc#1209980). - mt76: mt7915: add mu-mimo and ofdma debugfs knobs (bsc#1209980). - mt76: mt7915: add some per-station tx stats to ethtool (bsc#1209980). - mt76: mt7915: add support for MT7986 (bsc#1209980). - mt76: mt7915: add support for passing chip/firmware debug data to user space (bsc#1209980). - mt76: mt7915: add twt_stats knob in debugfs (bsc#1209980). - mt76: mt7915: add tx mu/su counters to mib (bsc#1209980). - mt76: mt7915: add tx stats gathered from tx-status callbacks (bsc#1209980). - mt76: mt7915: add txfree event v3 (bsc#1209980). - mt76: mt7915: add txpower init for 6GHz (bsc#1209980). - mt76: mt7915: allow beaconing on all chains (bsc#1209980). - mt76: mt7915: change max rx len limit of hw modules (bsc#1209980). - mt76: mt7915: check band idx for bcc event (bsc#1209980). - mt76: mt7915: check for devm_pinctrl_get() failure (bsc#1209980). - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set (bsc#1209980). - mt76: mt7915: enable HE UL MU-MIMO (bsc#1209980). - mt76: mt7915: enable configured beacon tx rate (bsc#1209980). - mt76: mt7915: enable radar background detection (bsc#1209980). - mt76: mt7915: enable radar trigger on rdd2 (bsc#1209980). - mt76: mt7915: enable twt responder capability (bsc#1209980). - mt76: mt7915: enlarge wcid size to 544 (bsc#1209980). - mt76: mt7915: fix DBDC default band selection on MT7915D (bsc#1209980). - mt76: mt7915: fix DFS no radar detection event (bsc#1209980). - mt76: mt7915: fix SMPS operation fail (bsc#1209980). - mt76: mt7915: fix WMM index on DBDC cards (bsc#1209980). - mt76: mt7915: fix beamforming mib stats (bsc#1209980). - mt76: mt7915: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7915: fix eeprom fields of txpower init values (bsc#1209980). - mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_debugfs_rx_fw_monitor (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_mac_tx_free() (bsc#1209980). - mt76: mt7915: fix he_mcs capabilities for 160mhz (bsc#1209980). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs() (bsc#1209980). - mt76: mt7915: fix missing HE phy cap (bsc#1209980). - mt76: mt7915: fix phy cap in mt7915_set_stream_he_txbf_caps() (bsc#1209980). - mt76: mt7915: fix polling firmware-own status (git-fixes). - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (git-fixes). - mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta (bsc#1209980). - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup (bsc#1209980). - mt76: mt7915: fix potential NPE in TXS processing (bsc#1209980). - mt76: mt7915: fix potential memory leak of fw monitor packets (bsc#1209980). - mt76: mt7915: fix return condition in mt7915_tm_reg_backup_restore() (bsc#1209980). - mt76: mt7915: fix the muru tlv issue (bsc#1209980). - mt76: mt7915: fix the nss setting in bitrates (bsc#1209980). - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev (bsc#1209980). - mt76: mt7915: fix txbf starec TLV issues (bsc#1209980). - mt76: mt7915: fix typos in comments (bsc#1209980). - mt76: mt7915: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7915: get rid of mt7915_mcu_set_fixed_rate routine (bsc#1209980). - mt76: mt7915: honor all possible error conditions in mt7915_mcu_init() (bsc#1209980). - mt76: mt7915: improve code readability for xmit-queue handler (bsc#1209980). - mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht (bsc#1209980). - mt76: mt7915: improve starec readability of txbf (bsc#1209980). - mt76: mt7915: improve wmm index allocation (bsc#1209980). - mt76: mt7915: initialize smps mode in mt7915_mcu_sta_rate_ctrl_tlv() (bsc#1209980). - mt76: mt7915: introduce SAR support (bsc#1209980). - mt76: mt7915: introduce __mt7915_get_tsf routine (bsc#1209980). - mt76: mt7915: introduce band_idx in mt7915_phy (bsc#1209980). - mt76: mt7915: introduce bss coloring support (bsc#1209980). - mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy (bsc#1209980). - mt76: mt7915: introduce mt76_vif in mt7915_vif (bsc#1209980). - mt76: mt7915: introduce mt7915_mac_add_twt_setup routine (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_beacon_check_caps() (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command (bsc#1209980). - mt76: mt7915: introduce mt7915_set_radar_background routine (bsc#1209980). - mt76: mt7915: introduce rdd_monitor debugfs node (bsc#1209980). - mt76: mt7915: move pci specific code back to pci.c (bsc#1209980). - mt76: mt7915: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7915: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7915: refine register definition (bsc#1209980). - mt76: mt7915: rely on mt76_connac definitions (bsc#1209980). - mt76: mt7915: rely on mt76_connac_get_phy utilities (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_add_tlv routine (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_sta_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_wtbl_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_init_download (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_patch_sem_ctrl/mt76_connac_mcu_start_patch (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_set_rts_thresh (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_basic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_uapsd (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_start_firmware (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_generic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_hdr_trans_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ht_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_smps_tlv (bsc#1209980). - mt76: mt7915: remove dead code in debugfs code (bsc#1209980). - mt76: mt7915: remove duplicated defs in mcu.h (bsc#1209980). - mt76: mt7915: remove mt7915_mcu_add_he() (bsc#1209980). - mt76: mt7915: rename debugfs tx-queues (bsc#1209980). - mt76: mt7915: report radar pattern if detected by rdd2 (bsc#1209980). - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate (bsc#1209980). - mt76: mt7915: rework .set_bitrate_mask() to support more options (bsc#1209980). - mt76: mt7915: rework debugfs fixed-rate knob (bsc#1209980). - mt76: mt7915: rework debugfs queue info (bsc#1209980). - mt76: mt7915: rework dma.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework eeprom.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework mt7915_mcu_sta_muru_tlv() (bsc#1209980). - mt76: mt7915: rework starec TLV tags (bsc#1209980). - mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex (bsc#1209980). - mt76: mt7915: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7915: set VTA bit in tx descriptor (bsc#1209980). - mt76: mt7915: set band1 TGID field in tx descriptor (bsc#1209980). - mt76: mt7915: set bssinfo/starec command when adding interface (bsc#1209980). - mt76: mt7915: set muru platform type (bsc#1209980). - mt76: mt7915: simplify conditional (bsc#1209980). - mt76: mt7915: switch proper tx arbiter mode in testmode (bsc#1209980). - mt76: mt7915: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7915: update mac timing settings (bsc#1209980). - mt76: mt7915: update max_mpdu_size in mt7915_mcu_sta_amsdu_tlv() (bsc#1209980). - mt76: mt7915: update mt7915_chan_mib_offs for mt7916 (bsc#1209980). - mt76: mt7915: update rx rate reporting for mt7916 (bsc#1209980). - mt76: mt7915: use min_t() to make code cleaner (bsc#1209980). - mt76: mt7915e: Add a hwmon attribute to get the actual throttle state (bsc#1209980). - mt76: mt7915e: Enable thermal management by default (bsc#1209980). - mt76: mt7915e: Fix degraded performance after temporary overheat (bsc#1209980). - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (git-fixes). - mt76: mt7921: add 6GHz support (bsc#1209980). - mt76: mt7921: add MT7921_COMMON module (bsc#1209980). - mt76: mt7921: add MU EDCA cmd support (bsc#1209980). - mt76: mt7921: add delay config for sched scan (bsc#1209980). - mt76: mt7921: add mt7921u driver (bsc#1209980). - mt76: mt7921: add per-vif counters in ethtool (bsc#1209980). - mt76: mt7921: add some more MIB counters (bsc#1209980). - mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb (bsc#1209980). - mt76: mt7921: add support for PCIe ID 0x0608/0x0616 (bsc#1209980). - mt76: mt7921: add support for tx status reporting (bsc#1209980). - mt76: mt7921: clear pm->suspended in mt7921_mac_reset_work (bsc#1209980). - mt76: mt7921: disable 4addr capability (bsc#1209980). - mt76: mt7921: disable runtime pm for usb (bsc#1209980). - mt76: mt7921: do not always disable fw runtime-pm (bsc#1209980). - mt76: mt7921: do not enable beacon filter when IEEE80211_CONF_CHANGE_MONITOR is set (bsc#1209980). - mt76: mt7921: do not update pm states in case of error (git-fixes). - mt76: mt7921: fix MT7921E reset failure (bsc#1209980). - mt76: mt7921: fix Wformat build warning (bsc#1209980). - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7921: fix boolreturn.cocci warning (bsc#1209980). - mt76: mt7921: fix build regression (bsc#1209980). - mt76: mt7921: fix endianness issues in mt7921_mcu_set_tx() (bsc#1209980). - mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap (bsc#1209980). - mt76: mt7921: fix ht mcs in mt7921_mac_add_txs_skb() (bsc#1209980). - mt76: mt7921: fix injected MPDU transmission to not use HW A-MSDU (bsc#1209980). - mt76: mt7921: fix kernel crash at mt7921_pci_remove (git-fixes). - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (git-fixes). - mt76: mt7921: fix mt7921s Kconfig (bsc#1209980). - mt76: mt7921: fix network buffer leak by txs missing (bsc#1209980). - mt76: mt7921: fix possible NULL pointer dereference in mt7921_mac_write_txwi (bsc#1209980). - mt76: mt7921: fix up the monitor mode (bsc#1209980). - mt76: mt7921: fix xmit-queue dump for usb and sdio (bsc#1209980). - mt76: mt7921: forbid the doze mode when coredump is in progress (bsc#1209980). - mt76: mt7921: get rid of monitor_vif (bsc#1209980). - mt76: mt7921: get rid of mt7921_mcu_get_eeprom (bsc#1209980). - mt76: mt7921: get rid of mt7921_wait_for_mcu_init declaration (bsc#1209980). - mt76: mt7921: honor mt76_connac_mcu_set_rate_txpower return value in mt7921_config (bsc#1209980). - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter (bsc#1209980). - mt76: mt7921: introduce 160 MHz channel bandwidth support (bsc#1209980). - mt76: mt7921: introduce mt7921s support (bsc#1209980). - mt76: mt7921: introduce stats reporting through ethtool (bsc#1209980). - mt76: mt7921: make all event parser reusable between mt7921s and mt7921e (bsc#1209980). - mt76: mt7921: make mt7921_init_tx_queues static (bsc#1209980). - mt76: mt7921: move mt76_connac_mcu_set_hif_suspend to bus-related files (bsc#1209980). - mt76: mt7921: move mt7921_init_hw in a dedicated work (bsc#1209980). - mt76: mt7921: move mt7921_queue_rx_skb to mac.c (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_complete_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_prepare_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_status_data in mac common code (bsc#1209980). - mt76: mt7921: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7921: reduce log severity levels for informative messages (bsc#1209980). - mt76: mt7921: refactor dma.c to be pcie specific (bsc#1209980). - mt76: mt7921: refactor init.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mac.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mcu.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mt7921_mcu_send_message (bsc#1209980). - mt76: mt7921: rely on mcu_get_nic_capability (bsc#1209980). - mt76: mt7921: remove dead definitions (bsc#1209980). - mt76: mt7921: remove duplicated code in mt7921_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7921: remove mcu rate reporting code (bsc#1209980). - mt76: mt7921: remove mt7921_sta_stats (bsc#1209980). - mt76: mt7921: report tx rate directly from tx status (bsc#1209980). - mt76: mt7921: robustify hardware initialization flow (bsc#1209980). - mt76: mt7921: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7921: set EDCA parameters with the MCU CE command (bsc#1209980). - mt76: mt7921: start reworking tx rate reporting (bsc#1209980). - mt76: mt7921: toggle runtime-pm adding a monitor vif (bsc#1209980). - mt76: mt7921: update mib counters dumping phy stats (bsc#1209980). - mt76: mt7921: update mt7921_skb_add_usb_sdio_hdr to support usb (bsc#1209980). - mt76: mt7921: use correct iftype data on 6GHz cap init (bsc#1209980). - mt76: mt7921: use mt76_hw instead of open coding it (bsc#1209980). - mt76: mt7921: use physical addr to unify register access (bsc#1209980). - mt76: mt7921e: fix possible probe failure after reboot (bsc#1198835). - mt76: mt7921e: make dev->fw_assert usage consistent (bsc#1209980). - mt76: mt7921e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7921s: add reset support (bsc#1209980). - mt76: mt7921s: clear MT76_STATE_MCU_RUNNING immediately after reset (bsc#1209980). - mt76: mt7921s: fix a possible memory leak in mt7921_load_patch (bsc#1209980). - mt76: mt7921s: fix bus hang with wrong privilege (bsc#1209980). - mt76: mt7921s: fix cmd timeout in throughput test (bsc#1209980). - mt76: mt7921s: fix firmware download random fail (bsc#1209980). - mt76: mt7921s: fix missing fc type/sub-type for 802.11 pkts (bsc#1209980). - mt76: mt7921s: fix mt7921s_mcu_[fw|drv]_pmctrl (bsc#1209980). - mt76: mt7921s: fix possible kernel crash due to invalid Rx count (bsc#1209980). - mt76: mt7921s: fix possible sdio deadlock in command fail (bsc#1209980). - mt76: mt7921s: fix suspend error with enlarging mcu timeout value (bsc#1209980). - mt76: mt7921s: fix the device cannot sleep deeply in suspend (bsc#1209980). - mt76: mt7921s: make pm->suspended usage consistent (bsc#1209980). - mt76: mt7921s: run sleep mode by default (bsc#1209980). - mt76: mt7921s: update mt7921s_wfsys_reset sequence (bsc#1209980). - mt76: only access ieee80211_hdr after mt76_insert_ccmp_hdr (bsc#1209980). - mt76: only set rx radiotap flag from within decoder functions (bsc#1209980). - mt76: redefine mt76_for_each_q_rx to adapt mt7986 changes (bsc#1209980). - mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature (bsc#1209980). - mt76: remove mt76_wcid pointer from mt76_tx_status_check signature (bsc#1209980). - mt76: remove variable set but not used (bsc#1209980). - mt76: reverse the first fragmented frame to 802.11 (bsc#1209980). - mt76: schedule status timeout at dma completion (bsc#1209980). - mt76: sdio: disable interrupt in mt76s_sdio_irq (bsc#1209980). - mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines (bsc#1209980). - mt76: sdio: extend sdio module to support CONNAC2 (bsc#1209980). - mt76: sdio: honor the largest Tx buffer the hardware can support (bsc#1209980). - mt76: sdio: introduce parse_irq callback (bsc#1209980). - mt76: sdio: lock sdio when it is needed (bsc#1209980). - mt76: sdio: move common code in mt76_sdio module (bsc#1209980). - mt76: set wlan_idx_hi on mt7916 (bsc#1209980). - mt76: split single ldpc cap bit into bits (bsc#1209980). - mt76: substitute sk_buff_head status_list with spinlock_t status_lock (bsc#1209980). - mt76: support reading EEPROM data embedded in fdt (bsc#1209980). - mt76: switch from 'pci_' to 'dma_' API (bsc#1209980). - mt76: testmode: add support to set MAC (bsc#1209980). - mt76: usb: add req_type to ___mt76u_rr signature (bsc#1209980). - mt76: usb: add req_type to ___mt76u_wr signature (bsc#1209980). - mt76: usb: introduce __mt76u_init utility routine (bsc#1209980). - mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD (bsc#1209980). - mt76: use a separate CCMP PN receive counter for management frames (bsc#1209980). - mt76: use le32/16_get_bits() whenever possible (bsc#1209980). - mt76x02: improve mac error check/reset reliability (bsc#1209980). - mtd: core: fix error path for nvmem provider (git-fixes). - mtd: core: fix nvmem error reporting (git-fixes). - mtd: core: provide unique name for nvmem device, take two (git-fixes). - mtd: dataflash: remove duplicate SPI ID table (git-fixes). - mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes). - mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes). - mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes). - mtd: rawnand: marvell: ensure timing values are written (git-fixes). - mtd: rawnand: meson: fix bitmask for length in command word (git-fixes). - mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes). - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes). - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes). - mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes). - mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes). - mtd: spi-nor: Fix a trivial typo (git-fixes). - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes). - mtd: spi-nor: core: fix implicit declaration warning (git-fixes). - mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes). - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes). - mtdblock: tolerate corrected bit-flips (git-fixes). - nbd: Fix hung on disconnect request if socket is closed before (git-fixes). - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes). - nbd: Fix hungtask when nbd_config_put (git-fixes). - nbd: add missing definition of pr_fmt (git-fixes). - nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes). - nbd: fix io hung while disconnecting device (git-fixes). - nbd: fix race between nbd_alloc_config() and module removal (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#PED-1549). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253). - net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253). - net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253). - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253). - net/mlx5: Avoid recovery in probe flows (jsc#PED-1549 bsc#1211794). - net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#PED-1549). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253). - net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253). - net/mlx5: Collect command failures data only for known commands (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#PED-1549). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253). - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#PED-1549). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253). - net/mlx5: Devcom, serialize devcom registration (jsc#PED-1549). - net/mlx5: Disable eswitch before waiting for VF pages (jsc#PED-1549). - net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253). - net/mlx5: Do not use already freed action pointer (jsc#SLE-19253). - net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#PED-1549). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#PED-1549). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#PED-1549). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#PED-1549). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#PED-1549). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5: E-switch, Fix switchdev mode after devlink reload (jsc#PED-1549). - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules (jsc#PED-1549). - net/mlx5: ECPF, wait for VF pages only after disabling host PFs (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253). - net/mlx5: Expose SF firmware pages counter (jsc#PED-1549). - net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253). - net/mlx5: Fix RoCE setting at HCA level (jsc#PED-1549). - net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253). - net/mlx5: Fix command stats access after free (jsc#PED-1549). - net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253). - net/mlx5: Fix error message when failing to allocate device memory (jsc#PED-1549). - net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253). - net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253). - net/mlx5: Fix io_eq_size and event_eq_size params validation (jsc#PED-1549). - net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253). - net/mlx5: Fix ptp max frequency adjustment range (jsc#PED-1549). - net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253). - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#SLE-19253). - net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#PED-1549). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253). - net/mlx5: Handle pairing of E-switch via uplink un/load APIs (jsc#PED-1549). - net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253). - net/mlx5: Lag, fix failure to cancel delayed bond work (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#PED-1549). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253). - net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253). - net/mlx5: SF, Drain health before removing device (jsc#PED-1549). - net/mlx5: SF, Drain health before removing device (jsc#SLE-19253). - net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253). - net/mlx5: Serialize module cleanup with reload and remove (jsc#PED-1549). - net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253). - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver (jsc#PED-1549). - net/mlx5: Store page counters in a single array (jsc#PED-1549). - net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253). - net/mlx5: check attr pointer validity before dereferencing it (jsc#PED-1549). - net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253). - net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253). - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253). - net/mlx5: fs, fail conflicting actions (jsc#SLE-19253). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#PED-1549). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253). - net/mlx5: fw_tracer, Fix event handling (jsc#PED-1549). - net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#PED-1549). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#PED-1549). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#PED-1549). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#PED-1549). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253). - net/mlx5e: CT: Fix ct debugfs folder name (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253). - net/mlx5e: Do not cache tunnel offloads capability (jsc#PED-1549). - net/mlx5e: Do not clone flow post action attributes second time (jsc#PED-1549). - net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253). - net/mlx5e: Do not support encap rules with gbp option (jsc#PED-1549). - net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253). - net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253). - net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253). - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253). - net/mlx5e: Fix RX reporter for XSK RQs (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253). - net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253). - net/mlx5e: Fix cleanup null-ptr deref on encap lock (jsc#PED-1549). - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (jsc#PED-1549). - net/mlx5e: Fix deadlock in tc route query code (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#PED-1549). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253). - net/mlx5e: Fix macsec ASO context alignment (jsc#PED-1549). - net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (jsc#PED-1549). - net/mlx5e: Fix macsec ssci attribute handling in offload path (jsc#PED-1549). - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253). - net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253). - net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253). - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253). - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (jsc#PED-1549). - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253). - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253). - net/mlx5e: Initialize link speed to zero (jsc#PED-1549). - net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253). - net/mlx5e: Nullify table pointer when failing to create (jsc#PED-1549). - net/mlx5e: Overcome slow response for first macsec ASO WQE (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5e: Remove redundant xsk pointer check in mlx5e_mpwrq_validate_xsk (jsc#PED-1549). - net/mlx5e: Set decap action based on attr for sample (jsc#PED-1549). - net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253). - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253). - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253). - net/mlx5e: Use correct encap attribute during invalidation (jsc#PED-1549). - net/mlx5e: Verify dev is present for fix features ndo (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#PED-1549). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253). - net/net_failover: fix txq exceeding warning (git-fixes). - net/rose: Fix to not accept on connected socket (git-fixes). - net/sched: act_mirred: better wording on protection against excessive stack growth (CVE-2022-4269 bsc#1206024). - net/sched: fix initialization order when updating chain 0 head (git-fixes). - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes). - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes). - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842). - net/tls: tls_is_tx_ready() checked list_entry (CVE-2023-1075 bsc#1208598). - net/ulp: prevent ULP without clone op from entering the LISTEN status (CVE-2023-0461 bsc#1208787). - net/ulp: use consistent error code when blocking ULP (CVE-2023-0461 bsc#1208787). - net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes). - net/x25: Fix to not accept on connected socket (git-fixes). - net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes). - net: add missing include in include/net/gro.h (git-fixes). - net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes). - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes). - net: devlink: Fix missing mutex_unlock() call (git-fixes). - net: ena: Account for the number of processed bytes in XDP (git-fixes). - net: ena: Do not register memory info on XDP exchange (git-fixes). - net: ena: Fix rx_copybreak value update (git-fixes). - net: ena: Fix toeplitz initial hash value (git-fixes). - net: ena: Set default value for RX interrupt moderation (git-fixes). - net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes). - net: ena: Use bitmask to indicate packet redirection (git-fixes). - net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes). - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes). - net: hns3: fix reset delay time to avoid configuration timeout (git-fixes). - net: hns3: fix sending pfc frames after reset issue (git-fixes). - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes). - net: linkwatch: be more careful about dev->linkwatch_dev_tracker (git-fixes). - net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982). - net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022). - net: mana: Add support for jumbo frame (bsc#1210551). - net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153). - net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551). - net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022). - net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022). - net: mana: Enable RX path to handle various MTU sizes (bsc#1210551). - net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875). - net: mana: Fix accessing freed irq affinity_hint (bsc#1208153). - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes). - net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022). - net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022). - net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022). - net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022). - net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551). - net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551). - net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022). - net: mana: Use napi_build_skb in RX path (bsc#1210551). - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes). - net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes). - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#PED-1549). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#SLE-19253). - net: mpls: fix stale pointer if allocation fails during device rename (bsc#1208700 CVE-2023-26545). - net: natsemi: fix hw address initialization for jazz and xtensa (git-fixes). - net: of: fix stub of_net helpers for CONFIG_NET=n (git-fixes). - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes). - net: phy: Ensure state transitions are processed from phy_stop() (git-fixes). - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes). - net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes). - net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes). - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes). - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes). - net: phy: mxl-gpy: add MDINT workaround (git-fixes). - net: phy: nxp-c45-tja11xx: add remove callback (git-fixes). - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes). - net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes). - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes). - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes). - net: qrtr: correct types of trace event parameters (git-fixes). - net: rpl: fix rpl header size calculation (CVE-2023-2156 bsc#1211131). - net: sched: atm: dont intepret cls results when asked to drop (bsc#1207125 CVE-2023-23455). - net: sched: cbq: dont intepret cls results when asked to drop (bsc#1207036 CVE-2023-23454). - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes). - net: sched: fix race condition in qdisc_graft() (CVE-2023-0590 bsc#1207795). - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (bsc#1210940 CVE-2023-31436). - net: sched: sch_qfq: prevent slab-out-of-bounds in qfq_activate_agg (bsc#1210940 CVE-2023-31436). - net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes). - net: tls: fix possible race condition between do_tls_getsockopt_conf() and do_tls_setsockopt_conf() (bsc#1209366 CVE-2023-28466). - net: tun: avoid disabling NAPI twice (git-fixes). - net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes). - net: tun: stop NAPI when detaching queues (git-fixes). - net: tun: unlink NAPI from device on destruction (git-fixes). - net: usb: asix: remove redundant assignment to variable reg (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes). - net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes). - net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - net: usb: use eth_hw_addr_set() (git-fixes). - net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes). - net_sched: add __rcu annotation to netdev->qdisc (CVE-2023-0590 bsc#1207795). - netfilter: nf_tables: deactivate anonymous set from preparation phase (CVE-2023-32233 bsc#1211043). - netfilter: nf_tables: fix null deref due to zeroed list head (CVE-2023-1095 bsc#1208777). - netfilter: nft_payload: incorrect arithmetics when fetching VLAN header bits (CVE-2023-0179 bsc#1207034). - netrom: Fix use-after-free caused by accept on already connected socket (git-fixes). - netrom: Fix use-after-free of a listening socket (git-fixes). - nfc: change order inside nfc_se_io error path (git-fixes). - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes). - nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes). - nfc: pn533: initialize struct pn533_out_arg properly (git-fixes). - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes). - nfp: flower-ct: fix error return code in nfp_fl_ct_add_offload() (git-fixes). - nfp: flower: fix ingress police using matchall filter (git-fixes). - nfp: only report pause frame configuration for physical device (git-fixes). - nfs4: Fix kmemleak when allocate slot failed (git-fixes). - nfs4trace: fix state manager flag printing (git-fixes). - nfs: Always initialise fattr->label in nfs_fattr_alloc() (git-fixes). - nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes). - nfs: Cleanup unused rpc_clnt variable (git-fixes). - nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes). - nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes). - nfs: Fix an Oops in nfs_d_automount() (git-fixes). - nfs: Further optimisations for 'ls -l' (git-fixes). - nfs: Pass i_size to fscache_unuse_cookie() when a file is released (git-fixes). - nfs: fix disabling of swap (git-fixes). - nfs: nfs4clinet: check the return value of kstrdup() (git-fixes). - nfs: nfsiod should not block forever in mempool_alloc() (git-fixes). - nfs: nfsiod should not block forever in mempool_alloc() (git-fixes). - nfsd: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (git-fixes). - nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes). - nfsd: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (git-fixes). - nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes). - nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes). - nfsd: Fix a memory leak in an error handling path (git-fixes). - nfsd: Fix handling of oversized NFSv4 COMPOUND requests (git-fixes). - nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes). - nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - nfsd: Protect against filesystem freezing (git-fixes). - nfsd: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - nfsd: call op_release, even when op_func returns an error (git-fixes). - nfsd: callback request does not use correct credential for AUTH_SYS (git-fixes). - nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes). - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes). - nfsd: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes). - nfsd: fix problems with cleanup on errors in nfsd4_copy (git-fixes). - nfsd: fix race to check ls_layouts (git-fixes). - nfsd: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes). - nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes). - nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes). - nfsd: shut down the NFSv4 state objects before the filecache (git-fixes). - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes). - nfsd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes). - nfsv3: handle out-of-order write replies (bsc#1205544). - nfsv4 expose nfs_parse_server_name function (git-fixes). - nfsv4 handle port presence in fs_location server string (git-fixes). - nfsv4 only print the label when its queried (git-fixes). - nfsv4 remove zero number of fs_locations entries error check (git-fixes). - nfsv4 store server support for fs_location attribute (git-fixes). - nfsv4.1 provide mount option to toggle trunking discovery (git-fixes). - nfsv4.1 query for fs_location attr on a new file system (git-fixes). - nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes). - nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - nfsv4.2: Fix initialisation of struct nfs4_label (git-fixes). - nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes). - nfsv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - nfsv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes). - nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes). - nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes). - nfsv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes). - nfsv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - nfsv4: Fix a potential state reclaim deadlock (git-fixes). - nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - nfsv4: Fix hangs when recovering open state after a server reboot (git-fixes). - nfsv4: Protect the state recovery thread against direct reclaim (git-fixes). - nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes). - nfsv4: keep state manager thread active if swap is enabled (git-fixes). - nilfs2: do not write dirty data after degenerating to read-only (git-fixes). - nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes). - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes). - nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes). - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes). - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes). - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes). - nilfs2: fix sysfs interface lifetime (git-fixes). - nilfs2: fix underflow in second superblock position calculations (git-fixes). - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes). - nilfs2: initialize unused bytes in segment summary blocks (git-fixes). - nouveau: fix client work fence deletion race (git-fixes). - null_blk: fix ida error handling in null_add_dev() (git-fixes). - nvdimm: disable namespace on error (bsc#1166486). - nvdimm: disable namespace on error (bsc#1166486). - nvme initialize core quirks before calling nvme_init_subsystem (git-fixes). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes). - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (git-fixes). - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes). - nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes). - nvme-multipath: fix hang when disk goes live over reconnect (git-fixes). - nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes). - nvme-pci: add bogus ID quirk for ADATA SX6000PNP (bsc#1207827). - nvme-pci: add quirks for Samsung X5 SSDs (git-fixes). - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes). - nvme-pci: clear the prp2 field when not used (git-fixes). - nvme-pci: disable write zeroes on various Kingston SSD (git-fixes). - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes). - nvme-pci: fix doorbell buffer value endianness (git-fixes). - nvme-pci: fix mempool alloc size (git-fixes). - nvme-pci: fix page size checks (git-fixes). - nvme-pci: fix timeout request state check (git-fixes). - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes). - nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes). - nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: always fail a request when sending it failed (bsc#1208902). - nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes). - nvme-tcp: fix bogus request completion when failing to send AER (git-fixes). - nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes). - nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes). - nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes). - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes). - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes). - nvme: add device name to warning in uuid_show() (git-fixes). - nvme: also return I/O command effects from nvme_command_effects (git-fixes). - nvme: bring back auto-removal of deleted namespaces during sequential scan (git-fixes). - nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes). - nvme: check for duplicate identifiers earlier (git-fixes). - nvme: cleanup __nvme_check_ids (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes). - nvme: fix async event trace event (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix handling single range discard request (git-fixes). - nvme: fix interpretation of DMRSL (git-fixes). - nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes). - nvme: fix passthrough csi check (git-fixes). - nvme: fix per-namespace chardev deletion (git-fixes). - nvme: fix the CRIMS and CRWMS definitions to match the spec (git-fixes). - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes). - nvme: fix the name of Zone Append for verbose logging (git-fixes). - nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes). - nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes). - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes). - nvme: move nvme_multi_css into nvme.h (git-fixes). - nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes). - nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes). - nvme: return err on nvme_init_non_mdts_limits fail (git-fixes). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: set dma alignment to dword (git-fixes). - nvme: set non-mdts limits in nvme_scan_work (git-fixes). - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (git-fixes). - nvmet-auth: add missing goto in nvmet_setup_auth() (bsc#1207050 CVE-2023-0122). - nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes). - nvmet-tcp: add bounds check on Transfer Tag (git-fixes). - nvmet-tcp: fix incomplete data digest send (git-fixes). - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes). - nvmet-tcp: fix regression in data_digest calculation (git-fixes). - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes). - nvmet: add helpers to set the result field for connect commands (git-fixes). - nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes). - nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes). - nvmet: fix I/O Command Set specific Identify Controller (git-fixes). - nvmet: fix Identify Active Namespace ID list handling (git-fixes). - nvmet: fix Identify Controller handling (git-fixes). - nvmet: fix Identify Namespace handling (git-fixes). - nvmet: fix a memory leak (git-fixes). - nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes). - nvmet: fix a use-after-free (git-fixes). - nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes). - nvmet: fix mar and mor off-by-one errors (git-fixes). - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: force reconnect when number of queue changes (git-fixes). - nvmet: looks at the passthrough controller when initializing CAP (git-fixes). - nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes). - nvmet: only allocate a single slab for bvecs (git-fixes). - nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes). - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes). - objtool: Add a missing comma to avoid string concatenation (bsc#1207328). - ocfs2: Fix data corruption after failed write (bsc#1208542). - ocfs2: clear dinode links count in case of error (bsc#1207650). - ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649). - ocfs2: fix crash when mount with quota enabled (bsc#1207640). - ocfs2: fix defrag path triggering jbd2 ASSERT (bsc#1199304). - ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652). - ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651). - ocfs2: fix non-auto defrag path not working issue (bsc#1199304). - ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770). - ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768). - ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771). - octeon: constify netdev->dev_addr (git-fixes). - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes). - octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes). - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes). - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes). - of/address: Return an error when no valid dma-ranges are found (git-fixes). - ovl: fail on invalid uid/gid mapping at copy up (CVE-2023-0386 bsc#1209615). - pNFS/filelayout: Fix coalescing test for single DS (git-fixes). - panic: Consolidate open-coded panic_on_warn checks (bsc#1207328). - panic: Introduce warn_limit (bsc#1207328). - panic: unset panic_on_warn inside panic() (bsc#1207328). - pci/aspm: Remove pcie_aspm_pm_state_change() (git-fixes). - pci/dpc: Await readiness of secondary bus after reset (git-fixes). - pci/edr: Clear Device Status after EDR error recovery (git-fixes). - pci/iov: Enlarge virtfn sysfs name buffer (git-fixes). - pci/pm: Always disable PTM for all devices during suspend (git-fixes). - pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes). - pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes). - pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes). - pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes). - pci: Add ACS quirk for Wangxun NICs (git-fixes). - pci: Add SolidRun vendor ID (git-fixes). - pci: Align extra resources for hotplug bridges properly (git-fixes). - pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes). - pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes). - pci: Fix dropping valid root bus resources with .end = zero (git-fixes). - pci: Reduce warnings on possible RW1C corruption (git-fixes). - pci: Take other bus devices into account when distributing resources (git-fixes). - pci: Unify delay handling for reset and resume (git-fixes). - pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes). - pci: aardvark: Fix link training (git-fixes). - pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes). - pci: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes). - pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes). - pci: hv: Add a per-bus mutex state_lock (bsc#1207185). - pci: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185). - pci: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185). - pci: hv: Use async probing to reduce boot time (bsc#1207185). - pci: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185). - pci: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes). - pci: imx6: Install the fault handler only on compatible match (git-fixes). - pci: loongson: Add more devices that need MRRS quirk (git-fixes). - pci: loongson: Prevent LS7A MRRS increases (git-fixes). - pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes). - pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes). - pci: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes). - pci: qcom: Fix host-init error handling (git-fixes). - pci: qcom: Fix pipe clock imbalance (git-fixes). - pci: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes). - pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes). - pci: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - pci: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - pci: xgene: Revert 'PCI: xgene: Use inbound resources for setup' (git-fixes). - perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes). - perf/core: Call LSM hook after copying perf_event_attr (git fixes). - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes). - perf/core: Fix the same task check in perf_event_set_output (git fixes). - perf/core: Inherit event_caps (git fixes). - perf/x86/amd: fix potential integer overflow on shift of a int (git fixes). - perf/x86/intel/cstate: Add Emerald Rapids (PED-4396). - perf/x86/intel/ds: Fix precise store latency handling (git fixes). - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes). - perf/x86/intel/pt: Fix sampling using single range output (git fixes). - perf/x86/intel/pt: Relax address filter validation (git fixes). - perf/x86/intel/uncore: Add Emerald Rapids (git fixes). - perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes). - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes). - perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes). - perf/x86/intel: Add Emerald Rapids (git fixes). - perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes). - perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes). - perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes). - perf/x86/intel: Fix event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for ADL (git fixes). - perf/x86/intel: Fix pebs event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for SPR (git fixes). - perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes). - perf/x86/msr: Add Emerald Rapids (git fixes). - perf/x86/rapl: Add support for Intel AlderLake-N (git fixes). - perf/x86/rapl: Add support for Intel Emerald Rapids (PED-4394). - perf/x86/rapl: Treat Tigerlake like Icelake (git fixes). - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes). - perf/x86/rapl: fix AMD event handling (git fixes). - perf/x86/uncore: Add Raptor Lake uncore support (git fixes). - perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes). - perf/x86/uncore: Add new Raptor Lake S support (git fixes). - perf/x86/uncore: Clean up uncore_pci_ids (git fixes). - perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf: Always wake the parent event (git fixes). - perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes). - perf: Fix possible memleak in pmu_dev_alloc() (git fixes). - perf: fix perf_event_context->time (git fixes). - phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes). - phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes). - phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes). - phy: tegra: xusb: Fix return value of tegra_xusb_find_port_node function (CVE-2023-23000 bsc#1208816). - pinctrl: amd: Disable and mask interrupts on resume (git-fixes). - pinctrl: aspeed: Fix confusing types in return value (git-fixes). - pinctrl: at91-pio4: fix domain name assignment (git-fixes). - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes). - pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes). - pinctrl: mediatek: Initialize variable *buf to zero (git-fixes). - pinctrl: mediatek: fix coding style (git-fixes). - pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes). - pinctrl: ocelot: Fix alt mode for ocelot (git-fixes). - pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes). - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes). - pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes). - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes). - pinctrl: single: fix potential NULL dereference (git-fixes). - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes). - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes). - platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes). - platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd: Fix refcount leak in amd_pmc_probe (bsc#1210644). - platform/x86/amd: pmc: Add a module parameter to disable workarounds (bsc#1210644). - platform/x86/amd: pmc: Add a workaround for an s0i3 issue on Cezanne (bsc#1210644). - platform/x86/amd: pmc: Add defines for STB events (bsc#1210644). - platform/x86/amd: pmc: Add line break for readability (bsc#1210644). - platform/x86/amd: pmc: Add new ACPI ID AMDI0009 (bsc#1210644). - platform/x86/amd: pmc: Add num_samples message id support to STB (bsc#1210644). - platform/x86/amd: pmc: Add sysfs files for SMU (bsc#1210644). - platform/x86/amd: pmc: Always write to the STB (bsc#1210644). - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN (bsc#1210644). - platform/x86/amd: pmc: Do not dump data after resume from s0i3 on picasso (git-fixes). - platform/x86/amd: pmc: Do not try to read SMU version on Picasso (git-fixes). - platform/x86/amd: pmc: Fix build without debugfs (bsc#1210644). - platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() (bsc#1210644). - platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso (git-fixes). - platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` (git-fixes). - platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init (git-fixes). - platform/x86/amd: pmc: Read SMU version during suspend on Cezanne systems (bsc#1210644). - platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: Utilize SMN index 0 for driver probe (git-fixes). - platform/x86/amd: pmc: Write dummy postcode into the STB DRAM (bsc#1210644). - platform/x86/amd: pmc: add CONFIG_SERIO dependency (git-fixes). - platform/x86/amd: pmc: differentiate STB/SMU messaging prints (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_SUSPEND checks (bsc#1210644). - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes). - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420). - platform/x86: ISST: Remove 8 socket limit (bsc#1211836). - platform/x86: Move AMD platform drivers to separate directory (bsc#1210644). - platform/x86: amd-pmc: Add a message to print resume time info (bsc#1210644). - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Smart Trace Buffer (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Spill to DRAM STB feature (bsc#1210644). - platform/x86: amd-pmc: Avoid reading SMU version at probe time (bsc#1210644). - platform/x86: amd-pmc: Check s0i3 cycle status (bsc#1210644). - platform/x86: amd-pmc: Correct usage of SMU version (git-fixes). - platform/x86: amd-pmc: Downgrade dev_info message to dev_dbg (bsc#1210644). - platform/x86: amd-pmc: Drop CPU QoS workaround (bsc#1210644). - platform/x86: amd-pmc: Drop check for valid alarm time (bsc#1210644). - platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes). - platform/x86: amd-pmc: Fix build error unused-function (bsc#1210644). - platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes). - platform/x86: amd-pmc: Fix compilation without CONFIG_SUSPEND (bsc#1210644). - platform/x86: amd-pmc: Make amd_pmc_stb_debugfs_fops static (bsc#1210644). - platform/x86: amd-pmc: Move FCH init to first use (bsc#1210644). - platform/x86: amd-pmc: Move SMU logging setup out of init (bsc#1210644). - platform/x86: amd-pmc: Move to later in the suspend process (bsc#1210644). - platform/x86: amd-pmc: Only report STB errors when STB enabled (bsc#1210644). - platform/x86: amd-pmc: Output error codes in messages (bsc#1210644). - platform/x86: amd-pmc: Send command to dump data after clearing OS_HINT (bsc#1210644). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1210644). - platform/x86: amd-pmc: Shuffle location of amd_pmc_get_smu_version() (bsc#1210644). - platform/x86: amd-pmc: Simplify error handling and store the pci_dev in amd_pmc_dev structure (bsc#1210644). - platform/x86: amd-pmc: Validate entry into the deepest state on resume (bsc#1210644). - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd` (bsc#1210644). - platform/x86: amd-pmc: fix compilation without CONFIG_RTC_SYSTOHC_DEVICE (bsc#1210644). - platform/x86: amd-pmc: uninitialized variable in amd_pmc_s2d_init() (bsc#1210644). - platform/x86: amd: pmc: Remove __maybe_unused from amd_pmc_suspend_handler() (bsc#1210644). - platform/x86: amd: pmc: provide user message where s0ix is not supported (bsc#1210644). - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes). - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes). - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes). - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes). - platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes). - platform/x86: hp-wmi: Support touchpad on/off (git-fixes). - platform/x86: intel-uncore-freq: add Emerald Rapids support (PED-4390). - platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes). - platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes). - platform/x86: think-lmi: Certificate authentication support (bsc#1210050). - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes). - platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes). - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes). - platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050). - platform/x86: think-lmi: Opcode support (bsc#1210050). - platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050). - platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050). - platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050). - platform/x86: think-lmi: add debug_cmd (bsc#1210050). - platform/x86: think-lmi: add missing type attribute (git-fixes). - platform/x86: think-lmi: certificate support clean ups (bsc#1210050). - platform/x86: think-lmi: only display possible_values if available (git-fixes). - platform/x86: think-lmi: use correct possible_values delimiters (git-fixes). - platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050). - platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050). - platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050). - platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050). - platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050). - platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050). - platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050). - platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050). - platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050). - platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050). - platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050). - platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050). - platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050). - platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050). - platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050). - platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050). - platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050). - platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050). - platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050). - platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050). - platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050). - platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050). - platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050). - platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050). - platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050). - platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050). - platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050). - platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050). - platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050). - platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050). - platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050). - platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050). - platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050). - platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050). - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes). - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes). - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes). - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes). - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes). - pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes). - pm: hibernate: Do not get block device exclusively in test_resume mode (git-fixes). - pm: hibernate: Turn snapshot_test into global variable (git-fixes). - pm: hibernate: fix load_image_and_restore() error path (git-fixes). - power: supply: Fix logic checking if system is running from battery (git-fixes). - power: supply: Ratelimit no data debug output (git-fixes). - power: supply: ab8500: Fix external_power_changed race (git-fixes). - power: supply: bq24190: Fix use after free bug in bq24190_remove due to race condition (CVE-2023-33288 bsc#1211590). - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes). - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes). - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes). - power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes). - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes). - power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes). - power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes). - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes). - power: supply: bq27xxx: expose battery data when CI=1 (git-fixes). - power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes). - power: supply: generic-adc-battery: fix unit scaling (git-fixes). - power: supply: leds: Fix blink to LED on transition (git-fixes). - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes). - power: supply: sc27xx: Fix external_power_changed race (git-fixes). - powercap: fix possible name leak in powercap_register_zone() (git-fixes). - powercap: intel_rapl: add support for Emerald Rapids (PED-4398). - powerpc/64: Always build with 128-bit long double (bsc#1194869). - powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869). - powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869). - powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729). - powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes). - powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612). - powerpc/hv-gpci: Fix hv_gpci event list (bsc#1207935). - powerpc/hv-gpci: Fix hv_gpci event list (git fixes). - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869). - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869). - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes). - powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701). - powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869). - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869). - powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869). - powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869). - powerpc/kexec_file: fix implicit decl error (bsc#1194869). - powerpc/mm: Fix false detection of read faults (bsc#1208864). - powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled (bsc#1210216 ltc#202189). - powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/purgatory: remove PGO flags (bsc#1194869). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729). - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869). - powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869). - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869). - powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869). - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869). - powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729). - powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662). - powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869). - powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662). - powerpc: declare unmodified attribute_group usages const (bsc#1207935). - powerpc: declare unmodified attribute_group usages const (git-fixes). - powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869). - printf: fix errname.c list (git-fixes). - prlimit: do_prlimit needs to have a speculation check (bsc#1209256). - pstore: Revert pmsg_lock back to a normal mutex (git-fixes). - purgatory: fix disabling debug info (git-fixes). - pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes). - pwm: meson: Fix axg ao mux parents (git-fixes). - pwm: meson: Fix g12a ao clk81 name (git-fixes). - pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes). - pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes). - qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001). - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (jsc#SLE-19001). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001). - qed/qede: Fix scheduling while atomic (git-fixes). - qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001). - qede: avoid uninitialized entries in coal_entry array (bsc#1205846). - qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001). - qede: fix interrupt coalescing configuration (bsc#1205846). - quota: Check next/prev free block number after reading from quota file (bsc#1206640). - quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: fix flow control issue of RTL8156A (git-fixes). - r8152: fix the poor throughput for 2.5G devices (git-fixes). - r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes). - r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes). - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes). - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes). - rcu: Fix rcu_torture_read ftrace event (git-fixes). - rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159). - rdma/bnxt_re: Fix a possible memory leak (git-fixes) - rdma/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes) - rdma/bnxt_re: Fix the page_size used during the MR creation (git-fixes) - rdma/cm: Trace icm_send_rej event before the cm state is reset (git-fixes) - rdma/cma: Allow UD qp_type to join multicast only (git-fixes) - rdma/core: Fix GID entry ref leak when create_ah fails (git-fixes) - rdma/core: Fix ib block iterator counter overflow (bsc#1207878). - rdma/core: Fix ib block iterator counter overflow (git-fixes) - rdma/core: Fix multiple -Warray-bounds warnings (git-fixes) - rdma/core: Refactor rdma_bind_addr (bsc#1210629 CVE-2023-2176) - rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes) - rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes) - rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes) - rdma/efa: Fix unsupported page sizes in device (git-fixes) - rdma/hns: Fix base address table allocation (git-fixes) - rdma/hns: Fix timeout attr in query qp for HIP08 (git-fixes) - rdma/hns: Modify the value of long message loopback slice (git-fixes) - rdma/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383). - rdma/irdma: Add ipv4 check to irdma_find_listener() (git-fixes) - rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383). - rdma/irdma: Fix Local Invalidate fencing (git-fixes) - rdma/irdma: Fix RQ completion opcode (jsc#SLE-18383). - rdma/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383). - rdma/irdma: Fix inline for multiple SGE's (jsc#SLE-18383). - rdma/irdma: Fix memory leak of PBLE objects (git-fixes) - rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes) - rdma/irdma: Increase iWARP CM default rexmit count (git-fixes) - rdma/irdma: Prevent QP use after free (git-fixes) - rdma/irdma: Remove enum irdma_status_code (jsc#SLE-18383). - rdma/irdma: Remove excess error variables (jsc#SLE-18383). - rdma/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022). - rdma/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022). - rdma/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255). - rdma/mlx5: Fix flow counter query via DEVX (git-fixes) - rdma/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes) - rdma/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes) - rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253). - rdma/mlx5: Use correct device num_ports when modify DC (git-fixes) - rdma/mlx5: Use rdma_umem_for_each_dma_block() (git-fixes) - rdma/rdmavt: Delete unnecessary NULL check (git-fixes) - rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes) - rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes) - rdma/rxe: Fix inaccurate constants in rxe_type_info (git-fixes) - rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes) - rdma/rxe: Fix mr->map double free (git-fixes) - rdma/rxe: Fix oops with zero length reads (git-fixes) - rdma/rxe: Fix the error 'trying to register non-static key in rxe_cleanup_task' (git-fixes) - rdma/rxe: Make responder handle RDMA Read failures (git-fixes) - rdma/rxe: Prevent faulty rkey generation (git-fixes) - rdma/rxe: Remove tasklet call from rxe_cq.c (git-fixes) - rdma/siw: Fix potential page_array out of range access (git-fixes) - rdma/siw: Fix user page pinning accounting (git-fixes) - rdma/siw: Remove namespace check from siw_netdev_event() (git-fixes) - rdma/srp: Move large values to a new enum for gcc13 (git-fixes) - rdma/srpt: Add a check for valid 'mad_agent' pointer (git-fixes) - rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes) - rdma: Handle the return code from dma_resv_wait_timeout() properly (git-fixes) - rds: rds_rm_zerocopy_callback() correct order for list_add_tail() (CVE-2023-1078 bsc#1208601). - ref_tracker: use __GFP_NOFAIL more carefully (git-fixes). - regmap: Account for register length when chunking (git-fixes). - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes). - regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes). - regulator: Fix error checking for debugfs_create_dir (git-fixes). - regulator: Flag uncontrollable regulators as always_on (git-fixes). - regulator: Handle deferred clk (git-fixes). - regulator: core: Avoid lockdep reports when resolving supplies (git-fixes). - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes). - regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes). - regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes). - regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes). - regulator: fan53555: Explicitly include bits header (git-fixes). - regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes). - regulator: max77802: Bounds check regulator id against opmode (git-fixes). - regulator: mt6359: add read check for PMIC MT6359 (git-fixes). - regulator: pca9450: Fix BUCK2 enable_mask (git-fixes). - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes). - regulator: s5m8767: Bounds check id indexing into arrays (git-fixes). - regulator: stm32-pwr: fix of_iomap leak (git-fixes). - reiserfs: Add missing calls to reiserfs_security_free() (git-fixes). - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes). - remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes). - remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes). - remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes). - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes). - remoteproc: st: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes). - remove 'PCI: hv: Use async probing to reduce boot time' (bsc#1207185). - rethook: Reject getting a rethook if RCU is not watching (git-fixes). - rethook: fix a potential memleak in rethook_alloc() (git-fixes). - rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler (git-fixes). - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (git-fixes). - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes). - ring-buffer: Fix kernel-doc (git-fixes). - ring-buffer: Fix race while reader and writer are on the same page (git-fixes). - ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes). - ring-buffer: Sync IRQ works before buffer destruction (git-fixes). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - rpm/check-for-config-changes: add TOOLCHAIN_NEEDS_* to IGNORED_CONFIGS_RE This new form was added in commit e89c2e815e76 ('riscv: Handle zicsr/zifencei issues between clang and binutils'). - rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB - rpm/group-source-files.pl: Fix output difference when / is in location While previous attempt to fix group-source-files.pl in 6d651362c38 'rpm/group-source-files.pl: Deal with {pre,post}fixed / in location' breaks the infinite loop, it does not properly address the issue. Having prefixed and/or postfixed forward slash still result in different output. This commit changes the script to use the Perl core module File::Spec for proper path manipulation to give consistent output. - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435) - rpm/kernel-obs-build.spec.in: Remove SLE11 cruft - rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches - rtc: allow rtc_read_alarm without read_alarm callback (git-fixes). - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes). - rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes). - rtc: pm8xxx: fix set-alarm race (git-fixes). - rtc: sun6i: Always export the internal oscillator (git-fixes). - rtmutex: Ensure that the top waiter is always woken up (git-fixes). - s390/ap: fix memory leak in ap_init_qci_info() (git-fixes). - s390/boot: simplify and fix kernel memory layout setup (bsc#1209600). - s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686). - s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes). - s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592). - s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687). - s390/dasd: fix no record found for raw_track_access (bsc#1207574). - s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes). - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688). - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689). - s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690). - s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691). - s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692). - s390/pkey: zeroize key blobs (git-fixes bsc#1212619). - s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693). - s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes). - s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes). - s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714). - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() (git-fixes). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes) - sched/core: Avoid obvious double update_rq_clock warning (git-fixes) - sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes) - sched/core: Introduce sched_asym_cpucap_active() (git-fixes) - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes) - sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)). - sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325). - sched/fair: sanitize vruntime of entity being placed (bsc#1203325). - sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)). - sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799). - sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077) - sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes) - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes) - sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes) - sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)). - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (git-fixes). - scsi: aacraid: Allocate cmd_priv with scsicmd (git-fixes). - scsi: aic94xx: Add missing check for dma_map_single() (git-fixes). - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes). - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes). - scsi: core: Fix a procfs host directory removal regression (git-fixes). - scsi: core: Fix a source code comment (git-fixes). - scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes). - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes). - scsi: hisi_sas: Check devm_add_action() return value (git-fixes). - scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes). - scsi: hisi_sas: Revert change to limit max hw sectors for v3 HW (bsc#1210230). - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes). - scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes). - scsi: ipr: Work around fortify-string warning (git-fixes). - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes). - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes). - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: libsas: Add sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes). - scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847). - scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes). - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (bsc#1211847). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Update congestion warning notification period (bsc#1211847). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847). - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes). - scsi: megaraid_sas: Fix crash after a double completion (git-fixes). - scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (git-fixes). - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (git-fixes). - scsi: mpi3mr: Fix throttle_groups memory leak (git-fixes). - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (git-fixes). - scsi: mpi3mr: Suppress command reply debug prints (bsc#1211820). - scsi: mpt3sas: Do not print sense pool info twice (git-fixes). - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes). - scsi: mpt3sas: Fix a memory leak (git-fixes). - scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes). - scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix hang in task management (bsc#1211960). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix mem access after free (bsc#1211960). - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960). - scsi: qla2xxx: Fix task management cmd failure (bsc#1211960). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Multi-que support for TMF (bsc#1211960). - scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes). - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes). - scsi: scsi_ioctl: Validate command size (git-fixes). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Revert 'Rework asynchronous resume support' (bsc#1209092). - scsi: ses: Do not attach if enclosure has no components (git-fixes). - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes). - scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes). - scsi: smartpqi: Add controller cache flush during rmmod (bsc#1207315). - scsi: smartpqi: Add new controller PCI IDs (bsc#1207315). - scsi: smartpqi: Change sysfs raid_level attribute to N/A for controllers (bsc#1207315). - scsi: smartpqi: Change version to 2.1.20-035 (bsc#1207315). - scsi: smartpqi: Convert to host_tagset (bsc#1207315). - scsi: smartpqi: Correct device removal for multi-actuator devices (bsc#1207315). - scsi: smartpqi: Correct max LUN number (bsc#1207315). - scsi: smartpqi: Initialize feature section info (bsc#1207315). - scsi: smartpqi: Replace one-element array with flexible-array member (bsc#1207315). - scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes). - scsi: stex: Fix gcc 13 warnings (git-fixes). - scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes). - scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes). - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes). - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes). - scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes). - scsi: ufs: core: Enable link lost interrupt (git-fixes). - scsi_disk kABI: add back members (bsc#1209092). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - seccomp: Move copy_seccomp() to no failure path (bsc#1210817). - sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes). - selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes). - selftests mount: Fix mount_setattr_test builds failed (git-fixes). - selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103). - selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103). - selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes). - selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232). - selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232). - selftests/powerpc: Move perror closer to its use (bsc#1206232). - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes). - selftests/resctrl: Allow ->setup() to return errors (git-fixes). - selftests/resctrl: Check for return value after write_schemata() (git-fixes). - selftests/resctrl: Extend CPU vendor detection (git-fixes). - selftests/resctrl: Move ->setup() call outside of test specific branches (git-fixes). - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes). - selftests/sgx: Add 'test_encl.elf' to TEST_FILES (git-fixes). - selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes). - selftests: Provide local define of __cpuid_count() (git-fixes). - selftests: forwarding: lib: quote the sysctl values (git-fixes). - selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes). - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes). - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes). - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes). - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes). - selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes). - selftests: sigaltstack: fix -Wuninitialized (git-fixes). - selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes). - selftests: xsk: Disable IPv6 on VETH1 (git-fixes). - selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes). - selinux: do not use make's grouped targets feature yet (git-fixes). - selinux: ensure av_permissions.h is built when needed (git-fixes). - selinux: fix Makefile dependencies of flask.h (git-fixes). - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes). - serial: 8250: Add missing wakeup event reporting (git-fixes). - serial: 8250: Reinit port->pm on port specific driver unbind (git-fixes). - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes). - serial: 8250_bcm7271: Fix arbitration handling (git-fixes). - serial: 8250_bcm7271: balance clk_enable calls (git-fixes). - serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes). - serial: 8250_dma: Fix DMA Rx rearm race (git-fixes). - serial: 8250_em: Fix UART port type (git-fixes). - serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes). - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes). - serial: 8250_fsl: fix handle_irq locking (git-fixes). - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes). - serial: Add support for Advantech PCI-1611U card (git-fixes). - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes). - serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes). - serial: fsl_lpuart: Fix comment typo (git-fixes). - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes). - serial: lantiq: add missing interrupt ack (git-fixes). - serial: qcom-geni: fix console shutdown hang (git-fixes). - serial: qcom-geni: fix enabling deactivated interrupt (git-fixes). - serial: sc16is7xx: setup GPIO controller later in probe (git-fixes). - serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes). - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes). - sfc: Change VF mac via PF as first preference if available (git-fixes). - sfc: Fix module EEPROM reporting for QSFP modules (git-fixes). - sfc: Fix use-after-free due to selftest_work (git-fixes). - sfc: correctly advertise tunneled IPv6 segmentation (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: ef10: do not overwrite offload features at NIC reset (git-fixes). - sfc: fix TX channel offset when using legacy interrupts (git-fixes). - sfc: fix considering that all channels have TX queues (git-fixes). - sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes). - sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes). - sfc: include vport_id in filter spec hash and equal() (git-fixes). - signal handling: do not use BUG_ON() for debugging (bsc#1210439). - signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes). - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes). - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes). - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816). - signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816). - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816). - signal: Implement force_fatal_sig (git-fixes). - smb3.1.1: add new tree connect ShareFlags (bsc#1193629). - smb3: Add missing locks to protect deferred close file list (git-fixes). - smb3: Close all deferred handles of inode in case of handle lease break (bsc#1193629). - smb3: Close deferred file handles in case of handle lease break (bsc#1193629). - smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629). - smb3: display debug information better for encryption (bsc#1193629). - smb3: drop reference to cfile before sending oplock break (bsc#1193629). - smb3: fix problem remounting a share after shutdown (bsc#1193629). - smb3: fix unusable share after force unmount failure (bsc#1193629). - smb3: force unmount was failing to close deferred close files (bsc#1193629). - smb3: improve parallel reads of large files (bsc#1193629). - smb3: lower default deferred close timeout to address perf regression (bsc#1193629). - smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629). - smb3: move some common open context structs to smbfs_common (bsc#1193629). - soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 (git-fixes). - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes). - soundwire: cadence: Do not overflow the command FIFOs (git-fixes). - soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes). - soundwire: qcom: gracefully handle too many ports in DT (git-fixes). - spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes). - spi: cadence-quadspi: fix suspend-resume implementations (git-fixes). - spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes). - spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes). - spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes). - spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes). - spi: qup: Do not skip cleanup in remove's error path (git-fixes). - spi: qup: Request DMA before enabling clocks (git-fixes). - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (git-fixes). - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - spi: spidev: remove debug messages that access spidev->spi without locking (git-fixes). - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes). - spi: tegra210-quad: Fix combined sequence (bsc#1212584) - spi: tegra210-quad: Fix iterator outside loop (git-fixes). - spi: tegra210-quad: Fix validate combined sequence (git-fixes). - spi: tegra210-quad: Multi-cs support (bsc#1212584) - squashfs: fix handling and sanity checking of xattr_ids count (git-fixes). - squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes). - staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes). - staging: iio: resolver: ads1210: fix config mode (git-fixes). - staging: mt7621-dts: change palmbus address to lower case (git-fixes). - staging: mt7621-dts: change some node hex addresses to lower case (git-fixes). - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes). - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (git-fixes). - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (git-fixes). - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes). - stat: fix inconsistency between struct stat and struct compat_stat (git-fixes). - struct ci_hdrc: hide new member at end (git-fixes). - struct dwc3: mask new member (git-fixes). - struct uvc_device move flush_status new member to end (git-fixes). - sunrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes). - sunrpc: Clean up svc_deferred_class trace events (git-fixes). - sunrpc: Do not dereference xprt->snd_task if it's a cookie (git-fixes). - sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes). - sunrpc: Fix a server shutdown leak (git-fixes). - sunrpc: Fix missing release socket in rpc_sockname() (git-fixes). - sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes). - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes). - sunrpc: Fix socket waits for write buffer space (git-fixes). - sunrpc: Return true/false (not 1/0) from bool functions (git-fixes). - sunrpc: Update trace flags (git-fixes). - sunrpc: Use BIT() macro in rpc_show_xprt_state() (git-fixes). - sunrpc: ensure the matching upcall is in-flight upon downcall (git-fixes). - sunrpc: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775). - sunrpc: only free unix grouplist after RCU settles (git-fixes). - supported.conf: - supported.conf: Add a guard for unsupported DVB modules - supported.conf: Add a guard for unsupported rose module - supported.conf: Move bt878 and bttv modules to kernel-*-extra (jsc#PED-3931) - supported.conf: Remove duplicate entry. - supported.conf: add comments for missing CVE fixes for net/rose - supported.conf: declaring usb_f_ncm supported as requested in (jsc#PED-3750) Support for the legacy functionality g_ncm is still under discussion (see jsc-PED#3200) For maintainance see (jsc#PED-3759) - supported.conf: mark mana_ib supported - supported.conf: support u_ether and libcomposite (jsc-PED#3750) This is necessary for g_ncm (for maintainance see jsc-PED#3759) - swim3: add missing major.h include (git-fixes). - swiotlb: Free tbl memory in swiotlb_exit() (jsc#PED-3259). - swiotlb: add a SWIOTLB_ANY flag to lift the low memory restriction (PED-3259). - swiotlb: avoid potential left shift overflow (PED-3259). - swiotlb: clean up some coding style and minor issues (PED-3259). - swiotlb: consolidate rounding up default_nslabs (PED-3259). - swiotlb: do not panic when the swiotlb buffer can't be allocated (PED-3259). - swiotlb: ensure a segment does not cross the area boundary (PED-3259). - swiotlb: fail map correctly with failed io_tlb_default_mem (PED-3259). - swiotlb: fix a typo (PED-3259). - swiotlb: fix passing local variable to debugfs_create_ulong() (PED-3259). - swiotlb: fix setting ->force_bounce (PED-3259). - swiotlb: fix use after free on error handling path (PED-3259). - swiotlb: make swiotlb_exit a no-op if SWIOTLB_FORCE is set (PED-3259). - swiotlb: make the swiotlb_init interface more useful (PED-3259). - swiotlb: merge swiotlb-xen initialization into swiotlb (jsc#PED-3259). - swiotlb: panic if nslabs is too small (PED-3259). - swiotlb: pass a gfp_mask argument to swiotlb_init_late (PED-3259). - swiotlb: provide swiotlb_init variants that remap the buffer (PED-3259). - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes). - swiotlb: remove a useless return in swiotlb_init (PED-3259). - swiotlb: remove swiotlb_init_with_tbl and swiotlb_init_late_with_tbl (PED-3259). - swiotlb: remove unused fields in io_tlb_mem (PED-3259). - swiotlb: rename swiotlb_late_init_with_default_size (PED-3259). - swiotlb: simplify debugfs setup (jsc#PED-3259). - swiotlb: simplify swiotlb_max_segment (PED-3259). - swiotlb: split up the global swiotlb lock (PED-3259). - swiotlb: use the right nslabs value in swiotlb_init_remap (PED-3259). - swiotlb: use the right nslabs-derived sizes in swiotlb_init_late (PED-3259). - sysctl: add a new register_sysctl_init() interface (bsc#1207328). - tap: tap_open(): correctly initialize socket uid (CVE-2023-1076 bsc#1208599). - task_work: Decouple TIF_NOTIFY_SIGNAL and task_work (git-fixes). - task_work: Introduce task_work_pending (git-fixes). - test_firmware: Use kstrtobool() instead of strtobool() (git-fixes). - test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes). - test_firmware: prevent race conditions by a correct implementation of locking (git-fixes). - thermal/core: Remove duplicate information when an error occurs (git-fixes). - thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes). - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes). - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes). - thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes). - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes). - thermal/drivers/tsens: fix slope values for msm8939 (git-fixes). - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes). - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes). - thermal: intel: Fix unsigned comparison with less than zero (git-fixes). - thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes). - thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes). - thermal: intel: quark_dts: fix error pointer dereference (git-fixes). - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes). - thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Disable interrupt auto clear for rings (git-fixes). - thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165). - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes). - thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes). - thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes). - thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes). - timers: Prevent union confusion from unexpected (git-fixes) - tls: Skip tls_append_frag on zero copy size (git-fixes). - tools/iio/iio_utils:fix memory leak (git-fixes). - tools/virtio: compile with -pthread (git-fixes). - tools/virtio: fix the vringh test for virtio ring changes (git-fixes). - tools/virtio: fix virtio_test execution (git-fixes). - tools/virtio: initialize spinlocks in vring_test.c (git-fixes). - tools: bpftool: Remove invalid \' json escape (git-fixes). - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes). - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes). - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes). - tpm, tpm_tis: Request threaded interrupt handler (git-fixes). - tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes). - tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes). - trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes). - trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace_events_hist: add check for return value of 'create_hist_field' (git-fixes). - tracing/fprobe: Fix to check whether fprobe is registered correctly (git-fixes). - tracing/hist: Fix issue of losting command info in error_log (git-fixes). - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes). - tracing/hist: Fix wrong return value in parse_action_params() (git-fixes). - tracing/histograms: Allow variables to have some modifiers (git-fixes). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes). - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes). - tracing/probes: Handle system names with hyphens (git-fixes). - tracing: Add '__rel_loc' using trace event macros (git-fixes). - tracing: Add DYNAMIC flag for dynamic events (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - tracing: Add trace_array_puts() to write into instance (git-fixes). - tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes). - tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing: Avoid adding tracer option before update_tracer_options (git-fixes). - tracing: Check field value in hist_field_name() (git-fixes). - tracing: Do not let histogram values have some modifiers (git-fixes). - tracing: Do not use out-of-sync va_list in event printing (git-fixes). - tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes). - tracing: Fix a kmemleak false positive in tracing_map (git-fixes). - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes). - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes). - tracing: Fix issue of missing one synthetic field (git-fixes). - tracing: Fix mismatched comment in __string_len (git-fixes). - tracing: Fix permissions for the buffer_percent file (git-fixes). - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes). - tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes). - tracing: Fix race where histograms can be called before the event (git-fixes). - tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes). - tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes). - tracing: Fix warning on variable 'struct trace_array' (git-fixes). - tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes). - tracing: Free error logs of tracing instances (git-fixes). - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes). - tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350). - tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes). - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes). - tracing: Have type enum modifications copy the strings (git-fixes). - tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes). - tracing: Make splice_read available again (git-fixes). - tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes). - tracing: Make tp_printk work on syscall tracepoints (git-fixes). - tracing: Make tracepoint lockdep check actually test something (git-fixes). - tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350). - tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes). - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes). - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes). - tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes). - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes). - tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes). - tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes). - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes). - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes). - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes). - tty: serial: imx: Handle RS485 DE signal active high (git-fixes). - tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes). - tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes). - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes). - tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes). - tun: annotate access to queue->trans_start (jsc#PED-370). - tun: tun_chr_open(): correctly initialize socket uid (CVE-2023-1076 bsc#1208599). - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes). - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328). - udf: Check consistency of Space Bitmap Descriptor (bsc#1210771). - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649). - udf: Support splicing to file (bsc#1210770). - update internal module version number for cifs.ko (bsc#1193629). - usb / dwc3: Fix a checkpatch warning in core.c (git-fixes). - usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes). - usb: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes). - usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes). - usb: cdns3: Fix issue with using incorrect PCI device function (git-fixes). - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes). - usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes). - usb: cdnsp: Fixes issue with redundant Status Stage (git-fixes). - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes). - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes). - usb: chipidea: core: fix possible concurrent when switch role (git-fixes). - usb: chipidea: fix memory leak with using debugfs_lookup() (git-fixes). - usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes). - usb: chipidea: imx: avoid unnecessary probe defer (git-fixes). - usb: core: Add routines for endpoint checks in old drivers (git-fixes). - usb: core: Do not hold device lock while reading the 'descriptors' sysfs file (git-fixes). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes). - usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes). - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes). - usb: dwc3: Align DWC3_EP_* flag macros (git-fixes). - usb: dwc3: Fix a repeated word checkpatch warning (git-fixes). - usb: dwc3: Fix a typo in field name (git-fixes). - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes). - usb: dwc3: core: Host wake up support from system suspend (git-fixes). - usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes). - usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes). - usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes). - usb: dwc3: fix memory leak with using debugfs_lookup() (git-fixes). - usb: dwc3: fix runtime pm imbalance on probe errors (git-fixes). - usb: dwc3: fix runtime pm imbalance on unbind (git-fixes). - usb: dwc3: fix use-after-free on core driver unbind (git-fixes). - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes). - usb: dwc3: gadget: Change condition for processing suspend event (git-fixes). - usb: dwc3: gadget: Delay issuing End Transfer (git-fixes). - usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes). - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes). - usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes). - usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes). - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes). - usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes). - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes). - usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes). - usb: dwc3: qcom: clean up icc init (git-fixes). - usb: dwc3: qcom: clean up suspend callbacks (git-fixes). - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes). - usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes). - usb: dwc3: qcom: fix gadget-only builds (git-fixes). - usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes). - usb: dwc3: qcom: fix wakeup implementation (git-fixes). - usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes). - usb: dwc3: qcom: suppress unused-variable warning (git-fixes). - usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes). - usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes). - usb: ene_usb6250: Allocate enough memory for full object (git-fixes). - usb: fix memory leak with using debugfs_lookup() (git-fixes). - usb: fotg210: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes). - usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes). - usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes). - usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes). - usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes). - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes). - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes). - usb: gadget: f_hid: fix refcount leak on error path (git-fixes). - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes). - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes). - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes). - usb: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes). - usb: gadget: u_audio: do not let userspace block driver unbind (git-fixes). - usb: gadget: u_ether: Fix host MAC address case (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes). - usb: gadget: udc: do not clear gadget driver.bus (git-fixes). - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes). - usb: host: xhci-rcar: remove leftover quirk handling (git-fixes). - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes). - usb: isp116x: fix memory leak with using debugfs_lookup() (git-fixes). - usb: isp1362: fix memory leak with using debugfs_lookup() (git-fixes). - usb: max-3421: Fix setting of I/O pins (git-fixes). - usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes). - usb: musb: Add and use inline function musb_otg_state_string (git-fixes). - usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes). - usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes). - usb: musb: remove schedule work called after flush (git-fixes). - usb: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes). - usb: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes). - usb: serial: option: add Quectel EC200U modem (git-fixes). - usb: serial: option: add Quectel EM05-G (CS) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (GR) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (RS) modem (git-fixes). - usb: serial: option: add Quectel EM05CN (SG) modem (git-fixes). - usb: serial: option: add Quectel EM05CN modem (git-fixes). - usb: serial: option: add Quectel EM061KGL series (git-fixes). - usb: serial: option: add Quectel RM500U-CN modem (git-fixes). - usb: serial: option: add Telit FE990 compositions (git-fixes). - usb: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes). - usb: serial: option: add support for VW/Skoda 'Carstick LTE' (git-fixes). - usb: sisusbvga: Add endpoint checks (git-fixes). - usb: sl811: fix memory leak with using debugfs_lookup() (git-fixes). - usb: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes). - usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes). - usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes). - usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes). - usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes). - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix multiple times discover svids error (git-fixes). - usb: typec: tcpm: fix warning when handle discover_identity message (git-fixes). - usb: typec: ucsi: Do not attempt to resume the ports before they exist (git-fixes). - usb: typec: ucsi: Do not warn on probe deferral (git-fixes). - usb: typec: ucsi: Fix command cancellation (git-fixes). - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes). - usb: ucsi: Fix ucsi->connector race (git-fixes). - usb: ucsi_acpi: Increase the command completion timeout (git-fixes). - usb: uhci: fix memory leak with using debugfs_lookup() (git-fixes). - usb: usbfs: Enforce page requirements for mmap (git-fixes). - usb: usbfs: Use consistent mmap functions (git-fixes). - usb: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes). - usb: uvc: Enumerate valid values for color matching (git-fixes). - usb: xhci: tegra: fix sleep in atomic call (git-fixes). - usrmerge: Compatibility with earlier rpm (boo#1211796) - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (jsc#PED-1549). - vDPA: check virtio device features to detect MQ (jsc#PED-1549). - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (jsc#PED-1549). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: modify vcs_size() handling in vcs_read() (git-fixes). - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes). - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes). - vdpa/ifcvf: fix the calculation of queuepair (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#SLE-19253). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#PED-1549). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253). - vdpa/mlx5: Fix rule forwarding VLAN to TIR (jsc#PED-1549). - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253). - vdpa/mlx5: Fix wrong mac address deletion (jsc#PED-1549). - vdpa/mlx5: Initialize CVQ iotlb spinlock (jsc#PED-1549). - vdpa/mlx5: should not activate virtq object when suspended (jsc#PED-1549). - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (git-fixes). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#PED-1549). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253). - vdpa: Use BIT_ULL for bit operations (jsc#PED-1549). - vdpa: conditionally fill max max queue pair for stats (jsc#PED-1549). - vdpa: fix use-after-free on vp_vdpa_remove (git-fixes). - vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes). - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes). - vduse: Fix NULL pointer dereference on sysfs access (jsc#PED-1549). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (jsc#PED-1549). - vduse: avoid empty string for dev name (jsc#PED-1549). - vduse: check that offset is within bounds in get_config() (jsc#PED-1549). - vduse: fix memory corruption in vduse_dev_ioctl() (jsc#PED-1549). - vduse: prevent uninitialized memory accesses (jsc#PED-1549). - vfio/type1: prevent underflow of locked_vm via exec() (git-fixes). - vfio/type1: restore locked_vm (git-fixes). - vfio/type1: track locked_vm per dma (git-fixes). - vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642). - vfs: filename_create(): fix incorrect intent (bsc#1197534). - vfs: make sync_filesystem return errors from ->sync_fs (git-fixes). - vhost-vdpa: fix an iotlb memory leak (jsc#PED-1549). - vhost-vdpa: free iommu domain after last use during cleanup (jsc#PED-1549). - vhost/net: Clear the pending messages when the backend is removed (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (jsc#PED-1549). - vhost_vdpa: fix unmap process in no-batch mode (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253). - virt/coco/sev-guest: Add throttling awareness (bsc#1209927). - virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927). - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927). - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927). - virt/coco/sev-guest: Do some code style cleanups (bsc#1209927). - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927). - virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927). - virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449). - virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449). - virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449). - virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927). - virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449). - virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449). - virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449). - virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes). - virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes). - virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes). - virtio_net: split free_unused_bufs() (git-fixes). - virtio_net: suppress cpu stall when free_unused_bufs (git-fixes). - virtio_pci: modify ENOENT to EINVAL (git-fixes). - virtio_ring: do not update event idx on get_buf (git-fixes). - vmci: check context->notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes). - vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes). - vmxnet3: move rss code block under eop descriptor (bsc#1208212). - vmxnet3: use gro callback when UPT is enabled (bsc#1209739). - vp_vdpa: fix the crash in hot unplug with vp_vdpa (git-fixes). - wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes) - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617). - watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (jsc#PED-3210) Also enable module in aarch64 default configuration. - watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes). - watchdog: allow building BCM7038_WDT for BCM4908 (bsc#1208619). - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes). - watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497). - watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497). - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes). - watchdog: ixp4xx: Implement restart (bsc#1208619). - watchdog: ixp4xx: Rewrite driver to use core (bsc#1208619). - watchdog: ixp4xx_wdt: Fix address space warning (bsc#1208619). - watchdog: menz069_wdt: fix watchdog initialisation (git-fixes). - watchdog: orion_wdt: support pretimeout on Armada-XP (bsc#1208619). - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes). - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes). - watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes). - wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes). - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes). - wifi: ath11k: allow system suspend to survive ath11k (git-fixes). - wifi: ath11k: fix SAC bug on peer addition with sta band migration (git-fixes). - wifi: ath11k: fix deinitialization of firmware resources (git-fixes). - wifi: ath11k: fix writing to unintended memory region (git-fixes). - wifi: ath11k: reduce the MHI timeout to 20s (bsc#1207948). - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes). - wifi: ath6kl: minor fix for allocation size (git-fixes). - wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes). - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes). - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes). - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes). - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes). - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes). - wifi: ath9k: use proper statements in conditionals (git-fixes). - wifi: ath: Silence memcpy run-time false positive warning (git-fixes). - wifi: b43: fix incorrect __packed annotation (git-fixes). - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes). - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes). - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes). - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes). - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes). - wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes). - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes). - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes). - wifi: cfg80211: Fix use after free for wext (git-fixes). - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (git-fixes). - wifi: cfg80211: fix locking in regulatory disconnect (git-fixes). - wifi: cfg80211: fix locking in sched scan stop work (git-fixes). - wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes). - wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes). - wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes). - wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes). - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes). - wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes). - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes). - wifi: iwlwifi: fw: fix DBGI dump (git-fixes). - wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes). - wifi: iwlwifi: fw: move memset before early return (git-fixes). - wifi: iwlwifi: make the loop for card preparation effective (git-fixes). - wifi: iwlwifi: mvm: check firmware response size (git-fixes). - wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes). - wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes). - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes). - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes). - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (git-fixes). - wifi: iwlwifi: mvm: initialize seq variable (git-fixes). - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes). - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes). - wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes). - wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes). - wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes). - wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes). - wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (bsc#1209980). - wifi: mac80211: adjust scan cancel comment/check (git-fixes). - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes). - wifi: mac80211: fix min center freq offset tracing (git-fixes). - wifi: mac80211: fix qos on mesh interfaces (git-fixes). - wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes). - wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes). - wifi: mac80211: simplify chanctx allocation (git-fixes). - wifi: mt7601u: fix an integer underflow (git-fixes). - wifi: mt76: add flexible polling wait-interval support (git-fixes). - wifi: mt76: add memory barrier to SDIO queue kick (bsc#1209980). - wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes). - wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1209980). - wifi: mt76: fix 6GHz high channel not be scanned (git-fixes). - wifi: mt76: fix receiving LLC packets on mt7615/mt7915 (bsc#1209980). - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes). - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes). - wifi: mt76: mt7915: add missing of_node_put() (bsc#1209980). - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work (bsc#1209980). - wifi: mt76: mt7915: check return value before accessing free_block_num (bsc#1209980). - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() (bsc#1209980). - wifi: mt76: mt7915: expose device tree match table (git-fixes). - wifi: mt76: mt7915: fix mcs value in ht mode (bsc#1209980). - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit (git-fixes). - wifi: mt76: mt7915: fix mt7915_mac_set_timing() (bsc#1209980). - wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup (bsc#1209980). - wifi: mt76: mt7915: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() (bsc#1209980). - wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` (git-fixes). - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes). - wifi: mt76: mt7921e: fix crash in chip reset fail (bsc#1209980). - wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix rmmod crash in driver reload test (bsc#1209980). - wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes). - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (git-fixes). - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume (bsc#1209980). - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (bsc#1209980). - wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes). - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes). - wifi: mwifiex: mark OF related data as maybe unused (git-fixes). - wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes). - wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes). - wifi: rt2x00: Fix memory leak when handling surveys (git-fixes). - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes). - wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes). - wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes). - wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes). - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes). - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes). - wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes). - wifi: rtw89: Add missing check for alloc_workqueue (git-fixes). - wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes). - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes). - wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wireguard: ratelimiter: use hrtimer in selftest (git-fixes) - workqueue: Fix hung time report of worker pools (bsc#1211044). - workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044). - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044). - workqueue: Warn when a new worker could not be created (bsc#1211044). - workqueue: Warn when a rescuer could not be created (bsc#1211044). - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769). - writeback: avoid use-after-free after removing device (bsc#1207638). - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes). - x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes). - x86/ACPI/boot: Use FADT version to check support for online capable (git-fixes). - x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes). - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes). - x86/MCE/AMD: Use an u64 for bank_map (git-fixes). - x86/PAT: Have pat_enabled() properly reflect state when running on Xen (git-fixes). - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes). - x86/acpi/boot: Correct acpi_is_processor_usable() check (git-fixes). - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (git-fixes). - x86/alternative: Make debug-alternative selective (bsc#1206578). - x86/alternative: Report missing return thunk details (git-fixes). - x86/alternative: Support relocations in alternatives (bsc#1206578). - x86/amd: Use IBPB for firmware calls (git-fixes). - x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848). - x86/asm: Fix an assembler warning with current binutils (git-fixes). - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes). - x86/boot: Skip realmode init code when running as Xen PV guest (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes). - x86/bugs: Add 'unknown' reporting for MMIO Stale Data (git-fixes). - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes). - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes). - x86/bugs: Flush IBP in ib_prctl_set() (bsc#1207773 CVE-2023-0045). - x86/bugs: Warn when 'ibrs' mitigation is selected on Enhanced IBRS parts (git-fixes). - x86/cpu: Add CPU model numbers for Meteor Lake (git fixes). - x86/cpu: Add Raptor Lake to Intel family (git fixes). - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes). - x86/cpu: Add new Raptor Lake CPU model number (git fixes). - x86/cpu: Add several Intel server CPU model numbers (git fixes). - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - x86/cpufeatures: Introduce x2AVIC CPUID bit (bsc#1208619). - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes). - x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes). - x86/entry: Avoid very early RET (git-fixes). - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes). - x86/entry: Do not call error_entry() for XENPV (git-fixes). - x86/entry: Move CLD to the start of the idtentry macro (git-fixes). - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes). - x86/entry: Switch the stack after error_entry() returns (git-fixes). - x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu: Cache xfeature flags from CPUID (git-fixes). - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes). - x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes). - x86/fpu: Mark init functions __init (bsc#1212448). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448). - x86/fpu: Prevent FPU state corruption (git-fixes). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes). - x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes). - x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes). - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes). - x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes). - x86/init: Initialize signal frame size late (bsc#1212448). - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes). - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes). - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes). - x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes). - x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). This is a preparation for the next patch - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes). - x86/microcode/AMD: Fix mixed steppings support (git-fixes). - x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes). - x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes). - x86/microcode: Add explicit CPU vendor dependency (git-fixes). - x86/microcode: Adjust late loading result reporting message (git-fixes). - x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes). - x86/microcode: Print previous version of microcode after reload (git-fixes). - x86/microcode: Rip out the OLD_INTERFACE (git-fixes). - x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes). - x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes). - x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Initialize text poking earlier (bsc#1212448). - x86/mm: Randomize per-cpu entry area (bsc#1207845 CVE-2023-0597). - x86/mm: Use mm_alloc() in poking_init() (bsc#1212448). - x86/mm: Use proper mask when setting PUD mapping (git-fixes). - x86/mm: fix poking_init() for Xen PV guests (git-fixes). - x86/msi: Fix msi message data shadow struct (git-fixes). - x86/msr: Add AMD CPPC MSR definitions (bsc#1212445). - x86/msr: Remove .fixup usage (git-fixes). - x86/nospec: Unwreck the RSB stuffing (git-fixes). - x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes). - x86/pat: Fix x86_has_pat_wp() (git-fixes). - x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes). - x86/perf/zhaoxin: Add stepping check for ZXC (git fixes). - x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes). - x86/perf: Default set FREEZE_ON_SMI for all (git fixes). - x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes). - x86/resctrl: Fix min_cbm_bits for AMD (git-fixes). - x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes). - x86/sgx: Fix free page accounting (git-fixes). - x86/sgx: Fix race between reclaimer and page fault handler (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/signal: Fix the value returned by strict_sas_size() (git-fixes). - x86/speculation/mmio: Print SMT warning (git-fixes). - x86/speculation: Allow enabling STIBP with legacy IBRS (bsc#1210506 CVE-2023-1998). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes). - x86/static_call: Serialize __static_call_fixup() properly (git-fixes). - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes). - x86/topology: Fix duplicated core ID within a package (git-fixes). - x86/topology: Fix multiple packages shown on a single-package system (git-fixes). - x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes). - x86/tsx: Add a feature bit for TSX control MSR support (git-fixes). - x86/tsx: Disable TSX development mode at boot (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes). - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes). - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Fix return value of __setup handlers (git-fixes). - x86: Handle idle=nomwait cmdline properly for x86_idle (bsc#1208619). - x86: Remove vendor checks from prefer_mwait_c1_over_halt (bsc#1208619). - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (git-fixes). - x86: centralize setting SWIOTLB_FORCE when guest memory encryption is enabled (jsc#PED-3259). - x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (git-fixes). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: remove cruft from &lt;asm/dma-mapping.h> (PED-3259). - xen-netfront: Fix NULL sring after live migration (git-fixes). - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes). - xen/arm: Fix race in RB-tree based P2M accounting (git-fixes) - xen/netback: do not do grant copy across page boundary (git-fixes). - xen/netback: do some code cleanup (git-fixes). - xen/netback: fix build warning (git-fixes). - xen/netback: use same error messages for same errors (git-fixes). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes). - xen/platform-pci: add missing free_irq() in error path (git-fixes). - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: convert ptag flags to unsigned (git-fixes). - xfs: do not assert fail on perag references on teardown (git-fixes). - xfs: do not leak btree cursor when insrec fails after a split (git-fixes). - xfs: estimate post-merge refcounts correctly (bsc#1208183). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix rm_offset flag handling in rmap keys (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: hoist refcount record merge predicates (bsc#1208183). - xfs: initialize the check_owner object fully (git-fixes). - xfs: initialize the check_owner object fully (git-fixes). - xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: remove xfs_setattr_time() declaration (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes). - xfs: verify buffer contents when we skip log replay (bsc#1210498 CVE-2023-2124). - xfs: zero inode fork buffer at allocation (git-fixes). - xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci: Fix incorrect tracking of free space on transfer rings (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Free the command allocated for setting LPM if we return early (git-fixes). - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes). - xhci: fix debugfs register accesses while suspended (git-fixes). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes). - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes). - xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes). - zram: do not lookup algorithm in backends table (git-fixes). Important SUSE bug 1065729 SUSE bug 1109158 SUSE bug 1142685 SUSE bug 1152472 SUSE bug 1152489 SUSE bug 1155798 SUSE bug 1160435 SUSE bug 1166486 SUSE bug 1172073 SUSE bug 1174777 SUSE bug 1177529 SUSE bug 1185861 SUSE bug 1186449 SUSE bug 1189998 SUSE bug 1189999 SUSE bug 1191731 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1195175 SUSE bug 1195655 SUSE bug 1195921 SUSE bug 1196058 SUSE bug 1197534 SUSE bug 1197617 SUSE bug 1198101 SUSE bug 1198400 SUSE bug 1198438 SUSE bug 1198835 SUSE bug 1199304 SUSE bug 1199701 SUSE bug 1200054 SUSE bug 1202353 SUSE bug 1202633 SUSE bug 1203039 SUSE bug 1203200 SUSE bug 1203325 SUSE bug 1203331 SUSE bug 1203332 SUSE bug 1203693 SUSE bug 1203906 SUSE bug 1204356 SUSE bug 1204363 SUSE bug 1204662 SUSE bug 1204993 SUSE bug 1205153 SUSE bug 1205191 SUSE bug 1205205 SUSE bug 1205544 SUSE bug 1205650 SUSE bug 1205756 SUSE bug 1205758 SUSE bug 1205760 SUSE bug 1205762 SUSE bug 1205803 SUSE bug 1205846 SUSE bug 1206024 SUSE bug 1206036 SUSE bug 1206056 SUSE bug 1206057 SUSE bug 1206103 SUSE bug 1206224 SUSE bug 1206232 SUSE bug 1206340 SUSE bug 1206459 SUSE bug 1206492 SUSE bug 1206493 SUSE bug 1206578 SUSE bug 1206640 SUSE bug 1206649 SUSE bug 1206824 SUSE bug 1206843 SUSE bug 1206876 SUSE bug 1206877 SUSE bug 1206878 SUSE bug 1206880 SUSE bug 1206881 SUSE bug 1206882 SUSE bug 1206883 SUSE bug 1206884 SUSE bug 1206885 SUSE bug 1206886 SUSE bug 1206887 SUSE bug 1206888 SUSE bug 1206889 SUSE bug 1206890 SUSE bug 1206891 SUSE bug 1206893 SUSE bug 1206894 SUSE bug 1206935 SUSE bug 1206992 SUSE bug 1207034 SUSE bug 1207036 SUSE bug 1207050 SUSE bug 1207051 SUSE bug 1207088 SUSE bug 1207125 SUSE bug 1207149 SUSE bug 1207158 SUSE bug 1207168 SUSE bug 1207185 SUSE bug 1207270 SUSE bug 1207315 SUSE bug 1207328 SUSE bug 1207497 SUSE bug 1207500 SUSE bug 1207501 SUSE bug 1207506 SUSE bug 1207507 SUSE bug 1207521 SUSE bug 1207553 SUSE bug 1207560 SUSE bug 1207574 SUSE bug 1207588 SUSE bug 1207589 SUSE bug 1207590 SUSE bug 1207591 SUSE bug 1207592 SUSE bug 1207593 SUSE bug 1207594 SUSE bug 1207602 SUSE bug 1207603 SUSE bug 1207605 SUSE bug 1207606 SUSE bug 1207607 SUSE bug 1207608 SUSE bug 1207609 SUSE bug 1207610 SUSE bug 1207611 SUSE bug 1207612 SUSE bug 1207613 SUSE bug 1207614 SUSE bug 1207615 SUSE bug 1207616 SUSE bug 1207617 SUSE bug 1207618 SUSE bug 1207619 SUSE bug 1207620 SUSE bug 1207621 SUSE bug 1207622 SUSE bug 1207623 SUSE bug 1207624 SUSE bug 1207625 SUSE bug 1207626 SUSE bug 1207627 SUSE bug 1207628 SUSE bug 1207629 SUSE bug 1207630 SUSE bug 1207631 SUSE bug 1207632 SUSE bug 1207633 SUSE bug 1207634 SUSE bug 1207635 SUSE bug 1207636 SUSE bug 1207637 SUSE bug 1207638 SUSE bug 1207639 SUSE bug 1207640 SUSE bug 1207641 SUSE bug 1207642 SUSE bug 1207643 SUSE bug 1207644 SUSE bug 1207645 SUSE bug 1207646 SUSE bug 1207647 SUSE bug 1207648 SUSE bug 1207649 SUSE bug 1207650 SUSE bug 1207651 SUSE bug 1207652 SUSE bug 1207653 SUSE bug 1207734 SUSE bug 1207768 SUSE bug 1207769 SUSE bug 1207770 SUSE bug 1207771 SUSE bug 1207773 SUSE bug 1207795 SUSE bug 1207827 SUSE bug 1207842 SUSE bug 1207845 SUSE bug 1207875 SUSE bug 1207878 SUSE bug 1207933 SUSE bug 1207935 SUSE bug 1207948 SUSE bug 1208050 SUSE bug 1208076 SUSE bug 1208081 SUSE bug 1208105 SUSE bug 1208107 SUSE bug 1208128 SUSE bug 1208130 SUSE bug 1208149 SUSE bug 1208153 SUSE bug 1208183 SUSE bug 1208212 SUSE bug 1208219 SUSE bug 1208290 SUSE bug 1208368 SUSE bug 1208410 SUSE bug 1208420 SUSE bug 1208428 SUSE bug 1208429 SUSE bug 1208449 SUSE bug 1208534 SUSE bug 1208541 SUSE bug 1208542 SUSE bug 1208570 SUSE bug 1208588 SUSE bug 1208598 SUSE bug 1208599 SUSE bug 1208600 SUSE bug 1208601 SUSE bug 1208602 SUSE bug 1208604 SUSE bug 1208605 SUSE bug 1208607 SUSE bug 1208619 SUSE bug 1208628 SUSE bug 1208700 SUSE bug 1208741 SUSE bug 1208758 SUSE bug 1208759 SUSE bug 1208776 SUSE bug 1208777 SUSE bug 1208784 SUSE bug 1208787 SUSE bug 1208815 SUSE bug 1208816 SUSE bug 1208829 SUSE bug 1208837 SUSE bug 1208843 SUSE bug 1208845 SUSE bug 1208848 SUSE bug 1208864 SUSE bug 1208902 SUSE bug 1208948 SUSE bug 1208976 SUSE bug 1209008 SUSE bug 1209039 SUSE bug 1209052 SUSE bug 1209092 SUSE bug 1209159 SUSE bug 1209256 SUSE bug 1209258 SUSE bug 1209262 SUSE bug 1209287 SUSE bug 1209288 SUSE bug 1209290 SUSE bug 1209291 SUSE bug 1209292 SUSE bug 1209366 SUSE bug 1209367 SUSE bug 1209436 SUSE bug 1209457 SUSE bug 1209504 SUSE bug 1209532 SUSE bug 1209556 SUSE bug 1209600 SUSE bug 1209615 SUSE bug 1209635 SUSE bug 1209636 SUSE bug 1209637 SUSE bug 1209684 SUSE bug 1209687 SUSE bug 1209693 SUSE bug 1209739 SUSE bug 1209779 SUSE bug 1209780 SUSE bug 1209788 SUSE bug 1209798 SUSE bug 1209799 SUSE bug 1209804 SUSE bug 1209805 SUSE bug 1209856 SUSE bug 1209871 SUSE bug 1209927 SUSE bug 1209980 SUSE bug 1209982 SUSE bug 1209999 SUSE bug 1210034 SUSE bug 1210050 SUSE bug 1210158 SUSE bug 1210165 SUSE bug 1210202 SUSE bug 1210203 SUSE bug 1210206 SUSE bug 1210216 SUSE bug 1210230 SUSE bug 1210294 SUSE bug 1210301 SUSE bug 1210329 SUSE bug 1210336 SUSE bug 1210337 SUSE bug 1210409 SUSE bug 1210439 SUSE bug 1210449 SUSE bug 1210450 SUSE bug 1210453 SUSE bug 1210454 SUSE bug 1210469 SUSE bug 1210498 SUSE bug 1210506 SUSE bug 1210533 SUSE bug 1210551 SUSE bug 1210629 SUSE bug 1210644 SUSE bug 1210647 SUSE bug 1210725 SUSE bug 1210741 SUSE bug 1210762 SUSE bug 1210763 SUSE bug 1210764 SUSE bug 1210765 SUSE bug 1210766 SUSE bug 1210767 SUSE bug 1210768 SUSE bug 1210769 SUSE bug 1210770 SUSE bug 1210771 SUSE bug 1210775 SUSE bug 1210783 SUSE bug 1210791 SUSE bug 1210793 SUSE bug 1210806 SUSE bug 1210816 SUSE bug 1210817 SUSE bug 1210827 SUSE bug 1210940 SUSE bug 1210943 SUSE bug 1210947 SUSE bug 1210953 SUSE bug 1210986 SUSE bug 1211025 SUSE bug 1211037 SUSE bug 1211043 SUSE bug 1211044 SUSE bug 1211089 SUSE bug 1211105 SUSE bug 1211113 SUSE bug 1211131 SUSE bug 1211205 SUSE bug 1211263 SUSE bug 1211280 SUSE bug 1211281 SUSE bug 1211299 SUSE bug 1211346 SUSE bug 1211387 SUSE bug 1211400 SUSE bug 1211410 SUSE bug 1211414 SUSE bug 1211449 SUSE bug 1211465 SUSE bug 1211519 SUSE bug 1211564 SUSE bug 1211590 SUSE bug 1211592 SUSE bug 1211593 SUSE bug 1211595 SUSE bug 1211654 SUSE bug 1211686 SUSE bug 1211687 SUSE bug 1211688 SUSE bug 1211689 SUSE bug 1211690 SUSE bug 1211691 SUSE bug 1211692 SUSE bug 1211693 SUSE bug 1211714 SUSE bug 1211794 SUSE bug 1211796 SUSE bug 1211804 SUSE bug 1211807 SUSE bug 1211808 SUSE bug 1211820 SUSE bug 1211836 SUSE bug 1211847 SUSE bug 1211852 SUSE bug 1211855 SUSE bug 1211960 SUSE bug 1212129 SUSE bug 1212154 SUSE bug 1212155 SUSE bug 1212158 SUSE bug 1212350 SUSE bug 1212405 SUSE bug 1212445 SUSE bug 1212448 SUSE bug 1212494 SUSE bug 1212495 SUSE bug 1212504 SUSE bug 1212513 SUSE bug 1212540 SUSE bug 1212556 SUSE bug 1212561 SUSE bug 1212563 SUSE bug 1212564 SUSE bug 1212584 SUSE bug 1212592 SUSE bug 1212605 SUSE bug 1212606 SUSE bug 1212619 SUSE bug 1212701 SUSE bug 1212741 CVE-2020-24588 CVE-2022-2196 CVE-2022-3523 CVE-2022-36280 CVE-2022-38096 CVE-2022-4269 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2022-4744 CVE-2023-0045 CVE-2023-0122 CVE-2023-0179 CVE-2023-0386 CVE-2023-0394 CVE-2023-0461 CVE-2023-0469 CVE-2023-0590 CVE-2023-0597 CVE-2023-1075 CVE-2023-1076 CVE-2023-1077 CVE-2023-1078 CVE-2023-1079 CVE-2023-1095 CVE-2023-1118 CVE-2023-1249 CVE-2023-1382 CVE-2023-1513 CVE-2023-1582 CVE-2023-1583 CVE-2023-1611 CVE-2023-1637 CVE-2023-1652 CVE-2023-1670 CVE-2023-1838 CVE-2023-1855 CVE-2023-1989 CVE-2023-1998 CVE-2023-2002 CVE-2023-21102 CVE-2023-21106 CVE-2023-2124 CVE-2023-2156 CVE-2023-2162 CVE-2023-2176 CVE-2023-2235 CVE-2023-2269 CVE-2023-22998 CVE-2023-23000 CVE-2023-23001 CVE-2023-23004 CVE-2023-23006 CVE-2023-23454 CVE-2023-23455 CVE-2023-2483 CVE-2023-25012 CVE-2023-2513 CVE-2023-26545 CVE-2023-28327 CVE-2023-28410 CVE-2023-28464 CVE-2023-28466 CVE-2023-28866 CVE-2023-3006 CVE-2023-30456 CVE-2023-30772 CVE-2023-31084 CVE-2023-3141 CVE-2023-31436 CVE-2023-3161 CVE-2023-3220 CVE-2023-32233 CVE-2023-33288 CVE-2023-3357 CVE-2023-3358 CVE-2023-33951 CVE-2023-33952 CVE-2023-35788 CVE-2023-35823 CVE-2023-35828 CVE-2023-35829 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bsc#1207050). - CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034). - CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-0469: Fixed a use-after-free flaw in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent (bsc#1207521). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-1583: Fixed a NULL pointer dereference in io_file_bitmap_get in io_uring/filetable.c (bsc#1209637). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155). - CVE-2023-21106: Fixed possible memory corruption due to double free in adreno_set_param of adreno_gpu.c (bsc#1211654). - CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). - CVE-2023-2235: Fixed a use-after-free vulnerability in the Performance Events system that could have been exploited to achieve local privilege escalation (bsc#1210986). - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-23006: Fixed NULL vs IS_ERR checking in dr_domain_init_resources (bsc#1208845). - CVE-2023-2430: Fixed a missing lock on overflow for IOPOLL (bsc#1211014). - CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1209052). - CVE-2023-28866: Fixed an out-of-bounds access in net/bluetooth/hci_sync.c because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but did not (bsc#1209780). - CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855). - CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294). - CVE-2023-30772: Fixed race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265). - CVE-2023-3220: Fixed a NULL pointer dereference flaw in dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() (bsc#1212556). - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043). - CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590). - CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838). - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593). - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504). - CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494). - CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). - CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495). The following non-security bugs were fixed: - 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes). - Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes). - Avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529). - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Fix page corruption caused by racy check in __free_pages (bsc#1208149). - Get module prefix from kmod (bsc#1212835). - Move upstreamed x86, scsi and arm patches into sorted section - Fixed typo that might caused (bsc#1209457). - Fix bug introduced by broken backport (bsc#1208628). - Update patch for launch issue (bsc#1210853). - [infiniband] READ is 'data destination', not source... (git-fixes) - [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes). - acpi / x86: Add support for LPS0 callback handler (git-fixes). - acpi: Do not build ACPICA with '-Os' (git-fixes). - acpi: EC: Fix EC address space handler unregistration (bsc#1207149). - acpi: EC: Fix ECDT probe ordering issues (bsc#1207149). - acpi: EC: Fix oops when removing custom query handlers (git-fixes). - acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes). - acpi: PM: Do not turn of unused power resources on the Toshiba Click Mini (git-fixes). - acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - acpi: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (git-fixes). - acpi: VIOT: Initialize the correct IOMMU fwspec (git-fixes). - acpi: battery: Fix missing NUL-termination with large strings (git-fixes). - acpi: bus: Ensure that notify handlers are not running after removal (git-fixes). - acpi: cppc: Add AMD pstate energy performance preference cppc control (bsc#1212445). - acpi: cppc: Add auto select register read/write support (bsc#1212445). - acpi: cppc: Disable FIE if registers in PCC regions (bsc#1210953). - acpi: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - acpi: resource: Add IRQ override quirk for LG UltraPC 17U70P (git-fixes). - acpi: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models (git-fixes). - acpi: resource: Add Medion S17413 to IRQ override quirk (git-fixes). - acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - acpi: resource: Do IRQ override on all TongFang GMxRGxx (git-fixes). - acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes). - acpi: tables: Add support for NBFT (bsc#1195921). - acpi: tables: Add support for NBFT (bsc#1206340). - acpi: video: Add acpi_video_backlight_use_native() helper (bsc#1206843). - acpi: video: Allow GPU drivers to report no panels (bsc#1206843). - acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - acpi: video: Fix missing native backlight on Chromebooks (bsc#1206843). - acpi: video: Refactor acpi_video_get_backlight_type() a bit (bsc#1203693). - acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - acpi: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes). - acpica: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes). - acpica: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149). - acpica: Avoid undefined behavior: applying zero offset to null pointer (git-fixes). - acpica: Drop port I/O validation for some regions (git-fixes). - acpica: include/acpi/acpixf.h: Fix indentation (bsc#1207149). - acpica: nsrepair: handle cases without a return value correctly (git-fixes). - add mainline tags to five pci_hyperv patches - affs: initialize fsdata in affs_truncate() (git-fixes). - alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes) - alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes). - alsa: asihpi: check pao in control_message() (git-fixes). - alsa: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes). - alsa: cs46xx: mark snd_cs46xx_download_image as static (git-fixes). - alsa: emu10k1: do not create old pass-through playback device on Audigy (git-fixes). - alsa: emu10k1: fix capture interrupt handler unlinking (git-fixes). - alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - alsa: fireface: make read-only const array for model names static (git-fixes). - alsa: firewire-digi00x: prevent potential use after free (git-fixes). - alsa: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes). - alsa: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes). - alsa: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes). - alsa: hda/ca0132: minor fix for allocation size (git-fixes). - alsa: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes). - alsa: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes). - alsa: hda/conexant: add a new hda codec SN6180 (git-fixes). - alsa: hda/hdmi: Preserve the previous PCM device upon re-enablement (git-fixes). - alsa: hda/hdmi: disable KAE for Intel DG2 (git-fixes). - alsa: hda/realtek - fixed wrong gpio assigned (git-fixes). - alsa: hda/realtek: Add 'Intel Reference board' and 'NUC 13' SSID in the ALC256 (git-fixes). - alsa: hda/realtek: Add Acer Predator PH315-54 (git-fixes). - alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes). - alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes). - alsa: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes). - alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes). - alsa: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for Clevo L140AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo X370SNW (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - alsa: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes). - alsa: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes). - alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes). - alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes). - alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes). - alsa: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (git-fixes). - alsa: hda/realtek: Add quirks for some Clevo laptops (git-fixes). - alsa: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes). - alsa: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (git-fixes). - alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes). - alsa: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes). - alsa: hda/realtek: Fix support for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - alsa: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Whitespace fix (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes). - alsa: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes). - alsa: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes). - alsa: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes). - alsa: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes). - alsa: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes). - alsa: hda: Do not unset preset when cleaning up codec (git-fixes). - alsa: hda: Fix Oops by 9.1 surround channel names (git-fixes). - alsa: hda: Fix unhandled register update during auto-suspend period (git-fixes). - alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes). - alsa: hda: LNL: add HD Audio PCI ID (git-fixes). - alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - alsa: hda: cs35l41: Enable Amp High Pass Filter (git-fixes). - alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes). - alsa: hda: intel-dsp-config: add MTL PCI id (git-fixes). - alsa: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes). - alsa: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes). - alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - alsa: jack: Fix mutex call in snd_jack_report() (git-fixes). - alsa: memalloc: Workaround for Xen PV (git-fixes). - alsa: oss: avoid missing-prototype warnings (git-fixes). - alsa: oxfw: make read-only const array models static (git-fixes). - alsa: pci: lx6464es: fix a debug loop (git-fixes). - alsa: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes). - alsa: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes). - alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes). - alsa: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes). - alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes). - alsa: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes). - alsa: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes). - alsa: ymfpci: Fix BUG_ON in probe function (git-fixes). - amdgpu/nv.c: Corrected typo in the video capabilities resolution (git-fixes). - amdgpu: disable powerpc support for the newer display engine (bsc#1194869). - amdgpu: fix build on non-DCN platforms (git-fixes). - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes). - apparmor: add a kernel label to use on kernel objects (bsc#1211113). - apparmor: fix missing error check for rhashtable_insert_fast (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arch: fix broken BuildID for arm64 and riscv (bsc#1209798). - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64: Add missing Set/Way CMO encodings (git-fixes). - arm64: Always load shadow stack pointer directly from the task struct (git-fixes) - arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes) - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes). - arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes). - arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes) - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes). - arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes) - arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes) - arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes) - arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes). - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes). - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes). - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes). - arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes). - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes) - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes) - arm64: dts: imx8mp: correct usb clocks (git-fixes) - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes). - arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes) - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes) - arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: specify full DMC range (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes). - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes). - arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes). - arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes). - arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes). - arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes). - arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes). - arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes). - arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes). - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes). - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes). - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes). - arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes). - arm64: efi: Execute runtime services from a dedicated stack (git-fixes). - arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes). - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage. - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes). - arm64: make is_ttbrX_addr() noinstr-safe (git-fixes) - arm64: mm: kfence: only handle translation faults (git-fixes) - arm: 9290/1: uaccess: Fix KASAN false-positives (git-fixes). - arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes) - arm: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes). - arm: bcm2835_defconfig: Enable the framebuffer (git-fixes). - arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - arm: defconfig: drop CONFIG_DRM_RCAR_LVDS (git-fixes). - arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes). - arm: dts: am5748: keep usb4_tm disabled (git-fixes) - arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes). - arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes). - arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes). - arm: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes). - arm: dts: gta04: fix excess dma channel usage (git-fixes). - arm: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes) - arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes). - arm: dts: imx: Fix pca9547 i2c-mux node name (git-fixes). - arm: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes). - arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes) - arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes). - arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes). - arm: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes). - arm: dts: s5pv210: correct MIPI CSIS clock name (git-fixes). - arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes). - arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes) - arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes) - arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes). - arm: dts: vexpress: add missing cache properties (git-fixes). - arm: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes). - arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes). - arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes) - arm: oMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes). - arm: oMAP2+: Fix memory leak in realtime_counter_init() (git-fixes). - arm: omap: remove debug-leds driver (git-fixes) - arm: remove some dead code (git-fixes) - arm: renumber bits related to _TIF_WORK_MASK (git-fixes) - arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes). - arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes) - arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes). - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes). - asn.1: Fix check for strdup() success (git-fixes). - asoc: adau7118: do not disable regulators on device unbind (git-fixes). - asoc: amd: acp-es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes). - asoc: codecs: lpass: fix incorrect mclk rate (git-fixes). - asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes). - asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes). - asoc: cs35l41: Only disable internal boost (git-fixes). - asoc: cs42l56: fix DT probe (git-fixes). - asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes). - asoc: dwc: limit the number of overrun messages (git-fixes). - asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes). - asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes). - asoc: es8316: Handle optional IRQ assignment (git-fixes). - asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes). - asoc: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes). - asoc: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes). - asoc: fsl_micfil: Correct the number of steps on SX controls (git-fixes). - asoc: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes). - asoc: fsl_mqs: move of_node_put() to the correct location (git-fixes). - asoc: fsl_sai: Update to modern clocking terminology (git-fixes). - asoc: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes). - asoc: hdac_hdmi: use set_stream() instead of set_tdm_slots() (git-fixes). - asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes). - asoc: intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes). - asoc: intel: Skylake: Fix driver hang during shutdown (git-fixes). - asoc: intel: avs: Access path components under lock (git-fixes). - asoc: intel: avs: Fix declaration of enum avs_channel_config (git-fixes). - asoc: intel: avs: Implement PCI shutdown (git-fixes). - asoc: intel: avs: Use min_t instead of min with cast (git-fixes). - asoc: intel: boards: fix spelling in comments (git-fixes). - asoc: intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcht_es8316: move comment to the right place (git-fixes). - asoc: intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes). - asoc: intel: bytcr_rt5640: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: soc-acpi-byt: Fix 'WM510205' match no longer working (git-fixes). - asoc: intel: soc-acpi: fix copy-paste issue in topology names (git-fixes). - asoc: intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes). - asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes). - asoc: lpass: Fix for KASAN use_after_free out of bounds (git-fixes). - asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes). - asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes). - asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes). - asoc: mediatek: mt8173: Fix irq error path (git-fixes). - asoc: nau8824: Add quirk to active-high jack-detect (git-fixes). - asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes). - asoc: rsnd: fixup #endif position (git-fixes). - asoc: rt1308-sdw: add the default value of some registers (git-fixes). - asoc: rt5682: Disable jack detection interrupt during suspend (git-fixes). - asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes). - asoc: simple-card: Add missing of_node_put() in case of error (git-fixes). - asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes). - asoc: soc-compress: Inherit atomicity from DAI link for Compress FE (git-fixes). - asoc: soc-compress: Reposition and add pcm_mutex (git-fixes). - asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes). - asoc: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (git-fixes). - asoc: soc-pcm: test if a BE can be prepared (git-fixes). - asoc: sof: Intel: MTL: Fix the device description (git-fixes). - asoc: sof: ipc4-topology: set dmic dai index from copier (git-fixes). - asoc: sof: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data() (git-fixes). - asoc: ssm2602: Add workaround for playback distortions (git-fixes). - asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes). - asoc: topology: Properly access value coming from topology file (git-fixes). - asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes). - asoc: zl38060 add gpiolib dependency (git-fixes). - asoc: zl38060: Remove spurious gpiolib select (git-fixes). - ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes). - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes). - ata: libata: Set __ATA_BASE_SHT max_sectors (git-fixes). - ata: libata: fix NCQ autosense logic (git-fixes). - ata: pata_macio: Fix compilation warning (git-fixes). - ata: pata_octeon_cf: drop kernel-doc notation (git-fixes). - ata: pata_octeon_cf: fix call to trace_ata_bmdma_stop() (git-fixes). - ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes). - ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes). - ath9k: hif_usb: simplify if-if to if-else (git-fixes). - ath9k: htc: clean up statistics macros (git-fixes). - atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes). - audit: update the mailing list in MAINTAINERS (git-fixes). - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes). - backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes). - batman-adv: Broken sync while rescheduling delayed work (git-fixes). - bcache: Revert 'bcache: use bvec_virt' (git-fixes). - bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes). - bcache: fix wrong bdev parameter when calling bio_alloc_clone() in do_bio_hook() (git-fixes). - bcache: put bch_bio_map() back to correct location in journal_write_unlocked() (git-fixes). - bfq: fix use-after-free in bfq_dispatch_request (git-fixes). - bfq: fix waker_bfqq inconsistency crash (git-fixes). - Blacklist commit that might cause regression (bsc#1210947) - blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes). - blk-cgroup: properly pin the parent in blkcg_css_online (bsc#1208105). - blk-lib: fix blkdev_issue_secure_erase (git-fixes). - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (git-fixes). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: run queue no matter whether the request is the last request (git-fixes). - blk-throttle: fix that io throttle can only work for single bio (git-fixes). - blk-throttle: prevent overflow while calculating wait time (git-fixes). - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - block, bfq: do not move oom_bfqq (git-fixes). - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes). - block, bfq: fix possible uaf for 'bfqq->bic' (git-fixes). - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes). - block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bfq-iosched.c: use 'false' rather than 'BLK_RW_ASYNC' (git-fixes). - block/bfq_wf2q: correct weight to ioprio (git-fixes). - block/bio: remove duplicate append pages code (git-fixes). - block: Fix possible memory leak for rq_wb on add_disk failure (git-fixes). - block: add a bdev_max_zone_append_sectors helper (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: check minor range in device_add_disk() (git-fixes). - block: clear ->slave_dir when dropping the main slave_dir reference (git-fixes). - block: do not allow splitting of a REQ_NOWAIT bio (git-fixes). - block: do not allow the same type rq_qos add more than once (git-fixes). - block: do not reverse request order when flushing plug list (bsc#1208588 bsc#1208128). - block: ensure iov_iter advances for added pages (git-fixes). - block: fix and cleanup bio_check_ro (git-fixes). - block: fix default IO priority handling again (git-fixes). - block: fix infinite loop for invalid zone append (git-fixes). - block: fix leaking minors of hidden disks (git-fixes). - block: fix memory leak for elevator on add_disk failure (git-fixes). - block: fix missing blkcg_bio_issue_init (bsc#1208107). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (git-fixes). - block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes). - block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes). - block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes). - block: null_blk: Fix null_zone_write() (git-fixes). - block: pop cached rq before potentially blocking rq_qos_throttle() (git-fixes). - block: use bdev_get_queue() in bio.c (git-fixes). - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes). - bluetooth: Fix crash when replugging CSR fake controllers (git-fixes). - bluetooth: Fix double free in hci_conn_cleanup (bsc#1209052 CVE-2023-28464). - bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes). - bluetooth: Fix race condition in hci_cmd_sync_clear (git-fixes). - bluetooth: Fix race condition in hidp_session_thread (git-fixes). - bluetooth: Fix support for Read Local Supported Codecs V2 (git-fixes). - bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes). - bluetooth: HCI: Fix global-out-of-bounds (git-fixes). - bluetooth: ISO: Avoid circular locking dependency (git-fixes). - bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - bluetooth: ISO: do not try to remove CIG if there are bound CIS left (git-fixes). - bluetooth: ISO: fix timestamped HCI ISO data packet parsing (git-fixes). - bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes). - bluetooth: L2CAP: Fix potential user-after-free (git-fixes). - bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes). - bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes). - bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (git-fixes). - bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes). - bluetooth: Remove codec id field in vendor codec definition (git-fixes). - bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (git-fixes). - bluetooth: Set ISO Data Path on broadcast sink (git-fixes). - bluetooth: btintel: Add LE States quirk support (git-fixes). - bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes). - bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes). - bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - bluetooth: btusb: Remove detection of ISO packets over bulk (git-fixes). - bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes). - bluetooth: hci_conn: Fix memory leaks (git-fixes). - bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (git-fixes). - bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (git-fixes). - bluetooth: hci_conn: use HCI dst_type values also for BIS (git-fixes). - bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (git-fixes). - bluetooth: hci_core: fix error handling in hci_register_dev() (git-fixes). - bluetooth: hci_event: Fix Invalid wait context (git-fixes). - bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - bluetooth: hci_qca: fix debugfs registration (git-fixes). - bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes). - bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes). - bluetooth: hci_sync: Fix not indicating power state (git-fixes). - bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (git-fixes). - bluetooth: hci_sync: cancel cmd_timer if hci_open failed (git-fixes). - bnxt: Do not read past the end of test names (jsc#SLE-18978). - bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978). - bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978). - bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978). - bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978). - bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes). - bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978). - bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978). - bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978). - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes). - bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978). - bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978). - bonding: Fix negative jump label count on nested bonding (bsc#1212685). - bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes) - bpf, arm64: Clear prog->jited_len along prog->jited (git-fixes) - bpf, arm64: Feed byte-offset into bpf line info (git-fixes) - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes) - bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes). - bpf, x64: Factor out emission of REX byte in more cases (git-fixes). - bpf: Add extra path pointer check to d_path helper (git-fixes). - bpf: Fix UAF in task local storage (bsc#1212564). - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes). - bpf: Fix extable address check (git-fixes). - bpf: Fix extable fixup offset (git-fixes). - bpf: Skip task with pid=1 in send_signal_common() (git-fixes). - btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158). - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158). - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes). - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158). - btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158). - btrfs: qgroup: remove outdated TODO comments (bsc#1207158). - bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes). - bus: mhi: host: Fix race between channel preparation and M0 event (git-fixes). - bus: mhi: host: Range check CHDBOFF and ERDBOFF (git-fixes). - bus: mhi: host: Remove duplicate ee check for syserr (git-fixes). - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (git-fixes). - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes). - bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes). - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes). - ca8210: fix mac_len negative array access (git-fixes). - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes). - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes). - can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes). - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes). - can: j1939: change j1939_netdev_lock type to mutex (git-fixes). - can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes). - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes). - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes). - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes). - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes). - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes). - can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes). - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes). - can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes). - can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes). - can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes). - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes). - can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes). - can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes). - can: length: fix bitstuffing count (git-fixes). - can: length: fix description of the RRS field (git-fixes). - can: length: make header self contained (git-fixes). - cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes). - ceph: avoid use-after-free in ceph_fl_release_lock() (jsc#SES-1880). - ceph: blocklist the kclient when receiving corrupted snap trace (jsc#SES-1880). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540). - ceph: flush cap releases when the session is flushed (bsc#1208428). - ceph: flush cap releases when the session is flushed (jsc#SES-1880). - ceph: force updating the msg pointer in non-split case (bsc#1211804). - ceph: move mount state enum to super.h (jsc#SES-1880). - ceph: remove useless session parameter for check_caps() (jsc#SES-1880). - ceph: switch to vfs_inode_has_locks() to fix file lock bug (jsc#SES-1880). - ceph: try to check caps immediately after async creating finishes (jsc#SES-1880). - ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504). - ceph: use locks_inode_context helper (jsc#SES-1880). - cfg80211: allow continuous radar monitoring on offchannel chain (bsc#1209980). - cfg80211: fix possible NULL pointer dereference in cfg80211_stop_offchan_radar_detection (bsc#1209980). - cfg80211: implement APIs for dedicated radar detection HW (bsc#1209980). - cfg80211: move offchan_cac_event to a dedicated work (bsc#1209980). - cfg80211: rename offchannel_chain structs to background_chain to avoid confusion with ETSI standard (bsc#1209980). - cfg80211: schedule offchan_cac_abort_wk in cfg80211_radar_event (bsc#1209980). - cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906). - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827). - cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650). - cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650). - cgroup: Make cgroup_get_from_id() prettier (bsc#1205650). - cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650). - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563). - cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561). - cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (bsc#1205650). - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563). - cgroup: reduce dependency on cgroup_mutex (bsc#1205650). - cifs: Avoid a cast in add_lease_context() (bsc#1193629). - cifs: Check the lease context if we actually got a lease (bsc#1193629). - cifs: Convert struct fealist away from 1-element array (bsc#1193629). - cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (git-fixes). - cifs: Fix smb2_set_path_size() (git-fixes). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629). - cifs: Fix use-after-free in rdata->read_into_pages() (git-fixes). - cifs: Fix warning and UAF when destroy the MR list (git-fixes). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629). - cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes). - cifs: Replace remaining 1-element arrays (bsc#1193629). - cifs: Replace zero-length arrays with flexible-array members (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Use kstrtobool() instead of strtobool() (bsc#1193629). - cifs: append path to open_enter trace event (bsc#1193629). - cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758). - cifs: avoid race conditions with parallel reconnects (bsc#1193629). - cifs: avoid races in parallel reconnects in smb1 (bsc#1193629). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629). - cifs: check only tcon status on tcon related functions (bsc#1193629). - cifs: do not include page data when checking signature (git-fixes). - cifs: do not poll server interfaces too regularly (bsc#1193629). - cifs: do not take exclusive lock for updating target hints (bsc#1193629). - cifs: do not try to use rdma offload on encrypted connections (bsc#1193629). - cifs: double lock in cifs_reconnect_tcon() (git-fixes). - cifs: dump pending mids for all channels in DebugData (bsc#1193629). - cifs: empty interface list when server does not support query interfaces (bsc#1193629). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629). - cifs: fix dentry lookups in directory handle cache (bsc#1193629). - cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629). - cifs: fix mount on old smb servers (boo#1206935). - cifs: fix negotiate context parsing (bsc#1210301). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629). - cifs: fix potential deadlock in cache_refresh_path() (git-fixes). - cifs: fix potential race when tree connecting ipc (bsc#1208758). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629). - cifs: fix sharing of DFS connections (bsc#1208758). - cifs: fix smb1 mount regression (bsc#1193629). - cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629). - cifs: generate signkey for the channel that's reconnecting (bsc#1193629). - cifs: get rid of dead check in smb2_reconnect() (bsc#1193629). - cifs: get rid of dns resolve worker (bsc#1193629). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629). - cifs: handle cache lookup errors different than -ENOENT (bsc#1193629). - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629). - cifs: lock chan_lock outside match_session (bsc#1193629). - cifs: mapchars mount option ignored (bsc#1193629). - cifs: match even the scope id for ipv6 addresses (bsc#1193629). - cifs: missing lock when updating session status (bsc#1193629). - cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629). - cifs: prevent data race in smb2_reconnect() (bsc#1193629). - cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629). - cifs: print last update time for interface list (bsc#1193629). - cifs: print session id while listing open files (bsc#1193629). - cifs: print smb3_fs_context::source when mounting (bsc#1193629). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758). - cifs: protect session status check in smb2_reconnect() (bsc#1208758). - cifs: release leases for deferred close handles when freezing (bsc#1193629). - cifs: remove duplicate code in __refresh_tcon() (bsc#1193629). - cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629). - cifs: remove unused function (bsc#1193629). - cifs: return DFS root session id in DebugData (bsc#1193629). - cifs: return a single-use cfid if we did not get a lease (bsc#1193629). - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629). - cifs: sanitize paths in cifs_update_super_prepath (git-fixes). - cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629). - cifs: split out smb3_use_rdma_offload() helper (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - cifs: update ip_addr for ses only for primary chan setup (bsc#1193629). - cifs: use DFS root session instead of tcon ses (bsc#1193629). - cifs: use tcon allocation functions even for dummy tcon (git-fixes). - cifs: use the least loaded channel for sending requests (bsc#1193629). - clk: Fix memory leak in devm_clk_notifier_register() (git-fixes). - clk: HI655X: select REGMAP instead of depending on it (git-fixes). - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes). - clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes). - clk: at91: clk-sam9x60-pll: fix return value check (git-fixes). - clk: cdce925: check return value of kasprintf() (git-fixes). - clk: imx: avoid memory leak (git-fixes). - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes). - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes). - clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (git-fixes). - clk: keystone: sci-clk: check return value of kasprintf() (git-fixes). - clk: mxl: Add option to override gate clks (git-fixes). - clk: mxl: Fix a clk entry by adding relevant flags (git-fixes). - clk: mxl: Remove redundant spinlocks (git-fixes). - clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes). - clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes). - clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes). - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes). - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes). - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes). - clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes). - clk: qcom: regmap: add PHY clock source implementation (git-fixes). - clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes). - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes). - clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes). - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes). - clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes). - clk: si5341: check return value of {devm_}kasprintf() (git-fixes). - clk: si5341: free unused memory on probe failure (git-fixes). - clk: si5341: return error if one synth clock registration fails (git-fixes). - clk: sprd: set max_register according to mapping range (git-fixes). - clk: tegra20: fix gcc-7 constant overflow warning (git-fixes). - clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes). - clk: ti: clkctrl: check return value of kasprintf() (git-fixes). - clk: vc5: check memory returned by kasprintf() (git-fixes). - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes). - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes). - clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes). - clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes). - comedi: use menuconfig for main Comedi menu (git-fixes). - configfs: fix possible memory leak in configfs_create_dir() (git-fixes). - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes). - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953). - cpufreq: CPPC: Fix performance/frequency conversion (git-fixes). - cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - crypto: acomp - define max size for destination (jsc#PED-3692) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - crypto: caam - Clear some memory in instantiate_rng (git-fixes). - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes). - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes). - crypto: crypto4xx - Call dma_unmap_page when done (git-fixes). - crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes). - crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692) - crypto: essiv - Handle EBUSY correctly (git-fixes). - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (git-fixes). - crypto: marvell/cesa - Fix type mismatch warning (git-fixes). - crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes). - crypto: qat - Fix unsigned function returning negative (jsc#PED-3692) - crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692) - crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692) - crypto: qat - abstract PFVF receive logic (jsc#PED-3692) - crypto: qat - abstract PFVF send function (jsc#PED-3692) - crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692) - crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692) - crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692) - crypto: qat - add backlog mechanism (jsc#PED-3692) - crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692) - crypto: qat - add check to validate firmware images (jsc#PED-3692) - crypto: qat - add limit to linked list parsing (jsc#PED-3692) - crypto: qat - add misc workqueue (jsc#PED-3692) - crypto: qat - add missing restarting event notification in (jsc#PED-3692) - crypto: qat - add param check for DH (jsc#PED-3692) - crypto: qat - add param check for RSA (jsc#PED-3692) - crypto: qat - add pfvf_ops (jsc#PED-3692) - crypto: qat - add resubmit logic for decompression (jsc#PED-3692) - crypto: qat - add support for 401xx devices (jsc#PED-3692) - crypto: qat - add support for compression for 4xxx (jsc#PED-3692) - crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692) - crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692) - crypto: qat - change PFVF ACK behaviour (jsc#PED-3692) - crypto: qat - change behaviour of (jsc#PED-3692) - crypto: qat - change bufferlist logic interface (jsc#PED-3692) - crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692) - crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692) - crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692) - crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692) - crypto: qat - do not rely on min version (jsc#PED-3692) - crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692) - crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692) - crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692) - crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692) - crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692) - crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - extend buffer list interface (jsc#PED-3692) - crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692) - crypto: qat - extract send and wait from (jsc#PED-3692) - crypto: qat - fix DMA transfer direction (jsc#PED-3692) - crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692) - crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692) - crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692) - crypto: qat - fix a typo in a comment (jsc#PED-3692) - crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692) - crypto: qat - fix definition of ring reset results (jsc#PED-3692) - crypto: qat - fix error return code in adf_probe (git-fixes). - crypto: qat - fix error return code in adf_probe (jsc#PED-3692) - crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692) - crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692) - crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692) - crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692) - crypto: qat - fix out-of-bounds read (git-fixes). - crypto: qat - fix wording and formatting in code comment (jsc#PED-3692) - crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692) - crypto: qat - free irq in case of failure (jsc#PED-3692) - crypto: qat - free irqs only if allocated (jsc#PED-3692) - crypto: qat - generalize crypto request buffers (jsc#PED-3692) - crypto: qat - get compression extended capabilities (jsc#PED-3692) - crypto: qat - handle retries due to collisions in (jsc#PED-3692) - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692) - crypto: qat - improve logging of PFVF messages (jsc#PED-3692) - crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692) - crypto: qat - introduce support for PFVF block messages (jsc#PED-3692) - crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692) - crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692) - crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692) - crypto: qat - make PFVF message construction direction (jsc#PED-3692) - crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692) - crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692) - crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692) - crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692) - crypto: qat - move pfvf collision detection values (jsc#PED-3692) - crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692) - crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692) - crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692) - crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692) - crypto: qat - re-enable registration of algorithms (jsc#PED-3692) - crypto: qat - refactor PF top half for PFVF (jsc#PED-3692) - crypto: qat - refactor pfvf version request messages (jsc#PED-3692) - crypto: qat - refactor submission logic (jsc#PED-3692) - crypto: qat - relocate PFVF PF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF VF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF disabled function (jsc#PED-3692) - crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692) - crypto: qat - relocate backlog related structures (jsc#PED-3692) - crypto: qat - relocate bufferlist logic (jsc#PED-3692) - crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692) - crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692) - crypto: qat - remove empty sriov_configure() (jsc#PED-3692) - crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692) - crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692) - crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692) - crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692) - crypto: qat - remove unneeded assignment (jsc#PED-3692) - crypto: qat - remove unneeded braces (jsc#PED-3692) - crypto: qat - remove unneeded packed attribute (jsc#PED-3692) - crypto: qat - remove unused PFVF stubs (jsc#PED-3692) - crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692) - crypto: qat - rename bufferlist functions (jsc#PED-3692) - crypto: qat - rename pfvf collision constants (jsc#PED-3692) - crypto: qat - reorganize PFVF code (jsc#PED-3692) - crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692) - crypto: qat - replace deprecated MSI API (jsc#PED-3692) - crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692) - crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692) - crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692) - crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692) - crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692) - crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692) - crypto: qat - simplify adf_enable_aer() (jsc#PED-3692) - crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692) - crypto: qat - split PFVF message decoding from handling (jsc#PED-3692) - crypto: qat - stop using iommu_present() (jsc#PED-3692) - crypto: qat - store the PFVF protocol version of the (jsc#PED-3692) - crypto: qat - store the ring-to-service mapping (jsc#PED-3692) - crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692) - crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692) - crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692) - crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692) - crypto: qat - use hweight for bit counting (jsc#PED-3692) - crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692) - crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692) - crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692) - crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes). - crypto: sa2ul - Select CRYPTO_DES (git-fixes). - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes). - crypto: seqiv - Handle EBUSY correctly (git-fixes). - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes). - crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes). - crypto: xts - Handle EBUSY correctly (git-fixes). - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes). - device-dax: Fix duplicate 'hmem' device registration (bsc#1211400). - devlink: hold region lock when flushing snapshots (git-fixes). - disable two x86 PAT related patches (bsc#1212456) This may break i915 when booted with nopat, but fixes /dev/mem access in Xen PV domU. - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm clone: Fix UAF in clone_dtr() (git-fixes). - dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes). - dm integrity: clear the journal on suspend (git-fixes). - dm integrity: flush the journal on suspend (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm raid: fix address sanitizer warning in raid_resume (git-fixes). - dm raid: fix address sanitizer warning in raid_status (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes). - dm: fix alloc_dax error handling in alloc_dev (git-fixes). - dm: requeue IO if mapping table not yet available (git-fixes). - dma-buf: Use dma_fence_unwrap_for_each when importing fences (git-fixes). - dma-buf: cleanup kerneldoc of removed component (git-fixes). - dma-direct: use is_swiotlb_active in dma_direct_map_page (PED-3259). - dma-mapping: reformat comment to suppress htmldoc warning (git-fixes). - dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes). - dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes). - dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes). - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes). - dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes). - dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes). - dmaengine: dw-edma: Drop chancnt initialization (git-fixes). - dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes). - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes). - dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes). - dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes). - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes). - dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes). - dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes). - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes). - dmaengine: mv_xor_v2: Fix an error code (git-fixes). - dmaengine: pl330: rename _start to prevent build error (git-fixes). - dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes). - dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes). - dmaengine: tegra: Fix memory leak in terminate_all() (git-fixes). - do not reuse connection if share marked as isolated (bsc#1193629). - docs/memory-barriers.txt: Add a missed closing parenthesis (git-fixes). - docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes). - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (git-fixes). - docs: driver-api: firmware_loader: fix missing argument in usage example (git-fixes). - docs: ftrace: fix a issue with duplicated subtitle number (git-fixes). - docs: gdbmacros: print newest record (git-fixes). - docs: networking: Update codeaurora references for rmnet (git-fixes). - docs: networking: fix x25-iface.rst heading & index order (git-fixes). - documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes). - documentation: bonding: fix the doc of peer_notif_delay (git-fixes). - documentation: timers: hrtimers: Make hybrid union historical (git-fixes). - driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes). - driver core: fix potential null-ptr-deref in device_add() (git-fixes). - driver core: fix resource leak in device_add() (git-fixes). - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes). - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815). - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815). - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes). - drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: transport_class: fix possible memory leak (git-fixes). - drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes). - drivers: meson: secure-pwrc: always enable DMA domain (git-fixes). - drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes). - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes). - drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - drm-hyperv: Add a bug reference to two existing changes (bsc#1211281). - drm/amd/amdgpu: fix warning during suspend (bsc#1206843). - drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes). - drm/amd/display: Add DCN314 display SG Support (bsc#1206843). - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes). - drm/amd/display: Add NULL plane_state check for cursor disable logic (git-fixes). - drm/amd/display: Add check for DET fetch latency hiding for dcn32 (bsc#1206843). - drm/amd/display: Add logging for display MALL refresh setting (git-fixes). - drm/amd/display: Add minimal pipe split transition state (git-fixes). - drm/amd/display: Add missing brackets in calculation (bsc#1206843). - drm/amd/display: Add wrapper to call planes and stream update (git-fixes). - drm/amd/display: Adjust downscaling limits for dcn314 (bsc#1206843). - drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 (bsc#1206843). - drm/amd/display: Clear MST topology if it fails to resume (git-fixes). - drm/amd/display: Conversion to bool not necessary (git-fixes). - drm/amd/display: Defer DIG FIFO disable after VID stream enable (bsc#1206843). - drm/amd/display: Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now (bsc#1206843). - drm/amd/display: Do not clear GPINT register when releasing DMUB from reset (git-fixes). - drm/amd/display: Do not commit pipe when updating DRR (bsc#1206843). - drm/amd/display: Do not set DRR on pipe Commit (bsc#1206843). - drm/amd/display: Enable P-state validation checks for DCN314 (bsc#1206843). - drm/amd/display: Explicitly specify update type per plane info change (git-fixes). - drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes). - drm/amd/display: Fix DP MST sinks removal issue (git-fixes). - drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming (bsc#1206843). - drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes). - drm/amd/display: Fix display corruption w/ VSR enable (bsc#1206843). - drm/amd/display: Fix hang when skipping modeset (git-fixes). - drm/amd/display: Fix potential null dereference (git-fixes). - drm/amd/display: Fix potential null-deref in dm_resume (git-fixes). - drm/amd/display: Fix race condition in DPIA AUX transfer (bsc#1206843). - drm/amd/display: Fix set scaling doesn's work (git-fixes). - drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes). - drm/amd/display: Fixes for dcn32_clk_mgr implementation (git-fixes). - drm/amd/display: Include virtual signal to set k1 and k2 values (bsc#1206843). - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB (bsc#1206843). - drm/amd/display: Pass the right info to drm_dp_remove_payload (bsc#1206843). - drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes). - drm/amd/display: Properly reuse completion structure (bsc#1206843). - drm/amd/display: Reduce expected sdp bandwidth for dcn321 (bsc#1206843). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1206843). - drm/amd/display: Report to ACPI video if no panels were found (bsc#1206843). - drm/amd/display: Reset DMUB mailbox SW state after HW reset (bsc#1206843). - drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset (git-fixes). - drm/amd/display: Return error code on DSC atomic check failure (git-fixes). - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write (git-fixes). - drm/amd/display: Set dcn32 caps.seamless_odm (bsc#1206843). - drm/amd/display: Set hvm_enabled flag for S/G mode (bsc#1206843). - drm/amd/display: Simplify same effect if/else blocks (git-fixes). - drm/amd/display: Take FEC Overhead into Timeslot Calculation (bsc#1206843). - drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734). - drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 (bsc#1206843). - drm/amd/display: Uninitialized variables causing 4k60 UCLK to stay at DPM1 and not DPM0 (bsc#1206843). - drm/amd/display: Update bounding box values for DCN321 (git-fixes). - drm/amd/display: Update clock table to include highest clock setting (bsc#1206843). - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes). - drm/amd/display: Use dc_update_planes_and_stream (git-fixes). - drm/amd/display: Use min transition for SubVP into MPO (bsc#1206843). - drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit (bsc#1206843). - drm/amd/display: add a NULL pointer check (bsc#1212848, bsc#1212961). - drm/amd/display: adjust MALL size available for DCN32 and DCN321 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.4 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.5 (bsc#1206843). - drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848, bsc#1212961). - drm/amd/display: disconnect MPCC only on OTG change (bsc#1206843). - drm/amd/display: do not call dc_interrupt_set() for disabled crtcs (git-fixes). - drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes). - drm/amd/display: edp do not add non-edid timings (git-fixes). - drm/amd/display: fix FCLK pstate change underflow (bsc#1206843). - drm/amd/display: fix cursor offset on rotation 180 (git-fixes). - drm/amd/display: fix duplicate assignments (git-fixes). - drm/amd/display: fix flickering caused by S/G mode (git-fixes). - drm/amd/display: fix issues with driver unload (git-fixes). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1206843). - drm/amd/display: fix mapping to non-allocated address (bsc#1206843). - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes). - drm/amd/display: fix the system hang while disable PSR (git-fixes). - drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk (bsc#1206843). - drm/amd/display: move remaining FPU code to dml folder (bsc#1206843). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1206843). - drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes). - drm/amd/display: revert Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: skip commit minimal transition state (bsc#1206843). - drm/amd/display: wait for vblank during pipe programming (git-fixes). - drm/amd/pm/smu13: BACO is supported when it's in BACO state (bsc#1206843). - drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 (bsc#1206843). - drm/amd/pm: Fix output of pp_od_clk_voltage (git-fixes). - drm/amd/pm: Fix power context allocation in SMU13 (git-fixes). - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (bsc#1206843). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1206843). - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 (bsc#1206843). - drm/amd/pm: add missing SMU13.0.0 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add missing SMU13.0.7 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 (bsc#1206843). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.4 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU13.0.0 driver_if header to version 0x34 (bsc#1206843). - drm/amd/pm: correct SMU13.0.0 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 max shader clock reporting (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct the fan speed retrieving in PWM for some SMU13 asics (bsc#1206843). - drm/amd/pm: correct the pcie link state check for SMU13 (bsc#1206843). - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation (bsc#1206843). - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 (bsc#1206843). - drm/amd/pm: enable mode1 reset on smu_v13_0_10 (bsc#1206843). - drm/amd/pm: parse pp_handle under appropriate conditions (git-fixes). - drm/amd/pm: remove unused num_of_active_display variable (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes). - drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (bsc#1212848, bsc#1212961). - drm/amd/pm: update SMU13.0.0 reported maximum shader clock (bsc#1206843). - drm/amd/pm: update the LC_L1_INACTIVITY setting to address possible noise issue (bsc#1212848, bsc#1212961). - drm/amd: Avoid ASSERT for some message failures (bsc#1206843). - drm/amd: Avoid BUG() for case of SRIOV missing IP version (bsc#1206843). - drm/amd: Delay removal of the firmware framebuffer (git-fixes). - drm/amd: Disable PSR-SU on Parade 0803 TCON (bsc#1212848, bsc#1212961). - drm/amd: Do not try to enable secure display TA multiple times (bsc#1212848, bsc#1212961). - drm/amd: Fix an out of bounds error in BIOS parser (git-fixes). - drm/amd: Fix initialization for nbio 4.3.0 (bsc#1206843). - drm/amd: Fix initialization for nbio 7.5.1 (bsc#1206843). - drm/amd: Fix initialization mistake for NBIO 7.3.0 (bsc#1206843). - drm/amd: Make sure image is written to trigger VBIOS image update flow (git-fixes). - drm/amd: Tighten permissions on VBIOS flashing attributes (git-fixes). - drm/amdgpu/discovery: add PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable mes support for GC v11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 (bsc#1206843). - drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: set the APU flag for GC 11.0.4 (bsc#1206843). - drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments (bsc#1206843). - drm/amdgpu/display/mst: adjust the naming of mst_port and port of aconnector (bsc#1206843). - drm/amdgpu/display/mst: limit payload to be updated one by one (bsc#1206843). - drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD (bsc#1206843). - drm/amdgpu/dm/dp_mst: Do not grab mst_mgr->lock when computing DSC state (bsc#1206843). - drm/amdgpu/dm/mst: Fix uninitialized var in pre_compute_mst_dsc_configs_for_state() (bsc#1206843). - drm/amdgpu/dm/mst: Use the correct topology mgr pointer in amdgpu_dm_connector (bsc#1206843). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes). - drm/amdgpu/gfx10: Disable gfxoff before disabling powergating (git-fixes). - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes). - drm/amdgpu/mst: Stop ignoring error codes and deadlocking (bsc#1206843). - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (bsc#1206843). - drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 (bsc#1206843). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1206843). - drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 (bsc#1206843). - drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/soc21: do not expose AV1 if VCN0 is harvested (bsc#1206843). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1206843). - drm/amdgpu: Correct the power calcultion for Renior/Cezanne (git-fixes). - drm/amdgpu: Do not register backlight when another backlight should be used (v3) (bsc#1206843). - drm/amdgpu: Do not resume IOMMU after incomplete init (bsc#1206843). - drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN (bsc#1206843). - drm/amdgpu: Enable vclk dclk node for gc11.0.3 (bsc#1206843). - drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (bsc#1206843). - drm/amdgpu: Fix potential NULL dereference (bsc#1206843). - drm/amdgpu: Fix potential double free and null pointer dereference (bsc#1206843). - drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1206843). - drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes). - drm/amdgpu: Fixed bug on error when unloading amdgpu (bsc#1206843). - drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869). - drm/amdgpu: Register ACPI video backlight when skipping amdgpu backlight registration (bsc#1206843). - drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1206843). - drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes). - drm/amdgpu: Use the sched from entity for amdgpu_cs trace (git-fixes). - drm/amdgpu: Validate VM ioctl flags (git-fixes). - drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes). - drm/amdgpu: add gfx support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add gmc v11 support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add missing radeon secondary PCI ID (git-fixes). - drm/amdgpu: add smu 13 support for smu 13.0.11 (bsc#1206843). - drm/amdgpu: add soc21 common ip block support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add tmz support for GC 11.0.1 (bsc#1206843). - drm/amdgpu: add tmz support for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: allow more APUs to do mode2 reset when go to S4 (bsc#1206843). - drm/amdgpu: allow multipipe policy on ASICs with one MEC (bsc#1206843). - drm/amdgpu: change gfx 11.0.4 external_id range (git-fixes). - drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes). - drm/amdgpu: correct MEC number for gfx11 APUs (bsc#1206843). - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes). - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes). - drm/amdgpu: drop experimental flag on aldebaran (git-fixes). - drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable GFX IP v11.0.4 CG support (bsc#1206843). - drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable HDP SD for gfx 11.0.3 (bsc#1206843). - drm/amdgpu: enable PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu: enable VCN DPG for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram (git-fixes). - drm/amdgpu: fix amdgpu_job_free_resources v2 (bsc#1206843). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (bsc#1212848, bsc#1212961). - drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv (bsc#1206843). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 (bsc#1206843). - drm/amdgpu: fix mmhub register base coding error (git-fixes). - drm/amdgpu: fix number of fence calculations (bsc#1212848, bsc#1212961). - drm/amdgpu: fix return value check in kfd (git-fixes). - drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (bsc#1206843). - drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes). - drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume (git-fixes). - drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (git-fixes). - drm/amdgpu: reposition the gpu reset checking for reuse (bsc#1206843). - drm/amdgpu: set GC 11.0.4 family (bsc#1206843). - drm/amdgpu: skip ASIC reset for APUs when go to S4 (bsc#1206843). - drm/amdgpu: skip MES for S0ix as well since it's part of GFX (bsc#1206843). - drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes). - drm/amdgpu: skip mes self test after s0i3 resume for MES IP v11.0 (bsc#1206843). - drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset (git-fixes). - drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes). - drm/amdgpu: update wave data type to 3 for gfx11 (bsc#1206843). - drm/amdkfd: Add sync after creating vram bo (bsc#1206843). - drm/amdkfd: Fix BO offset for multi-VMA page migration (git-fixes). - drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU (bsc#1206843). - drm/amdkfd: Fix an illegal memory access (git-fixes). - drm/amdkfd: Fix double release compute pasid (bsc#1206843). - drm/amdkfd: Fix kfd_process_device_init_vm error handling (bsc#1206843). - drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes). - drm/amdkfd: Fix the memory overrun (bsc#1206843). - drm/amdkfd: Fix the warning of array-index-out-of-bounds (bsc#1206843). - drm/amdkfd: Fixed kfd_process cleanup on module exit (git-fixes). - drm/amdkfd: Get prange->offset after svm_range_vram_node_new (git-fixes). - drm/amdkfd: Page aligned memory reserve size (bsc#1206843). - drm/amdkfd: add GC 11.0.4 KFD support (bsc#1206843). - drm/amdkfd: fix a potential double free in pqm_create_queue (git-fixes). - drm/amdkfd: fix potential kgd_mem UAFs (git-fixes). - drm/amdkfd: introduce dummy cache info for property asic (bsc#1206843). - drm/armada: Fix a potential double free in an error handling path (git-fixes). - drm/ast: Fix ARM compatibility (git-fixes). - drm/bochs: fix blanking (git-fixes). - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes). - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes). - drm/bridge: it6505: Fix return value check for pm_runtime_get_sync (git-fixes). - drm/bridge: lt8912b: Add hot plug detection (git-fixes). - drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes). - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes). - drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes). - drm/bridge: lt9611: fix HPD reenablement (git-fixes). - drm/bridge: lt9611: fix clock calculation (git-fixes). - drm/bridge: lt9611: fix polarity programming (git-fixes). - drm/bridge: lt9611: fix programming of video modes (git-fixes). - drm/bridge: lt9611: fix sleep mode setup (git-fixes). - drm/bridge: lt9611: pass a pointer to the of node (git-fixes). - drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes). - drm/bridge: tc358768: always enable HS video mode (git-fixes). - drm/bridge: tc358768: fix PLL parameters computation (git-fixes). - drm/bridge: tc358768: fix PLL target frequency (git-fixes). - drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes). - drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec (git-fixes). - drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow (git-fixes). - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (git-fixes). - drm/connector: print max_requested_bpc in state debugfs (git-fixes). - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state() (bsc#1206843). - drm/display/dp_mst: Add helper for finding payloads in atomic MST state (bsc#1206843). - drm/display/dp_mst: Add helpers for serializing SST &lt;-> MST transitions (bsc#1206843). - drm/display/dp_mst: Add nonblocking helpers for DP MST (bsc#1206843). - drm/display/dp_mst: Call them time slots, not VCPI slots (bsc#1206843). - drm/display/dp_mst: Correct the kref of port (bsc#1206843). - drm/display/dp_mst: Do not open code modeset checks for releasing time slots (bsc#1206843). - drm/display/dp_mst: Drop all ports from topology on CSNs before queueing link address work (bsc#1206843). - drm/display/dp_mst: Fix confusing docs for drm_dp_atomic_release_time_slots() (bsc#1206843). - drm/display/dp_mst: Fix down message handling after a packet reception error (git-fixes). - drm/display/dp_mst: Fix down/up message handling after sink disconnect (git-fixes). - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (git-fixes). - drm/display/dp_mst: Fix modeset tracking in drm_dp_atomic_release_vcpi_slots() (bsc#1206843). - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload() (bsc#1206843). - drm/display/dp_mst: Maintain time slot allocations when deleting payloads (bsc#1206843). - drm/display/dp_mst: Move all payload info into the atomic state (bsc#1206843). - drm/display/dp_mst: Rename drm_dp_mst_vcpi_allocation (bsc#1206843). - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (git-fixes). - drm/displayid: add displayid_get_header() and check bounds better (git-fixes). - drm/dp: Do not rewrite link config when setting phy test pattern (git-fixes). - drm/dp_mst: Avoid deleting payloads for connectors staying enabled (bsc#1206843). - drm/dp_mst: fix drm_dp_dpcd_read return value checks (git-fixes). - drm/edid: fix AVI infoframe aspect ratio handling (git-fixes). - drm/edid: fix parsing of 3D modes from HDMI VSDB (git-fixes). - drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes). - drm/exynos: fix g2d_open/close helper function definitions (git-fixes). - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes). - drm/exynos: vidi: fix a wrong error return (git-fixes). - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes). - drm/fbdev-generic: prohibit potential out-of-bounds access (git-fixes). - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes). - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes). - drm/hyperv: Add error message for fb size greater than allocated (git-fixes). - drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes). - drm/i915/active: Fix missing debug object activation (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/adlp: Fix typo for reference clock (git-fixes). - drm/i915/color: Fix typo for Plane CSC indexes (git-fixes). - drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes). - drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes). - drm/i915/dg2: Drop one PCI ID (git-fixes). - drm/i915/dg2: Support 4k@30 on HDMI (git-fixes). - drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU (git-fixes). - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes). - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes). - drm/i915/display: Check source height is > 0 (git-fixes). - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes). - drm/i915/display: clean up comments (git-fixes). - drm/i915/dmc: Update DG2 DMC version to v2.08 (git-fixes). - drm/i915/dp: prevent potential div-by-zero (git-fixes). - drm/i915/dp_mst: Fix mst_mgr lookup during atomic check (bsc#1206843). - drm/i915/dp_mst: Fix payload removal during output disabling (bsc#1206843). - drm/i915/dpt: Treat the DPT BO as a framebuffer (git-fixes). - drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() (git-fixes). - drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes). - drm/i915/gem: Flush lmem contents after construction (git-fixes). - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes). - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes). - drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes). - drm/i915/gt: perform uc late init after probe error injection (git-fixes). - drm/i915/guc: Do not capture Gen8 regs on Xe devices (git-fixes). - drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes). - drm/i915/huc: always init the delayed load fence (git-fixes). - drm/i915/huc: bump timeout for delayed load and reduce print verbosity (git-fixes). - drm/i915/huc: fix leak of debug object in huc load fence on driver unload (git-fixes). - drm/i915/migrate: Account for the reserved_space (git-fixes). - drm/i915/migrate: fix corner case in CCS aux copying (git-fixes). - drm/i915/psr: Fix PSR_IMR/IIR field handling (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes). - drm/i915/pxp: use &lt;> instead of '' for headers in include/ (git-fixes). - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes). - drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes). - drm/i915/selftests: Add some missing error propagation (git-fixes). - drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes). - drm/i915/selftests: Stop using kthread_stop() (git-fixes). - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes). - drm/i915: Allow switching away via vga-switcheroo if uninitialized (git-fixes). - drm/i915: Avoid potential vm use-after-free (git-fixes). - drm/i915: Disable DC states for all commits (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes). - drm/i915: Fix NULL ptr deref by checking new_crtc_state (git-fixes). - drm/i915: Fix VBT DSI DVO port handling (git-fixes). - drm/i915: Fix context runtime accounting (git-fixes). - drm/i915: Fix fast wake AUX sync len (git-fixes). - drm/i915: Fix potential bit_17 double-free (git-fixes). - drm/i915: Fix potential context UAFs (git-fixes). - drm/i915: Fix request ref counting during error capture & debugfs dump (git-fixes). - drm/i915: Fix up locking around dumping requests lists (git-fixes). - drm/i915: Initialize the obj flags for shmem objects (git-fixes). - drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes). - drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on skl/glk (git-fixes). - drm/i915: Move fd_install after last use of fence (git-fixes). - drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes). - drm/i915: Remove __maybe_unused from mtl_info (git-fixes). - drm/i915: Remove unused bits of i915_vma/active api (git-fixes). - drm/i915: Remove unused variable (git-fixes). - drm/i915: Use 18 fast wake AUX sync len (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: move a Kconfig symbol to unbreak the menu presentation (git-fixes). - drm/i915: stop abusing swiotlb_max_segment (git-fixes). - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes). - drm/mediatek: Clean dangling pointer on bind error path (git-fixes). - drm/mediatek: Drop unbalanced obj unref (git-fixes). - drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes). - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes). - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes). - drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes). - drm/meson: fix missing component unbind on bind errors (git-fixes). - drm/meson: reorder driver deinit sequence to fix use-after-free bug (git-fixes). - drm/mgag200: Fix gamma lut not initialized (git-fixes). - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes). - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes). - drm/msm/a5xx: fix context faults during ring switch (git-fixes). - drm/msm/a5xx: fix highest bank bit for a530 (git-fixes). - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes). - drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes). - drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage (git-fixes). - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (git-fixes). - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes). - drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error (git-fixes). - drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at gpu load (git-fixes). - drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes). - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes). - drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes). - drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes). - drm/msm/dp: Free resources after unregistering them (git-fixes). - drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training (git-fixes). - drm/msm/dp: unregister audio driver during unbind (git-fixes). - drm/msm/dpu: Add INTF_5 interrupts (git-fixes). - drm/msm/dpu: Add check for cstate (git-fixes). - drm/msm/dpu: Add check for pstates (git-fixes). - drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes). - drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes). - drm/msm/dpu: Reject topologies for which no DSC blocks are available (git-fixes). - drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes). - drm/msm/dpu: Remove num_enc from topology struct in favour of num_dsc (git-fixes). - drm/msm/dpu: Wire up DSC mask for active CTL configuration (git-fixes). - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (git-fixes). - drm/msm/dpu: clear DSPP reservations in rm release (git-fixes). - drm/msm/dpu: correct MERGE_3D length (git-fixes). - drm/msm/dpu: disable features unsupported by QCM2290 (git-fixes). - drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes). - drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK (git-fixes). - drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes). - drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks (git-fixes). - drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes). - drm/msm/dpu: sc7180: add missing WB2 clock control (git-fixes). - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes). - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/dsi: Allow 2 CTRLs on v2.5.0 (git-fixes). - drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes). - drm/msm/gem: Add check for kmalloc (git-fixes). - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/mdp5: Add check for kzalloc (git-fixes). - drm/msm/mdp5: fix reading hw revision on db410c platform (git-fixes). - drm/msm: Be more shouty if per-process pgtables are not working (git-fixes). - drm/msm: Fix potential invalid ptr free (git-fixes). - drm/msm: Set max segment size earlier (git-fixes). - drm/msm: clean event_thread->worker in case of an error (git-fixes). - drm/msm: fix NULL-deref on irq uninstall (git-fixes). - drm/msm: fix NULL-deref on snapshot tear down (git-fixes). - drm/msm: fix drm device leak on bind errors (git-fixes). - drm/msm: fix missing wq allocation error handling (git-fixes). - drm/msm: fix vram leak on bind errors (git-fixes). - drm/msm: fix workqueue leak on bind errors (git-fixes). - drm/msm: use strscpy instead of strncpy (git-fixes). - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes). - drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes). - drm/nouveau/dp: check for NULL nv_connector->native_mode (git-fixes). - drm/nouveau/kms/nv50-: remove unused functions (git-fixes). - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes). - drm/nouveau/kms: Cache DP encoders in nouveau_connector (bsc#1206843). - drm/nouveau/kms: Pull mst state in for all modesets (bsc#1206843). - drm/nouveau: add nv_encoder pointer check for NULL (git-fixes). - drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes). - drm/omap: dsi: Fix excessive stack usage (git-fixes). - drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes). - drm/panel: novatek-nt35950: Improve error handling (git-fixes). - drm/panel: novatek-nt35950: Only unregister DSI1 if it exists (git-fixes). - drm/panel: otm8009a: Set backlight parent to panel device (git-fixes). - drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes). - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes). - drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes). - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes). - drm/probe-helper: Cancel previous job before starting new one (git-fixes). - drm/radeon: Drop legacy MST support (bsc#1206843). - drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes). - drm/radeon: fix possible division-by-zero errors (git-fixes). - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes). - drm/radeon: free iio for atombios when driver shutdown (git-fixes). - drm/radeon: reintroduce radeon_dp_work_func content (git-fixes). - drm/rockchip: Drop unbalanced obj unref (git-fixes). - drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes). - drm/sched: Remove redundant check (git-fixes). - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() (git-fixes). - drm/shmem-helper: Remove another errant put in error path (git-fixes). - drm/shmem-helper: Revert accidental non-GPL export (git-fixes). - drm/sun4i: fix missing component unbind on bind errors (git-fixes). - drm/tegra: Avoid potential 32-bit integer overflow (git-fixes). - drm/tegra: firewall: Check for is_addr_reg existence in IMM check (git-fixes). - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes). - drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes). - drm/ttm: Fix a NULL pointer dereference (git-fixes). - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (git-fixes). - drm/ttm: optimize pool allocations a bit v2 (git-fixes). - drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking (git-fixes). - drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: drv: Call component_unbind_all() (git-fixes). - drm/vc4: hdmi: Correct interlaced timings again (git-fixes). - drm/vc4: hdmi: make CEC adapter name unique (git-fixes). - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes). - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 (git-fixes). - drm/vc4: hvs: Set AXI panic modes (git-fixes). - drm/vc4: kms: Sort the CRTCs by output before assigning them (git-fixes). - drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes). - drm/vgem: add missing mutex_destroy (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - drm/virtio: exbuf->fence_fd unmodified on interrupted wait (git-fixes). - drm/vkms: Fix memory leak in vkms_init() (git-fixes). - drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes). - drm/vmwgfx: Do not drop the reference to the handle too soon (git-fixes). - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (git-fixes). - drm/vmwgfx: Fix race issue calling pin_user_pages (git-fixes). - drm/vmwgfx: Stop accessing buffer objects which failed init (git-fixes). - drm/vram-helper: fix function names in vram helper doc (git-fixes). - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes). - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes). - drm: amd: display: Fix memory leakage (git-fixes). - drm: bridge: adv7511: unregister cec i2c device after cec adapter (git-fixes). - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags (git-fixes). - drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes). - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC (git-fixes). - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes). - drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes). - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes). - drm: tidss: Fix pixel format definition (git-fixes). - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes). - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes). - dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes). - dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes). - dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes). - dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes). - dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes). - dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes). - dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes). - dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes). - dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes). - dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes). - dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes). - dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes). - dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes). - dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes). - dt-bindings: power: renesas,apmu: Fix cpus property limits (git-fixes). - dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes). - dt-bindings: remoteproc: st,stm32-rproc: Fix phandle-array parameters description (git-fixes). - dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes). - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes). - dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes). - dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes). - dt-bindings: usb: snps,dwc3: Fix 'snps,hsphy_interface' type (git-fixes). - e1000e: Disable TSO on i219-LM card to increase speed (git-fixes). - edac/i10nm: Add Intel Emerald Rapids server support (PED-4400). - eeprom: at24: also select REGMAP (git-fixes). - eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes). - efi/x86: libstub: Fix typo in __efi64_argmap* name (git-fixes). - efi: Accept version 2 of memory attributes table (git-fixes). - efi: efivars: Fix variable writes with unsupported query_variable_store() (git-fixes). - efi: efivars: Fix variable writes without query_variable_store() (git-fixes). - efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes). - efi: rt-wrapper: Add missing include (git-fixes). - efi: ssdt: Do not free memory if ACPI table was loaded successfully (git-fixes). - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes). - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes). - elevator: update the document of elevator_switch (git-fixes). - elf: correct note name comment (git-fixes). - ethernet: 3com/typhoon: do not write directly to netdev->dev_addr (git-fixes). - ethernet: 8390/etherh: do not write directly to netdev->dev_addr (git-fixes). - ethernet: i825xx: do not write directly to netdev->dev_addr (git-fixes). - ethernet: ice: avoid gcc-9 integer overflow warning (jsc#PED-376). - ethernet: seeq/ether3: do not write directly to netdev->dev_addr (git-fixes). - ethernet: tundra: do not write directly to netdev->dev_addr (git-fixes). - exit: Add and use make_task_dead (bsc#1207328). - exit: Allow oops_limit to be disabled (bsc#1207328). - exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328). - exit: Move force_uaccess back into do_exit (bsc#1207328). - exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328). - exit: Put an upper limit on how often we can oops (bsc#1207328). - exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328). - exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328). - ext4,f2fs: fix readahead of verity data (bsc#1207648). - ext4: Fix deadlock during directory rename (bsc#1210763). - ext4: Fix possible corruption when moving a directory (bsc#1210763). - ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020). - ext4: add EA_INODE checking to ext4_iget() (bsc#1213106). - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088). - ext4: add helper to check quota inums (bsc#1207618). - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617). - ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109). - ext4: add missing validation of fast-commit record lengths (bsc#1207626). - ext4: add strict range checks while freeing blocks (bsc#1213089). - ext4: allocate extended attribute value in vmalloc area (bsc#1207635). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016). - ext4: avoid resizing to a partial cluster size (bsc#1206880). - ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634). - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018). - ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090). - ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103). - ext4: continue to expand file system when the target size does not reach (bsc#1206882). - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592). - ext4: correct max_inline_xattr_value_size computing (bsc#1206878). - ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878). - ext4: disable fast-commit of encrypted dir operations (bsc#1207623). - ext4: disallow ea_inodes with extended attributes (bsc#1213108). - ext4: do not allow journal inode to have encrypt flag (bsc#1207621). - ext4: do not increase iversion counter for ea_inodes (bsc#1207605). - ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603). - ext4: do not set up encryption key during jbd2 transaction (bsc#1207624). - ext4: drop ineligible txn start stop APIs (bsc#1207588). - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606). - ext4: factor out ext4_fc_get_tl() (bsc#1207615). - ext4: fail ext4_iget if special inode unallocated (bsc#1213010). - ext4: fast commit may miss file actions (bsc#1207591). - ext4: fast commit may not fallback for ineligible commit (bsc#1207590). - ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886). - ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766). - ext4: fix WARNING in ext4_update_inline_data (bsc#1213012). - ext4: fix WARNING in mb_find_extent (bsc#1213099). - ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767). - ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076). - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1206881). - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620). - ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111). - ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594). - ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765). - ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891). - ext4: fix data races when using cached status extents (bsc#1213102). - ext4: fix deadlock due to mbcache entry corruption (bsc#1207653). - ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105). - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631). - ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608). - ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630). - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593). - ext4: fix extent status tree race in writeback error recovery path (bsc#1206877). - ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015). - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764). - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636). - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894). - ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625). - ext4: fix lockdep warning when enabling MMP (bsc#1213100). - ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609). - ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884). - ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628). - ext4: fix possible double unlock when moving a directory (bsc#1210763). - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611). - ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612). - ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616). - ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637). - ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096). - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021). - ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627). - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890). - ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893). - ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888). - ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622). - ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878). - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098). - ext4: fix warning in 'ext4_da_release_space' (bsc#1206887). - ext4: goto right label 'failed_mount3a' (bsc#1207610). - ext4: improve error handling from ext4_dirhash() (bsc#1213104). - ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017). - ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629). - ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633). - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614). - ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602). - ext4: make ext4_lazyinit_thread freezable (bsc#1206885). - ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011). - ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019). - ext4: place buffer head allocation before handle start (bsc#1207607). - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087). - ext4: refuse to create ea block when umounted (bsc#1213093). - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - ext4: simplify updating of fast commit stats (bsc#1207589). - ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110). - ext4: unconditionally enable the i_version counter (bsc#1211299). - ext4: update 'state->fc_regions_size' after successful memory allocation (bsc#1207613). - ext4: update s_journal_inum if it changes after journal replay (bsc#1213094). - ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876). - ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092). - ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793). - ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013). - extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes). - extcon: Fix kernel doc of property fields to avoid warnings (git-fixes). - extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes). - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes). - extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes). - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes). - extcon: usbc-tusb320: fix kernel-doc warning (git-fixes). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (git-fixes). - fbcon: Fix error paths in set_con2fb_map (git-fixes). - fbcon: Fix null-ptr-deref in soft_cursor (git-fixes). - fbcon: set_con2fb_map needs to set con2fb_map! (git-fixes). - fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472). - fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes). - fbdev: au1200fb: Fix potential divide by zero (git-fixes). - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes). - fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387). - fbdev: intelfb: Fix potential divide by zero (git-fixes). - fbdev: lxfb: Fix potential divide by zero (git-fixes). - fbdev: mmp: Fix deferred clk handling in mmphw_probe() (git-fixes). - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes). - fbdev: nvidia: Fix potential divide by zero (git-fixes). - fbdev: omapfb: avoid stack overflow warning (git-fixes). - fbdev: omapfb: cleanup inconsistent indentation (git-fixes). - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes). - fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes). - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes). - fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes). - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes). - fbdev: tgafb: Fix potential divide by zero (git-fixes). - fbdev: udlfb: Fix endpoint check (git-fixes). - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes). - filelock: new helper: vfs_inode_has_locks (jsc#SES-1880). - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes). - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes). - firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes). - firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes). - firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes). - firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes). - firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes). - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes). - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes). - firmware: qcom_scm: Clear download bit during reboot (git-fixes). - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes). - firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes). - flow_dissector: Do not count vlan tags inside tunnel payload (git-fixes). - fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258). - fotg210-udc: Add missing completion handler (git-fixes). - fpga: bridge: fix kernel-doc parameter description (git-fixes). - fpga: bridge: properly initialize bridge device before populating children (git-fixes). - fpga: m10bmc-sec: Fix probe rollback (git-fixes). - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes). - fprobe: Check rethook_alloc() return in rethook initialization (git-fixes). - fprobe: Fix smatch type mismatch warning (git-fixes). - fprobe: add recursion detection in fprobe_exit_handler (git-fixes). - fprobe: make fprobe_kprobe_handler recursion free (git-fixes). - fs/jfs: fix shift exponent db_agl2size negative (git-fixes). - fs: account for filesystem mappings (bsc#1205191). - fs: account for group membership (bsc#1205191). - fs: add i_user_ns() helper (bsc#1205191). - fs: dlm: do not call kernel_getpeername() in error_report() (bsc#1208130). - fs: dlm: use sk->sk_socket instead of con->sock (bsc#1208130). - fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632). - fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes). - fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes). - fs: move mapping helpers (bsc#1205191) - fs: remove __sync_filesystem (git-fixes). - fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes). - fs: tweak fsuidgid_has_mapping() (bsc#1205191). - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (bsc#1210409). - fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429). - ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes). - ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes). - ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes). - fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759). - fuse: always revalidate rename target dentry (bsc#1211808). - fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807). - futex: Resend potentially swallowed owner death notification (git-fixes). - genirq: Provide new interfaces for affinity hints (bsc#1208153). - git-sort: Add io_uring 6.3 fixes remote - google/gve:fix repeated words in comments (bsc#1211519). - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes). - gpio: davinci: Add irq chip flag to skip set wake (git-fixes). - gpio: mockup: Fix mode of debugfs files (git-fixes). - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes). - gpio: vf610: connect GPIO label to dev name (git-fixes). - gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes). - gpu: host1x: Fix mask for syncpoint increment register (git-fixes). - gpu: host1x: Fix potential double free if IOMMU is disabled (git-fixes). - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes). - gve: Adding a new AdminQ command to verify driver (bsc#1211519). - gve: Cache link_speed value from device (git-fixes). - gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519). - gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519). - gve: Handle alternate miss completions (bsc#1211519). - gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519). - gve: Remove the code of clearing PBA bit (git-fixes). - gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes). - gve: enhance no queue page list detection (bsc#1211519). - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes). - hfs/hfsplus: use WARN_ON for sanity check (git-fixes). - hfs: Fix OOB Write in hfs_asc2mac (git-fixes). - hfs: fix OOB Read in __hfs_brec_find (git-fixes). - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes). - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes). - hid: Add Mapping for System Microphone Mute (git-fixes). - hid: asus: use spinlock to protect concurrent accesses (git-fixes). - hid: asus: use spinlock to safely schedule workers (git-fixes). - hid: bigben: use spinlock to protect concurrent accesses (git-fixes). - hid: bigben: use spinlock to safely schedule workers (git-fixes). - hid: bigben_probe(): validate report count (git-fixes). - hid: bigben_worker() remove unneeded check on report_field (git-fixes). - hid: core: Fix deadloop in hid_apply_multiplier (git-fixes). - hid: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes). - hid: elecom: add support for TrackBall 056E:011C (git-fixes). - hid: google: add jewel USB id (git-fixes). - hid: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes). - hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes). - hid: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes). - hid: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes). - hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes). - hid: microsoft: Add rumble support to latest xbox controllers (bsc#1211280). - hid: multitouch: Add quirks for flipped axes (git-fixes). - hid: playstation: sanity check DualSense calibration data (git-fixes). - hid: retain initial quirks set up when creating HID devices (git-fixes). - hid: wacom: Add error check to wacom_parse_and_register() (git-fixes). - hid: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes). - hid: wacom: Force pen out of prox if no events have been received in a while (git-fixes). - hid: wacom: Set a default resolution for older tablets (git-fixes). - hid: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes). - hid: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes). - hid: wacom: generic: Set battery quirk only when we see battery data (git-fixes). - hv: fix comment typo in vmbus_channel/low_latency (git-fixes). - hv: hv_balloon: fix memory leak with using debugfs_lookup() (git-fixes). - hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes). - hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes). - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes). - hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861). - hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861). - hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861). - hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861). - hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861). - hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861). - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes). - hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes). - hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes). - hwmon: (coretemp) Simplify platform device handling (git-fixes). - hwmon: (ftsteutates) Fix scaling of measurements (git-fixes). - hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes). - hwmon: (ina3221) return prober error code (git-fixes). - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes). - hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848). - hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes). - hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes). - hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes). - hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes). - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes). - hwmon: fix potential sensor registration fail if of_node is missing (git-fixes). - hwmon: tmp512: drop of_match_ptr for ID table (git-fixes). - hwrng: imx-rngc - fix the timeout for init and self check (git-fixes). - hwrng: st - keep clock enabled while hwrng is registered (git-fixes). - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes). - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes). - i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes). - i2c: hisi: Avoid redundant interrupts (git-fixes). - i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes). - i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes). - i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes). - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes). - i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes). - i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes). - i2c: mv64xxx: Remove shutdown method from driver (git-fixes). - i2c: mxs: suppress probe-deferral error message (git-fixes). - i2c: ocores: generate stop condition after timeout in polling mode (git-fixes). - i2c: omap: Fix standard mode false ACK readings (git-fixes). - i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes). - i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes). - i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes). - i2c: tegra: Fix PEC support for SMBUS block read (git-fixes). - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes). - i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378). - i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378). - i40e: Fix DMA mappings leak (jsc#SLE-18378). - i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378). - i40e: Fix VF set max MTU size (jsc#SLE-18378). - i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378). - i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378). - i40e: Fix calculating the number of queue pairs (jsc#SLE-18378). - i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378). - i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378). - i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378). - i40e: Fix for VF MAC address 0 (jsc#SLE-18378). - i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378). - i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378). - i40e: Fix kernel crash during module removal (jsc#SLE-18378). - i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378). - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378). - i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378). - i40e: Refactor tc mqprio checks (jsc#SLE-18378). - i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378). - i40e: fix accessing vsi->active_filters without holding lock (jsc#SLE-18378). - i40e: fix flow director packet filter programming (jsc#SLE-18378). - i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378). - i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378). - i825xx: sni_82596: use eth_hw_addr_set() (git-fixes). - i915 kABI workaround (git-fixes). - i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes). - iavf/iavf_main: actually log ->src mask when talking about it (jsc#SLE-18385). - iavf: Detach device during reset task (jsc#SLE-18385). - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385). - iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385). - iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385). - iavf: Fix a crash during reset task (jsc#SLE-18385). - iavf: Fix bad page state (jsc#SLE-18385). - iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385). - iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385). - iavf: Fix max_rate limiting (jsc#SLE-18385). - iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385). - iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385). - iavf: do not track VLAN 0 filters (jsc#PED-835). - iavf: fix hang on reboot with ice (jsc#SLE-18385). - iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385). - iavf: fix temporary deadlock and failure to set MAC address (jsc#PED-835). - iavf: refactor VLAN filter states (jsc#PED-835). - iavf: remove active_cvlans and active_svlans bitmaps (jsc#PED-835). - iavf: remove mask from iavf_irq_enable_queues() (git-fixes). - iavf: schedule watchdog immediately when changing primary MAC (jsc#PED-835). - ib/hfi1: Assign npages earlier (git-fixes) - ib/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes) - ib/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes) - ib/hfi1: Fix expected receive setup error exit issues (git-fixes) - ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes) - ib/hfi1: Fix sdma.h tx->num_descs off-by-one errors (git-fixes) - ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes) - ib/hfi1: Immediately remove invalid memory from hardware (git-fixes) - ib/hfi1: Reject a zero-length user expected buffer (git-fixes) - ib/hfi1: Remove user expected buffer invalidate race (git-fixes) - ib/hfi1: Reserve user expected TIDs (git-fixes) - ib/hfi1: Restore allocated resources on failed copyout (git-fixes) - ib/hfi1: Update RMT size calculation (git-fixes) - ib/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes) - ib/iPoIB: Fix legacy IPoIB due to wrong number of queues (git-fixes) - ib/isert: Fix dead lock in ib_isert (git-fixes) - ib/isert: Fix incorrect release of isert connection (git-fixes) - ib/isert: Fix possible list corruption in CMA handler (git-fixes) - ib/mad: Do not call to function that might sleep while in atomic context (git-fixes). - ib/mlx5: Add support for 400G_8X lane speed (git-fixes) - ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes) - ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes) - ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604). - ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes). - ice: Add check for kzalloc (jsc#PED-376). - ice: Do not double unplug aux on peer initiated reset (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (jsc#PED-376). - ice: Fix DSCP PFC TLV creation (git-fixes). - ice: Fix DSCP PFC TLV creation (jsc#PED-376). - ice: Fix XDP memory leak when NIC is brought up and down (git-fixes). - ice: Fix disabling Rx VLAN filtering with port VLAN enabled (jsc#PED-376). - ice: Fix ice VF reset during iavf initialization (jsc#PED-376). - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields (jsc#PED-376). - ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes). - ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375). - ice: Fix memory corruption in VF driver (git-fixes). - ice: Fix potential memory leak in ice_gnss_tty_write() (jsc#PED-376). - ice: Ignore EEXIST when setting promisc mode (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (jsc#PED-376). - ice: Reset FDIR counter in FDIR init stage (git-fixes). - ice: Reset FDIR counter in FDIR init stage (jsc#PED-376). - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375). - ice: add profile conflict check for AVF FDIR (git-fixes). - ice: add profile conflict check for AVF FDIR (jsc#PED-376). - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158). - ice: block LAN in case of VF to VF offload (git-fixes). - ice: block LAN in case of VF to VF offload (jsc#PED-376). - ice: check if VF exists before mode check (jsc#PED-376). - ice: config netdev tc before setting queues number (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (jsc#PED-376). - ice: ethtool: Prohibit improper channel config for DCB (git-fixes). - ice: ethtool: advertise 1000M speeds properly (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (jsc#PED-376). - ice: fix lost multicast packets in promisc mode (jsc#PED-376). - ice: fix wrong fallback logic for FDIR (git-fixes). - ice: fix wrong fallback logic for FDIR (jsc#PED-376). - ice: handle E822 generic device ID in PLDM header (git-fixes). - ice: move devlink port creation/deletion (jsc#PED-376). - ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes). - ice: switch: fix potential memleak in ice_add_adv_recipe() (jsc#PED-376). - ice: use bitmap_free instead of devm_kfree (git-fixes). - ice: xsk: Fix cleaning of XDP_TX frames (jsc#PED-376). - ice: xsk: disable txq irq before flushing hw (jsc#PED-376). - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (jsc#PED-376). - ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes). - ieee80211: add TWT element definitions (bsc#1209980). - ieee802154: hwsim: Fix possible memory leaks (git-fixes). - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253). - igb: Add lock to avoid data race (jsc#SLE-18379). - igb: Enable SR-IOV after reinit (jsc#SLE-18379). - igb: Fix PPS input and output using 3rd and 4th SDP (jsc#PED-370). - igb: Fix extts capture value format for 82580/i354/i350 (git-fixes). - igb: Initialize mailbox message for VF reset (jsc#SLE-18379). - igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379). - igb: fix bit_shift to be in [1..8] range (git-fixes). - igb: fix nvm.ops.read() error handling (git-fixes). - igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379). - igbvf: Regard vf reset nack as success (jsc#SLE-18379). - igc: Add checking for basetime less than zero (jsc#SLE-18377). - igc: Add ndo_tx_timeout support (jsc#SLE-18377). - igc: Clean the TX buffer and TX descriptor ring (git-fixes). - igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377). - igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377). - igc: Fix possible system crash when loading module (git-fixes). - igc: Lift TAPRIO schedule restriction (jsc#SLE-18377). - igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377). - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377). - igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377). - igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377). - igc: fix the validation logic for taprio's gate list (jsc#SLE-18377). - igc: read before write to SRRCTL register (jsc#SLE-18377). - igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377). - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377). - iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes). - iio: accel: fxls8962af: fixup buffer scan element type (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes). - iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes). - iio: adc: ad7192: Change 'shorted' channels to differential (git-fixes). - iio: adc: ad7192: Fix internal/external clock selection (git-fixes). - iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes). - iio: adc: ad7791: fix IRQ flags (git-fixes). - iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes). - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes). - iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes). - iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes). - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes). - iio: adc: stm32-dfsdm: fill module aliases (git-fixes). - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes). - iio: adis16480: select CONFIG_CRC32 (git-fixes). - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes). - iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes). - iio: hid: fix the retval in accel_3d_capture_sample (git-fixes). - iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes). - iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes). - iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes). - iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes). - iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes). - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes). - iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes). - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes). - iio: imu: inv_icm42600: fix timestamp reset (git-fixes). - iio: light: cm32181: Unregister second I2C client if present (git-fixes). - iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes). - iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes). - iio: light: vcnl4035: fixed chip ID check (git-fixes). - iio:adc:twl6030: Enable measurement of VAC (git-fixes). - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes). - ima: Fix memory leak in __ima_inode_hash() (git-fixes). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448). - init: Provide arch_cpu_finalize_init() (bsc#1212448). - init: Remove check_bugs() leftovers (bsc#1212448). - inotify: Avoid reporting event with invalid wd (bsc#1213025). - input: ads7846 - always set last command to PWRDOWN (git-fixes). - input: ads7846 - do not check penirq immediately for 7845 (git-fixes). - input: ads7846 - do not report pressure for ads7845 (git-fixes). - input: adxl34x - do not hardcode interrupt trigger type (git-fixes). - input: alps - fix compatibility with -funsigned-char (bsc#1209805). - input: drv260x - fix typo in register value define (git-fixes). - input: drv260x - remove unused .reg_defaults (git-fixes). - input: drv260x - sleep between polling GO bit (git-fixes). - input: exc3000 - properly stop timer on shutdown (git-fixes). - input: fix open count when closing inhibited device (git-fixes). - input: focaltech - use explicitly signed char type (git-fixes). - input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes). - input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes). - input: iqs269a - configure device with a single block write (git-fixes). - input: iqs269a - drop unused device node references (git-fixes). - input: iqs269a - increase interrupt handler return delay (git-fixes). - input: iqs626a - drop unused device node references (git-fixes). - input: psmouse - fix OOB access in Elantech protocol (git-fixes). - input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes). - input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes). - input: xpad - add constants for GIP interface numbers (git-fixes). - input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes). - integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes). - intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379). - intel_idle: add Emerald Rapids Xeon support (PED-3849). - interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes). - interconnect: fix mem leak when freeing nodes (git-fixes). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes). - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128 (git-fixes). - io_uring/kbuf: fix not advancing READV kbuf ring (git-fixes). - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available (git-fixes). - io_uring: do not expose io_fill_cqe_aux() (bsc#1211014). - io_uring: do not gate task_work run on TIF_NOTIFY_SIGNAL (git-fixes). - io_uring: ensure that cached task references are always put on exit (git-fixes). - io_uring: fix CQ waiting timeout handling (git-fixes). - io_uring: fix fget leak when fs do not support nowait buffered read (bsc#1205205). - io_uring: fix ordering of args in io_uring_queue_async_work (git-fixes). - io_uring: fix return value when removing provided buffers (git-fixes). - io_uring: fix size calculation when registering buf ring (git-fixes). - io_uring: recycle kbuf recycle on tw requeue (git-fixes). - iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes). - iommu/vt-d: Add a fix for devices need extra dtlb flush (bsc#1208219). - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode (bsc#1208948). - iommu/vt-d: Fix buggy QAT device mask (bsc#1208219). - ipmi: fix SSIF not responding under certain cond (git-fixes). - ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459). - ipmi:ssif: Add a timer between request retries (bsc#1206459). - ipmi:ssif: Add send_retries increment (git-fixes). - ipmi:ssif: Increase the message retry time (bsc#1206459). - ipmi:ssif: Remove rtc_us_timer (bsc#1206459). - ipmi:ssif: resend_msg() cannot fail (bsc#1206459). - ipmi_ssif: Rename idle state and check (bsc#1206459). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes). - irqchip/ftintc010: Mark all function static (git-fixes). - irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes). - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes) - iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553). - ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384). - ixgbe: Enable setting RSS table to default values (jsc#SLE-18384). - ixgbe: Fix panic during XDP_TX with > 64 CPUs (jsc#SLE-18384). - ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384). - ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384). - ixgbe: fix pci device refcount leak (jsc#SLE-18384). - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384). - jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590). - jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641). - jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095). - jbd2: fix potential buffer head reference count leak (bsc#1207644). - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645). - jbd2: use the correct print format (git-fixes). - jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643). - jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014). - jfs: Fix fortify moan in symlink (git-fixes). - k-m-s: Drop Linux 2.6 support - kABI compatibility workaround for efivars (git-fixes). - kABI workaround for btbcm.c (git-fixes). - kABI workaround for cpp_acpi extensions for EPP (bsc#1212445). - kABI workaround for drm_dp_mst helper updates (bsc#1206843). - kABI workaround for hid quirks (git-fixes). - kABI workaround for ieee80211 and co (bsc#1209980). - kABI workaround for mt76_poll_msec() (git-fixes). - kABI workaround for struct acpi_ec (bsc#1207149). - kABI workaround for xhci (git-fixes). - kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest (git-fixes) - kABI: PCI: Reduce warnings on possible RW1C corruption (kabi). - kABI: PCI: dwc: Add dw_pcie_ops.host_deinit() callback (kabi). - kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi). - kABI: Preserve TRACE_EVENT_FL values (git-fixes). - kABI: Work around kABI changes after '20347fca71a3 swiotlb: split up the global swiotlb lock' (jsc#PED-3259). - kABI: x86/msi: Fix msi message data shadow struct (kabi). - kABI: x86/msr: Remove .fixup usage (kabi). - kabi FIX FOR NFSv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - kabi FIX FOR: NFS: Further optimisations for 'ls -l' (git-fixes). - kabi FIX FOR: NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - kabi FIX FOR: NFSv4.1 query for fs_location attr on a new file system (Never, kabi). - kabi FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi). - kabi fix for: NFSv3: handle out-of-order write replies (bsc#1205544). - kabi/severities: add mlx5 internal symbols - kabi/severities: added Microsoft mana symbold (bsc#1210551) - kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users. - kabi/severities: ignore kABI changes for mt76/* local modules (bsc#1209980) - kabi/severities: ignore kABI in bq27xxx_battery module Those are local symbols that are used only by child drivers - kasan: no need to unset panic_on_warn in end_report() (bsc#1207328). - kconfig: Update config changed flag before calling callback (git-fixes). - kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi - kernel-binary: install expoline.o (boo#1210791 bsc#1211089) - kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base. - kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741). - kernel-source: Remove unused macro variant_symbols - kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). rpm only supports full length release, no provides - kernel: Do not sign the vanilla kernel (bsc#1209008). - kernel: Kernel is locked down even though secure boot is disabled (bsc#1198101, bsc#1208976). - keys: Add missing function documentation (git-fixes). - keys: Create static version of public_key_verify_signature (git-fixes). - keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes). - keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - keys: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes). - keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes). - kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes) Update config/armv7hl/default too. - kprobe: reverse kp->flags when arm_kprobe failed (git-fixes). - kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes). - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes). - kprobes: Forbid probing on trampoline and BPF code areas (git-fixes). - kprobes: Prohibit probes in gate area (git-fixes). - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes). - kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes). - kvm/vfio: Fix potential deadlock on vfio group_lock (git-fixes) - kvm/vfio: Fix potential deadlock problem in vfio (git-fixes) - kvm: Destroy target device if coalesced MMIO unregistration fails (git-fixes) - kvm: Disallow user memslot with size that exceeds 'unsigned long' (git-fixes) - kvm: Do not create VM debugfs files outside of the VM directory (git-fixes) - kvm: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes) - kvm: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes). - kvm: Prevent module exit until all VMs are freed (git-fixes) - kvm: arm64: Do not arm a hrtimer for an already pending timer (git-fixes) - kvm: arm64: Do not hypercall before EL2 init (git-fixes) - kvm: arm64: Do not return from void function (git-fixes) - kvm: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes) - kvm: arm64: Fix S1PTW handling on RO memslots (git-fixes) - kvm: arm64: Fix bad dereference on MTE-enabled systems (git-fixes) - kvm: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes) - kvm: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes) - kvm: arm64: Free hypervisor allocations if vector slot init fails (git-fixes) - kvm: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes) - kvm: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes) - kvm: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes) - kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes) - kvm: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes) - kvm: arm64: Save PSTATE early on exit (git-fixes) - kvm: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes) - kvm: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes) - kvm: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes) - kvm: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes) - kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes) - kvm: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes). - kvm: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes). - kvm: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes). - kvm: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes). - kvm: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (git-fixes). - kvm: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes). - kvm: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes). - kvm: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes). - kvm: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes). - kvm: s390: selftest: memop: Fix integer literal (git-fixes). - kvm: svm: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes). - kvm: svm: Fix benign 'bool vs. int' comparison in svm_set_cr0() (git-fixes). - kvm: svm: Fix potential overflow in SEV's send|receive_update_data() (git-fixes). - kvm: svm: Require logical ID to be power-of-2 for AVIC entry (git-fixes). - kvm: svm: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes). - kvm: svm: hyper-v: placate modpost section mismatch error (git-fixes). - kvm: vmx: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes). - kvm: vmx: Resume guest immediately when injecting #GP on ECREATE (git-fixes). - kvm: vmx: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes). - kvm: vmx: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes). - kvm: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes). - kvm: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes). - kvm: x86/pmu: Ignore pmu->global_ctrl check if vPMU does not support global_ctrl (git-fixes). - kvm: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes). - kvm: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes). - kvm: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes). - kvm: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes). - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes). - kvm: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes). - kvm: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes). - kvm: x86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes). - kvm: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes). - kvm: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes). - kvm: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes). - kvm: x86: Protect the unused bits in MSR exiting flags (git-fixes). - kvm: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes). - kvm: x86: Report deprecated x87 features in supported CPUID (git-fixes). - kvm: x86: do not set st->preempted when going back to user space (git-fixes). - kvm: x86: fix sending PV IPI (git-fixes). - kvm: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes). - kvm: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes). - lan78xx: Add missing return code checks (git-fixes). - lan78xx: Fix exception on link speed change (git-fixes). - lan78xx: Fix memory allocation bug (git-fixes). - lan78xx: Fix partial packet errors on suspend/resume (git-fixes). - lan78xx: Fix race condition in disconnect handling (git-fixes). - lan78xx: Fix race conditions in suspend/resume handling (git-fixes). - lan78xx: Fix white space and style issues (git-fixes). - lan78xx: Remove unused pause frame queue (git-fixes). - lan78xx: Remove unused timer (git-fixes). - lan78xx: Set flow control threshold to prevent packet loss (git-fixes). - leds: Fix reference to led_set_brightness() in doc (git-fixes). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes). - leds: led-class: Add missing put_device() to led_put() (git-fixes). - leds: led-core: Fix refcount leak in of_led_get() (git-fixes). - leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes). - lib/mpi: Fix buffer overrun when SG is too long (git-fixes). - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (git-fixes). - lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes). - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes). - lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes). - locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552). - locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes). - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270). - locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270). - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270). - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270). - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270). - locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270). - locking/rwsem: Make handoff bit handling more consistent (bsc#1207270). - locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270). - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270). - locking: Add missing __sched attributes (bsc#1207270). - loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes). - loop: fix ioctl calls using compat_loop_info (git-fixes). - lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852). - lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852). - lpfc: Clean up SLI-4 CQE status handling (bsc#1211852). - lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852). - lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852). - lpfc: Enhance congestion statistics collection (bsc#1211852). - lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346). - lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852). - lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852). - lpfc: update metadata - mac80211: introduce individual TWT support in AP mode (bsc#1209980). - mac80211: introduce set_radar_offchan callback (bsc#1209980). - mac80211: twt: do not use potentially unaligned pointer (bsc#1209980). - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes). - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes). - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes). - mailbox: zynqmp: Fix IPI isr handling (git-fixes). - mailbox: zynqmp: Fix typo in IPI documentation (git-fixes). - mbcache: Avoid nesting of cache->c_list_lock under bit locks (bsc#1207647). - mbcache: Fixup kABI of mb_cache_entry (bsc#1207653). - mce: fix set_mce_nospec to always unmap the whole page (git-fixes). - md/bitmap: Fix bitmap chunk size overflow issues (git-fixes). - md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes). - md/raid5: Improve performance for sequential IO (bsc#1208081). - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes). - md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes). - md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes). - md: fix a crash in mempool_free (git-fixes). - md: protect md_unregister_thread from reentrancy (git-fixes). - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes). - media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes). - media: cec: core: do not set last_initiator if tx in progress (git-fixes). - media: cec: i2c: ch7322: also select REGMAP (git-fixes). - media: coda: Add check for dcoda_iram_alloc (git-fixes). - media: coda: Add check for kmalloc (git-fixes). - media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes). - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes). - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes). - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes). - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes). - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes). - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes). - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes). - media: dvb_ca_en50221: fix a size write bug (git-fixes). - media: dvb_demux: fix a bug for the continuity counter (git-fixes). - media: i2c: Correct format propagation for st-mipid02 (git-fixes). - media: i2c: imx219: Fix binning for RAW8 capture (git-fixes). - media: i2c: imx219: Split common registers from mode tables (git-fixes). - media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes). - media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes). - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes). - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes). - media: m5mols: fix off-by-one loop termination error (git-fixes). - media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes). - media: max9286: Free control handler (git-fixes). - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes). - media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes). - media: netup_unidvb: fix use-after-free at del_timer() (git-fixes). - media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes). - media: ov5640: Fix analogue gain control (git-fixes). - media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes). - media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes). - media: platform: ti: Add missing check for devm_regulator_get (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes). - media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes). - media: rc: gpio-ir-recv: add remove function (git-fixes). - media: rcar_fdp1: Fix the correct variable assignments (git-fixes). - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes). - media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes). - media: saa7134: Use video_unregister_device for radio_dev (git-fixes). - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes). - media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes). - media: usb: Check az6007_read() return value (git-fixes). - media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes). - media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes). - media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes). - media: uvcvideo: Check controls flags before accessing them (git-fixes). - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes). - media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes). - media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes). - media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes). - media: uvcvideo: Handle cameras with invalid descriptors (git-fixes). - media: uvcvideo: Handle errors from calls to usb_string (git-fixes). - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes). - media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes). - media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes). - media: uvcvideo: Use control names from framework (git-fixes). - media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes). - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes). - media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes). - media: venus: dec: Fix handling of the start cmd (git-fixes). - media: venus: helpers: Fix ALIGN() of non power of two (git-fixes). - media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes). - mei: bus-fixup:upon error print return values of send and receive (git-fixes). - mei: bus: fix unlink on bus in error path (git-fixes). - mei: me: add meteor lake point M DID (git-fixes). - mei: pxp: Use correct macros to initialize uuid_le (git-fixes). - memory: brcmstb_dpfe: fix testing array offset after use (git-fixes). - memstick: fix memory leak if card device is never registered (git-fixes). - memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449). - meson saradc: fix clock divider mask length (git-fixes). - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes). - mfd: cs5535: Do not build on UML (git-fixes). - mfd: dln2: Fix memory leak in dln2_probe() (git-fixes). - mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes). - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes). - mfd: pm8008: Fix module autoloading (git-fixes). - mfd: rt5033: Drop rt5033-battery sub-device (git-fixes). - mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes). - mfd: stmfx: Nullify stmfx->vdd in case of error (git-fixes). - mfd: stmpe: Only disable the regulators if they are enabled (git-fixes). - mfd: tqmx86: Correct board names for TQMxE39x (git-fixes). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes). - misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes). - misc: enclosure: Fix doc for enclosure_find() (git-fixes). - misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes). - misc: fastrpc: reject new invocations during device removal (git-fixes). - misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes). - misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes). - misc: pci_endpoint_test: Re-init completion for every test (git-fixes). - mkinitrd: Replace dependency with dracut (bsc#1202353). - mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253). - mlx5: fix possible ptp queue fifo use-after-free (jsc#PED-1549). - mlx5: fix skb leak while fifo resync and push (jsc#PED-1549). - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes). - mlxsw: minimal: Fix deadlock in ports creation (git-fixes). - mlxsw: spectrum: Allow driver to load with old firmware versions (git-fixes). - mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768). - mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410). - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769). - mm: Move mm_cachep initialization to mm_init() (bsc#1212448). - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262). - mm: memcg: fix swapcached stat accounting (bsc#1209804). - mm: mmap: remove newline at the end of the trace (git-fixes). - mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034). - mm: take a page reference when removing device exclusive entries (bsc#1211025). - mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410). - mmc: atmel-mci: fix race between stop command and start of next command (git-fixes). - mmc: bcm2835: fix deferred probing (git-fixes). - mmc: block: Remove error check of hw_reset on reset (git-fixes). - mmc: block: ensure error propagation for non-blk (git-fixes). - mmc: jz4740: Work around bug on JZ4760(B) (git-fixes). - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes). - mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes). - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes). - mmc: mmci: stm32: fix max busy timeout calculation (git-fixes). - mmc: mtk-sd: fix deferred probing (git-fixes). - mmc: mvsdio: fix deferred probing (git-fixes). - mmc: omap: fix deferred probing (git-fixes). - mmc: omap_hsmmc: fix deferred probing (git-fixes). - mmc: owl: fix deferred probing (git-fixes). - mmc: sdhci-acpi: fix deferred probing (git-fixes). - mmc: sdhci-esdhc-imx: make 'no-mmc-hs400' works (git-fixes). - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes). - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes). - mmc: sdhci-spear: fix deferred probing (git-fixes). - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes). - mmc: sdhci_am654: lower power-on failed message severity (git-fixes). - mmc: sdio: fix possible resource leaks in some error paths (git-fixes). - mmc: sh_mmcif: fix deferred probing (git-fixes). - mmc: sunxi: fix deferred probing (git-fixes). - mmc: usdhi60rol0: fix deferred probing (git-fixes). - mmc: vub300: fix invalid response handling (git-fixes). - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - mt76: Make use of the helper macro kthread_run() (bsc#1209980). - mt76: Print error message when reading EEPROM from mtd failed (bsc#1209980). - mt76: add 6GHz support (bsc#1209980). - mt76: add MT_RXQ_MAIN_WA for mt7916 (bsc#1209980). - mt76: add support for setting mcast rate (bsc#1209980). - mt76: allow drivers to drop rx packets early (bsc#1209980). - mt76: clear sta powersave flag after notifying driver (bsc#1209980). - mt76: connac: add 6 GHz support for wtbl and starec configuration (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss (bsc#1209980). - mt76: connac: add support for limiting to maximum regulatory Tx power (bsc#1209980). - mt76: connac: add support for passing the cipher field in bss_info (bsc#1209980). - mt76: connac: adjust wlan_idx size from u8 to u16 (bsc#1209980). - mt76: connac: align MCU_EXT definitions with 7915 driver (bsc#1209980). - mt76: connac: enable 6GHz band for hw scan (bsc#1209980). - mt76: connac: enable hw amsdu @ 6GHz (bsc#1209980). - mt76: connac: extend mcu_get_nic_capability (bsc#1209980). - mt76: connac: fix a theoretical NULL pointer dereference in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: fix last_chan configuration in mt76_connac_mcu_rate_txpower_band (bsc#1209980). - mt76: connac: fix unresolved symbols when CONFIG_PM is unset (bsc#1209980). - mt76: connac: introduce MCU_CE_CMD macro (bsc#1209980). - mt76: connac: introduce MCU_EXT macros (bsc#1209980). - mt76: connac: introduce MCU_UNI_CMD macro (bsc#1209980). - mt76: connac: introduce is_connac_v1 utility routine (bsc#1209980). - mt76: connac: make read-only array ba_range static const (bsc#1209980). - mt76: connac: move mcu reg access utility routines in mt76_connac_lib module (bsc#1209980). - mt76: connac: move mt76_connac_chan_bw in common code (bsc#1209980). - mt76: connac: move mt76_connac_lmac_mapping in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_add_key in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_basic_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_ext_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_omac_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_gen_dl_mode in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_get_cipher in common code (bsc#1209980). - mt76: connac: move mt76_connac_mcu_rdd_cmd in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_restart in common module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_set_pm in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_wtbl_update_hdr_trans in connac module (bsc#1209980). - mt76: connac: rely on MCU_CMD macro (bsc#1209980). - mt76: connac: rely on le16_add_cpu in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - mt76: connac: remove MCU_FW_PREFIX bit (bsc#1209980). - mt76: connac: remove PHY_MODE_AX_6G configuration in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2} (bsc#1209980). - mt76: connac: set 6G phymode in single-sku support (bsc#1209980). - mt76: debugfs: fix queue reporting for mt76-usb (bsc#1209980). - mt76: debugfs: improve queue node readability (bsc#1209980). - mt76: disable BH around napi_schedule() calls (bsc#1209980). - mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs (bsc#1209980). - mt76: do not always copy ethhdr in reverse_frag0_hdr_trans (bsc#1209980). - mt76: do not reset MIB counters in get_stats callback (bsc#1209980). - mt76: eeprom: tolerate corrected bit-flips (bsc#1209980). - mt76: fill boottime_ns in Rx path (bsc#1209980). - mt76: fix antenna config missing in 6G cap (bsc#1209980). - mt76: fix boolreturn.cocci warnings (bsc#1209980). - mt76: fix dfs state issue with 160 MHz channels (bsc#1209980). - mt76: fix endianness errors in reverse_frag0_hdr_trans (bsc#1209980). - mt76: fix invalid rssi report (bsc#1209980). - mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi (bsc#1209980). - mt76: fix monitor rx FCS error in DFS channel (bsc#1209980). - mt76: fix possible OOB issue in mt76_calculate_default_rate (bsc#1209980). - mt76: fix possible pktid leak (bsc#1209980). - mt76: fix the wiphy's available antennas to the correct value (bsc#1209980). - mt76: fix timestamp check in tx_status (bsc#1209980). - mt76: fix tx status related use-after-free race on station removal (bsc#1209980). - mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes). - mt76: fix wrong HE data rate in sniffer tool (bsc#1209980). - mt76: improve signal strength reporting (bsc#1209980). - mt76: introduce packet_id idr (bsc#1209980). - mt76: make mt76_sar_capa static (bsc#1209980). - mt76: move mt76_ethtool_worker_info in mt76 module (bsc#1209980). - mt76: move mt76_sta_stats in mt76.h (bsc#1209980). - mt76: move sar utilities to mt76-core module (bsc#1209980). - mt76: move sar_capa configuration in common code (bsc#1209980). - mt76: move spin_lock_bh to spin_lock in tasklet (bsc#1209980). - mt76: mt7603: improve reliability of tx powersave filtering (bsc#1209980). - mt76: mt7603: introduce SAR support (bsc#1209980). - mt76: mt7615: add support for LG LGSBWAC02 (MT7663BUN) (bsc#1209980). - mt76: mt7615: apply cached RF data for DBDC (bsc#1209980). - mt76: mt7615: clear mcu error interrupt status on mt7663 (bsc#1209980). - mt76: mt7615: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7615: fix compiler warning on frame size (bsc#1209980). - mt76: mt7615: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7615: fix throughput regression on DFS channels (bsc#1209980). - mt76: mt7615: fix unused tx antenna mask in testmode (bsc#1209980). - mt76: mt7615: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7615: honor ret from mt7615_mcu_restart in mt7663u_mcu_init (bsc#1209980). - mt76: mt7615: in debugfs queue stats, skip wmm index 3 on mt7663 (bsc#1209980). - mt76: mt7615: introduce SAR support (bsc#1209980). - mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module (bsc#1209980). - mt76: mt7615: remove dead code in get_omac_idx (bsc#1209980). - mt76: mt7615: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7615e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7663: disable 4addr capability (bsc#1209980). - mt76: mt7663s: flush runtime-pm queue after waking up the device (bsc#1209980). - mt76: mt7663s: rely on mcu reg access utility (bsc#1209980). - mt76: mt7663u: introduce mt7663u_mcu_power_on routine (bsc#1209980). - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (bsc#1209980). - mt76: mt76x02: improve tx hang detection (bsc#1209980). - mt76: mt76x02: introduce SAR support (bsc#1209980). - mt76: mt76x02: use mt76_phy_dfs_state to determine radar detector state (bsc#1209980). - mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset (bsc#1209980). - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() (bsc#1209980). - mt76: mt7915: Fix channel state update error issue (bsc#1209980). - mt76: mt7915: add 6 GHz support (bsc#1209980). - mt76: mt7915: add HE-LTF into fixed rate command (bsc#1209980). - mt76: mt7915: add LED support (bsc#1209980). - mt76: mt7915: add WA firmware log support (bsc#1209980). - mt76: mt7915: add control knobs for thermal throttling (bsc#1209980). - mt76: mt7915: add debugfs knobs for MCU utilization (bsc#1209980). - mt76: mt7915: add default calibrated data support (bsc#1209980). - mt76: mt7915: add device id for mt7916 (bsc#1209980). - mt76: mt7915: add ethtool stats support (bsc#1209980). - mt76: mt7915: add firmware support for mt7916 (bsc#1209980). - mt76: mt7915: add mib counters to ethtool stats (bsc#1209980). - mt76: mt7915: add missing DATA4_TB_SPTL_REUSE1 to mt7915_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7915: add more MIB registers (bsc#1209980). - mt76: mt7915: add mt7915_mmio_probe() as a common probing function (bsc#1209980). - mt76: mt7915: add mt7916 calibrated data support (bsc#1209980). - mt76: mt7915: add mu-mimo and ofdma debugfs knobs (bsc#1209980). - mt76: mt7915: add some per-station tx stats to ethtool (bsc#1209980). - mt76: mt7915: add support for MT7986 (bsc#1209980). - mt76: mt7915: add support for passing chip/firmware debug data to user space (bsc#1209980). - mt76: mt7915: add twt_stats knob in debugfs (bsc#1209980). - mt76: mt7915: add tx mu/su counters to mib (bsc#1209980). - mt76: mt7915: add tx stats gathered from tx-status callbacks (bsc#1209980). - mt76: mt7915: add txfree event v3 (bsc#1209980). - mt76: mt7915: add txpower init for 6GHz (bsc#1209980). - mt76: mt7915: allow beaconing on all chains (bsc#1209980). - mt76: mt7915: change max rx len limit of hw modules (bsc#1209980). - mt76: mt7915: check band idx for bcc event (bsc#1209980). - mt76: mt7915: check for devm_pinctrl_get() failure (bsc#1209980). - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set (bsc#1209980). - mt76: mt7915: enable HE UL MU-MIMO (bsc#1209980). - mt76: mt7915: enable configured beacon tx rate (bsc#1209980). - mt76: mt7915: enable radar background detection (bsc#1209980). - mt76: mt7915: enable radar trigger on rdd2 (bsc#1209980). - mt76: mt7915: enable twt responder capability (bsc#1209980). - mt76: mt7915: enlarge wcid size to 544 (bsc#1209980). - mt76: mt7915: fix DBDC default band selection on MT7915D (bsc#1209980). - mt76: mt7915: fix DFS no radar detection event (bsc#1209980). - mt76: mt7915: fix SMPS operation fail (bsc#1209980). - mt76: mt7915: fix WMM index on DBDC cards (bsc#1209980). - mt76: mt7915: fix beamforming mib stats (bsc#1209980). - mt76: mt7915: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7915: fix eeprom fields of txpower init values (bsc#1209980). - mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_debugfs_rx_fw_monitor (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_mac_tx_free() (bsc#1209980). - mt76: mt7915: fix he_mcs capabilities for 160mhz (bsc#1209980). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs() (bsc#1209980). - mt76: mt7915: fix missing HE phy cap (bsc#1209980). - mt76: mt7915: fix phy cap in mt7915_set_stream_he_txbf_caps() (bsc#1209980). - mt76: mt7915: fix polling firmware-own status (git-fixes). - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (git-fixes). - mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta (bsc#1209980). - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup (bsc#1209980). - mt76: mt7915: fix potential NPE in TXS processing (bsc#1209980). - mt76: mt7915: fix potential memory leak of fw monitor packets (bsc#1209980). - mt76: mt7915: fix return condition in mt7915_tm_reg_backup_restore() (bsc#1209980). - mt76: mt7915: fix the muru tlv issue (bsc#1209980). - mt76: mt7915: fix the nss setting in bitrates (bsc#1209980). - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev (bsc#1209980). - mt76: mt7915: fix txbf starec TLV issues (bsc#1209980). - mt76: mt7915: fix typos in comments (bsc#1209980). - mt76: mt7915: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7915: get rid of mt7915_mcu_set_fixed_rate routine (bsc#1209980). - mt76: mt7915: honor all possible error conditions in mt7915_mcu_init() (bsc#1209980). - mt76: mt7915: improve code readability for xmit-queue handler (bsc#1209980). - mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht (bsc#1209980). - mt76: mt7915: improve starec readability of txbf (bsc#1209980). - mt76: mt7915: improve wmm index allocation (bsc#1209980). - mt76: mt7915: initialize smps mode in mt7915_mcu_sta_rate_ctrl_tlv() (bsc#1209980). - mt76: mt7915: introduce SAR support (bsc#1209980). - mt76: mt7915: introduce __mt7915_get_tsf routine (bsc#1209980). - mt76: mt7915: introduce band_idx in mt7915_phy (bsc#1209980). - mt76: mt7915: introduce bss coloring support (bsc#1209980). - mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy (bsc#1209980). - mt76: mt7915: introduce mt76_vif in mt7915_vif (bsc#1209980). - mt76: mt7915: introduce mt7915_mac_add_twt_setup routine (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_beacon_check_caps() (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command (bsc#1209980). - mt76: mt7915: introduce mt7915_set_radar_background routine (bsc#1209980). - mt76: mt7915: introduce rdd_monitor debugfs node (bsc#1209980). - mt76: mt7915: move pci specific code back to pci.c (bsc#1209980). - mt76: mt7915: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7915: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7915: refine register definition (bsc#1209980). - mt76: mt7915: rely on mt76_connac definitions (bsc#1209980). - mt76: mt7915: rely on mt76_connac_get_phy utilities (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_add_tlv routine (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_sta_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_wtbl_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_init_download (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_patch_sem_ctrl/mt76_connac_mcu_start_patch (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_set_rts_thresh (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_basic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_uapsd (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_start_firmware (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_generic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_hdr_trans_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ht_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_smps_tlv (bsc#1209980). - mt76: mt7915: remove dead code in debugfs code (bsc#1209980). - mt76: mt7915: remove duplicated defs in mcu.h (bsc#1209980). - mt76: mt7915: remove mt7915_mcu_add_he() (bsc#1209980). - mt76: mt7915: rename debugfs tx-queues (bsc#1209980). - mt76: mt7915: report radar pattern if detected by rdd2 (bsc#1209980). - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate (bsc#1209980). - mt76: mt7915: rework .set_bitrate_mask() to support more options (bsc#1209980). - mt76: mt7915: rework debugfs fixed-rate knob (bsc#1209980). - mt76: mt7915: rework debugfs queue info (bsc#1209980). - mt76: mt7915: rework dma.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework eeprom.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework mt7915_mcu_sta_muru_tlv() (bsc#1209980). - mt76: mt7915: rework starec TLV tags (bsc#1209980). - mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex (bsc#1209980). - mt76: mt7915: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7915: set VTA bit in tx descriptor (bsc#1209980). - mt76: mt7915: set band1 TGID field in tx descriptor (bsc#1209980). - mt76: mt7915: set bssinfo/starec command when adding interface (bsc#1209980). - mt76: mt7915: set muru platform type (bsc#1209980). - mt76: mt7915: simplify conditional (bsc#1209980). - mt76: mt7915: switch proper tx arbiter mode in testmode (bsc#1209980). - mt76: mt7915: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7915: update mac timing settings (bsc#1209980). - mt76: mt7915: update max_mpdu_size in mt7915_mcu_sta_amsdu_tlv() (bsc#1209980). - mt76: mt7915: update mt7915_chan_mib_offs for mt7916 (bsc#1209980). - mt76: mt7915: update rx rate reporting for mt7916 (bsc#1209980). - mt76: mt7915: use min_t() to make code cleaner (bsc#1209980). - mt76: mt7915e: Add a hwmon attribute to get the actual throttle state (bsc#1209980). - mt76: mt7915e: Enable thermal management by default (bsc#1209980). - mt76: mt7915e: Fix degraded performance after temporary overheat (bsc#1209980). - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (git-fixes). - mt76: mt7921: add 6GHz support (bsc#1209980). - mt76: mt7921: add MT7921_COMMON module (bsc#1209980). - mt76: mt7921: add MU EDCA cmd support (bsc#1209980). - mt76: mt7921: add delay config for sched scan (bsc#1209980). - mt76: mt7921: add mt7921u driver (bsc#1209980). - mt76: mt7921: add per-vif counters in ethtool (bsc#1209980). - mt76: mt7921: add some more MIB counters (bsc#1209980). - mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb (bsc#1209980). - mt76: mt7921: add support for PCIe ID 0x0608/0x0616 (bsc#1209980). - mt76: mt7921: add support for tx status reporting (bsc#1209980). - mt76: mt7921: clear pm->suspended in mt7921_mac_reset_work (bsc#1209980). - mt76: mt7921: disable 4addr capability (bsc#1209980). - mt76: mt7921: disable runtime pm for usb (bsc#1209980). - mt76: mt7921: do not always disable fw runtime-pm (bsc#1209980). - mt76: mt7921: do not enable beacon filter when IEEE80211_CONF_CHANGE_MONITOR is set (bsc#1209980). - mt76: mt7921: do not update pm states in case of error (git-fixes). - mt76: mt7921: fix MT7921E reset failure (bsc#1209980). - mt76: mt7921: fix Wformat build warning (bsc#1209980). - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7921: fix boolreturn.cocci warning (bsc#1209980). - mt76: mt7921: fix build regression (bsc#1209980). - mt76: mt7921: fix endianness issues in mt7921_mcu_set_tx() (bsc#1209980). - mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap (bsc#1209980). - mt76: mt7921: fix ht mcs in mt7921_mac_add_txs_skb() (bsc#1209980). - mt76: mt7921: fix injected MPDU transmission to not use HW A-MSDU (bsc#1209980). - mt76: mt7921: fix kernel crash at mt7921_pci_remove (git-fixes). - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (git-fixes). - mt76: mt7921: fix mt7921s Kconfig (bsc#1209980). - mt76: mt7921: fix network buffer leak by txs missing (bsc#1209980). - mt76: mt7921: fix possible NULL pointer dereference in mt7921_mac_write_txwi (bsc#1209980). - mt76: mt7921: fix up the monitor mode (bsc#1209980). - mt76: mt7921: fix xmit-queue dump for usb and sdio (bsc#1209980). - mt76: mt7921: forbid the doze mode when coredump is in progress (bsc#1209980). - mt76: mt7921: get rid of monitor_vif (bsc#1209980). - mt76: mt7921: get rid of mt7921_mcu_get_eeprom (bsc#1209980). - mt76: mt7921: get rid of mt7921_wait_for_mcu_init declaration (bsc#1209980). - mt76: mt7921: honor mt76_connac_mcu_set_rate_txpower return value in mt7921_config (bsc#1209980). - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter (bsc#1209980). - mt76: mt7921: introduce 160 MHz channel bandwidth support (bsc#1209980). - mt76: mt7921: introduce mt7921s support (bsc#1209980). - mt76: mt7921: introduce stats reporting through ethtool (bsc#1209980). - mt76: mt7921: make all event parser reusable between mt7921s and mt7921e (bsc#1209980). - mt76: mt7921: make mt7921_init_tx_queues static (bsc#1209980). - mt76: mt7921: move mt76_connac_mcu_set_hif_suspend to bus-related files (bsc#1209980). - mt76: mt7921: move mt7921_init_hw in a dedicated work (bsc#1209980). - mt76: mt7921: move mt7921_queue_rx_skb to mac.c (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_complete_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_prepare_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_status_data in mac common code (bsc#1209980). - mt76: mt7921: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7921: reduce log severity levels for informative messages (bsc#1209980). - mt76: mt7921: refactor dma.c to be pcie specific (bsc#1209980). - mt76: mt7921: refactor init.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mac.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mcu.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mt7921_mcu_send_message (bsc#1209980). - mt76: mt7921: rely on mcu_get_nic_capability (bsc#1209980). - mt76: mt7921: remove dead definitions (bsc#1209980). - mt76: mt7921: remove duplicated code in mt7921_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7921: remove mcu rate reporting code (bsc#1209980). - mt76: mt7921: remove mt7921_sta_stats (bsc#1209980). - mt76: mt7921: report tx rate directly from tx status (bsc#1209980). - mt76: mt7921: robustify hardware initialization flow (bsc#1209980). - mt76: mt7921: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7921: set EDCA parameters with the MCU CE command (bsc#1209980). - mt76: mt7921: start reworking tx rate reporting (bsc#1209980). - mt76: mt7921: toggle runtime-pm adding a monitor vif (bsc#1209980). - mt76: mt7921: update mib counters dumping phy stats (bsc#1209980). - mt76: mt7921: update mt7921_skb_add_usb_sdio_hdr to support usb (bsc#1209980). - mt76: mt7921: use correct iftype data on 6GHz cap init (bsc#1209980). - mt76: mt7921: use mt76_hw instead of open coding it (bsc#1209980). - mt76: mt7921: use physical addr to unify register access (bsc#1209980). - mt76: mt7921e: fix possible probe failure after reboot (bsc#1198835). - mt76: mt7921e: make dev->fw_assert usage consistent (bsc#1209980). - mt76: mt7921e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7921s: add reset support (bsc#1209980). - mt76: mt7921s: clear MT76_STATE_MCU_RUNNING immediately after reset (bsc#1209980). - mt76: mt7921s: fix a possible memory leak in mt7921_load_patch (bsc#1209980). - mt76: mt7921s: fix bus hang with wrong privilege (bsc#1209980). - mt76: mt7921s: fix cmd timeout in throughput test (bsc#1209980). - mt76: mt7921s: fix firmware download random fail (bsc#1209980). - mt76: mt7921s: fix missing fc type/sub-type for 802.11 pkts (bsc#1209980). - mt76: mt7921s: fix mt7921s_mcu_[fw|drv]_pmctrl (bsc#1209980). - mt76: mt7921s: fix possible kernel crash due to invalid Rx count (bsc#1209980). - mt76: mt7921s: fix possible sdio deadlock in command fail (bsc#1209980). - mt76: mt7921s: fix suspend error with enlarging mcu timeout value (bsc#1209980). - mt76: mt7921s: fix the device cannot sleep deeply in suspend (bsc#1209980). - mt76: mt7921s: make pm->suspended usage consistent (bsc#1209980). - mt76: mt7921s: run sleep mode by default (bsc#1209980). - mt76: mt7921s: update mt7921s_wfsys_reset sequence (bsc#1209980). - mt76: only access ieee80211_hdr after mt76_insert_ccmp_hdr (bsc#1209980). - mt76: only set rx radiotap flag from within decoder functions (bsc#1209980). - mt76: redefine mt76_for_each_q_rx to adapt mt7986 changes (bsc#1209980). - mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature (bsc#1209980). - mt76: remove mt76_wcid pointer from mt76_tx_status_check signature (bsc#1209980). - mt76: remove variable set but not used (bsc#1209980). - mt76: reverse the first fragmented frame to 802.11 (bsc#1209980). - mt76: schedule status timeout at dma completion (bsc#1209980). - mt76: sdio: disable interrupt in mt76s_sdio_irq (bsc#1209980). - mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines (bsc#1209980). - mt76: sdio: extend sdio module to support CONNAC2 (bsc#1209980). - mt76: sdio: honor the largest Tx buffer the hardware can support (bsc#1209980). - mt76: sdio: introduce parse_irq callback (bsc#1209980). - mt76: sdio: lock sdio when it is needed (bsc#1209980). - mt76: sdio: move common code in mt76_sdio module (bsc#1209980). - mt76: set wlan_idx_hi on mt7916 (bsc#1209980). - mt76: split single ldpc cap bit into bits (bsc#1209980). - mt76: substitute sk_buff_head status_list with spinlock_t status_lock (bsc#1209980). - mt76: support reading EEPROM data embedded in fdt (bsc#1209980). - mt76: switch from 'pci_' to 'dma_' API (bsc#1209980). - mt76: testmode: add support to set MAC (bsc#1209980). - mt76: usb: add req_type to ___mt76u_rr signature (bsc#1209980). - mt76: usb: add req_type to ___mt76u_wr signature (bsc#1209980). - mt76: usb: introduce __mt76u_init utility routine (bsc#1209980). - mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD (bsc#1209980). - mt76: use a separate CCMP PN receive counter for management frames (bsc#1209980). - mt76: use le32/16_get_bits() whenever possible (bsc#1209980). - mt76x02: improve mac error check/reset reliability (bsc#1209980). - mtd: core: fix error path for nvmem provider (git-fixes). - mtd: core: fix nvmem error reporting (git-fixes). - mtd: core: provide unique name for nvmem device, take two (git-fixes). - mtd: dataflash: remove duplicate SPI ID table (git-fixes). - mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes). - mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes). - mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes). - mtd: rawnand: marvell: ensure timing values are written (git-fixes). - mtd: rawnand: meson: fix bitmask for length in command word (git-fixes). - mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes). - mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes). - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes). - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes). - mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes). - mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes). - mtd: spi-nor: Fix a trivial typo (git-fixes). - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes). - mtd: spi-nor: core: fix implicit declaration warning (git-fixes). - mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes). - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes). - mtdblock: tolerate corrected bit-flips (git-fixes). - nbd: Fix hung on disconnect request if socket is closed before (git-fixes). - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes). - nbd: Fix hungtask when nbd_config_put (git-fixes). - nbd: add missing definition of pr_fmt (git-fixes). - nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes). - nbd: fix io hung while disconnecting device (git-fixes). - nbd: fix race between nbd_alloc_config() and module removal (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#PED-1549). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253). - net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253). - net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253). - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253). - net/mlx5: Avoid recovery in probe flows (jsc#PED-1549 bsc#1211794). - net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#PED-1549). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253). - net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253). - net/mlx5: Collect command failures data only for known commands (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#PED-1549). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253). - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#PED-1549). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253). - net/mlx5: Devcom, serialize devcom registration (jsc#PED-1549). - net/mlx5: Disable eswitch before waiting for VF pages (jsc#PED-1549). - net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253). - net/mlx5: Do not use already freed action pointer (jsc#SLE-19253). - net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#PED-1549). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#PED-1549). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#PED-1549). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#PED-1549). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#PED-1549). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5: E-switch, Fix switchdev mode after devlink reload (jsc#PED-1549). - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules (jsc#PED-1549). - net/mlx5: ECPF, wait for VF pages only after disabling host PFs (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253). - net/mlx5: Expose SF firmware pages counter (jsc#PED-1549). - net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253). - net/mlx5: Fix RoCE setting at HCA level (jsc#PED-1549). - net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253). - net/mlx5: Fix command stats access after free (jsc#PED-1549). - net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253). - net/mlx5: Fix error message when failing to allocate device memory (jsc#PED-1549). - net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253). - net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253). - net/mlx5: Fix io_eq_size and event_eq_size params validation (jsc#PED-1549). - net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253). - net/mlx5: Fix ptp max frequency adjustment range (jsc#PED-1549). - net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253). - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#SLE-19253). - net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#PED-1549). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253). - net/mlx5: Handle pairing of E-switch via uplink un/load APIs (jsc#PED-1549). - net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253). - net/mlx5: Lag, fix failure to cancel delayed bond work (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#PED-1549). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253). - net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253). - net/mlx5: SF, Drain health before removing device (jsc#PED-1549). - net/mlx5: SF, Drain health before removing device (jsc#SLE-19253). - net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253). - net/mlx5: Serialize module cleanup with reload and remove (jsc#PED-1549). - net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253). - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver (jsc#PED-1549). - net/mlx5: Store page counters in a single array (jsc#PED-1549). - net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253). - net/mlx5: add IFC bits for bypassing port select flow table (git-fixes) - net/mlx5: check attr pointer validity before dereferencing it (jsc#PED-1549). - net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253). - net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253). - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253). - net/mlx5: fs, fail conflicting actions (jsc#SLE-19253). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#PED-1549). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253). - net/mlx5: fw_tracer, Fix event handling (jsc#PED-1549). - net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#PED-1549). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#PED-1549). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#PED-1549). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#PED-1549). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253). - net/mlx5e: CT: Fix ct debugfs folder name (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253). - net/mlx5e: Do not cache tunnel offloads capability (jsc#PED-1549). - net/mlx5e: Do not clone flow post action attributes second time (jsc#PED-1549). - net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253). - net/mlx5e: Do not support encap rules with gbp option (jsc#PED-1549). - net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253). - net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253). - net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253). - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253). - net/mlx5e: Fix RX reporter for XSK RQs (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253). - net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253). - net/mlx5e: Fix cleanup null-ptr deref on encap lock (jsc#PED-1549). - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (jsc#PED-1549). - net/mlx5e: Fix deadlock in tc route query code (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#PED-1549). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253). - net/mlx5e: Fix macsec ASO context alignment (jsc#PED-1549). - net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (jsc#PED-1549). - net/mlx5e: Fix macsec ssci attribute handling in offload path (jsc#PED-1549). - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253). - net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253). - net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253). - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253). - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (jsc#PED-1549). - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253). - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253). - net/mlx5e: Initialize link speed to zero (jsc#PED-1549). - net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253). - net/mlx5e: Nullify table pointer when failing to create (jsc#PED-1549). - net/mlx5e: Overcome slow response for first macsec ASO WQE (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5e: Remove redundant xsk pointer check in mlx5e_mpwrq_validate_xsk (jsc#PED-1549). - net/mlx5e: Set decap action based on attr for sample (jsc#PED-1549). - net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253). - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253). - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253). - net/mlx5e: Use correct encap attribute during invalidation (jsc#PED-1549). - net/mlx5e: Verify dev is present for fix features ndo (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#PED-1549). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253). - net/net_failover: fix txq exceeding warning (git-fixes). - net/rose: Fix to not accept on connected socket (git-fixes). - net/sched: fix initialization order when updating chain 0 head (git-fixes). - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes). - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes). - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842). - net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes). - net/x25: Fix to not accept on connected socket (git-fixes). - net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes). - net: add missing include in include/net/gro.h (git-fixes). - net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes). - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes). - net: devlink: Fix missing mutex_unlock() call (git-fixes). - net: ena: Account for the number of processed bytes in XDP (git-fixes). - net: ena: Do not register memory info on XDP exchange (git-fixes). - net: ena: Fix rx_copybreak value update (git-fixes). - net: ena: Fix toeplitz initial hash value (git-fixes). - net: ena: Set default value for RX interrupt moderation (git-fixes). - net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes). - net: ena: Use bitmask to indicate packet redirection (git-fixes). - net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes). - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes). - net: hns3: fix reset delay time to avoid configuration timeout (git-fixes). - net: hns3: fix sending pfc frames after reset issue (git-fixes). - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes). - net: linkwatch: be more careful about dev->linkwatch_dev_tracker (git-fixes). - net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982). - net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022). - net: mana: Add support for jumbo frame (bsc#1210551). - net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153). - net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551). - net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022). - net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022). - net: mana: Enable RX path to handle various MTU sizes (bsc#1210551). - net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875). - net: mana: Fix accessing freed irq affinity_hint (bsc#1208153). - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes). - net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022). - net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022). - net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022). - net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022). - net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551). - net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551). - net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022). - net: mana: Use napi_build_skb in RX path (bsc#1210551). - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes). - net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes). - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#PED-1549). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#SLE-19253). - net: natsemi: fix hw address initialization for jazz and xtensa (git-fixes). - net: of: fix stub of_net helpers for CONFIG_NET=n (git-fixes). - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes). - net: phy: Ensure state transitions are processed from phy_stop() (git-fixes). - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes). - net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes). - net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes). - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes). - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes). - net: phy: mxl-gpy: add MDINT workaround (git-fixes). - net: phy: nxp-c45-tja11xx: add remove callback (git-fixes). - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes). - net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes). - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes). - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes). - net: qrtr: correct types of trace event parameters (git-fixes). - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes). - net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes). - net: tun: avoid disabling NAPI twice (git-fixes). - net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes). - net: tun: stop NAPI when detaching queues (git-fixes). - net: tun: unlink NAPI from device on destruction (git-fixes). - net: usb: asix: remove redundant assignment to variable reg (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes). - net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes). - net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - net: usb: use eth_hw_addr_set() (git-fixes). - net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes). - netrom: Fix use-after-free caused by accept on already connected socket (git-fixes). - netrom: Fix use-after-free of a listening socket (git-fixes). - nfc: change order inside nfc_se_io error path (git-fixes). - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes). - nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes). - nfc: pn533: initialize struct pn533_out_arg properly (git-fixes). - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes). - nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes). - nfp: flower-ct: fix error return code in nfp_fl_ct_add_offload() (git-fixes). - nfp: flower: fix ingress police using matchall filter (git-fixes). - nfp: only report pause frame configuration for physical device (git-fixes). - nfs4: Fix kmemleak when allocate slot failed (git-fixes). - nfs4trace: fix state manager flag printing (git-fixes). - nfs: Always initialise fattr->label in nfs_fattr_alloc() (git-fixes). - nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes). - nfs: Cleanup unused rpc_clnt variable (git-fixes). - nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes). - nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes). - nfs: Fix an Oops in nfs_d_automount() (git-fixes). - nfs: Further optimisations for 'ls -l' (git-fixes). - nfs: Pass i_size to fscache_unuse_cookie() when a file is released (git-fixes). - nfs: fix disabling of swap (git-fixes). - nfs: nfs4clinet: check the return value of kstrdup() (git-fixes). - nfs: nfsiod should not block forever in mempool_alloc() (git-fixes). - nfsd: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (git-fixes). - nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes). - nfsd: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (git-fixes). - nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes). - nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes). - nfsd: Fix a memory leak in an error handling path (git-fixes). - nfsd: Fix handling of oversized NFSv4 COMPOUND requests (git-fixes). - nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes). - nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - nfsd: Protect against filesystem freezing (git-fixes). - nfsd: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - nfsd: call op_release, even when op_func returns an error (git-fixes). - nfsd: callback request does not use correct credential for AUTH_SYS (git-fixes). - nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes). - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes). - nfsd: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes). - nfsd: fix problems with cleanup on errors in nfsd4_copy (git-fixes). - nfsd: fix race to check ls_layouts (git-fixes). - nfsd: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes). - nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes). - nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes). - nfsd: shut down the NFSv4 state objects before the filecache (git-fixes). - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes). - nfsd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes). - nfsv3: handle out-of-order write replies (bsc#1205544). - nfsv4 expose nfs_parse_server_name function (git-fixes). - nfsv4 handle port presence in fs_location server string (git-fixes). - nfsv4 only print the label when its queried (git-fixes). - nfsv4 remove zero number of fs_locations entries error check (git-fixes). - nfsv4 store server support for fs_location attribute (git-fixes). - nfsv4.1 provide mount option to toggle trunking discovery (git-fixes). - nfsv4.1 query for fs_location attr on a new file system (git-fixes). - nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes). - nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - nfsv4.2: Fix initialisation of struct nfs4_label (git-fixes). - nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes). - nfsv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - nfsv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes). - nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes). - nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes). - nfsv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes). - nfsv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - nfsv4: Fix a potential state reclaim deadlock (git-fixes). - nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - nfsv4: Fix hangs when recovering open state after a server reboot (git-fixes). - nfsv4: Protect the state recovery thread against direct reclaim (git-fixes). - nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes). - nfsv4: keep state manager thread active if swap is enabled (git-fixes). - nilfs2: do not write dirty data after degenerating to read-only (git-fixes). - nilfs2: fix buffer corruption due to concurrent device reads (git-fixes). - nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes). - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes). - nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes). - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes). - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes). - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes). - nilfs2: fix sysfs interface lifetime (git-fixes). - nilfs2: fix underflow in second superblock position calculations (git-fixes). - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes). - nilfs2: initialize unused bytes in segment summary blocks (git-fixes). - nouveau: fix client work fence deletion race (git-fixes). - ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes). - ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes). - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes). - ntb: ntb_tool: Add check for devm_kcalloc (git-fixes). - ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes). - null_blk: fix ida error handling in null_add_dev() (git-fixes). - nvdimm: disable namespace on error (bsc#1166486). - nvme initialize core quirks before calling nvme_init_subsystem (git-fixes). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-core: fix dev_pm_qos memleak (git-fixes). - nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes). - nvme-core: fix memory leak in dhchap_secret_store (git-fixes). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes). - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (git-fixes). - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes). - nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes). - nvme-multipath: fix hang when disk goes live over reconnect (git-fixes). - nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes). - nvme-multipath: support io stats on the mpath device (bsc#1210565). - nvme-pci: add bogus ID quirk for ADATA SX6000PNP (bsc#1207827). - nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes). - nvme-pci: add quirks for Samsung X5 SSDs (git-fixes). - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes). - nvme-pci: clear the prp2 field when not used (git-fixes). - nvme-pci: disable write zeroes on various Kingston SSD (git-fixes). - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes). - nvme-pci: fix doorbell buffer value endianness (git-fixes). - nvme-pci: fix mempool alloc size (git-fixes). - nvme-pci: fix page size checks (git-fixes). - nvme-pci: fix timeout request state check (git-fixes). - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes). - nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes). - nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: always fail a request when sending it failed (bsc#1208902). - nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes). - nvme-tcp: fix bogus request completion when failing to send AER (git-fixes). - nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes). - nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes). - nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes). - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes). - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes). - nvme: add device name to warning in uuid_show() (git-fixes). - nvme: also return I/O command effects from nvme_command_effects (git-fixes). - nvme: bring back auto-removal of deleted namespaces during sequential scan (git-fixes). - nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes). - nvme: check for duplicate identifiers earlier (git-fixes). - nvme: cleanup __nvme_check_ids (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes). - nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes). - nvme: fix async event trace event (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix handling single range discard request (git-fixes). - nvme: fix interpretation of DMRSL (git-fixes). - nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes). - nvme: fix passthrough csi check (git-fixes). - nvme: fix per-namespace chardev deletion (git-fixes). - nvme: fix the CRIMS and CRWMS definitions to match the spec (git-fixes). - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes). - nvme: fix the name of Zone Append for verbose logging (git-fixes). - nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes). - nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes). - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes). - nvme: introduce nvme_start_request (bsc#1210565). - nvme: move nvme_multi_css into nvme.h (git-fixes). - nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes). - nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes). - nvme: return err on nvme_init_non_mdts_limits fail (git-fixes). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: set dma alignment to dword (git-fixes). - nvme: set non-mdts limits in nvme_scan_work (git-fixes). - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (git-fixes). - nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes). - nvmet-tcp: add bounds check on Transfer Tag (git-fixes). - nvmet-tcp: fix incomplete data digest send (git-fixes). - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes). - nvmet-tcp: fix regression in data_digest calculation (git-fixes). - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes). - nvmet: add helpers to set the result field for connect commands (git-fixes). - nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes). - nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes). - nvmet: fix I/O Command Set specific Identify Controller (git-fixes). - nvmet: fix Identify Active Namespace ID list handling (git-fixes). - nvmet: fix Identify Controller handling (git-fixes). - nvmet: fix Identify Namespace handling (git-fixes). - nvmet: fix a memory leak (git-fixes). - nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes). - nvmet: fix a use-after-free (git-fixes). - nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes). - nvmet: fix mar and mor off-by-one errors (git-fixes). - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: force reconnect when number of queue changes (git-fixes). - nvmet: looks at the passthrough controller when initializing CAP (git-fixes). - nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes). - nvmet: only allocate a single slab for bvecs (git-fixes). - nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes). - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes). - objtool: Add a missing comma to avoid string concatenation (bsc#1207328). - ocfs2: Fix data corruption after failed write (bsc#1208542). - ocfs2: clear dinode links count in case of error (bsc#1207650). - ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649). - ocfs2: fix crash when mount with quota enabled (bsc#1207640). - ocfs2: fix defrag path triggering jbd2 ASSERT (bsc#1199304). - ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes). - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes). - ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652). - ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651). - ocfs2: fix non-auto defrag path not working issue (bsc#1199304). - ocfs2: fix non-auto defrag path not working issue (git-fixes). - ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770). - ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768). - ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771). - octeon: constify netdev->dev_addr (git-fixes). - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes). - octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes). - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes). - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes). - of/address: Return an error when no valid dma-ranges are found (git-fixes). - opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes). - pNFS/filelayout: Fix coalescing test for single DS (git-fixes). - panic: Consolidate open-coded panic_on_warn checks (bsc#1207328). - panic: Introduce warn_limit (bsc#1207328). - panic: unset panic_on_warn inside panic() (bsc#1207328). - pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes). - pci/aspm: Remove pcie_aspm_pm_state_change() (git-fixes). - pci/dpc: Await readiness of secondary bus after reset (git-fixes). - pci/edr: Clear Device Status after EDR error recovery (git-fixes). - pci/iov: Enlarge virtfn sysfs name buffer (git-fixes). - pci/pm: Always disable PTM for all devices during suspend (git-fixes). - pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes). - pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes). - pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes). - pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes). - pci: Add ACS quirk for Wangxun NICs (git-fixes). - pci: Add SolidRun vendor ID (git-fixes). - pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes). - pci: Align extra resources for hotplug bridges properly (git-fixes). - pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes). - pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes). - pci: Fix dropping valid root bus resources with .end = zero (git-fixes). - pci: Reduce warnings on possible RW1C corruption (git-fixes). - pci: Release resource invalidated by coalescing (git-fixes). - pci: Take other bus devices into account when distributing resources (git-fixes). - pci: Unify delay handling for reset and resume (git-fixes). - pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes). - pci: aardvark: Fix link training (git-fixes). - pci: cadence: Fix Gen2 Link Retraining process (git-fixes). - pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes). - pci: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes). - pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes). - pci: ftpci100: Release the clock resources (git-fixes). - pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes). - pci: hv: Add a per-bus mutex state_lock (bsc#1207185). - pci: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185). - pci: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185). - pci: hv: Use async probing to reduce boot time (bsc#1207185). - pci: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185). - pci: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes). - pci: imx6: Install the fault handler only on compatible match (git-fixes). - pci: loongson: Add more devices that need MRRS quirk (git-fixes). - pci: loongson: Prevent LS7A MRRS increases (git-fixes). - pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes). - pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes). - pci: pciehp: Cancel bringup sequence if card is not present (git-fixes). - pci: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes). - pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes). - pci: qcom: Fix host-init error handling (git-fixes). - pci: qcom: Fix pipe clock imbalance (git-fixes). - pci: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes). - pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes). - pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes). - pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes). - pci: rockchip: Set address alignment for endpoint mode (git-fixes). - pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes). - pci: rockchip: Write PCI Device ID to correct register (git-fixes). - pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes). - pci: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - pci: vmd: Reset VMD config register between soft reboots (git-fixes). - pci: xgene: Revert 'PCI: xgene: Use inbound resources for setup' (git-fixes). - perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes). - perf/core: Call LSM hook after copying perf_event_attr (git fixes). - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes). - perf/core: Fix the same task check in perf_event_set_output (git fixes). - perf/core: Inherit event_caps (git fixes). - perf/x86/amd: fix potential integer overflow on shift of a int (git fixes). - perf/x86/intel/cstate: Add Emerald Rapids (PED-4396). - perf/x86/intel/ds: Fix precise store latency handling (git fixes). - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes). - perf/x86/intel/pt: Fix sampling using single range output (git fixes). - perf/x86/intel/pt: Relax address filter validation (git fixes). - perf/x86/intel/uncore: Add Emerald Rapids (git fixes). - perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes). - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes). - perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes). - perf/x86/intel: Add Emerald Rapids (git fixes). - perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes). - perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes). - perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes). - perf/x86/intel: Fix event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for ADL (git fixes). - perf/x86/intel: Fix pebs event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for SPR (git fixes). - perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes). - perf/x86/msr: Add Emerald Rapids (git fixes). - perf/x86/rapl: Add support for Intel AlderLake-N (git fixes). - perf/x86/rapl: Add support for Intel Emerald Rapids (PED-4394). - perf/x86/rapl: Treat Tigerlake like Icelake (git fixes). - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes). - perf/x86/rapl: fix AMD event handling (git fixes). - perf/x86/uncore: Add Raptor Lake uncore support (git fixes). - perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes). - perf/x86/uncore: Add new Raptor Lake S support (git fixes). - perf/x86/uncore: Clean up uncore_pci_ids (git fixes). - perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf: Always wake the parent event (git fixes). - perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes). - perf: Fix possible memleak in pmu_dev_alloc() (git fixes). - perf: fix perf_event_context->time (git fixes). - phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes). - phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes). - phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes). - phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes). - phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes). - phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes). - pinctrl: amd: Disable and mask interrupts on resume (git-fixes). - pinctrl: aspeed: Fix confusing types in return value (git-fixes). - pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes). - pinctrl: at91-pio4: fix domain name assignment (git-fixes). - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes). - pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes). - pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes). - pinctrl: mediatek: Initialize variable *buf to zero (git-fixes). - pinctrl: mediatek: fix coding style (git-fixes). - pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes). - pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes). - pinctrl: ocelot: Fix alt mode for ocelot (git-fixes). - pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes). - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes). - pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes). - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes). - pinctrl: single: fix potential NULL dereference (git-fixes). - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes). - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes). - platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes). - platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd: Fix refcount leak in amd_pmc_probe (bsc#1210644). - platform/x86/amd: pmc: Add a module parameter to disable workarounds (bsc#1210644). - platform/x86/amd: pmc: Add a workaround for an s0i3 issue on Cezanne (bsc#1210644). - platform/x86/amd: pmc: Add defines for STB events (bsc#1210644). - platform/x86/amd: pmc: Add line break for readability (bsc#1210644). - platform/x86/amd: pmc: Add new ACPI ID AMDI0009 (bsc#1210644). - platform/x86/amd: pmc: Add num_samples message id support to STB (bsc#1210644). - platform/x86/amd: pmc: Add sysfs files for SMU (bsc#1210644). - platform/x86/amd: pmc: Always write to the STB (bsc#1210644). - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN (bsc#1210644). - platform/x86/amd: pmc: Do not dump data after resume from s0i3 on picasso (git-fixes). - platform/x86/amd: pmc: Do not try to read SMU version on Picasso (git-fixes). - platform/x86/amd: pmc: Fix build without debugfs (bsc#1210644). - platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() (bsc#1210644). - platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso (git-fixes). - platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` (git-fixes). - platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init (git-fixes). - platform/x86/amd: pmc: Read SMU version during suspend on Cezanne systems (bsc#1210644). - platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: Utilize SMN index 0 for driver probe (git-fixes). - platform/x86/amd: pmc: Write dummy postcode into the STB DRAM (bsc#1210644). - platform/x86/amd: pmc: add CONFIG_SERIO dependency (git-fixes). - platform/x86/amd: pmc: differentiate STB/SMU messaging prints (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_SUSPEND checks (bsc#1210644). - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes). - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420). - platform/x86: ISST: Remove 8 socket limit (bsc#1211836). - platform/x86: Move AMD platform drivers to separate directory (bsc#1210644). - platform/x86: amd-pmc: Add a message to print resume time info (bsc#1210644). - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Smart Trace Buffer (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Spill to DRAM STB feature (bsc#1210644). - platform/x86: amd-pmc: Avoid reading SMU version at probe time (bsc#1210644). - platform/x86: amd-pmc: Check s0i3 cycle status (bsc#1210644). - platform/x86: amd-pmc: Correct usage of SMU version (git-fixes). - platform/x86: amd-pmc: Downgrade dev_info message to dev_dbg (bsc#1210644). - platform/x86: amd-pmc: Drop CPU QoS workaround (bsc#1210644). - platform/x86: amd-pmc: Drop check for valid alarm time (bsc#1210644). - platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes). - platform/x86: amd-pmc: Fix build error unused-function (bsc#1210644). - platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes). - platform/x86: amd-pmc: Fix compilation without CONFIG_SUSPEND (bsc#1210644). - platform/x86: amd-pmc: Make amd_pmc_stb_debugfs_fops static (bsc#1210644). - platform/x86: amd-pmc: Move FCH init to first use (bsc#1210644). - platform/x86: amd-pmc: Move SMU logging setup out of init (bsc#1210644). - platform/x86: amd-pmc: Move to later in the suspend process (bsc#1210644). - platform/x86: amd-pmc: Only report STB errors when STB enabled (bsc#1210644). - platform/x86: amd-pmc: Output error codes in messages (bsc#1210644). - platform/x86: amd-pmc: Send command to dump data after clearing OS_HINT (bsc#1210644). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1210644). - platform/x86: amd-pmc: Shuffle location of amd_pmc_get_smu_version() (bsc#1210644). - platform/x86: amd-pmc: Simplify error handling and store the pci_dev in amd_pmc_dev structure (bsc#1210644). - platform/x86: amd-pmc: Validate entry into the deepest state on resume (bsc#1210644). - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd` (bsc#1210644). - platform/x86: amd-pmc: fix compilation without CONFIG_RTC_SYSTOHC_DEVICE (bsc#1210644). - platform/x86: amd-pmc: uninitialized variable in amd_pmc_s2d_init() (bsc#1210644). - platform/x86: amd: pmc: Remove __maybe_unused from amd_pmc_suspend_handler() (bsc#1210644). - platform/x86: amd: pmc: provide user message where s0ix is not supported (bsc#1210644). - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes). - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes). - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes). - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes). - platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes). - platform/x86: hp-wmi: Support touchpad on/off (git-fixes). - platform/x86: intel-uncore-freq: add Emerald Rapids support (PED-4390). - platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes). - platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes). - platform/x86: think-lmi: Certificate authentication support (bsc#1210050). - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes). - platform/x86: think-lmi: Correct NVME password handling (git-fixes). - platform/x86: think-lmi: Correct System password interface (git-fixes). - platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes). - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes). - platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050). - platform/x86: think-lmi: Opcode support (bsc#1210050). - platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050). - platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050). - platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050). - platform/x86: think-lmi: add debug_cmd (bsc#1210050). - platform/x86: think-lmi: add missing type attribute (git-fixes). - platform/x86: think-lmi: certificate support clean ups (bsc#1210050). - platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes). - platform/x86: think-lmi: only display possible_values if available (git-fixes). - platform/x86: think-lmi: use correct possible_values delimiters (git-fixes). - platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050). - platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050). - platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050). - platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050). - platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050). - platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050). - platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050). - platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050). - platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050). - platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050). - platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050). - platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050). - platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050). - platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050). - platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050). - platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050). - platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050). - platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050). - platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050). - platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes). - platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050). - platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050). - platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050). - platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050). - platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050). - platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050). - platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050). - platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050). - platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050). - platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050). - platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050). - platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050). - platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050). - platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050). - platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050). - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes). - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes). - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes). - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes). - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes). - pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes). - pm: hibernate: Do not get block device exclusively in test_resume mode (git-fixes). - pm: hibernate: Turn snapshot_test into global variable (git-fixes). - pm: hibernate: fix load_image_and_restore() error path (git-fixes). - power: supply: Fix logic checking if system is running from battery (git-fixes). - power: supply: Ratelimit no data debug output (git-fixes). - power: supply: ab8500: Fix external_power_changed race (git-fixes). - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes). - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes). - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes). - power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes). - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes). - power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes). - power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes). - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes). - power: supply: bq27xxx: expose battery data when CI=1 (git-fixes). - power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes). - power: supply: generic-adc-battery: fix unit scaling (git-fixes). - power: supply: leds: Fix blink to LED on transition (git-fixes). - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes). - power: supply: sc27xx: Fix external_power_changed race (git-fixes). - powercap: fix possible name leak in powercap_register_zone() (git-fixes). - powercap: intel_rapl: add support for Emerald Rapids (PED-4398). - powerpc/64: Always build with 128-bit long double (bsc#1194869). - powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869). - powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869). - powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729). - powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes). - powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612). - powerpc/hv-gpci: Fix hv_gpci event list (bsc#1207935). - powerpc/hv-gpci: Fix hv_gpci event list (git fixes). - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869). - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869). - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes). - powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701). - powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869). - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869). - powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869). - powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869). - powerpc/kexec_file: fix implicit decl error (bsc#1194869). - powerpc/mm: Fix false detection of read faults (bsc#1208864). - powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled (bsc#1210216 ltc#202189). - powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/purgatory: remove PGO flags (bsc#1194869). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729). - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869). - powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869). - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869). - powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869). - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869). - powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729). - powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662). - powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869). - powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662). - powerpc: declare unmodified attribute_group usages const (bsc#1207935). - powerpc: declare unmodified attribute_group usages const (git-fixes). - powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869). - printf: fix errname.c list (git-fixes). - prlimit: do_prlimit needs to have a speculation check (bsc#1209256). - pstore/ram: Add check for kstrdup (git-fixes). - pstore: Revert pmsg_lock back to a normal mutex (git-fixes). - purgatory: fix disabling debug info (git-fixes). - pwm: ab8500: Fix error code in probe() (git-fixes). - pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes). - pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes). - pwm: meson: Fix axg ao mux parents (git-fixes). - pwm: meson: Fix g12a ao clk81 name (git-fixes). - pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes). - pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes). - pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes). - qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001). - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (jsc#SLE-19001). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001). - qed/qede: Fix scheduling while atomic (git-fixes). - qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001). - qede: avoid uninitialized entries in coal_entry array (bsc#1205846). - qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001). - qede: fix interrupt coalescing configuration (bsc#1205846). - quota: Check next/prev free block number after reading from quota file (bsc#1206640). - quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: fix flow control issue of RTL8156A (git-fixes). - r8152: fix the poor throughput for 2.5G devices (git-fixes). - r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes). - r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes). - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes). - radeon: avoid double free in ci_dpm_init() (git-fixes). - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes). - rcu: Fix rcu_torture_read ftrace event (git-fixes). - rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159). - rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes) - rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes) - rdma/bnxt_re: Fix a possible memory leak (git-fixes) - rdma/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes) - rdma/bnxt_re: Fix the page_size used during the MR creation (git-fixes) - rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes) - rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes) - rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes) - rdma/bnxt_re: Remove unnecessary checks (git-fixes) - rdma/bnxt_re: Return directly without goto jumps (git-fixes) - rdma/bnxt_re: Use unique names while registering interrupts (git-fixes) - rdma/bnxt_re: wraparound mbox producer index (git-fixes) - rdma/cm: Trace icm_send_rej event before the cm state is reset (git-fixes) - rdma/cma: Allow UD qp_type to join multicast only (git-fixes) - rdma/cma: Always set static rate to 0 for RoCE (git-fixes) - rdma/core: Fix GID entry ref leak when create_ah fails (git-fixes) - rdma/core: Fix ib block iterator counter overflow (bsc#1207878). - rdma/core: Fix ib block iterator counter overflow (git-fixes) - rdma/core: Fix multiple -Warray-bounds warnings (git-fixes) - rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes) - rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes) - rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes) - rdma/efa: Fix unsupported page sizes in device (git-fixes) - rdma/hns: Fix base address table allocation (git-fixes) - rdma/hns: Fix hns_roce_table_get return value (git-fixes) - rdma/hns: Fix timeout attr in query qp for HIP08 (git-fixes) - rdma/hns: Modify the value of long message loopback slice (git-fixes) - rdma/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383). - rdma/irdma: Add ipv4 check to irdma_find_listener() (git-fixes) - rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383). - rdma/irdma: Fix Local Invalidate fencing (git-fixes) - rdma/irdma: Fix RQ completion opcode (jsc#SLE-18383). - rdma/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383). - rdma/irdma: Fix inline for multiple SGE's (jsc#SLE-18383). - rdma/irdma: Fix memory leak of PBLE objects (git-fixes) - rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes) - rdma/irdma: Increase iWARP CM default rexmit count (git-fixes) - rdma/irdma: Prevent QP use after free (git-fixes) - rdma/irdma: Remove enum irdma_status_code (jsc#SLE-18383). - rdma/irdma: Remove excess error variables (jsc#SLE-18383). - rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes) - rdma/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022). - rdma/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022). - rdma/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255). - rdma/mlx5: Create an indirect flow table for steering anchor (git-fixes) - rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes) - rdma/mlx5: Fix affinity assignment (git-fixes) - rdma/mlx5: Fix flow counter query via DEVX (git-fixes) - rdma/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes) - rdma/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes) - rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes) - rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253). - rdma/mlx5: Use correct device num_ports when modify DC (git-fixes) - rdma/mlx5: Use rdma_umem_for_each_dma_block() (git-fixes) - rdma/rdmavt: Delete unnecessary NULL check (git-fixes) - rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes) - rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes) - rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes) - rdma/rtrs: Fix the last iu->buf leak in err path (git-fixes) - rdma/rxe: Fix access checks in rxe_check_bind_mw (git-fixes) - rdma/rxe: Fix inaccurate constants in rxe_type_info (git-fixes) - rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes) - rdma/rxe: Fix mr->map double free (git-fixes) - rdma/rxe: Fix oops with zero length reads (git-fixes) - rdma/rxe: Fix packet length checks (git-fixes) - rdma/rxe: Fix ref count error in check_rkey() (git-fixes) - rdma/rxe: Fix rxe_cq_post (git-fixes) - rdma/rxe: Fix the error 'trying to register non-static key in rxe_cleanup_task' (git-fixes) - rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes) - rdma/rxe: Make responder handle RDMA Read failures (git-fixes) - rdma/rxe: Prevent faulty rkey generation (git-fixes) - rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes) - rdma/rxe: Remove tasklet call from rxe_cq.c (git-fixes) - rdma/rxe: Remove the unused variable obj (git-fixes) - rdma/rxe: Removed unused name from rxe_task struct (git-fixes) - rdma/siw: Fix potential page_array out of range access (git-fixes) - rdma/siw: Fix user page pinning accounting (git-fixes) - rdma/siw: Remove namespace check from siw_netdev_event() (git-fixes) - rdma/srp: Move large values to a new enum for gcc13 (git-fixes) - rdma/srpt: Add a check for valid 'mad_agent' pointer (git-fixes) - rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes) - rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes) - rdma/vmw_pvrdma: Remove unnecessary check on wr->opcode (git-fixes) - rdma: Handle the return code from dma_resv_wait_timeout() properly (git-fixes) - ref_tracker: use __GFP_NOFAIL more carefully (git-fixes). - regmap: Account for register length when chunking (git-fixes). - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes). - regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes). - regulator: Fix error checking for debugfs_create_dir (git-fixes). - regulator: Flag uncontrollable regulators as always_on (git-fixes). - regulator: Handle deferred clk (git-fixes). - regulator: core: Avoid lockdep reports when resolving supplies (git-fixes). - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes). - regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes). - regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes). - regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes). - regulator: core: Streamline debugfs operations (git-fixes). - regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes). - regulator: fan53555: Explicitly include bits header (git-fixes). - regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes). - regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes). - regulator: max77802: Bounds check regulator id against opmode (git-fixes). - regulator: mt6359: add read check for PMIC MT6359 (git-fixes). - regulator: pca9450: Fix BUCK2 enable_mask (git-fixes). - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes). - regulator: s5m8767: Bounds check id indexing into arrays (git-fixes). - regulator: stm32-pwr: fix of_iomap leak (git-fixes). - reiserfs: Add missing calls to reiserfs_security_free() (git-fixes). - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes). - remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes). - remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes). - remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes). - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes). - remoteproc: st: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes). - remove 'PCI: hv: Use async probing to reduce boot time' (bsc#1207185). - rethook: Reject getting a rethook if RCU is not watching (git-fixes). - rethook: fix a potential memleak in rethook_alloc() (git-fixes). - rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler (git-fixes). - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (git-fixes). - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes). - ring-buffer: Fix kernel-doc (git-fixes). - ring-buffer: Fix race while reader and writer are on the same page (git-fixes). - ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes). - ring-buffer: Sync IRQ works before buffer destruction (git-fixes). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE. - rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435) - rpm/kernel-obs-build.spec.in: Remove SLE11 cruft - rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches - rtc: allow rtc_read_alarm without read_alarm callback (git-fixes). - rtc: efi: Add wakeup support (bsc#1213116). - rtc: efi: Enable SET/GET WAKEUP services as optional (bsc#1213116). - rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116). - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes). - rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes). - rtc: pm8xxx: fix set-alarm race (git-fixes). - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes). - rtc: sun6i: Always export the internal oscillator (git-fixes). - rtmutex: Ensure that the top waiter is always woken up (git-fixes). - s390/ap: fix memory leak in ap_init_qci_info() (git-fixes). - s390/boot: simplify and fix kernel memory layout setup (bsc#1209600). - s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686). - s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes). - s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592). - s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687). - s390/dasd: fix no record found for raw_track_access (bsc#1207574). - s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes). - s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892). - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688). - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689). - s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690). - s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691). - s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692). - s390/pkey: zeroize key blobs (git-fixes bsc#1212619). - s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693). - s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes). - s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes). - s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714). - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() (git-fixes). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes) - sched/core: Avoid obvious double update_rq_clock warning (git-fixes) - sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes) - sched/core: Introduce sched_asym_cpucap_active() (git-fixes) - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes) - sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes) - sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)). - sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325). - sched/fair: sanitize vruntime of entity being placed (bsc#1203325). - sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)). - sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799). - sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes) - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes) - sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes) - sched: Fix DEBUG && !SCHEDSTATS warn (git-fixes) - sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)). - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (git-fixes). - scsi: aacraid: Allocate cmd_priv with scsicmd (git-fixes). - scsi: aic94xx: Add missing check for dma_map_single() (git-fixes). - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes). - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes). - scsi: core: Fix a procfs host directory removal regression (git-fixes). - scsi: core: Fix a source code comment (git-fixes). - scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes). - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes). - scsi: hisi_sas: Check devm_add_action() return value (git-fixes). - scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes). - scsi: hisi_sas: Revert change to limit max hw sectors for v3 HW (bsc#1210230). - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes). - scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes). - scsi: ipr: Work around fortify-string warning (git-fixes). - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes). - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes). - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: libsas: Add sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes). - scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847). - scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes). - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (bsc#1211847). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Update congestion warning notification period (bsc#1211847). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847). - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes). - scsi: megaraid_sas: Fix crash after a double completion (git-fixes). - scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (git-fixes). - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (git-fixes). - scsi: mpi3mr: Fix throttle_groups memory leak (git-fixes). - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (git-fixes). - scsi: mpi3mr: Suppress command reply debug prints (bsc#1211820). - scsi: mpt3sas: Do not print sense pool info twice (git-fixes). - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes). - scsi: mpt3sas: Fix a memory leak (git-fixes). - scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes). - scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix hang in task management (bsc#1211960). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix mem access after free (bsc#1211960). - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960). - scsi: qla2xxx: Fix task management cmd failure (bsc#1211960). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Multi-que support for TMF (bsc#1211960). - scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes). - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes). - scsi: scsi_ioctl: Validate command size (git-fixes). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Revert 'Rework asynchronous resume support' (bsc#1209092). - scsi: ses: Do not attach if enclosure has no components (git-fixes). - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes). - scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes). - scsi: smartpqi: Add controller cache flush during rmmod (bsc#1207315). - scsi: smartpqi: Add new controller PCI IDs (bsc#1207315). - scsi: smartpqi: Change sysfs raid_level attribute to N/A for controllers (bsc#1207315). - scsi: smartpqi: Change version to 2.1.20-035 (bsc#1207315). - scsi: smartpqi: Convert to host_tagset (bsc#1207315). - scsi: smartpqi: Correct device removal for multi-actuator devices (bsc#1207315). - scsi: smartpqi: Correct max LUN number (bsc#1207315). - scsi: smartpqi: Initialize feature section info (bsc#1207315). - scsi: smartpqi: Replace one-element array with flexible-array member (bsc#1207315). - scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes). - scsi: stex: Fix gcc 13 warnings (git-fixes). - scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes). - scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes). - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes). - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes). - scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes). - scsi: ufs: core: Enable link lost interrupt (git-fixes). - scsi_disk kABI: add back members (bsc#1209092). - sctp: fail if no bound addresses can be used for a given scope (bsc#1206677). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - seccomp: Move copy_seccomp() to no failure path (bsc#1210817). - sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes). - selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes). - selftests mount: Fix mount_setattr_test builds failed (git-fixes). - selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103). - selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103). - selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes). - selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232). - selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232). - selftests/powerpc: Move perror closer to its use (bsc#1206232). - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes). - selftests/resctrl: Allow ->setup() to return errors (git-fixes). - selftests/resctrl: Check for return value after write_schemata() (git-fixes). - selftests/resctrl: Extend CPU vendor detection (git-fixes). - selftests/resctrl: Move ->setup() call outside of test specific branches (git-fixes). - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes). - selftests/sgx: Add 'test_encl.elf' to TEST_FILES (git-fixes). - selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes). - selftests: Provide local define of __cpuid_count() (git-fixes). - selftests: forwarding: lib: quote the sysctl values (git-fixes). - selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: depend on SYN_COOKIES (git-fixes). - selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: sockopt: return error if wrong mark (git-fixes). - selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes). - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes). - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes). - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes). - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes). - selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes). - selftests: sigaltstack: fix -Wuninitialized (git-fixes). - selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes). - selftests: xsk: Disable IPv6 on VETH1 (git-fixes). - selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes). - selinux: do not use make's grouped targets feature yet (git-fixes). - selinux: ensure av_permissions.h is built when needed (git-fixes). - selinux: fix Makefile dependencies of flask.h (git-fixes). - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes). - serial: 8250: Add missing wakeup event reporting (git-fixes). - serial: 8250: Reinit port->pm on port specific driver unbind (git-fixes). - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes). - serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes). - serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes). - serial: 8250: omap: Fix freeing of resources on failed register (git-fixes). - serial: 8250_bcm7271: Fix arbitration handling (git-fixes). - serial: 8250_bcm7271: balance clk_enable calls (git-fixes). - serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes). - serial: 8250_dma: Fix DMA Rx rearm race (git-fixes). - serial: 8250_em: Fix UART port type (git-fixes). - serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes). - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes). - serial: 8250_fsl: fix handle_irq locking (git-fixes). - serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes). - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes). - serial: Add support for Advantech PCI-1611U card (git-fixes). - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes). - serial: atmel: do not enable IRQs prematurely (git-fixes). - serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes). - serial: fsl_lpuart: Fix comment typo (git-fixes). - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes). - serial: lantiq: add missing interrupt ack (git-fixes). - serial: qcom-geni: fix console shutdown hang (git-fixes). - serial: qcom-geni: fix enabling deactivated interrupt (git-fixes). - serial: sc16is7xx: setup GPIO controller later in probe (git-fixes). - serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes). - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes). - sfc: Change VF mac via PF as first preference if available (git-fixes). - sfc: Fix module EEPROM reporting for QSFP modules (git-fixes). - sfc: Fix use-after-free due to selftest_work (git-fixes). - sfc: correctly advertise tunneled IPv6 segmentation (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: ef10: do not overwrite offload features at NIC reset (git-fixes). - sfc: fix TX channel offset when using legacy interrupts (git-fixes). - sfc: fix considering that all channels have TX queues (git-fixes). - sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes). - sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes). - sfc: include vport_id in filter spec hash and equal() (git-fixes). - signal handling: do not use BUG_ON() for debugging (bsc#1210439). - signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861). - signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes). - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes). - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes). - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816). - signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816). - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816). - signal: Implement force_fatal_sig (git-fixes). - smb3.1.1: add new tree connect ShareFlags (bsc#1193629). - smb3: Add missing locks to protect deferred close file list (git-fixes). - smb3: Close all deferred handles of inode in case of handle lease break (bsc#1193629). - smb3: Close deferred file handles in case of handle lease break (bsc#1193629). - smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629). - smb3: display debug information better for encryption (bsc#1193629). - smb3: drop reference to cfile before sending oplock break (bsc#1193629). - smb3: fix problem remounting a share after shutdown (bsc#1193629). - smb3: fix unusable share after force unmount failure (bsc#1193629). - smb3: force unmount was failing to close deferred close files (bsc#1193629). - smb3: improve parallel reads of large files (bsc#1193629). - smb3: lower default deferred close timeout to address perf regression (bsc#1193629). - smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629). - smb3: move some common open context structs to smbfs_common (bsc#1193629). - soc/fsl/qe: fix usb.c build errors (git-fixes). - soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 (git-fixes). - soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes). - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes). - soundwire: cadence: Do not overflow the command FIFOs (git-fixes). - soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes). - soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes). - soundwire: qcom: fix storing port config out-of-bounds (git-fixes). - soundwire: qcom: gracefully handle too many ports in DT (git-fixes). - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes). - spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes). - spi: cadence-quadspi: fix suspend-resume implementations (git-fixes). - spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes). - spi: dw: Round of n_bytes to power of 2 (git-fixes). - spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes). - spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes). - spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes). - spi: lpspi: disable lpspi module irq in DMA mode (git-fixes). - spi: qup: Do not skip cleanup in remove's error path (git-fixes). - spi: qup: Request DMA before enabling clocks (git-fixes). - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes). - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (git-fixes). - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - spi: spidev: remove debug messages that access spidev->spi without locking (git-fixes). - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes). - spi: tegra210-quad: Fix combined sequence (bsc#1212584) - spi: tegra210-quad: Fix iterator outside loop (git-fixes). - spi: tegra210-quad: Fix validate combined sequence (git-fixes). - spi: tegra210-quad: Multi-cs support (bsc#1212584) - squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes). - staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes). - staging: iio: resolver: ads1210: fix config mode (git-fixes). - staging: mt7621-dts: change palmbus address to lower case (git-fixes). - staging: mt7621-dts: change some node hex addresses to lower case (git-fixes). - staging: octeon: delete my name from TODO contact (git-fixes). - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes). - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (git-fixes). - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (git-fixes). - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes). - stat: fix inconsistency between struct stat and struct compat_stat (git-fixes). - struct ci_hdrc: hide new member at end (git-fixes). - struct dwc3: mask new member (git-fixes). - struct uvc_device move flush_status new member to end (git-fixes). - sunrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes). - sunrpc: Clean up svc_deferred_class trace events (git-fixes). - sunrpc: Do not dereference xprt->snd_task if it's a cookie (git-fixes). - sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes). - sunrpc: Fix a server shutdown leak (git-fixes). - sunrpc: Fix missing release socket in rpc_sockname() (git-fixes). - sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes). - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes). - sunrpc: Fix socket waits for write buffer space (git-fixes). - sunrpc: Return true/false (not 1/0) from bool functions (git-fixes). - sunrpc: Update trace flags (git-fixes). - sunrpc: Use BIT() macro in rpc_show_xprt_state() (git-fixes). - sunrpc: ensure the matching upcall is in-flight upon downcall (git-fixes). - sunrpc: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775). - sunrpc: only free unix grouplist after RCU settles (git-fixes). - swim3: add missing major.h include (git-fixes). - swiotlb: Free tbl memory in swiotlb_exit() (jsc#PED-3259). - swiotlb: add a SWIOTLB_ANY flag to lift the low memory restriction (PED-3259). - swiotlb: avoid potential left shift overflow (PED-3259). - swiotlb: clean up some coding style and minor issues (PED-3259). - swiotlb: consolidate rounding up default_nslabs (PED-3259). - swiotlb: do not panic when the swiotlb buffer can't be allocated (PED-3259). - swiotlb: ensure a segment does not cross the area boundary (PED-3259). - swiotlb: fail map correctly with failed io_tlb_default_mem (PED-3259). - swiotlb: fix a typo (PED-3259). - swiotlb: fix passing local variable to debugfs_create_ulong() (PED-3259). - swiotlb: fix setting ->force_bounce (PED-3259). - swiotlb: fix use after free on error handling path (PED-3259). - swiotlb: make swiotlb_exit a no-op if SWIOTLB_FORCE is set (PED-3259). - swiotlb: make the swiotlb_init interface more useful (PED-3259). - swiotlb: merge swiotlb-xen initialization into swiotlb (jsc#PED-3259). - swiotlb: panic if nslabs is too small (PED-3259). - swiotlb: pass a gfp_mask argument to swiotlb_init_late (PED-3259). - swiotlb: provide swiotlb_init variants that remap the buffer (PED-3259). - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes). - swiotlb: remove a useless return in swiotlb_init (PED-3259). - swiotlb: remove swiotlb_init_with_tbl and swiotlb_init_late_with_tbl (PED-3259). - swiotlb: remove unused fields in io_tlb_mem (PED-3259). - swiotlb: rename swiotlb_late_init_with_default_size (PED-3259). - swiotlb: simplify debugfs setup (jsc#PED-3259). - swiotlb: simplify swiotlb_max_segment (PED-3259). - swiotlb: split up the global swiotlb lock (PED-3259). - swiotlb: use the right nslabs value in swiotlb_init_remap (PED-3259). - swiotlb: use the right nslabs-derived sizes in swiotlb_init_late (PED-3259). - sysctl: add a new register_sysctl_init() interface (bsc#1207328). - task_work: Decouple TIF_NOTIFY_SIGNAL and task_work (git-fixes). - task_work: Introduce task_work_pending (git-fixes). - test_firmware: Use kstrtobool() instead of strtobool() (git-fixes). - test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes). - test_firmware: prevent race conditions by a correct implementation of locking (git-fixes). - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes). - thermal/core: Remove duplicate information when an error occurs (git-fixes). - thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes). - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes). - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes). - thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes). - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes). - thermal/drivers/tsens: fix slope values for msm8939 (git-fixes). - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes). - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes). - thermal: intel: Fix unsigned comparison with less than zero (git-fixes). - thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes). - thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes). - thermal: intel: quark_dts: fix error pointer dereference (git-fixes). - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes). - thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Disable interrupt auto clear for rings (git-fixes). - thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165). - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes). - thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes). - thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes). - thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes). - timers: Prevent union confusion from unexpected (git-fixes) - tls: Skip tls_append_frag on zero copy size (git-fixes). - tools/iio/iio_utils:fix memory leak (git-fixes). - tools/virtio: compile with -pthread (git-fixes). - tools/virtio: fix the vringh test for virtio ring changes (git-fixes). - tools/virtio: fix virtio_test execution (git-fixes). - tools/virtio: initialize spinlocks in vring_test.c (git-fixes). - tools: bpftool: Remove invalid \' json escape (git-fixes). - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes). - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes). - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes). - tpm, tpm_tis: Request threaded interrupt handler (git-fixes). - tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes). - tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes). - trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes). - trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace_events_hist: add check for return value of 'create_hist_field' (git-fixes). - tracing/fprobe: Fix to check whether fprobe is registered correctly (git-fixes). - tracing/hist: Fix issue of losting command info in error_log (git-fixes). - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes). - tracing/hist: Fix wrong return value in parse_action_params() (git-fixes). - tracing/histograms: Allow variables to have some modifiers (git-fixes). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes). - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes). - tracing/probes: Handle system names with hyphens (git-fixes). - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes). - tracing: Add '__rel_loc' using trace event macros (git-fixes). - tracing: Add DYNAMIC flag for dynamic events (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - tracing: Add trace_array_puts() to write into instance (git-fixes). - tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes). - tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing: Avoid adding tracer option before update_tracer_options (git-fixes). - tracing: Check field value in hist_field_name() (git-fixes). - tracing: Do not let histogram values have some modifiers (git-fixes). - tracing: Do not use out-of-sync va_list in event printing (git-fixes). - tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes). - tracing: Fix a kmemleak false positive in tracing_map (git-fixes). - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes). - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes). - tracing: Fix issue of missing one synthetic field (git-fixes). - tracing: Fix mismatched comment in __string_len (git-fixes). - tracing: Fix permissions for the buffer_percent file (git-fixes). - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes). - tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes). - tracing: Fix race where histograms can be called before the event (git-fixes). - tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes). - tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes). - tracing: Fix warning on variable 'struct trace_array' (git-fixes). - tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes). - tracing: Free error logs of tracing instances (git-fixes). - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes). - tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350). - tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes). - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes). - tracing: Have type enum modifications copy the strings (git-fixes). - tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes). - tracing: Make splice_read available again (git-fixes). - tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes). - tracing: Make tp_printk work on syscall tracepoints (git-fixes). - tracing: Make tracepoint lockdep check actually test something (git-fixes). - tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350). - tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes). - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes). - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes). - tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes). - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes). - tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes). - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes). - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes). - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes). - tty: serial: imx: Handle RS485 DE signal active high (git-fixes). - tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes). - tty: serial: imx: fix rs485 rx after tx (git-fixes). - tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes). - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes). - tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes). - tun: annotate access to queue->trans_start (jsc#PED-370). - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes). - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - ubi: ensure that VID header offset + VID header size &lt;= alloc, size (bsc#1210584). - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328). - udf: Avoid double brelse() in udf_rename() (bsc#1213032). - udf: Check consistency of Space Bitmap Descriptor (bsc#1210771). - udf: Define EFSCORRUPTED error code (bsc#1213038). - udf: Detect system inodes linked into directory hierarchy (bsc#1213114). - udf: Discard preallocation before extending file with a hole (bsc#1213036). - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035). - udf: Do not bother merging very long extents (bsc#1213040). - udf: Do not update file length for failed writes to inline files (bsc#1213041). - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649). - udf: Fix error handling in udf_new_inode() (bsc#1213112). - udf: Fix extending file within last block (bsc#1213037). - udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034). - udf: Preserve link count of system files (bsc#1213113). - udf: Support splicing to file (bsc#1210770). - udf: Truncate added extents on failed expansion (bsc#1213039). - update internal module version number for cifs.ko (bsc#1193629). - usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes). - usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes). - usb: cdns3: Fix issue with using incorrect PCI device function (git-fixes). - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes). - usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes). - usb: cdnsp: Fixes issue with redundant Status Stage (git-fixes). - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes). - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes). - usb: chipidea: core: fix possible concurrent when switch role (git-fixes). - usb: chipidea: fix memory leak with using debugfs_lookup() (git-fixes). - usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes). - usb: chipidea: imx: avoid unnecessary probe defer (git-fixes). - usb: core: Add routines for endpoint checks in old drivers (git-fixes). - usb: core: Do not hold device lock while reading the 'descriptors' sysfs file (git-fixes). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes). - usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes). - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes). - usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes). - usb: dwc3: Align DWC3_EP_* flag macros (git-fixes). - usb: dwc3: Fix a repeated word checkpatch warning (git-fixes). - usb: dwc3: Fix a typo in field name (git-fixes). - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes). - usb: dwc3: core: Host wake up support from system suspend (git-fixes). - usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes). - usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes). - usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes). - usb: dwc3: fix memory leak with using debugfs_lookup() (git-fixes). - usb: dwc3: fix runtime pm imbalance on probe errors (git-fixes). - usb: dwc3: fix runtime pm imbalance on unbind (git-fixes). - usb: dwc3: fix use-after-free on core driver unbind (git-fixes). - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes). - usb: dwc3: gadget: Change condition for processing suspend event (git-fixes). - usb: dwc3: gadget: Delay issuing End Transfer (git-fixes). - usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes). - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes). - usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes). - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes). - usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes). - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes). - usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes). - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes). - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes). - usb: dwc3: qcom: Fix potential memory leak (git-fixes). - usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes). - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes). - usb: dwc3: qcom: clean up icc init (git-fixes). - usb: dwc3: qcom: clean up suspend callbacks (git-fixes). - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes). - usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes). - usb: dwc3: qcom: fix gadget-only builds (git-fixes). - usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes). - usb: dwc3: qcom: fix wakeup implementation (git-fixes). - usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes). - usb: dwc3: qcom: suppress unused-variable warning (git-fixes). - usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes). - usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes). - usb: ene_usb6250: Allocate enough memory for full object (git-fixes). - usb: fix memory leak with using debugfs_lookup() (git-fixes). - usb: fotg210: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes). - usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes). - usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes). - usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes). - usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes). - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes). - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes). - usb: gadget: f_hid: fix refcount leak on error path (git-fixes). - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes). - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes). - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes). - usb: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes). - usb: gadget: u_audio: do not let userspace block driver unbind (git-fixes). - usb: gadget: u_ether: Fix host MAC address case (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes). - usb: gadget: udc: do not clear gadget driver.bus (git-fixes). - usb: gadget: udc: fix NULL dereference in remove() (git-fixes). - usb: hide unused usbfs_notify_suspend/resume functions (git-fixes). - usb: host: xhci-rcar: remove leftover quirk handling (git-fixes). - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes). - usb: isp116x: fix memory leak with using debugfs_lookup() (git-fixes). - usb: isp1362: fix memory leak with using debugfs_lookup() (git-fixes). - usb: max-3421: Fix setting of I/O pins (git-fixes). - usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes). - usb: musb: Add and use inline function musb_otg_state_string (git-fixes). - usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes). - usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes). - usb: musb: remove schedule work called after flush (git-fixes). - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes). - usb: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes). - usb: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes). - usb: serial: option: add Quectel EC200U modem (git-fixes). - usb: serial: option: add Quectel EM05-G (CS) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (GR) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (RS) modem (git-fixes). - usb: serial: option: add Quectel EM05CN (SG) modem (git-fixes). - usb: serial: option: add Quectel EM05CN modem (git-fixes). - usb: serial: option: add Quectel EM061KGL series (git-fixes). - usb: serial: option: add Quectel RM500U-CN modem (git-fixes). - usb: serial: option: add Telit FE990 compositions (git-fixes). - usb: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes). - usb: serial: option: add support for VW/Skoda 'Carstick LTE' (git-fixes). - usb: sisusbvga: Add endpoint checks (git-fixes). - usb: sl811: fix memory leak with using debugfs_lookup() (git-fixes). - usb: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes). - usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes). - usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes). - usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes). - usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes). - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix multiple times discover svids error (git-fixes). - usb: typec: tcpm: fix warning when handle discover_identity message (git-fixes). - usb: typec: ucsi: Do not attempt to resume the ports before they exist (git-fixes). - usb: typec: ucsi: Do not warn on probe deferral (git-fixes). - usb: typec: ucsi: Fix command cancellation (git-fixes). - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes). - usb: ucsi: Fix ucsi->connector race (git-fixes). - usb: ucsi_acpi: Increase the command completion timeout (git-fixes). - usb: uhci: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes). - usb: uhci: fix memory leak with using debugfs_lookup() (git-fixes). - usb: usbfs: Enforce page requirements for mmap (git-fixes). - usb: usbfs: Use consistent mmap functions (git-fixes). - usb: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes). - usb: uvc: Enumerate valid values for color matching (git-fixes). - usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes). - usb: xhci: tegra: fix sleep in atomic call (git-fixes). - usrmerge: Adjust module path in the kernel sources (bsc#1212835). With the module path adjustment applied as source patch only ALP/Tumbleweed kernel built on SLE/Leap needs the path changed back to non-usrmerged. - usrmerge: Compatibility with earlier rpm (boo#1211796) - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (jsc#PED-1549). - vDPA: check virtio device features to detect MQ (jsc#PED-1549). - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (jsc#PED-1549). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: modify vcs_size() handling in vcs_read() (git-fixes). - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes). - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes). - vdpa/ifcvf: fix the calculation of queuepair (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#SLE-19253). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#PED-1549). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253). - vdpa/mlx5: Fix rule forwarding VLAN to TIR (jsc#PED-1549). - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253). - vdpa/mlx5: Fix wrong mac address deletion (jsc#PED-1549). - vdpa/mlx5: Initialize CVQ iotlb spinlock (jsc#PED-1549). - vdpa/mlx5: should not activate virtq object when suspended (jsc#PED-1549). - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (git-fixes). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#PED-1549). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253). - vdpa: Use BIT_ULL for bit operations (jsc#PED-1549). - vdpa: conditionally fill max max queue pair for stats (jsc#PED-1549). - vdpa: fix use-after-free on vp_vdpa_remove (git-fixes). - vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes). - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes). - vduse: Fix NULL pointer dereference on sysfs access (jsc#PED-1549). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (jsc#PED-1549). - vduse: avoid empty string for dev name (jsc#PED-1549). - vduse: check that offset is within bounds in get_config() (jsc#PED-1549). - vduse: fix memory corruption in vduse_dev_ioctl() (jsc#PED-1549). - vduse: prevent uninitialized memory accesses (jsc#PED-1549). - vfio/type1: prevent underflow of locked_vm via exec() (git-fixes). - vfio/type1: restore locked_vm (git-fixes). - vfio/type1: track locked_vm per dma (git-fixes). - vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642). - vfs: filename_create(): fix incorrect intent (bsc#1197534). - vfs: make sync_filesystem return errors from ->sync_fs (git-fixes). - vhost-vdpa: fix an iotlb memory leak (jsc#PED-1549). - vhost-vdpa: free iommu domain after last use during cleanup (jsc#PED-1549). - vhost/net: Clear the pending messages when the backend is removed (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (jsc#PED-1549). - vhost_vdpa: fix unmap process in no-batch mode (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253). - virt/coco/sev-guest: Add throttling awareness (bsc#1209927). - virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927). - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927). - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927). - virt/coco/sev-guest: Do some code style cleanups (bsc#1209927). - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927). - virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927). - virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449). - virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449). - virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449). - virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927). - virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449). - virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449). - virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449). - virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes). - virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes). - virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes). - virtio_net: split free_unused_bufs() (git-fixes). - virtio_net: suppress cpu stall when free_unused_bufs (git-fixes). - virtio_pci: modify ENOENT to EINVAL (git-fixes). - virtio_ring: do not update event idx on get_buf (git-fixes). - vmci: check context->notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes). - vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes). - vmxnet3: move rss code block under eop descriptor (bsc#1208212). - vmxnet3: use gro callback when UPT is enabled (bsc#1209739). - vp_vdpa: fix the crash in hot unplug with vp_vdpa (git-fixes). - w1: fix loop in w1_fini() (git-fixes). - w1: w1_therm: fix locking behavior in convert_t (git-fixes). - wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes) - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617). - watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes). - watchdog: allow building BCM7038_WDT for BCM4908 (bsc#1208619). - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes). - watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497). - watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497). - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes). - watchdog: ixp4xx: Implement restart (bsc#1208619). - watchdog: ixp4xx: Rewrite driver to use core (bsc#1208619). - watchdog: ixp4xx_wdt: Fix address space warning (bsc#1208619). - watchdog: menz069_wdt: fix watchdog initialisation (git-fixes). - watchdog: orion_wdt: support pretimeout on Armada-XP (bsc#1208619). - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes). - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes). - watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes). - wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes). - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes). - wifi: ath11k: allow system suspend to survive ath11k (git-fixes). - wifi: ath11k: fix SAC bug on peer addition with sta band migration (git-fixes). - wifi: ath11k: fix deinitialization of firmware resources (git-fixes). - wifi: ath11k: fix writing to unintended memory region (git-fixes). - wifi: ath11k: reduce the MHI timeout to 20s (bsc#1207948). - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes). - wifi: ath6kl: minor fix for allocation size (git-fixes). - wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes). - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes). - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes). - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes). - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: convert msecs to jiffies where needed (git-fixes). - wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes). - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes). - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes). - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes). - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes). - wifi: ath9k: use proper statements in conditionals (git-fixes). - wifi: ath: Silence memcpy run-time false positive warning (git-fixes). - wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes). - wifi: b43: fix incorrect __packed annotation (git-fixes). - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes). - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes). - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes). - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes). - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes). - wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes). - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes). - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes). - wifi: cfg80211: Fix use after free for wext (git-fixes). - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (git-fixes). - wifi: cfg80211: fix locking in regulatory disconnect (git-fixes). - wifi: cfg80211: fix locking in sched scan stop work (git-fixes). - wifi: cfg80211: rewrite merging of inherited elements (git-fixes). - wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes). - wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes). - wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes). - wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes). - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes). - wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes). - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes). - wifi: iwlwifi: fw: fix DBGI dump (git-fixes). - wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes). - wifi: iwlwifi: fw: move memset before early return (git-fixes). - wifi: iwlwifi: make the loop for card preparation effective (git-fixes). - wifi: iwlwifi: mvm: check firmware response size (git-fixes). - wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes). - wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes). - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes). - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes). - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (git-fixes). - wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes). - wifi: iwlwifi: mvm: initialize seq variable (git-fixes). - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes). - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes). - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes). - wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes). - wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes). - wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes). - wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes). - wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes). - wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (bsc#1209980). - wifi: mac80211: adjust scan cancel comment/check (git-fixes). - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes). - wifi: mac80211: fix min center freq offset tracing (git-fixes). - wifi: mac80211: fix qos on mesh interfaces (git-fixes). - wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes). - wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes). - wifi: mac80211: simplify chanctx allocation (git-fixes). - wifi: mt7601u: fix an integer underflow (git-fixes). - wifi: mt76: add flexible polling wait-interval support (git-fixes). - wifi: mt76: add memory barrier to SDIO queue kick (bsc#1209980). - wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes). - wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1209980). - wifi: mt76: fix 6GHz high channel not be scanned (git-fixes). - wifi: mt76: fix receiving LLC packets on mt7615/mt7915 (bsc#1209980). - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes). - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes). - wifi: mt76: mt7915: add missing of_node_put() (bsc#1209980). - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work (bsc#1209980). - wifi: mt76: mt7915: check return value before accessing free_block_num (bsc#1209980). - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() (bsc#1209980). - wifi: mt76: mt7915: expose device tree match table (git-fixes). - wifi: mt76: mt7915: fix mcs value in ht mode (bsc#1209980). - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit (git-fixes). - wifi: mt76: mt7915: fix mt7915_mac_set_timing() (bsc#1209980). - wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup (bsc#1209980). - wifi: mt76: mt7915: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() (bsc#1209980). - wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` (git-fixes). - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes). - wifi: mt76: mt7921e: fix crash in chip reset fail (bsc#1209980). - wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix rmmod crash in driver reload test (bsc#1209980). - wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes). - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (git-fixes). - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume (bsc#1209980). - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (bsc#1209980). - wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes). - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes). - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes). - wifi: mwifiex: mark OF related data as maybe unused (git-fixes). - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes). - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes). - wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes). - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes). - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes). - wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes). - wifi: rt2x00: Fix memory leak when handling surveys (git-fixes). - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes). - wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes). - wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes). - wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes). - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes). - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes). - wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes). - wifi: rtw89: Add missing check for alloc_workqueue (git-fixes). - wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes). - wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes). - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes). - wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wireguard: ratelimiter: use hrtimer in selftest (git-fixes) - workqueue: Fix hung time report of worker pools (bsc#1211044). - workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044). - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044). - workqueue: Warn when a new worker could not be created (bsc#1211044). - workqueue: Warn when a rescuer could not be created (bsc#1211044). - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769). - writeback: avoid use-after-free after removing device (bsc#1207638). - writeback: fix call of incorrect macro (bsc#1213024). - writeback: fix dereferencing NULL mapping->host on writeback_page_template (git-fixes). - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes). - x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes). - x86/ACPI/boot: Use FADT version to check support for online capable (git-fixes). - x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes). - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes). - x86/MCE/AMD: Use an u64 for bank_map (git-fixes). - x86/PAT: Have pat_enabled() properly reflect state when running on Xen (git-fixes). - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes). - x86/acpi/boot: Correct acpi_is_processor_usable() check (git-fixes). - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (git-fixes). - x86/alternative: Make debug-alternative selective (bsc#1206578). - x86/alternative: Report missing return thunk details (git-fixes). - x86/alternative: Support relocations in alternatives (bsc#1206578). - x86/amd: Use IBPB for firmware calls (git-fixes). - x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848). - x86/asm: Fix an assembler warning with current binutils (git-fixes). - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes). - x86/boot: Skip realmode init code when running as Xen PV guest (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes). - x86/bugs: Add 'unknown' reporting for MMIO Stale Data (git-fixes). - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes). - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes). - x86/bugs: Warn when 'ibrs' mitigation is selected on Enhanced IBRS parts (git-fixes). - x86/build: Avoid relocation information in final vmlinux (bsc#1187829). - x86/cpu: Add CPU model numbers for Meteor Lake (git fixes). - x86/cpu: Add Raptor Lake to Intel family (git fixes). - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes). - x86/cpu: Add new Raptor Lake CPU model number (git fixes). - x86/cpu: Add several Intel server CPU model numbers (git fixes). - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - x86/cpufeatures: Introduce x2AVIC CPUID bit (bsc#1208619). - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes). - x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes). - x86/entry: Avoid very early RET (git-fixes). - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes). - x86/entry: Do not call error_entry() for XENPV (git-fixes). - x86/entry: Move CLD to the start of the idtentry macro (git-fixes). - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes). - x86/entry: Switch the stack after error_entry() returns (git-fixes). - x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu: Cache xfeature flags from CPUID (git-fixes). - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes). - x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes). - x86/fpu: Mark init functions __init (bsc#1212448). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448). - x86/fpu: Prevent FPU state corruption (git-fixes). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes). - x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes). - x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes). - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes). - x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes). - x86/init: Initialize signal frame size late (bsc#1212448). - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes). - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes). - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes). - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes). - x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes). - x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes). - x86/microcode/AMD: Fix mixed steppings support (git-fixes). - x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes). - x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes). - x86/microcode: Add explicit CPU vendor dependency (git-fixes). - x86/microcode: Adjust late loading result reporting message (git-fixes). - x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes). - x86/microcode: Print previous version of microcode after reload (git-fixes). - x86/microcode: Rip out the OLD_INTERFACE (git-fixes). - x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes). - x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes). - x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Initialize text poking earlier (bsc#1212448). - x86/mm: Use mm_alloc() in poking_init() (bsc#1212448). - x86/mm: Use proper mask when setting PUD mapping (git-fixes). - x86/mm: fix poking_init() for Xen PV guests (git-fixes). - x86/msi: Fix msi message data shadow struct (git-fixes). - x86/msr: Add AMD CPPC MSR definitions (bsc#1212445). - x86/msr: Remove .fixup usage (git-fixes). - x86/nospec: Unwreck the RSB stuffing (git-fixes). - x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes). - x86/pat: Fix x86_has_pat_wp() (git-fixes). - x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes). - x86/perf/zhaoxin: Add stepping check for ZXC (git fixes). - x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes). - x86/perf: Default set FREEZE_ON_SMI for all (git fixes). - x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes). - x86/resctrl: Fix min_cbm_bits for AMD (git-fixes). - x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes). - x86/sgx: Fix free page accounting (git-fixes). - x86/sgx: Fix race between reclaimer and page fault handler (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/signal: Fix the value returned by strict_sas_size() (git-fixes). - x86/speculation/mmio: Print SMT warning (git-fixes). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes). - x86/static_call: Serialize __static_call_fixup() properly (git-fixes). - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes). - x86/topology: Fix duplicated core ID within a package (git-fixes). - x86/topology: Fix multiple packages shown on a single-package system (git-fixes). - x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes). - x86/tsx: Add a feature bit for TSX control MSR support (git-fixes). - x86/tsx: Disable TSX development mode at boot (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes). - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes). - x86/xen: fix secondary processor fpu initialization (bsc#1212869). - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Fix return value of __setup handlers (git-fixes). - x86: Handle idle=nomwait cmdline properly for x86_idle (bsc#1208619). - x86: Remove vendor checks from prefer_mwait_c1_over_halt (bsc#1208619). - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (git-fixes). - x86: centralize setting SWIOTLB_FORCE when guest memory encryption is enabled (jsc#PED-3259). - x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (git-fixes). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: remove cruft from &lt;asm/dma-mapping.h> (PED-3259). - xen-netfront: Fix NULL sring after live migration (git-fixes). - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes). - xen/arm: Fix race in RB-tree based P2M accounting (git-fixes) - xen/netback: do not do grant copy across page boundary (git-fixes). - xen/netback: do some code cleanup (git-fixes). - xen/netback: fix build warning (git-fixes). - xen/netback: use same error messages for same errors (git-fixes). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes). - xen/platform-pci: add missing free_irq() in error path (git-fixes). - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: convert ptag flags to unsigned (git-fixes). - xfs: do not assert fail on perag references on teardown (git-fixes). - xfs: do not leak btree cursor when insrec fails after a split (git-fixes). - xfs: estimate post-merge refcounts correctly (bsc#1208183). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix rm_offset flag handling in rmap keys (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: hoist refcount record merge predicates (bsc#1208183). - xfs: initialize the check_owner object fully (git-fixes). - xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: remove xfs_setattr_time() declaration (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes). - xfs: zero inode fork buffer at allocation (git-fixes). - xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci: Fix incorrect tracking of free space on transfer rings (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Free the command allocated for setting LPM if we return early (git-fixes). - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes). - xhci: fix debugfs register accesses while suspended (git-fixes). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes). - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes). - xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes). - zram: do not lookup algorithm in backends table (git-fixes). Important SUSE bug 1065729 SUSE bug 1109158 SUSE bug 1142685 SUSE bug 1152472 SUSE bug 1152489 SUSE bug 1155798 SUSE bug 1160435 SUSE bug 1166486 SUSE bug 1172073 SUSE bug 1174777 SUSE bug 1177529 SUSE bug 1186449 SUSE bug 1187829 SUSE bug 1189998 SUSE bug 1189999 SUSE bug 1191731 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1195175 SUSE bug 1195655 SUSE bug 1195921 SUSE bug 1196058 SUSE bug 1197534 SUSE bug 1197617 SUSE bug 1198101 SUSE bug 1198400 SUSE bug 1198438 SUSE bug 1198835 SUSE bug 1199304 SUSE bug 1199701 SUSE bug 1200054 SUSE bug 1202353 SUSE bug 1202633 SUSE bug 1203039 SUSE bug 1203200 SUSE bug 1203325 SUSE bug 1203331 SUSE bug 1203332 SUSE bug 1203693 SUSE bug 1203906 SUSE bug 1204356 SUSE bug 1204363 SUSE bug 1204662 SUSE bug 1204993 SUSE bug 1205153 SUSE bug 1205191 SUSE bug 1205205 SUSE bug 1205544 SUSE bug 1205650 SUSE bug 1205756 SUSE bug 1205758 SUSE bug 1205760 SUSE bug 1205762 SUSE bug 1205803 SUSE bug 1205846 SUSE bug 1206024 SUSE bug 1206036 SUSE bug 1206056 SUSE bug 1206057 SUSE bug 1206103 SUSE bug 1206224 SUSE bug 1206232 SUSE bug 1206340 SUSE bug 1206459 SUSE bug 1206492 SUSE bug 1206493 SUSE bug 1206552 SUSE bug 1206578 SUSE bug 1206640 SUSE bug 1206649 SUSE bug 1206677 SUSE bug 1206824 SUSE bug 1206843 SUSE bug 1206876 SUSE bug 1206877 SUSE bug 1206878 SUSE bug 1206880 SUSE bug 1206881 SUSE bug 1206882 SUSE bug 1206883 SUSE bug 1206884 SUSE bug 1206885 SUSE bug 1206886 SUSE bug 1206887 SUSE bug 1206888 SUSE bug 1206889 SUSE bug 1206890 SUSE bug 1206891 SUSE bug 1206893 SUSE bug 1206894 SUSE bug 1206935 SUSE bug 1206992 SUSE bug 1207034 SUSE bug 1207036 SUSE bug 1207050 SUSE bug 1207051 SUSE bug 1207088 SUSE bug 1207125 SUSE bug 1207149 SUSE bug 1207158 SUSE bug 1207168 SUSE bug 1207185 SUSE bug 1207270 SUSE bug 1207315 SUSE bug 1207328 SUSE bug 1207497 SUSE bug 1207500 SUSE bug 1207501 SUSE bug 1207506 SUSE bug 1207507 SUSE bug 1207521 SUSE bug 1207553 SUSE bug 1207560 SUSE bug 1207574 SUSE bug 1207588 SUSE bug 1207589 SUSE bug 1207590 SUSE bug 1207591 SUSE bug 1207592 SUSE bug 1207593 SUSE bug 1207594 SUSE bug 1207602 SUSE bug 1207603 SUSE bug 1207605 SUSE bug 1207606 SUSE bug 1207607 SUSE bug 1207608 SUSE bug 1207609 SUSE bug 1207610 SUSE bug 1207611 SUSE bug 1207612 SUSE bug 1207613 SUSE bug 1207614 SUSE bug 1207615 SUSE bug 1207616 SUSE bug 1207617 SUSE bug 1207618 SUSE bug 1207619 SUSE bug 1207620 SUSE bug 1207621 SUSE bug 1207622 SUSE bug 1207623 SUSE bug 1207624 SUSE bug 1207625 SUSE bug 1207626 SUSE bug 1207627 SUSE bug 1207628 SUSE bug 1207629 SUSE bug 1207630 SUSE bug 1207631 SUSE bug 1207632 SUSE bug 1207633 SUSE bug 1207634 SUSE bug 1207635 SUSE bug 1207636 SUSE bug 1207637 SUSE bug 1207638 SUSE bug 1207639 SUSE bug 1207640 SUSE bug 1207641 SUSE bug 1207642 SUSE bug 1207643 SUSE bug 1207644 SUSE bug 1207645 SUSE bug 1207646 SUSE bug 1207647 SUSE bug 1207648 SUSE bug 1207649 SUSE bug 1207650 SUSE bug 1207651 SUSE bug 1207652 SUSE bug 1207653 SUSE bug 1207734 SUSE bug 1207768 SUSE bug 1207769 SUSE bug 1207770 SUSE bug 1207771 SUSE bug 1207773 SUSE bug 1207795 SUSE bug 1207827 SUSE bug 1207842 SUSE bug 1207845 SUSE bug 1207875 SUSE bug 1207878 SUSE bug 1207933 SUSE bug 1207935 SUSE bug 1207948 SUSE bug 1208050 SUSE bug 1208076 SUSE bug 1208081 SUSE bug 1208105 SUSE bug 1208107 SUSE bug 1208128 SUSE bug 1208130 SUSE bug 1208149 SUSE bug 1208153 SUSE bug 1208183 SUSE bug 1208212 SUSE bug 1208219 SUSE bug 1208290 SUSE bug 1208368 SUSE bug 1208410 SUSE bug 1208420 SUSE bug 1208428 SUSE bug 1208429 SUSE bug 1208449 SUSE bug 1208534 SUSE bug 1208541 SUSE bug 1208542 SUSE bug 1208570 SUSE bug 1208588 SUSE bug 1208598 SUSE bug 1208599 SUSE bug 1208600 SUSE bug 1208601 SUSE bug 1208602 SUSE bug 1208604 SUSE bug 1208605 SUSE bug 1208607 SUSE bug 1208619 SUSE bug 1208628 SUSE bug 1208700 SUSE bug 1208741 SUSE bug 1208758 SUSE bug 1208759 SUSE bug 1208776 SUSE bug 1208777 SUSE bug 1208784 SUSE bug 1208787 SUSE bug 1208815 SUSE bug 1208816 SUSE bug 1208829 SUSE bug 1208837 SUSE bug 1208843 SUSE bug 1208845 SUSE bug 1208848 SUSE bug 1208864 SUSE bug 1208902 SUSE bug 1208948 SUSE bug 1208976 SUSE bug 1209008 SUSE bug 1209039 SUSE bug 1209052 SUSE bug 1209092 SUSE bug 1209159 SUSE bug 1209256 SUSE bug 1209258 SUSE bug 1209262 SUSE bug 1209287 SUSE bug 1209288 SUSE bug 1209290 SUSE bug 1209291 SUSE bug 1209292 SUSE bug 1209366 SUSE bug 1209367 SUSE bug 1209436 SUSE bug 1209457 SUSE bug 1209504 SUSE bug 1209532 SUSE bug 1209556 SUSE bug 1209600 SUSE bug 1209615 SUSE bug 1209635 SUSE bug 1209636 SUSE bug 1209637 SUSE bug 1209684 SUSE bug 1209687 SUSE bug 1209693 SUSE bug 1209739 SUSE bug 1209779 SUSE bug 1209780 SUSE bug 1209788 SUSE bug 1209798 SUSE bug 1209799 SUSE bug 1209804 SUSE bug 1209805 SUSE bug 1209856 SUSE bug 1209871 SUSE bug 1209927 SUSE bug 1209980 SUSE bug 1209982 SUSE bug 1209999 SUSE bug 1210034 SUSE bug 1210050 SUSE bug 1210158 SUSE bug 1210165 SUSE bug 1210202 SUSE bug 1210203 SUSE bug 1210206 SUSE bug 1210216 SUSE bug 1210230 SUSE bug 1210294 SUSE bug 1210301 SUSE bug 1210329 SUSE bug 1210335 SUSE bug 1210336 SUSE bug 1210337 SUSE bug 1210409 SUSE bug 1210439 SUSE bug 1210449 SUSE bug 1210450 SUSE bug 1210453 SUSE bug 1210454 SUSE bug 1210498 SUSE bug 1210506 SUSE bug 1210533 SUSE bug 1210551 SUSE bug 1210565 SUSE bug 1210584 SUSE bug 1210629 SUSE bug 1210644 SUSE bug 1210647 SUSE bug 1210725 SUSE bug 1210741 SUSE bug 1210762 SUSE bug 1210763 SUSE bug 1210764 SUSE bug 1210765 SUSE bug 1210766 SUSE bug 1210767 SUSE bug 1210768 SUSE bug 1210769 SUSE bug 1210770 SUSE bug 1210771 SUSE bug 1210775 SUSE bug 1210783 SUSE bug 1210791 SUSE bug 1210793 SUSE bug 1210806 SUSE bug 1210816 SUSE bug 1210817 SUSE bug 1210827 SUSE bug 1210853 SUSE bug 1210940 SUSE bug 1210943 SUSE bug 1210947 SUSE bug 1210953 SUSE bug 1210986 SUSE bug 1211014 SUSE bug 1211025 SUSE bug 1211037 SUSE bug 1211043 SUSE bug 1211044 SUSE bug 1211089 SUSE bug 1211105 SUSE bug 1211113 SUSE bug 1211131 SUSE bug 1211205 SUSE bug 1211263 SUSE bug 1211280 SUSE bug 1211281 SUSE bug 1211299 SUSE bug 1211346 SUSE bug 1211387 SUSE bug 1211400 SUSE bug 1211410 SUSE bug 1211414 SUSE bug 1211449 SUSE bug 1211465 SUSE bug 1211519 SUSE bug 1211564 SUSE bug 1211590 SUSE bug 1211592 SUSE bug 1211593 SUSE bug 1211595 SUSE bug 1211654 SUSE bug 1211686 SUSE bug 1211687 SUSE bug 1211688 SUSE bug 1211689 SUSE bug 1211690 SUSE bug 1211691 SUSE bug 1211692 SUSE bug 1211693 SUSE bug 1211714 SUSE bug 1211794 SUSE bug 1211796 SUSE bug 1211804 SUSE bug 1211807 SUSE bug 1211808 SUSE bug 1211820 SUSE bug 1211836 SUSE bug 1211847 SUSE bug 1211852 SUSE bug 1211855 SUSE bug 1211960 SUSE bug 1212051 SUSE bug 1212129 SUSE bug 1212154 SUSE bug 1212155 SUSE bug 1212158 SUSE bug 1212265 SUSE bug 1212350 SUSE bug 1212445 SUSE bug 1212448 SUSE bug 1212456 SUSE bug 1212494 SUSE bug 1212495 SUSE bug 1212504 SUSE bug 1212513 SUSE bug 1212540 SUSE bug 1212556 SUSE bug 1212561 SUSE bug 1212563 SUSE bug 1212564 SUSE bug 1212584 SUSE bug 1212592 SUSE bug 1212603 SUSE bug 1212605 SUSE bug 1212606 SUSE bug 1212619 SUSE bug 1212685 SUSE bug 1212701 SUSE bug 1212741 SUSE bug 1212835 SUSE bug 1212838 SUSE bug 1212842 SUSE bug 1212848 SUSE bug 1212861 SUSE bug 1212869 SUSE bug 1212892 SUSE bug 1212961 SUSE bug 1213010 SUSE bug 1213011 SUSE bug 1213012 SUSE bug 1213013 SUSE bug 1213014 SUSE bug 1213015 SUSE bug 1213016 SUSE bug 1213017 SUSE bug 1213018 SUSE bug 1213019 SUSE bug 1213020 SUSE bug 1213021 SUSE bug 1213024 SUSE bug 1213025 SUSE bug 1213032 SUSE bug 1213034 SUSE bug 1213035 SUSE bug 1213036 SUSE bug 1213037 SUSE bug 1213038 SUSE bug 1213039 SUSE bug 1213040 SUSE bug 1213041 SUSE bug 1213087 SUSE bug 1213088 SUSE bug 1213089 SUSE bug 1213090 SUSE bug 1213092 SUSE bug 1213093 SUSE bug 1213094 SUSE bug 1213095 SUSE bug 1213096 SUSE bug 1213098 SUSE bug 1213099 SUSE bug 1213100 SUSE bug 1213102 SUSE bug 1213103 SUSE bug 1213104 SUSE bug 1213105 SUSE bug 1213106 SUSE bug 1213107 SUSE bug 1213108 SUSE bug 1213109 SUSE bug 1213110 SUSE bug 1213111 SUSE bug 1213112 SUSE bug 1213113 SUSE bug 1213114 SUSE bug 1213116 SUSE bug 1213134 CVE-2022-36280 CVE-2022-38096 CVE-2022-4269 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2022-4744 CVE-2023-0045 CVE-2023-0122 CVE-2023-0179 CVE-2023-0394 CVE-2023-0461 CVE-2023-0469 CVE-2023-0590 CVE-2023-0597 CVE-2023-1075 CVE-2023-1076 CVE-2023-1077 CVE-2023-1079 CVE-2023-1095 CVE-2023-1118 CVE-2023-1249 CVE-2023-1382 CVE-2023-1513 CVE-2023-1582 CVE-2023-1583 CVE-2023-1611 CVE-2023-1637 CVE-2023-1652 CVE-2023-1670 CVE-2023-1829 CVE-2023-1838 CVE-2023-1855 CVE-2023-1989 CVE-2023-1998 CVE-2023-2002 CVE-2023-21102 CVE-2023-21106 CVE-2023-2124 CVE-2023-2156 CVE-2023-2162 CVE-2023-2176 CVE-2023-2235 CVE-2023-2269 CVE-2023-22998 CVE-2023-23000 CVE-2023-23001 CVE-2023-23004 CVE-2023-23006 CVE-2023-2430 CVE-2023-2483 CVE-2023-25012 CVE-2023-2513 CVE-2023-26545 CVE-2023-28327 CVE-2023-28410 CVE-2023-28464 CVE-2023-28866 CVE-2023-3006 CVE-2023-30456 CVE-2023-30772 CVE-2023-3090 CVE-2023-31084 CVE-2023-3111 CVE-2023-3141 CVE-2023-31436 CVE-2023-3161 CVE-2023-3212 CVE-2023-3220 CVE-2023-32233 CVE-2023-33288 CVE-2023-3357 CVE-2023-3358 CVE-2023-3389 CVE-2023-33951 CVE-2023-33952 CVE-2023-35788 CVE-2023-35823 CVE-2023-35828 CVE-2023-35829 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - - CVE-2023-33952: Fixed a vmwgfx Driver Double Free Local Privilege Escalation Vulnerability (bsc#1212348). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212509). - CVE-2023-2235: Fixed an use-after-free in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210987). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566). Important SUSE bug 1210566 SUSE bug 1210987 SUSE bug 1212348 SUSE bug 1212509 CVE-2023-2002 CVE-2023-2235 CVE-2023-33952 CVE-2023-35788 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - - CVE-2023-33952: Fixed a vmwgfx Driver Double Free Local Privilege Escalation Vulnerability (bsc#1212348). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212509). - CVE-2023-2235: Fixed an use-after-free in the Performance Events system can be exploited to achieve local privilege escalation (bsc#1210987). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210566). Important SUSE bug 1210566 SUSE bug 1210987 SUSE bug 1212348 SUSE bug 1212509 CVE-2023-2002 CVE-2023-2235 CVE-2023-33952 CVE-2023-35788 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). The following non-security bugs were fixed: - Dropped patch that caused issues with k3s (bsc#1213705). - ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes). - ASoC: SOF: topology: Fix logic for copying tuples (git-fixes). - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes). - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes). - Bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes). - Bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes). - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - Bluetooth: fix use-bdaddr-property quirk (git-fixes). - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - Bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes). - Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758) - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525). - PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes) - Revert 'drm/i915: Disable DSB usage for now' (git-fixes). - USB: dwc2: Fix some error handling paths (git-fixes). - USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). - USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). - USB: typec: Fix fast_role_swap_current show function (git-fixes). - Update config and supported.conf files due to renaming. - acpi: Fix suspend with Xen PV (git-fixes). - adreno: Shutdown the GPU properly (git-fixes). - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes) - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes) - arm64: vdso: Pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - can: bcm: Fix UAF in bcm_proc_show() (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in DebugData (bsc#1193629). - cifs: print client_guid in DebugData (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: tegra194: Fix module loading (git-fixes). - devlink: fix kernel-doc notation warnings (git-fixes). - dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: Add Z8 allow states to z-state support list (git-fixes). - drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes). - drm/amd/display: Add minimum Z8 residency debug option (git-fixes). - drm/amd/display: Add missing WA and MCLK validation (git-fixes). - drm/amd/display: Change default Z8 watermark values (git-fixes). - drm/amd/display: Correct DML calculation to align HW formula (git-fixes). - drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes). - drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes). - drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes). - drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes). - drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes). - drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes). - drm/amd/display: Fix Z8 support configurations (git-fixes). - drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes). - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: Have Payload Properly Created After Resume (git-fixes). - drm/amd/display: Lowering min Z8 residency time (git-fixes). - drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: Refactor eDP PSR codes (git-fixes). - drm/amd/display: Remove FPU guards from the DML folder (git-fixes). - drm/amd/display: Remove optimization for VRR updates (git-fixes). - drm/amd/display: Remove stutter only configurations (git-fixes). - drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes). - drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes). - drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes). - drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes). - drm/amd/pm: resolve reboot exception for si oland (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (git-fixes). - drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (git-fixes). - drm/amd/pm: workaround for compute workload type on some skus (git-fixes). - drm/amd: Add a new helper for loading/validating microcode (git-fixes). - drm/amd: Do not allow s0ix on APUs older than Raven (git-fixes). - drm/amd: Load MES microcode during early_init (git-fixes). - drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes). - drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (git-fixes). - drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes). - drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes). - drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes). - drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes). - drm/amdgpu/mes11: enable reg active poll (git-fixes). - drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes (git-fixes). - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes). - drm/amdgpu: Do not set struct drm_driver.output_poll_changed (git-fixes). - drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes). - drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes). - drm/amdgpu: Fix sdma v4 sw fini error (git-fixes). - drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes). - drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs (git-fixes). - drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes). - drm/amdgpu: change reserved vram info print (git-fixes). - drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes). - drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes). - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes). - drm/amdgpu: refine get gpu clock counter method (git-fixes). - drm/amdgpu: remove deprecated MES version vars (git-fixes). - drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes). - drm/amdgpu: set gfx9 onwards APU atomics support to be true (git-fixes). - drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes). - drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes). - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() (git-fixes). - drm/bridge: anx7625: Prevent endless probe loop (git-fixes). - drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes). - drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes). - drm/client: Fix memory leak in drm_client_target_cloned (git-fixes). - drm/display/dp_mst: Fix payload addition on a disconnected sink (git-fixes). - drm/display: Do not block HDR_OUTPUT_METADATA on unknown EOTF (git-fixes). - drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes). - drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes). - drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage (git-fixes). - drm/etnaviv: move idle mapping reaping into separate function (git-fixes). - drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes). - drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs (bsc#1213493). - drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes). - drm/i915/gt: Cleanup partial engine discovery failures (git-fixes). - drm/i915/guc: Add error-capture init warnings when needed (git-fixes). - drm/i915/guc: Fix missing ecodes (git-fixes). - drm/i915/guc: Limit scheduling properties to avoid overflow (git-fixes). - drm/i915/guc: Rename GuC register state capture node to be more obvious (git-fixes). - drm/i915/mtl: update scaler source and destination limits for MTL (git-fixes). - drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs (git-fixes). - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes). - drm/i915/tc: Fix TC port link ref init for DP MST during HW readout (git-fixes). - drm/i915: Allow panel fixed modes to have differing sync polarities (git-fixes). - drm/i915: Check pipe source size when using skl+ scalers (git-fixes). - drm/i915: Do panel VBT init early if the VBT declares an explicit panel type (git-fixes). - drm/i915: Fix TypeC mode initialization during system resume (git-fixes). - drm/i915: Fix a memory leak with reused mmap_offset (git-fixes). - drm/i915: Fix negative value passed as remaining time (git-fixes). - drm/i915: Fix one wrong caching mode enum usage (git-fixes). - drm/i915: Introduce intel_panel_init_alloc() (git-fixes). - drm/i915: Never return 0 if not all requests retired (git-fixes). - drm/i915: Populate encoder->devdata for DSI on icl+ (git-fixes). - drm/i915: Print return value on error (git-fixes). - drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes). - drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (git-fixes). - drm/msm/a5xx: really check for A510 in a5xx_gpu_init (git-fixes). - drm/msm/adreno: Simplify read64/write64 helpers (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: Add DSC hardware blocks to register snapshot (git-fixes). - drm/msm/dpu: Assign missing writeback log_mask (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes). - drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register (git-fixes). - drm/msm/hdmi: use devres helper for runtime PM management (git-fixes). - drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable (git-fixes). - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes). - drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes). - drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes). - drm/ttm: Do not leak a resource on swapout move error (git-fixes). - drm/virtio: Fix memory leak in virtio_gpu_object_create() (git-fixes). - drm/virtio: Simplify error handling of virtio_gpu_object_create() (git-fixes). - drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable (git-fixes). - drm/vmwgfx: Remove ttm object hashtable (git-fixes). - drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes). - drm/vmwgfx: Write the driver id registers (git-fixes). - drm: Add fixed-point helper to get rounded integer values (git-fixes). - drm: Add missing DP DSC extended capability definitions (git-fixes). - drm: Optimize drm buddy top-down allocation method (git-fixes). - drm: buddy_allocator: Fix buddy allocator init on 32-bit systems (git-fixes). - drm: panel-orientation-quirks: Add quirk for DynaBook K50 (git-fixes). - drm: rcar-du: Add quirk for H3 ES1.x pclk workaround (git-fixes). - drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes). - drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes). - fuse: ioctl: translate ENOSYS in outarg (bsc#1213524). - fuse: revalidate: do not invalidate if interrupted (bsc#1213523). - i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226). - irqchip/gic-v3: Claim iomem resources (bsc#1213533) - irqchip/gicv3: Handle resource request failure consistently (bsc#1213533) - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533) - kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243). - kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers - kabi/severities: ignore kABI of i915 module It's exported only for its sub-module, not really used by externals - kabi/severities: ignore kABI of vmwgfx The driver exports a function unnecessarily without used by anyone else. Ignore the kABI changes. - memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905). - net: mana: Add support for vlan tagging (bsc#1212301). - net: phy: prevent stale pointer dereference in phy_init() (git-fixes). - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (git-fixes). - net: qrtr: start MHI channel after endpoit creation (git-fixes). - nilfs2: reject devices with insufficient block count (git-fixes). - ocfs2: Switch to security_inode_init_security() (git-fixes). - ocfs2: check new file size on fallocate call (git-fixes). - ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes). - perf/x86/amd/core: Always clear status for idx (bsc#1213233). - pie: fix kernel-doc notation warning (git-fixes). - powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869). - powerpc/64s: Fix VAS mm use after free (bsc#1194869). - powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869). - powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869). - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869). - powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869). - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes). - powerpc/mm: Switch obsolete dssall to .long (bsc#1194869). - powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869). - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869). - powerpc/prom_init: Fix kernel config grep (bsc#1194869). - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (jsc#PED-542 git-fixes). - powerpc/secvar: fix refcount leak in format_show() (bsc#1194869). - powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869). - powerpc: clean vdso32 and vdso64 directories (bsc#1194869). - powerpc: define get_cycles macro for arch-override (bsc#1194869). - powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869). - rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*. - rsi: remove kernel-doc comment marker (git-fixes). - s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259). - s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258). - s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263). - s390/pci: clean up left over special treatment for function zero (bsc#1212525). - s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525). - s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525). - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252). - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt; 2.36 (git-fixes bsc#1213264). - s390: discard .interp section (git-fixes bsc#1213247). - security: keys: Modify mismatched function name (git-fixes). - selftests/ir: fix build with ancient kernel headers (git-fixes). - selftests: cgroup: fix unsigned comparison with less than zero (git-fixes). - selftests: forwarding: Fix packet matching in mirroring selftests (git-fixes). - selftests: tc: add 'ct' action kconfig dep (git-fixes). - selftests: tc: add ConnTrack procfs kconfig (git-fixes). - selftests: tc: set timeout to 15 minutes (git-fixes). - signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869). - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869). - smb3: do not reserve too many oplock credits (bsc#1193629). - smb3: missing null check in SMB2_change_notify (bsc#1193629). - smb: client: fix broken file attrs with nodfs mounts (bsc#1193629). - smb: client: fix missed ses refcounting (git-fixes). - smb: client: fix parsing of source mount option (bsc#1193629). - smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629). - smb: client: fix warning in CIFSFindFirst() (bsc#1193629). - smb: client: fix warning in CIFSFindNext() (bsc#1193629). - smb: client: fix warning in cifs_match_super() (bsc#1193629). - smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629). - smb: client: fix warning in generic_ip_connect() (bsc#1193629). - smb: client: improve DFS mount check (bsc#1193629). - smb: client: remove redundant pointer 'server' (bsc#1193629). - smb: delete an unnecessary statement (bsc#1193629). - smb: move client and server files to common directory fs/smb (bsc#1193629). - smb: remove obsolete comment (bsc#1193629). - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (git-fixes). - soundwire: cadence: Drain the RX FIFO after an IO timeout (git-fixes). - soundwire: stream: Add missing clear of alloc_slave_rt (git-fixes). - spi: bcm63xx: fix max prepend length (git-fixes). - swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes). - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes). - wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes). - wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart (git-fixes). - wifi: ath11k: Add missing check for ioremap (git-fixes). - wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes). - x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes). - x86/platform/uv: Add platform resolving #defines for misc GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Fix printed information in calc_mmioh_map (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Remove remaining BUG_ON() and BUG() calls (bsc#1212256 jsc#PED-4718). - x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Update UV platform code for SNC (bsc#1212256 jsc#PED-4718). - x86/platform/uv: When searching for minimums, start at INT_MAX not 99999 (bsc#1212256 jsc#PED-4718). - x86: Fix .brk attribute in linker script (git-fixes). - xfs: clean up the rtbitmap fsmap backend (git-fixes). - xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes). - xfs: do not reverse order of items in bulk AIL insertion (git-fixes). - xfs: fix getfsmap reporting past the last rt extent (git-fixes). - xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes). - xfs: fix interval filtering in multi-step fsmap queries (git-fixes). - xfs: fix logdev fsmap query result filtering (git-fixes). - xfs: fix off-by-one error when the last rt extent is in use (git-fixes). - xfs: fix uninitialized variable access (git-fixes). - xfs: make fsmap backend function key parameters const (git-fixes). - xfs: make the record pointer passed to query_range functions const (git-fixes). - xfs: pass explicit mount pointer to rtalloc query functions (git-fixes). Important SUSE bug 1150305 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1207894 SUSE bug 1208788 SUSE bug 1211243 SUSE bug 1211867 SUSE bug 1212256 SUSE bug 1212301 SUSE bug 1212525 SUSE bug 1212846 SUSE bug 1212905 SUSE bug 1213059 SUSE bug 1213061 SUSE bug 1213205 SUSE bug 1213206 SUSE bug 1213226 SUSE bug 1213233 SUSE bug 1213245 SUSE bug 1213247 SUSE bug 1213252 SUSE bug 1213258 SUSE bug 1213259 SUSE bug 1213263 SUSE bug 1213264 SUSE bug 1213286 SUSE bug 1213493 SUSE bug 1213523 SUSE bug 1213524 SUSE bug 1213533 SUSE bug 1213543 SUSE bug 1213705 CVE-2023-20593 CVE-2023-2985 CVE-2023-3117 CVE-2023-31248 CVE-2023-3390 CVE-2023-35001 CVE-2023-3812 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627). - CVE-2023-2430: Fixed amissing lock for IOPOLL in io_cqring_event_overflow() in io_uring.c that could allow a privileged user to cause a denial of service (bsc#1211014). - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-38409: Fixed a use-after-free in drivers/video/fbdev/core/fbcon.c (bsc#1213417). - CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC (bsc#1213601). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812). The following non-security bugs were fixed: - acpi/iort: remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes). - acpi: cppc: add acpi disabled check to acpi_cpc_valid() (bsc#1212445). - acpi: cppc: add definition for undefined fadt preferred pm profile value (bsc#1212445). - acpi: fix suspend with xen pv (git-fixes). - acpi: utils: fix acpi_evaluate_dsm_typed() redefinition error (git-fixes). - add module_firmware() for firmware_tg357766 (git-fixes). - adreno: shutdown the gpu properly (git-fixes). - afs: adjust ack interpretation to try and cope with nat (git-fixes). - afs: fix access after dec in put functions (git-fixes). - afs: fix afs_getattr() to refetch file status if callback break occurred (git-fixes). - afs: fix dynamic root getattr (git-fixes). - afs: fix fileserver probe rtt handling (git-fixes). - afs: fix infinite loop found by xfstest generic/676 (git-fixes). - afs: fix lost servers_outstanding count (git-fixes). - afs: fix server->active leak in afs_put_server (git-fixes). - afs: fix setting of mtime when creating a file/dir/symlink (git-fixes). - afs: fix updating of i_size with dv jump from server (git-fixes). - afs: fix vlserver probe rtt handling (git-fixes). - afs: return -eagain, not -eremoteio, when a file already locked (git-fixes). - afs: use refcount_t rather than atomic_t (git-fixes). - afs: use the operation issue time instead of the reply time for callbacks (git-fixes). - alsa: ac97: fix possible null dereference in snd_ac97_mixer (git-fixes). - alsa: emu10k1: roll up loops in dsp setup code for audigy (git-fixes). - alsa: fireface: make read-only const array for model names static (git-fixes). - alsa: hda/realtek - remove 3k pull low procedure (git-fixes). - alsa: hda/realtek: add quirk for asus rog g614jx (git-fixes). - alsa: hda/realtek: add quirk for asus rog ga402x (git-fixes). - alsa: hda/realtek: add quirk for asus rog gx650p (git-fixes). - alsa: hda/realtek: add quirk for asus rog gz301v (git-fixes). - alsa: hda/realtek: add quirk for clevo npx0snx (git-fixes). - alsa: hda/realtek: add quirk for clevo ns70au (git-fixes). - alsa: hda/realtek: add quirks for rog ally cs35l41 audio (git-fixes). - alsa: hda/realtek: add quirks for unis h3c desktop b760 & q760 (git-fixes). - alsa: hda/realtek: add support for dell oasis 13/14/16 laptops (git-fixes). - alsa: hda/realtek: amend g634 quirk to enable rear speakers (git-fixes). - alsa: hda/realtek: enable mute led on hp laptop 15s-eq2xxx (git-fixes). - alsa: hda/realtek: enable mute/micmute leds and limit mic boost on elitebook (git-fixes). - alsa: hda/realtek: fix generic fixup definition for cs35l41 amp (git-fixes). - alsa: hda/realtek: support asus g713pv laptop (git-fixes). - alsa: hda/realtek: whitespace fix (git-fixes). - alsa: hda/relatek: enable mute led on hp 250 g8 (git-fixes). - alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes). - alsa: hda: lnl: add hd audio pci id (git-fixes). - alsa: jack: fix mutex call in snd_jack_report() (git-fixes). - alsa: oxfw: make read-only const array models static (git-fixes). - alsa: pcm: fix potential data race at pcm memory allocation helpers (git-fixes). - alsa: usb-audio: add fixed_rate quirk for jbl quantum610 wireless (git-fixes). - alsa: usb-audio: add new quirk fixed_rate for jbl quantum810 wireless (git-fixes). - alsa: usb-audio: add quirk for microsoft modern wireless headset (bsc#1207129). - alsa: usb-audio: always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes). - alsa: usb-audio: apply mutex around snd_usb_endpoint_set_params() (git-fixes). - alsa: usb-audio: avoid superfluous endpoint setup (git-fixes). - alsa: usb-audio: avoid unnecessary interface change at ep close (git-fixes). - alsa: usb-audio: clear fixed clock rate at closing ep (git-fixes). - alsa: usb-audio: correct the return code from snd_usb_endpoint_set_params() (git-fixes). - alsa: usb-audio: drop superfluous interface setup at parsing (git-fixes). - alsa: usb-audio: fix possible null pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes). - alsa: usb-audio: fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes). - alsa: usb-audio: more refactoring of hw constraint rules (git-fixes). - alsa: usb-audio: properly refcounting clock rate (git-fixes). - alsa: usb-audio: rate limit usb_set_interface error reporting (git-fixes). - alsa: usb-audio: refcount multiple accesses on the single clock (git-fixes). - alsa: usb-audio: split endpoint setups for hw_params and prepare (take#2) (git-fixes). - alsa: usb-audio: update for native dsd support quirks (git-fixes). - alsa: usb-audio: use atomic_try_cmpxchg in ep_state_update (git-fixes). - alsa: usb-audio: workaround for xrun at prepare (git-fixes). - amd-pstate: fix amd_pstate mode switch (git-fixes). - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes). - apparmor: fix missing error check for rhashtable_insert_fast (git-fixes). - arm64/mm: mark private vm_fault_x defines as vm_fault_t (git-fixes) - arm64: add missing set/way cmo encodings (git-fixes). - arm64: dts: microchip: sparx5: do not use psci on reference boards (git-fixes) - arm64: vdso: pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - arm: dts: fix erroneous ads touchscreen polarities (git-fixes). - asoc: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes). - asoc: atmel: fix the 8k sample parameter in i2sc master (git-fixes). - asoc: codecs: es8316: fix dmic config (git-fixes). - asoc: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes). - asoc: codecs: wcd934x: fix resource leaks on component remove (git-fixes). - asoc: codecs: wcd938x: fix codec initialisation race (git-fixes). - asoc: codecs: wcd938x: fix db range for hphl and hphr (git-fixes). - asoc: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes). - asoc: codecs: wcd938x: fix soundwire initialisation race (git-fixes). - asoc: da7219: check for failure reading aad irq events (git-fixes). - asoc: da7219: flush pending aad irq when suspending (git-fixes). - asoc: es8316: do not set rate constraints for unsupported mclks (git-fixes). - asoc: es8316: increment max value for alc capture target volume control (git-fixes). - asoc: fsl_sai: disable bit clock with transmitter (git-fixes). - asoc: fsl_spdif: silence output on stop (git-fixes). - asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes). - asoc: intel: sof_sdw: remove sof_sdw_tgl_hdmi for meteorlake devices (git-fixes). - asoc: mediatek: mt8173: fix irq error path (git-fixes). - asoc: nau8824: add quirk to active-high jack-detect (git-fixes). - asoc: rt5640: fix sleep in atomic context (git-fixes). - asoc: rt5682-sdw: fix for jd event handling in clockstop mode0 (git-fixes). - asoc: rt711-sdca: fix for jd event handling in clockstop mode0 (git-fixes). - asoc: rt711: fix for jd event handling in clockstop mode0 (git-fixes). - asoc: simple-card: add missing of_node_put() in case of error (git-fixes). - asoc: sof: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes). - asoc: sof: topology: fix logic for copying tuples (git-fixes). - asoc: tegra: fix adx byte map (git-fixes). - asoc: tegra: fix amx byte map (git-fixes). - asoc: wm8904: fill the cache for wm8904_adc_test_0 register (git-fixes). - ata: pata_ns87415: mark ns87560_tf_read static (git-fixes). - block, bfq: fix division by zero error on zero wsum (bsc#1213653). - block: fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes). - bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - bluetooth: fix use-bdaddr-property quirk (git-fixes). - bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - bluetooth: hci_sync: avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - bluetooth: iso: consider right cis when removing cig at cleanup (git-fixes). - bluetooth: iso: fix cig auto-allocation to select configurable cig (git-fixes). - bluetooth: iso: fix iso_conn related locking and validity issues (git-fixes). - bluetooth: iso: use hci_sync for setting cig parameters (git-fixes). - bluetooth: use rcu for hci_conn_params and iterate safely in hci_sync (git-fixes). - bonding: fix negative jump label count on nested bonding (bsc#1212685). - bus: fsl-mc: fsl-mc-allocator: drop a write-only variable (git-fixes). - bus: mhi: add new interfaces to handle mhi channels directly (bsc#1207948). - bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948). - bus: ti-sysc: fix dispc quirk masking bool variables (git-fixes). - can: bcm: fix uaf in bcm_proc_show() (git-fixes). - can: gs_usb: gs_can_close(): add missing set of can state to can_state_stopped (git-fixes). - can: isotp: isotp_sendmsg(): fix return error fix on tx path (git-fixes). - can: kvaser_pciefd: remove handler for unused kvaser_pciefd_pack_type_eframe_ack (git-fixes). - can: kvaser_pciefd: remove useless write to interrupt register (git-fixes). - can: length: fix bitstuffing count (git-fixes). - can: length: fix description of the rrs field (git-fixes). - can: length: make header self contained (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in debugdata (bsc#1193629). - cifs: print client_guid in debugdata (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - clk: cdce925: check return value of kasprintf() (git-fixes). - clk: fix memory leak in devm_clk_notifier_register() (git-fixes). - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes). - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes). - clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes). - clk: keystone: sci-clk: check return value of kasprintf() (git-fixes). - clk: qcom: camcc-sc7180: add parent dependency to all camera gdscs (git-fixes). - clk: qcom: gcc-ipq6018: use floor ops for sdcc clocks (git-fixes). - clk: samsung: add exynos4212 compatible to clkout driver (git-fixes). - clk: si5341: check return value of {devm_}kasprintf() (git-fixes). - clk: si5341: free unused memory on probe failure (git-fixes). - clk: si5341: return error if one synth clock registration fails (git-fixes). - clk: tegra: tegra124-emc: fix potential memory leak (git-fixes). - clk: ti: clkctrl: check return value of kasprintf() (git-fixes). - clk: vc5: check memory returned by kasprintf() (git-fixes). - coda: avoid partial allocation of sig_inputargs (git-fixes). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: amd-pstate: add ->fast_switch() callback (bsc#1212445). - cpufreq: amd-pstate: add amd p-state frequencies attributes (bsc#1212445). - cpufreq: amd-pstate: add amd p-state performance attributes (bsc#1212445). - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445). - cpufreq: amd-pstate: add boost mode support for amd p-state (bsc#1212445). - cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445). - cpufreq: amd-pstate: add fast switch function for amd p-state (bsc#1212445). - cpufreq: amd-pstate: add guided autonomous mode (bsc#1212445). - cpufreq: amd-pstate: add guided mode control support via sysfs (bsc#1212445). - cpufreq: amd-pstate: add more tracepoint for amd p-state module (bsc#1212445). - cpufreq: amd-pstate: add resume and suspend callbacks (bsc#1212445). - cpufreq: amd-pstate: add trace for amd p-state module (bsc#1212445). - cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445). - cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445). - cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445). - cpufreq: amd-pstate: cpufreq: amd-pstate: reset msr_amd_perf_ctl register at init (bsc#1212445). - cpufreq: amd-pstate: expose struct amd_cpudata (bsc#1212445). - cpufreq: amd-pstate: fix initial highest_perf value (bsc#1212445). - cpufreq: amd-pstate: fix invalid write to msr_amd_cppc_req (bsc#1212445). - cpufreq: amd-pstate: fix kconfig dependencies for amd p-state (bsc#1212445). - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445). - cpufreq: amd-pstate: fix struct amd_cpudata kernel-doc comment (bsc#1212445). - cpufreq: amd-pstate: fix white-space (bsc#1212445). - cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445). - cpufreq: amd-pstate: implement pstate epp support for the amd processors (bsc#1212445). - cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445). - cpufreq: amd-pstate: introduce a new amd p-state driver to support future processors (bsc#1212445). - cpufreq: amd-pstate: introduce the support for the processors with shared memory solution (bsc#1212445). - cpufreq: amd-pstate: let user know amd-pstate is disabled (bsc#1212445). - cpufreq: amd-pstate: make amd-pstate epp driver name hyphenated (bsc#1212445). - cpufreq: amd-pstate: make varaiable mode_state_machine static (bsc#1212445). - cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (bsc#1212445). - cpufreq: amd-pstate: remove fast_switch_possible flag from active driver (bsc#1212445). - cpufreq: amd-pstate: remove module_license in non-modules (bsc#1212445). - cpufreq: amd-pstate: set a fallback policy based on preferred_profile (bsc#1212445). - cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445). - cpufreq: amd-pstate: update policy->cur in amd_pstate_adjust_perf() (bsc#1212445). - cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445). - cpufreq: amd-pstate: write cppc enable bit per-socket (bsc#1212445). - cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445). - cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445). - cpufreq: tegra194: fix module loading (git-fixes). - crypto: kpp - add helper to set reqsize (git-fixes). - crypto: marvell/cesa - fix type mismatch warning (git-fixes). - crypto: nx - fix build warnings when debug_fs is not enabled (git-fixes). - crypto: qat - use helper to set reqsize (git-fixes). - delete suse/memcg-drop-kmem-limit_in_bytes. drop the patch in order to fix bsc#1213705. - devlink: fix kernel-doc notation warnings (git-fixes). - dlm: fix missing lkb refcount handling (git-fixes). - dlm: fix plock invalid read (git-fixes). - dma-buf/dma-resv: stop leaking on krealloc() failure (git-fixes). - docs: networking: update codeaurora references for rmnet (git-fixes). - documentation: abi: sysfs-class-net-qmi: pass_through contact update (git-fixes). - documentation: bonding: fix the doc of peer_notif_delay (git-fixes). - documentation: cpufreq: amd-pstate: move amd_pstate param to alphabetical order (bsc#1212445). - documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes). - documentation: timers: hrtimers: make hybrid union historical (git-fixes). - drivers: meson: secure-pwrc: always enable dma domain (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: add a null pointer check (bsc#1212848, bsc#1212961). - drm/amd/display: add debug option to skip psr crtc disable (git-fixes). - drm/amd/display: add logging for display mall refresh setting (git-fixes). - drm/amd/display: add minimal pipe split transition state (git-fixes). - drm/amd/display: add minimum z8 residency debug option (git-fixes). - drm/amd/display: add missing wa and mclk validation (git-fixes). - drm/amd/display: add monitor specific edid quirk (git-fixes). - drm/amd/display: add polling method to handle mst reply packet (bsc#1213578). - drm/amd/display: add wrapper to call planes and stream update (git-fixes). - drm/amd/display: add z8 allow states to z-state support list (git-fixes). - drm/amd/display: change default z8 watermark values (git-fixes). - drm/amd/display: check tg is non-null before checking if enabled (git-fixes). - drm/amd/display: correct `dmub_fw_version` macro (git-fixes). - drm/amd/display: correct dml calculation to align hw formula (git-fixes). - drm/amd/display: correct dml calculation to follow hw spec (git-fixes). - drm/amd/display: disable mpc split by default on special asic (git-fixes). - drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848, bsc#1212961). - drm/amd/display: do not update drr while bw optimizations pending (git-fixes). - drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes). - drm/amd/display: enable hostvm based on riommu active (git-fixes). - drm/amd/display: enforce 60us prefetch for 200mhz dcfclk modes (git-fixes). - drm/amd/display: ensure vmin and vmax adjust for dce (git-fixes). - drm/amd/display: explicitly specify update type per plane info change (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix 4to1 mpc black screen with dpp rco (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fix a test calculateprefetchschedule() (git-fixes). - drm/amd/display: fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix artifacting on edp panels when engaging freesync video mode (git-fixes). - drm/amd/display: fix psr-su/dsc interoperability support (git-fixes). - drm/amd/display: fix seamless odm transitions (git-fixes). - drm/amd/display: fix the system hang while disable psr (git-fixes). - drm/amd/display: fix z8 support configurations (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: have payload properly created after resume (git-fixes). - drm/amd/display: keep phy active for dp displays on dcn31 (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: lowering min z8 residency time (git-fixes). - drm/amd/display: only update link settings after successful mst link train (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: refactor edp psr codes (git-fixes). - drm/amd/display: remove fpu guards from the dml folder (git-fixes). - drm/amd/display: remove optimization for vrr updates (git-fixes). - drm/amd/display: remove phantom pipe check when calculating k1 and k2 (git-fixes). - drm/amd/display: remove stutter only configurations (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/display: unlock on error path in dm_handle_mst_sideband_msg_ready_event() (git-fixes). - drm/amd/display: update minimum stutter residency for dcn314 z8 (git-fixes). - drm/amd/display: update z8 sr exit/enter latencies (git-fixes). - drm/amd/display: update z8 watermarks for dcn314 (git-fixes). - drm/amd/display: use dc_update_planes_and_stream (git-fixes). - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes). - drm/amd/pm: add missing notifypowersource message mapping for smu13.0.7 (git-fixes). - drm/amd/pm: avoid potential ubsan issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid skus (git-fixes). - drm/amd/pm: conditionally disable pcie lane/speed switching for smu13 (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and pmfw (git-fixes). - drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes). - drm/amd/pm: resolve reboot exception for si oland (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for smu v13.0.4 (git-fixes). - drm/amd/pm: reverse mclk clocks levels for smu v13.0.5 (git-fixes). - drm/amd/pm: revise the aspm settings for thunderbolt attached scenario (bsc#1212848, bsc#1212961). - drm/amd/pm: share the code around smu13 pcie parameters update (git-fixes). - drm/amd/pm: update the lc_l1_inactivity setting to address possible noise issue (bsc#1212848, bsc#1212961). - drm/amd/pm: workaround for compute workload type on some skus (git-fixes). - drm/amd: add a new helper for loading/validating microcode (git-fixes). - drm/amd: disable psr-su on parade 0803 tcon (bsc#1212848, bsc#1212961). - drm/amd: do not allow s0ix on apus older than raven (git-fixes). - drm/amd: do not try to enable secure display ta multiple times (bsc#1212848, bsc#1212961). - drm/amd: fix an error handling mistake in psp_sw_init() (git-fixes). - drm/amd: load mes microcode during early_init (git-fixes). - drm/amd: use `amdgpu_ucode_*` helpers for mes (git-fixes). - drm/amdgpu/gfx11: adjust gfxoff before powergating on gfx11 as well (git-fixes). - drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes). - drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes). - drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes). - drm/amdgpu/jpeg: remove harvest checking for jpeg3 (git-fixes). - drm/amdgpu/mes11: enable reg active poll (git-fixes). - drm/amdgpu/vcn: disable indirect sram on vangogh broken bioses (git-fixes). - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes). - drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes). - drm/amdgpu: add the fan abnormal detection feature (git-fixes). - drm/amdgpu: avoid restore process run into dead loop (git-fixes). - drm/amdgpu: change reserved vram info print (git-fixes). - drm/amdgpu: declare firmware for new mes 11.0.4 (git-fixes). - drm/amdgpu: do not set struct drm_driver.output_poll_changed (git-fixes). - drm/amdgpu: enable tmz by default for gc 11.0.1 (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes). - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes). - drm/amdgpu: fix clearing mappings for bos that are always valid in vm (bsc#1212848, bsc#1212961). - drm/amdgpu: fix clearing mappings for bos that are always valid in vm (git-fixes). - drm/amdgpu: fix desktop freezed after gpu-reset (git-fixes). - drm/amdgpu: fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes). - drm/amdgpu: fix minmax warning (git-fixes). - drm/amdgpu: fix number of fence calculations (bsc#1212848, bsc#1212961). - drm/amdgpu: fix sdma v4 sw fini error (git-fixes). - drm/amdgpu: fix usage of umc fill record in ras (git-fixes). - drm/amdgpu: force signal hw_fences that are embedded in non-sched jobs (git-fixes). - drm/amdgpu: refine get gpu clock counter method (git-fixes). - drm/amdgpu: remove deprecated mes version vars (git-fixes). - drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes). - drm/amdgpu: set gfx9 onwards apu atomics support to be true (git-fixes). - drm/amdgpu: set vmbo destroy after pt bo is created (git-fixes). - drm/amdgpu: validate vm ioctl flags (git-fixes). - drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes). - drm/amdkfd: fix potential deallocation of previously deallocated memory (git-fixes). - drm/atomic: fix potential use-after-free in nonblocking commits (git-fixes). - drm/bridge: anx7625: convert to i2c's .probe_new() (git-fixes). - drm/bridge: anx7625: fix refcount bug in anx7625_parse_dt() (git-fixes). - drm/bridge: anx7625: prevent endless probe loop (git-fixes). - drm/bridge: it6505: move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes). - drm/bridge: tc358767: switch to devm mipi-dsi helpers (git-fixes). - drm/bridge: tc358768: add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: always enable hs video mode (git-fixes). - drm/bridge: tc358768: fix pll parameters computation (git-fixes). - drm/bridge: tc358768: fix pll target frequency (git-fixes). - drm/bridge: tc358768: fix tclk_trailcnt computation (git-fixes). - drm/bridge: tc358768: fix tclk_zerocnt computation (git-fixes). - drm/bridge: tc358768: fix ths_trailcnt computation (git-fixes). - drm/bridge: tc358768: fix ths_zerocnt computation (git-fixes). - drm/bridge: tc358768: fix txtagocnt computation (git-fixes). - drm/bridge: ti-sn65dsi83: fix enable error path (git-fixes). - drm/bridge: ti-sn65dsi86: fix auxiliary bus lifetime (git-fixes). - drm/client: fix memory leak in drm_client_modeset_probe (git-fixes). - drm/client: fix memory leak in drm_client_target_cloned (git-fixes). - drm/display/dp_mst: fix payload addition on a disconnected sink (git-fixes). - drm/display: do not block hdr_output_metadata on unknown eotf (git-fixes). - drm/dp_mst: clear msg_rdy flag before sending new message (bsc#1213578). - drm/drm_vma_manager: add drm_vma_node_allow_once() (git-fixes). - drm/dsc: fix dp_dsc_max_bpp_delta_* macro values (git-fixes). - drm/dsc: fix drm_edp_dsc_sink_output_bpp() dpcd high byte usage (git-fixes). - drm/etnaviv: move idle mapping reaping into separate function (git-fixes). - drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes). - drm/exynos: fix race condition uaf in exynos_g2d_exec_ioctl (git-fixes). - drm/exynos: vidi: fix a wrong error return (git-fixes). - drm/i915/dp_mst: add the mst topology state for modesetted crtcs (bsc#1213493). - drm/i915/dpt: use shmem for dpt objects (git-fixes). - drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes). - drm/i915/gt: cleanup partial engine discovery failures (git-fixes). - drm/i915/guc: add error-capture init warnings when needed (git-fixes). - drm/i915/guc: fix missing ecodes (git-fixes). - drm/i915/guc: limit scheduling properties to avoid overflow (git-fixes). - drm/i915/guc: rename guc register state capture node to be more obvious (git-fixes). - drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes). - drm/i915/mtl: update scaler source and destination limits for mtl (git-fixes). - drm/i915/psr: use hw.adjusted mode when calculating io/fast wake times (git-fixes). - drm/i915/sdvo: grab mode_config.mutex during lvds init to avoid warns (git-fixes). - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes). - drm/i915/tc: fix system resume mst mode restore for dp-alt sinks (git-fixes). - drm/i915/tc: fix tc port link ref init for dp mst during hw readout (git-fixes). - drm/i915: allow panel fixed modes to have differing sync polarities (git-fixes). - drm/i915: check pipe source size when using skl+ scalers (git-fixes). - drm/i915: do not preserve dpll_hw_state for slave crtc in bigjoiner (git-fixes). - drm/i915: do panel vbt init early if the vbt declares an explicit panel type (git-fixes). - drm/i915: fix a memory leak with reused mmap_offset (git-fixes). - drm/i915: fix an error handling path in igt_write_huge() (git-fixes). - drm/i915: fix negative value passed as remaining time (git-fixes). - drm/i915: fix one wrong caching mode enum usage (git-fixes). - drm/i915: fix typec mode initialization during system resume (git-fixes). - drm/i915: introduce intel_panel_init_alloc() (git-fixes). - drm/i915: never return 0 if not all requests retired (git-fixes). - drm/i915: populate encoder->devdata for dsi on icl+ (git-fixes). - drm/i915: print return value on error (git-fixes). - drm/i915: use _mmio_pipe() for skl_bottom_color (git-fixes). - drm/meson: fix return type of meson_encoder_cvbs_mode_valid() (git-fixes). - drm/msm/a5xx: really check for a510 in a5xx_gpu_init (git-fixes). - drm/msm/adreno: fix runtime pm imbalance at unbind (git-fixes). - drm/msm/adreno: fix snapshot bindless_data size (git-fixes). - drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes). - drm/msm/adreno: simplify read64/write64 helpers (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dp: free resources after unregistering them (git-fixes). - drm/msm/dpu: add dsc hardware blocks to register snapshot (git-fixes). - drm/msm/dpu: assign missing writeback log_mask (git-fixes). - drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes). - drm/msm/dpu: correct merge_3d length (git-fixes). - drm/msm/dpu: do not enable color-management if dspps are not available (git-fixes). - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes). - drm/msm/dpu: set dpu_data_hctl_en for in intf_sc7180_mask (git-fixes). - drm/msm/dpu: set dsc flush bit correctly at mdp ctl flush register (git-fixes). - drm/msm/dsi: do not allow enabling 14nm vco with unprogrammed rate (git-fixes). - drm/msm/hdmi: use devres helper for runtime pm management (git-fixes). - drm/msm: fix is_err_or_null() vs null check in a5xx_submit_in_rb() (git-fixes). - drm/panel: boe-tv101wum-nl6: ensure dsi writes succeed during disable (git-fixes). - drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes). - drm/panel: simple: add connector_type for innolux_at043tn24 (git-fixes). - drm/panel: simple: add powertip ph800480t013 drm_display_mode flags (git-fixes). - drm/panel: simple: fix active size for ampire am-480272h3tmqw-t01h (git-fixes). - drm/radeon: fix integer overflow in radeon_cs_parser_init (git-fixes). - drm/radeon: fix possible division-by-zero errors (git-fixes). - drm/radeon: fix race condition uaf in radeon_gem_set_domain_ioctl (git-fixes). - drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes). - drm/rockchip: vop: leave vblank enabled in self-refresh (git-fixes). - drm/ttm: do not leak a resource on swapout move error (git-fixes). - drm/ttm: fix bulk_move corruption when adding a entry (git-fixes). - drm/ttm: fix warning that we shouldn't mix && and || (git-fixes). - drm/virtio: fix memory leak in virtio_gpu_object_create() (git-fixes). - drm/virtio: simplify error handling of virtio_gpu_object_create() (git-fixes). - drm/vmwgfx: fix legacy display unit atomic drm support (bsc#1213632). - drm/vmwgfx: refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: refactor resource validation hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: refactor ttm reference object hashtable to use linux/hashtable (git-fixes). - drm/vmwgfx: remove explicit and broken vblank handling (bsc#1213632). - drm/vmwgfx: remove rcu locks from user resources (bsc#1213632). - drm/vmwgfx: remove ttm object hashtable (git-fixes). - drm/vmwgfx: remove vmwgfx_hashtab (git-fixes). - drm/vmwgfx: write the driver id registers (git-fixes). - drm/vram-helper: fix function names in vram helper doc (git-fixes). - drm: add fixed-point helper to get rounded integer values (git-fixes). - drm: add missing dp dsc extended capability definitions (git-fixes). - drm: buddy_allocator: fix buddy allocator init on 32-bit systems (git-fixes). - drm: optimize drm buddy top-down allocation method (git-fixes). - drm: panel-orientation-quirks: add quirk for dynabook k50 (git-fixes). - drm: rcar-du: add quirk for h3 es1.x pclk workaround (git-fixes). - drm: rcar-du: fix setting a reserved bit in dpllcr (git-fixes). - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes). - drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes). - drop amdgpu patches for fixing regression (bsc#1213304,bsc#1213777). - dt-bindings: phy: brcm,brcmstb-usb-phy: fix error in 'compatible' conditional schema (git-fixes). - elf: correct note name comment (git-fixes). - enable nxp snvs rtc driver for i.mx 8mq/8mp (jsc#ped-4758) - ext4: add ea_inode checking to ext4_iget() (bsc#1213106). - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088). - ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109). - ext4: add strict range checks while freeing blocks (bsc#1213089). - ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016). - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018). - ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090). - ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103). - ext4: disallow ea_inodes with extended attributes (bsc#1213108). - ext4: fail ext4_iget if special inode unallocated (bsc#1213010). - ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111). - ext4: fix data races when using cached status extents (bsc#1213102). - ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105). - ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015). - ext4: fix lockdep warning when enabling mmp (bsc#1213100). - ext4: fix reusing stale buffer heads from last failed mounting (bsc#1213020). - ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096). - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021). - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098). - ext4: fix warning in ext4_update_inline_data (bsc#1213012). - ext4: fix warning in mb_find_extent (bsc#1213099). - ext4: improve error handling from ext4_dirhash() (bsc#1213104). - ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017). - ext4: move where set the may_inline_data flag is set (bsc#1213011). - ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019). - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087). - ext4: refuse to create ea block when umounted (bsc#1213093). - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107). - ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110). - ext4: update s_journal_inum if it changes after journal replay (bsc#1213094). - ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092). - ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013). - extcon: fix kernel doc of property capability fields to avoid warnings (git-fixes). - extcon: fix kernel doc of property fields to avoid warnings (git-fixes). - extcon: usbc-tusb320: add usb type-c support (git-fixes). - extcon: usbc-tusb320: call the type-c irq handler only if a port is registered (git-fixes). - extcon: usbc-tusb320: unregister typec port on driver removal (git-fixes). - extcon: usbc-tusb320: update state on probe even if no irq pending (git-fixes). - fbdev: au1200fb: fix missing irq check in au1200fb_drv_probe (git-fixes). - fbdev: imxfb: removed unneeded release_mem_region (git-fixes). - fbdev: imxfb: warn about invalid left/right margin (git-fixes). - fbdev: omapfb: lcd_mipid: fix an error handling path in mipid_spi_probe() (git-fixes). - file: always lock position for fmode_atomic_pos (bsc#1213759). - firmware: stratix10-svc: fix a potential resource leak in svc_create_memory_pool() (git-fixes). - fix documentation of panic_on_warn (git-fixes). - fix null pointer dereference in drm_dp_atomic_find_time_slots() (bsc#1213578). - fs: dlm: add midcomms init/start functions (git-fixes). - fs: dlm: do not set stop rx flag after node reset (git-fixes). - fs: dlm: filter user dlm messages for kernel locks (git-fixes). - fs: dlm: fix log of lowcomms vs midcomms (git-fixes). - fs: dlm: fix race between test_bit() and queue_work() (git-fixes). - fs: dlm: fix race in lowcomms (git-fixes). - fs: dlm: handle -ebusy first in lock arg validation (git-fixes). - fs: dlm: move sending fin message into state change handling (git-fixes). - fs: dlm: retry accept() until -eagain or error returns (git-fixes). - fs: dlm: return positive pid value for f_getlk (git-fixes). - fs: dlm: start midcomms before scand (git-fixes). - fs: hfsplus: remove warn_on() from hfsplus_cat_{read,write}_inode() (git-fixes). - fs: jfs: check for read-only mounted filesystem in txbegin (git-fixes). - fs: jfs: fix null-ptr-deref read in txbegin (git-fixes). - fs: jfs: fix ubsan: array-index-out-of-bounds in dballocdmaplev (git-fixes). - fuse: ioctl: translate enosys in outarg (bsc#1213524). - fuse: revalidate: do not invalidate if interrupted (bsc#1213523). - get module prefix from kmod (bsc#1212835). - gve: set default duplex configuration to full (git-fixes). - gve: unify driver name usage (git-fixes). - hid: logitech-hidpp: add hidpp_quirk_delayed_init for the t651 (git-fixes). - hid: wacom: add error check to wacom_parse_and_register() (git-fixes). - hvcs: fix hvcs port reference counting (bsc#1213134 ltc#202861). - hvcs: get reference to tty in remove (bsc#1213134 ltc#202861). - hvcs: synchronize hotplug remove with port free (bsc#1213134 ltc#202861). - hvcs: use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861). - hvcs: use driver groups to manage driver attributes (bsc#1213134 ltc#202861). - hvcs: use vhangup in hotplug remove (bsc#1213134 ltc#202861). - hwmon: (adm1275) allow setting sample averaging (git-fixes). - hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes). - hwmon: (k10temp) enable amd3255 proc to show negative temperature (git-fixes). - hwmon: (nct7802) fix for temp6 (peci1) processed even if peci1 disabled (git-fixes). - hwmon: (pmbus/adm1275) fix problems with temperature monitoring on adm1272 (git-fixes). - hwrng: imx-rngc - fix the timeout for init and self check (git-fixes). - hwrng: st - keep clock enabled while hwrng is registered (git-fixes). - i2c: tegra: set acpi node as primary fwnode (bsc#1213226). - i2c: xiic: defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes). - i2c: xiic: do not try to handle more interrupt events after error (git-fixes). - iavf: check for removal state before iavf_flag_pf_comms_failed (git-fixes). - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes). - iavf: fix out-of-bounds when setting channels on remove (git-fixes). - iavf: fix potential deadlock on allocation failure (git-fixes). - iavf: fix reset task race with iavf_remove() (git-fixes). - iavf: fix use-after-free in free_netdev (git-fixes). - iavf: move netdev_update_features() into watchdog task (git-fixes). - iavf: use internal state to free traffic irqs (git-fixes). - iavf: wait for reset in callbacks which trigger it (git-fixes). - ib/hfi1: fix wrong mmu_node used for user sdma packet after invalidate (git-fixes) - ib/hfi1: use bitmap_zalloc() when applicable (git-fixes) - ib/isert: fix dead lock in ib_isert (git-fixes) - ib/isert: fix incorrect release of isert connection (git-fixes) - ib/isert: fix possible list corruption in cma handler (git-fixes) - ib/uverbs: fix to consider event queue closing also upon non-blocking mode (git-fixes) - ibmvnic: do not reset dql stats on non_fatal err (bsc#1212603 ltc#202604). - ice: fix max_rate check while configuring tx rate limits (git-fixes). - ice: fix memory management in ice_ethtool_fdir.c (git-fixes). - ice: handle extts in the miscellaneous interrupt thread (git-fixes). - igc: check if hardware tx timestamping is enabled earlier (git-fixes). - igc: enable and fix rx hash usage by netstack (git-fixes). - igc: fix inserting of empty frame for launchtime (git-fixes). - igc: fix kernel panic during ndo_tx_timeout callback (git-fixes). - igc: fix launchtime before start of cycle (git-fixes). - igc: fix race condition in ptp tx code (git-fixes). - igc: handle pps start time programming for past time values (git-fixes). - igc: prevent garbled tx queue with xdp zerocopy (git-fixes). - igc: remove delay during tx ring configuration (git-fixes). - igc: set tp bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes). - igc: work around hw bug causing missing timestamps (git-fixes). - iio: accel: fxls8962af: errata bug only applicable for fxls8962af (git-fixes). - iio: accel: fxls8962af: fixup buffer scan element type (git-fixes). - iio: adc: ad7192: fix internal/external clock selection (git-fixes). - iio: adc: ad7192: fix null ad7192_state pointer access (git-fixes). - inotify: avoid reporting event with invalid wd (bsc#1213025). - input: adxl34x - do not hardcode interrupt trigger type (git-fixes). - input: drv260x - fix typo in register value define (git-fixes). - input: drv260x - remove unused .reg_defaults (git-fixes). - input: drv260x - sleep between polling go bit (git-fixes). - input: i8042 - add clevo pcx0dx to i8042 quirk table (git-fixes). - input: iqs269a - do not poll during ati (git-fixes). - input: iqs269a - do not poll during suspend or resume (git-fixes). - input: soc_button_array - add invalid acpi_index dmi quirk handling (git-fixes). - integrity: fix possible multiple allocation in integrity_inode_get() (git-fixes). - io_uring: do not expose io_fill_cqe_aux() (bsc#1211014). - irqchip/gic-v3: claim iomem resources (bsc#1213533) - irqchip/gicv3: handle resource request failure consistently (bsc#1213533) - irqchip/gicv3: workaround for nvidia erratum t241-fabric-4 (bsc#1213533) - jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095). - jdb2: do not refuse invalidation of already invalidated buffers (bsc#1213014). - jffs2: fix memory leak in jffs2_do_fill_super (git-fixes). - jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes). - jffs2: fix memory leak in jffs2_scan_medium (git-fixes). - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes). - jffs2: gc deadlock reading a page that is used in jffs2_write_begin() (git-fixes). - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes). - jfs: jfs_dmap: validate db_l2nbperpage while mounting (git-fixes). - kabi fix after restore kabi for nvidia vgpu driver (bsc#1210825). - kabi/severities: add vas symbols changed due to recent fix vas accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers - kabi/severities: ignore kabi of i915 module it's exported only for its sub-module, not really used by externals - kabi/severities: ignore kabi of vmwgfx the driver exports a function unnecessarily without used by anyone else. ignore the kabi changes. - kabi/severities: relax kabi for ath11k local symbols (bsc#1207948) - kabi: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243). - kernel-binary.spec.in: remove superfluous %% in supplements fixes: 02b7735e0caf ('rpm/kernel-binary.spec.in: add enhances and supplements tags to in-tree kmps') - kselftest: vdso: fix accumulation of uninitialized ret when clock_realtime is undefined (git-fixes). - kvm: arm64: do not read a hw interrupt pending state in user context (git-fixes) - kvm: arm64: warn if accessing timer pending state outside of vcpu (bsc#1213620) - kvm: do not null dereference ops->destroy (git-fixes) - kvm: downgrade two bug_ons to warn_on_once (git-fixes) - kvm: initialize debugfs_dentry when a vm is created to avoid null (git-fixes) - kvm: s390: pv: fix index value of replaced asce (git-fixes bsc#1213867). - kvm: vmx: inject #gp on encls if vcpu has paging disabled (cr0.pg==0) (git-fixes). - kvm: vmx: inject #gp, not #ud, if sgx2 encls leafs are unsupported (git-fixes). - kvm: vmx: restore vmx_vmexit alignment (git-fixes). - kvm: x86: account fastpath-only vm-exits in vcpu stats (git-fixes). - leds: trigger: netdev: recheck netdev_led_mode_linkup on dev rename (git-fixes). - libceph: harden msgr2.1 frame segment length checks (bsc#1213857). - m alsa: usb-audio: add quirk for tascam model 12 (git-fixes). - mailbox: ti-msgmgr: fill non-message tx data fields with 0x0 (git-fixes). - maintainers: add amd p-state driver maintainer entry (bsc#1212445). - md: add error_handlers for raid0 and linear (bsc#1212766). - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes). - media: cec: core: do not set last_initiator if tx in progress (git-fixes). - media: cec: i2c: ch7322: also select regmap (git-fixes). - media: i2c: correct format propagation for st-mipid02 (git-fixes). - media: staging: atomisp: select v4l2_fwnode (git-fixes). - media: usb: check az6007_read() return value (git-fixes). - media: usb: siano: fix warning due to null work_func_t function pointer (git-fixes). - media: venus: helpers: fix align() of non power of two (git-fixes). - media: videodev2.h: fix struct v4l2_input tuner index comment (git-fixes). - memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905). - memory: brcmstb_dpfe: fix testing array offset after use (git-fixes). - meson saradc: fix clock divider mask length (git-fixes). - mfd: intel-lpss: add missing check for platform_get_resource (git-fixes). - mfd: pm8008: fix module autoloading (git-fixes). - mfd: rt5033: drop rt5033-battery sub-device (git-fixes). - mfd: stmfx: fix error path in stmfx_chip_init (git-fixes). - mfd: stmfx: nullify stmfx->vdd in case of error (git-fixes). - mfd: stmpe: only disable the regulators if they are enabled (git-fixes). - mhi_power_down() kabi workaround (bsc#1207948). - misc: fastrpc: create fastrpc scalar with correct buffer count (git-fixes). - misc: pci_endpoint_test: free irqs before removing the device (git-fixes). - misc: pci_endpoint_test: re-init completion for every test (git-fixes). - mmc: core: disable trim on kingston emmc04g-m627 (git-fixes). - mmc: mmci: set probe_prefer_asynchronous (git-fixes). - mmc: sdhci-msm: disable broken 64-bit dma on msm8916 (git-fixes). - mmc: sdhci: fix dma configure compatibility issue when 64bit dma mode is used (git-fixes). - mtd: rawnand: meson: fix unaligned dma buffers handling (git-fixes). - net/mlx5: add ifc bits for bypassing port select flow table (git-fixes) - net/mlx5: dr, support sw created encap actions for fw table (git-fixes). - net/mlx5e: check for not_ready flag state after locking (git-fixes). - net/mlx5e: fix double free in mlx5e_destroy_flow_table (git-fixes). - net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (git-fixes). - net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes). - net/mlx5e: xdp, allow growing tail for xdp multi buffer (git-fixes). - net/mlx5e: xsk: set napi_id to support busy polling on xsk rq (git-fixes). - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - net/sched: sch_qfq: reintroduce lmax bound check for mtu (bsc#1213585). - net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes). - net: mana: add support for vlan tagging (bsc#1212301). - net: mana: batch ringing rx queue doorbell on receiving packets (bsc#1212901). - net: mana: use the correct wqe count for ringing rq doorbell (bsc#1212901). - net: phy: marvell10g: fix 88x3310 power up (git-fixes). - net: phy: prevent stale pointer dereference in phy_init() (git-fixes). - net: qrtr: fix an uninit variable access bug in qrtr_tx_resume() (git-fixes). - net: qrtr: start mhi channel after endpoit creation (git-fixes). - nfcsim.c: fix error checking for debugfs_create_dir (git-fixes). - nfsd: add encoding of op_recall flag for write delegation (git-fixes). - nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes). - nfsd: fix sparse warning (git-fixes). - nfsd: remove open coding of string copy (git-fixes). - nfsv4.1: always send a reclaim_complete after establishing lease (git-fixes). - nfsv4.1: freeze the session table upon receiving nfs4err_badsession (git-fixes). - nilfs2: fix buffer corruption due to concurrent device reads (git-fixes). - nilfs2: reject devices with insufficient block count (git-fixes). - ntb: amd: fix error handling in amd_ntb_pci_driver_init() (git-fixes). - ntb: idt: fix error handling in idt_pci_driver_init() (git-fixes). - ntb: intel: fix error handling in intel_ntb_pci_driver_init() (git-fixes). - ntb: ntb_tool: add check for devm_kcalloc (git-fixes). - ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes). - nvme-core: fix dev_pm_qos memleak (git-fixes). - nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes). - nvme-core: fix memory leak in dhchap_secret_store (git-fixes). - nvme-multipath: support io stats on the mpath device (bsc#1210565). - nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes). - nvme-pci: fix dma direction of unmapping integrity data (git-fixes). - nvme-pci: remove nvme_queue from nvme_iod (git-fixes). - nvme: do not reject probe due to duplicate ids for single-ported pcie devices (git-fixes). - nvme: double ka polling frequency to avoid kato with tbkas on (git-fixes). - nvme: fix the nvme_id_ns_nvm_sts_mask definition (git-fixes). - nvme: introduce nvme_start_request (bsc#1210565). - ocfs2: check new file size on fallocate call (git-fixes). - ocfs2: fix defrag path triggering jbd2 assert (git-fixes). - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes). - ocfs2: fix non-auto defrag path not working issue (git-fixes). - ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes). - ocfs2: switch to security_inode_init_security() (git-fixes). - octeontx-af: fix hardware timestamp configuration (git-fixes). - octeontx2-af: move validation of ptp pointer before its usage (git-fixes). - octeontx2-pf: add additional check for mcam rules (git-fixes). - opp: fix use-after-free in lazy_opp_tables after probe deferral (git-fixes). - pci/aspm: disable aspm on mfd function removal to avoid use-after-free (git-fixes). - pci/pm: avoid putting elopos e2/s2/h2 pcie ports in d3cold (git-fixes). - pci: add function 1 dma alias quirk for marvell 88se9235 (git-fixes). - pci: add pci_clear_master() stub for non-config_pci (git-fixes). - pci: cadence: fix gen2 link retraining process (git-fixes). - pci: endpoint: add missing documentation about the msi/msi-x range (git-fixes). - pci: ftpci100: release the clock resources (git-fixes). - pci: pciehp: cancel bringup sequence if card is not present (git-fixes). - pci: qcom: disable write access to read only registers for ip v2.3.3 (git-fixes). - pci: release resource invalidated by coalescing (git-fixes). - pci: rockchip: add poll and timeout to wait for phy plls to be locked (git-fixes). - pci: rockchip: assert pci configuration enable bit after probe (git-fixes). - pci: rockchip: fix legacy irq generation for rk3399 pcie endpoint core (git-fixes). - pci: rockchip: set address alignment for endpoint mode (git-fixes). - pci: rockchip: use u32 variable to access 32-bit registers (git-fixes). - pci: rockchip: write pci device id to correct register (git-fixes). - pci: s390: fix use-after-free of pci resources with per-function hotplug (bsc#1212525). - pci: vmd: fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - pci: vmd: reset vmd config register between soft reboots (git-fixes). - perf/x86/amd/core: always clear status for idx (bsc#1213233). - phy: hisilicon: fix an out of bounds check in hisi_inno_phy_probe() (git-fixes). - phy: revert 'phy: remove soc_exynos4212 dep. from phy_exynos4x12_usb' (git-fixes). - phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes). - phy: tegra: xusb: clear the driver reference in usb-phy dev (git-fixes). - pie: fix kernel-doc notation warning (git-fixes). - pinctrl: amd: detect internal gpio0 debounce handling (git-fixes). - pinctrl: amd: do not show `invalid config param` errors (git-fixes). - pinctrl: amd: fix mistake in handling clearing pins at startup (git-fixes). - pinctrl: amd: only use special debounce behavior for gpio 0 (git-fixes). - pinctrl: amd: use amd_pinconf_set() for all config options (git-fixes). - pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes). - pinctrl: cherryview: return correct value if pin in push-pull mode (git-fixes). - pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes). - platform/x86: msi-laptop: fix rfkill out-of-sync on msi wind u100 (git-fixes). - platform/x86: think-lmi: correct nvme password handling (git-fixes). - platform/x86: think-lmi: correct system password interface (git-fixes). - platform/x86: think-lmi: mutex protection around multiple wmi calls (git-fixes). - platform/x86: thinkpad_acpi: fix lkp-tests warnings for platform profiles (git-fixes). - powerpc/64: only warn if __pa()/__va() called with bad addresses (bsc#1194869). - powerpc/64s: fix vas mm use after free (bsc#1194869). - powerpc/book3s64/mm: fix directmap stats in /proc/meminfo (bsc#1194869). - powerpc/bpf: fix use of user_pt_regs in uapi (bsc#1194869). - powerpc/ftrace: remove ftrace init tramp once kernel init is complete (bsc#1194869). - powerpc/interrupt: do not read msr from interrupt_exit_kernel_prepare() (bsc#1194869). - powerpc/mm/dax: fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes). - powerpc/mm: switch obsolete dssall to .long (bsc#1194869). - powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869). - powerpc/powernv/vas: assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869). - powerpc/prom_init: fix kernel config grep (bsc#1194869). - powerpc/pseries/vas: hold mmap_mutex after mmap lock during window close (jsc#ped-542 git-fixes). - powerpc/secvar: fix refcount leak in format_show() (bsc#1194869). - powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869). - powerpc: clean vdso32 and vdso64 directories (bsc#1194869). - powerpc: define get_cycles macro for arch-override (bsc#1194869). - powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869). - pstore/ram: add check for kstrdup (git-fixes). - pwm: ab8500: fix error code in probe() (git-fixes). - pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes). - pwm: sysfs: do not apply state to already disabled pwms (git-fixes). - radeon: avoid double free in ci_dpm_init() (git-fixes). - rdma/bnxt_re: avoid calling wake_up threads from spin_lock context (git-fixes) - rdma/bnxt_re: disable/kill tasklet only if it is enabled (git-fixes) - rdma/bnxt_re: fix hang during driver unload (git-fixes) - rdma/bnxt_re: fix to remove an unnecessary log (git-fixes) - rdma/bnxt_re: fix to remove unnecessary return labels (git-fixes) - rdma/bnxt_re: prevent handling any completions after qp destroy (git-fixes) - rdma/bnxt_re: remove a redundant check inside bnxt_re_update_gid (git-fixes) - rdma/bnxt_re: remove unnecessary checks (git-fixes) - rdma/bnxt_re: return directly without goto jumps (git-fixes) - rdma/bnxt_re: use unique names while registering interrupts (git-fixes) - rdma/bnxt_re: wraparound mbox producer index (git-fixes) - rdma/cma: always set static rate to 0 for roce (git-fixes) - rdma/core: update cma destination address on rdma_resolve_addr (git-fixes) - rdma/hns: fix hns_roce_table_get return value (git-fixes) - rdma/irdma: add missing read barriers (git-fixes) - rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes) - rdma/irdma: fix data race on cqp completion stats (git-fixes) - rdma/irdma: fix data race on cqp request done (git-fixes) - rdma/irdma: fix op_type reporting in cqes (git-fixes) - rdma/irdma: report correct wc error (git-fixes) - rdma/mlx4: make check for invalid flags stricter (git-fixes) - rdma/mlx5: create an indirect flow table for steering anchor (git-fixes) - rdma/mlx5: do not set tx affinity when lag is in hash mode (git-fixes) - rdma/mlx5: fix affinity assignment (git-fixes) - rdma/mlx5: initiate dropless rq for raw ethernet functions (git-fixes) - rdma/mthca: fix crash when polling cq for shared qps (git-fixes) - rdma/rtrs: fix rxe_dealloc_pd warning (git-fixes) - rdma/rtrs: fix the last iu->buf leak in err path (git-fixes) - rdma/rxe: fix access checks in rxe_check_bind_mw (git-fixes) - rdma/rxe: fix packet length checks (git-fixes) - rdma/rxe: fix ref count error in check_rkey() (git-fixes) - rdma/rxe: fix rxe_cq_post (git-fixes) - rdma/rxe: fix the use-before-initialization error of resp_pkts (git-fixes) - rdma/rxe: remove dangling declaration of rxe_cq_disable() (git-fixes) - rdma/rxe: remove the unused variable obj (git-fixes) - rdma/rxe: removed unused name from rxe_task struct (git-fixes) - rdma/uverbs: restrict usage of privileged qkeys (git-fixes) - rdma/vmw_pvrdma: remove unnecessary check on wr->opcode (git-fixes) - regmap: account for register length in smbus i/o limits (git-fixes). - regmap: drop initial version of maximum transfer length fixes (git-fixes). - regulator: core: fix more error checking for debugfs_create_dir() (git-fixes). - regulator: core: streamline debugfs operations (git-fixes). - regulator: helper: document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes). - restore kabi for nvidia vgpu driver (bsc#1210825). - revert 'alsa: usb-audio: drop superfluous interface setup at parsing' (git-fixes). - revert 'arm64: dts: zynqmp: add address-cells property to interrupt (git-fixes) - revert 'debugfs, coccinelle: check for obsolete define_simple_attribute() usage' (git-fixes). - revert 'drm/amd/display: edp do not add non-edid timings' (git-fixes). - revert 'drm/i915: disable dsb usage for now' (git-fixes). - revert 'drop amdgpu patches for fixing regression (bsc#1213304,bsc#1213777)' sle15-sp5 branch works as is, hence revive the dropped patches again. - revert 'iavf: detach device during reset task' (git-fixes). - revert 'iavf: do not restart tx queues after reset task failure' (git-fixes). - revert 'mtd: rawnand: arasan: prevent an unsupported configuration' (git-fixes). - revert 'net: phy: dp83867: perform soft reset and retain established link' (git-fixes). - revert 'nfsv4: retry lock on old_stateid during delegation return' (git-fixes). - revert 'usb: dwc3: core: enable autoretry feature in the controller' (git-fixes). - revert 'usb: gadget: tegra-xudc: fix error check in tegra_xudc_powerdomain_init()' (git-fixes). - revert 'usb: gadget: udc: core: offload usb_udc_vbus_handler processing' - revert 'usb: gadget: udc: core: prevent soft_connect_store() race' - revert 'usb: xhci: tegra: fix error check' (git-fixes). - revive drm_dp_mst_hpd_irq() function (bsc#1213578). - rpm/check-for-config-changes: ignore also pahole_has_* we now also have options like config_pahole_has_lang_exclude. - rpm/check-for-config-changes: ignore also riscv_isa_* and dynamic_sigframe they depend on config_toolchain_has_*. - rsi: remove kernel-doc comment marker (git-fixes). - rtc: efi: add wakeup support (bsc#1213116). - rtc: efi: enable set/get wakeup services as optional (bsc#1213116). - rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116). - rtc: st-lpc: release some resources in st_rtc_probe() in case of error (git-fixes). - rxrpc, afs: fix selection of abort codes (git-fixes). - s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259). - s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258). - s390/bpf: add expoline to tail calls (git-fixes bsc#1213870). - s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810). - s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872). - s390/debug: add _asm_s390_ prefix to header guard (git-fixes bsc#1213263). - s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863). - s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892). - s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871). - s390/pci: clean up left over special treatment for function zero (bsc#1212525). - s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525). - s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525). - s390/percpu: add read_once() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252). - s390/qeth: fix vipa deletion (git-fixes bsc#1213713). - s390/vmem: fix empty page tables cleanup under kasan (git-fixes bsc#1213715). - s390: define runtime_discard_exit to fix link error with gnu ld &lt; 2.36 (git-fixes bsc#1213264). - s390: discard .interp section (git-fixes bsc#1213247). - s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870). - scftorture: count reschedule ipis (git-fixes). - sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes) - sched: fix debug && !schedstats warn (git-fixes) - scsi: lpfc: abort outstanding els cmds when mailbox timeout error is detected (bsc#1213756). - scsi: lpfc: avoid -wstringop-overflow warning (bsc#1213756). - scsi: lpfc: clean up sli-4 sysfs resource reporting (bsc#1213756). - scsi: lpfc: copyright updates for 14.2.0.14 patches (bsc#1213756). - scsi: lpfc: fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756). - scsi: lpfc: fix incorrect big endian type assignment in bsg loopback path (bsc#1213756). - scsi: lpfc: fix incorrect big endian type assignments in fdmi and vmid paths (bsc#1213756). - scsi: lpfc: fix lpfc_name struct packing (bsc#1213756). - scsi: lpfc: make fabric zone discovery more robust when handling unsolicited logo (bsc#1213756). - scsi: lpfc: pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756). - scsi: lpfc: qualify ndlp discovery state when processing rscn (bsc#1213756). - scsi: lpfc: refactor cpu affinity assignment paths (bsc#1213756). - scsi: lpfc: remove extra ndlp kref decrement in flogi cmpl for loop topology (bsc#1213756). - scsi: lpfc: replace all non-returning strlcpy() with strscpy() (bsc#1213756). - scsi: lpfc: replace one-element array with flexible-array member (bsc#1213756). - scsi: lpfc: revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756). - scsi: lpfc: set establish image pair service parameter only for target functions (bsc#1213756). - scsi: lpfc: simplify fcp_abort transport callback log message (bsc#1213756). - scsi: lpfc: update lpfc version to 14.2.0.14 (bsc#1213756). - scsi: lpfc: use struct_size() helper (bsc#1213756). - scsi: qla2xxx: adjust iocb resource on qpair create (bsc#1213747). - scsi: qla2xxx: array index may go out of bound (bsc#1213747). - scsi: qla2xxx: avoid fcport pointer dereference (bsc#1213747). - scsi: qla2xxx: check valid rport returned by fc_bsg_to_rport() (bsc#1213747). - scsi: qla2xxx: correct the index of array (bsc#1213747). - scsi: qla2xxx: drop useless list_head (bsc#1213747). - scsi: qla2xxx: fix buffer overrun (bsc#1213747). - scsi: qla2xxx: fix command flush during tmf (bsc#1213747). - scsi: qla2xxx: fix deletion race condition (bsc#1213747). - scsi: qla2xxx: fix end of loop test (bsc#1213747). - scsi: qla2xxx: fix erroneous link up failure (bsc#1213747). - scsi: qla2xxx: fix error code in qla2x00_start_sp() (bsc#1213747). - scsi: qla2xxx: fix inconsistent tmf timeout (bsc#1213747). - scsi: qla2xxx: fix null pointer dereference in target mode (bsc#1213747). - scsi: qla2xxx: fix potential null pointer dereference (bsc#1213747). - scsi: qla2xxx: fix session hang in gnl (bsc#1213747). - scsi: qla2xxx: fix tmf leak through (bsc#1213747). - scsi: qla2xxx: limit tmf to 8 per function (bsc#1213747). - scsi: qla2xxx: pointer may be dereferenced (bsc#1213747). - scsi: qla2xxx: remove unused nvme_ls_waitq wait queue (bsc#1213747). - scsi: qla2xxx: replace one-element array with declare_flex_array() helper (bsc#1213747). - scsi: qla2xxx: silence a static checker warning (bsc#1213747). - scsi: qla2xxx: turn off noisy message log (bsc#1213747). - scsi: qla2xxx: update version to 10.02.08.400-k (bsc#1213747). - scsi: qla2xxx: update version to 10.02.08.500-k (bsc#1213747). - scsi: qla2xxx: use vmalloc_array() and vcalloc() (bsc#1213747). - security: keys: modify mismatched function name (git-fixes). - selftests/ir: fix build with ancient kernel headers (git-fixes). - selftests: cgroup: fix unsigned comparison with less than zero (git-fixes). - selftests: forwarding: fix packet matching in mirroring selftests (git-fixes). - selftests: mptcp: depend on syn_cookies (git-fixes). - selftests: mptcp: sockopt: return error if wrong mark (git-fixes). - selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes). - selftests: tc: add 'ct' action kconfig dep (git-fixes). - selftests: tc: add conntrack procfs kconfig (git-fixes). - selftests: tc: set timeout to 15 minutes (git-fixes). - serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes). - serial: 8250: lock port for uart_ier access in omap8250_irq() (git-fixes). - serial: 8250: omap: fix freeing of resources on failed register (git-fixes). - serial: 8250_omap: use force_suspend and resume for system suspend (git-fixes). - serial: atmel: do not enable irqs prematurely (git-fixes). - serial: qcom-geni: drop bogus runtime pm state update (git-fixes). - serial: sifive: fix sifive_serial_console_setup() section (git-fixes). - sfc: fix crash when reading stats while nic is resetting (git-fixes). - sfc: fix xdp queues mode with legacy irq (git-fixes). - sfc: use budget for tx completions (git-fixes). - signal/powerpc: on swapcontext failure force sigsegv (bsc#1194869). - signal/s390: use force_sigsegv in default_trap_handler (git-fixes bsc#1212861). - signal: replace force_sigsegv(sigsegv) with force_fatal_sig(sigsegv) (bsc#1194869). - smb3: do not reserve too many oplock credits (bsc#1193629). - smb3: missing null check in smb2_change_notify (bsc#1193629). - smb: client: fix broken file attrs with nodfs mounts (bsc#1193629). - smb: client: fix missed ses refcounting (git-fixes). - smb: client: fix parsing of source mount option (bsc#1193629). - smb: client: fix shared dfs root mounts with different prefixes (bsc#1193629). - smb: client: fix warning in cifs_match_super() (bsc#1193629). - smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629). - smb: client: fix warning in cifsfindfirst() (bsc#1193629). - smb: client: fix warning in cifsfindnext() (bsc#1193629). - smb: client: fix warning in generic_ip_connect() (bsc#1193629). - smb: client: improve dfs mount check (bsc#1193629). - smb: client: remove redundant pointer 'server' (bsc#1193629). - smb: delete an unnecessary statement (bsc#1193629). - smb: move client and server files to common directory fs/smb (bsc#1193629). - smb: remove obsolete comment (bsc#1193629). - soc/fsl/qe: fix usb.c build errors (git-fixes). - soc: samsung: exynos-pmu: re-introduce exynos4212 support (git-fixes). - soundwire: bus_type: avoid lockdep assert in sdw_drv_probe() (git-fixes). - soundwire: cadence: drain the rx fifo after an io timeout (git-fixes). - soundwire: dmi-quirks: add new mapping for hp spectre x360 (git-fixes). - soundwire: qcom: fix storing port config out-of-bounds (git-fixes). - soundwire: qcom: update status correctly with mask (git-fixes). - soundwire: stream: add missing clear of alloc_slave_rt (git-fixes). - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes). - spi: bcm63xx: fix max prepend length (git-fixes). - spi: dw: round of n_bytes to power of 2 (git-fixes). - spi: lpspi: disable lpspi module irq in dma mode (git-fixes). - spi: spi-geni-qcom: correct cs_toggle bit in spi_trans_cfg (git-fixes). - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes). - staging: r8712: fix memory leak in _r8712_init_xmit_priv() (git-fixes). - sunrpc: always free ctxt when freeing deferred request (git-fixes). - sunrpc: double free xprt_ctxt while still in use (git-fixes). - sunrpc: fix trace_svc_register() call site (git-fixes). - sunrpc: fix uaf in svc_tcp_listen_data_ready() (git-fixes). - sunrpc: remove dead code in svc_tcp_release_rqst() (git-fixes). - sunrpc: remove the maximum number of retries in call_bind_status (git-fixes). - svcrdma: prevent page release when nothing was received (git-fixes). - swsmu/amdgpu_smu: fix the wrong if-condition (git-fixes). - test_firmware: return enomem instead of enospc on failed memory allocation (git-fixes). - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes). - tpm_tis: explicitly check for error code (git-fixes). - tracing/timer: add missing hrtimer modes to decode_hrtimer_mode() (git-fixes). - tty: n_gsm: fix uaf in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes). - tty: serial: imx: fix rs485 rx after tx (git-fixes). - tty: serial: samsung_tty: fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes). - tty: serial: samsung_tty: fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes). - ubi: ensure that vid header offset + vid header size &lt;= alloc, size (bsc#1210584). - ubi: fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - ubifs: add missing iput if do_tmpfile() failed in rename whiteout (git-fixes). - ubifs: do_rename: fix wrong space budget when target inode's nlink > 1 (git-fixes). - ubifs: error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes). - ubifs: fix 'ui->dirty' race between do_tmpfile() and writeback work (git-fixes). - ubifs: fix aa deadlock when setting xattr for encrypted file (git-fixes). - ubifs: fix build errors as symbol undefined (git-fixes). - ubifs: fix deadlock in concurrent rename whiteout and inode writeback (git-fixes). - ubifs: fix memory leak in alloc_wbufs() (git-fixes). - ubifs: fix memory leak in do_rename (git-fixes). - ubifs: fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes). - ubifs: fix to add refcount once page is set private (git-fixes). - ubifs: fix wrong dirty space budget for dirty inode (git-fixes). - ubifs: free memory for tmpfile name (git-fixes). - ubifs: rectify space amount budget for mkdir/tmpfile operations (git-fixes). - ubifs: rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes). - ubifs: rectify space budget for ubifs_xrename() (git-fixes). - ubifs: rename whiteout atomically (git-fixes). - ubifs: rename_whiteout: correct old_dir size computing (git-fixes). - ubifs: rename_whiteout: fix double free for whiteout_ui->data (git-fixes). - ubifs: reserve one leb for each journal head while doing budget (git-fixes). - ubifs: setflags: make dirtied_ino_d 8 bytes aligned (git-fixes). - ubifs: ubifs_writepage: mark page dirty after writing inode failed (git-fixes). - udf: avoid double brelse() in udf_rename() (bsc#1213032). - udf: define efscorrupted error code (bsc#1213038). - udf: detect system inodes linked into directory hierarchy (bsc#1213114). - udf: discard preallocation before extending file with a hole (bsc#1213036). - udf: do not bother looking for prealloc extents if i_lenextents matches i_size (bsc#1213035). - udf: do not bother merging very long extents (bsc#1213040). - udf: do not update file length for failed writes to inline files (bsc#1213041). - udf: fix error handling in udf_new_inode() (bsc#1213112). - udf: fix extending file within last block (bsc#1213037). - udf: fix preallocation discarding at indirect extent boundary (bsc#1213034). - udf: preserve link count of system files (bsc#1213113). - udf: truncate added extents on failed expansion (bsc#1213039). - update config and supported.conf files due to renaming. - update config files: enable config_x86_amd_pstate (bsc#1212445) - update suse/rdma-mthca-fix-crash-when-polling-cq-for-shared-qps. (git-fixes bsc#1212604). - usb: dwc2: fix some error handling paths (git-fixes). - usb: dwc2: platform: improve error reporting for problems during .remove() (git-fixes). - usb: dwc3-meson-g12a: fix an error handling path in dwc3_meson_g12a_probe() (git-fixes). - usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes). - usb: dwc3: gadget: propagate core init errors to udc during pullup (git-fixes). - usb: dwc3: pci: skip byt gpio lookup table for hardwired phy (git-fixes). - usb: dwc3: qcom: fix an error handling path in dwc3_qcom_probe() (git-fixes). - usb: dwc3: qcom: fix potential memory leak (git-fixes). - usb: dwc3: qcom: release the correct resources in dwc3_qcom_remove() (git-fixes). - usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). - usb: gadget: u_serial: add null pointer check in gserial_suspend (git-fixes). - usb: gadget: udc: core: offload usb_udc_vbus_handler processing (git-fixes). - usb: gadget: udc: core: prevent soft_connect_store() race (git-fixes). - usb: gadget: udc: fix null dereference in remove() (git-fixes). - usb: hide unused usbfs_notify_suspend/resume functions (git-fixes). - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes). - usb: serial: option: add lara-r6 01b pids (git-fixes). - usb: typec: fix fast_role_swap_current show function (git-fixes). - usb: typec: iterate pds array when showing the pd list (git-fixes). - usb: typec: set port->pd before adding device for typec_port (git-fixes). - usb: typec: use sysfs_emit_at when concatenating the string (git-fixes). - usb: xhci-mtk: set the dma max_seg_size (git-fixes). - usb: xhci: remove unused udev from xhci_log_ctx trace event (git-fixes). - usrmerge: adjust module path in the kernel sources (bsc#1212835). - vhost: support packed when setting-getting vring_base (git-fixes). - vhost_net: revert upend_idx only on retriable error (git-fixes). - virtio-net: maintain reverse cleanup order (git-fixes). - virtio_net: fix error unwinding of xdp initialization (git-fixes). - w1: fix loop in w1_fini() (git-fixes). - w1: w1_therm: fix locking behavior in convert_t (git-fixes). - wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes). - wifi: ath10k: trigger sta disconnect after reconfig complete on hardware restart (git-fixes). - wifi: ath11k: add missing check for ioremap (git-fixes). - wifi: ath11k: add support for suspend in power down state (bsc#1207948). - wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948). - wifi: ath11k: handle thermal device registeration together with mac (bsc#1207948). - wifi: ath11k: remove mhi loopback channels (bsc#1207948). - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: convert msecs to jiffies where needed (git-fixes). - wifi: ath9k: do not allow to overwrite endpoint0 attributes (git-fixes). - wifi: ath9k: fix ar9003 mac hardware hang check register offset calculation (git-fixes). - wifi: ath9k: fix possible stall on ath9k_txq_list_has_key() (git-fixes). - wifi: atmel: fix an error handling path in atmel_probe() (git-fixes). - wifi: cfg80211: rewrite merging of inherited elements (git-fixes). - wifi: iwlwifi: mvm: indicate hw decrypt for beacon protection (git-fixes). - wifi: iwlwifi: pcie: fix null pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes). - wifi: iwlwifi: pull from txqs with softirqs disabled (git-fixes). - wifi: mwifiex: fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes). - wifi: orinoco: fix an error handling path in orinoco_cs_probe() (git-fixes). - wifi: orinoco: fix an error handling path in spectrum_cs_probe() (git-fixes). - wifi: ray_cs: drop useless status variable in parse_addr() (git-fixes). - wifi: ray_cs: utilize strnlen() in parse_addr() (git-fixes). - wifi: rsi: do not configure wowlan in shutdown hook if not enabled (git-fixes). - wifi: rsi: do not set mmc_pm_keep_power in shutdown (git-fixes). - wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes). - wifi: wilc1000: fix for absent rsn capabilities wfa testcase (git-fixes). - wl3501_cs: use eth_hw_addr_set() (git-fixes). - writeback: fix call of incorrect macro (bsc#1213024). - writeback: fix dereferencing null mapping->host on writeback_page_template (git-fixes). - x86/amd_nb: add pci id for family 19h model 78h (git-fixes). - x86/build: avoid relocation information in final vmlinux (bsc#1187829). - x86/kprobes: fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes). - x86/platform/uv: add platform resolving #defines for misc gam_mmioh_redirect* (bsc#1212256 jsc#ped-4718). - x86/platform/uv: fix printed information in calc_mmioh_map (bsc#1212256 jsc#ped-4718). - x86/platform/uv: helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#ped-4718). - x86/platform/uv: introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#ped-4718). - x86/platform/uv: remove remaining bug_on() and bug() calls (bsc#1212256 jsc#ped-4718). - x86/platform/uv: update uv platform code for snc (bsc#1212256 jsc#ped-4718). - x86/platform/uv: uv support for sub-numa clustering (bsc#1212256 jsc#ped-4718). - x86/platform/uv: when searching for minimums, start at int_max not 99999 (bsc#1212256 jsc#ped-4718). - x86/pvh: obtain vga console info in dom0 (git-fixes). - x86/xen: fix secondary processor fpu initialization (bsc#1212869). - x86: fix .brk attribute in linker script (git-fixes). - xen/blkfront: only check req_fua for writes (git-fixes). - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes). - xfs: ail needs asynchronous cil forcing (bsc#1211811). - xfs: async cil flushes need pending pushes to be made stable (bsc#1211811). - xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811). - xfs: cil work is serialised, not pipelined (bsc#1211811). - xfs: clean up the rtbitmap fsmap backend (git-fixes). - xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes). - xfs: do not reverse order of items in bulk ail insertion (git-fixes). - xfs: do not run shutdown callbacks on active iclogs (bsc#1211811). - xfs: drop async cache flushes from cil commits (bsc#1211811). - xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811). - xfs: fix getfsmap reporting past the last rt extent (git-fixes). - xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes). - xfs: fix interval filtering in multi-step fsmap queries (git-fixes). - xfs: fix logdev fsmap query result filtering (git-fixes). - xfs: fix off-by-one error when the last rt extent is in use (git-fixes). - xfs: fix uninitialized variable access (git-fixes). - xfs: make fsmap backend function key parameters const (git-fixes). - xfs: make the record pointer passed to query_range functions const (git-fixes). - xfs: move the cil workqueue to the cil (bsc#1211811). - xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811). - xfs: order cil checkpoint start records (bsc#1211811). - xfs: pass a cil context to xlog_write() (bsc#1211811). - xfs: pass explicit mount pointer to rtalloc query functions (git-fixes). - xfs: rework xlog_state_do_callback() (bsc#1211811). - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811). - xfs: separate out log shutdown callback processing (bsc#1211811). - xfs: wait iclog complete before tearing down ail (bsc#1211811). - xfs: xlog_state_ioerror must die (bsc#1211811). - xhci: fix resume issue of some zhaoxin hosts (git-fixes). - xhci: fix trb prefetch issue of zhaoxin hosts (git-fixes). - xhci: show zhaoxin xhci root hub speed correctly (git-fixes). Important SUSE bug 1150305 SUSE bug 1187829 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1206418 SUSE bug 1207129 SUSE bug 1207894 SUSE bug 1207948 SUSE bug 1208788 SUSE bug 1210335 SUSE bug 1210565 SUSE bug 1210584 SUSE bug 1210627 SUSE bug 1210780 SUSE bug 1210825 SUSE bug 1210853 SUSE bug 1211014 SUSE bug 1211131 SUSE bug 1211243 SUSE bug 1211738 SUSE bug 1211811 SUSE bug 1211867 SUSE bug 1212051 SUSE bug 1212256 SUSE bug 1212265 SUSE bug 1212301 SUSE bug 1212445 SUSE bug 1212456 SUSE bug 1212502 SUSE bug 1212525 SUSE bug 1212603 SUSE bug 1212604 SUSE bug 1212685 SUSE bug 1212766 SUSE bug 1212835 SUSE bug 1212838 SUSE bug 1212842 SUSE bug 1212846 SUSE bug 1212848 SUSE bug 1212861 SUSE bug 1212869 SUSE bug 1212892 SUSE bug 1212901 SUSE bug 1212905 SUSE bug 1212961 SUSE bug 1213010 SUSE bug 1213011 SUSE bug 1213012 SUSE bug 1213013 SUSE bug 1213014 SUSE bug 1213015 SUSE bug 1213016 SUSE bug 1213017 SUSE bug 1213018 SUSE bug 1213019 SUSE bug 1213020 SUSE bug 1213021 SUSE bug 1213024 SUSE bug 1213025 SUSE bug 1213032 SUSE bug 1213034 SUSE bug 1213035 SUSE bug 1213036 SUSE bug 1213037 SUSE bug 1213038 SUSE bug 1213039 SUSE bug 1213040 SUSE bug 1213041 SUSE bug 1213059 SUSE bug 1213061 SUSE bug 1213087 SUSE bug 1213088 SUSE bug 1213089 SUSE bug 1213090 SUSE bug 1213092 SUSE bug 1213093 SUSE bug 1213094 SUSE bug 1213095 SUSE bug 1213096 SUSE bug 1213098 SUSE bug 1213099 SUSE bug 1213100 SUSE bug 1213102 SUSE bug 1213103 SUSE bug 1213104 SUSE bug 1213105 SUSE bug 1213106 SUSE bug 1213107 SUSE bug 1213108 SUSE bug 1213109 SUSE bug 1213110 SUSE bug 1213111 SUSE bug 1213112 SUSE bug 1213113 SUSE bug 1213114 SUSE bug 1213116 SUSE bug 1213134 SUSE bug 1213167 SUSE bug 1213205 SUSE bug 1213206 SUSE bug 1213226 SUSE bug 1213233 SUSE bug 1213245 SUSE bug 1213247 SUSE bug 1213252 SUSE bug 1213258 SUSE bug 1213259 SUSE bug 1213263 SUSE bug 1213264 SUSE bug 1213272 SUSE bug 1213286 SUSE bug 1213287 SUSE bug 1213304 SUSE bug 1213417 SUSE bug 1213493 SUSE bug 1213523 SUSE bug 1213524 SUSE bug 1213533 SUSE bug 1213543 SUSE bug 1213578 SUSE bug 1213585 SUSE bug 1213586 SUSE bug 1213588 SUSE bug 1213601 SUSE bug 1213620 SUSE bug 1213632 SUSE bug 1213653 SUSE bug 1213705 SUSE bug 1213713 SUSE bug 1213715 SUSE bug 1213747 SUSE bug 1213756 SUSE bug 1213759 SUSE bug 1213777 SUSE bug 1213810 SUSE bug 1213812 SUSE bug 1213856 SUSE bug 1213857 SUSE bug 1213863 SUSE bug 1213867 SUSE bug 1213870 SUSE bug 1213871 SUSE bug 1213872 CVE-2022-40982 CVE-2023-0459 CVE-2023-1829 CVE-2023-20569 CVE-2023-20593 CVE-2023-21400 CVE-2023-2156 CVE-2023-2166 CVE-2023-2430 CVE-2023-2985 CVE-2023-3090 CVE-2023-31083 CVE-2023-3111 CVE-2023-3117 CVE-2023-31248 CVE-2023-3212 CVE-2023-3268 CVE-2023-3389 CVE-2023-3390 CVE-2023-35001 CVE-2023-3567 CVE-2023-3609 CVE-2023-3611 CVE-2023-3776 CVE-2023-3812 CVE-2023-38409 CVE-2023-3863 CVE-2023-4004 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627). - CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417). - CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812). The following non-security bugs were fixed: - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445). - ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445). - ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes). - ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes). - afs: Adjust ACK interpretation to try and cope with NAT (git-fixes). - afs: Fix access after dec in put functions (git-fixes). - afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes). - afs: Fix dynamic root getattr (git-fixes). - afs: Fix fileserver probe RTT handling (git-fixes). - afs: Fix infinite loop found by xfstest generic/676 (git-fixes). - afs: Fix lost servers_outstanding count (git-fixes). - afs: Fix server->active leak in afs_put_server (git-fixes). - afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes). - afs: Fix updating of i_size with dv jump from server (git-fixes). - afs: Fix vlserver probe RTT handling (git-fixes). - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes). - afs: Use refcount_t rather than atomic_t (git-fixes). - afs: Use the operation issue time instead of the reply time for callbacks (git-fixes). - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes). - ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes). - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes). - ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes). - ALSA: hda/realtek - remove 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes). - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes). - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes). - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129). - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes). - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes). - ALSA: usb-audio: Avoid unnecessary interface change at EP close (git-fixes). - ALSA: usb-audio: Clear fixed clock rate at closing EP (git-fixes). - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Drop superfluous interface setup at parsing (git-fixes). - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes). - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes). - ALSA: usb-audio: More refactoring of hw constraint rules (git-fixes). - ALSA: usb-audio: Properly refcounting clock rate (git-fixes). - ALSA: usb-audio: Rate limit usb_set_interface error reporting (git-fixes). - ALSA: usb-audio: Refcount multiple accesses on the single clock (git-fixes). - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (git-fixes). - ALSA: usb-audio: Update for native DSD support quirks (git-fixes). - ALSA: usb-audio: Use atomic_try_cmpxchg in ep_state_update (git-fixes). - ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes). - amd-pstate: Fix amd_pstate mode switch (git-fixes). - ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes). - ASoC: atmel: Fix the 8K sample parameter in I2SC master (git-fixes). - ASoc: codecs: ES8316: Fix DMIC config (git-fixes). - ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes). - ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes). - ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes). - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes). - ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes). - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes). - ASoC: da7219: Check for failure reading AAD IRQ events (git-fixes). - ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes). - ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes). - ASoC: fsl_spdif: Silence output on stop (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes). - ASoC: tegra: Fix ADX byte map (git-fixes). - ASoC: tegra: Fix AMX byte map (git-fixes). - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (git-fixes). - ata: pata_ns87415: mark ns87560_tf_read static (git-fixes). - block, bfq: Fix division by zero error on zero wsum (bsc#1213653). - block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes). - bus: mhi: add new interfaces to handle MHI channels directly (bsc#1207948). - bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948). - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes). - ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856). - coda: Avoid partial allocation of sig_inputArgs (git-fixes). - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State frequencies attributes (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State performance attributes (bsc#1212445). - cpufreq: amd-pstate: Add boost mode support for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445). - cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445). - cpufreq: amd-pstate: Add fast switch function for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: Add guided autonomous mode (bsc#1212445). - cpufreq: amd-pstate: Add guided mode control support via sysfs (bsc#1212445). - cpufreq: amd-pstate: Add more tracepoint for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: Add resume and suspend callbacks (bsc#1212445). - cpufreq: amd-pstate: Add trace for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445). - cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445). - cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445). - cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL register at init (bsc#1212445). - cpufreq: amd-pstate: Expose struct amd_cpudata (bsc#1212445). - cpufreq: amd-pstate: Fix initial highest_perf value (bsc#1212445). - cpufreq: amd-pstate: Fix invalid write to MSR_AMD_CPPC_REQ (bsc#1212445). - cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445). - cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment (bsc#1212445). - cpufreq: amd-pstate: fix white-space (bsc#1212445). - cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445). - cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445). - cpufreq: amd-pstate: implement Pstate EPP support for the AMD processors (bsc#1212445). - cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445). - cpufreq: amd-pstate: Introduce a new AMD P-State driver to support future processors (bsc#1212445). - cpufreq: amd-pstate: Introduce the support for the processors with shared memory solution (bsc#1212445). - cpufreq: amd-pstate: Let user know amd-pstate is disabled (bsc#1212445). - cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated (bsc#1212445). - cpufreq: amd-pstate: Make varaiable mode_state_machine static (bsc#1212445). - cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445). - cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (bsc#1212445). - cpufreq: amd-pstate: Remove fast_switch_possible flag from active driver (bsc#1212445). - cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules (bsc#1212445). - cpufreq: amd-pstate: Set a fallback policy based on preferred_profile (bsc#1212445). - cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445). - cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() (bsc#1212445). - cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445). - cpufreq: amd-pstate: Write CPPC enable bit per-socket (bsc#1212445). - crypto: kpp - Add helper to set reqsize (git-fixes). - crypto: qat - Use helper to set reqsize (git-fixes). - dlm: fix missing lkb refcount handling (git-fixes). - dlm: fix plock invalid read (git-fixes). - Documentation: cpufreq: amd-pstate: Move amd_pstate param to alphabetical order (bsc#1212445). - Documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes). - drm/amd/display: Add monitor specific edid quirk (git-fixes). - drm/amd/display: Add polling method to handle MST reply packet (bsc#1213578). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes). - drm/amd/display: Disable MPC split by default on special asic (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix seamless odm transitions (git-fixes). - drm/amd/display: Keep PHY active for DP displays on DCN31 (git-fixes). - drm/amd/display: only accept async flips for fast updates (git-fixes). - drm/amd/display: Only update link settings after successful MST link train (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() (git-fixes). - drm/amd: Fix an error handling mistake in psp_sw_init() (git-fixes). - drm/amdgpu: add the fan abnormal detection feature (git-fixes). - drm/amdgpu: avoid restore process run into dead loop (git-fixes). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes). - drm/amdgpu: Fix minmax warning (git-fixes). - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes). - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 (git-fixes). - drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes). - drm/amd/pm: share the code around SMU13 pcie parameters update (git-fixes). - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes). - drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (git-fixes). - drm/client: Fix memory leak in drm_client_modeset_probe (git-fixes). - drm/dp_mst: Clear MSG_RDY flag before sending new message (bsc#1213578). - drm: Fix null pointer dereference in drm_dp_atomic_find_time_slots() (bsc#1213578). - drm/i915: Do not preserve dpll_hw_state for slave crtc in Bigjoiner (git-fixes). - drm/i915/dpt: Use shmem for dpt objects (git-fixes). - drm/i915: Fix an error handling path in igt_write_huge() (git-fixes). - drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks (git-fixes). - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (git-fixes). - drm/radeon: Fix integer overflow in radeon_cs_parser_init (git-fixes). - drm/ttm: fix bulk_move corruption when adding a entry (git-fixes). - drm/ttm: fix warning that we shouldn't mix && and || (git-fixes). - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (bsc#1213632). - drm/vmwgfx: Remove explicit and broken vblank handling (bsc#1213632). - drm/vmwgfx: Remove rcu locks from user resources (bsc#1213632). - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes). - fbdev: imxfb: Removed unneeded release_mem_region (git-fixes). - fbdev: imxfb: warn about invalid left/right margin (git-fixes). - file: always lock position for FMODE_ATOMIC_POS (bsc#1213759). - fs: dlm: add midcomms init/start functions (git-fixes). - fs: dlm: do not set stop rx flag after node reset (git-fixes). - fs: dlm: filter user dlm messages for kernel locks (git-fixes). - fs: dlm: fix log of lowcomms vs midcomms (git-fixes). - fs: dlm: fix race between test_bit() and queue_work() (git-fixes). - fs: dlm: fix race in lowcomms (git-fixes). - fs: dlm: handle -EBUSY first in lock arg validation (git-fixes). - fs: dlm: move sending fin message into state change handling (git-fixes). - fs: dlm: retry accept() until -EAGAIN or error returns (git-fixes). - fs: dlm: return positive pid value for F_GETLK (git-fixes). - fs: dlm: start midcomms before scand (git-fixes). - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (git-fixes). - FS: JFS: Check for read-only mounted filesystem in txBegin (git-fixes). - FS: JFS: Fix null-ptr-deref Read in txBegin (git-fixes). - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (git-fixes). - gve: Set default duplex configuration to full (git-fixes). - gve: unify driver name usage (git-fixes). - hwmon: (adm1275) Allow setting sample averaging (git-fixes). - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (git-fixes). - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (git-fixes). - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes). - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes). - i2c: xiic: Do not try to handle more interrupt events after error (git-fixes). - iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED (git-fixes). - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes). - iavf: Fix out-of-bounds when setting channels on remove (git-fixes). - iavf: fix potential deadlock on allocation failure (git-fixes). - iavf: fix reset task race with iavf_remove() (git-fixes). - iavf: Fix use-after-free in free_netdev (git-fixes). - iavf: Move netdev_update_features() into watchdog task (git-fixes). - iavf: use internal state to free traffic IRQs (git-fixes). - iavf: Wait for reset in callbacks which trigger it (git-fixes). - IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes) - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - ice: handle extts in the miscellaneous interrupt thread (git-fixes). - igc: Check if hardware TX timestamping is enabled earlier (git-fixes). - igc: Enable and fix RX hash usage by netstack (git-fixes). - igc: Fix inserting of empty frame for launchtime (git-fixes). - igc: Fix Kernel Panic during ndo_tx_timeout callback (git-fixes). - igc: Fix launchtime before start of cycle (git-fixes). - igc: Fix race condition in PTP tx code (git-fixes). - igc: Handle PPS start time programming for past time values (git-fixes). - igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes). - igc: Remove delay during TX ring configuration (git-fixes). - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes). - igc: Work around HW bug causing missing timestamps (git-fixes). - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (git-fixes). - Input: iqs269a - do not poll during ATI (git-fixes). - Input: iqs269a - do not poll during suspend or resume (git-fixes). - jffs2: fix memory leak in jffs2_do_fill_super (git-fixes). - jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes). - jffs2: fix memory leak in jffs2_scan_medium (git-fixes). - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes). - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (git-fixes). - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes). - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (git-fixes). - kABI fix after Restore kABI for NVidia vGPU driver (bsc#1210825). - kabi/severities: relax kABI for ath11k local symbols (bsc#1207948) - kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes). - KVM: arm64: Do not read a HW interrupt pending state in user context (git-fixes) - KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620) - KVM: Do not null dereference ops->destroy (git-fixes) - KVM: downgrade two BUG_ONs to WARN_ON_ONCE (git-fixes) - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL (git-fixes) - KVM: s390: pv: fix index value of replaced ASCE (git-fixes bsc#1213867). - KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported (git-fixes). - KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) (git-fixes). - KVM: VMX: restore vmx_vmexit alignment (git-fixes). - KVM: x86: Account fastpath-only VM-Exits in vCPU stats (git-fixes). - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes). - libceph: harden msgr2.1 frame segment length checks (bsc#1213857). - MAINTAINERS: Add AMD P-State driver maintainer entry (bsc#1212445). - m ALSA: usb-audio: Add quirk for Tascam Model 12 (git-fixes). - md: add error_handlers for raid0 and linear (bsc#1212766). - media: staging: atomisp: select V4L2_FWNODE (git-fixes). - mhi_power_down() kABI workaround (bsc#1207948). - mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes). - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes). - net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes). - net: mana: Batch ringing RX queue doorbell on receiving packets (bsc#1212901). - net: mana: Use the correct WQE count for ringing RQ doorbell (bsc#1212901). - net/mlx5: DR, Support SW created encap actions for FW table (git-fixes). - net/mlx5e: Check for NOT_READY flag state after locking (git-fixes). - net/mlx5e: fix double free in mlx5e_destroy_flow_table (git-fixes). - net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (git-fixes). - net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes). - net/mlx5e: XDP, Allow growing tail for XDP multi buffer (git-fixes). - net/mlx5e: xsk: Set napi_id to support busy polling on XSK RQ (git-fixes). - net: phy: marvell10g: fix 88x3310 power up (git-fixes). - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585). - nfsd: add encoding of op_recall flag for write delegation (git-fixes). - nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes). - nfsd: Fix sparse warning (git-fixes). - nfsd: Remove open coding of string copy (git-fixes). - nfsv4.1: Always send a RECLAIM_COMPLETE after establishing lease (git-fixes). - nfsv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (git-fixes). - nvme: do not reject probe due to duplicate IDs for single-ported PCIe devices (git-fixes). - nvme: fix the NVME_ID_NS_NVM_STS_MASK definition (git-fixes). - nvme-pci: fix DMA direction of unmapping integrity data (git-fixes). - nvme-pci: remove nvme_queue from nvme_iod (git-fixes). - octeontx2-af: Move validation of ptp pointer before its usage (git-fixes). - octeontx2-pf: Add additional check for MCAM rules (git-fixes). - octeontx-af: fix hardware timestamp configuration (git-fixes). - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes). - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes). - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (git-fixes). - pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes). - pinctrl: amd: Do not show `Invalid config param` errors (git-fixes). - pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes). - pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes). - pinctrl: amd: Use amd_pinconf_set() for all config options (git-fixes). - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (git-fixes). - RDMA/bnxt_re: Fix hang during driver unload (git-fixes) - RDMA/bnxt_re: Prevent handling any completions after qp destroy (git-fixes) - RDMA/core: Update CMA destination address on rdma_resolve_addr (git-fixes) - RDMA/irdma: Add missing read barriers (git-fixes) - RDMA/irdma: Fix data race on CQP completion stats (git-fixes) - RDMA/irdma: Fix data race on CQP request done (git-fixes) - RDMA/irdma: Fix op_type reporting in CQEs (git-fixes) - RDMA/irdma: Report correct WC error (git-fixes) - RDMA/mlx4: Make check for invalid flags stricter (git-fixes) - RDMA/mthca: Fix crash when polling CQ for shared QPs (git-fixes) - regmap: Account for register length in SMBus I/O limits (git-fixes). - regmap: Drop initial version of maximum transfer length fixes (git-fixes). - Restore kABI for NVidia vGPU driver (bsc#1210825). - Revert 'ALSA: usb-audio: Drop superfluous interface setup at parsing' (git-fixes). - Revert 'debugfs, coccinelle: check for obsolete DEFINE_SIMPLE_ATTRIBUTE() usage' (git-fixes). - Revert 'Drop AMDGPU patches for fixing regression (bsc#1213304,bsc#1213777)' - Revert 'iavf: Detach device during reset task' (git-fixes). - Revert 'iavf: Do not restart Tx queues after reset task failure' (git-fixes). - Revert 'NFSv4: Retry LOCK on OLD_STATEID during delegation return' (git-fixes). - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (git-fixes). - Revert 'usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()' (git-fixes). - Revert 'usb: xhci: tegra: Fix error check' (git-fixes). - Revert 'xhci: add quirk for host controllers that do not update endpoint DCS' (git-fixes). - Revive drm_dp_mst_hpd_irq() function (bsc#1213578). - rxrpc, afs: Fix selection of abort codes (git-fixes). - s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870). - s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810). - s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872). - s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863). - s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870). - s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871). - s390/qeth: Fix vipa deletion (git-fixes bsc#1213713). - s390/vmem: fix empty page tables cleanup under KASAN (git-fixes bsc#1213715). - scftorture: Count reschedule IPIs (git-fixes). - scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected (bsc#1213756). - scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756). - scsi: lpfc: Clean up SLI-4 sysfs resource reporting (bsc#1213756). - scsi: lpfc: Copyright updates for 14.2.0.14 patches (bsc#1213756). - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (bsc#1213756). - scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756). - scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (bsc#1213756). - scsi: lpfc: Pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756). - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (bsc#1213756). - scsi: lpfc: Refactor cpu affinity assignment paths (bsc#1213756). - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (bsc#1213756). - scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (bsc#1213756). - scsi: lpfc: Replace one-element array with flexible-array member (bsc#1213756). - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756). - scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (bsc#1213756). - scsi: lpfc: Simplify fcp_abort transport callback log message (bsc#1213756). - scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756). - scsi: lpfc: Use struct_size() helper (bsc#1213756). - scsi: qla2xxx: Adjust IOCB resource on qpair create (bsc#1213747). - scsi: qla2xxx: Array index may go out of bound (bsc#1213747). - scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747). - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (bsc#1213747). - scsi: qla2xxx: Correct the index of array (bsc#1213747). - scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747). - scsi: qla2xxx: Fix buffer overrun (bsc#1213747). - scsi: qla2xxx: Fix command flush during TMF (bsc#1213747). - scsi: qla2xxx: Fix deletion race condition (bsc#1213747). - scsi: qla2xxx: Fix end of loop test (bsc#1213747). - scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747). - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (bsc#1213747). - scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747). - scsi: qla2xxx: Fix NULL pointer dereference in target mode (bsc#1213747). - scsi: qla2xxx: Fix potential NULL pointer dereference (bsc#1213747). - scsi: qla2xxx: Fix session hang in gnl (bsc#1213747). - scsi: qla2xxx: Fix TMF leak through (bsc#1213747). - scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747). - scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747). - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (bsc#1213747). - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (bsc#1213747). - scsi: qla2xxx: Silence a static checker warning (bsc#1213747). - scsi: qla2xxx: Turn off noisy message log (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747). - scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747). - selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes). - serial: qcom-geni: drop bogus runtime pm state update (git-fixes). - serial: sifive: Fix sifive_serial_console_setup() section (git-fixes). - series: udpate metadata Refresh - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - sfc: fix XDP queues mode with legacy IRQ (git-fixes). - sfc: use budget for TX completions (git-fixes). - soundwire: qcom: update status correctly with mask (git-fixes). - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes). - staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (git-fixes). - SUNRPC: always free ctxt when freeing deferred request (git-fixes). - SUNRPC: double free xprt_ctxt while still in use (git-fixes). - SUNRPC: Fix trace_svc_register() call site (git-fixes). - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (git-fixes). - SUNRPC: Remove dead code in svc_tcp_release_rqst() (git-fixes). - SUNRPC: remove the maximum number of retries in call_bind_status (git-fixes). - svcrdma: Prevent page release when nothing was received (git-fixes). - tpm_tis: Explicitly check for error code (git-fixes). - tty: n_gsm: fix UAF in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes). - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (git-fixes). - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (git-fixes). - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes). - ubifs: Fix AA deadlock when setting xattr for encrypted file (git-fixes). - ubifs: Fix build errors as symbol undefined (git-fixes). - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (git-fixes). - ubifs: Fix memory leak in alloc_wbufs() (git-fixes). - ubifs: Fix memory leak in do_rename (git-fixes). - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes). - ubifs: Fix to add refcount once page is set private (git-fixes). - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (git-fixes). - ubifs: Fix wrong dirty space budget for dirty inode (git-fixes). - ubifs: Free memory for tmpfile name (git-fixes). - ubifs: Rectify space amount budget for mkdir/tmpfile operations (git-fixes). - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes). - ubifs: Rectify space budget for ubifs_xrename() (git-fixes). - ubifs: Rename whiteout atomically (git-fixes). - ubifs: rename_whiteout: correct old_dir size computing (git-fixes). - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (git-fixes). - ubifs: Reserve one leb for each journal head while doing budget (git-fixes). - ubifs: Re-statistic cleaned znode count if commit failed (git-fixes). - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (git-fixes). - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (git-fixes). - Update config files: enable CONFIG_X86_AMD_PSTATE (bsc#1212445) - usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes). - usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes). - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (git-fixes). - usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). - USB: serial: option: add LARA-R6 01B PIDs (git-fixes). - usb: typec: Iterate pds array when showing the pd list (git-fixes). - usb: typec: Set port->pd before adding device for typec_port (git-fixes). - usb: typec: Use sysfs_emit_at when concatenating the string (git-fixes). - usb: xhci-mtk: set the dma max_seg_size (git-fixes). - vhost_net: revert upend_idx only on retriable error (git-fixes). - vhost: support PACKED when setting-getting vring_base (git-fixes). - virtio_net: Fix error unwinding of XDP initialization (git-fixes). - virtio-net: Maintain reverse cleanup order (git-fixes). - wifi: ath11k: add support for suspend in power down state (bsc#1207948). - wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948). - wifi: ath11k: handle thermal device registeration together with MAC (bsc#1207948). - wifi: ath11k: remove MHI LOOPBACK channels (bsc#1207948). - wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes). - wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes). - wl3501_cs: use eth_hw_addr_set() (git-fixes). - x86/PVH: obtain VGA console info in Dom0 (git-fixes). - xen/blkfront: Only check REQ_FUA for writes (git-fixes). - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes). - xfs: AIL needs asynchronous CIL forcing (bsc#1211811). - xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811). - xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811). - xfs: CIL work is serialised, not pipelined (bsc#1211811). - xfs: do not run shutdown callbacks on active iclogs (bsc#1211811). - xfs: drop async cache flushes from CIL commits (bsc#1211811). - xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811). - xfs: move the CIL workqueue to the CIL (bsc#1211811). - xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811). - xfs: order CIL checkpoint start records (bsc#1211811). - xfs: pass a CIL context to xlog_write() (bsc#1211811). - xfs: rework xlog_state_do_callback() (bsc#1211811). - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811). - xfs: separate out log shutdown callback processing (bsc#1211811). - xfs: wait iclog complete before tearing down AIL (bsc#1211811). - xfs: XLOG_STATE_IOERROR must die (bsc#1211811). - xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes). - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes). - xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes). Important SUSE bug 1206418 SUSE bug 1207129 SUSE bug 1207948 SUSE bug 1210627 SUSE bug 1210780 SUSE bug 1210825 SUSE bug 1211131 SUSE bug 1211738 SUSE bug 1211811 SUSE bug 1212445 SUSE bug 1212502 SUSE bug 1212604 SUSE bug 1212766 SUSE bug 1212901 SUSE bug 1213167 SUSE bug 1213272 SUSE bug 1213287 SUSE bug 1213304 SUSE bug 1213417 SUSE bug 1213578 SUSE bug 1213585 SUSE bug 1213586 SUSE bug 1213588 SUSE bug 1213601 SUSE bug 1213620 SUSE bug 1213632 SUSE bug 1213653 SUSE bug 1213713 SUSE bug 1213715 SUSE bug 1213747 SUSE bug 1213756 SUSE bug 1213759 SUSE bug 1213777 SUSE bug 1213810 SUSE bug 1213812 SUSE bug 1213856 SUSE bug 1213857 SUSE bug 1213863 SUSE bug 1213867 SUSE bug 1213870 SUSE bug 1213871 SUSE bug 1213872 CVE-2022-40982 CVE-2023-0459 CVE-2023-20569 CVE-2023-21400 CVE-2023-2156 CVE-2023-2166 CVE-2023-31083 CVE-2023-3268 CVE-2023-3567 CVE-2023-3609 CVE-2023-3611 CVE-2023-3776 CVE-2023-38409 CVE-2023-3863 CVE-2023-4004 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330). - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727). - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). The following non-security bugs were fixed: - ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305). - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes). - ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes). - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes). - ALSA: ac97: Fix possible error value of *rac97 (git-fixes). - ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes). - ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes). - ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes). - ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes). - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes). - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes). - ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes). - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes). - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes). - ARM: dts: imx6sll: fixup of operating points (git-fixes). - ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes). - ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes). - ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes). - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes). - ASoC: rt5665: add missed regulator_bulk_disable (git-fixes). - ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes). - ASoC: tegra: Fix SFC conversion for few rates (git-fixes). - Bluetooth: Fix potential use-after-free when clear keys (git-fixes). - Bluetooth: L2CAP: Fix use-after-free (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes). - Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes). - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes). - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b - CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123 - Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel. - Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes). - Documentation: devices.txt: Remove ttyIOC* (git-fixes). - Documentation: devices.txt: Remove ttySIOC* (git-fixes). - Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453). - Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453). - Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453). - Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453). - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453). - Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453). - Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453). - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453). - Drop cfg80211 lock fix patches that caused a regression (bsc#1213757) - Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) - Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes). - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes). - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes). - HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes). - HID: wacom: remove the battery when the EKR is off (git-fixes). - HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes). - IB/hfi1: Fix possible panic during hotplug remove (git-fixes) - IB/uverbs: Fix an potential error pointer dereference (git-fixes) - Input: exc3000 - properly stop timer on shutdown (git-fixes). - KVM: s390: fix sthyi error handling (git-fixes bsc#1214370). - Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756). - Kbuild: move to -std=gnu11 (bsc#1214756). - PCI/ASPM: Avoid link retraining race (git-fixes). - PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes). - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes). - PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes). - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes). - PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453). - PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453). - PCI: meson: Remove cast between incompatible function type (git-fixes). - PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes). - PCI: microchip: Remove cast between incompatible function type (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: rockchip: Remove writes to unused registers (git-fixes). - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes). - PCI: tegra194: Fix possible array out of bounds access (git-fixes). - PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes). - RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes) - RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes) - RDMA/efa: Fix wrong resources deallocation order (git-fixes) - RDMA/hns: Fix CQ and QP cache affinity (git-fixes) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes) - RDMA/hns: Fix port active speed (git-fixes) - RDMA/irdma: Prevent zero-length STAG registration (git-fixes) - RDMA/irdma: Replace one-element array with flexible-array member (git-fixes) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes) - RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes) - RDMA/siw: Correct wrong debug message (git-fixes) - RDMA/umem: Set iova in ODP flow (git-fixes) - README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer. - Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes) - Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes). - Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - amba: bus: fix refcount leak (git-fixes). - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes). - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes). - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes). - audit: fix possible soft lockup in __audit_inode_child() (git-fixes). - backlight/bd6107: Compare against struct fb_info.device (git-fixes). - backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes). - backlight/lv5207lp: Compare against struct fb_info.device (git-fixes). - batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes). - batman-adv: Do not increase MTU when set by user (git-fixes). - batman-adv: Fix TT global entry leak when client roamed back (git-fixes). - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes). - batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes). - batman-adv: Trigger events for auto adjusted MTU (git-fixes). - bnx2x: fix page fault following EEH recovery (bsc#1214299). - bpf: Disable preemption in bpf_event_output (git-fixes). - bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924). - bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes). - bus: ti-sysc: Fix build warning for 64-bit build (git-fixes). - bus: ti-sysc: Fix cast to enum warning (git-fixes). - bus: ti-sysc: Flush posted write on enable before reset (git-fixes). - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes). - ceph: defer stopping mdsc delayed_work (bsc#1214392). - ceph: do not check for quotas on MDS stray dirs (bsc#1214238). - ceph: never send metrics if disable_send_metrics is set (bsc#1214180). - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. - cifs: add missing return value check for cifs_sb_tlink (bsc#1193629). - cifs: allow dumping keys for directories too (bsc#1193629). - cifs: fix mid leak during reconnection after timeout threshold (git-fixes). - cifs: if deferred close is disabled then close files immediately (git-fixes). - cifs: is_network_name_deleted should return a bool (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes). - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes). - clk: imx8mp: fix sai4 clock (git-fixes). - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes). - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes). - clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes). - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes). - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes). - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes). - clk: sunxi-ng: Modify mismatched function name (git-fixes). - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453). - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453). - clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453). - clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453). - clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453). - clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453). - cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes). - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659). - cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004). - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - crypto: caam - fix unchecked return value error (git-fixes). - crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes). - define more Hyper-V related constants (bsc#1206453). - dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes). - dma-buf/sync_file: Fix docs syntax (git-fixes). - dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes). - dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes). - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes). - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes). - docs/process/howto: Replace C89 with C11 (bsc#1214756). - docs: kernel-parameters: Refer to the correct bitmap function (git-fixes). - docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes). - docs: printk-formats: Fix hex printing of signed values (git-fixes). - driver core: test_async: fix an error code (git-fixes). - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes). - drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes). - drm/amd/display: Apply 60us prefetch for DCFCLK &lt;= 300Mhz (git-fixes). - drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes). - drm/amd/display: Do not set drr on pipe commit (git-fixes). - drm/amd/display: Enable dcn314 DPP RCO (git-fixes). - drm/amd/display: Ensure that planes are in the same order (git-fixes). - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes). - drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes). - drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes). - drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes). - drm/amd/display: disable RCO for DCN314 (git-fixes). - drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes). - drm/amd/display: limit DPIA link rate to HBR3 (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: trigger timing sync only if TG is running (git-fixes). - drm/amd/pm/smu7: move variables to where they are used (git-fixes). - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes). - drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes). - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes). - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes). - drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes). - drm/amd: flush any delayed gfxoff on suspend entry (git-fixes). - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes). - drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes). - drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes). - drm/amdgpu: Remove unnecessary domain argument (git-fixes). - drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes). - drm/amdgpu: add S/G display parameter (git-fixes). - drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes). - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes). - drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes). - drm/amdgpu: fix memory leak in mes self test (git-fixes). - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes). - drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes). - drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes). - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes). - drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes). - drm/ast: Fix DRAM init on AST2200 (git-fixes). - drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes). - drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes). - drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes). - drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes). - drm/bridge: fix -Wunused-const-variable= warning (git-fixes). - drm/bridge: tc358764: Fix debug print parameter order (git-fixes). - drm/etnaviv: fix dumping of active MMU context (git-fixes). - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes). - drm/i915/sdvo: fix panel_type initialization (git-fixes). - drm/i915: Fix premature release of request's reusable memory (git-fixes). - drm/mediatek: Fix dereference before null check (git-fixes). - drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes). - drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes). - drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes). - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes). - drm/msm/mdp5: Do not leak some plane state (git-fixes). - drm/msm: Update dev core dump to not print backwards (git-fixes). - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes). - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes). - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073). - drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes). - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes). - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes). - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes). - drm/qxl: fix UAF on handle creation (git-fixes). - drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes). - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes). - drm/rockchip: Do not spam logs in atomic check (git-fixes). - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes). - drm/stm: ltdc: fix late dereference check (git-fixes). - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes). - drm/ttm: check null pointer before accessing when swapping (git-fixes). - drm/ttm: never consider pinned BOs for eviction&swap (git-fixes). - drm/vmwgfx: Fix shader stage validation (git-fixes). - drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes). - drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes). - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes). - dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes). - dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes). - dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes). - e1000: Fix typos in comments (jsc#PED-5738). - e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738). - e1000: switch to napi_build_skb() (jsc#PED-5738). - e1000: switch to napi_consume_skb() (jsc#PED-5738). - exfat: fix unexpected EOF while reading dir (bsc#1214000). - exfat: release s_lock before calling dir_emit() (bsc#1214000). - exfat_iterate(): do not open-code file_inode(file) (bsc#1214000). - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes). - fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes). - fbdev: Improve performance of sys_imageblit() (git-fixes). - fbdev: Update fbdev source file paths (git-fixes). - fbdev: fix potential OOB read in fast_imageblit() (git-fixes). - fbdev: mmp: fix value check in mmphw_probe() (git-fixes). - file: reinstate f_pos locking optimization for regular files (bsc#1213759). - firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes). - firmware: cs_dsp: Fix new control name check (git-fixes). - firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes). - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes). - fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes). - fsi: aspeed: Reset master errors after CFAM reset (git-fixes). - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes). - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes). - gpio: mvebu: Make use of devm_pwmchip_add (git-fixes). - gpio: mvebu: fix irq domain leak (git-fixes). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes). - hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453). - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes). - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes). - hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes). - hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes). - hwrng: pic32 - use devm_clk_get_enabled (git-fixes). - i2c: Delete error messages for failed memory allocations (git-fixes). - i2c: Improve size determinations (git-fixes). - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes). - i2c: designware: Correct length byte validation logic (git-fixes). - i2c: designware: Handle invalid SMBus block data response length value (git-fixes). - i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes). - i2c: nomadik: Remove a useless call in the remove function (git-fixes). - i2c: nomadik: Remove unnecessary goto label (git-fixes). - i2c: nomadik: Use devm_clk_get_enabled() (git-fixes). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - iavf: fix potential races for FDIR filters (git-fixes). - ice: Fix RDMA VSI removal during queue rebuild (git-fixes). - ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes). - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes). - iio: adc: stx104: Implement and utilize register structures (git-fixes). - iio: adc: stx104: Utilize iomap interface (git-fixes). - iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes). - intel/e1000:fix repeated words in comments (jsc#PED-5738). - intel: remove unused macros (jsc#PED-5738). - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes). - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). - iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes). - iommu/amd: Fix compile warning in init code (git-fixes). - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes). - iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes). - iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes). - iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes). - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes). - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes). - iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes). - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes). - iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes). - iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes). - iommu/dma: Fix iova map result check bug (git-fixes). - iommu/dma: return error code from iommu_dma_map_sg() (git-fixes). - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes). - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes). - iommu/iova: Fix module config properly (git-fixes). - iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes). - iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes). - iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes). - iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes). - iommu/mediatek: Use component_match_add (git-fixes). - iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes). - iommu/omap: Fix buffer overflow in debugfs (git-fixes). - iommu/rockchip: fix permission bits in page table entries v2 (git-fixes). - iommu/s390: Fix duplicate domain attachments (git-fixes). - iommu/sun50i: Consider all fault sources for reset (git-fixes). - iommu/sun50i: Fix R/W permission check (git-fixes). - iommu/sun50i: Fix flush size (git-fixes). - iommu/sun50i: Fix reset release (git-fixes). - iommu/sun50i: Implement .iotlb_sync_map (git-fixes). - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes). - iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes). - iommu/vt-d: Check correct capability for sagaw determination (git-fixes). - iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes). - iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes). - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes). - iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes). - ipmi:ssif: Add check for kstrdup (git-fixes). - ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes). - ipmi_si: fix a memleak in try_smi_init() (git-fixes). - jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes). - kabi/severities: Ignore newly added SRSO mitigation functions - kabi: Allow extra bugsints (bsc#1213927). - kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there. - kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12. - kunit: make kunit_test_timeout compatible with comment (git-fixes). - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes). - leds: multicolor: Use rounded division when calculating color components (git-fixes). - leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes). - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes). - leds: turris-omnia: Drop unnecessary mutex locking (git-fixes). - lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes). - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes). - libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924). - libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924). - libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924). - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393). - md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916). - md/raid0: Fix performance regression for large sequential writes (bsc#1213916). - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes). - media: cx24120: Add retval check for cx24120_message_send() (git-fixes). - media: dib7000p: Fix potential division by zero (git-fixes). - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes). - media: go7007: Remove redundant if statement (git-fixes). - media: i2c: ccs: Check rules is non-NULL (git-fixes). - media: i2c: rdacm21: Fix uninitialized value (git-fixes). - media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes). - media: ov2680: Add ov2680_fill_format() helper function (git-fixes). - media: ov2680: Do not take the lock for try_fmt calls (git-fixes). - media: ov2680: Fix ov2680_bayer_order() (git-fixes). - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes). - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes). - media: ov2680: Fix vflip / hflip set functions (git-fixes). - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes). - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes). - media: rkvdec: increase max supported height for H.264 (git-fixes). - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes). - media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes). - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes). - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes). - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - mlxsw: pci: Add shutdown method in PCI driver (git-fixes). - mmc: block: Fix in_flight[issue_type] value error (git-fixes). - mmc: moxart: read scr register without changing byte order (git-fixes). - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes). - mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes). - mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes). - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes). - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes). - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes). - mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes). - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes). - mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes). - mtd: spi-nor: Check bus width while setting QE bit (git-fixes). - mtd: spinand: toshiba: Fix ecc_get_status (git-fixes). - n_tty: Rename tail to old_tail in n_tty_read() (git-fixes). - net: hns3: fix wrong bw weight of disabled tc issue (git-fixes). - net: ieee802154: at86rf230: Stop leaking skb's (git-fixes). - net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes). - net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes). - net: phy: broadcom: stub c45 read/write for 54810 (git-fixes). - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes). - net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733) - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes). - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946). - netfs: fix parameter of cleanup() (bsc#1214743). - nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes). - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes). - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes). - nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902). - nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902). - objtool/x86: Fix SRSO mess (git-fixes). - objtool/x86: Fixup frame-pointer vs rethunk (git-fixes). - objtool: Union instruction::{call_dest,jump_table} (git-fixes). - old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes). - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes). - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes). - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes). - phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes). - phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes). - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes). - pinctrl: amd: Mask wake bits on probe again (git-fixes). - pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes). - pinctrl: cherryview: fix address_space_handler() argument (git-fixes). - pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes). - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes). - platform/x86: dell-sysman: Fix reference leak (git-fixes). - powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106). - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106). - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106). - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106). - powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106). - powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106). - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106). - powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106). - powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes). - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106). - powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106). - powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106). - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/rtas: block error injection when locked down (bsc#1023051). - powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051). - powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). - powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869). - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes). - powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files. - powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503). - powerpc: fix typos in comments (bsc#1212091 ltc#199106). - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503). - pstore/ram: Check start of empty przs during init (git-fixes). - pwm: Add a stub for devm_pwmchip_add() (git-fixes). - pwm: meson: Simplify duplicated per-channel tracking (git-fixes). - pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes). - qed: Fix scheduling in a tasklet while getting stats (git-fixes). - regmap: rbtree: Use alloc_flags for memory allocations (git-fixes). - ring-buffer: Do not swap cpu_buffer during resize process (git-fixes). - ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes). - rpm/mkspec-dtb: support for nested subdirs. - rpmsg: glink: Add check for kstrdup (git-fixes). - rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension). - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976). - s390/purgatory: disable branch profiling (git-fixes bsc#1214372). - s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949). - sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes). - sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes). - sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: RDMA/srp: Fix residual handling (git-fixes) - scsi: bsg: Increase number of devices (bsc#1210048). - scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284). - scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: core: Improve warning message in scsi_device_block() (bsc#1209284). - scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: sg: Increase number of devices (bsc#1210048). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Always set no_report_opcodes (git-fixes). - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes). - scsi: storvsc: Handle SRB status value 0x30 (git-fixes). - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes). - scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371). - selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924). - selftests/futex: Order calls to futex_lock_pi (git-fixes). - selftests/harness: Actually report SKIP for signal tests (git-fixes). - selftests/resctrl: Close perf value read fd on errors (git-fixes). - selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes). - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes). - selftests/rseq: check if libc rseq support is registered (git-fixes). - selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes). - selftests: forwarding: Skip test when no interfaces are specified (git-fixes). - selftests: forwarding: Switch off timeout (git-fixes). - selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes). - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes). - selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes). - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes). - selftests: forwarding: tc_flower: Relax success criterion (git-fixes). - selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes). - serial: sc16is7xx: fix broken port 0 uart init (git-fixes). - serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes). - serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes). - serial: sprd: Fix DMA buffer leak issue (git-fixes). - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes). - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629). - smb: client: Fix -Wstringop-overflow issues (bsc#1193629). - smb: client: fix dfs link mount against w2k8 (bsc#1212142). - smb: client: fix null auth (git-fixes). - soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes). - soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes). - soundwire: fix enumeration completion (git-fixes). - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes). - supported.conf: fix typos for -!optional markers - swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453). - target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026). - target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873). - target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857). - target_core_rbd: remove snapshot existence validation code (bsc#1212857). - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes). - timers: Add shutdown mechanism to the internal functions (bsc#1213970). - timers: Provide timer_shutdown[_sync]() (bsc#1213970). - timers: Rename del_timer() to timer_delete() (bsc#1213970). - timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: Replace BUG_ON()s (bsc#1213970). - timers: Silently ignore timers with a NULL function (bsc#1213970). - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: Update kernel-doc for various functions (bsc#1213970). - timers: Use del_timer_sync() even on UP (bsc#1213970). - tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes). - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes). - tracing/probes: Fix not to count error code to total length (git-fixes). - tracing/probes: Fix to avoid double count of the string length on the array (git-fixes). - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes). - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes). - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes). - tracing: Fix memleak due to race between current_tracer and trace (git-fixes). - tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes). - tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes). - tracing: Fix warning in trace_buffered_event_disable() (git-fixes). - tty: fix hang on tty device with no_room set (git-fixes). - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes). - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes). - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes). - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes). - ubifs: Fix memleak when insert_old_idx() failed (git-fixes). - usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes). - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes). - usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes). - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes). - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes). - usb: dwc3: Fix typos in gadget.c (git-fixes). - usb: dwc3: Properly handle processing of pending events (git-fixes). - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes). - usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes). - usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes). - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes). - usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes). - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes). - usb: quirks: add quirk for Focusrite Scarlett (git-fixes). - usb: serial: option: add Quectel EC200A module support (git-fixes). - usb: serial: option: support Quectel EM060K_128 (git-fixes). - usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes). - usb: serial: simple: sort driver entries (git-fixes). - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes). - usb: typec: tcpm: Fix response to vsafe0V event (git-fixes). - usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes). - usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes). - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes). - wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes). - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes). - wifi: cfg80211: Fix return value in scan logic (git-fixes). - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes). - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes). - wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes). - wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes). - wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes). - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes). - wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes). - wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes). - wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes). - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes). - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes). - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes). - wifi: radiotap: fix kernel-doc notation warnings (git-fixes). - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes). - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes). - x86/alternative: Make custom return thunk unconditional (git-fixes). - x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes). - x86/cpu: Clean up SRSO return thunk mess (git-fixes). - x86/cpu: Cleanup the untrain mess (git-fixes). - x86/cpu: Fix __x86_return_thunk symbol type (git-fixes). - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes). - x86/cpu: Rename original retbleed methods (git-fixes). - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes). - x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453). - x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453). - x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453). - x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453). - x86/hyperv: Reorder code to facilitate future work (bsc#1206453). - x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453). - x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453). - x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes). - x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453). - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes). - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). - x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes). - x86/speculation: Add cpu_show_gds() prototype (git-fixes). - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). - x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). - x86/srso: Disable the mitigation on unaffected configurations (git-fixes). - x86/srso: Explain the untraining sequences a bit more (git-fixes). - x86/srso: Fix build breakage with the LLVM linker (git-fixes). - x86/srso: Fix return thunks in generated code (git-fixes). - x86/static_call: Fix __static_call_fixup() (git-fixes). - x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453). - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453). - x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453). - x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453). - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453). - xfs: fix sb write verify for lazysbcount (bsc#1214661). Important SUSE bug 1023051 SUSE bug 1120059 SUSE bug 1177719 SUSE bug 1188885 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203329 SUSE bug 1203330 SUSE bug 1205462 SUSE bug 1206453 SUSE bug 1208902 SUSE bug 1208949 SUSE bug 1209284 SUSE bug 1209799 SUSE bug 1210048 SUSE bug 1210448 SUSE bug 1211220 SUSE bug 1212091 SUSE bug 1212142 SUSE bug 1212423 SUSE bug 1212526 SUSE bug 1212857 SUSE bug 1212873 SUSE bug 1213026 SUSE bug 1213123 SUSE bug 1213546 SUSE bug 1213580 SUSE bug 1213601 SUSE bug 1213666 SUSE bug 1213733 SUSE bug 1213757 SUSE bug 1213759 SUSE bug 1213916 SUSE bug 1213921 SUSE bug 1213927 SUSE bug 1213946 SUSE bug 1213949 SUSE bug 1213968 SUSE bug 1213970 SUSE bug 1213971 SUSE bug 1214000 SUSE bug 1214019 SUSE bug 1214073 SUSE bug 1214120 SUSE bug 1214149 SUSE bug 1214180 SUSE bug 1214233 SUSE bug 1214238 SUSE bug 1214285 SUSE bug 1214297 SUSE bug 1214299 SUSE bug 1214305 SUSE bug 1214350 SUSE bug 1214368 SUSE bug 1214370 SUSE bug 1214371 SUSE bug 1214372 SUSE bug 1214380 SUSE bug 1214386 SUSE bug 1214392 SUSE bug 1214393 SUSE bug 1214397 SUSE bug 1214404 SUSE bug 1214428 SUSE bug 1214451 SUSE bug 1214659 SUSE bug 1214661 SUSE bug 1214727 SUSE bug 1214729 SUSE bug 1214742 SUSE bug 1214743 SUSE bug 1214756 SUSE bug 1214976 CVE-2022-38457 CVE-2022-40133 CVE-2023-2007 CVE-2023-20588 CVE-2023-34319 CVE-2023-3610 CVE-2023-37453 CVE-2023-3772 CVE-2023-3863 CVE-2023-40283 CVE-2023-4128 CVE-2023-4133 CVE-2023-4134 CVE-2023-4147 CVE-2023-4194 CVE-2023-4273 CVE-2023-4387 CVE-2023-4459 CVE-2023-4563 CVE-2023-4569 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849). Important SUSE bug 1208839 SUSE bug 1210630 SUSE bug 1211187 SUSE bug 1211395 SUSE bug 1212849 SUSE bug 1213063 SUSE bug 1213244 CVE-2023-1077 CVE-2023-2156 CVE-2023-2176 CVE-2023-3090 CVE-2023-32233 CVE-2023-35001 CVE-2023-3567 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). Important SUSE bug 1211395 SUSE bug 1213063 CVE-2023-2156 CVE-2023-35001 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_55_12 fixes one issue. The following security issue was fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). Important SUSE bug 1211395 CVE-2023-2156 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211187). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213244). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208839). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210630). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849). Important SUSE bug 1208839 SUSE bug 1210630 SUSE bug 1211187 SUSE bug 1211395 SUSE bug 1212849 SUSE bug 1213063 SUSE bug 1213244 CVE-2023-1077 CVE-2023-2156 CVE-2023-2176 CVE-2023-3090 CVE-2023-32233 CVE-2023-35001 CVE-2023-3567 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_13_5 fixes several issues. The following security issues were fixed: - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211395). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213063). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212849). Important SUSE bug 1211395 SUSE bug 1212849 SUSE bug 1213063 CVE-2023-2156 CVE-2023-3090 CVE-2023-35001 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel RT (Live Patch 0 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_11 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213587). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213064). Important SUSE bug 1210619 SUSE bug 1213064 SUSE bug 1213587 SUSE bug 1213706 SUSE bug 1214123 SUSE bug 1215119 CVE-2023-1829 CVE-2023-31248 CVE-2023-3609 CVE-2023-3776 CVE-2023-3812 CVE-2023-4273 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel RT (Live Patch 1 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_13_5 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213587). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213064). Important SUSE bug 1210619 SUSE bug 1213064 SUSE bug 1213587 SUSE bug 1214123 SUSE bug 1215119 CVE-2023-1829 CVE-2023-31248 CVE-2023-3609 CVE-2023-3776 CVE-2023-4273 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel RT (Live Patch 3 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_13_11 fixes one issue. The following security issue was fixed: - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123). Important SUSE bug 1214123 CVE-2023-4273 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Live Patch 0 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_53 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210619). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213587). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213706). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213064). Important SUSE bug 1210619 SUSE bug 1213064 SUSE bug 1213587 SUSE bug 1213706 SUSE bug 1214123 SUSE bug 1215119 CVE-2023-1829 CVE-2023-31248 CVE-2023-3609 CVE-2023-3776 CVE-2023-3812 CVE-2023-4273 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_55_7 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213587). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213064). Important SUSE bug 1213064 SUSE bug 1213587 SUSE bug 1214123 SUSE bug 1215119 CVE-2023-31248 CVE-2023-3609 CVE-2023-3776 CVE-2023-4273 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_55_12 fixes several issues. The following security issues were fixed: - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1215119). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213587). Important SUSE bug 1213587 SUSE bug 1214123 SUSE bug 1215119 CVE-2023-3609 CVE-2023-3776 CVE-2023-4273 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Live Patch 3 for SLE 15 SP5) (Important) SUSE Linux Enterprise Live Patching 15 SP5 This update for the Linux Kernel 5.14.21-150500_55_19 fixes one issue. The following security issue was fixed: - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214123). Important SUSE bug 1214123 CVE-2023-4273 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330). - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727). - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729). The following non-security bugs were fixed: - ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305). - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes). - ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes). - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes). - ALSA: ac97: Fix possible error value of *rac97 (git-fixes). - ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes). - ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes). - ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes). - ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes). - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes). - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes). - ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes). - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes). - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes). - ARM: dts: imx6sll: fixup of operating points (git-fixes). - ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes). - ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes). - ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes). - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes). - ASoC: rt5665: add missed regulator_bulk_disable (git-fixes). - ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes). - ASoC: tegra: Fix SFC conversion for few rates (git-fixes). - Bluetooth: Fix potential use-after-free when clear keys (git-fixes). - Bluetooth: L2CAP: Fix use-after-free (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes). - Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes). - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes). - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b - CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123 - Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel. - Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes). - Documentation: devices.txt: Remove ttyIOC* (git-fixes). - Documentation: devices.txt: Remove ttySIOC* (git-fixes). - Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453). - Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453). - Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453). - Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453). - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453). - Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453). - Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453). - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453). - Drop amdgpu patch causing spamming (bsc#1215523) - Drop cfg80211 lock fix patches that caused a regression (bsc#1213757) - Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) - Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes). - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes). - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes). - HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes). - HID: wacom: remove the battery when the EKR is off (git-fixes). - HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes). - IB/hfi1: Fix possible panic during hotplug remove (git-fixes) - IB/uverbs: Fix an potential error pointer dereference (git-fixes) - Input: exc3000 - properly stop timer on shutdown (git-fixes). - KVM: s390: fix sthyi error handling (git-fixes bsc#1214370). - Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756). - Kbuild: move to -std=gnu11 (bsc#1214756). - PCI/ASPM: Avoid link retraining race (git-fixes). - PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes). - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes). - PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes). - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes). - PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453). - PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453). - PCI: meson: Remove cast between incompatible function type (git-fixes). - PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes). - PCI: microchip: Remove cast between incompatible function type (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: rockchip: Remove writes to unused registers (git-fixes). - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes). - PCI: tegra194: Fix possible array out of bounds access (git-fixes). - PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes). - RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes) - RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes) - RDMA/efa: Fix wrong resources deallocation order (git-fixes) - RDMA/hns: Fix CQ and QP cache affinity (git-fixes) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes) - RDMA/hns: Fix port active speed (git-fixes) - RDMA/irdma: Prevent zero-length STAG registration (git-fixes) - RDMA/irdma: Replace one-element array with flexible-array member (git-fixes) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes) - RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes) - RDMA/siw: Correct wrong debug message (git-fixes) - RDMA/umem: Set iova in ODP flow (git-fixes) - README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer. - Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes) - Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes). - SMB3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes). - Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - amba: bus: fix refcount leak (git-fixes). - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes). - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes). - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes). - audit: fix possible soft lockup in __audit_inode_child() (git-fixes). - backlight/bd6107: Compare against struct fb_info.device (git-fixes). - backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes). - backlight/lv5207lp: Compare against struct fb_info.device (git-fixes). - batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes). - batman-adv: Do not increase MTU when set by user (git-fixes). - batman-adv: Fix TT global entry leak when client roamed back (git-fixes). - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes). - batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes). - batman-adv: Trigger events for auto adjusted MTU (git-fixes). - bnx2x: fix page fault following EEH recovery (bsc#1214299). - bpf: Disable preemption in bpf_event_output (git-fixes). - bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924). - bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes). - bus: ti-sysc: Fix build warning for 64-bit build (git-fixes). - bus: ti-sysc: Fix cast to enum warning (git-fixes). - bus: ti-sysc: Flush posted write on enable before reset (git-fixes). - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes). - ceph: defer stopping mdsc delayed_work (bsc#1214392). - ceph: do not check for quotas on MDS stray dirs (bsc#1214238). - ceph: never send metrics if disable_send_metrics is set (bsc#1214180). - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. - cifs: add missing return value check for cifs_sb_tlink (bsc#1193629). - cifs: allow dumping keys for directories too (bsc#1193629). - cifs: fix mid leak during reconnection after timeout threshold (git-fixes). - cifs: if deferred close is disabled then close files immediately (git-fixes). - cifs: is_network_name_deleted should return a bool (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes). - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes). - clk: imx8mp: fix sai4 clock (git-fixes). - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes). - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes). - clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes). - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes). - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes). - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes). - clk: sunxi-ng: Modify mismatched function name (git-fixes). - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453). - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453). - clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453). - clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453). - clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453). - clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453). - cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes). - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659). - cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004). - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - crypto: caam - fix unchecked return value error (git-fixes). - crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes). - define more Hyper-V related constants (bsc#1206453). - dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes). - dma-buf/sync_file: Fix docs syntax (git-fixes). - dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes). - dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes). - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes). - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes). - docs/process/howto: Replace C89 with C11 (bsc#1214756). - docs: kernel-parameters: Refer to the correct bitmap function (git-fixes). - docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes). - docs: printk-formats: Fix hex printing of signed values (git-fixes). - driver core: test_async: fix an error code (git-fixes). - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes). - drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes). - drm/amd/display: Apply 60us prefetch for DCFCLK &lt;= 300Mhz (git-fixes). - drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes). - drm/amd/display: Do not set drr on pipe commit (git-fixes). - drm/amd/display: Enable dcn314 DPP RCO (git-fixes). - drm/amd/display: Ensure that planes are in the same order (git-fixes). - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes). - drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes). - drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes). - drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes). - drm/amd/display: disable RCO for DCN314 (git-fixes). - drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes). - drm/amd/display: limit DPIA link rate to HBR3 (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: trigger timing sync only if TG is running (git-fixes). - drm/amd/pm/smu7: move variables to where they are used (git-fixes). - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes). - drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes). - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes). - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes). - drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes). - drm/amd: flush any delayed gfxoff on suspend entry (git-fixes). - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes). - drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes). - drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes). - drm/amdgpu: Remove unnecessary domain argument (git-fixes). - drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes). - drm/amdgpu: add S/G display parameter (git-fixes). - drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes). - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes). - drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes). - drm/amdgpu: fix memory leak in mes self test (git-fixes). - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes). - drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes). - drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes). - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes). - drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes). - drm/ast: Fix DRAM init on AST2200 (git-fixes). - drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes). - drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes). - drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes). - drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes). - drm/bridge: fix -Wunused-const-variable= warning (git-fixes). - drm/bridge: tc358764: Fix debug print parameter order (git-fixes). - drm/etnaviv: fix dumping of active MMU context (git-fixes). - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes). - drm/i915/sdvo: fix panel_type initialization (git-fixes). - drm/i915: Fix premature release of request's reusable memory (git-fixes). - drm/mediatek: Fix dereference before null check (git-fixes). - drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes). - drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes). - drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes). - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes). - drm/msm/mdp5: Do not leak some plane state (git-fixes). - drm/msm: Update dev core dump to not print backwards (git-fixes). - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes). - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes). - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073). - drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes). - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes). - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes). - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes). - drm/qxl: fix UAF on handle creation (git-fixes). - drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes). - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes). - drm/rockchip: Do not spam logs in atomic check (git-fixes). - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes). - drm/stm: ltdc: fix late dereference check (git-fixes). - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes). - drm/ttm: check null pointer before accessing when swapping (git-fixes). - drm/ttm: never consider pinned BOs for eviction&swap (git-fixes). - drm/vmwgfx: Fix shader stage validation (git-fixes). - drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes). - drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes). - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes). - dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes). - dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes). - dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes). - e1000: Fix typos in comments (jsc#PED-5738). - e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738). - e1000: switch to napi_build_skb() (jsc#PED-5738). - e1000: switch to napi_consume_skb() (jsc#PED-5738). - exfat: fix unexpected EOF while reading dir (bsc#1214000). - exfat: release s_lock before calling dir_emit() (bsc#1214000). - exfat_iterate(): do not open-code file_inode(file) (bsc#1214000). - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes). - fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes). - fbdev: Improve performance of sys_imageblit() (git-fixes). - fbdev: Update fbdev source file paths (git-fixes). - fbdev: fix potential OOB read in fast_imageblit() (git-fixes). - fbdev: mmp: fix value check in mmphw_probe() (git-fixes). - file: reinstate f_pos locking optimization for regular files (bsc#1213759). - firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes). - firmware: cs_dsp: Fix new control name check (git-fixes). - firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes). - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes). - fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes). - fsi: aspeed: Reset master errors after CFAM reset (git-fixes). - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes). - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes). - gpio: mvebu: Make use of devm_pwmchip_add (git-fixes). - gpio: mvebu: fix irq domain leak (git-fixes). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes). - hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453). - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes). - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes). - hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes). - hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes). - hwrng: pic32 - use devm_clk_get_enabled (git-fixes). - i2c: Delete error messages for failed memory allocations (git-fixes). - i2c: Improve size determinations (git-fixes). - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes). - i2c: designware: Correct length byte validation logic (git-fixes). - i2c: designware: Handle invalid SMBus block data response length value (git-fixes). - i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes). - i2c: nomadik: Remove a useless call in the remove function (git-fixes). - i2c: nomadik: Remove unnecessary goto label (git-fixes). - i2c: nomadik: Use devm_clk_get_enabled() (git-fixes). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - iavf: fix potential races for FDIR filters (git-fixes). - ice: Fix RDMA VSI removal during queue rebuild (git-fixes). - ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes). - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes). - iio: adc: stx104: Implement and utilize register structures (git-fixes). - iio: adc: stx104: Utilize iomap interface (git-fixes). - iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes). - intel/e1000:fix repeated words in comments (jsc#PED-5738). - intel: remove unused macros (jsc#PED-5738). - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes). - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). - iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes). - iommu/amd: Fix compile warning in init code (git-fixes). - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes). - iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes). - iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes). - iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes). - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes). - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes). - iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes). - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes). - iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes). - iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes). - iommu/dma: Fix iova map result check bug (git-fixes). - iommu/dma: return error code from iommu_dma_map_sg() (git-fixes). - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes). - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes). - iommu/iova: Fix module config properly (git-fixes). - iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes). - iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes). - iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes). - iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes). - iommu/mediatek: Use component_match_add (git-fixes). - iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes). - iommu/omap: Fix buffer overflow in debugfs (git-fixes). - iommu/rockchip: fix permission bits in page table entries v2 (git-fixes). - iommu/s390: Fix duplicate domain attachments (git-fixes). - iommu/sun50i: Consider all fault sources for reset (git-fixes). - iommu/sun50i: Fix R/W permission check (git-fixes). - iommu/sun50i: Fix flush size (git-fixes). - iommu/sun50i: Fix reset release (git-fixes). - iommu/sun50i: Implement .iotlb_sync_map (git-fixes). - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes). - iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes). - iommu/vt-d: Check correct capability for sagaw determination (git-fixes). - iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes). - iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes). - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes). - iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes). - ipmi:ssif: Add check for kstrdup (git-fixes). - ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes). - ipmi_si: fix a memleak in try_smi_init() (git-fixes). - jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes). - kabi/severities: Ignore newly added SRSO mitigation functions - kabi: Allow extra bugsints (bsc#1213927). - kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there. - kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12. - kunit: make kunit_test_timeout compatible with comment (git-fixes). - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes). - leds: multicolor: Use rounded division when calculating color components (git-fixes). - leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes). - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes). - leds: turris-omnia: Drop unnecessary mutex locking (git-fixes). - lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes). - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes). - libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924). - libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924). - libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924). - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393). - md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916). - md/raid0: Fix performance regression for large sequential writes (bsc#1213916). - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes). - media: cx24120: Add retval check for cx24120_message_send() (git-fixes). - media: dib7000p: Fix potential division by zero (git-fixes). - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes). - media: go7007: Remove redundant if statement (git-fixes). - media: i2c: ccs: Check rules is non-NULL (git-fixes). - media: i2c: rdacm21: Fix uninitialized value (git-fixes). - media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes). - media: ov2680: Add ov2680_fill_format() helper function (git-fixes). - media: ov2680: Do not take the lock for try_fmt calls (git-fixes). - media: ov2680: Fix ov2680_bayer_order() (git-fixes). - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes). - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes). - media: ov2680: Fix vflip / hflip set functions (git-fixes). - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes). - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes). - media: rkvdec: increase max supported height for H.264 (git-fixes). - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes). - media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes). - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes). - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes). - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - mlxsw: pci: Add shutdown method in PCI driver (git-fixes). - mmc: block: Fix in_flight[issue_type] value error (git-fixes). - mmc: moxart: read scr register without changing byte order (git-fixes). - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes). - mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes). - mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes). - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes). - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes). - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes). - mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes). - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes). - mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes). - mtd: spi-nor: Check bus width while setting QE bit (git-fixes). - mtd: spinand: toshiba: Fix ecc_get_status (git-fixes). - n_tty: Rename tail to old_tail in n_tty_read() (git-fixes). - net: hns3: fix wrong bw weight of disabled tc issue (git-fixes). - net: ieee802154: at86rf230: Stop leaking skb's (git-fixes). - net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes). - net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes). - net: phy: broadcom: stub c45 read/write for 54810 (git-fixes). - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes). - net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733) - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes). - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946). - netfs: fix parameter of cleanup() (bsc#1214743). - nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes). - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes). - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes). - nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902). - nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902). - objtool/x86: Fix SRSO mess (git-fixes). - objtool/x86: Fixup frame-pointer vs rethunk (git-fixes). - objtool: Union instruction::{call_dest,jump_table} (git-fixes). - old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes). - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes). - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes). - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes). - phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes). - phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes). - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes). - pinctrl: amd: Mask wake bits on probe again (git-fixes). - pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes). - pinctrl: cherryview: fix address_space_handler() argument (git-fixes). - pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes). - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes). - platform/x86: dell-sysman: Fix reference leak (git-fixes). - powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106). - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106). - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106). - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106). - powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106). - powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106). - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106). - powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106). - powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes). - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106). - powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106). - powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106). - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/rtas: block error injection when locked down (bsc#1023051). - powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051). - powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). - powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869). - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes). - powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files. - powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503). - powerpc: fix typos in comments (bsc#1212091 ltc#199106). - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503). - pstore/ram: Check start of empty przs during init (git-fixes). - pwm: Add a stub for devm_pwmchip_add() (git-fixes). - pwm: meson: Simplify duplicated per-channel tracking (git-fixes). - pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes). - qed: Fix scheduling in a tasklet while getting stats (git-fixes). - regmap: rbtree: Use alloc_flags for memory allocations (git-fixes). - ring-buffer: Do not swap cpu_buffer during resize process (git-fixes). - ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes). - rpm/mkspec-dtb: support for nested subdirs - rpmsg: glink: Add check for kstrdup (git-fixes). - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976). - s390/purgatory: disable branch profiling (git-fixes bsc#1214372). - s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949). - sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes). - sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes). - sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: RDMA/srp: Fix residual handling (git-fixes) - scsi: bsg: Increase number of devices (bsc#1210048). - scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284). - scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: core: Improve warning message in scsi_device_block() (bsc#1209284). - scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: sg: Increase number of devices (bsc#1210048). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Always set no_report_opcodes (git-fixes). - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes). - scsi: storvsc: Handle SRB status value 0x30 (git-fixes). - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes). - scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371). - selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924). - selftests/futex: Order calls to futex_lock_pi (git-fixes). - selftests/harness: Actually report SKIP for signal tests (git-fixes). - selftests/resctrl: Close perf value read fd on errors (git-fixes). - selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes). - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes). - selftests/rseq: check if libc rseq support is registered (git-fixes). - selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes). - selftests: forwarding: Skip test when no interfaces are specified (git-fixes). - selftests: forwarding: Switch off timeout (git-fixes). - selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes). - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes). - selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes). - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes). - selftests: forwarding: tc_flower: Relax success criterion (git-fixes). - selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes). - serial: sc16is7xx: fix broken port 0 uart init (git-fixes). - serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes). - serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes). - serial: sprd: Fix DMA buffer leak issue (git-fixes). - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629). - smb: client: Fix -Wstringop-overflow issues (bsc#1193629). - smb: client: fix dfs link mount against w2k8 (bsc#1212142). - smb: client: fix null auth (git-fixes). - soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes). - soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes). - soundwire: fix enumeration completion (git-fixes). - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes). - supported.conf: fix typos for -!optional markers - swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453). - target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026). - target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873). - target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857). - target_core_rbd: remove snapshot existence validation code (bsc#1212857). - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes). - timers: Add shutdown mechanism to the internal functions (bsc#1213970). - timers: Provide timer_shutdown[_sync]() (bsc#1213970). - timers: Rename del_timer() to timer_delete() (bsc#1213970). - timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: Replace BUG_ON()s (bsc#1213970). - timers: Silently ignore timers with a NULL function (bsc#1213970). - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: Update kernel-doc for various functions (bsc#1213970). - timers: Use del_timer_sync() even on UP (bsc#1213970). - tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes). - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes). - tracing/probes: Fix not to count error code to total length (git-fixes). - tracing/probes: Fix to avoid double count of the string length on the array (git-fixes). - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes). - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes). - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes). - tracing: Fix memleak due to race between current_tracer and trace (git-fixes). - tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes). - tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes). - tracing: Fix warning in trace_buffered_event_disable() (git-fixes). - tty: fix hang on tty device with no_room set (git-fixes). - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes). - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes). - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes). - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes). - ubifs: Fix memleak when insert_old_idx() failed (git-fixes). - usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes). - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes). - usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes). - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes). - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes). - usb: dwc3: Fix typos in gadget.c (git-fixes). - usb: dwc3: Properly handle processing of pending events (git-fixes). - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes). - usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes). - usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes). - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes). - usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes). - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes). - usb: quirks: add quirk for Focusrite Scarlett (git-fixes). - usb: serial: option: add Quectel EC200A module support (git-fixes). - usb: serial: option: support Quectel EM060K_128 (git-fixes). - usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes). - usb: serial: simple: sort driver entries (git-fixes). - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes). - usb: typec: tcpm: Fix response to vsafe0V event (git-fixes). - usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes). - usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes). - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes). - wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes). - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes). - wifi: cfg80211: Fix return value in scan logic (git-fixes). - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes). - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes). - wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes). - wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes). - wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes). - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes). - wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes). - wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes). - wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes). - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes). - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes). - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes). - wifi: radiotap: fix kernel-doc notation warnings (git-fixes). - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes). - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes). - x86/alternative: Make custom return thunk unconditional (git-fixes). - x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes). - x86/cpu: Clean up SRSO return thunk mess (git-fixes). - x86/cpu: Cleanup the untrain mess (git-fixes). - x86/cpu: Fix __x86_return_thunk symbol type (git-fixes). - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes). - x86/cpu: Rename original retbleed methods (git-fixes). - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes). - x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453). - x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453). - x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453). - x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453). - x86/hyperv: Reorder code to facilitate future work (bsc#1206453). - x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453). - x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453). - x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes). - x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453). - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes). - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). - x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/speculation: Add cpu_show_gds() prototype (git-fixes). - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). - x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). - x86/srso: Disable the mitigation on unaffected configurations (git-fixes). - x86/srso: Explain the untraining sequences a bit more (git-fixes). - x86/srso: Fix build breakage with the LLVM linker (git-fixes). - x86/srso: Fix return thunks in generated code (git-fixes). - x86/static_call: Fix __static_call_fixup() (git-fixes). - x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453). - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453). - x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453). - x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453). - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453). - xfs: fix sb write verify for lazysbcount (bsc#1214661). Important SUSE bug 1023051 SUSE bug 1120059 SUSE bug 1177719 SUSE bug 1188885 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203329 SUSE bug 1203330 SUSE bug 1205462 SUSE bug 1206453 SUSE bug 1208902 SUSE bug 1208949 SUSE bug 1209284 SUSE bug 1209799 SUSE bug 1210048 SUSE bug 1210448 SUSE bug 1211220 SUSE bug 1212091 SUSE bug 1212142 SUSE bug 1212423 SUSE bug 1212526 SUSE bug 1212857 SUSE bug 1212873 SUSE bug 1213026 SUSE bug 1213123 SUSE bug 1213546 SUSE bug 1213580 SUSE bug 1213601 SUSE bug 1213666 SUSE bug 1213733 SUSE bug 1213757 SUSE bug 1213759 SUSE bug 1213916 SUSE bug 1213921 SUSE bug 1213927 SUSE bug 1213946 SUSE bug 1213949 SUSE bug 1213968 SUSE bug 1213970 SUSE bug 1213971 SUSE bug 1214000 SUSE bug 1214019 SUSE bug 1214073 SUSE bug 1214120 SUSE bug 1214149 SUSE bug 1214180 SUSE bug 1214233 SUSE bug 1214238 SUSE bug 1214285 SUSE bug 1214297 SUSE bug 1214299 SUSE bug 1214305 SUSE bug 1214350 SUSE bug 1214368 SUSE bug 1214370 SUSE bug 1214371 SUSE bug 1214372 SUSE bug 1214380 SUSE bug 1214386 SUSE bug 1214392 SUSE bug 1214393 SUSE bug 1214397 SUSE bug 1214404 SUSE bug 1214428 SUSE bug 1214451 SUSE bug 1214635 SUSE bug 1214659 SUSE bug 1214661 SUSE bug 1214727 SUSE bug 1214729 SUSE bug 1214742 SUSE bug 1214743 SUSE bug 1214756 SUSE bug 1214976 SUSE bug 1215522 SUSE bug 1215523 SUSE bug 1215552 SUSE bug 1215553 CVE-2022-38457 CVE-2022-40133 CVE-2023-2007 CVE-2023-20588 CVE-2023-34319 CVE-2023-3610 CVE-2023-37453 CVE-2023-3772 CVE-2023-3863 CVE-2023-40283 CVE-2023-4128 CVE-2023-4133 CVE-2023-4134 CVE-2023-4147 CVE-2023-4194 CVE-2023-4273 CVE-2023-4387 CVE-2023-4459 CVE-2023-4563 CVE-2023-4569 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330). - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995 CVE-2023-1192). - CVE-2023-1859: Fixed a use-after-free flaw in xen_9pfs_front_removet that could lead to system crash and kernel information leak (bsc#1210169). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-2177: Fixed null pointer dereference issue in the sctp network protocol that could lead to system crash or DoS (bsc#1210643). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727). - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729). - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). The following non-security bugs were fixed: - ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305). - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes). - ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes). - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes). - ALSA: ac97: Fix possible error value of *rac97 (git-fixes). - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes). - ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes). - ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes). - ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes). - ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes). - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes). - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes). - ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes). - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes). - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes). - ARM: dts: imx6sll: fixup of operating points (git-fixes). - ARM: pxa: remove use of symbol_get() (git-fixes). - ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes). - ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes). - ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes). - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes). - ASoC: rt5665: add missed regulator_bulk_disable (git-fixes). - ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes). - ASoC: tegra: Fix SFC conversion for few rates (git-fixes). - Bluetooth: Fix potential use-after-free when clear keys (git-fixes). - Bluetooth: L2CAP: Fix use-after-free (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes). - Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes). - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes). - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b - CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123 - Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes). - Documentation: devices.txt: Remove ttyIOC* (git-fixes). - Documentation: devices.txt: Remove ttySIOC* (git-fixes). - Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453). - Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453). - Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453). - Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453). - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453). - Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453). - Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453). - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453). - Drop amdgpu patch causing spamming (bsc#1215523) - Drop cfg80211 lock fix patches that caused a regression (bsc#1213757) - Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) - Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes). - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes). - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes). - HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes). - HID: wacom: remove the battery when the EKR is off (git-fixes). - HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes). - IB/hfi1: Fix possible panic during hotplug remove (git-fixes) - IB/uverbs: Fix an potential error pointer dereference (git-fixes) - Input: exc3000 - properly stop timer on shutdown (git-fixes). - Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes). - KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes). - KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes). - KVM: s390: fix sthyi error handling (git-fixes bsc#1214370). - Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756). - Kbuild: move to -std=gnu11 (bsc#1214756). - PCI/ASPM: Avoid link retraining race (git-fixes). - PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes). - PCI: Free released resource after coalescing (git-fixes). - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes). - PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes). - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes). - PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453). - PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453). - PCI: meson: Remove cast between incompatible function type (git-fixes). - PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes). - PCI: microchip: Remove cast between incompatible function type (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: rockchip: Remove writes to unused registers (git-fixes). - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes). - PCI: tegra194: Fix possible array out of bounds access (git-fixes). - PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes). - RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes) - RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes) - RDMA/efa: Fix wrong resources deallocation order (git-fixes) - RDMA/hns: Fix CQ and QP cache affinity (git-fixes) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes) - RDMA/hns: Fix port active speed (git-fixes) - RDMA/irdma: Prevent zero-length STAG registration (git-fixes) - RDMA/irdma: Replace one-element array with flexible-array member (git-fixes) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes) - RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes) - RDMA/siw: Correct wrong debug message (git-fixes) - RDMA/umem: Set iova in ODP flow (git-fixes) - README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer. - Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes) - Revert 'PCI: Mark NVIDIA T4 GPUs to avoid bus reset' (git-fixes). - Revert 'scsi: qla2xxx: Fix buffer overrun' (bsc#1214928). - Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes). - Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - amba: bus: fix refcount leak (git-fixes). - arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453). - arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes). - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes). - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes). - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes). - ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes). - ata: pata_falcon: fix IO base selection for Q40 (git-fixes). - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes). - ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes). - audit: fix possible soft lockup in __audit_inode_child() (git-fixes). - backlight/bd6107: Compare against struct fb_info.device (git-fixes). - backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes). - backlight/lv5207lp: Compare against struct fb_info.device (git-fixes). - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes). - batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes). - batman-adv: Do not increase MTU when set by user (git-fixes). - batman-adv: Fix TT global entry leak when client roamed back (git-fixes). - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes). - batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes). - batman-adv: Trigger events for auto adjusted MTU (git-fixes). - bnx2x: fix page fault following EEH recovery (bsc#1214299). - bpf: Clear the probe_addr for uprobe (git-fixes). - bpf: Disable preemption in bpf_event_output (git-fixes). - bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924). - btrfs: do not hold CPU for too long when defragging a file (bsc#1214988). - bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes). - bus: ti-sysc: Fix build warning for 64-bit build (git-fixes). - bus: ti-sysc: Fix cast to enum warning (git-fixes). - bus: ti-sysc: Flush posted write on enable before reset (git-fixes). - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes). - ceph: defer stopping mdsc delayed_work (bsc#1214392). - ceph: do not check for quotas on MDS stray dirs (bsc#1214238). - ceph: never send metrics if disable_send_metrics is set (bsc#1214180). - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. - cifs: add missing return value check for cifs_sb_tlink (bsc#1193629). - cifs: allow dumping keys for directories too (bsc#1193629). - cifs: fix mid leak during reconnection after timeout threshold (git-fixes). - cifs: if deferred close is disabled then close files immediately (git-fixes). - cifs: is_network_name_deleted should return a bool (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes). - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes). - clk: imx8mp: fix sai4 clock (git-fixes). - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes). - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes). - clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes). - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes). - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes). - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes). - clk: sunxi-ng: Modify mismatched function name (git-fixes). - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453). - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453). - clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453). - clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453). - clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453). - clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453). - cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes). - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659). - cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004). - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - crypto: caam - fix unchecked return value error (git-fixes). - crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes). - define more Hyper-V related constants (bsc#1206453). - dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes). - dma-buf/sync_file: Fix docs syntax (git-fixes). - dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes). - dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes). - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes). - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes). - docs/process/howto: Replace C89 with C11 (bsc#1214756). - docs: kernel-parameters: Refer to the correct bitmap function (git-fixes). - docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes). - docs: printk-formats: Fix hex printing of signed values (git-fixes). - driver core: test_async: fix an error code (git-fixes). - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes). - drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes). - drm/amd/display: Add smu write msg id fail retry process (git-fixes). - drm/amd/display: Apply 60us prefetch for DCFCLK &lt;= 300Mhz (git-fixes). - drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes). - drm/amd/display: Do not set drr on pipe commit (git-fixes). - drm/amd/display: Enable dcn314 DPP RCO (git-fixes). - drm/amd/display: Ensure that planes are in the same order (git-fixes). - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes). - drm/amd/display: Remove wait while locked (git-fixes). - drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes). - drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes). - drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes). - drm/amd/display: disable RCO for DCN314 (git-fixes). - drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes). - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes). - drm/amd/display: fix the white screen issue when >= 64GB DRAM (git-fixes). - drm/amd/display: limit DPIA link rate to HBR3 (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: prevent potential division by zero errors (git-fixes). - drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: trigger timing sync only if TG is running (git-fixes). - drm/amd/pm/smu7: move variables to where they are used (git-fixes). - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes). - drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes). - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes). - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes). - drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes). - drm/amd: flush any delayed gfxoff on suspend entry (git-fixes). - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes). - drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes). - drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes). - drm/amdgpu: Remove unnecessary domain argument (git-fixes). - drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes). - drm/amdgpu: add S/G display parameter (git-fixes). - drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes). - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes). - drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes). - drm/amdgpu: fix memory leak in mes self test (git-fixes). - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes). - drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes). - drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes). - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes). - drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes). - drm/ast: Fix DRAM init on AST2200 (git-fixes). - drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes). - drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes). - drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes). - drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes). - drm/bridge: fix -Wunused-const-variable= warning (git-fixes). - drm/bridge: tc358764: Fix debug print parameter order (git-fixes). - drm/etnaviv: fix dumping of active MMU context (git-fixes). - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes). - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes). - drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes). - drm/i915/gvt: Verify pfn is 'valid' before dereferencing 'struct page' (git-fixes). - drm/i915/sdvo: fix panel_type initialization (git-fixes). - drm/i915: Fix premature release of request's reusable memory (git-fixes). - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes). - drm/mediatek: Fix dereference before null check (git-fixes). - drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes). - drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes). - drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes). - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes). - drm/msm/mdp5: Do not leak some plane state (git-fixes). - drm/msm: Update dev core dump to not print backwards (git-fixes). - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes). - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes). - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073). - drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes). - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes). - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes). - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes). - drm/qxl: fix UAF on handle creation (git-fixes). - drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes). - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes). - drm/rockchip: Do not spam logs in atomic check (git-fixes). - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes). - drm/stm: ltdc: fix late dereference check (git-fixes). - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes). - drm/ttm: check null pointer before accessing when swapping (git-fixes). - drm/ttm: never consider pinned BOs for eviction&swap (git-fixes). - drm/vmwgfx: Fix shader stage validation (git-fixes). - drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes). - drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes). - drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes). - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes). - dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes). - dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes). - dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes). - e1000: Fix typos in comments (jsc#PED-5738). - e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738). - e1000: switch to napi_build_skb() (jsc#PED-5738). - e1000: switch to napi_consume_skb() (jsc#PED-5738). - exfat: fix unexpected EOF while reading dir (bsc#1214000). - exfat: release s_lock before calling dir_emit() (bsc#1214000). - exfat_iterate(): do not open-code file_inode(file) (bsc#1214000). - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes). - fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes). - fbdev: Improve performance of sys_imageblit() (git-fixes). - fbdev: Update fbdev source file paths (git-fixes). - fbdev: fix potential OOB read in fast_imageblit() (git-fixes). - fbdev: mmp: fix value check in mmphw_probe() (git-fixes). - file: reinstate f_pos locking optimization for regular files (bsc#1213759). - firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes). - firmware: cs_dsp: Fix new control name check (git-fixes). - firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes). - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes). - fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes). - fs: do not update freeing inode i_io_list (bsc#1214813). - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813). - fsi: aspeed: Reset master errors after CFAM reset (git-fixes). - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes). - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes). - gpio: mvebu: Make use of devm_pwmchip_add (git-fixes). - gpio: mvebu: fix irq domain leak (git-fixes). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes). - hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453). - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes). - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes). - hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes). - hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes). - hwrng: pic32 - use devm_clk_get_enabled (git-fixes). - i2c: Delete error messages for failed memory allocations (git-fixes). - i2c: Improve size determinations (git-fixes). - i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes). - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes). - i2c: designware: Correct length byte validation logic (git-fixes). - i2c: designware: Handle invalid SMBus block data response length value (git-fixes). - i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes). - i2c: nomadik: Remove a useless call in the remove function (git-fixes). - i2c: nomadik: Remove unnecessary goto label (git-fixes). - i2c: nomadik: Use devm_clk_get_enabled() (git-fixes). - i3c: master: svc: fix probe failure when no i3c device exist (git-fixes). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - iavf: fix potential races for FDIR filters (git-fixes). - ice: Fix RDMA VSI removal during queue rebuild (git-fixes). - ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes). - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - idr: fix param name in idr_alloc_cyclic() doc (git-fixes). - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes). - iio: adc: stx104: Implement and utilize register structures (git-fixes). - iio: adc: stx104: Utilize iomap interface (git-fixes). - iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes). - intel/e1000:fix repeated words in comments (jsc#PED-5738). - intel: remove unused macros (jsc#PED-5738). - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes). - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). - iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes). - iommu/amd: Fix compile warning in init code (git-fixes). - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes). - iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes). - iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes). - iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes). - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes). - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes). - iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes). - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes). - iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes). - iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes). - iommu/dma: Fix iova map result check bug (git-fixes). - iommu/dma: return error code from iommu_dma_map_sg() (git-fixes). - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes). - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes). - iommu/iova: Fix module config properly (git-fixes). - iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes). - iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes). - iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes). - iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes). - iommu/mediatek: Use component_match_add (git-fixes). - iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes). - iommu/omap: Fix buffer overflow in debugfs (git-fixes). - iommu/rockchip: fix permission bits in page table entries v2 (git-fixes). - iommu/s390: Fix duplicate domain attachments (git-fixes). - iommu/sun50i: Consider all fault sources for reset (git-fixes). - iommu/sun50i: Fix R/W permission check (git-fixes). - iommu/sun50i: Fix flush size (git-fixes). - iommu/sun50i: Fix reset release (git-fixes). - iommu/sun50i: Implement .iotlb_sync_map (git-fixes). - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes). - iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes). - iommu/vt-d: Check correct capability for sagaw determination (git-fixes). - iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes). - iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes). - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes). - iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes). - ipmi:ssif: Add check for kstrdup (git-fixes). - ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes). - ipmi_si: fix a memleak in try_smi_init() (git-fixes). - jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes). - kabi/severities: Ignore newly added SRSO mitigation functions - kabi/severities: ignore mlx4 internal symbols - kabi: Allow extra bugsints (bsc#1213927). - kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025). - kconfig: fix possible buffer overflow (git-fixes). - kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there. - kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12. - kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes). - kunit: make kunit_test_timeout compatible with comment (git-fixes). - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes). - leds: multicolor: Use rounded division when calculating color components (git-fixes). - leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes). - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes). - leds: turris-omnia: Drop unnecessary mutex locking (git-fixes). - lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes). - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes). - libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924). - libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924). - libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924). - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393). - md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916). - md/raid0: Fix performance regression for large sequential writes (bsc#1213916). - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes). - media: cx24120: Add retval check for cx24120_message_send() (git-fixes). - media: dib7000p: Fix potential division by zero (git-fixes). - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes). - media: go7007: Remove redundant if statement (git-fixes). - media: i2c: ccs: Check rules is non-NULL (git-fixes). - media: i2c: rdacm21: Fix uninitialized value (git-fixes). - media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes). - media: ov2680: Add ov2680_fill_format() helper function (git-fixes). - media: ov2680: Do not take the lock for try_fmt calls (git-fixes). - media: ov2680: Fix ov2680_bayer_order() (git-fixes). - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes). - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes). - media: ov2680: Fix vflip / hflip set functions (git-fixes). - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes). - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes). - media: rkvdec: increase max supported height for H.264 (git-fixes). - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes). - media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes). - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes). - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes). - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236). - mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236). - mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236). - mlx4: Delete custom device management logic (bsc#1187236). - mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236). - mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236). - mlx4: Move the bond work to the core driver (bsc#1187236). - mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236). - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236). - mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236). - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236). - mlxsw: pci: Add shutdown method in PCI driver (git-fixes). - mmc: block: Fix in_flight[issue_type] value error (git-fixes). - mmc: moxart: read scr register without changing byte order (git-fixes). - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes). - mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes). - mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes). - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes). - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes). - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes). - mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes). - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes). - mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes). - mtd: spi-nor: Check bus width while setting QE bit (git-fixes). - mtd: spinand: toshiba: Fix ecc_get_status (git-fixes). - n_tty: Rename tail to old_tail in n_tty_read() (git-fixes). - net/mlx4: Remove many unnecessary NULL values (bsc#1187236). - net: hns3: fix wrong bw weight of disabled tc issue (git-fixes). - net: ieee802154: at86rf230: Stop leaking skb's (git-fixes). - net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes). - net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes). - net: phy: broadcom: stub c45 read/write for 54810 (git-fixes). - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes). - net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes). - net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733) - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes). - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946). - netfs: fix parameter of cleanup() (bsc#1214743). - nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes). - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes). - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes). - ntb: Clean up tx tail index on link down (git-fixes). - ntb: Drop packets when qp link is down (git-fixes). - ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes). - nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902). - nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902). - objtool/x86: Fix SRSO mess (git-fixes). - objtool/x86: Fixup frame-pointer vs rethunk (git-fixes). - objtool: Union instruction::{call_dest,jump_table} (git-fixes). - old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes). - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes). - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes). - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes). - phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes). - phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes). - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes). - pinctrl: amd: Mask wake bits on probe again (git-fixes). - pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes). - pinctrl: cherryview: fix address_space_handler() argument (git-fixes). - pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes). - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes). - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes). - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes). - platform/x86: dell-sysman: Fix reference leak (git-fixes). - powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106). - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106). - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106). - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106). - powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106). - powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106). - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106). - powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106). - powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes). - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106). - powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106). - powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106). - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/rtas: block error injection when locked down (bsc#1023051). - powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051). - powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). - powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869). - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes). - powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). - powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files. - powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503). - powerpc: fix typos in comments (bsc#1212091 ltc#199106). - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503). - pstore/ram: Check start of empty przs during init (git-fixes). - pwm: Add a stub for devm_pwmchip_add() (git-fixes). - pwm: lpc32xx: Remove handling of PWM channels (git-fixes). - pwm: meson: Simplify duplicated per-channel tracking (git-fixes). - pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes). - qed: Fix scheduling in a tasklet while getting stats (git-fixes). - regmap: rbtree: Use alloc_flags for memory allocations (git-fixes). - ring-buffer: Do not swap cpu_buffer during resize process (git-fixes). - ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes). - rpm/mkspec-dtb: support for nested subdirs. - rpmsg: glink: Add check for kstrdup (git-fixes). - rt: Add helper script to refresh RT configs based on the parent (SLE Realtime Extension). - s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes). - s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124). - s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023). - s390/ipl: add eckd dump support (jsc#PED-2025). - s390/ipl: add eckd support (jsc#PED-2023). - s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023). - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976). - s390/ipl: use octal values instead of S_* macros (jsc#PED-2023). - s390/purgatory: disable branch profiling (git-fixes bsc#1214372). - s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes). - s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148). - s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949). - sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes). - sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes). - sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: RDMA/srp: Fix residual handling (git-fixes) - scsi: bsg: Increase number of devices (bsc#1210048). - scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284). - scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: core: Improve warning message in scsi_device_block() (bsc#1209284). - scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes). - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes). - scsi: lpfc: Remove reftag check in DIF paths (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928). - scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928). - scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928). - scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928). - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928). - scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928). - scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928). - scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928). - scsi: qla2xxx: Remove unused declarations (bsc#1214928). - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928). - scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: sg: Increase number of devices (bsc#1210048). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Always set no_report_opcodes (git-fixes). - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes). - scsi: storvsc: Handle SRB status value 0x30 (git-fixes). - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes). - scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371). - selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924). - selftests/futex: Order calls to futex_lock_pi (git-fixes). - selftests/harness: Actually report SKIP for signal tests (git-fixes). - selftests/resctrl: Close perf value read fd on errors (git-fixes). - selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes). - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes). - selftests/rseq: check if libc rseq support is registered (git-fixes). - selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes). - selftests: forwarding: Skip test when no interfaces are specified (git-fixes). - selftests: forwarding: Switch off timeout (git-fixes). - selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes). - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes). - selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes). - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes). - selftests: forwarding: tc_flower: Relax success criterion (git-fixes). - selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes). - selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes). - serial: sc16is7xx: fix broken port 0 uart init (git-fixes). - serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes). - serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes). - serial: sprd: Fix DMA buffer leak issue (git-fixes). - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes). - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629). - smb: client: Fix -Wstringop-overflow issues (bsc#1193629). - smb: client: fix dfs link mount against w2k8 (bsc#1212142). - smb: client: fix null auth (git-fixes). - soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes). - soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes). - soundwire: fix enumeration completion (git-fixes). - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes). - supported.conf: fix typos for -!optional markers - swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453). - target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026). - target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873). - target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857). - target_core_rbd: remove snapshot existence validation code (bsc#1212857). - tcpm: Avoid soft reset when partner does not support get_status (git-fixes). - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes). - timers: Add shutdown mechanism to the internal functions (bsc#1213970). - timers: Provide timer_shutdown[_sync]() (bsc#1213970). - timers: Rename del_timer() to timer_delete() (bsc#1213970). - timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: Replace BUG_ON()s (bsc#1213970). - timers: Silently ignore timers with a NULL function (bsc#1213970). - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: Update kernel-doc for various functions (bsc#1213970). - timers: Use del_timer_sync() even on UP (bsc#1213970). - tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes). - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes). - tracing/probes: Fix not to count error code to total length (git-fixes). - tracing/probes: Fix to avoid double count of the string length on the array (git-fixes). - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes). - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes). - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes). - tracing: Fix memleak due to race between current_tracer and trace (git-fixes). - tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes). - tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes). - tracing: Fix race issue between cpu buffer write and swap (git-fixes). - tracing: Fix warning in trace_buffered_event_disable() (git-fixes). - tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes). - tracing: Remove unnecessary copying of tr->current_trace (git-fixes). - tty: fix hang on tty device with no_room set (git-fixes). - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes). - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes). - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes). - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes). - ubifs: Fix memleak when insert_old_idx() failed (git-fixes). - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes). - usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes). - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes). - usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes). - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes). - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes). - usb: dwc3: Fix typos in gadget.c (git-fixes). - usb: dwc3: Properly handle processing of pending events (git-fixes). - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes). - usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes). - usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes). - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes). - usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes). - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes). - usb: quirks: add quirk for Focusrite Scarlett (git-fixes). - usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). - usb: serial: option: add Quectel EC200A module support (git-fixes). - usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). - usb: serial: option: support Quectel EM060K_128 (git-fixes). - usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes). - usb: serial: simple: sort driver entries (git-fixes). - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes). - usb: typec: tcpci: clear the fault status bit (git-fixes). - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes). - usb: typec: tcpm: Fix response to vsafe0V event (git-fixes). - usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes). - usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes). - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes). - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes). - wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes). - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes). - wifi: cfg80211: Fix return value in scan logic (git-fixes). - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes). - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes). - wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes). - wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes). - wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes). - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes). - wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes). - wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes). - wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes). - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes). - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes). - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes). - wifi: radiotap: fix kernel-doc notation warnings (git-fixes). - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes). - word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729). - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes). - x86/alternative: Fix race in try_get_desc() (git-fixes). - x86/alternative: Make custom return thunk unconditional (git-fixes). - x86/boot/e820: Fix typo in e820.c comment (git-fixes). - x86/bugs: Reset speculation control settings on init (git-fixes). - x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes). - x86/cpu: Add Lunar Lake M (git-fixes). - x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes). - x86/cpu: Clean up SRSO return thunk mess (git-fixes). - x86/cpu: Cleanup the untrain mess (git-fixes). - x86/cpu: Fix __x86_return_thunk symbol type (git-fixes). - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes). - x86/cpu: Rename original retbleed methods (git-fixes). - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes). - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes). - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes). - x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453). - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453). - x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453). - x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453). - x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453). - x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453). - x86/hyperv: Reorder code to facilitate future work (bsc#1206453). - x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453). - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes). - x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes). - x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453). - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes). - x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes). - x86/mce: Retrieve poison range from hardware (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes). - x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes). - x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453). - x86/purgatory: remove PGO flags (git-fixes). - x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes). - x86/resctl: fix scheduler confusion with 'current' (git-fixes). - x86/resctrl: Fix task CLOSID/RMID update race (git-fixes). - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes). - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). - x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes). - x86/rtc: Remove __init for runtime functions (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/sgx: Reduce delay and interference of enclave release (git-fixes). - x86/speculation: Add cpu_show_gds() prototype (git-fixes). - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). - x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). - x86/srso: Disable the mitigation on unaffected configurations (git-fixes). - x86/srso: Explain the untraining sequences a bit more (git-fixes). - x86/srso: Fix build breakage with the LLVM linker (git-fixes). - x86/srso: Fix return thunks in generated code (git-fixes). - x86/static_call: Fix __static_call_fixup() (git-fixes). - x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453). - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453). - x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453). - x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453). - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453). - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes). - xfs: fix sb write verify for lazysbcount (bsc#1214661). Important SUSE bug 1023051 SUSE bug 1065729 SUSE bug 1120059 SUSE bug 1177719 SUSE bug 1187236 SUSE bug 1188885 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203329 SUSE bug 1203330 SUSE bug 1205462 SUSE bug 1206453 SUSE bug 1208902 SUSE bug 1208949 SUSE bug 1208995 SUSE bug 1209284 SUSE bug 1209799 SUSE bug 1210048 SUSE bug 1210169 SUSE bug 1210448 SUSE bug 1210643 SUSE bug 1211220 SUSE bug 1212091 SUSE bug 1212142 SUSE bug 1212423 SUSE bug 1212526 SUSE bug 1212857 SUSE bug 1212873 SUSE bug 1213026 SUSE bug 1213123 SUSE bug 1213546 SUSE bug 1213580 SUSE bug 1213601 SUSE bug 1213666 SUSE bug 1213733 SUSE bug 1213757 SUSE bug 1213759 SUSE bug 1213916 SUSE bug 1213921 SUSE bug 1213927 SUSE bug 1213946 SUSE bug 1213949 SUSE bug 1213968 SUSE bug 1213970 SUSE bug 1213971 SUSE bug 1214000 SUSE bug 1214019 SUSE bug 1214073 SUSE bug 1214120 SUSE bug 1214149 SUSE bug 1214180 SUSE bug 1214233 SUSE bug 1214238 SUSE bug 1214285 SUSE bug 1214297 SUSE bug 1214299 SUSE bug 1214305 SUSE bug 1214350 SUSE bug 1214368 SUSE bug 1214370 SUSE bug 1214371 SUSE bug 1214372 SUSE bug 1214380 SUSE bug 1214386 SUSE bug 1214392 SUSE bug 1214393 SUSE bug 1214397 SUSE bug 1214404 SUSE bug 1214428 SUSE bug 1214451 SUSE bug 1214635 SUSE bug 1214659 SUSE bug 1214661 SUSE bug 1214727 SUSE bug 1214729 SUSE bug 1214742 SUSE bug 1214743 SUSE bug 1214756 SUSE bug 1214813 SUSE bug 1214873 SUSE bug 1214928 SUSE bug 1214976 SUSE bug 1214988 SUSE bug 1215123 SUSE bug 1215124 SUSE bug 1215148 SUSE bug 1215221 SUSE bug 1215523 CVE-2022-38457 CVE-2022-40133 CVE-2023-1192 CVE-2023-1859 CVE-2023-2007 CVE-2023-20588 CVE-2023-2177 CVE-2023-34319 CVE-2023-3610 CVE-2023-37453 CVE-2023-3772 CVE-2023-3863 CVE-2023-40283 CVE-2023-4128 CVE-2023-4133 CVE-2023-4134 CVE-2023-4147 CVE-2023-4194 CVE-2023-4273 CVE-2023-4387 CVE-2023-4459 CVE-2023-4563 CVE-2023-4569 CVE-2023-4881 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467). - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899) - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022) The following non-security bugs were fixed: - ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes). - arm64: module-plts: inline linux/moduleloader.h (git-fixes) - arm64: module: Use module_init_layout_section() to spot init sections (git-fixes) - arm64: sdei: abort running SDEI handlers during crash (git-fixes) - arm64: tegra: Update AHUB clock parent and rate (git-fixes) - arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes) - ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes). - ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes). - ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes). - ASoC: meson: spdifin: start hw on dai probe (git-fixes). - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5640: Revert 'Fix sleep in atomic context' (git-fixes). - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes). - ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes). - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes). - blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986). - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992). - block/mq-deadline: use correct way to throttling write requests (bsc#1214993). - bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322). - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453). - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453). - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453). - Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453). - drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: * rename ast_device to ast_private - drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: * rename ast_device to ast_private * context changes - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808). - drm/meson: fix memory leak on ->hpd_notify callback (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - ext4: avoid potential data overflow in next_linear_group (bsc#1214951). - ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954). - ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). - ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944). - ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942). - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941). - ext4: Remove ext4 locking of moved directory (bsc#1214957). - ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). - fs: Establish locking order for unrelated directories (bsc#1214958). - fs: Lock moved directories (bsc#1214959). - fs: lockd: avoid possible wrong NULL parameter (git-fixes). - fs: no need to check source (bsc#1215752). - fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581). - gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479). - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: use vmalloc_array and vcalloc (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - hwrng: virtio - add an internal buffer (git-fixes). - hwrng: virtio - always add a pending request (git-fixes). - hwrng: virtio - do not wait on cleanup (git-fixes). - hwrng: virtio - do not waste entropy (git-fixes). - hwrng: virtio - Fix race on data_avail and actual data (git-fixes). - i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes). - iommu/virtio: Detach domain on endpoint release (git-fixes). - iommu/virtio: Return size mapped for a detached domain (git-fixes). - jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). - jbd2: correct the end of the journal recovery scan range (bsc#1214955). - jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). - jbd2: fix checkpoint cleanup performance regression (bsc#1214952). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). - jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). - jbd2: remove journal_clean_one_cp_list() (bsc#1214947). - jbd2: remove t_checkpoint_io_list (bsc#1214946). - jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). - kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template. - kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist. - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915). - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896). - KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916). - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894). - KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895). - KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911). - KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes). - KVM: x86/mmu: Include mmu.h in spte.h (git-fixes). - loop: Fix use-after-free issues (bsc#1214991). - loop: loop_set_status_from_info() check before assignment (bsc#1214990). - module: Expose module_init_layout_section() (git-fixes) - net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). - net: mana: Add page pool for RX buffers (bsc#1214040). - net: mana: Configure hwc timeout from hardware (bsc#1214037). - net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes). - nfs/blocklayout: Use the passed in gfp flags (git-fixes). - NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes). - nfsd: fix change_info in NFSv4 RENAME replies (git-fixes). - nfsd: Fix race to FREE_STATEID and cl_revoked (git-fixes). - NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes). - NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes). - NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes). - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes). - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes). - nvme-auth: use chap->s2 to indicate bidirectional authentication (bsc#1214543). - nvme-tcp: add recovery_delay to sysfs (bsc#1201284). - nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284). - nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284). - nvme-tcp: make 'err_work' a delayed work (bsc#1201284). - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes). - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes). - platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes). - platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes). - pNFS: Fix assignment of xprtdata.cred (git-fixes). - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582). - printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875). - quota: add new helper dquot_active() (bsc#1214998). - quota: factor out dquot_write_dquot() (bsc#1214995). - quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963). - quota: fix warning in dqgrab() (bsc#1214962). - quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). - quota: rename dquot_active() to inode_quota_active() (bsc#1214997). - RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes) - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes). - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes). - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes). - scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658). - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). - scsi: storvsc: Handle additional SRB status values (git-fixes). - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941). - selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549). - spi: Add TPM HW flow flag (bsc#1213534) - spi: tegra210-quad: Enable TPM wait polling (bsc#1213534) - spi: tegra210-quad: set half duplex flag (bsc#1213534) - SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes). - tpm_tis_spi: Add hardware wait polling (bsc#1213534) - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes). - udf: Fix extension of the last extent in the file (bsc#1214964). - udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965). - udf: Fix off-by-one error when discarding preallocation (bsc#1214966). - udf: Fix uninitialized array access for some pathnames (bsc#1214967). - Update metadata - usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes). - usb: ehci: move new member has_ci_pec_bug into hole (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (git-fixes). - vhost-scsi: unbreak any layout for response (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: fix hung thread due to erroneous iotlb entries (git-fixes). - vhost: handle error while adding split ranges to iotlb (git-fixes). - virtio_net: add checking sq is full inside xdp xmit (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: reorder some funcs (git-fixes). - virtio_net: separate the logic of checking whether sq is full (git-fixes). - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes). - virtio-blk: set req->state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes). - virtio-mmio: do not break lifecycle of vm_dev (git-fixes). - virtio-net: fix race between set queues and probe (git-fixes). - virtio-net: set queues after driver_ok (git-fixes). - virtio-rng: make device ready before making request (git-fixes). - virtio: acknowledge all features before access (git-fixes). - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582). - x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453). - x86/coco: Export cc_vendor (bsc#1206453). - x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453). - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453). - x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453) - x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453). - x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453). - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453). - x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453). - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453). - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453). - x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453). - x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453). - x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453). - x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes). - x86/srso: Do not probe microcode in a guest (git-fixes). - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). - x86/srso: Fix srso_show_state() side effect (git-fixes). - x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes). - xen: remove a confusing comment on auto-translated guest I/O (git-fixes). - xprtrdma: Remap Receive buffers after a reconnect (git-fixes). Important SUSE bug 1152472 SUSE bug 1202845 SUSE bug 1206453 SUSE bug 1213808 SUSE bug 1214941 SUSE bug 1214942 SUSE bug 1214943 SUSE bug 1214944 SUSE bug 1214950 SUSE bug 1214951 SUSE bug 1214954 SUSE bug 1214957 SUSE bug 1214986 SUSE bug 1214992 SUSE bug 1214993 SUSE bug 1215322 SUSE bug 1215523 SUSE bug 1215877 SUSE bug 1215894 SUSE bug 1215895 SUSE bug 1215896 SUSE bug 1215911 SUSE bug 1215915 SUSE bug 1215916 CVE-2023-1206 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-4155 CVE-2023-42753 CVE-2023-42754 CVE-2023-4389 CVE-2023-4622 CVE-2023-4623 CVE-2023-4921 CVE-2023-5345 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Live Patching 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861) - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860) - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858) - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467) - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899) - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022) - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes). - ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes). - ARM: pxa: remove use of symbol_get() (git-fixes). - arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes). - arm64: module-plts: inline linux/moduleloader.h (git-fixes) - arm64: module: Use module_init_layout_section() to spot init sections (git-fixes) - arm64: sdei: abort running SDEI handlers during crash (git-fixes) - arm64: tegra: Update AHUB clock parent and rate (git-fixes) - arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes) - arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453). - ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes). - ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes). - ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes). - ASoC: meson: spdifin: start hw on dai probe (git-fixes). - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5640: Revert 'Fix sleep in atomic context' (git-fixes). - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes). - ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes). - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes). - ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes). - ata: pata_falcon: fix IO base selection for Q40 (git-fixes). - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes). - ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes). - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes). - blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986). - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992). - block/mq-deadline: use correct way to throttling write requests (bsc#1214993). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes). - bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322). - bpf: Clear the probe_addr for uprobe (git-fixes). - btrfs: do not hold CPU for too long when defragging a file (bsc#1214988). - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453). - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453). - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453). - Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453). - drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes). - drm/amd/display: Add smu write msg id fail retry process (git-fixes). - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes). - drm/amd/display: fix the white screen issue when >= 64GB DRAM (git-fixes). - drm/amd/display: prevent potential division by zero errors (git-fixes). - drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes). - drm/amd/display: Remove wait while locked (git-fixes). - drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: * rename ast_device to ast_private - drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: * rename ast_device to ast_private * context changes - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808). - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes). - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes). - drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes). - drm/i915/gvt: Verify pfn is 'valid' before dereferencing 'struct page' (git-fixes). - drm/meson: fix memory leak on ->hpd_notify callback (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - ext4: avoid potential data overflow in next_linear_group (bsc#1214951). - ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954). - ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). - ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944). - ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942). - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941). - ext4: Remove ext4 locking of moved directory (bsc#1214957). - ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). - fs: do not update freeing inode i_io_list (bsc#1214813). - fs: Establish locking order for unrelated directories (bsc#1214958). - fs: Lock moved directories (bsc#1214959). - fs: lockd: avoid possible wrong NULL parameter (git-fixes). - fs: no need to check source (bsc#1215752). - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813). - fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581). - gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479). - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: use vmalloc_array and vcalloc (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - hwrng: virtio - add an internal buffer (git-fixes). - hwrng: virtio - always add a pending request (git-fixes). - hwrng: virtio - do not wait on cleanup (git-fixes). - hwrng: virtio - do not waste entropy (git-fixes). - hwrng: virtio - Fix race on data_avail and actual data (git-fixes). - i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes). - i3c: master: svc: fix probe failure when no i3c device exist (git-fixes). - i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes). - idr: fix param name in idr_alloc_cyclic() doc (git-fixes). - Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes). - iommu/virtio: Detach domain on endpoint release (git-fixes). - iommu/virtio: Return size mapped for a detached domain (git-fixes). - jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). - jbd2: correct the end of the journal recovery scan range (bsc#1214955). - jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). - jbd2: fix checkpoint cleanup performance regression (bsc#1214952). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). - jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). - jbd2: remove journal_clean_one_cp_list() (bsc#1214947). - jbd2: remove t_checkpoint_io_list (bsc#1214946). - jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). - kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025). - kabi/severities: ignore mlx4 internal symbols - kconfig: fix possible buffer overflow (git-fixes). - kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template. - kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist. - kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes). - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915). - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896). - KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916). - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894). - KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895). - KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911). - KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes). - KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes). - KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes). - KVM: x86/mmu: Include mmu.h in spte.h (git-fixes). - loop: Fix use-after-free issues (bsc#1214991). - loop: loop_set_status_from_info() check before assignment (bsc#1214990). - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236). - mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236). - mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236). - mlx4: Delete custom device management logic (bsc#1187236). - mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236). - mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236). - mlx4: Move the bond work to the core driver (bsc#1187236). - mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236). - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236). - mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236). - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236). - module: Expose module_init_layout_section() (git-fixes) - net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). - net: mana: Add page pool for RX buffers (bsc#1214040). - net: mana: Configure hwc timeout from hardware (bsc#1214037). - net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes). - net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). - net/mlx4: Remove many unnecessary NULL values (bsc#1187236). - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes). - NFS/blocklayout: Use the passed in gfp flags (git-fixes). - NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes). - NFSD: fix change_info in NFSv4 RENAME replies (git-fixes). - NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes). - NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes). - NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes). - NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes). - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes). - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes). - ntb: Clean up tx tail index on link down (git-fixes). - ntb: Drop packets when qp link is down (git-fixes). - ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes). - nvme-auth: use chap->s2 to indicate bidirectional authentication (bsc#1214543). - nvme-tcp: add recovery_delay to sysfs (bsc#1201284). - nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284). - nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284). - nvme-tcp: make 'err_work' a delayed work (bsc#1201284). - PCI: Free released resource after coalescing (git-fixes). - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes). - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes). - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes). - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes). - platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes). - platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes). - pNFS: Fix assignment of xprtdata.cred (git-fixes). - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582). - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). - powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). - printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875). - pwm: lpc32xx: Remove handling of PWM channels (git-fixes). - quota: add new helper dquot_active() (bsc#1214998). - quota: factor out dquot_write_dquot() (bsc#1214995). - quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963). - quota: fix warning in dqgrab() (bsc#1214962). - quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). - quota: rename dquot_active() to inode_quota_active() (bsc#1214997). - RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes) - s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes). - s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124). - s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023). - s390/ipl: add eckd dump support (jsc#PED-2025). - s390/ipl: add eckd support (jsc#PED-2023). - s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023). - s390/ipl: use octal values instead of S_* macros (jsc#PED-2023). - s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes). - s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes). - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes). - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes). - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes). - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes). - scsi: lpfc: Remove reftag check in DIF paths (git-fixes). - scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928). - scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928). - scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928). - scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928). - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928). - scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928). - scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928). - scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928). - scsi: qla2xxx: Remove unused declarations (bsc#1214928). - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928). - scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928). - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Handle additional SRB status values (git-fixes). - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941). - selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549). - selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes). - spi: Add TPM HW flow flag (bsc#1213534) - spi: tegra210-quad: Enable TPM wait polling (bsc#1213534) - spi: tegra210-quad: set half duplex flag (bsc#1213534) - SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes). - tcpm: Avoid soft reset when partner does not support get_status (git-fixes). - tpm_tis_spi: Add hardware wait polling (bsc#1213534) - tracing: Fix race issue between cpu buffer write and swap (git-fixes). - tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes). - tracing: Remove unnecessary copying of tr->current_trace (git-fixes). - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes). - udf: Fix extension of the last extent in the file (bsc#1214964). - udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965). - udf: Fix off-by-one error when discarding preallocation (bsc#1214966). - udf: Fix uninitialized array access for some pathnames (bsc#1214967). - Update metadata - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes). - usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes). - usb: ehci: move new member has_ci_pec_bug into hole (git-fixes). - usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). - usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). - usb: typec: tcpci: clear the fault status bit (git-fixes). - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (git-fixes). - vhost-scsi: unbreak any layout for response (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: fix hung thread due to erroneous iotlb entries (git-fixes). - vhost: handle error while adding split ranges to iotlb (git-fixes). - virtio_net: add checking sq is full inside xdp xmit (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: reorder some funcs (git-fixes). - virtio_net: separate the logic of checking whether sq is full (git-fixes). - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes). - virtio-blk: set req->state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes). - virtio-mmio: do not break lifecycle of vm_dev (git-fixes). - virtio-net: fix race between set queues and probe (git-fixes). - virtio-net: set queues after driver_ok (git-fixes). - virtio-rng: make device ready before making request (git-fixes). - virtio: acknowledge all features before access (git-fixes). - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582). - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes). - word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729). - x86/alternative: Fix race in try_get_desc() (git-fixes). - x86/boot/e820: Fix typo in e820.c comment (git-fixes). - x86/bugs: Reset speculation control settings on init (git-fixes). - x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453). - x86/coco: Export cc_vendor (bsc#1206453). - x86/cpu: Add Lunar Lake M (git-fixes). - x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes). - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes). - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes). - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453). - x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453). - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453). - x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453) - x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453). - x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453). - x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453). - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453). - x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453). - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453). - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453). - x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453). - x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453). - x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453). - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes). - x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes). - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes). - x86/mce: Retrieve poison range from hardware (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes). - x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes). - x86/purgatory: remove PGO flags (git-fixes). - x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes). - x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes). - x86/resctl: fix scheduler confusion with 'current' (git-fixes). - x86/resctrl: Fix task CLOSID/RMID update race (git-fixes). - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). - x86/rtc: Remove __init for runtime functions (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/sgx: Reduce delay and interference of enclave release (git-fixes). - x86/srso: Do not probe microcode in a guest (git-fixes). - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). - x86/srso: Fix srso_show_state() side effect (git-fixes). - x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes). - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes). - xen: remove a confusing comment on auto-translated guest I/O (git-fixes). - xprtrdma: Remap Receive buffers after a reconnect (git-fixes). Important SUSE bug 1152472 SUSE bug 1202845 SUSE bug 1206453 SUSE bug 1213808 SUSE bug 1214928 SUSE bug 1214942 SUSE bug 1214943 SUSE bug 1214944 SUSE bug 1214950 SUSE bug 1214951 SUSE bug 1214954 SUSE bug 1214957 SUSE bug 1214986 SUSE bug 1214988 SUSE bug 1214992 SUSE bug 1214993 SUSE bug 1215322 SUSE bug 1215877 SUSE bug 1215894 SUSE bug 1215895 SUSE bug 1215896 SUSE bug 1215911 SUSE bug 1215915 SUSE bug 1215916 CVE-2023-1192 CVE-2023-1206 CVE-2023-1859 CVE-2023-2177 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-4155 CVE-2023-42753 CVE-2023-42754 CVE-2023-4389 CVE-2023-4622 CVE-2023-4623 CVE-2023-4881 CVE-2023-4921 CVE-2023-5345 cpe:/o:suse:sle-module-live-patching:15:sp5 Security update for netty, netty-tcnative (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for netty, netty-tcnative fixes the following issues: netty: - Security fixes included in this version update from 4.1.75 to 4.1.90: * CVE-2022-24823: Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary files for Java 6 and lower in io.netty:netty-codec-http (bsc#1199338) * CVE-2022-41881: HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360) * CVE-2022-41915: HTTP Response splitting from assigning header value iterator (bsc#1206379) - Other non-security bug fixes included in this version update from 4.1.75 to 4.1.90: * Build with Java 11 on ix86 architecture in order to avoid build failures * Fix `HttpHeaders.names` for non-String headers * Fix `FlowControlHandler` behaviour to pass read events when auto-reading is turned off * Fix brotli compression * Fix a bug in FlowControlHandler that broke auto-read * Fix a potential memory leak bug has been in the pooled allocator * Fix a scalability issue caused by instanceof and check-cast checks that lead to false-sharing on the `Klass::secondary_super_cache` field in the JVM * Fix a bug in our `PEMParser` when PEM files have multiple objects, and `BouncyCastle` is on the classpath * Fix several `NullPointerException` bugs * Fix a regression `SslContext` private key loading * Fix a bug in `SslContext` private key reading fall-back path * Fix a buffer leak regression in `HttpClientCodec` * Fix a bug where some `HttpMessage` implementations, that also implement `HttpContent`, were not handled correctly * Fix epoll bug when receiving zero-sized datagrams * Fix a bug in `SslHandler` so `handlerRemoved` works properly even if `handlerAdded` throws an exception * Fix an issue that allowed the multicast methods on `EpollDatagramChannel` to be called outside of an event-loop thread * Fix a bug where an OPT record was added to DNS queries that already had such a record * Fix a bug that caused an error when files uploaded with HTTP POST contained a backslash in their name * Fix an issue in the `BlockHound` integration that could occasionally cause NetUtil to be reported as performing blocking operation. A similar `BlockHound` issue was fixed for the `JdkSslContext` * Fix a bug that prevented preface or settings frames from being flushed, when an HTTP2 connection was established with prior-knowledge * Fix a bug where Netty fails to load a shaded native library * Fix and relax overly strict HTTP/2 header validation check that was rejecting requests from Chrome and Firefox * Fix OpenSSL and BoringSSL implementations to respect the `jdk.tls.client.protocols` and `jdk.tls.server.protocols` system properties, making them react to these in the same way the JDK SSL provider does * Fix inconsitencies in how `epoll`, `kqueue`, and `NIO` handle RDHUP * For a more detailed list of changes please consult the official release notes: + Changes from 4.1.90: https://netty.io/news/2023/03/14/4-1-90-Final.html + Changes from 4.1.89: https://netty.io/news/2023/02/13/4-1-89-Final.html + Changes from 4.1.88: https://netty.io/news/2023/02/12/4-1-88-Final.html + Changes from 4.1.87: https://netty.io/news/2023/01/12/4-1-87-Final.html + Changes from 4.1.86: https://netty.io/news/2022/12/12/4-1-86-Final.html + Changes from 4.1.85: https://netty.io/news/2022/11/09/4-1-85-Final.html + Changes from 4.1.84: https://netty.io/news/2022/10/11/4-1-84-Final.html + Changes from 4.1.82: https://netty.io/news/2022/09/13/4-1-82-Final.html + Changes from 4.1.81: https://netty.io/news/2022/09/08/4-1-81-Final.html + Changes from 4.1.80: https://netty.io/news/2022/08/26/4-1-80-Final.html + Changes from 4.1.79: https://netty.io/news/2022/07/11/4-1-79-Final.html + Changes from 4.1.78: https://netty.io/news/2022/06/14/4-1-78-Final.html + Changes from 4.1.77: https://netty.io/news/2022/05/06/2-1-77-Final.html + Changes from 4.1.76: https://netty.io/news/2022/04/12/4-1-76-Final.html netty-tcnative: - New artifact named `netty-tcnative-classes`, provided by this update is required by netty 4.1.90 which contains important security updates - No formal changelog present. This artifact is closely bound to the netty releases Important SUSE bug 1199338 SUSE bug 1206360 SUSE bug 1206379 CVE-2022-24823 CVE-2022-41881 CVE-2022-41915 cpe:/o:suse:packagehub:15:sp5 Security update for libheif (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libheif fixes the following issues: - CVE-2023-29659: Fixed segfault caused by divide-by-zero (bsc#1211174). Moderate SUSE bug 1211174 CVE-2023-29659 cpe:/o:suse:packagehub:15:sp5 Security update for openvswitch (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for openvswitch fixes the following issues: - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580). - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581). Important SUSE bug 1206580 SUSE bug 1206581 CVE-2022-4337 CVE-2022-4338 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-aws (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441 bsc#1209658). Important SUSE bug 1200441 SUSE bug 1209658 cpe:/o:suse:packagehub:15:sp5 Security update for openvswitch (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for openvswitch fixes the following issues: - CVE-2022-4338: Fixed Integer Underflow in Organization Specific TLV (bsc#1206580). - CVE-2022-4337: Fixed Out-of-Bounds Read in Organization Specific TLV (bsc#1206581). Important SUSE bug 1206580 SUSE bug 1206581 CVE-2022-4337 CVE-2022-4338 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-null (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of terraform-provider-null fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441 bsc#1209658). Important SUSE bug 1200441 SUSE bug 1209658 cpe:/o:suse:packagehub:15:sp5 Security update for python-Flask (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-Flask fixes the following issues: - CVE-2023-30861: Fixed a potential cookie confusion due to incorrect caching (bsc#1211246). Important SUSE bug 1211246 CVE-2023-30861 cpe:/o:suse:packagehub:15:sp5 Security update for openvswitch (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for openvswitch fixes the following issues: - CVE-2023-1668: Fixed remote traffic denial of service via crafted packets with IP proto 0 (bsc#1210054). Important SUSE bug 1210054 CVE-2023-1668 cpe:/o:suse:packagehub:15:sp5 Security update for golang-github-vpenso-prometheus_slurm_exporter (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of golang-github-vpenso-prometheus_slurm_exporter fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441 bsc#1209658). Important SUSE bug 1200441 SUSE bug 1209658 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-helm (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of terraform-provider-helm fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441). Important SUSE bug 1200441 cpe:/o:suse:packagehub:15:sp5 Security update for tiff (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for tiff fixes the following issues: Fixed multiple out of bounds read/write security issues: CVE-2023-0795 (bsc#1208226), CVE-2023-0796 (bsc#1208227), CVE-2023-0797 (bsc#1208228), CVE-2023-0798 (bsc#1208229), CVE-2023-0799 (bsc#1208230), CVE-2023-0800 (bsc#1208231), CVE-2023-0801 (bsc#1208232), CVE-2023-0802 (bsc#1208233), CVE-2023-0803 (bsc#1208234), CVE-2023-0804 (bsc#1208236). Moderate SUSE bug 1208226 SUSE bug 1208227 SUSE bug 1208228 SUSE bug 1208229 SUSE bug 1208230 SUSE bug 1208231 SUSE bug 1208232 SUSE bug 1208233 SUSE bug 1208234 SUSE bug 1208236 CVE-2023-0795 CVE-2023-0796 CVE-2023-0797 CVE-2023-0798 CVE-2023-0799 CVE-2023-0800 CVE-2023-0801 CVE-2023-0802 CVE-2023-0803 CVE-2023-0804 cpe:/o:suse:packagehub:15:sp5 Security update for python-sqlparse (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-sqlparse fixes the following issues: - CVE-2023-30608: Fixed a Regular Expression Denial of Service (ReDOS) vulnerability (bsc#1210617). Moderate SUSE bug 1210617 CVE-2023-30608 cpe:/o:suse:packagehub:15:sp5 Security update for mariadb (Low) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for mariadb fixes the following issues: Updated to version 10.6.13: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query (bsc#1207404). Low SUSE bug 1207404 CVE-2022-47015 cpe:/o:suse:packagehub:15:sp5 Security update for libwebp (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libwebp fixes the following issues: - CVE-2023-1999: Fixed a double free (bsc#1210212). Important SUSE bug 1210212 CVE-2023-1999 cpe:/o:suse:packagehub:15:sp5 Security update for python-reportlab (Critical) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-reportlab fixes the following issues: - CVE-2023-33733: Fixed arbitrary code execution via supplying a crafted PDF file (bsc#1212065). Critical SUSE bug 1212065 CVE-2023-33733 cpe:/o:suse:packagehub:15:sp5 Security update for Salt (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for salt fixes the following issues: salt: - Update to Salt release version 3006.0 (jsc#PED-4361) * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency for salt - Add python3-packaging as new dependency for salt - Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071) - Avoid conflicts with Salt dependencies versions (bsc#1211612) - Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754) - Create new salt-tests subpackage containing Salt tests - Drop conflictive patch dicarded from upstream - Fix package build with old setuptools versions - Fix SLS rendering error when Jinja macros are used - Fix version detection and avoid building and testing failures - Prevent deadlocks in salt-ssh executions - Require python3-jmespath runtime dependency (bsc#1209233) - Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517) python-jmespath: - Deliver python3-jmespath to SUSE Linux Enterprise Micro on s390x architecture as it is now required by Salt (no source changes) python-ply: - Deliver python3-ply to SUSE Linux Enterprise Micro on s390x architecture as it is a requirement for python-jmespath (no source changes) Moderate SUSE bug 1207071 SUSE bug 1209233 SUSE bug 1211612 SUSE bug 1211754 SUSE bug 1212516 SUSE bug 1212517 cpe:/o:suse:packagehub:15:sp5 Security update for SUSE Manager Client Tools (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update fixes the following issues: grafana: - Version update from 8.5.22 to 9.5.1 (jsc#PED-3694): * Security fixes: - CVE-2023-1410: grafana: Stored XSS in Graphite FunctionDescription tooltip (bsc#1209645) - CVE-2023-1387: grafana: JWT URL-login flow leaks token to data sources through request parameter in proxy requests (bnc#1210907) - CVE-2022-36062: grafana: Fix RBAC folders/dashboards privilege escalation (bsc#1203596) - CVE-2022-35957: grafana: Escalation from admin to server admin when auth proxy is used (bsc#1203597) - CVE-2022-32149: Upgrade x/text to version unaffected by CVE-2022-32149 (bsc#1204501) - CVE-2022-31107: grafana: OAuth account takeover (bsc#1201539) - CVE-2022-31097: grafana: stored XSS vulnerability (bsc#1201535) - CVE-2022-27664: go1.18,go1.19: net/http: handle server errors after sending GOAWAY (bsc#1203185) - CVE-2022-0155: follow-redirects: Exposure of Private Personal Information to an Unauthorized Actor - CVE-2021-43138: spacewalk-web: a malicious user can obtain privileges via the mapValues() method(bsc#1200480) - CVE-2021-3918: json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') (bsc#1192696) - CVE-2021-3807: node-ansi-regex: Inefficient Regular Expression Complexity in chalk/ansi-regex (bsc#1192154) - CVE-2020-7753: nodejs-trim: Regular Expression Denial of Service (ReDoS) in trim function * Important changes: - Default named retention policies won't be used to query. Users who have a default named retention policy in their influxdb database, have to rename it to something else. To change the hardcoded retention policy in the dashboard.json, users must then select the right retention policy from dropdown and save the panel/dashboard. - Grafana Alerting rules with NoDataState configuration set to Alerting will now respect 'For' duration. - Users who use LDAP role sync to only sync Viewer, Editor and Admin roles, but grant Grafana Server Admin role manually will not be able to do that anymore. After this change, LDAP role sync will override any manual changes to Grafana Server Admin role assignments. If grafana_admin is left unset in LDAP role mapping configuration, it will default to false. - The InfluxDB backend migration feature toggle (influxdbBackendMigration) has been reintroduced in this version as issues were discovered with backend processing of InfluxDB data. Unless this feature toggle is enabled, all InfluxDB data will be parsed in the frontend. This frontend processing is the default behavior. In Grafana 9.4.4, InfluxDB data parsing started to be handled in the backend. If you have upgraded to 9.4.4 and then added new transformations on InfluxDB data, those panels will fail to render. To resolve this either: Remove the affected panel and re-create it or edit the `time` field as `Time` in `panel.json` or `dashboard.json` - The `@grafana/ui` package helper function `selectOptionInTest` used in frontend tests has been removed as it caused testing libraries to be bundled in the production code of Grafana. If you were using this helper function in your tests please update your code accordingly. - Removed deprecated `checkHealth` prop from the `@grafana/e2e` `addDataSource` configuration. Previously this value defaulted to `false`, and has not been used in end-to-end tests since Grafana 8.0.3. - Removed the deprecated `LegacyBaseMap`, `LegacyValueMapping`, `LegacyValueMap`, and `LegacyRangeMap` types, and `getMappedValue` function from grafana-data. See the documentation for the migration. This change fixes a bug in Grafana where intermittent failure of database, network between Grafana and the database, or error in querying the database would cause all alert rules to be unscheduled in Grafana. Following this change scheduled alert rules are not updated unless the query is successful. - The `get_alert_rules_duration_seconds` metric has been renamed to `schedule_query_alert_rules_duration_seconds` - Any secret (data sources credential, alert manager credential, etc, etc) created or modified with Grafana v9.0 won't be decryptable from any previous version (by default) because the way encrypted secrets are stored into the database has changed. Although secrets created or modified with previous versions will still be decryptable by Grafana v9.0. - If required, although generally discouraged, the `disableEnvelopeEncryption` feature toggle can be enabled to keep envelope encryption disabled once updating to Grafana - In case of need to rollback to an earlier version of Grafana (i.e. Grafana v8.x) for any reason, after being created or modified any secret with Grafana v9.0, the `envelopeEncryption` feature toggle will need to be enabled to keep backwards compatibility (only from `v8.3.x` a bit unstable, from `8.5.x` stable). - As a final attempt to deal with issues related with the aforementioned situations, the `grafana-cli admin secrets-migration rollback` command has been designed to move back all the Grafana secrets encrypted with envelope encryption to legacy encryption. So, after running that command it should be safe to disable envelope encryption and/or roll back to a previous version of Grafana. Alternatively or complementarily to all the points above, backing up the Grafana database before updating could be a good idea to prevent disasters (although the risk of getting some secrets corrupted only applies to those updates/created with after updating to Grafana v9.0). - In Elasticsearch, browser access mode was deprecated in grafana 7.4.0 and removed in 9.0.0. If you used this mode please switch to server access mode on the datasource configuration page. - Environment variables passed from Grafana to external Azure plugins have been renamed: `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`, `AZURE_MANAGED_IDENTITY_ENABLED` renamed to `GFAZPL_MANAGED_IDENTITY_ENABLED`, `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`. There are no known plugins which were relying on these variables. Moving forward plugins should read Azure settings only via Grafana Azure SDK which properly handles old and new environment variables. - Removes support for for ElasticSearch versions after their end-of-life, currently versions < 7.10.0. To continue to use ElasticSearch data source, upgrade ElasticSearch to version 7.10.0+. - Application Insights and Insight Analytics queries in Azure Monitor were deprecated in Grafana 8.0 and finally removed in 9.0. Deprecated queries will no longer be executed. - grafana/ui: Button now specifies a default type='button'. The `Button` component provided by @grafana/ui now specifies a default `type='button'` when no type is provided. In previous versions, if the attribute was not specified for buttons associated with a `<form>` the default value was `submit` per the specification. You can preserve the old behavior by explicitly setting the type attribute: `<Button type='submit' />` - The `Rename by regex` transformation has been improved to allow global patterns of the form `/<stringToReplace>/g`. Depending on the regex match used, this may cause some transformations to behave slightly differently. You can guarantee the same behaviour as before by wrapping the `match` string in forward slashes (`/`), e.g. `(.*)` would become `/(.*)/` - `<Select />` menus will now portal to the document body by default. This is to give more consistent behaviour when positioning and overlaying. If you were setting`menuShouldPortal={true}` before you can safely remove that prop and behaviour will be the same. If you weren't explicitly setting that prop, there should be no visible changes in behaviour but your tests may need updating. If you were setting `menuShouldPortal={false}` this will continue to prevent the menu from portalling. - Grafana alerting endpoint prefixed with `api/v1/rule/test` that tests a rule against a Corte/Loki data source now expects the data source UID as a path parameter instead of the data source numeric identifier. - Grafana alerting endpoints prefixed with `api/prometheus/` that proxy requests to a Cortex/Loki data source now expect the data source UID as a path parameter instead of the data source numeric identifier. - Grafana alerting endpoints prefixed with `api/ruler/` that proxy requests to a Cortex/Loki data source now expect the data source UID as a path parameter instead of the data - Grafana alerting endpoints prefixed with `api/alertmanager/` that proxy requests to an Alertmanager now expect the data source UID as a path parameter instead of the data source numeric identifier. - The format of log messages have been updated, `lvl` is now `level` and `eror`and `dbug` has been replaced with `error` and `debug`. The precision of timestamps has been increased. To smooth the transition, it is possible to opt-out of the new log format by enabling the feature toggle `oldlog`. This option will be removed in a future minor release. - In the Loki data source, the dataframe format used to represent Loki logs-data has been changed to a more efficient format. The query-result is represented by a single dataframe with a 'labels' column, instead of the separate dataframes for every labels-value. When displaying such data in explore, or in a logs-panel in the dashboard will continue to work without changes, but if the data was loaded into a different dashboard-panel, or Transforms were used, adjustments may be necessary. For example, if you used the 'labels to fields' transformation with the logs data, please switch to the 'extract fields' transformation. * Deprecations: - The `grafana_database_conn_*` metrics are deprecated, and will be removed in a future version of Grafana. Use the `go_sql_stats_*` metrics instead. - Support for compact Explore URLs is deprecated and will be removed in a future release. Until then, when navigating to Explore using the deprecated format the URLs are automatically converted. If you have existing links pointing to Explore update them using the format generated by Explore upon navigation. You can identify a compact URL by its format. Compact URLs have the left (and optionally right) url parameter as an array of strings, for example `&left=['now-1h','now'...]`. The standard explore URLs follow a key/value pattern, for example `&left={'datasource':'test'...}`. Please be sure to check your dashboards for any hardcoded links to Explore and update them to the standard URL pattern. - Chore: Remove deprecated DataSourceAPI methods. - Data: Remove deprecated types and functions from valueMappings. - Elasticsearch: Remove browser access mode. - Elasticsearch: Remove support for versions after their end of the life (<7.10.0). - Explore: Remove support for legacy, compact format URLs. - Graph: Deprecate Graph (old) and make it no longer a visualization option for new panels. - `setExploreQueryField`, `setExploreMetricsQueryField` and `setExploreLogsQueryField` are now deprecated and will be removed in a future release. If you need to set a different query editor for Explore, conditionally render based on `props.app` in your regular query editor. * Changes: - User: Fix externalUserId not being populated. If you used any of these components please use them from grafana/experimental from now on: - AccessoryButton - EditorFieldGroup - EditorHeader - EditorField - EditorRow - EditorList - EditorRows - EditorSwitch - FlexItem - Stack - InlineSelect - InputGroup - Space - Starting with 9.1.0, existing heatmap panels will start using a new implementation. This can be disabled by setting the `useLegacyHeatmapPanel` feature flag to true. It can be tested on a single dashbobard by adding `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL. - Logger: Enable new logging format by default. - Loki: Enable new visual query builder by default. - Plugins: Remove plugin list panel. - Install wrapper scripts under /usr/sbin - Install actual binaries under /usr/libexec/grafana (or /usr/lib under older distributions) and create a simlink for wrapper scripts and the service (which expect the binary to be under /usr/share/grafana/bin) - Chore: Upgrade typescript to 4.6.4. Important SUSE bug 1192154 SUSE bug 1192696 SUSE bug 1200480 SUSE bug 1201535 SUSE bug 1201539 SUSE bug 1203185 SUSE bug 1203596 SUSE bug 1203597 SUSE bug 1204501 SUSE bug 1209645 SUSE bug 1210907 CVE-2020-7753 CVE-2021-3807 CVE-2021-3918 CVE-2021-43138 CVE-2022-0155 CVE-2022-27664 CVE-2022-31097 CVE-2022-31107 CVE-2022-32149 CVE-2022-35957 CVE-2022-36062 CVE-2023-1387 CVE-2023-1410 cpe:/o:suse:packagehub:15:sp5 Security update for salt and python-pyzmq (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for salt and python-pyzmq fixes the following issues: salt: - Update to Salt release version 3006.0 (jsc#PED-4361) * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html - Add missing patch after rebase to fix collections Mapping issues - Add python3-looseversion as new dependency for salt - Add python3-packaging as new dependency for salt - Allow entrypoint compatibility for 'importlib-metadata>=5.0.0' (bsc#1207071) - Avoid conflicts with Salt dependencies versions (bsc#1211612) - Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754) - Create new salt-tests subpackage containing Salt tests - Drop conflictive patch dicarded from upstream - Fix package build with old setuptools versions - Fix SLS rendering error when Jinja macros are used - Fix version detection and avoid building and testing failures - Prevent deadlocks in salt-ssh executions - Require python3-jmespath runtime dependency (bsc#1209233) - Make master_tops compatible with Salt 3000 and older minions (bsc#1212516, bsc#1212517) python-pyzmq: - Update python-pyzmq to version 17.1.2 in LTSS products (bsc#1186945) Moderate SUSE bug 1186945 SUSE bug 1207071 SUSE bug 1209233 SUSE bug 1211612 SUSE bug 1211754 SUSE bug 1212516 SUSE bug 1212517 cpe:/o:suse:packagehub:15:sp5 Security update for golang-github-prometheus-prometheus (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for golang-github-prometheus-prometheus fixes the following issues: golang-github-prometheus-prometheus: - Security issues fixed in this version update to 2.37.6: * CVE-2022-46146: Fix basic authentication bypass vulnerability (bsc#1208049, jsc#PED-3576) * CVE-2022-41715: Update our regexp library to fix upstream (bsc#1204023) * CVE-2022-41723: Fixed go issue to avoid quadratic complexity in HPACK decoding (bsc#1208298) - Other non-security bugs fixed and changes in this version update to 2.37.6: * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a memory leak. * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus startup. * [BUGFIX] Agent: Fix validation of flag options and prevent WAL from growing more than desired. * [BUGFIX] Properly close file descriptor when logging unfinished queries. * [BUGFIX] TSDB: In the WAL watcher metrics, expose the type='exemplar' label instead of type='unknown' for exemplar records. * [BUGFIX] Alerting: Fix Alertmanager targets not being updated when alerts were queued. * [BUGFIX] Hetzner SD: Make authentication files relative to Prometheus config file. * [BUGFIX] Promtool: Fix promtool check config not erroring properly on failures. * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on reloads. * [BUGFIX] TSDB: Don't increment prometheus_tsdb_compactions_failed_total when context is canceled. * [BUGFIX] TSDB: Fix panic if series is not found when deleting series. * [BUGFIX] TSDB: Increase prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence errors. * [BUGFIX] Uyuni SD: Make authentication files relative to Prometheus configuration file and fix default configuration values. * [BUGFIX] Fix serving of static assets like fonts and favicon. * [BUGFIX] promtool: Add --lint-fatal option. * [BUGFIX] Changing TotalQueryableSamples from int to int64. * [BUGFIX] tsdb/agent: Ignore duplicate exemplars. * [BUGFIX] TSDB: Fix chunk overflow appending samples at a variable rate. * [BUGFIX] Stop rule manager before TSDB is stopped. * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io. * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels correctly. * [BUGFIX] UI: Fix scrape interval and duration tooltip not showing on target page. * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is false. * [BUGFIX] Agent: Fix ID collision when loading a WAL with multiple segments. * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing the queue. * [BUGFIX] PromQL: Properly return an error from histogram_quantile when metrics have the same labelset. * [BUGFIX] UI: Fix bug that sets the range input to the resolution. * [BUGFIX] TSDB: Fix a query panic when memory-snapshot-on-shutdown is enabled. * [BUGFIX] Parser: Specify type in metadata parser errors. * [BUGFIX] Scrape: Fix label limit changes not applying. * [BUGFIX] Remote-write: Fix deadlock between adding to queue and getting batch. * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the disk. * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't set. * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set. * [BUGFIX] Remote-write: Fix deadlock when stopping a shard. * [BUGFIX] SD: Fix no such file or directory in K8s SD when not running inside K8s. * [BUGFIX] Promtool: Make exit codes more consistent. * [BUGFIX] Promtool: Fix flakiness of rule testing. * [BUGFIX] Remote-write: Update prometheus_remote_storage_queue_highest_sent_timestamp_seconds metric when write irrecoverably fails. * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator. * [BUGFIX] TSDB: CompactBlockMetas should produce correct mint/maxt for overlapping blocks. * [BUGFIX] TSDB: Fix logging of exemplar storage size. * [BUGFIX] UI: Fix overlapping click targets for the alert state checkboxes. * [BUGFIX] UI: Fix Unhealthy filter on target page to actually display only Unhealthy targets. * [BUGFIX] UI: Fix autocompletion when expression is empty. * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write. * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts. * [CHANGE] promtool: Add new flag --lint (enabled by default) for the commands check rules and check config, resulting in a new exit code (3) for linter errors. * [CHANGE] UI: Classic UI removed. * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based tracing. * [CHANGE] PromQL: Promote negative offset and @ modifer to stable features. * [CHANGE] Web: Promote remote-write-receiver to stable. * [FEATURE] Nomad SD: New service discovery for Nomad built-in service discovery. * [FEATURE] Add lowercase and uppercase relabel action. * [FEATURE] SD: Add IONOS Cloud integration. * [FEATURE] SD: Add Vultr integration. * [FEATURE] SD: Add Linode SD failure count metric. * [FEATURE] Add prometheus_ready metric. * [FEATURE] Support for automatically setting the variable GOMAXPROCS to the container CPU limit. Enable with the flag `--enable-feature=auto-gomaxprocs`. * [FEATURE] PromQL: Extend statistics with total and peak number of samples in a query. Additionally, per-step statistics are available with --enable-feature=promql-per-step-stats and using stats=all in the query API. Enable with the flag `--enable-feature=per-step-stats`. * [FEATURE] Config: Add stripPort template function. * [FEATURE] Promtool: Add cardinality analysis to check metrics, enabled by flag --extended. * [FEATURE] SD: Enable target discovery in own K8s namespace. * [FEATURE] SD: Add provider ID label in K8s SD. * [FEATURE] Web: Add limit field to the rules API. * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for endpoint role. * [ENHANCEMENT] PromQL: Optimise creation of signature with/without labels. * [ENHANCEMENT] TSDB: Memory optimizations. * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL. * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent header. * [ENHANCEMENT] Add stripDomain to template function. * [ENHANCEMENT] UI: Enable active search through dropped targets. * [ENHANCEMENT] promtool: support matchers when querying label * [ENHANCEMENT] Add agent mode identifier. * [ENHANCEMENT] TSDB: more efficient sorting of postings read from WAL at startup. * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures. * [ENHANCEMENT] Azure SD: Add an optional resource_group configuration. * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1 EndpointSlice (previously only discovery.k8s.io/v1beta1 EndpointSlice was supported). * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to discovered pods. * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch OAuth2 tokens. * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2. * [ENHANCEMENT] Config: Support overriding minimum TLS version. * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and allow configuration with the experimental flag `--storage.tsdb.head-chunks-write-queue-size`. * [ENHANCEMENT] HTTP SD: Add a failure counter. * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests. * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni. * [ENHANCEMENT] Scrape: Log when an invalid media type is encountered during a scrape. * [ENHANCEMENT] Scrape: Accept application/openmetrics-text;version=1.0.0 in addition to version=0.0.1. * [ENHANCEMENT] Remote-read: Add an option to not use external labels as selectors for remote read. * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar. * [ENHANCEMENT] UI: Improve graph colors that were hard to see. * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using environment variables with external labels. * [ENHANCEMENT] Remote-write: Avoid allocations by buffering concrete structs instead of interfaces. * [ENHANCEMENT] Remote-write: Log time series details for out-of-order samples in remote write receiver. * [ENHANCEMENT] Remote-write: Shard up more when backlogged. * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar ingest performance. * [ENHANCEMENT] TSDB: Avoid allocations when popping from the intersected postings heap. * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding latency spikes in remote-write. * [ENHANCEMENT] TSDB: Improve label matching performance. * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar. * [ENHANCEMENT] UI: Optimize the target page and add a search bar. Important SUSE bug 1204023 SUSE bug 1208049 SUSE bug 1208298 CVE-2022-41715 CVE-2022-41723 CVE-2022-46146 cpe:/o:suse:packagehub:15:sp5 Security update for MozillaThunderbird (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 102.12 MFSA 2023-21 (bsc#1211922): - CVE-2023-34414: Click-jacking certificate exceptions through rendering lag - CVE-2023-34416: Memory safety bugs fixed in Thunderbird 102.12 Important SUSE bug 1211922 CVE-2023-34414 CVE-2023-34416 cpe:/o:suse:packagehub:15:sp5 Security update for dav1d (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for dav1d fixes the following issues: - CVE-2023-32570: Fixed possible crash when decoding a frame (bsc#1211262). Moderate SUSE bug 1211262 CVE-2023-32570 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-aws (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-helm (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of terraform-provider-helm fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-null (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of terraform-provider-null fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:packagehub:15:sp5 Security update for dnsdist (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for dnsdist fixes the following issues: - update to 1.8.0 - Implements dnsdist in SLE15 (jsc#PED-3402) - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511) - update to 1.2.0 (bsc#1054799, bsc#1054802) This release also addresses two security issues of low severity, CVE-2016-7069 and CVE-2017-7557. The first issue can lead to a denial of service on 32-bit if a backend sends crafted answers, and the second to an alteration of dnsdist’s ACL if the API is enabled, writable and an authenticated user is tricked into visiting a crafted website. Moderate SUSE bug 1054799 SUSE bug 1054802 SUSE bug 1114511 CVE-2016-7069 CVE-2017-7557 CVE-2018-14663 cpe:/o:suse:packagehub:15:sp5 Security update for qt6-base (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for qt6-base fixes the following issues: - CVE-2023-32763: Fixed an overflow in QTextLayout (bsc#1211798). Important SUSE bug 1211798 CVE-2023-32763 cpe:/o:suse:packagehub:15:sp5 Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues: grpc: - Update in SLE-15 (bsc#1197726, bsc#1144068) protobuf: - Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681 - Fix a potential DoS issue when parsing with binary data in protobuf-java, CVE-2022-3171, bsc#1204256 - Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530 - Add missing dependency of python subpackages on python-six (bsc#1177127) - Updated to version 3.9.2 (bsc#1162343) * Remove OSReadLittle* due to alignment requirements. * Don't use unions and instead use memcpy for the type swaps. - Disable LTO (bsc#1133277) python-aiocontextvars: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-avro: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-cryptography: - update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331) * SECURITY ISSUE: Fixed a bug where certain sequences of update() calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. CVE-2020-36242 python-cryptography-vectors: - update to 3.2 (bsc#1178168, CVE-2020-25659): * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities. Due to limitations imposed by our API, we cannot completely mitigate this vulnerability. * Support for OpenSSL 1.0.2 has been removed. * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder. - update to 3.3.2 (bsc#1198331) python-Deprecated: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 1.2.13: python-google-api-core: - Update to 1.14.2 python-googleapis-common-protos: - Update to 1.6.0 python-grpcio-gcp: - Initial spec for v0.2.2 python-humanfriendly: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to 10.0 python-jsondiff: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.0 python-knack: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 0.9.0 python-opencensus: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Disable Python2 build - Update to 0.8.0 python-opencensus-context: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-opencensus-ext-threading: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial build version 0.1.2 python-opentelemetry-api: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Version update to 1.5.0 python-psutil: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 5.9.1 - remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753) - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-PyGithub: - Update to 1.43.5: python-pytest-asyncio: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial release of python-pytest-asyncio 0.8.0 python-requests: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-websocket-client: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.2 python-websockets: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 9.1: Important SUSE bug 1099269 SUSE bug 1133277 SUSE bug 1144068 SUSE bug 1162343 SUSE bug 1177127 SUSE bug 1178168 SUSE bug 1182066 SUSE bug 1184753 SUSE bug 1194530 SUSE bug 1197726 SUSE bug 1198331 SUSE bug 1199282 SUSE bug 1203681 SUSE bug 1204256 CVE-2018-1000518 CVE-2020-25659 CVE-2020-36242 CVE-2021-22569 CVE-2021-22570 CVE-2022-1941 CVE-2022-3171 cpe:/o:suse:packagehub:15:sp5 Security update for libdwarf (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libdwarf fixes the following issues: - CVE-2020-27545: Fixed corrupted line table being able to crash calling app (bsc#1193102). Moderate SUSE bug 1193102 CVE-2020-27545 cpe:/o:suse:packagehub:15:sp5 Security update for php7 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for php7 fixes the following issues: - CVE-2023-3247: Fixed missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (bsc#1212349). Moderate SUSE bug 1212349 CVE-2023-3247 cpe:/o:suse:packagehub:15:sp5 Security update for perl (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for perl fixes the following issues: - CVE-2023-31484: Enable TLS cert verification in CPAN (bsc#1210999). Important SUSE bug 1210999 CVE-2023-31484 cpe:/o:suse:packagehub:15:sp5 Security update for SUSE Manager Client Tools (Critical) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update fixes the following issues: grafana: - Update to version 9.5.5: * CVE-2023-3128: Fix authentication bypass using Azure AD OAuth (bsc#1212641, jsc#PED-3694) * Bug fixes: * Auth: Show invite button if disable login form is set to false. * Azure: Fix Kusto auto-completion for Azure datasources. * RBAC: Remove legacy AC editor and admin role on new dashboard route. * API: Revert allowing editors to access GET /datasources. * Settings: Add ability to override skip_org_role_sync with Env variables. - Update to version 9.5.3: * CVE-2023-2801: Query: Prevent crash while executing concurrent mixed queries (bsc#1212099) * CVE-2023-2183: Alerting: Require alert.notifications:write permissions to test receivers and templates (bsc#1212100) - Update to version 9.5.2: Alerting: Scheduler use rule fingerprint instead of version. Explore: Update table min height. DataLinks: Encoded URL fixed. TimeSeries: Fix leading null-fill for missing intervals. Dashboard: Revert fixed header shown on mobile devices in the new panel header. PostgreSQL: Fix TLS certificate issue by downgrading lib/pq. Provisioning: Fix provisioning issues with legacy alerting and data source permissions. Alerting: Fix misleading status code in provisioning API. Loki: Fix log samples using `instant` queries. Panel Header: Implement new Panel Header on Angular Panels. Azure Monitor: Fix bug that was not showing resources for certain locations. Alerting: Fix panic when reparenting receivers to groups following an attempted rename via Provisioning. Cloudwatch Logs: Clarify Cloudwatch Logs Limits. - Update to 9.5.1 Loki Variable Query Editor: Fix bug when the query is updated Expressions: Fix expression load with legacy UID -100 Critical SUSE bug 1212099 SUSE bug 1212100 SUSE bug 1212641 CVE-2023-2183 CVE-2023-2801 CVE-2023-3128 cpe:/o:suse:packagehub:15:sp5 Security update for netty, netty-tcnative (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for netty, netty-tcnative fixes the following issues: Upgrade to upstream version 4.1.94: - CVE-2023-34462: Allow to limit the maximum lenght of the ClientHello (bsc#1212637). Moderate SUSE bug 1212637 CVE-2023-34462 cpe:/o:suse:packagehub:15:sp5 Security update for iperf (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for iperf fixes the following issues: - CVE-2023-38403: Fixed integer overflow leading to heap buffer overflow (bsc#1213430). Important SUSE bug 1213430 CVE-2023-38403 cpe:/o:suse:packagehub:15:sp5 Security update for MozillaThunderbird (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to version 115.0.1 (bsc#1212438): - CVE-2023-3600: Fixed use-after-free in workers (bmo#1839703). - CVE-2023-3417: Fixed File Extension Spoofing using the Text Direction Override Character (bmo#1835582). Bugfixes: - changed: Added Thunderbird Supernova branding to about:dialog (bmo#1842102) - fixed: Message list was not updated when message was deleted from server outside of Thunderbird (bmo#1837041) - fixed: Scrolling behaved unexpectedly when moving to next message unread message in another folder (bmo#1841711) - fixed: Scrolling animation was unnecessarily used when switching or toggling the sort column in message list (bmo#1838522) - fixed: Attempting to delete a message and then cancelling the action still marked the message as read (bmo#793353) - fixed: Unified Toolbar could not be customized under certain tabs (bmo#1841480) - fixed: Selecting a folder with one or more subfolders and pressing enter did not expand folder (bmo#1841200) - fixed: Tooltips did not appear when hovering over folders (bmo#1839780) - fixed: Deleting large amounts of messages from Trash folder consumed excessive time and memory (bmo#1833665) - fixed: Message Summary header buttons were not keyboard accessible (bmo#1827199) - fixed: 'New' button in Message Filters dialog was not keyboard accessible (bmo#1841477) - fixed: Backing up secret keys from OpenPGP Key Manager dialog silently failed (bmo#1839415) - fixed: Various visual and UX improvements (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319) Important SUSE bug 1212438 CVE-2023-3417 CVE-2023-3600 cpe:/o:suse:packagehub:15:sp5 Security update for gcc13 (Important) (in QA) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for gcc13 fixes the following issues: This update ship the GCC 13.2 compiler suite and its base libraries. The compiler base libraries are provided for all SUSE Linux Enterprise 15 versions and replace the same named GCC 12 ones. The new compilers for C, C++, and Fortran are provided for SUSE Linux Enterprise 15 SP4 and SP5, and provided in the 'Development Tools' module. The Go, D, Ada and Modula 2 language compiler parts are available unsupported via the PackageHub repositories. To use gcc13 compilers use: - install 'gcc13' or 'gcc13-c++' or one of the other 'gcc13-COMPILER' frontend packages. - override your Makefile to use CC=gcc13, CXX=g++13 and similar overrides for the other languages. For a full changelog with all new GCC13 features, check out https://gcc.gnu.org/gcc-13/changes.html Detailed changes: * CVE-2023-4039: Fixed -fstack-protector issues on aarch64 with variable length stack allocations. (bsc#1214052) - Turn cross compiler to s390x to a glibc cross. [bsc#1214460] - Also handle -static-pie in the default-PIE specs - Fixed missed optimization in Skia resulting in Firefox crashes when building with LTO. [bsc#1212101] - Make libstdc++6-devel packages own their directories since they can be installed standalone. [bsc#1211427] - Add new x86-related intrinsics (amxcomplexintrin.h). - RISC-V: Add support for inlining subword atomic operations - Use --enable-link-serialization rather that --enable-link-mutex, the benefit of the former one is that the linker jobs are not holding tokens of the make's jobserver. - Add cross-bpf packages. See https://gcc.gnu.org/wiki/BPFBackEnd for the general state of BPF with GCC. - Add bootstrap conditional to allow --without=bootstrap to be specified to speed up local builds for testing. - Bump included newlib to version 4.3.0. - Also package libhwasan_preinit.o on aarch64. - Configure external timezone database provided by the timezone package. Make libstdc++6 recommend timezone to get a fully working std::chrono. Install timezone when running the testsuite. - Package libhwasan_preinit.o on x86_64. - Fixed unwinding on aarch64 with pointer signing. [bsc#1206684] - Enable PRU flavour for gcc13 - update floatn fixinclude pickup to check each header separately (bsc#1206480) - Redo floatn fixinclude pick-up to simply keep what is there. - Bump libgo SONAME to libgo22. - Do not package libhwasan for biarch (32-bit architecture) as the extension depends on 64-bit pointers. - Adjust floatn fixincludes guard to work with SLE12 and earlier SLE15. - Depend on at least LLVM 13 for GCN cross compiler. - Update embedded newlib to version 4.2.0 - Allow cross-pru-gcc12-bootstrap for armv7l architecture. PRU architecture is used for real-time MCUs embedded into TI armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for armv7l in order to build both host applications and PRU firmware during the same build. This patch is currently in QA and not yet available for download. Important SUSE bug 1206480 SUSE bug 1206684 SUSE bug 1210557 SUSE bug 1211427 SUSE bug 1212101 SUSE bug 1213915 SUSE bug 1214052 SUSE bug 1214460 CVE-2023-4039 cpe:/o:suse:packagehub:15:sp5 Security update for helm (Important) (in QA) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for helm fixes the following issues: helm was updated to version 3.13.1: * Fixing precedence issue with the import of values. * Add missing with clause to release gh action * FIX Default ServiceAccount yaml * fix(registry): unswallow error * remove useless print during prepareUpgrade * fix(registry): address anonymous pull issue * Fix missing run statement on release action * Write latest version to get.helm.sh bucket * Increased release information key name max length. helm was updated to version 3.13.0 (bsc#1215588): * Fix leaking goroutines in Install * Update Helm to use k8s 1.28.2 libraries * make the dependabot k8s.io group explicit * use dependabot's group support for k8s.io dependencies * doc:Executing helm rollback release 0 will roll back to the previous release * Use labels instead of selectorLabels for pod labels * fix(helm): fix GetPodLogs, the hooks should be sorted before get the logs of each hook * chore: HTTPGetter add default timeout * Avoid nil dereference if passing a nil resolver * Add required changes after merge * Fix #3352, add support for --ignore-not-found just like kubectl delete * Fix helm may identify achieve of the application/x-gzip as application/vnd.ms-fontobject * Restore `helm get metadata` command * Revert 'Add `helm get metadata` command' * test: replace `ensure.TempDir` with `t.TempDir` * use json api url + report curl/wget error on fail * Added error in case try to supply custom label with name of system label during install/upgrade * fix(main): fix basic auth for helm pull or push * cmd: support generating index in JSON format * repo: detect JSON and unmarshal efficiently * Tweaking new dry-run internal handling * bump kubernetes modules to v0.27.3 * Remove warning for template directory not found. * Added tests for created OCI annotation time format * Add created OCI annotation * Fix multiple bugs in values handling * chore: fix a typo in `manager.go` * add GetRegistryClient method * oci: add tests for plain HTTP and insecure HTTPS registries * oci: Add flag `--plain-http` to enable working with HTTP registries * docs: add an example for using the upgrade command with existing values * Replace `fmt.Fprintf` with `fmt.Fprint` in get_metadata.go * Replace `fmt.Fprintln` with `fmt.Fprintf` in get_metadata.go * update kubernetes dependencies from v0.27.0 to v0.27.1 * Add ClientOptResolver to test util file * Check that missing keys are still handled in tpl * tests: change crd golden file to match after #11870 * Adding details on the Factory interface * update autoscaling/v2beta1 to autoscaling/v2 in skeleton chart * feat(helm): add ability for --dry-run to do lookup functions When a helm command is run with the --dry-run flag, it will try to connect to the cluster to be able to render lookup functions. Closes #8137 * bugfix:(#11391) helm lint infinite loop when malformed template object * pkg/engine: fix nil-dereference * pkg/chartutil: fix nil-dereference * pkg/action: fix nil-dereference * full source path when output-dir is not provided * added Contributing.md section and ref link in the README * feat(helm): add ability for --dry-run to do lookup functions When a helm command is run with the --dry-run flag, it will try to connect to the cluster if the value is 'server' to be able to render lookup functions. Closes #8137 * feat(helm): add ability for --dry-run to do lookup functions * Add `CHART`, `VERSION` and `APP_VERSION` fields to `get all` command output * Adjust `get` command description to account metadata * add volumes and volumeMounts in chartutil * Seed a default switch to control `automountServiceAccountToken` * Avoid confusing error when passing in '--version X.Y.Z' * Add `helm get metadata` command * Use wrapped error so that ErrNoObjectsVisited can be compared after return. * Add exact version test. * strict file permissions of repository.yaml * Check redefinition of define and include in tpl * Check that `.Template` is passed through `tpl` * Make sure empty `tpl` values render empty. * Pick the test improvement out of PR#8371 * #11369 Use the correct index repo cache directory in the `parallelRepoUpdate` method as well * #11369 Add a test case to prove the bug and its resolution * ref(helm): export DescriptorPullSummary fields * feat(helm): add 'ClientOptResolver' ClientOption * Fix flaky TestSQLCreate test by making sqlmock ignore order of sql requests * Fixing tests after adding labels to release fixture * Make default release fixture contain custom labels to make tests check that labels are not lost * Added support for storing custom labels in SQL storage driver * Adding support merging new custom labels with original release labels during upgrade * Added note to install/upgrade commands that original release labels wouldn't be persisted in upgraded release * Added unit tests for implemented install/upgrade labels logic * Remove redudant types from util_test.go * Added tests for newly introduced util.go functions * Fix broken tests for SQL storage driver * Fix broken tests for configmap and secret storage drivers * Make superseded releases keep labels * Support configmap storage driver for install/upgrade actions --labels argument * Added upgrade --install labels argument support * Add labels support for install action with secret storage backend * test: added tests to load plugin from home dir with space * fix: plugin does not load when helm base dir contains space * Add priority class to kind sorter * Fixes #10566 * test(search): add mixedCase test case * fix(search): print repo search result in original case * Adjust error message wrongly claiming that there is a resource conflict * Throw an error from jobReady() if the job exceeds its BackoffLimit * github: add Asset Transparency action for GitHub releases Update to version 3.12.3: * bump kubernetes modules to v0.27.3 * Add priority class to kind sorter Update to version 3.12.2: * add GetRegistryClient method Update to version 3.12.1: * bugfix:(#11391) helm lint infinite loop when malformed template object * update autoscaling/v2beta1 to autoscaling/v2 in skeleton chart * test(search): add mixedCase test case * fix(search): print repo search result in original case * strict file permissions of repository.yaml * update kubernetes dependencies from v0.27.0 to v0.27.1 Update to version 3.12.0: * Attach annotations to OCI artifacts * Fix goroutine leak in action install * fix quiet lint does not fail on non-linting errors * create failing test for quietly linting a chart that doesn't exist * Fixes Readiness Check for statefulsets using partitioned rolling update. (#11774) * fix: failed testcase on windows * Fix 32bit-x86 typo in testsuite * Handle failed DNS case for Go 1.20+ * Updating the Go version in go.mod * Fix goroutine leak in perform * Properly invalidate client after CRD install * Provide a helper to set the registryClient in cmd * Reimplemented change in httpgetter for insecure TLS option * Added insecure option to login subcommand * Added support for insecure OCI registries * Enable custom certificates option for OCI * Add testing to default and release branches * Remove job dependency. Should have done when I moved job to new file * Remove check to run only in helm org * Add why comments * Convert remaining CircleCI config to GitHub Actions * Changed how the setup-go action sets go version * chore:Use http constants as http.request parameters * update k8s registry domain * don't mark issues as stale where a PR is in progress * Update to func handling * Add option to support cascade deletion options * the linter varcheck and deadcode are deprecated (since v1.49.0) * Check status code before retrying request * Fix improper use of Table request/response to k8s API * fix template --output-dir issue * Add protection for stack-overflows for nested keys * feature(helm): add --set-literal flag for literal string interpretation Update to version 3.11.3: * Fix goroutine leak in perform * Fix goroutine leak in action install * Fix 32bit-x86 typo in testsuite * Fixes Readiness Check for statefulsets using partitioned rolling update. (#11774) - avoid CGO to workaround missing gold dependency (bsc#1183043) This patch is currently in QA and not yet available for download. Important SUSE bug 1183043 SUSE bug 1215588 SUSE bug 1215711 CVE-2022-41723 CVE-2023-25173 cpe:/o:suse:packagehub:15:sp5 Security update for pipewire (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for pipewire fixes the following security issues: - Fixed issue where an app which only has permission to access one stream can also access other streams (bsc#1213682). Bugfixes: - Fixed division by 0 and other issues with invalid values (glfo#pipewire/pipewire#2953) - Fixed an overflow resulting in choppy sound in some cases (glfo#pipewire/pipewire#2680) Moderate SUSE bug 1213682 cpe:/o:suse:packagehub:15:sp5 Security update for netty, netty-tcnative (Important) (in QA) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for netty, netty-tcnative fixes the following issues: - Updated netty to version 4.1.100: - CVE-2023-44487: Fixed a potential denial of service scenario via RST frame floods (bsc#1216169). - Updated netty-tcnative to version 2.0.62 Final. This patch is currently in QA and not yet available for download. Important SUSE bug 1216169 CVE-2023-44487 cpe:/o:suse:packagehub:15:sp5 Security update for qt6-base (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for qt6-base fixes the following issues: - CVE-2023-34410: Fixed certificate validation does not always consider whether the root of a chain is a configured CA certificate (bsc#1211994). - CVE-2023-33285: Fixed buffer overflow in QDnsLookup (bsc#1211642). - CVE-2023-32762: Fixed Qt Network incorrectly parses the strict-transport-security (HSTS) header (bsc#1211797). - CVE-2023-38197: Fixed infinite loops in QXmlStreamReader(bsc#1213326). - CVE-2023-24607: Fixed Qt SQL ODBC driver plugin DOS (bsc#1209616). Important SUSE bug 1209616 SUSE bug 1211642 SUSE bug 1211797 SUSE bug 1211994 SUSE bug 1213326 CVE-2023-24607 CVE-2023-32762 CVE-2023-33285 CVE-2023-34410 CVE-2023-38197 cpe:/o:suse:packagehub:15:sp5 Security update for MozillaThunderbird (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for MozillaThunderbird fixes the following issues: Update Mozilla Thunderbird 115.1.0 (bsc#1213746): - CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876). - CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686). - CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073). - CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368). - CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658). - CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038). - CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420). - CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777). - CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561). - CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847). - CVE-2023-4057: Fixed memory safety bugs (bmo#1841682). Bugfixes: - Remove bashisms from startup-script (bsc#1213657). Important SUSE bug 1213657 SUSE bug 1213746 CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4052 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056 CVE-2023-4057 cpe:/o:suse:packagehub:15:sp5 Security update for gstreamer-plugins-bad (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for gstreamer-plugins-bad fixes the following issues: - CVE-2023-37329: Fixed a heap overwrite in PGS subtitle overlay decoder which might trigger a crash or remote code execution. (bsc#1213126) Important SUSE bug 1213126 CVE-2023-37329 cpe:/o:suse:packagehub:15:sp5 Security update for gstreamer-plugins-base (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for gstreamer-plugins-base fixes the following issues: - CVE-2023-37327: Fixed FLAC file parsing integer overflow remote code execution vulnerability. (bsc#1213128) - CVE-2023-37328: Fixed PGS file parsing heap-based buffer overflow remote code execution vulnerability. (bsc#1213131) Important SUSE bug 1213128 SUSE bug 1213131 CVE-2023-37327 CVE-2023-37328 cpe:/o:suse:packagehub:15:sp5 Security update for pipewire (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for pipewire fixes the following security issues: - Fixed issue where an app which only has permission to access one stream can also access other streams (bsc#1213682). Bugfixes: - Fixed division by 0 and other issues with invalid values (glfo#pipewire/pipewire#2953) - Fixed an overflow resulting in choppy sound in some cases (glfo#pipewire/pipewire#2680) Moderate SUSE bug 1213682 cpe:/o:suse:packagehub:15:sp5 Security update for python-scipy (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-scipy fixes the following issues: - CVE-2023-25399: Fixed minor refcounting issue in Py_FindObjects (bsc#1213062). - CVE-2023-29824: Fixed use-after-free in Py_FindObjects (bsc#1213137). Moderate SUSE bug 1213062 SUSE bug 1213137 CVE-2023-25399 CVE-2023-29824 cpe:/o:suse:packagehub:15:sp5 Security update for java-11-openjdk (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for java-11-openjdk fixes the following issues: Updated to jdk-11.0.20+8 (July 2023 CPU): - CVE-2023-22006: Fixed vulnerability in the network component (bsc#1213473). - CVE-2023-22036: Fixed vulnerability in the utility component (bsc#1213474). - CVE-2023-22041: Fixed vulnerability in the hotspot component (bsc#1213475). - CVE-2023-22044: Fixed vulnerability in the hotspot component (bsc#1213479). - CVE-2023-22045: Fixed vulnerability in the hotspot component (bsc#1213481). - CVE-2023-22049: Fixed vulnerability in the libraries component (bsc#1213482). - CVE-2023-25193: Fixed vulnerability in the embedded harfbuzz module (bsc#1207922). - JDK-8298676: Enhanced Look and Feel - JDK-8300285: Enhance TLS data handling - JDK-8300596: Enhance Jar Signature validation - JDK-8301998, JDK-8302084: Update HarfBuzz to 7.0.1 - JDK-8302475: Enhance HTTP client file downloading - JDK-8302483: Enhance ZIP performance - JDK-8303376: Better launching of JDI - JDK-8304468: Better array usages - JDK-8305312: Enhanced path handling - JDK-8308682: Enhance AES performance Bugfixes: - JDK-8171426: java/lang/ProcessBuilder/Basic.java failed with Stream closed - JDK-8178806: Better exception logging in crypto code - JDK-8187522: test/sun/net/ftp/FtpURLConnectionLeak.java timed out - JDK-8209167: Use CLDR's time zone mappings for Windows - JDK-8209546: Make sun/security/tools/keytool/autotest.sh to support macosx - JDK-8209880: tzdb.dat is not reproducibly built - JDK-8213531: Test javax/swing/border/TestTitledBorderLeak.java fails - JDK-8214459: NSS source should be removed - JDK-8214807: Improve handling of very old class files - JDK-8215015: [TESTBUG] remove unneeded -Xfuture option from tests - JDK-8215575: C2 crash: assert(get_instanceKlass()->is_loaded()) failed: must be at least loaded - JDK-8220093: Change to GCC 8.2 for building on Linux at Oracle - JDK-8227257: javax/swing/JFileChooser/4847375/bug4847375.java fails with AssertionError - JDK-8232853: AuthenticationFilter.Cache::remove may throw ConcurrentModificationException - JDK-8243936: NonWriteable system properties are actually writeable - JDK-8246383: NullPointerException in JceSecurity.getVerificationResult when using Entrust provider - JDK-8248701: On Windows generated modules-deps.gmk can contain backslash-r (CR) characters - JDK-8257856: Make ClassFileVersionsTest.java robust to JDK version updates - JDK-8259530: Generated docs contain MIT/GPL-licenced works without reproducing the licence - JDK-8263420: Incorrect function name in NSAccessibilityStaticText native peer implementation - JDK-8264290: Create implementation for NSAccessibilityComponentGroup protocol peer - JDK-8264304: Create implementation for NSAccessibilityToolbar protocol peer - JDK-8265486: ProblemList javax/sound/midi/Sequencer/ /Recording.java on macosx-aarch64 - JDK-8268558: [TESTBUG] Case 2 in TestP11KeyFactoryGetRSAKeySpec is skipped - JDK-8269746: C2: assert(!in->is_CFG()) failed: CFG Node with no controlling input? - JDK-8274864: Remove Amman/Cairo hacks in ZoneInfoFile - JDK-8275233: Incorrect line number reported in exception stack trace thrown from a lambda expression - JDK-8275721: Name of UTC timezone in a locale changes depending on previous code - JDK-8275735: [linux] Remove deprecated Metrics api (kernel memory limit) - JDK-8276880: Remove java/lang/RuntimeTests/exec/ExecWithDir as unnecessary - JDK-8277775: Fixup bugids in RemoveDropTargetCrashTest.java - add 4357905 - JDK-8278434: timeouts in test java/time/test/java/time/format/ /TestZoneTextPrinterParser.java - JDK-8280703: CipherCore.doFinal(...) causes potentially massive byte[] allocations during decryption - JDK-8282077: PKCS11 provider C_sign() impl should handle CKR_BUFFER_TOO_SMALL error - JDK-8282201: Consider removal of expiry check in VerifyCACerts.java test - JDK-8282467: add extra diagnostics for JDK-8268184 - JDK-8282600: SSLSocketImpl should not use user_canceled workaround when not necessary - JDK-8283059: Uninitialized warning in check_code.c with GCC 11.2 - JDK-8285497: Add system property for Java SE specification maintenance version - JDK-8286398: Address possibly lossy conversions in jdk.internal.le - JDK-8287007: [cgroups] Consistently use stringStream throughout parsing code - JDK-8287246: DSAKeyValue should check for missing params instead of relying on KeyFactory provider - JDK-8287876: The recently de-problemlisted TestTitledBorderLeak test is unstable - JDK-8287897: Augment src/jdk.internal.le/share/legal/jline.md with information on 4th party dependencies - JDK-8289301: P11Cipher should not throw out of bounds exception during padding - JDK-8289735: UTIL_LOOKUP_PROGS fails on pathes with space - JDK-8291226: Create Test Cases to cover scenarios for JDK-8278067 - JDK-8291637: HttpClient default keep alive timeout not followed if server sends invalid value - JDK-8291638: Keep-Alive timeout of 0 should close connection immediately - JDK-8292206: TestCgroupMetrics.java fails as getMemoryUsage() is lower than expected - JDK-8293232: Fix race condition in pkcs11 SessionManager - JDK-8293815: P11PSSSignature.engineUpdate should not print debug messages during normal operation - JDK-8294548: Problem list SA core file tests on macosx-x64 due to JDK-8294316 - JDK-8294906: Memory leak in PKCS11 NSS TLS server - JDK-8295974: jni_FatalError and Xcheck:jni warnings should print the native stack when there are no Java frames - JDK-8296934: Write a test to verify whether Undecorated Frame can be iconified or not - JDK-8297000: [jib] Add more friendly warning for proxy issues - JDK-8297450: ScaledTextFieldBorderTest.java fails when run with -show parameter - JDK-8298887: On the latest macOS+XCode the Robot API may report wrong colors - JDK-8299259: C2: Div/Mod nodes without zero check could be split through iv phi of loop resulting in SIGFPE - JDK-8300079: SIGSEGV in LibraryCallKit::inline_string_copy due to constant NULL src argument - JDK-8300205: Swing test bug8078268 make latch timeout configurable - JDK-8300490: Spaces in name of MacOS Code Signing Identity are not correctly handled after JDK-8293550 - JDK-8301119: Support for GB18030-2022 - JDK-8301170: perfMemory_windows.cpp add free_security_attr to early returns - JDK-8301401: Allow additional characters for GB18030-2022 support - JDK-8302151: BMPImageReader throws an exception reading BMP images - JDK-8302791: Add specific ClassLoader object to Proxy IllegalArgumentException message - JDK-8303102: jcmd: ManagementAgent.status truncates the text longer than O_BUFLEN - JDK-8303354: addCertificatesToKeystore in KeystoreImpl.m needs CFRelease call in early potential CHECK_NULL return - JDK-8303432: Bump update version for OpenJDK: jdk-11.0.20 - JDK-8303440: The 'ZonedDateTime.parse' may not accept the 'UTC+XX' zone id - JDK-8303465: KeyStore of type KeychainStore, provider Apple does not show all trusted certificates - JDK-8303476: Add the runtime version in the release file of a JDK image - JDK-8303482: Update LCMS to 2.15 - JDK-8303564: C2: 'Bad graph detected in build_loop_late' after a CMove is wrongly split thru phi - JDK-8303576: addIdentitiesToKeystore in KeystoreImpl.m needs CFRelease call in early potential CHECK_NULL return - JDK-8303822: gtestMain should give more helpful output - JDK-8303861: Error handling step timeouts should never be blocked by OnError and others - JDK-8303937: Corrupted heap dumps due to missing retries for os::write() - JDK-8304134: jib bootstrapper fails to quote filename when checking download filetype - JDK-8304291: [AIX] Broken build after JDK-8301998 - JDK-8304295: harfbuzz build fails with GCC 7 after JDK-8301998 - JDK-8304350: Font.getStringBounds calculates wrong width for TextAttribute.TRACKING other than 0.0 - JDK-8304760: Add 2 Microsoft TLS roots - JDK-8305113: (tz) Update Timezone Data to 2023c - JDK-8305400: ISO 4217 Amendment 175 Update - JDK-8305528: [11u] Backport of JDK-8259530 breaks build with JDK10 bootstrap VM - JDK-8305682: Update the javadoc in the Character class to state support for GB 18030-2022 Implementation Level 2 - JDK-8305711: Arm: C2 always enters slowpath for monitorexit - JDK-8305721: add `make compile-commands` artifacts to .gitignore - JDK-8305975: Add TWCA Global Root CA - JDK-8306543: GHA: MSVC installation is failing - JDK-8306658: GHA: MSVC installation could be optional since it might already be pre-installed - JDK-8306664: GHA: Update MSVC version to latest stepping - JDK-8306768: CodeCache Analytics reports wrong threshold - JDK-8306976: UTIL_REQUIRE_SPECIAL warning on grep - JDK-8307134: Add GTS root CAs - JDK-8307811: [TEST] compilation of TimeoutInErrorHandlingTest fails after backport of JDK-8303861 - JDK-8308006: Missing NMT memory tagging in CMS - JDK-8308884: [17u/11u] Backout JDK-8297951 - JDK-8309476: [11u] tools/jmod/hashes/HashesOrderTest.java fails intermittently - JDK-8311465: [11u] Remove designator DEFAULT_PROMOTED_VERSION_PRE=ea for release 11.0.20 Important SUSE bug 1207922 SUSE bug 1213473 SUSE bug 1213474 SUSE bug 1213475 SUSE bug 1213479 SUSE bug 1213481 SUSE bug 1213482 CVE-2023-22006 CVE-2023-22036 CVE-2023-22041 CVE-2023-22044 CVE-2023-22045 CVE-2023-22049 CVE-2023-25193 cpe:/o:suse:packagehub:15:sp5 Security update for java-1_8_0-openj9 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for java-1_8_0-openj9 fixes the following issues: Update to OpenJDK 8u372 build 07 with OpenJ9 0.38.0 virtual machine. CVE-2023-21930: Unauthenticated attacker with network access via TLS to compromise Oracle Java SE, Oracle GraalVM Enterprise Edition (bsc#1210628). CVE-2023-21937: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). (bsc#1210631). CVE-2023-21938: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). (bsc#1210632). CVE-2023-21939: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). (bsc#1210634). CVE-2023-21954: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). (bsc#1210635). CVE-2023-21967: Fixed vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). (bsc#1210636). CVE-2023-21968: Fixed ulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries) (bsc#1210637). CVE-2023-2597: Fixed buffer overflow in shared cache implementation (bsc#1211615). Important SUSE bug 1210628 SUSE bug 1210631 SUSE bug 1210632 SUSE bug 1210634 SUSE bug 1210635 SUSE bug 1210636 SUSE bug 1210637 SUSE bug 1211615 CVE-2023-21930 CVE-2023-21937 CVE-2023-21938 CVE-2023-21939 CVE-2023-21954 CVE-2023-21967 CVE-2023-21968 CVE-2023-2597 cpe:/o:suse:packagehub:15:sp5 Security update for java-1_8_0-openj9 (Low) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for java-1_8_0-openj9 fixes the following issues: OpenJDK was updated to version 8u382 build 05 with OpenJ9 0.40.0 VM: - CVE-2023-22045: Fixed vulnerability in hotspot component (bsc#1213481). - CVE-2023-22049: Fixed vulnerability in library component (bsc#1213482). Low SUSE bug 1213481 SUSE bug 1213482 CVE-2023-22045 CVE-2023-22049 cpe:/o:suse:packagehub:15:sp5 Security update for postgresql15 (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for postgresql15 fixes the following issues: - Update to 14.9 - CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059) Moderate SUSE bug 1214059 CVE-2023-39417 cpe:/o:suse:packagehub:15:sp5 Security update for djvulibre (Low) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for djvulibre fixes the following issues: - CVE-2021-46310: Fixed divide by zero in IW44Image.cpp (bsc#1214670). - CVE-2021-46312: Fixed divide by zero in IW44EncodeCodec.cpp (bsc#1214672). Low SUSE bug 1214670 SUSE bug 1214672 CVE-2021-46310 CVE-2021-46312 cpe:/o:suse:packagehub:15:sp5 Security update for php7 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) - CVE-2023-3824: Fixed a buffer overflow in phar_dir_read(). (bsc#1214103) Important SUSE bug 1214103 SUSE bug 1214106 CVE-2023-3823 CVE-2023-3824 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-helm (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of terraform-provider-helm fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-null (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of terraform-provider-null fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-aws (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:packagehub:15:sp5 Security update for libwebp (Critical) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libwebp fixes the following issues: - CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231). Critical SUSE bug 1215231 CVE-2023-4863 cpe:/o:suse:packagehub:15:sp5 Security update for flac (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for flac fixes the following issues: - CVE-2020-22219: Fixed a buffer overflow in function bitwriter_grow_ which might allow a remote attacker to run arbitrary code via crafted input to the encoder. (bsc#1214615) Moderate SUSE bug 1214615 CVE-2020-22219 cpe:/o:suse:packagehub:15:sp5 Security update for gcc12 (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for gcc12 fixes the following issues: - CVE-2023-4039: Fixed incorrect stack protector for C99 VLAs on Aarch64 (bsc#1214052). Important SUSE bug 1214052 CVE-2023-4039 cpe:/o:suse:packagehub:15:sp5 Security update for MozillaThunderbird (Critical) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for MozillaThunderbird fixes the following issues: Security fixes: - Mozilla Thunderbird 115.2.2 (MFSA 2023-40, bsc#1215245) - CVE-2023-4863: Fixed heap buffer overflow in libwebp (bmo#1852649). - Mozilla Thunderbird 115.2 (MFSA 2023-38, bsc#1214606) - CVE-2023-4573: Memory corruption in IPC CanvasTranslator (bmo#1846687) - CVE-2023-4574: Memory corruption in IPC ColorPickerShownCallback (bmo#1846688) - CVE-2023-4575: Memory corruption in IPC FilePickerShownCallback (bmo#1846689) - CVE-2023-4576: Integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694) - CVE-2023-4577: Memory corruption in JIT UpdateRegExpStatics (bmo#1847397) - CVE-2023-4051: Full screen notification obscured by file open dialog (bmo#1821884) - CVE-2023-4578: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (bmo#1839007) - CVE-2023-4053: Full screen notification obscured by external program (bmo#1839079) - CVE-2023-4580: Push notifications saved to disk unencrypted (bmo#1843046) - CVE-2023-4581: XLL file extensions were downloadable without warnings (bmo#1843758) - CVE-2023-4582: Buffer Overflow in WebGL glGetProgramiv (bmo#1773874) - CVE-2023-4583: Browsing Context potentially not cleared when closing Private Window (bmo#1842030) - CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) - CVE-2023-4585: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999) Other fixes: Mozilla Thunderbird 115.2.1 * new: Column separators are now shown between all columns in tree view (bmo#1847441) * fixed: Crash reporter did not work in Thunderbird Flatpak (bmo#1843102) * fixed: New mail notification always opened message in message pane, even if pane was disabled (bmo#1840092) * fixed: After moving an IMAP message to another folder, the incorrect message was selected in the message list (bmo#1845376) * fixed: Adding a tag to an IMAP message opened in a tab failed (bmo#1844452) * fixed: Junk/Spam folders were not always shown in Unified Folders mode (bmo#1838672) * fixed: Middle-clicking a folder or message did not open it in a background tab, as in previous versions (bmo#1842482) * fixed: Settings tab visual improvements: Advanced Fonts dialog, Section headers hidden behind search box (bmo#1717382,bmo#1846751) * fixed: Various visual and style fixes (bmo#1843707,bmo#1849823) Mozilla Thunderbird 115.2 * new: Thunderbird MSIX packages are now published on archive.mozilla.org (bmo#1817657) * changed: Size, Unread, and Total columns are now right- aligned (bmo#1848604) * changed: Newsgroup names in message list header are now abbreviated (bmo#1833298) * fixed: Message compose window did not apply theme colors to menus (bmo#1845699) * fixed: Reading the second new message in a folder cleared the unread indicator of all other new messages (bmo#1839805) * fixed: Displayed counts of unread or flagged messages could become out-of-sync (bmo#1846860) * fixed: Deleting a message from the context menu with messages sorted in chronological order and smooth scroll enabled caused message list to scroll to top (bmo#1843462) * fixed: Repeatedly switching accounts in Subscribe dialog caused tree view to stop updating (bmo#1845593) * fixed: 'Ignore thread' caused message cards to display incorrectly in message list (bmo#1847966) * fixed: Creating tags from unified toolbar failed (bmo#1846336) * fixed: Cross-folder navigation using F and N did not work (bmo#1845011) * fixed: Account Manager did not resize to fit content, causing 'Close' button to become hidden outside bounds of dialog when too many accounts were listed (bmo#1847555) * fixed: Remote content exceptions could not be added in Settings (bmo#1847576) * fixed: Newsgroup list file did not get updated after adding a new NNTP server (bmo#1845464) * fixed: 'Download all headers' option in NNTP 'Download Headers' dialog was incorrectly selected by default (bmo#1845457) * fixed: 'Convert to event/task' was missing from mail context menu (bmo#1817705) * fixed: Events and tasks were not shown in some cases despite being present on remote server (bmo#1827100) * fixed: Various visual and UX improvements (bmo#1844244,bmo#1845645) - Mozilla Thunderbird 115.1.1 * fixed: Some HTML emails printed headers on first page and message on subsequent pages (bmo#1843628) * fixed: Deleting messages from message list sometimes scrolled list to bottom, selecting bottommost message (bmo#1835173) * fixed: Width of icon columns (like Junk or Starred) in message list did not adjust when UI density was changed (bmo#1843014) * fixed: Old OpenPGP secret keys could not be used to decrypt messages under certain circumstances (bmo#1835786) * fixed: When multiple folder modes were active, tab focus navigated through all folder mode options before reaching message list (bmo#1842060) * fixed: Unread message count badge was not displayed on parent folders of subfolder containing unread messages (bmo#1844534) * fixed: 'Undo archive' (via Ctrl-Z) did not un-archive previously archived messages (bmo#1829340) * fixed: 'New' button dropdown menu in 'Message Filters' dialog could not be opened via keyboard navigation (bmo#1843511) * fixed: 'Show New Mail Alert for' input field in 'Customize New Mail Alert' dialog had zero width when using certain language packs (bmo#1845832) * fixed: 'Account Wizard' dialog was too narrow when adding a news server, partially hiding confirmation buttons (bmo#1846588) * fixed: Link Properties and Image Properties dialogs in the composer were too wide (bmo#1816850) * fixed: Thunderbird version number and details in 'About' dialog were not automatically read by screen readers when first opening dialog (bmo#1847078) * fixed: Flatpak improvements and bug fixes (bmo#1825399,bmo#1843094,bmo#1843097) * fixed: Various visual and UX improvements (bmo#1846262) Critical SUSE bug 1214606 SUSE bug 1215231 SUSE bug 1215245 CVE-2023-4051 CVE-2023-4053 CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576 CVE-2023-4577 CVE-2023-4578 CVE-2023-4580 CVE-2023-4581 CVE-2023-4582 CVE-2023-4583 CVE-2023-4584 CVE-2023-4585 CVE-2023-4863 cpe:/o:suse:packagehub:15:sp5 Security update for ffmpeg (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for ffmpeg fixes the following issues: - CVE-2021-28429: Fixed Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c (bsc#1214246). Moderate SUSE bug 1214246 CVE-2021-28429 cpe:/o:suse:packagehub:15:sp5 Security update for binutils (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for binutils fixes the following issues: Update to version 2.41 [jsc#PED-5778]: * The MIPS port now supports the Sony Interactive Entertainment Allegrex processor, used with the PlayStation Portable, which implements the MIPS II ISA along with a single-precision FPU and a few implementation-specific integer instructions. * Objdump's --private option can now be used on PE format files to display the fields in the file header and section headers. * New versioned release of libsframe: libsframe.so.1. This release introduces versioned symbols with version node name LIBSFRAME_1.0. This release also updates the ABI in an incompatible way: this includes removal of sframe_get_funcdesc_with_addr API, change in the behavior of sframe_fre_get_ra_offset and sframe_fre_get_fp_offset APIs. * SFrame Version 2 is now the default (and only) format version supported by gas, ld, readelf and objdump. * Add command-line option, --strip-section-headers, to objcopy and strip to remove ELF section header from ELF file. * The RISC-V port now supports the following new standard extensions: - Zicond (conditional zero instructions) - Zfa (additional floating-point instructions) - Zvbb, Zvbc, Zvkg, Zvkned, Zvknh[ab], Zvksed, Zvksh, Zvkn, Zvknc, Zvkng, Zvks, Zvksc, Zvkg, Zvkt (vector crypto instructions) * The RISC-V port now supports the following vendor-defined extensions: - XVentanaCondOps * Add support for Intel FRED, LKGS and AMX-COMPLEX instructions. * A new .insn directive is recognized by x86 gas. * Add SME2 support to the AArch64 port. * The linker now accepts a command line option of --remap-inputs <PATTERN>=<FILE> to relace any input file that matches <PATTERN> with <FILE>. In addition the option --remap-inputs-file=<FILE> can be used to specify a file containing any number of these remapping directives. * The linker command line option --print-map-locals can be used to include local symbols in a linker map. (ELF targets only). * For most ELF based targets, if the --enable-linker-version option is used then the version of the linker will be inserted as a string into the .comment section. * The linker script syntax has a new command for output sections: ASCIZ 'string' This will insert a zero-terminated string at the current location. * Add command-line option, -z nosectionheader, to omit ELF section header. - Contains fixes for these non-CVEs (not security bugs per upstreams SECURITY.md): * bsc#1209642 aka CVE-2023-1579 aka PR29988 * bsc#1210297 aka CVE-2023-1972 aka PR30285 * bsc#1210733 aka CVE-2023-2222 aka PR29936 * bsc#1213458 aka CVE-2021-32256 aka PR105039 (gcc) * bsc#1214565 aka CVE-2020-19726 aka PR26240 * bsc#1214567 aka CVE-2022-35206 aka PR29290 * bsc#1214579 aka CVE-2022-35205 aka PR29289 * bsc#1214580 aka CVE-2022-44840 aka PR29732 * bsc#1214604 aka CVE-2022-45703 aka PR29799 * bsc#1214611 aka CVE-2022-48065 aka PR29925 * bsc#1214619 aka CVE-2022-48064 aka PR29922 * bsc#1214620 aka CVE-2022-48063 aka PR29924 * bsc#1214623 aka CVE-2022-47696 aka PR29677 * bsc#1214624 aka CVE-2022-47695 aka PR29846 * bsc#1214625 aka CVE-2022-47673 aka PR29876 - This only existed only for a very short while in SLE-15, as the main variant in devel:gcc subsumed this in binutils-revert-rela.diff. Hence: - Document fixed CVEs: * bsc#1208037 aka CVE-2023-25588 aka PR29677 * bsc#1208038 aka CVE-2023-25587 aka PR29846 * bsc#1208040 aka CVE-2023-25585 aka PR29892 * bsc#1208409 aka CVE-2023-0687 aka PR29444 - Enable bpf-none cross target and add bpf-none to the multitarget set of supported targets. - Disable packed-relative-relocs for old codestreams. They generate buggy relocations when binutils-revert-rela.diff is active. [bsc#1206556] - Disable ZSTD debug section compress by default. - Enable zstd compression algorithm (instead of zlib) for debug info sections by default. - Pack libgprofng only for supported platforms. - Move libgprofng-related libraries to the proper locations (packages). - Add --without=bootstrap for skipping of bootstrap (faster testing of the package). - Remove broken arm32-avoid-copyreloc.patch to fix [gcc#108515] Update to version 2.40: * Objdump has a new command line option --show-all-symbols which will make it display all symbols that match a given address when disassembling. (Normally only the first symbol that matches an address is shown). * Add --enable-colored-disassembly configure time option to enable colored disassembly output by default, if the output device is a terminal. Note, this configure option is disabled by default. * DCO signed contributions are now accepted. * objcopy --decompress-debug-sections now supports zstd compressed debug sections. The new option --compress-debug-sections=zstd compresses debug sections with zstd. * addr2line and objdump --dwarf now support zstd compressed debug sections. * The dlltool program now accepts --deterministic-libraries and --non-deterministic-libraries as command line options to control whether or not it generates deterministic output libraries. If neither of these options are used the default is whatever was set when the binutils were configured. * readelf and objdump now have a newly added option --sframe which dumps the SFrame section. * Add support for Intel RAO-INT instructions. * Add support for Intel AVX-NE-CONVERT instructions. * Add support for Intel MSRLIST instructions. * Add support for Intel WRMSRNS instructions. * Add support for Intel CMPccXADD instructions. * Add support for Intel AVX-VNNI-INT8 instructions. * Add support for Intel AVX-IFMA instructions. * Add support for Intel PREFETCHI instructions. * Add support for Intel AMX-FP16 instructions. * gas now supports --compress-debug-sections=zstd to compress debug sections with zstd. * Add --enable-default-compressed-debug-sections-algorithm={zlib,zstd} that selects the default compression algorithm for --enable-compressed-debug-sections. * Add support for various T-Head extensions (XTheadBa, XTheadBb, XTheadBs, XTheadCmo, XTheadCondMov, XTheadFMemIdx, XTheadFmv, XTheadInt, XTheadMemIdx, XTheadMemPair, XTheadMac, and XTheadSync) from version 2.0 of the T-Head ISA manual, which are implemented in the Allwinner D1. * Add support for the RISC-V Zawrs extension, version 1.0-rc4. * Add support for Cortex-X1C for Arm. * New command line option --gsframe to generate SFrame unwind information on x86_64 and aarch64 targets. * The linker has a new command line option to suppress the generation of any warning or error messages. This can be useful when there is a need to create a known non-working binary. The option is -w or --no-warnings. * ld now supports zstd compressed debug sections. The new option --compress-debug-sections=zstd compresses debug sections with zstd. * Add --enable-default-compressed-debug-sections-algorithm={zlib,zstd} that selects the default compression algorithm for --enable-compressed-debug-sections. * Remove support for -z bndplt (MPX prefix instructions). - Includes fixes for these CVEs: * bsc#1206080 aka CVE-2022-4285 aka PR29699 - Enable by default: --enable-colored-disassembly. - fix build on x86_64_vX platforms Important SUSE bug 1200962 SUSE bug 1206080 SUSE bug 1206556 SUSE bug 1208037 SUSE bug 1208038 SUSE bug 1208040 SUSE bug 1208409 SUSE bug 1209642 SUSE bug 1210297 SUSE bug 1210733 SUSE bug 1213458 SUSE bug 1214565 SUSE bug 1214567 SUSE bug 1214579 SUSE bug 1214580 SUSE bug 1214604 SUSE bug 1214611 SUSE bug 1214619 SUSE bug 1214620 SUSE bug 1214623 SUSE bug 1214624 SUSE bug 1214625 CVE-2020-19726 CVE-2021-32256 CVE-2022-35205 CVE-2022-35206 CVE-2022-4285 CVE-2022-44840 CVE-2022-45703 CVE-2022-47673 CVE-2022-47695 CVE-2022-47696 CVE-2022-48063 CVE-2022-48064 CVE-2022-48065 CVE-2023-0687 CVE-2023-1579 CVE-2023-1972 CVE-2023-2222 CVE-2023-25585 CVE-2023-25587 CVE-2023-25588 cpe:/o:suse:packagehub:15:sp5 Security update for libwebp (Critical) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libwebp fixes the following issues: - CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231). Critical SUSE bug 1215231 CVE-2023-4863 cpe:/o:suse:packagehub:15:sp5 Security update for gsl (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for gsl fixes the following issues: - CVE-2020-35357: Fixed a stack out of bounds read in gsl_stats_quantile_from_sorted_data(). (bsc#1214681) Moderate SUSE bug 1214681 CVE-2020-35357 cpe:/o:suse:packagehub:15:sp5 Security update for grafana (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for grafana fixes the following issues: - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version. Important SUSE bug 1213880 CVE-2023-29409 cpe:/o:suse:packagehub:15:sp5 Security update for iperf (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for iperf fixes the following issues: - update to 3.15 (bsc#1215662, ESNET-SECADV-2023-0002): * Several bugs that could allow the iperf3 server to hang waiting for input on the control connection has been fixed (ESnet Software Security Advisory ESNET-SECADV-2023-0002) * A bug that caused garbled output with UDP tests on 32-bit hosts has been fixed (PR #1554, PR #1556). This bug was introduced in iperf-3.14. * A bug in counting UDP messages has been fixed - update to 3.14 (bsc#1213430, CVE-2023-38403): * fixes a memory allocation hazard that allowed a remote user to crash an iperf3 process * see https://downloads.es.net/pub/iperf/esnet-secadv-2023-0001.txt.asc - update to 3.13: * Added missing bind_dev getter and setter. * a fix for A resource leak bug in function iperf_create_pidfile (#1443) * doc: Fix copy-and-paste error leading to wrong error message * Fix crash on rcv-timeout with JSON logfile - update to 3.12: * cJSON has been updated to version 1.7.15 (#1383). * The --bind <host>%<dev> option syntax now works properly (#1360 / * A server-side file descriptor leak with the --logfile option has been fixed (#1369 / #1360 / #1369 / #1389 / #1393). * A bug that caused some large values from TCP_INFO to be misprinted as negative numbers has been fixed (#1372). * Using the -k or -n flags with --reverse no longer leak into future tests (#1363 / #1364). * There are now various debug level options available with the --debug option. These can be used to adjust the amount of debugging output (#1327). * A new --snd-timeout option has been added to set a termination timeout for idle TCP connections (#1215 / #1282). * iperf3 is slightly more robust to out-of-order packets during UDP connection setup in --reverse mode (#914 / #1123 / #1182 / #1212 / * iperf3 will now use different ports for each direction when the --cport and --bdir options are set (#1249 / #1259). * The iperf3 server will now exit if it can't open its log file * Various help message and output fixes have been made (#1299 / * Various compiler warnings have been fixed (#1211 / #1316). * Operation of bootstrap.sh has been fixed and simplified (#1335 / * Flow label support / compatibility under Linux has been improved * Various minor memory leaks have been fixed (#1332 / #1333). * A getter/setter has been added for the bind_port parameter (--cport option). (#1303, #1305) * Various internal documentation improvements (#1265 / #1285 / #1304). - update to 3.11: * Update links to Discussions in documentation * Fix DSCP so that TOS = DSCP * 4 (#1162) * Fix --bind-dev for TCP streams (#1153) * Fix interface specification so doesn't overlap with IPv6 link-local addresses for -c and -B (#1157, #1180) * Add get/set test_unit_format function declaration to iperf_api.h * Auto adjustment of test-end condition for file transfers (-F), if no end condition is set, it will automatically adjust it to file size in bytes * Exit if idle time expires waiting for a connection in one-off mode (#1187, #1197) * Support zerocopy by reverse mode (#1204) * Update help and manpage text for #1157, support bind device * Consistently print target_bandwidth in JSON start section (#1177) * Test bitrate added to JSON output (#1168) * Remove fsync call after every write to receiving --file (#1176, #1159) * Update documentation for -w (#1175) * Fix for #952, different JSON object names for bidir reverse channel - update to 3.10.1: * Fixed a problem with autoconf scripts that made builds fail in some environments (#1154 / #1155). * GNU autoconf 2.71 or newer is now required to regenerate iperf3's configure scripts. - update to 3.10: * Fix a bug where some --reverse tests didn't terminate (#982 / #1054). * Responsiveness of control connections is slightly improved (#1045 / #1046 / #1063). * The allowable clock skew when doing authentication between client and server is now configurable with the new --time-skew-threshold (#1065 / #1070). * Bitrate throttling using the -b option now works when a burst size is specified (#1090). * A bug with calculating CPU utilization has been fixed (#1076 / #1077). * A --bind-dev option to support binding sockets to a given network interface has been added to make iperf3 work better with multi-homed machines and/or VRFs (#817 / #1089 / #1097). * --pidfile now works with --client mode (#1110). * The server is now less likely to get stuck due to network errors (#1101, #1125), controlled by the new --rcv-timeout option. * Fixed a few bugs in termination conditions for byte or block-limited tests (#1113, #1114, #1115). * Added tcp_info.snd_wnd to JSON output (#1148). * Some bugs with garbled JSON output have been fixed (#1086, #1118, #1143 / #1146). * Support for setting the IPv4 don't-fragment (DF) bit has been added with the new --dont-fragment option (#1119). * A failure with not being able to read the congestion control algorithm under WSL1 has been fixed (#1061 / #1126). * Error handling and error messages now make more sense in cases where sockets were not successfully opened (#1129 / #1132 / #1136, #1135 / #1138, #1128 / #1139). * Some buffer overflow hazards were fixed (#1134). * It is now possible to use the API to set/get the congestion control algorithm (#1036 / #1112). - update to 3.9: * A --timestamps flag has been added, which prepends a timestamp to each output line. An optional argument to this flag, which is a format specification to strftime(3), allows for custom timestamp formats (#909, #1028). * A --server-bitrate-limit flag has been added as a server-side command-line argument. It allows a server to enforce a maximum throughput rate; client connections that specify a higher bitrate or exceed this bitrate during a test will be terminated. The bitrate is expressed in bits per second, with an optional trailing slash and integer count that specifies an averaging interval over which to enforce the limit (#999). * A bug that caused increased CPU usage with the --bidir option has been fixed (#1011). * Fixed various minor memory leaks (#1023). - update to 3.8.1 * Minor bugfixes and enhancements - update to 3.7 * Support for simultaneous bidirectional tests with the --bidir flag * Use POSIX standard clock_gettime(3) interface for timekeeping where available * Passwords for authentication can be provided via environment variable * Specifying --repeating-payload and --reverse now works * Failed authentication doesn't count for --one-off * Several memory leaks related to authenticated use were fixed * The delay for tearing down the control connection for the default timed tests has been increased, to more gracefully handle high-delay paths * Various improvements to the libiperf APIs * Fixed build behavior when OpenSSL is absent * Portability fixes - update to 3.6 * A new --extra-data option can be used to fill in a user-defined string field that appears in JSON output. * A new --repeating-payload option makes iperf3 use a payload pattern similar to that used by iperf2, which could help in recreating results that might be affected by payload entropy (for example, compression). * -B now works properly with SCTP tests. * A compile fix for Solaris 10 was added. * Some minor bug fixes for JSON output. In particular, warnings for debug and/or verbose modes with --json output and a fix for JSON output on CentOS 6 * This maintenance release adds a -1 flag to make the iperf3 execute a single test and exit, needed for an upcoming bwctl there is only one stream. Important SUSE bug 1215662 CVE-2023-38403 cpe:/o:suse:packagehub:15:sp5 Security update for Golang Prometheus (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for Golang Prometheus fixes the following issues: golang-github-prometheus-alertmanager: - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version. golang-github-prometheus-node_exporter: - CVE-2023-29409: Restrict RSA keys in certificates to less than or equal to 8192 bits to avoid DoSing client/server while validating signatures for extremely large RSA keys. (bsc#1213880) There are no direct source changes. The CVE is fixed rebuilding the sources with the patched Go version. Important SUSE bug 1213880 CVE-2023-29409 cpe:/o:suse:packagehub:15:sp5 Security update for python (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python fixes the following issues: - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). Important SUSE bug 1214692 CVE-2023-40217 cpe:/o:suse:packagehub:15:sp5 Security update for libvpx (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libvpx fixes the following issues: - CVE-2023-5217: Fixed a heap buffer overflow (bsc#1215778). Important SUSE bug 1215778 CVE-2023-5217 cpe:/o:suse:packagehub:15:sp5 Security update for libXpm (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libXpm fixes the following issues: - CVE-2023-43788: Fixed an out of bounds read when creating an image (bsc#1215686). - CVE-2023-43789: Fixed an out of bounds read when parsing an XPM file with a corrupted colormap (bsc#1215687). Moderate SUSE bug 1215686 SUSE bug 1215687 CVE-2023-43788 CVE-2023-43789 cpe:/o:suse:packagehub:15:sp5 Security update for libraw (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. (bsc#1215308) Moderate SUSE bug 1215308 CVE-2020-22628 cpe:/o:suse:packagehub:15:sp5 Security update for python-reportlab (Important) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for python-reportlab fixes the following issues: - CVE-2019-19450: Fixed an issue which allowed remote code execution via start_unichar in paraparser.py evaluating untrusted user input. (bsc#1215560) Important SUSE bug 1215560 CVE-2019-19450 cpe:/o:suse:packagehub:15:sp5 Security update for yq (Moderate) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for yq fixes the following issues: yq was updated to 4.35.2 (bsc#1215808): * Fixed number parsing as float bug in JSON #1756 * Fixed string, null concatenation consistency #1712 * Fixed expression parsing issue #1711 Update to 4.35.1: * Added Lua output support * Added BSD checksum format Update to 4.34.1: * Added shell output format * Fixed nil pointer dereference Update to 4.33.3: * Fixed bug when splatting empty array #1613 * Added scalar output for TOML (#1617) * Fixed passing of read-only context in pipe (partial fix for #1631) Update to 4.33.2: * Add ``--nul-output|-0`` flag to separate element with NUL character (#1550) Thanks @vaab! * Add removable-media interface plug declaration to the snap packaging(#1618) Thanks @brlin-tw! * Scalar output now handled in csv, tsv and property files Update to 4.33.1: * Added read-only TOML support! #1364. Thanks @pelletier for making your API available in your toml lib :) * Added warning when auto detect by file type is outputs JSON Update to 4.32.2: * Fixes parsing terraform tfstate files results in 'unknown' format * Added divide and modulo operators (#1593) * Add support for decoding base64 strings without padding * Add filter operation (#1588) - thanks @rbren! * Detect input format based on file name extension (#1582) * Auto output format when input format is automatically detected * Fixed npe in log #1596 * Improved binary file size! Update to 4.31.2: * Fixed merged anchor reference problem #1482 * Fixed xml encoding of ProcInst #1563, improved XML comment handling * Allow build without json and xml support (#1556) Thanks Update to 4.31.1: * Added shuffle command #1503 * Added ability to sort by multiple fields #1541 * Added @sh encoder #1526 * Added @uri/@urid encoder/decoder #1529 * Fixed date comparison with string date #1537 * Added from_unix/to_unix Operators Moderate SUSE bug 1215808 cpe:/o:suse:packagehub:15:sp5 Security update for MozillaThunderbird (Critical) SUSE Linux Enterprise Module for Package Hub 15 SP5 This update for MozillaThunderbird fixes the following issues: Security fixes: - CVE-2023-5217: Fixed a heap buffer overflow in libvpx. (bsc#1215814) - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1. (bsc#1215575) - CVE-2023-5169: Out-of-bounds write in PathOps. (bsc#1215575) - CVE-2023-5171: Use-after-free in Ion Compiler. (bsc#1215575) - CVE-2023-5174: Double-free in process spawning on Windows. (bsc#1215575) - CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. (bsc#1215575) Other fixes: - Mozilla Thunderbird 115.3.1 * fixed: In Unified Folders view, some folders had incorrect unified folder parent (bmo#1852525) * fixed: 'Edit message as new' did not restore encrypted subject from selected message (bmo#1788534) * fixed: Importing some CalDAV calendars with yearly recurrence events caused Thunderbird to freeze (bmo#1850732) * fixed: Security fixes MFSA 2023-44 (bsc#1215814) * CVE-2023-5217 (bmo#1855550) Heap buffer overflow in libvpx - Mozilla Thunderbird 115.3 * fixed: Thunderbird could not import profiles with hostname ending in dot ('.') (bmo#1825374) * fixed: Message header was occasionally missing in message preview (bmo#1840943) * fixed: Setting an existing folder's type flag did not add descendant folders to the Unified Folders view (bmo#1848904) * fixed: Thunderbird did not always delete all temporary mail files, sometimes preventing messages from being sent (bmo#673703) * fixed: Status bar in Message Compose window could not be hidden (bmo#1806860) * fixed: Message header was intermittently missing from message preview (bmo#1840943) * fixed: OAuth2 did not work on some profiles created in Thunderbird 102.6.1 or earlier (bmo#1814823) * fixed: In Vertical View, decrypted subject lines were displayed as ellipsis ('...') in message list (bmo#1831764) * fixed: Condensed address preference (mail.showCondensedAddresses) did not show condensed addresses in message list (bmo#1831280) * fixed: Spam folder could not be assigned non-ASCII names with IMAP UTF-8 enabled (bmo#1816332) * fixed: Message header was not displayed until images finished loading, causing noticeable delay for messages containing large images (bmo#1851871) * fixed: Large SVG favicons did not display on RSS feeds (bmo#1853895) * fixed: Context menu items did not display a hover background color (bmo#1852732) * fixed: Security fixes MFSA 2023-43 (bsc#1215575) * CVE-2023-5168 (bmo#1846683) Out-of-bounds write in FilterNodeD2D1 * CVE-2023-5169 (bmo#1846685) Out-of-bounds write in PathOps * CVE-2023-5171 (bmo#1851599) Use-after-free in Ion Compiler * CVE-2023-5174 (bmo#1848454) Double-free in process spawning on Windows * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195) Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 - Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build with newer binutils (bsc#1215309) - Fix i586 build by reducing debug info to -g1. (bsc#1210168) - Mozilla Thunderbird 115.2.3 * changed: Card view and vertical layout are now default for new profiles (bmo#1849000) * fixed: Go - Folder menu was disabled (bmo#1849919) * fixed: 'Tools' menu was blank when opened from compose window on macOS (bmo#1848155) * fixed: Deleting an attachment from a message on an IMAP server corrupted the local copy when configured with 'mark as deleted' (bmo#1135434) * fixed: Manually entered passwords were not remembered for OAuth-authenticated accounts such as Yahoo mail (bmo#1673446) * fixed: Quick Filter's 'Keep filters applied' did not persist after restarting Thunderbird (bmo#1846880,bmo#1849221) * fixed: Top-level Quick Filter settings did not persist after restart (bmo#1849249) * fixed: Notifications for new messages with non-ASCII characters in the subject were garbled (bmo#1842384) * fixed: 'Mark Thread As Read' did not work when some messages in thread were already read (bmo#1850850) * fixed: New Groups tab in NNTP subscribe dialog id not work as expected (bmo#1848366) * fixed: Negative values were allowed in 'Share for files larger than' field (bmo#1850281) * fixed: Thunderbird sometimes crashed when deleting a parent folder with subfolders (bmo#1851293) * fixed: 'Send Message Error' appeared intermittently while Thunderbird was idle (bmo#1801668) * fixed: Focused but not selected messages were missing visual indication of focus in card view (bmo#1844263) * fixed: Notification dot did not disappear from taskbar icon on Windows after messages had already been read (bmo#1824889) * fixed: Multiple selected messages could not be opened simultaneously if selection included more than 19 messages (bmo#1851563) * fixed: Email replies received via BCC incorrectly populated From field with default identity (bmo#1851512) * fixed: User was not always notified of message send failures in outbox (bmo#1851542) * fixed: Tag dialog did not close properly after editing tag (bmo#1852414) * fixed: Newsgroup field in compose window did not autocomplete with suggested newsgroup names (bmo#1670457) * fixed: Canceling newsgroup messages did not check if sender matched user's own identity (bmo#1823274) * fixed: Event dialog with several invitees expanded beyond screen height (bmo#1848261) * fixed: Message check boxes were partially obstructed in message list (bmo#1850760) * unresolved: Some folders missing from Unified Folders () Critical SUSE bug 1210168 SUSE bug 1215309 SUSE bug 1215575 SUSE bug 1215814 CVE-2023-5168 CVE-2023-5169 CVE-2023-5171 CVE-2023-5174 CVE-2023-5176 CVE-2023-5217 cpe:/o:suse:packagehub:15:sp5 Security update for terraform-provider-aws (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441 bsc#1209658). Important SUSE bug 1200441 SUSE bug 1209658 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for terraform-provider-null (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of terraform-provider-null fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441 bsc#1209658). Important SUSE bug 1200441 SUSE bug 1209658 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for terraform-provider-helm (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of terraform-provider-helm fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441). Important SUSE bug 1200441 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for amazon-ssm-agent (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441). Important SUSE bug 1200441 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for google-cloud-sap-agent (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of google-cloud-sap-agent fixes the following issues: - rebuild the package with the go 1.19 security release (bsc#1200441). - Update to version 1.5.1 (bsc#1210464) - Raise golang API version to 1.20 Important SUSE bug 1200441 SUSE bug 1210464 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for google-cloud-sap-agent (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of google-cloud-sap-agent fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cloud-init (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cloud-init fixes the following issues: - CVE-2023-1786: Do not expose sensitive data gathered from the CSP. (bsc#1210277) - CVE-2022-2084: Fixed a bug which caused logging schema failures can include password hashes. (bsc#1210652) - Update to version 23.1 + Support transactional-updates for SUSE based distros + Set ownership for new folders in Write Files Module + add OpenCloudOS and TencentOS support + lxd: Retry if the server isn't ready + test: switch pycloudlib source to pypi + test: Fix integration test deprecation message + Recognize opensuse-microos, dev tooling fixes + sources/azure: refactor imds handler into own module + docs: deprecation generation support + add function is_virtual to distro/FreeBSD + cc_ssh: support multiple hostcertificates + Fix minor schema validation regression and fixup typing + doc: Reword user data debug section + cli: schema also validate vendordata*. + ci: sort and add checks for cla signers file + Add 'ederst' as contributor + readme: add reference to packages dir + docs: update downstream package list + docs: add google search verification + docs: fix 404 render use default notfound_urls_prefix in RTD conf + Fix OpenStack datasource detection on bare metal + docs: add themed RTD 404 page and pointer to readthedocs-hosted + schema: fix gpt labels, use type string for GUID + cc_disk_setup: code cleanup + netplan: keep custom strict perms when 50-cloud-init.yaml exists + cloud-id: better handling of change in datasource files + Warn on empty network key + Fix Vultr cloud_interfaces usage + cc_puppet: Update puppet service name + docs: Clarify networking docs + lint: remove httpretty + cc_set_passwords: Prevent traceback when restarting ssh + tests: fix lp1912844 + tests: Skip ansible test on bionic + Wait for NetworkManager + docs: minor polishing + CI: migrate integration-test to GH actions + Fix permission of SSH host keys + Fix default route rendering on v2 ipv6 + doc: fix path in net_convert command + docs: update net_convert docs + doc: fix dead link + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty + distros/rhel.py: _read_hostname() missing strip on 'hostname' + integration tests: add IBM VPC support + machine-id: set to uninitialized to trigger regeneration on clones + sources/azure: retry on connection error when fetching metdata + Ensure ssh state accurately obtained + bddeb: drop dh-systemd dependency on newer deb-based releases + doc: fix `config formats` link in cloudsigma.rst + Fix wrong subp syntax in cc_set_passwords.py + docs: update the PR template link to readthedocs + ci: switch unittests to gh actions + Add mount_default_fields for PhotonOS. + sources/azure: minor refactor for metadata source detection logic + add 'CalvoM' as contributor + ci: doc to gh actions + lxd: handle 404 from missing devices route for LXD 4.0 + docs: Diataxis overhaul + vultr: Fix issue regarding cache and region codes + cc_set_passwords: Move ssh status checking later + Improve Wireguard module idempotency + network/netplan: add gateways as on-link when necessary + tests: test_lxd assert features.networks.zones when present + Use btrfs enquque when available (#1926) [Robert Schweikert] + sources/azure: fix device driver matching for net config (#1914) + BSD: fix duplicate macs in Ifconfig parser + pycloudlib: add lunar support for integration tests + nocloud: add support for dmi variable expansion for seedfrom URL + tools: read-version drop extra call to git describe --long + doc: improve cc_write_files doc + read-version: When insufficient tags, use cloudinit.version.get_version + mounts: document weird prefix in schema + Ensure network ready before cloud-init service runs on RHEL + docs: add copy button to code blocks + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag + azure: fix support for systems without az command installed + Fix the distro.osfamily output problem in the openEuler system. + pycloudlib: bump commit dropping azure api smoke test + net: netplan config root read-only as wifi config can contain creds + autoinstall: clarify docs for users + sources/azure: encode health report as utf-8 + Add back gateway4/6 deprecation to docs + networkd: Add support for multiple [Route] sections + doc: add qemu tutorial + lint: fix tip-flake8 and tip-mypy + Add support for setting uid when creating users on FreeBSD + Fix exception in BSD networking code-path + Append derivatives to is_rhel list in cloud.cfg.tmpl + FreeBSD init: use cloudinit_enable as only rcvar + feat: add support aliyun metadata security harden mode + docs: uprate analyze to performance page + test: fix lxd preseed managed network config + Add support for static IPv6 addresses for FreeBSD + Make 3.12 failures not fail the build + Docs: adding relative links + Fix setup.py to align with PEP 440 versioning replacing trailing + Add 'nkukard' as contributor + doc: add how to render new module doc + doc: improve module creation explanation + Add Support for IPv6 metadata to OpenStack + add xiaoge1001 to .github-cla-signers + network: Deprecate gateway{4,6} keys in network config v2 + VMware: Move Guest Customization transport from OVF to VMware + doc: home page links added + net: skip duplicate mac check for netvsc nic and its VF This update for python-responses fixes the following issues: - update to 0.21.0: * Add `threading.Lock()` to allow `responses` working with `threading` module. * Add `urllib3` `Retry` mechanism. See #135 * Removed internal `_cookies_from_headers` function * Now `add`, `upsert`, `replace` methods return registered response. `remove` method returns list of removed responses. * Added null value support in `urlencoded_params_matcher` via `allow_blank` keyword argument * Added strict version of decorator. Now you can apply `@responses.activate(assert_all_requests_are_fired=True)` to your function to validate that all requests were executed in the wrapped function. See #183 Important SUSE bug 1171511 SUSE bug 1203393 SUSE bug 1210277 SUSE bug 1210652 CVE-2022-2084 CVE-2023-1786 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 AZURE kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593). - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595). - CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855). - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-21106: Fixed possible memory corruption due to double free in adreno_set_param of adreno_gpu.c (bsc#1211654). - CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294). - CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024). - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043). - CVE-2023-1380: Fixed a slab-out-of-bound read problem in brcmf_get_assoc_ies() (bsc#1209287). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037). - CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-2235: Fixed a use-after-free vulnerability in the Performance Events system that could have been exploited to achieve local privilege escalation (bsc#1210986). - CVE-2022-2196: Fixed a regression related to KVM that allowed for speculative execution attacks (bsc#1206992). - CVE-2023-23006: Fixed NULL vs IS_ERR checking in dr_domain_init_resources (bsc#1208845). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2023-30772: Fixed race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). - CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1209052). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2023-1583: Fixed a NULL pointer dereference in io_file_bitmap_get in io_uring/filetable.c (bsc#1209637). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bsc#1207050). - CVE-2023-0469: Fixed a use-after-free flaw in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent (bsc#1207521). - CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034). The following non-security bugs were fixed: - 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes). - ACPI / x86: Add support for LPS0 callback handler (git-fixes). - ACPI: CPPC: Disable FIE if registers in PCC regions (bsc#1210953). - ACPI: Do not build ACPICA with '-Os' (git-fixes). - ACPI: EC: Fix EC address space handler unregistration (bsc#1207149). - ACPI: EC: Fix ECDT probe ordering issues (bsc#1207149). - ACPI: EC: Fix oops when removing custom query handlers (git-fixes). - ACPI: NFIT: fix a potential deadlock during NFIT teardown (git-fixes). - ACPI: PM: Do not turn of unused power resources on the Toshiba Click Mini (git-fixes). - ACPI: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - ACPI: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - ACPI: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (git-fixes). - ACPI: VIOT: Initialize the correct IOMMU fwspec (git-fixes). - ACPI: battery: Fix missing NUL-termination with large strings (git-fixes). - ACPI: bus: Ensure that notify handlers are not running after removal (git-fixes). - ACPI: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P (git-fixes). - ACPI: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models (git-fixes). - ACPI: resource: Add Medion S17413 to IRQ override quirk (git-fixes). - ACPI: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - ACPI: resource: Do IRQ override on all TongFang GMxRGxx (git-fixes). - ACPI: tables: Add support for NBFT (bsc#1195921). - ACPI: tables: Add support for NBFT (bsc#1206340). - ACPI: video: Add acpi_video_backlight_use_native() helper (bsc#1206843). - ACPI: video: Allow GPU drivers to report no panels (bsc#1206843). - ACPI: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - ACPI: video: Fix missing native backlight on Chromebooks (bsc#1206843). - ACPI: video: Refactor acpi_video_get_backlight_type() a bit (bsc#1203693). - ACPI: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - ACPI: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - ACPI: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - ACPI: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - ACPI: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - ACPI: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - ACPI: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - ACPI: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - ACPI: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - ACPI: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - ACPI: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - ACPI: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes). - ACPICA: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes). - ACPICA: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149). - ACPICA: Avoid undefined behavior: applying zero offset to null pointer (git-fixes). - ACPICA: Drop port I/O validation for some regions (git-fixes). - ACPICA: include/acpi/acpixf.h: Fix indentation (bsc#1207149). - ACPICA: nsrepair: handle cases without a return value correctly (git-fixes). - ALSA: asihpi: check pao in control_message() (git-fixes). - ALSA: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes). - ALSA: cs46xx: mark snd_cs46xx_download_image as static (git-fixes). - ALSA: emu10k1: do not create old pass-through playback device on Audigy (git-fixes). - ALSA: emu10k1: fix capture interrupt handler unlinking (git-fixes). - ALSA: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - ALSA: firewire-digi00x: prevent potential use after free (git-fixes). - ALSA: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes). - ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes). - ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes). - ALSA: hda/ca0132: minor fix for allocation size (git-fixes). - ALSA: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes). - ALSA: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes). - ALSA: hda/conexant: add a new hda codec SN6180 (git-fixes). - ALSA: hda/hdmi: Preserve the previous PCM device upon re-enablement (git-fixes). - ALSA: hda/hdmi: disable KAE for Intel DG2 (git-fixes). - ALSA: hda/realtek - fixed wrong gpio assigned (git-fixes). - ALSA: hda/realtek: Add Acer Predator PH315-54 (git-fixes). - ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes). - ALSA: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - ALSA: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes). - ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes). - ALSA: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo L140AU (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes). - ALSA: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes). - ALSA: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - ALSA: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes). - ALSA: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes). - ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes). - ALSA: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes). - ALSA: hda/realtek: Add quirks for some Clevo laptops (git-fixes). - ALSA: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (git-fixes). - ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes). - ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes). - ALSA: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes). - ALSA: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - ALSA: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes). - ALSA: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes). - ALSA: hda/realtek: Fix support for Dell Precision 3260 (git-fixes). - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes). - ALSA: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - ALSA: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - ALSA: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes). - ALSA: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes). - ALSA: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes). - ALSA: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes). - ALSA: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes). - ALSA: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes). - ALSA: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes). - ALSA: hda: Do not unset preset when cleaning up codec (git-fixes). - ALSA: hda: Fix Oops by 9.1 surround channel names (git-fixes). - ALSA: hda: Fix unhandled register update during auto-suspend period (git-fixes). - ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes). - ALSA: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - ALSA: hda: cs35l41: Enable Amp High Pass Filter (git-fixes). - ALSA: hda: intel-dsp-config: add MTL PCI id (git-fixes). - ALSA: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes). - ALSA: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes). - ALSA: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - ALSA: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - ALSA: memalloc: Workaround for Xen PV (git-fixes). - ALSA: oss: avoid missing-prototype warnings (git-fixes). - ALSA: pci: lx6464es: fix a debug loop (git-fixes). - ALSA: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes). - ALSA: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes). - ALSA: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes). - ALSA: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes). - ALSA: ymfpci: Fix BUG_ON in probe function (git-fixes). - ARM64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes). - ARM: 9290/1: uaccess: Fix KASAN false-positives (git-fixes). - ARM: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes). - ARM: OMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes). - ARM: OMAP2+: Fix memory leak in realtime_counter_init() (git-fixes). - ARM: bcm2835_defconfig: Enable the framebuffer (git-fixes). - ARM: defconfig: drop CONFIG_DRM_RCAR_LVDS (git-fixes). - ARM: dts: am5748: keep usb4_tm disabled (git-fixes) - ARM: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes). - ARM: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes). - ARM: dts: exynos: correct TMU phandle in Exynos4 (git-fixes). - ARM: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes). - ARM: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes). - ARM: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes). - ARM: dts: exynos: correct TMU phandle in Odroid XU (git-fixes). - ARM: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes). - ARM: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes). - ARM: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes). - ARM: dts: gta04: fix excess dma channel usage (git-fixes). - ARM: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes). - ARM: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes). - ARM: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes) - ARM: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes). - ARM: dts: imx: Fix pca9547 i2c-mux node name (git-fixes). - ARM: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes). - ARM: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes). - ARM: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes). - ARM: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes) - ARM: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes). - ARM: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes). - ARM: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes). - ARM: dts: s5pv210: correct MIPI CSIS clock name (git-fixes). - ARM: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes). - ARM: dts: stm32: add missing usbh clock and fix clk order on (git-fixes) - ARM: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes) - ARM: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes). - ARM: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes). - ARM: imx: Call ida_simple_remove() for ida_simple_get (git-fixes). - ARM: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes) - ARM: omap: remove debug-leds driver (git-fixes) - ARM: remove some dead code (git-fixes) - ARM: renumber bits related to _TIF_WORK_MASK (git-fixes) - ARM: s3c: fix s3c64xx_set_timer_source prototype (git-fixes). - ARM: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes) - ARM: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes). - ASN.1: Fix check for strdup() success (git-fixes). - ASOC: Intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes). - ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes). - ASoC: Intel: Skylake: Fix driver hang during shutdown (git-fixes). - ASoC: Intel: avs: Access path components under lock (git-fixes). - ASoC: Intel: avs: Fix declaration of enum avs_channel_config (git-fixes). - ASoC: Intel: avs: Implement PCI shutdown (git-fixes). - ASoC: Intel: avs: Use min_t instead of min with cast (git-fixes). - ASoC: Intel: boards: fix spelling in comments (git-fixes). - ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - ASoC: Intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - ASoC: Intel: bytcht_es8316: move comment to the right place (git-fixes). - ASoC: Intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes). - ASoC: Intel: bytcr_rt5640: Drop reference count of ACPI device after use (git-fixes). - ASoC: Intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes). - ASoC: Intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes). - ASoC: Intel: soc-acpi-byt: Fix 'WM510205' match no longer working (git-fixes). - ASoC: Intel: soc-acpi: fix copy-paste issue in topology names (git-fixes). - ASoC: Intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes). - ASoC: Intel: sof_es8336: Drop reference count of ACPI device after use (git-fixes). - ASoC: Intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes). - ASoC: SOF: Intel: MTL: Fix the device description (git-fixes). - ASoC: SOF: ipc4-topology: set dmic dai index from copier (git-fixes). - ASoC: SOF: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data() (git-fixes). - ASoC: adau7118: do not disable regulators on device unbind (git-fixes). - ASoC: amd: acp-es8336: Drop reference count of ACPI device after use (git-fixes). - ASoC: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes). - ASoC: codecs: lpass: fix incorrect mclk rate (git-fixes). - ASoC: codecs: rx-macro: move clk provider to managed variants (git-fixes). - ASoC: codecs: rx-macro: move to individual clks from bulk (git-fixes). - ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes). - ASoC: codecs: tx-macro: move clk provider to managed variants (git-fixes). - ASoC: codecs: tx-macro: move to individual clks from bulk (git-fixes). - ASoC: codecs: wsa881x: do not set can_multi_write flag (git-fixes). - ASoC: cs35l41: Only disable internal boost (git-fixes). - ASoC: cs42l56: fix DT probe (git-fixes). - ASoC: dt-bindings: meson: fix gx-card codec node regex (git-fixes). - ASoC: dwc: limit the number of overrun messages (git-fixes). - ASoC: es8316: Handle optional IRQ assignment (git-fixes). - ASoC: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes). - ASoC: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes). - ASoC: fsl_micfil: Correct the number of steps on SX controls (git-fixes). - ASoC: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes). - ASoC: fsl_mqs: move of_node_put() to the correct location (git-fixes). - ASoC: fsl_sai: Update to modern clocking terminology (git-fixes). - ASoC: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes). - ASoC: hdac_hdmi: use set_stream() instead of set_tdm_slots() (git-fixes). - ASoC: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes). - ASoC: lpass: Fix for KASAN use_after_free out of bounds (git-fixes). - ASoC: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes). - ASoC: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes). - ASoC: mchp-spdifrx: fix controls which rely on rsr register (git-fixes). - ASoC: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes). - ASoC: rsnd: fixup #endif position (git-fixes). - ASoC: rt1308-sdw: add the default value of some registers (git-fixes). - ASoC: rt5682: Disable jack detection interrupt during suspend (git-fixes). - ASoC: rt715-sdca: fix clock stop prepare timeout issue (git-fixes). - ASoC: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes). - ASoC: soc-compress: Inherit atomicity from DAI link for Compress FE (git-fixes). - ASoC: soc-compress: Reposition and add pcm_mutex (git-fixes). - ASoC: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes). - ASoC: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (git-fixes). - ASoC: ssm2602: Add workaround for playback distortions (git-fixes). - ASoC: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes). - ASoC: topology: Properly access value coming from topology file (git-fixes). - ASoC: topology: Return -ENOMEM on memory allocation failure (git-fixes). - ASoC: zl38060 add gpiolib dependency (git-fixes). - ASoC: zl38060: Remove spurious gpiolib select (git-fixes). - Add 42a11bf5c543 cgroup/cpuset: Make cpuset_fork() handle CLONE_INTO_CGROUP properly - Bluetooth: Fix crash when replugging CSR fake controllers (git-fixes). - Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes). - Bluetooth: Fix race condition in hci_cmd_sync_clear (git-fixes). - Bluetooth: Fix race condition in hidp_session_thread (git-fixes). - Bluetooth: Fix support for Read Local Supported Codecs V2 (git-fixes). - Bluetooth: HCI: Fix global-out-of-bounds (git-fixes). - Bluetooth: ISO: Avoid circular locking dependency (git-fixes). - Bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - Bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - Bluetooth: ISO: do not try to remove CIG if there are bound CIS left (git-fixes). - Bluetooth: ISO: fix timestamped HCI ISO data packet parsing (git-fixes). - Bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes). - Bluetooth: L2CAP: Fix potential user-after-free (git-fixes). - Bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes). - Bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (git-fixes). - Bluetooth: Remove codec id field in vendor codec definition (git-fixes). - Bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (git-fixes). - Bluetooth: Set ISO Data Path on broadcast sink (git-fixes). - Bluetooth: btintel: Add LE States quirk support (git-fixes). - Bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes). - Bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - Bluetooth: btusb: Remove detection of ISO packets over bulk (git-fixes). - Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes). - Bluetooth: hci_conn: Fix memory leaks (git-fixes). - Bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (git-fixes). - Bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (git-fixes). - Bluetooth: hci_conn: use HCI dst_type values also for BIS (git-fixes). - Bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (git-fixes). - Bluetooth: hci_core: fix error handling in hci_register_dev() (git-fixes). - Bluetooth: hci_event: Fix Invalid wait context (git-fixes). - Bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - Bluetooth: hci_qca: fix debugfs registration (git-fixes). - Bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes). - Bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes). - Bluetooth: hci_sync: Fix not indicating power state (git-fixes). - Bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (git-fixes). - Bluetooth: hci_sync: cancel cmd_timer if hci_open failed (git-fixes). - Documentation/filesystems: ramfs-rootfs-initramfs: use :Author: (git-fixes). - Documentation/filesystems: sharedsubtree: add section headings (git-fixes). - Documentation/hw-vuln: Document the interaction between IBRS and STIBP (git-fixes). - Documentation: simplify and clarify DCO contribution example language (git-fixes). - Drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - EDAC/i10nm: Add Intel Emerald Rapids server support (PED-4400). - HID: Add Mapping for System Microphone Mute (git-fixes). - HID: asus: use spinlock to protect concurrent accesses (git-fixes). - HID: asus: use spinlock to safely schedule workers (git-fixes). - HID: bigben: use spinlock to protect concurrent accesses (git-fixes). - HID: bigben: use spinlock to safely schedule workers (git-fixes). - HID: bigben_worker() remove unneeded check on report_field (git-fixes). - HID: core: Fix deadloop in hid_apply_multiplier (git-fixes). - HID: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes). - HID: elecom: add support for TrackBall 056E:011C (git-fixes). - HID: google: add jewel USB id (git-fixes). - HID: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes). - HID: logitech-hidpp: Do not restart communication if not necessary (git-fixes). - HID: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes). - HID: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes). - HID: microsoft: Add rumble support to latest xbox controllers (bsc#1211280). - HID: multitouch: Add quirks for flipped axes (git-fixes). - HID: playstation: sanity check DualSense calibration data (git-fixes). - HID: retain initial quirks set up when creating HID devices (git-fixes). - HID: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes). - HID: wacom: Force pen out of prox if no events have been received in a while (git-fixes). - HID: wacom: Set a default resolution for older tablets (git-fixes). - HID: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes). - HID: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes). - HID: wacom: generic: Set battery quirk only when we see battery data (git-fixes). - HV: hv_balloon: fix memory leak with using debugfs_lookup() (git-fixes). - IB/IPoIB: Fix legacy IPoIB due to wrong number of queues (git-fixes) - IB/hfi1: Assign npages earlier (git-fixes) - IB/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes) - IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes) - IB/hfi1: Fix expected receive setup error exit issues (git-fixes) - IB/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes) - IB/hfi1: Fix sdma.h tx->num_descs off-by-one errors (git-fixes) - IB/hfi1: Immediately remove invalid memory from hardware (git-fixes) - IB/hfi1: Reject a zero-length user expected buffer (git-fixes) - IB/hfi1: Remove user expected buffer invalidate race (git-fixes) - IB/hfi1: Reserve user expected TIDs (git-fixes) - IB/hfi1: Restore allocated resources on failed copyout (git-fixes) - IB/hfi1: Update RMT size calculation (git-fixes) - IB/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes) - IB/mad: Do not call to function that might sleep while in atomic context (git-fixes). - IB/mlx5: Add support for 400G_8X lane speed (git-fixes) - IB/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes) - Input: ads7846 - always set last command to PWRDOWN (git-fixes). - Input: ads7846 - do not check penirq immediately for 7845 (git-fixes). - Input: ads7846 - do not report pressure for ads7845 (git-fixes). - Input: alps - fix compatibility with -funsigned-char (bsc#1209805). - Input: exc3000 - properly stop timer on shutdown (git-fixes). - Input: fix open count when closing inhibited device (git-fixes). - Input: focaltech - use explicitly signed char type (git-fixes). - Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes). - Input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes). - Input: iqs269a - configure device with a single block write (git-fixes). - Input: iqs269a - drop unused device node references (git-fixes). - Input: iqs269a - increase interrupt handler return delay (git-fixes). - Input: iqs626a - drop unused device node references (git-fixes). - Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes). - Input: xpad - add constants for GIP interface numbers (git-fixes). - KABI FIX FOR NFSv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - KABI FIX FOR: NFS: Further optimisations for 'ls -l' (git-fixes). - KABI FIX FOR: NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - KABI FIX FOR: NFSv4.1 query for fs_location attr on a new file system (Never, kabi). - KABI FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi). - KABI fix for: NFSv3: handle out-of-order write replies (bsc#1205544). - KEYS: Add missing function documentation (git-fixes). - KEYS: Create static version of public_key_verify_signature (git-fixes). - KEYS: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes). - KEYS: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes). - KMP: Remove obsolete KMP obsoletes (bsc#1210469). - KVM: Destroy target device if coalesced MMIO unregistration fails (git-fixes) - KVM: Disallow user memslot with size that exceeds 'unsigned long' (git-fixes) - KVM: Do not create VM debugfs files outside of the VM directory (git-fixes) - KVM: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes) - KVM: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes). - KVM: Prevent module exit until all VMs are freed (git-fixes) - KVM: SVM: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes). - KVM: SVM: Fix benign 'bool vs. int' comparison in svm_set_cr0() (git-fixes). - KVM: SVM: Fix potential overflow in SEV's send|receive_update_data() (git-fixes). - KVM: SVM: Require logical ID to be power-of-2 for AVIC entry (git-fixes). - KVM: SVM: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes). - KVM: SVM: hyper-v: placate modpost section mismatch error (git-fixes). - KVM: VMX: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes). - KVM: VMX: Resume guest immediately when injecting #GP on ECREATE (git-fixes). - KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes). - KVM: VMX: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes). - KVM: X86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes). - KVM: arm64: Do not arm a hrtimer for an already pending timer (git-fixes) - KVM: arm64: Do not return from void function (git-fixes) - KVM: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes) - KVM: arm64: Fix S1PTW handling on RO memslots (git-fixes) - KVM: arm64: Fix bad dereference on MTE-enabled systems (git-fixes) - KVM: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes) - KVM: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes) - KVM: arm64: Free hypervisor allocations if vector slot init fails (git-fixes) - KVM: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes) - KVM: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes) - KVM: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes) - KVM: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes) - KVM: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes) - KVM: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes) - KVM: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes) - KVM: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes) - KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes). - KVM: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes). - KVM: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes). - KVM: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes). - KVM: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (git-fixes). - KVM: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes). - KVM: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes). - KVM: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes). - KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes). - KVM: s390: selftest: memop: Fix integer literal (git-fixes). - KVM: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes). - KVM: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes). - KVM: x86/pmu: Ignore pmu->global_ctrl check if vPMU does not support global_ctrl (git-fixes). - KVM: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes). - KVM: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes). - KVM: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes). - KVM: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes). - KVM: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes). - KVM: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes). - KVM: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes). - KVM: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes). - KVM: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes). - KVM: x86: Protect the unused bits in MSR exiting flags (git-fixes). - KVM: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes). - KVM: x86: Report deprecated x87 features in supported CPUID (git-fixes). - KVM: x86: do not set st->preempted when going back to user space (git-fixes). - KVM: x86: fix sending PV IPI (git-fixes). - KVM: x86: fix sending PV IPI (git-fixes). - KVM: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes). - KVM: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes). - Makefile: link with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - NFS: Always initialise fattr->label in nfs_fattr_alloc() (git-fixes). - NFS: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes). - NFS: Cleanup unused rpc_clnt variable (git-fixes). - NFS: Create a new nfs_alloc_fattr_with_label() function (git-fixes). - NFS: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes). - NFS: Fix an Oops in nfs_d_automount() (git-fixes). - NFS: Fix careless typo (bsc#1209457) - NFS: Further optimisations for 'ls -l' (git-fixes). - NFS: Pass i_size to fscache_unuse_cookie() when a file is released (git-fixes). - NFS: fix NFS Null pointer (bsc#1210725). - NFS: fix disabling of swap (git-fixes). - NFS: nfsiod should not block forever in mempool_alloc() (git-fixes). - NFS: nfsiod should not block forever in mempool_alloc() (git-fixes). - NFSD: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (git-fixes). - NFSD: COMMIT operations must not return NFS?ERR_INVAL (git-fixes). - NFSD: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (git-fixes). - NFSD: Finish converting the NFSv2 GETACL result encoder (git-fixes). - NFSD: Finish converting the NFSv3 GETACL result encoder (git-fixes). - NFSD: Fix handling of oversized NFSv4 COMPOUND requests (git-fixes). - NFSD: Fix nfsd_breaker_owns_lease() return values (git-fixes). - NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - NFSD: Protect against filesystem freezing (git-fixes). - NFSD: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - NFSD: callback request does not use correct credential for AUTH_SYS (git-fixes). - NFSD: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes). - NFSD: fix problems with cleanup on errors in nfsd4_copy (git-fixes). - NFSD: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes). - NFSD: fix use-after-free on source server when doing inter-server copy (git-fixes). - NFSD: pass range end to vfs_fsync_range() instead of count (git-fixes). - NFSv3: handle out-of-order write replies (bsc#1205544). - NFSv4 expose nfs_parse_server_name function (git-fixes). - NFSv4 handle port presence in fs_location server string (git-fixes). - NFSv4 only print the label when its queried (git-fixes). - NFSv4 remove zero number of fs_locations entries error check (git-fixes). - NFSv4 store server support for fs_location attribute (git-fixes). - NFSv4.1 provide mount option to toggle trunking discovery (git-fixes). - NFSv4.1 query for fs_location attr on a new file system (git-fixes). - NFSv4.1: Fix uninitialised variable in devicenotify (git-fixes). - NFSv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - NFSv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - NFSv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - NFSv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - NFSv4.2: Fix initialisation of struct nfs4_label (git-fixes). - NFSv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - NFSv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes). - NFSv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - NFSv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - NFSv4/pnfs: Fix a use-after-free bug in open (git-fixes). - NFSv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes). - NFSv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes). - NFSv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes). - NFSv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - NFSv4: Fix a potential state reclaim deadlock (git-fixes). - NFSv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - NFSv4: Fix hangs when recovering open state after a server reboot (git-fixes). - NFSv4: Protect the state recovery thread against direct reclaim (git-fixes). - NFSv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes). - NFSv4: keep state manager thread active if swap is enabled (git-fixes). - PCI/ASPM: Remove pcie_aspm_pm_state_change() (git-fixes). - PCI/DPC: Await readiness of secondary bus after reset (git-fixes). - PCI/EDR: Clear Device Status after EDR error recovery (git-fixes). - PCI/IOV: Enlarge virtfn sysfs name buffer (git-fixes). - PCI/PM: Always disable PTM for all devices during suspend (git-fixes). - PCI/PM: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes). - PCI/PM: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes). - PCI/PM: Observe reset delay irrespective of bridge_d3 (git-fixes). - PCI/PTM: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes). - PCI: Add ACS quirk for Wangxun NICs (git-fixes). - PCI: Add SolidRun vendor ID (git-fixes). - PCI: Align extra resources for hotplug bridges properly (git-fixes). - PCI: Avoid FLR for AMD FCH AHCI adapters (git-fixes). - PCI: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes). - PCI: Fix dropping valid root bus resources with .end = zero (git-fixes). - PCI: Reduce warnings on possible RW1C corruption (git-fixes). - PCI: Take other bus devices into account when distributing resources (git-fixes). - PCI: Unify delay handling for reset and resume (git-fixes). - PCI: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes). - PCI: aardvark: Fix link training (git-fixes). - PCI: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes). - PCI: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes). - PCI: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes). - PCI: hv: Add a per-bus mutex state_lock (bsc#1207185). - PCI: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185). - PCI: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185). - PCI: hv: Use async probing to reduce boot time (bsc#1207185). - PCI: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185). - PCI: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes). - PCI: imx6: Install the fault handler only on compatible match (git-fixes). - PCI: loongson: Add more devices that need MRRS quirk (git-fixes). - PCI: loongson: Prevent LS7A MRRS increases (git-fixes). - PCI: mediatek-gen3: Assert resets to ensure expected init state (git-fixes). - PCI: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes). - PCI: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes). - PCI: qcom: Fix host-init error handling (git-fixes). - PCI: qcom: Fix pipe clock imbalance (git-fixes). - PCI: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes). - PCI: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes). - PCI: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - PCI: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - PCI: xgene: Revert 'PCI: xgene: Use inbound resources for setup' (git-fixes). - PM: hibernate: Do not get block device exclusively in test_resume mode (git-fixes). - PM: hibernate: Turn snapshot_test into global variable (git-fixes). - PM: hibernate: fix load_image_and_restore() error path (git-fixes). - RDMA/bnxt_re: Fix a possible memory leak (git-fixes) - RDMA/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes) - RDMA/bnxt_re: Fix the page_size used during the MR creation (git-fixes) - RDMA/cm: Trace icm_send_rej event before the cm state is reset (git-fixes) - RDMA/cma: Allow UD qp_type to join multicast only (git-fixes) - RDMA/core: Fix GID entry ref leak when create_ah fails (git-fixes) - RDMA/core: Fix ib block iterator counter overflow (bsc#1207878). - RDMA/core: Fix ib block iterator counter overflow (git-fixes) - RDMA/core: Fix multiple -Warray-bounds warnings (git-fixes) - RDMA/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes) - RDMA/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes) - RDMA/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes) - RDMA/efa: Fix unsupported page sizes in device (git-fixes) - RDMA/hns: Fix base address table allocation (git-fixes) - RDMA/hns: Fix timeout attr in query qp for HIP08 (git-fixes) - RDMA/hns: Modify the value of long message loopback slice (git-fixes) - RDMA/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383). - RDMA/irdma: Add ipv4 check to irdma_find_listener() (git-fixes) - RDMA/irdma: Cap MSIX used to online CPUs + 1 (git-fixes) - RDMA/irdma: Do not generate SW completions for NOPs (git-fixes) - RDMA/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383). - RDMA/irdma: Fix Local Invalidate fencing (git-fixes) - RDMA/irdma: Fix RQ completion opcode (jsc#SLE-18383). - RDMA/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383). - RDMA/irdma: Fix inline for multiple SGE's (jsc#SLE-18383). - RDMA/irdma: Fix memory leak of PBLE objects (git-fixes) - RDMA/irdma: Fix potential NULL-ptr-dereference (git-fixes) - RDMA/irdma: Increase iWARP CM default rexmit count (git-fixes) - RDMA/irdma: Prevent QP use after free (git-fixes) - RDMA/irdma: Remove enum irdma_status_code (jsc#SLE-18383). - RDMA/irdma: Remove excess error variables (jsc#SLE-18383). - RDMA/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022). - RDMA/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022). - RDMA/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022). - RDMA/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022). - RDMA/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022). - RDMA/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255). - RDMA/mlx5: Fix flow counter query via DEVX (git-fixes) - RDMA/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes) - RDMA/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes) - RDMA/mlx5: Use correct device num_ports when modify DC (git-fixes) - RDMA/mlx5: Use rdma_umem_for_each_dma_block() (git-fixes) - RDMA/rdmavt: Delete unnecessary NULL check (git-fixes) - RDMA/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes) - RDMA/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes) - RDMA/rxe: Fix inaccurate constants in rxe_type_info (git-fixes) - RDMA/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes) - RDMA/rxe: Fix mr->map double free (git-fixes) - RDMA/rxe: Fix oops with zero length reads (git-fixes) - RDMA/rxe: Fix the error 'trying to register non-static key in rxe_cleanup_task' (git-fixes) - RDMA/rxe: Make responder handle RDMA Read failures (git-fixes) - RDMA/rxe: Prevent faulty rkey generation (git-fixes) - RDMA/rxe: Remove tasklet call from rxe_cq.c (git-fixes) - RDMA/siw: Fix potential page_array out of range access (git-fixes) - RDMA/siw: Fix user page pinning accounting (git-fixes) - RDMA/siw: Remove namespace check from siw_netdev_event() (git-fixes) - RDMA/srp: Move large values to a new enum for gcc13 (git-fixes) - RDMA/srpt: Add a check for valid 'mad_agent' pointer (git-fixes) - RDMA/usnic: use iommu_map_atomic() under spin_lock() (git-fixes) - RDMA: Handle the return code from dma_resv_wait_timeout() properly (git-fixes) - SMB3.1.1: add new tree connect ShareFlags (bsc#1193629). - SMB3: Add missing locks to protect deferred close file list (git-fixes). - SMB3: Close all deferred handles of inode in case of handle lease break (bsc#1193629). - SMB3: Close deferred file handles in case of handle lease break (bsc#1193629). - SMB3: drop reference to cfile before sending oplock break (bsc#1193629). - SMB3: force unmount was failing to close deferred close files (bsc#1193629). - SUNRPC allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes). - SUNRPC: Do not dereference xprt->snd_task if it's a cookie (git-fixes). - SUNRPC: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes). - SUNRPC: Fix a server shutdown leak (git-fixes). - SUNRPC: Fix missing release socket in rpc_sockname() (git-fixes). - SUNRPC: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes). - SUNRPC: Fix socket waits for write buffer space (git-fixes). - SUNRPC: Return true/false (not 1/0) from bool functions (git-fixes). - SUNRPC: Update trace flags (git-fixes). - SUNRPC: Use BIT() macro in rpc_show_xprt_state() (git-fixes). - SUNRPC: ensure the matching upcall is in-flight upon downcall (git-fixes). - SUNRPC: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775). - Squashfs: fix handling and sanity checking of xattr_ids count (git-fixes). - USB / dwc3: Fix a checkpatch warning in core.c (git-fixes). - USB: UHCI: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes). - USB: chipidea: fix memory leak with using debugfs_lookup() (git-fixes). - USB: core: Add routines for endpoint checks in old drivers (git-fixes). - USB: core: Do not hold device lock while reading the 'descriptors' sysfs file (git-fixes). - USB: dwc3: fix memory leak with using debugfs_lookup() (git-fixes). - USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes). - USB: dwc3: fix runtime pm imbalance on unbind (git-fixes). - USB: ene_usb6250: Allocate enough memory for full object (git-fixes). - USB: fix memory leak with using debugfs_lookup() (git-fixes). - USB: fotg210: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - USB: isp116x: fix memory leak with using debugfs_lookup() (git-fixes). - USB: isp1362: fix memory leak with using debugfs_lookup() (git-fixes). - USB: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes). - USB: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes). - USB: serial: option: add Quectel EC200U modem (git-fixes). - USB: serial: option: add Quectel EM05-G (CS) modem (git-fixes). - USB: serial: option: add Quectel EM05-G (GR) modem (git-fixes). - USB: serial: option: add Quectel EM05-G (RS) modem (git-fixes). - USB: serial: option: add Quectel EM05CN (SG) modem (git-fixes). - USB: serial: option: add Quectel EM05CN modem (git-fixes). - USB: serial: option: add Quectel RM500U-CN modem (git-fixes). - USB: serial: option: add Telit FE990 compositions (git-fixes). - USB: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes). - USB: serial: option: add support for VW/Skoda 'Carstick LTE' (git-fixes). - USB: sisusbvga: Add endpoint checks (git-fixes). - USB: sl811: fix memory leak with using debugfs_lookup() (git-fixes). - USB: uhci: fix memory leak with using debugfs_lookup() (git-fixes). - USB: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes). - VFS: filename_create(): fix incorrect intent (bsc#1197534). - VMCI: check context->notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes). - affs: initialize fsdata in affs_truncate() (git-fixes). - alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes) - amdgpu/nv.c: Corrected typo in the video capabilities resolution (git-fixes). - amdgpu: disable powerpc support for the newer display engine (bsc#1194869). - amdgpu: fix build on non-DCN platforms (git-fixes). - apparmor: add a kernel label to use on kernel objects (bsc#1211113). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arch: fix broken BuildID for arm64 and riscv (bsc#1209798). - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes). - arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes). - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes). - arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes) - arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes). - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes). - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes). - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes). - arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes). - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes) - arm64: dts: imx8mp: correct usb clocks (git-fixes) - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes). - arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes) - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes) - arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: specify full DMC range (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes). - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes). - arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes). - arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes). - arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes). - arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes). - arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes). - arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes). - arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes). - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes). - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes). - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes). - arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes). - arm64: efi: Execute runtime services from a dedicated stack (git-fixes). - arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes). - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes). - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes). - arm64: make is_ttbrX_addr() noinstr-safe (git-fixes) - arm64: mm: kfence: only handle translation faults (git-fixes) - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes). - ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes). - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes). - ata: libata: Set __ATA_BASE_SHT max_sectors (git-fixes). - ata: libata: fix NCQ autosense logic (git-fixes). - ata: pata_macio: Fix compilation warning (git-fixes). - ata: pata_octeon_cf: drop kernel-doc notation (git-fixes). - ata: pata_octeon_cf: fix call to trace_ata_bmdma_stop() (git-fixes). - ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes). - ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes). - ath9k: hif_usb: simplify if-if to if-else (git-fixes). - ath9k: htc: clean up statistics macros (git-fixes). - atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes). - audit: update the mailing list in MAINTAINERS (git-fixes). - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes). - backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes). - batman-adv: Broken sync while rescheduling delayed work (git-fixes). - bcache: Revert 'bcache: use bvec_virt' (git-fixes). - bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes). - bcache: fix wrong bdev parameter when calling bio_alloc_clone() in do_bio_hook() (git-fixes). - bcache: put bch_bio_map() back to correct location in journal_write_unlocked() (git-fixes). - bfq: fix use-after-free in bfq_dispatch_request (git-fixes). - bfq: fix waker_bfqq inconsistency crash (git-fixes). - blacklist.conf: s390/boot: allocate amode31 section in decompressor - blacklist.conf: the commit might cause regression (bsc#1210947) - blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes). - blk-cgroup: properly pin the parent in blkcg_css_online (bsc#1208105). - blk-lib: fix blkdev_issue_secure_erase (git-fixes). - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (git-fixes). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: run queue no matter whether the request is the last request (git-fixes). - blk-throttle: fix that io throttle can only work for single bio (git-fixes). - blk-throttle: prevent overflow while calculating wait time (git-fixes). - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - block, bfq: do not move oom_bfqq (git-fixes). - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes). - block, bfq: fix possible uaf for 'bfqq->bic' (git-fixes). - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes). - block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bfq-iosched.c: use 'false' rather than 'BLK_RW_ASYNC' (git-fixes). - block/bfq_wf2q: correct weight to ioprio (git-fixes). - block/bio: remove duplicate append pages code (git-fixes). - block: Fix possible memory leak for rq_wb on add_disk failure (git-fixes). - block: add a bdev_max_zone_append_sectors helper (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: check minor range in device_add_disk() (git-fixes). - block: clear ->slave_dir when dropping the main slave_dir reference (git-fixes). - block: do not allow splitting of a REQ_NOWAIT bio (git-fixes). - block: do not allow the same type rq_qos add more than once (git-fixes). - block: do not reverse request order when flushing plug list (bsc#1208588 bsc#1208128). - block: ensure iov_iter advances for added pages (git-fixes). - block: fix and cleanup bio_check_ro (git-fixes). - block: fix default IO priority handling again (git-fixes). - block: fix infinite loop for invalid zone append (git-fixes). - block: fix leaking minors of hidden disks (git-fixes). - block: fix memory leak for elevator on add_disk failure (git-fixes). - block: fix missing blkcg_bio_issue_init (bsc#1208107). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (git-fixes). - block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes). - block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes). - block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes). - block: null_blk: Fix null_zone_write() (git-fixes). - block: pop cached rq before potentially blocking rq_qos_throttle() (git-fixes). - block: use bdev_get_queue() in bio.c (git-fixes). - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes). - bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes). - bnxt: Do not read past the end of test names (jsc#SLE-18978). - bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978). - bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978). - bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978). - bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978). - bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978). - bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978). - bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978). - bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978). - bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes). - bpf, x64: Factor out emission of REX byte in more cases (git-fixes). - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes). - bpf: Fix extable address check (git-fixes). - bpf: Fix extable fixup offset (git-fixes). - bpf: Skip task with pid=1 in send_signal_common() (git-fixes). - btrfs: backport recent fixes for send/receive into SLE15 SP4/SP5 (bsc#1206036 bsc#1206057 bsc#1206056 bsc#1207500 bsc#1207506 bsc#1207507). - btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158). - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158). - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes). - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158). - btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158). - btrfs: qgroup: remove outdated TODO comments (bsc#1207158). - bus: mhi: host: Fix race between channel preparation and M0 event (git-fixes). - bus: mhi: host: Range check CHDBOFF and ERDBOFF (git-fixes). - bus: mhi: host: Remove duplicate ee check for syserr (git-fixes). - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (git-fixes). - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes). - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes). - ca8210: fix mac_len negative array access (git-fixes). - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes). - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes). - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes). - can: j1939: change j1939_netdev_lock type to mutex (git-fixes). - can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes). - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes). - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes). - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes). - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes). - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes). - can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes). - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes). - can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes). - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes). - can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes). - can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes). - cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes). - ceph: avoid use-after-free in ceph_fl_release_lock() (jsc#SES-1880). - ceph: blocklist the kclient when receiving corrupted snap trace (jsc#SES-1880). - ceph: flush cap releases when the session is flushed (bsc#1208428). - ceph: flush cap releases when the session is flushed (jsc#SES-1880). - ceph: force updating the msg pointer in non-split case (bsc#1211804). - ceph: move mount state enum to super.h (jsc#SES-1880). - ceph: remove useless session parameter for check_caps() (jsc#SES-1880). - ceph: switch to vfs_inode_has_locks() to fix file lock bug (jsc#SES-1880). - ceph: try to check caps immediately after async creating finishes (jsc#SES-1880). - ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504). - ceph: use locks_inode_context helper (jsc#SES-1880). - cfg80211: allow continuous radar monitoring on offchannel chain (bsc#1209980). - cfg80211: fix possible NULL pointer dereference in cfg80211_stop_offchan_radar_detection (bsc#1209980). - cfg80211: implement APIs for dedicated radar detection HW (bsc#1209980). - cfg80211: move offchan_cac_event to a dedicated work (bsc#1209980). - cfg80211: rename offchannel_chain structs to background_chain to avoid confusion with ETSI standard (bsc#1209980). - cfg80211: schedule offchan_cac_abort_wk in cfg80211_radar_event (bsc#1209980). - cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906). - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827). - cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650). - cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650). - cgroup: Make cgroup_get_from_id() prettier (bsc#1205650). - cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650). - cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (bsc#1205650). - cgroup: reduce dependency on cgroup_mutex (bsc#1205650). - cifs: Avoid a cast in add_lease_context() (bsc#1193629). - cifs: Check the lease context if we actually got a lease (bsc#1193629). - cifs: Convert struct fealist away from 1-element array (bsc#1193629). - cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (git-fixes). - cifs: Fix smb2_set_path_size() (git-fixes). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629). - cifs: Fix use-after-free in rdata->read_into_pages() (git-fixes). - cifs: Fix warning and UAF when destroy the MR list (git-fixes). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629). - cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes). - cifs: Replace remaining 1-element arrays (bsc#1193629). - cifs: Replace zero-length arrays with flexible-array members (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Use kstrtobool() instead of strtobool() (bsc#1193629). - cifs: append path to open_enter trace event (bsc#1193629). - cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758). - cifs: avoid race conditions with parallel reconnects (bsc#1193629). - cifs: avoid races in parallel reconnects in smb1 (bsc#1193629). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629). - cifs: check only tcon status on tcon related functions (bsc#1193629). - cifs: do not include page data when checking signature (git-fixes). - cifs: do not poll server interfaces too regularly (bsc#1193629). - cifs: do not take exclusive lock for updating target hints (bsc#1193629). - cifs: do not try to use rdma offload on encrypted connections (bsc#1193629). - cifs: double lock in cifs_reconnect_tcon() (git-fixes). - cifs: dump pending mids for all channels in DebugData (bsc#1193629). - cifs: empty interface list when server does not support query interfaces (bsc#1193629). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629). - cifs: fix dentry lookups in directory handle cache (bsc#1193629). - cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629). - cifs: fix mount on old smb servers (boo#1206935). - cifs: fix negotiate context parsing (bsc#1210301). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629). - cifs: fix potential deadlock in cache_refresh_path() (git-fixes). - cifs: fix potential race when tree connecting ipc (bsc#1208758). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629). - cifs: fix sharing of DFS connections (bsc#1208758). - cifs: fix smb1 mount regression (bsc#1193629). - cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629). - cifs: generate signkey for the channel that's reconnecting (bsc#1193629). - cifs: get rid of dead check in smb2_reconnect() (bsc#1193629). - cifs: get rid of dns resolve worker (bsc#1193629). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629). - cifs: handle cache lookup errors different than -ENOENT (bsc#1193629). - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629). - cifs: lock chan_lock outside match_session (bsc#1193629). - cifs: mapchars mount option ignored (bsc#1193629). - cifs: match even the scope id for ipv6 addresses (bsc#1193629). - cifs: missing lock when updating session status (bsc#1193629). - cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629). - cifs: prevent data race in smb2_reconnect() (bsc#1193629). - cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629). - cifs: print last update time for interface list (bsc#1193629). - cifs: print session id while listing open files (bsc#1193629). - cifs: print smb3_fs_context::source when mounting (bsc#1193629). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758). - cifs: protect session status check in smb2_reconnect() (bsc#1208758). - cifs: release leases for deferred close handles when freezing (bsc#1193629). - cifs: remove duplicate code in __refresh_tcon() (bsc#1193629). - cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629). - cifs: remove unused function (bsc#1193629). - cifs: return DFS root session id in DebugData (bsc#1193629). - cifs: return a single-use cfid if we did not get a lease (bsc#1193629). - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629). - cifs: sanitize paths in cifs_update_super_prepath (git-fixes). - cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629). - cifs: split out smb3_use_rdma_offload() helper (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - cifs: update ip_addr for ses only for primary chan setup (bsc#1193629). - cifs: use DFS root session instead of tcon ses (bsc#1193629). - cifs: use tcon allocation functions even for dummy tcon (git-fixes). - cifs: use the least loaded channel for sending requests (bsc#1193629). - clk: HI655X: select REGMAP instead of depending on it (git-fixes). - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes). - clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes). - clk: at91: clk-sam9x60-pll: fix return value check (git-fixes). - clk: imx: avoid memory leak (git-fixes). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (git-fixes). - clk: mxl: Add option to override gate clks (git-fixes). - clk: mxl: Fix a clk entry by adding relevant flags (git-fixes). - clk: mxl: Remove redundant spinlocks (git-fixes). - clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes). - clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes). - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes). - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes). - clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes). - clk: qcom: regmap: add PHY clock source implementation (git-fixes). - clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes). - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes). - clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes). - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes). - clk: sprd: set max_register according to mapping range (git-fixes). - clk: tegra20: fix gcc-7 constant overflow warning (git-fixes). - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes). - clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes). - clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes). - comedi: use menuconfig for main Comedi menu (git-fixes). - configfs: fix possible memory leak in configfs_create_dir() (git-fixes). - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes). - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953). - cpufreq: CPPC: Fix performance/frequency conversion (git-fixes). - cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - crypto: acomp - define max size for destination (jsc#PED-3692) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - crypto: caam - Clear some memory in instantiate_rng (git-fixes). - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes). - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes). - crypto: crypto4xx - Call dma_unmap_page when done (git-fixes). - crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes). - crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692) - crypto: essiv - Handle EBUSY correctly (git-fixes). - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (git-fixes). - crypto: qat - Fix unsigned function returning negative (jsc#PED-3692) - crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692) - crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692) - crypto: qat - abstract PFVF receive logic (jsc#PED-3692) - crypto: qat - abstract PFVF send function (jsc#PED-3692) - crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692) - crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692) - crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692) - crypto: qat - add backlog mechanism (jsc#PED-3692) - crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692) - crypto: qat - add check to validate firmware images (jsc#PED-3692) - crypto: qat - add limit to linked list parsing (jsc#PED-3692) - crypto: qat - add misc workqueue (jsc#PED-3692) - crypto: qat - add missing restarting event notification in (jsc#PED-3692) - crypto: qat - add param check for DH (jsc#PED-3692) - crypto: qat - add param check for RSA (jsc#PED-3692) - crypto: qat - add pfvf_ops (jsc#PED-3692) - crypto: qat - add resubmit logic for decompression (jsc#PED-3692) - crypto: qat - add support for 401xx devices (jsc#PED-3692) - crypto: qat - add support for compression for 4xxx (jsc#PED-3692) - crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692) - crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692) - crypto: qat - change PFVF ACK behaviour (jsc#PED-3692) - crypto: qat - change behaviour of (jsc#PED-3692) - crypto: qat - change bufferlist logic interface (jsc#PED-3692) - crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692) - crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692) - crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692) - crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692) - crypto: qat - do not rely on min version (jsc#PED-3692) - crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692) - crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692) - crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692) - crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692) - crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692) - crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - extend buffer list interface (jsc#PED-3692) - crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692) - crypto: qat - extract send and wait from (jsc#PED-3692) - crypto: qat - fix DMA transfer direction (jsc#PED-3692) - crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692) - crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692) - crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692) - crypto: qat - fix a typo in a comment (jsc#PED-3692) - crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692) - crypto: qat - fix definition of ring reset results (jsc#PED-3692) - crypto: qat - fix error return code in adf_probe (git-fixes). - crypto: qat - fix error return code in adf_probe (jsc#PED-3692) - crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692) - crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692) - crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692) - crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692) - crypto: qat - fix out-of-bounds read (git-fixes). - crypto: qat - fix wording and formatting in code comment (jsc#PED-3692) - crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692) - crypto: qat - free irq in case of failure (jsc#PED-3692) - crypto: qat - free irqs only if allocated (jsc#PED-3692) - crypto: qat - generalize crypto request buffers (jsc#PED-3692) - crypto: qat - get compression extended capabilities (jsc#PED-3692) - crypto: qat - handle retries due to collisions in (jsc#PED-3692) - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692) - crypto: qat - improve logging of PFVF messages (jsc#PED-3692) - crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692) - crypto: qat - introduce support for PFVF block messages (jsc#PED-3692) - crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692) - crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692) - crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692) - crypto: qat - make PFVF message construction direction (jsc#PED-3692) - crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692) - crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692) - crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692) - crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692) - crypto: qat - move pfvf collision detection values (jsc#PED-3692) - crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692) - crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692) - crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692) - crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692) - crypto: qat - re-enable registration of algorithms (jsc#PED-3692) - crypto: qat - refactor PF top half for PFVF (jsc#PED-3692) - crypto: qat - refactor pfvf version request messages (jsc#PED-3692) - crypto: qat - refactor submission logic (jsc#PED-3692) - crypto: qat - relocate PFVF PF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF VF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF disabled function (jsc#PED-3692) - crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692) - crypto: qat - relocate backlog related structures (jsc#PED-3692) - crypto: qat - relocate bufferlist logic (jsc#PED-3692) - crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692) - crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692) - crypto: qat - remove empty sriov_configure() (jsc#PED-3692) - crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692) - crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692) - crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692) - crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692) - crypto: qat - remove unneeded assignment (jsc#PED-3692) - crypto: qat - remove unneeded braces (jsc#PED-3692) - crypto: qat - remove unneeded packed attribute (jsc#PED-3692) - crypto: qat - remove unused PFVF stubs (jsc#PED-3692) - crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692) - crypto: qat - rename bufferlist functions (jsc#PED-3692) - crypto: qat - rename pfvf collision constants (jsc#PED-3692) - crypto: qat - reorganize PFVF code (jsc#PED-3692) - crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692) - crypto: qat - replace deprecated MSI API (jsc#PED-3692) - crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692) - crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692) - crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692) - crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692) - crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692) - crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692) - crypto: qat - simplify adf_enable_aer() (jsc#PED-3692) - crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692) - crypto: qat - split PFVF message decoding from handling (jsc#PED-3692) - crypto: qat - stop using iommu_present() (jsc#PED-3692) - crypto: qat - store the PFVF protocol version of the (jsc#PED-3692) - crypto: qat - store the ring-to-service mapping (jsc#PED-3692) - crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692) - crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692) - crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692) - crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692) - crypto: qat - use hweight for bit counting (jsc#PED-3692) - crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692) - crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692) - crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692) - crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes). - crypto: sa2ul - Select CRYPTO_DES (git-fixes). - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes). - crypto: seqiv - Handle EBUSY correctly (git-fixes). - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes). - crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes). - crypto: xts - Handle EBUSY correctly (git-fixes). - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes). - devlink: hold region lock when flushing snapshots (git-fixes). - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm clone: Fix UAF in clone_dtr() (git-fixes). - dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes). - dm integrity: clear the journal on suspend (git-fixes). - dm integrity: flush the journal on suspend (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm raid: fix address sanitizer warning in raid_resume (git-fixes). - dm raid: fix address sanitizer warning in raid_status (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes). - dm: fix alloc_dax error handling in alloc_dev (git-fixes). - dm: requeue IO if mapping table not yet available (git-fixes). - dma-buf: Use dma_fence_unwrap_for_each when importing fences (git-fixes). - dma-buf: cleanup kerneldoc of removed component (git-fixes). - dma-direct: use is_swiotlb_active in dma_direct_map_page (PED-3259). - dma-mapping: reformat comment to suppress htmldoc warning (git-fixes). - dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes). - dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes). - dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes). - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes). - dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes). - dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes). - dmaengine: dw-edma: Drop chancnt initialization (git-fixes). - dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes). - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes). - dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes). - dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes). - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes). - dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes). - dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes). - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes). - dmaengine: mv_xor_v2: Fix an error code (git-fixes). - dmaengine: pl330: rename _start to prevent build error (git-fixes). - dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes). - dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes). - dmaengine: tegra: Fix memory leak in terminate_all() (git-fixes). - do not reuse connection if share marked as isolated (bsc#1193629). - docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes). - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (git-fixes). - docs: driver-api: firmware_loader: fix missing argument in usage example (git-fixes). - docs: ftrace: fix a issue with duplicated subtitle number (git-fixes). - docs: gdbmacros: print newest record (git-fixes). - docs: networking: fix x25-iface.rst heading & index order (git-fixes). - driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes). - driver core: fix potential null-ptr-deref in device_add() (git-fixes). - driver core: fix resource leak in device_add() (git-fixes). - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes). - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815). - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815). - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes). - drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: transport_class: fix possible memory leak (git-fixes). - drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes). - drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes). - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - drm/amd/amdgpu: fix warning during suspend (bsc#1206843). - drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes). - drm/amd/display: Add DCN314 display SG Support (bsc#1206843). - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes). - drm/amd/display: Add NULL plane_state check for cursor disable logic (git-fixes). - drm/amd/display: Add check for DET fetch latency hiding for dcn32 (bsc#1206843). - drm/amd/display: Add missing brackets in calculation (bsc#1206843). - drm/amd/display: Adjust downscaling limits for dcn314 (bsc#1206843). - drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 (bsc#1206843). - drm/amd/display: Clear MST topology if it fails to resume (git-fixes). - drm/amd/display: Conversion to bool not necessary (git-fixes). - drm/amd/display: Defer DIG FIFO disable after VID stream enable (bsc#1206843). - drm/amd/display: Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now (bsc#1206843). - drm/amd/display: Do not clear GPINT register when releasing DMUB from reset (git-fixes). - drm/amd/display: Do not commit pipe when updating DRR (bsc#1206843). - drm/amd/display: Do not set DRR on pipe Commit (bsc#1206843). - drm/amd/display: Enable P-state validation checks for DCN314 (bsc#1206843). - drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes). - drm/amd/display: Fix DP MST sinks removal issue (git-fixes). - drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming (bsc#1206843). - drm/amd/display: Fix display corruption w/ VSR enable (bsc#1206843). - drm/amd/display: Fix hang when skipping modeset (git-fixes). - drm/amd/display: Fix potential null dereference (git-fixes). - drm/amd/display: Fix potential null-deref in dm_resume (git-fixes). - drm/amd/display: Fix race condition in DPIA AUX transfer (bsc#1206843). - drm/amd/display: Fix set scaling doesn's work (git-fixes). - drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes). - drm/amd/display: Fixes for dcn32_clk_mgr implementation (git-fixes). - drm/amd/display: Include virtual signal to set k1 and k2 values (bsc#1206843). - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB (bsc#1206843). - drm/amd/display: Pass the right info to drm_dp_remove_payload (bsc#1206843). - drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes). - drm/amd/display: Properly reuse completion structure (bsc#1206843). - drm/amd/display: Reduce expected sdp bandwidth for dcn321 (bsc#1206843). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1206843). - drm/amd/display: Report to ACPI video if no panels were found (bsc#1206843). - drm/amd/display: Reset DMUB mailbox SW state after HW reset (bsc#1206843). - drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset (git-fixes). - drm/amd/display: Return error code on DSC atomic check failure (git-fixes). - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write (git-fixes). - drm/amd/display: Set dcn32 caps.seamless_odm (bsc#1206843). - drm/amd/display: Set hvm_enabled flag for S/G mode (bsc#1206843). - drm/amd/display: Simplify same effect if/else blocks (git-fixes). - drm/amd/display: Take FEC Overhead into Timeslot Calculation (bsc#1206843). - drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734). - drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 (bsc#1206843). - drm/amd/display: Uninitialized variables causing 4k60 UCLK to stay at DPM1 and not DPM0 (bsc#1206843). - drm/amd/display: Update bounding box values for DCN321 (git-fixes). - drm/amd/display: Update clock table to include highest clock setting (bsc#1206843). - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes). - drm/amd/display: Use min transition for SubVP into MPO (bsc#1206843). - drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit (bsc#1206843). - drm/amd/display: adjust MALL size available for DCN32 and DCN321 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.4 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.5 (bsc#1206843). - drm/amd/display: disconnect MPCC only on OTG change (bsc#1206843). - drm/amd/display: do not call dc_interrupt_set() for disabled crtcs (git-fixes). - drm/amd/display: fix FCLK pstate change underflow (bsc#1206843). - drm/amd/display: fix cursor offset on rotation 180 (git-fixes). - drm/amd/display: fix duplicate assignments (git-fixes). - drm/amd/display: fix flickering caused by S/G mode (git-fixes). - drm/amd/display: fix issues with driver unload (git-fixes). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1206843). - drm/amd/display: fix mapping to non-allocated address (bsc#1206843). - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes). - drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk (bsc#1206843). - drm/amd/display: move remaining FPU code to dml folder (bsc#1206843). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1206843). - drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes). - drm/amd/display: revert Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: skip commit minimal transition state (bsc#1206843). - drm/amd/display: wait for vblank during pipe programming (git-fixes). - drm/amd/pm/smu13: BACO is supported when it's in BACO state (bsc#1206843). - drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 (bsc#1206843). - drm/amd/pm: Fix output of pp_od_clk_voltage (git-fixes). - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (bsc#1206843). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1206843). - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 (bsc#1206843). - drm/amd/pm: add missing SMU13.0.0 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add missing SMU13.0.7 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 (bsc#1206843). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.4 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU13.0.0 driver_if header to version 0x34 (bsc#1206843). - drm/amd/pm: correct SMU13.0.0 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 max shader clock reporting (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct the fan speed retrieving in PWM for some SMU13 asics (bsc#1206843). - drm/amd/pm: correct the pcie link state check for SMU13 (bsc#1206843). - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation (bsc#1206843). - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 (bsc#1206843). - drm/amd/pm: enable mode1 reset on smu_v13_0_10 (bsc#1206843). - drm/amd/pm: parse pp_handle under appropriate conditions (git-fixes). - drm/amd/pm: remove unused num_of_active_display variable (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes). - drm/amd/pm: update SMU13.0.0 reported maximum shader clock (bsc#1206843). - drm/amd: Avoid ASSERT for some message failures (bsc#1206843). - drm/amd: Avoid BUG() for case of SRIOV missing IP version (bsc#1206843). - drm/amd: Delay removal of the firmware framebuffer (git-fixes). - drm/amd: Fix an out of bounds error in BIOS parser (git-fixes). - drm/amd: Fix initialization for nbio 4.3.0 (bsc#1206843). - drm/amd: Fix initialization for nbio 7.5.1 (bsc#1206843). - drm/amd: Fix initialization mistake for NBIO 7.3.0 (bsc#1206843). - drm/amdgpu/discovery: add PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable mes support for GC v11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 (bsc#1206843). - drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: set the APU flag for GC 11.0.4 (bsc#1206843). - drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments (bsc#1206843). - drm/amdgpu/display/mst: adjust the naming of mst_port and port of aconnector (bsc#1206843). - drm/amdgpu/display/mst: limit payload to be updated one by one (bsc#1206843). - drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD (bsc#1206843). - drm/amdgpu/dm/dp_mst: Do not grab mst_mgr->lock when computing DSC state (bsc#1206843). - drm/amdgpu/dm/mst: Fix uninitialized var in pre_compute_mst_dsc_configs_for_state() (bsc#1206843). - drm/amdgpu/dm/mst: Use the correct topology mgr pointer in amdgpu_dm_connector (bsc#1206843). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes). - drm/amdgpu/gfx10: Disable gfxoff before disabling powergating (git-fixes). - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes). - drm/amdgpu/mst: Stop ignoring error codes and deadlocking (bsc#1206843). - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (bsc#1206843). - drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 (bsc#1206843). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1206843). - drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 (bsc#1206843). - drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/soc21: do not expose AV1 if VCN0 is harvested (bsc#1206843). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1206843). - drm/amdgpu: Correct the power calcultion for Renior/Cezanne (git-fixes). - drm/amdgpu: Do not register backlight when another backlight should be used (v3) (bsc#1206843). - drm/amdgpu: Do not resume IOMMU after incomplete init (bsc#1206843). - drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN (bsc#1206843). - drm/amdgpu: Enable vclk dclk node for gc11.0.3 (bsc#1206843). - drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (bsc#1206843). - drm/amdgpu: Fix potential NULL dereference (bsc#1206843). - drm/amdgpu: Fix potential double free and null pointer dereference (bsc#1206843). - drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1206843). - drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes). - drm/amdgpu: Fixed bug on error when unloading amdgpu (bsc#1206843). - drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869). - drm/amdgpu: Register ACPI video backlight when skipping amdgpu backlight registration (bsc#1206843). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1206843). - drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes). - drm/amdgpu: Use the sched from entity for amdgpu_cs trace (git-fixes). - drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes). - drm/amdgpu: add gfx support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add gmc v11 support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add smu 13 support for smu 13.0.11 (bsc#1206843). - drm/amdgpu: add soc21 common ip block support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add tmz support for GC 11.0.1 (bsc#1206843). - drm/amdgpu: add tmz support for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: allow more APUs to do mode2 reset when go to S4 (bsc#1206843). - drm/amdgpu: allow multipipe policy on ASICs with one MEC (bsc#1206843). - drm/amdgpu: change gfx 11.0.4 external_id range (git-fixes). - drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes). - drm/amdgpu: correct MEC number for gfx11 APUs (bsc#1206843). - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes). - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes). - drm/amdgpu: drop experimental flag on aldebaran (git-fixes). - drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable GFX IP v11.0.4 CG support (bsc#1206843). - drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable HDP SD for gfx 11.0.3 (bsc#1206843). - drm/amdgpu: enable PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu: enable VCN DPG for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram (git-fixes). - drm/amdgpu: fix amdgpu_job_free_resources v2 (bsc#1206843). - drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv (bsc#1206843). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 (bsc#1206843). - drm/amdgpu: fix mmhub register base coding error (git-fixes). - drm/amdgpu: fix return value check in kfd (git-fixes). - drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (bsc#1206843). - drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume (git-fixes). - drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (git-fixes). - drm/amdgpu: reposition the gpu reset checking for reuse (bsc#1206843). - drm/amdgpu: set GC 11.0.4 family (bsc#1206843). - drm/amdgpu: skip ASIC reset for APUs when go to S4 (bsc#1206843). - drm/amdgpu: skip MES for S0ix as well since it's part of GFX (bsc#1206843). - drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes). - drm/amdgpu: skip mes self test after s0i3 resume for MES IP v11.0 (bsc#1206843). - drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset (git-fixes). - drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes). - drm/amdgpu: update wave data type to 3 for gfx11 (bsc#1206843). - drm/amdkfd: Add sync after creating vram bo (bsc#1206843). - drm/amdkfd: Fix BO offset for multi-VMA page migration (git-fixes). - drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU (bsc#1206843). - drm/amdkfd: Fix an illegal memory access (git-fixes). - drm/amdkfd: Fix double release compute pasid (bsc#1206843). - drm/amdkfd: Fix kfd_process_device_init_vm error handling (bsc#1206843). - drm/amdkfd: Fix the memory overrun (bsc#1206843). - drm/amdkfd: Fix the warning of array-index-out-of-bounds (bsc#1206843). - drm/amdkfd: Fixed kfd_process cleanup on module exit (git-fixes). - drm/amdkfd: Get prange->offset after svm_range_vram_node_new (git-fixes). - drm/amdkfd: Page aligned memory reserve size (bsc#1206843). - drm/amdkfd: add GC 11.0.4 KFD support (bsc#1206843). - drm/amdkfd: fix a potential double free in pqm_create_queue (git-fixes). - drm/amdkfd: fix potential kgd_mem UAFs (git-fixes). - drm/amdkfd: introduce dummy cache info for property asic (bsc#1206843). - drm/armada: Fix a potential double free in an error handling path (git-fixes). - drm/ast: Fix ARM compatibility (git-fixes). - drm/bochs: fix blanking (git-fixes). - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes). - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes). - drm/bridge: it6505: Fix return value check for pm_runtime_get_sync (git-fixes). - drm/bridge: lt8912b: Add hot plug detection (git-fixes). - drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes). - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes). - drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes). - drm/bridge: lt9611: fix HPD reenablement (git-fixes). - drm/bridge: lt9611: fix clock calculation (git-fixes). - drm/bridge: lt9611: fix polarity programming (git-fixes). - drm/bridge: lt9611: fix programming of video modes (git-fixes). - drm/bridge: lt9611: fix sleep mode setup (git-fixes). - drm/bridge: lt9611: pass a pointer to the of node (git-fixes). - drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes). - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec (git-fixes). - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (git-fixes). - drm/connector: print max_requested_bpc in state debugfs (git-fixes). - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state() (bsc#1206843). - drm/display/dp_mst: Add helper for finding payloads in atomic MST state (bsc#1206843). - drm/display/dp_mst: Add helpers for serializing SST &lt;-> MST transitions (bsc#1206843). - drm/display/dp_mst: Add nonblocking helpers for DP MST (bsc#1206843). - drm/display/dp_mst: Call them time slots, not VCPI slots (bsc#1206843). - drm/display/dp_mst: Correct the kref of port (bsc#1206843). - drm/display/dp_mst: Do not open code modeset checks for releasing time slots (bsc#1206843). - drm/display/dp_mst: Drop all ports from topology on CSNs before queueing link address work (bsc#1206843). - drm/display/dp_mst: Fix confusing docs for drm_dp_atomic_release_time_slots() (bsc#1206843). - drm/display/dp_mst: Fix down message handling after a packet reception error (git-fixes). - drm/display/dp_mst: Fix down/up message handling after sink disconnect (git-fixes). - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (git-fixes). - drm/display/dp_mst: Fix modeset tracking in drm_dp_atomic_release_vcpi_slots() (bsc#1206843). - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload() (bsc#1206843). - drm/display/dp_mst: Maintain time slot allocations when deleting payloads (bsc#1206843). - drm/display/dp_mst: Move all payload info into the atomic state (bsc#1206843). - drm/display/dp_mst: Rename drm_dp_mst_vcpi_allocation (bsc#1206843). - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (git-fixes). - drm/displayid: add displayid_get_header() and check bounds better (git-fixes). - drm/dp: Do not rewrite link config when setting phy test pattern (git-fixes). - drm/dp_mst: Avoid deleting payloads for connectors staying enabled (bsc#1206843). - drm/dp_mst: fix drm_dp_dpcd_read return value checks (git-fixes). - drm/edid: fix AVI infoframe aspect ratio handling (git-fixes). - drm/edid: fix parsing of 3D modes from HDMI VSDB (git-fixes). - drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes). - drm/exynos: fix g2d_open/close helper function definitions (git-fixes). - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes). - drm/fbdev-generic: prohibit potential out-of-bounds access (git-fixes). - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes). - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes). - drm/hyperv: Add a bug reference to two existing changes (bsc#1211281). - drm/hyperv: Add error message for fb size greater than allocated (git-fixes). - drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes). - drm/i915/active: Fix missing debug object activation (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/adlp: Fix typo for reference clock (git-fixes). - drm/i915/color: Fix typo for Plane CSC indexes (git-fixes). - drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes). - drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes). - drm/i915/dg2: Drop one PCI ID (git-fixes). - drm/i915/dg2: Support 4k@30 on HDMI (git-fixes). - drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU (git-fixes). - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes). - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes). - drm/i915/display: Check source height is > 0 (git-fixes). - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes). - drm/i915/display: clean up comments (git-fixes). - drm/i915/dmc: Update DG2 DMC version to v2.08 (git-fixes). - drm/i915/dp: prevent potential div-by-zero (git-fixes). - drm/i915/dp_mst: Fix mst_mgr lookup during atomic check (bsc#1206843). - drm/i915/dp_mst: Fix payload removal during output disabling (bsc#1206843). - drm/i915/dpt: Treat the DPT BO as a framebuffer (git-fixes). - drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() (git-fixes). - drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes). - drm/i915/gem: Flush lmem contents after construction (git-fixes). - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes). - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes). - drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes). - drm/i915/gt: perform uc late init after probe error injection (git-fixes). - drm/i915/guc: Do not capture Gen8 regs on Xe devices (git-fixes). - drm/i915/huc: always init the delayed load fence (git-fixes). - drm/i915/huc: bump timeout for delayed load and reduce print verbosity (git-fixes). - drm/i915/huc: fix leak of debug object in huc load fence on driver unload (git-fixes). - drm/i915/migrate: Account for the reserved_space (git-fixes). - drm/i915/migrate: fix corner case in CCS aux copying (git-fixes). - drm/i915/psr: Fix PSR_IMR/IIR field handling (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/pxp: use &lt;> instead of '' for headers in include/ (git-fixes). - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes). - drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes). - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes). - drm/i915: Allow switching away via vga-switcheroo if uninitialized (git-fixes). - drm/i915: Avoid potential vm use-after-free (git-fixes). - drm/i915: Disable DC states for all commits (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Fix NULL ptr deref by checking new_crtc_state (git-fixes). - drm/i915: Fix VBT DSI DVO port handling (git-fixes). - drm/i915: Fix context runtime accounting (git-fixes). - drm/i915: Fix fast wake AUX sync len (git-fixes). - drm/i915: Fix potential bit_17 double-free (git-fixes). - drm/i915: Fix potential context UAFs (git-fixes). - drm/i915: Fix request ref counting during error capture & debugfs dump (git-fixes). - drm/i915: Fix up locking around dumping requests lists (git-fixes). - drm/i915: Initialize the obj flags for shmem objects (git-fixes). - drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes). - drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on skl/glk (git-fixes). - drm/i915: Move fd_install after last use of fence (git-fixes). - drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes). - drm/i915: Remove __maybe_unused from mtl_info (git-fixes). - drm/i915: Remove unused bits of i915_vma/active api (git-fixes). - drm/i915: Remove unused variable (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: move a Kconfig symbol to unbreak the menu presentation (git-fixes). - drm/i915: stop abusing swiotlb_max_segment (git-fixes). - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes). - drm/mediatek: Clean dangling pointer on bind error path (git-fixes). - drm/mediatek: Drop unbalanced obj unref (git-fixes). - drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes). - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes). - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes). - drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes). - drm/meson: fix missing component unbind on bind errors (git-fixes). - drm/meson: reorder driver deinit sequence to fix use-after-free bug (git-fixes). - drm/mgag200: Fix gamma lut not initialized (git-fixes). - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes). - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes). - drm/msm/a5xx: fix context faults during ring switch (git-fixes). - drm/msm/a5xx: fix highest bank bit for a530 (git-fixes). - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes). - drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes). - drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage (git-fixes). - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (git-fixes). - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes). - drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error (git-fixes). - drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at gpu load (git-fixes). - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes). - drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes). - drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes). - drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training (git-fixes). - drm/msm/dp: unregister audio driver during unbind (git-fixes). - drm/msm/dpu: Add INTF_5 interrupts (git-fixes). - drm/msm/dpu: Add check for cstate (git-fixes). - drm/msm/dpu: Add check for pstates (git-fixes). - drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes). - drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes). - drm/msm/dpu: Reject topologies for which no DSC blocks are available (git-fixes). - drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes). - drm/msm/dpu: Remove num_enc from topology struct in favour of num_dsc (git-fixes). - drm/msm/dpu: Wire up DSC mask for active CTL configuration (git-fixes). - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (git-fixes). - drm/msm/dpu: clear DSPP reservations in rm release (git-fixes). - drm/msm/dpu: disable features unsupported by QCM2290 (git-fixes). - drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK (git-fixes). - drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes). - drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks (git-fixes). - drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes). - drm/msm/dpu: sc7180: add missing WB2 clock control (git-fixes). - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes). - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/dsi: Allow 2 CTRLs on v2.5.0 (git-fixes). - drm/msm/gem: Add check for kmalloc (git-fixes). - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/mdp5: Add check for kzalloc (git-fixes). - drm/msm/mdp5: fix reading hw revision on db410c platform (git-fixes). - drm/msm: Be more shouty if per-process pgtables are not working (git-fixes). - drm/msm: Fix potential invalid ptr free (git-fixes). - drm/msm: Set max segment size earlier (git-fixes). - drm/msm: clean event_thread->worker in case of an error (git-fixes). - drm/msm: fix NULL-deref on irq uninstall (git-fixes). - drm/msm: fix NULL-deref on snapshot tear down (git-fixes). - drm/msm: fix drm device leak on bind errors (git-fixes). - drm/msm: fix missing wq allocation error handling (git-fixes). - drm/msm: fix vram leak on bind errors (git-fixes). - drm/msm: fix workqueue leak on bind errors (git-fixes). - drm/msm: use strscpy instead of strncpy (git-fixes). - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes). - drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes). - drm/nouveau/kms/nv50-: remove unused functions (git-fixes). - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes). - drm/nouveau/kms: Cache DP encoders in nouveau_connector (bsc#1206843). - drm/nouveau/kms: Pull mst state in for all modesets (bsc#1206843). - drm/omap: dsi: Fix excessive stack usage (git-fixes). - drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes). - drm/panel: novatek-nt35950: Improve error handling (git-fixes). - drm/panel: novatek-nt35950: Only unregister DSI1 if it exists (git-fixes). - drm/panel: otm8009a: Set backlight parent to panel device (git-fixes). - drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes). - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes). - drm/probe-helper: Cancel previous job before starting new one (git-fixes). - drm/radeon: Drop legacy MST support (bsc#1206843). - drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes). - drm/radeon: free iio for atombios when driver shutdown (git-fixes). - drm/radeon: reintroduce radeon_dp_work_func content (git-fixes). - drm/rockchip: Drop unbalanced obj unref (git-fixes). - drm/sched: Remove redundant check (git-fixes). - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() (git-fixes). - drm/shmem-helper: Remove another errant put in error path (git-fixes). - drm/shmem-helper: Revert accidental non-GPL export (git-fixes). - drm/sun4i: fix missing component unbind on bind errors (git-fixes). - drm/tegra: Avoid potential 32-bit integer overflow (git-fixes). - drm/tegra: firewall: Check for is_addr_reg existence in IMM check (git-fixes). - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes). - drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes). - drm/ttm: Fix a NULL pointer dereference (git-fixes). - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (git-fixes). - drm/ttm: optimize pool allocations a bit v2 (git-fixes). - drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking (git-fixes). - drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: drv: Call component_unbind_all() (git-fixes). - drm/vc4: hdmi: Correct interlaced timings again (git-fixes). - drm/vc4: hdmi: make CEC adapter name unique (git-fixes). - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes). - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 (git-fixes). - drm/vc4: hvs: Set AXI panic modes (git-fixes). - drm/vc4: kms: Sort the CRTCs by output before assigning them (git-fixes). - drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes). - drm/vgem: add missing mutex_destroy (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - drm/virtio: exbuf->fence_fd unmodified on interrupted wait (git-fixes). - drm/vkms: Fix memory leak in vkms_init() (git-fixes). - drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes). - drm/vmwgfx: Do not drop the reference to the handle too soon (git-fixes). - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (git-fixes). - drm/vmwgfx: Fix race issue calling pin_user_pages (git-fixes). - drm/vmwgfx: Stop accessing buffer objects which failed init (git-fixes). - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes). - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes). - drm: amd: display: Fix memory leakage (git-fixes). - drm: bridge: adv7511: unregister cec i2c device after cec adapter (git-fixes). - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags (git-fixes). - drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes). - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC (git-fixes). - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes). - drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes). - drm: tidss: Fix pixel format definition (git-fixes). - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes). - dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes). - dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes). - dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes). - dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes). - dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes). - dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes). - dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes). - dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes). - dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes). - dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes). - dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes). - dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes). - dt-bindings: power: renesas,apmu: Fix cpus property limits (git-fixes). - dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes). - dt-bindings: remoteproc: st,stm32-rproc: Fix phandle-array parameters description (git-fixes). - dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes). - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes). - dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes). - dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes). - dt-bindings: usb: snps,dwc3: Fix 'snps,hsphy_interface' type (git-fixes). - e1000e: Disable TSO on i219-LM card to increase speed (git-fixes). - eeprom: at24: also select REGMAP (git-fixes). - eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes). - efi/x86: libstub: Fix typo in __efi64_argmap* name (git-fixes). - efi: Accept version 2 of memory attributes table (git-fixes). - efi: efivars: Fix variable writes with unsupported query_variable_store() (git-fixes). - efi: efivars: Fix variable writes without query_variable_store() (git-fixes). - efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes). - efi: rt-wrapper: Add missing include (git-fixes). - efi: ssdt: Do not free memory if ACPI table was loaded successfully (git-fixes). - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes). - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes). - elevator: update the document of elevator_switch (git-fixes). - ethernet: 3com/typhoon: do not write directly to netdev->dev_addr (git-fixes). - ethernet: 8390/etherh: do not write directly to netdev->dev_addr (git-fixes). - ethernet: i825xx: do not write directly to netdev->dev_addr (git-fixes). - ethernet: ice: avoid gcc-9 integer overflow warning (jsc#PED-376). - ethernet: seeq/ether3: do not write directly to netdev->dev_addr (git-fixes). - ethernet: tundra: do not write directly to netdev->dev_addr (git-fixes). - exit: Add and use make_task_dead (bsc#1207328). - exit: Allow oops_limit to be disabled (bsc#1207328). - exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328). - exit: Move force_uaccess back into do_exit (bsc#1207328). - exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328). - exit: Put an upper limit on how often we can oops (bsc#1207328). - exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328). - exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328). - ext4,f2fs: fix readahead of verity data (bsc#1207648). - ext4: Fix deadlock during directory rename (bsc#1210763). - ext4: Fix possible corruption when moving a directory (bsc#1210763). - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add helper to check quota inums (bsc#1207618). - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617). - ext4: add missing validation of fast-commit record lengths (bsc#1207626). - ext4: allocate extended attribute value in vmalloc area (bsc#1207635). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid resizing to a partial cluster size (bsc#1206880). - ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634). - ext4: continue to expand file system when the target size does not reach (bsc#1206882). - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592). - ext4: correct max_inline_xattr_value_size computing (bsc#1206878). - ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878). - ext4: disable fast-commit of encrypted dir operations (bsc#1207623). - ext4: do not allow journal inode to have encrypt flag (bsc#1207621). - ext4: do not increase iversion counter for ea_inodes (bsc#1207605). - ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603). - ext4: do not set up encryption key during jbd2 transaction (bsc#1207624). - ext4: drop ineligible txn start stop APIs (bsc#1207588). - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606). - ext4: factor out ext4_fc_get_tl() (bsc#1207615). - ext4: fast commit may miss file actions (bsc#1207591). - ext4: fast commit may not fallback for ineligible commit (bsc#1207590). - ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886). - ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766). - ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767). - ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076). - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1206881). - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620). - ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594). - ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765). - ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891). - ext4: fix deadlock due to mbcache entry corruption (bsc#1207653). - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631). - ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608). - ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630). - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593). - ext4: fix extent status tree race in writeback error recovery path (bsc#1206877). - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764). - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636). - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894). - ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625). - ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609). - ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884). - ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628). - ext4: fix possible double unlock when moving a directory (bsc#1210763). - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611). - ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612). - ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616). - ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637). - ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627). - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890). - ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893). - ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888). - ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622). - ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878). - ext4: fix warning in 'ext4_da_release_space' (bsc#1206887). - ext4: goto right label 'failed_mount3a' (bsc#1207610). - ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629). - ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633). - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614). - ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602). - ext4: make ext4_lazyinit_thread freezable (bsc#1206885). - ext4: place buffer head allocation before handle start (bsc#1207607). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - ext4: simplify updating of fast commit stats (bsc#1207589). - ext4: unconditionally enable the i_version counter (bsc#1211299). - ext4: update 'state->fc_regions_size' after successful memory allocation (bsc#1207613). - ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876). - ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793). - extcon: usbc-tusb320: fix kernel-doc warning (git-fixes). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (git-fixes). - fbcon: Fix error paths in set_con2fb_map (git-fixes). - fbcon: Fix null-ptr-deref in soft_cursor (git-fixes). - fbcon: set_con2fb_map needs to set con2fb_map! (git-fixes). - fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472). - fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes). - fbdev: au1200fb: Fix potential divide by zero (git-fixes). - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes). - fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387). - fbdev: intelfb: Fix potential divide by zero (git-fixes). - fbdev: lxfb: Fix potential divide by zero (git-fixes). - fbdev: mmp: Fix deferred clk handling in mmphw_probe() (git-fixes). - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes). - fbdev: nvidia: Fix potential divide by zero (git-fixes). - fbdev: omapfb: avoid stack overflow warning (git-fixes). - fbdev: omapfb: cleanup inconsistent indentation (git-fixes). - fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes). - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes). - fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes). - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes). - fbdev: tgafb: Fix potential divide by zero (git-fixes). - fbdev: udlfb: Fix endpoint check (git-fixes). - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes). - filelock: new helper: vfs_inode_has_locks (jsc#SES-1880). - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes). - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes). - firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes). - firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes). - firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes). - firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes). - firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes). - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes). - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes). - firmware: qcom_scm: Clear download bit during reboot (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes). - firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes). - flow_dissector: Do not count vlan tags inside tunnel payload (git-fixes). - fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258). - fotg210-udc: Add missing completion handler (git-fixes). - fpga: bridge: fix kernel-doc parameter description (git-fixes). - fpga: bridge: properly initialize bridge device before populating children (git-fixes). - fpga: m10bmc-sec: Fix probe rollback (git-fixes). - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes). - fprobe: Check rethook_alloc() return in rethook initialization (git-fixes). - fprobe: Fix smatch type mismatch warning (git-fixes). - fprobe: add recursion detection in fprobe_exit_handler (git-fixes). - fprobe: make fprobe_kprobe_handler recursion free (git-fixes). - fs/jfs: fix shift exponent db_agl2size negative (git-fixes). - fs: account for filesystem mappings (bsc#1205191). - fs: account for group membership (bsc#1205191). - fs: add i_user_ns() helper (bsc#1205191). - fs: dlm: do not call kernel_getpeername() in error_report() (bsc#1208130). - fs: dlm: use sk->sk_socket instead of con->sock (bsc#1208130). - fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632). - fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes). - fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes). - fs: move mapping helpers (bsc#1205191). Refresh patches.suse/nfs-set-acl-perm.patch. - fs: remove __sync_filesystem (git-fixes). - fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes). - fs: tweak fsuidgid_has_mapping() (bsc#1205191). - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (bsc#1210409). - fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429). - ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes). - ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes). - ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes). - fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759). - fuse: always revalidate rename target dentry (bsc#1211808). - fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807). - futex: Resend potentially swallowed owner death notification (git-fixes). - genirq: Provide new interfaces for affinity hints (bsc#1208153). - git-sort: Add io_uring 6.3 fixes remote - google/gve:fix repeated words in comments (bsc#1211519). - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes). - gpio: davinci: Add irq chip flag to skip set wake (git-fixes). - gpio: mockup: Fix mode of debugfs files (git-fixes). - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes). - gpio: vf610: connect GPIO label to dev name (git-fixes). - gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes). - gpu: host1x: Fix mask for syncpoint increment register (git-fixes). - gpu: host1x: Fix potential double free if IOMMU is disabled (git-fixes). - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes). - gve: Adding a new AdminQ command to verify driver (bsc#1211519). - gve: Cache link_speed value from device (git-fixes). - gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519). - gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519). - gve: Handle alternate miss completions (bsc#1211519). - gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519). - gve: Remove the code of clearing PBA bit (git-fixes). - gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes). - gve: enhance no queue page list detection (bsc#1211519). - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes). - hfs/hfsplus: use WARN_ON for sanity check (git-fixes). - hfs: Fix OOB Write in hfs_asc2mac (git-fixes). - hfs: fix OOB Read in __hfs_brec_find (git-fixes). - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes). - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes). - hid: bigben_probe(): validate report count (git-fixes). - hv: fix comment typo in vmbus_channel/low_latency (git-fixes). - hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes). - hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes). - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes). - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes). - hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes). - hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes). - hwmon: (coretemp) Simplify platform device handling (git-fixes). - hwmon: (ftsteutates) Fix scaling of measurements (git-fixes). - hwmon: (ina3221) return prober error code (git-fixes). - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes). - hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848). - hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes). - hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes). - hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes). - hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes). - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes). - hwmon: fix potential sensor registration fail if of_node is missing (git-fixes). - hwmon: tmp512: drop of_match_ptr for ID table (git-fixes). - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes). - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes). - i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes). - i2c: hisi: Avoid redundant interrupts (git-fixes). - i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes). - i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes). - i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes). - i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes). - i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes). - i2c: mv64xxx: Remove shutdown method from driver (git-fixes). - i2c: mxs: suppress probe-deferral error message (git-fixes). - i2c: ocores: generate stop condition after timeout in polling mode (git-fixes). - i2c: omap: Fix standard mode false ACK readings (git-fixes). - i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes). - i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes). - i2c: tegra: Fix PEC support for SMBUS block read (git-fixes). - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes). - i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378). - i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378). - i40e: Fix DMA mappings leak (jsc#SLE-18378). - i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378). - i40e: Fix VF set max MTU size (jsc#SLE-18378). - i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378). - i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378). - i40e: Fix calculating the number of queue pairs (jsc#SLE-18378). - i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378). - i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378). - i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378). - i40e: Fix for VF MAC address 0 (jsc#SLE-18378). - i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378). - i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378). - i40e: Fix kernel crash during module removal (jsc#SLE-18378). - i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378). - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378). - i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378). - i40e: Refactor tc mqprio checks (jsc#SLE-18378). - i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378). - i40e: fix accessing vsi->active_filters without holding lock (jsc#SLE-18378). - i40e: fix flow director packet filter programming (jsc#SLE-18378). - i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378). - i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378). - i825xx: sni_82596: use eth_hw_addr_set() (git-fixes). - i915 kABI workaround (git-fixes). - i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes). - iavf/iavf_main: actually log ->src mask when talking about it (jsc#SLE-18385). - iavf: Detach device during reset task (jsc#SLE-18385). - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385). - iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385). - iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385). - iavf: Fix a crash during reset task (jsc#SLE-18385). - iavf: Fix bad page state (jsc#SLE-18385). - iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385). - iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385). - iavf: Fix max_rate limiting (jsc#SLE-18385). - iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385). - iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385). - iavf: do not track VLAN 0 filters (jsc#PED-835). - iavf: fix hang on reboot with ice (jsc#SLE-18385). - iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385). - iavf: fix temporary deadlock and failure to set MAC address (jsc#PED-835). - iavf: refactor VLAN filter states (jsc#PED-835). - iavf: remove active_cvlans and active_svlans bitmaps (jsc#PED-835). - iavf: schedule watchdog immediately when changing primary MAC (jsc#PED-835). - ice: Add check for kzalloc (jsc#PED-376). - ice: Call Trace after rmmod ice (bsc#1208628). - ice: Fix disabling Rx VLAN filtering with port VLAN enabled (jsc#PED-376). - ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375). - ice: Fix potential memory leak in ice_gnss_tty_write() (jsc#PED-376). - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375). - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158). - ice: move devlink port creation/deletion (jsc#PED-376). - ice: xsk: Fix cleaning of XDP_TX frames (jsc#PED-376). - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (jsc#PED-376). - ieee80211: add TWT element definitions (bsc#1209980). - igb: Add lock to avoid data race (jsc#SLE-18379). - igb: Enable SR-IOV after reinit (jsc#SLE-18379). - igb: Fix PPS input and output using 3rd and 4th SDP (jsc#PED-370). - igb: Initialize mailbox message for VF reset (jsc#SLE-18379). - igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379). - igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379). - igbvf: Regard vf reset nack as success (jsc#SLE-18379). - igc: Add checking for basetime less than zero (jsc#SLE-18377). - igc: Add ndo_tx_timeout support (jsc#SLE-18377). - igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377). - igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377). - igc: Lift TAPRIO schedule restriction (jsc#SLE-18377). - igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377). - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377). - igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377). - igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377). - igc: fix the validation logic for taprio's gate list (jsc#SLE-18377). - igc: read before write to SRRCTL register (jsc#SLE-18377). - igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377). - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes). - iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes). - iio: adc: ad7192: Change 'shorted' channels to differential (git-fixes). - iio: adc: ad7791: fix IRQ flags (git-fixes). - iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes). - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes). - iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes). - iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes). - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes). - iio: adc: stm32-dfsdm: fill module aliases (git-fixes). - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes). - iio: adis16480: select CONFIG_CRC32 (git-fixes). - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes). - iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes). - iio: hid: fix the retval in accel_3d_capture_sample (git-fixes). - iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes). - iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes). - iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes). - iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes). - iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes). - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes). - iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes). - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes). - iio: imu: inv_icm42600: fix timestamp reset (git-fixes). - iio: light: cm32181: Unregister second I2C client if present (git-fixes). - iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes). - iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes). - iio: light: vcnl4035: fixed chip ID check (git-fixes). - iio:adc:twl6030: Enable measurement of VAC (git-fixes). - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes). - ima: Fix memory leak in __ima_inode_hash() (git-fixes). - intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379). - intel_idle: add Emerald Rapids Xeon support (PED-3849). - interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes). - interconnect: fix mem leak when freeing nodes (git-fixes). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes). - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128 (git-fixes). - io_uring/kbuf: fix not advancing READV kbuf ring (git-fixes). - io_uring: ensure that cached task references are always put on exit (git-fixes). - io_uring: fix CQ waiting timeout handling (git-fixes). - io_uring: fix fget leak when fs do not support nowait buffered read (bsc#1205205). - io_uring: fix ordering of args in io_uring_queue_async_work (git-fixes). - io_uring: recycle kbuf recycle on tw requeue (git-fixes). - iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes). - iommu/vt-d: Add a fix for devices need extra dtlb flush (bsc#1208219). - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode (bsc#1208948). - iommu/vt-d: Fix buggy QAT device mask (bsc#1208219). - ipmi: fix SSIF not responding under certain cond (git-fixes). - ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459). - ipmi:ssif: Add a timer between request retries (bsc#1206459). - ipmi:ssif: Add send_retries increment (git-fixes). - ipmi:ssif: Increase the message retry time (bsc#1206459). - ipmi:ssif: Remove rtc_us_timer (bsc#1206459). - ipmi:ssif: resend_msg() cannot fail (bsc#1206459). - ipmi_ssif: Rename idle state and check (bsc#1206459). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes) - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes) - iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553). - ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384). - ixgbe: Enable setting RSS table to default values (jsc#SLE-18384). - ixgbe: Fix panic during XDP_TX with > 64 CPUs (jsc#SLE-18384). - ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384). - ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384). - ixgbe: fix pci device refcount leak (jsc#SLE-18384). - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384). - jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590). - jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641). - jbd2: fix potential buffer head reference count leak (bsc#1207644). - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645). - jbd2: use the correct print format (git-fixes). - jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643). - jfs: Fix fortify moan in symlink (git-fixes). - k-m-s: Drop Linux 2.6 support - kABI compatibility workaround for efivars (git-fixes). - kABI workaround for btbcm.c (git-fixes). - kABI workaround for drm_dp_mst helper updates (bsc#1206843). - kABI workaround for hid quirks (git-fixes). - kABI workaround for ieee80211 and co (bsc#1209980). - kABI workaround for mt76_poll_msec() (git-fixes). - kABI workaround for struct acpi_ec (bsc#1207149). - kABI workaround for xhci (git-fixes). - kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest (git-fixes) - kABI: Fixed broken 3rd party dirvers issue (bsc#1208050 bsc#1211414). - kABI: PCI: Reduce warnings on possible RW1C corruption (kabi). - kABI: PCI: dwc: Add dw_pcie_ops.host_deinit() callback (kabi). - kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi). - kABI: Preserve TRACE_EVENT_FL values (git-fixes). - kABI: Work around kABI changes after '20347fca71a3 swiotlb: split up the global swiotlb lock' (jsc#PED-3259). - kABI: fix kabi breakage (bsc#1210206). - kABI: x86/msi: Fix msi message data shadow struct (kabi). - kABI: x86/msr: Remove .fixup usage (kabi). - kabi/severities: add mlx5 internal symbols - kabi/severities: added Microsoft mana symbold (bsc#1210551) - kabi/severities: ignore KABI for NVMe target (bsc#1174777) - kabi/severities: ignore kABI changes for mt76/* local modules (bsc#1209980) - kasan: no need to unset panic_on_warn in end_report() (bsc#1207328). - kconfig: Update config changed flag before calling callback (git-fixes). - kernel-binary: install expoline.o (boo#1210791 bsc#1211089) - kernel-docs: Add missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). - kernel: Avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529). - kernel: Do not sign the vanilla kernel (bsc#1209008). - kernel: Fix page corruption caused by racy check in __free_pages (bsc#1208149). - kernel: fix panic loop (bsc#1208290). - kernel: secureboot: fix kernel lock issue (bsc#1198101, bsc#1208976). - keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes). - keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes). - kvm/vfio: Fix potential deadlock on vfio group_lock (git-fixes) - kvm/vfio: Fix potential deadlock problem in vfio (git-fixes) - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes). - lan78xx: Add missing return code checks (git-fixes). - lan78xx: Fix exception on link speed change (git-fixes). - lan78xx: Fix memory allocation bug (git-fixes). - lan78xx: Fix partial packet errors on suspend/resume (git-fixes). - lan78xx: Fix race condition in disconnect handling (git-fixes). - lan78xx: Fix race conditions in suspend/resume handling (git-fixes). - lan78xx: Fix white space and style issues (git-fixes). - lan78xx: Remove unused pause frame queue (git-fixes). - lan78xx: Remove unused timer (git-fixes). - lan78xx: Set flow control threshold to prevent packet loss (git-fixes). - leds: Fix reference to led_set_brightness() in doc (git-fixes). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes). - leds: led-class: Add missing put_device() to led_put() (git-fixes). - leds: led-core: Fix refcount leak in of_led_get() (git-fixes). - leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes). - lib/mpi: Fix buffer overrun when SG is too long (git-fixes). - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (git-fixes). - lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes). - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes). - lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes). - locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998, bsc#1206552). - locking/rwbase: Mitigate indefinite writer starvation. Move out of sorted as the patch has moved within the tip tree. - locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes). - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270). - locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270). - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270). - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270). - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270). - locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270). - locking/rwsem: Make handoff bit handling more consistent (bsc#1207270). - locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270). - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270). - locking: Add missing __sched attributes (bsc#1207270). - loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes). - loop: fix ioctl calls using compat_loop_info (git-fixes). - mac80211: introduce individual TWT support in AP mode (bsc#1209980). - mac80211: introduce set_radar_offchan callback (bsc#1209980). - mac80211: twt: do not use potentially unaligned pointer (bsc#1209980). - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes). - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes). - mailbox: zynqmp: Fix IPI isr handling (git-fixes). - mailbox: zynqmp: Fix typo in IPI documentation (git-fixes). - mbcache: Avoid nesting of cache->c_list_lock under bit locks (bsc#1207647). - mbcache: Fixup kABI of mb_cache_entry (bsc#1207653). - mce: fix set_mce_nospec to always unmap the whole page (git-fixes). - md/bitmap: Fix bitmap chunk size overflow issues (git-fixes). - md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes). - md/raid5: Improve performance for sequential IO (bsc#1208081). - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes). - md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes). - md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes). - md: fix a crash in mempool_free (git-fixes). - md: protect md_unregister_thread from reentrancy (git-fixes). - media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes). - media: coda: Add check for dcoda_iram_alloc (git-fixes). - media: coda: Add check for kmalloc (git-fixes). - media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes). - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes). - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes). - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes). - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes). - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes). - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes). - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes). - media: dvb_ca_en50221: fix a size write bug (git-fixes). - media: dvb_demux: fix a bug for the continuity counter (git-fixes). - media: i2c: imx219: Fix binning for RAW8 capture (git-fixes). - media: i2c: imx219: Split common registers from mode tables (git-fixes). - media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes). - media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes). - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes). - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes). - media: m5mols: fix off-by-one loop termination error (git-fixes). - media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes). - media: max9286: Free control handler (git-fixes). - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes). - media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes). - media: netup_unidvb: fix use-after-free at del_timer() (git-fixes). - media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes). - media: ov5640: Fix analogue gain control (git-fixes). - media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes). - media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes). - media: platform: ti: Add missing check for devm_regulator_get (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes). - media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes). - media: rc: gpio-ir-recv: add remove function (git-fixes). - media: rcar_fdp1: Fix the correct variable assignments (git-fixes). - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes). - media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes). - media: saa7134: Use video_unregister_device for radio_dev (git-fixes). - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes). - media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes). - media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes). - media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes). - media: uvcvideo: Check controls flags before accessing them (git-fixes). - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes). - media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes). - media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes). - media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes). - media: uvcvideo: Handle cameras with invalid descriptors (git-fixes). - media: uvcvideo: Handle errors from calls to usb_string (git-fixes). - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes). - media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes). - media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes). - media: uvcvideo: Use control names from framework (git-fixes). - media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes). - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes). - media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes). - media: venus: dec: Fix handling of the start cmd (git-fixes). - mei: bus-fixup:upon error print return values of send and receive (git-fixes). - mei: bus: fix unlink on bus in error path (git-fixes). - mei: me: add meteor lake point M DID (git-fixes). - mei: pxp: Use correct macros to initialize uuid_le (git-fixes). - memstick: fix memory leak if card device is never registered (git-fixes). - memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449). - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes). - mfd: cs5535: Do not build on UML (git-fixes). - mfd: dln2: Fix memory leak in dln2_probe() (git-fixes). - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes). - mfd: tqmx86: Correct board names for TQMxE39x (git-fixes). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes). - misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes). - misc: enclosure: Fix doc for enclosure_find() (git-fixes). - misc: fastrpc: reject new invocations during device removal (git-fixes). - misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes). - mkinitrd: fix dependency with dracut (bsc#1202353). - mlxsw: minimal: Fix deadlock in ports creation (git-fixes). - mlxsw: spectrum: Allow driver to load with old firmware versions (git-fixes). - mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768). - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769). - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262). - mm: memcg: fix swapcached stat accounting (bsc#1209804). - mm: mmap: remove newline at the end of the trace (git-fixes). - mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034). - mm: take a page reference when removing device exclusive entries (bsc#1211025). - mmc: atmel-mci: fix race between stop command and start of next command (git-fixes). - mmc: block: Remove error check of hw_reset on reset (git-fixes). - mmc: block: ensure error propagation for non-blk (git-fixes). - mmc: jz4740: Work around bug on JZ4760(B) (git-fixes). - mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes). - mmc: sdhci-esdhc-imx: make 'no-mmc-hs400' works (git-fixes). - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes). - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes). - mmc: sdhci_am654: lower power-on failed message severity (git-fixes). - mmc: sdio: fix possible resource leaks in some error paths (git-fixes). - mmc: vub300: fix invalid response handling (git-fixes). - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - mt76: Make use of the helper macro kthread_run() (bsc#1209980). - mt76: Print error message when reading EEPROM from mtd failed (bsc#1209980). - mt76: add 6GHz support (bsc#1209980). - mt76: add MT_RXQ_MAIN_WA for mt7916 (bsc#1209980). - mt76: add support for setting mcast rate (bsc#1209980). - mt76: allow drivers to drop rx packets early (bsc#1209980). - mt76: clear sta powersave flag after notifying driver (bsc#1209980). - mt76: connac: add 6 GHz support for wtbl and starec configuration (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss (bsc#1209980). - mt76: connac: add support for limiting to maximum regulatory Tx power (bsc#1209980). - mt76: connac: add support for passing the cipher field in bss_info (bsc#1209980). - mt76: connac: adjust wlan_idx size from u8 to u16 (bsc#1209980). - mt76: connac: align MCU_EXT definitions with 7915 driver (bsc#1209980). - mt76: connac: enable 6GHz band for hw scan (bsc#1209980). - mt76: connac: enable hw amsdu @ 6GHz (bsc#1209980). - mt76: connac: extend mcu_get_nic_capability (bsc#1209980). - mt76: connac: fix a theoretical NULL pointer dereference in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: fix last_chan configuration in mt76_connac_mcu_rate_txpower_band (bsc#1209980). - mt76: connac: fix unresolved symbols when CONFIG_PM is unset (bsc#1209980). - mt76: connac: introduce MCU_CE_CMD macro (bsc#1209980). - mt76: connac: introduce MCU_EXT macros (bsc#1209980). - mt76: connac: introduce MCU_UNI_CMD macro (bsc#1209980). - mt76: connac: introduce is_connac_v1 utility routine (bsc#1209980). - mt76: connac: make read-only array ba_range static const (bsc#1209980). - mt76: connac: move mcu reg access utility routines in mt76_connac_lib module (bsc#1209980). - mt76: connac: move mt76_connac_chan_bw in common code (bsc#1209980). - mt76: connac: move mt76_connac_lmac_mapping in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_add_key in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_basic_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_ext_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_omac_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_gen_dl_mode in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_get_cipher in common code (bsc#1209980). - mt76: connac: move mt76_connac_mcu_rdd_cmd in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_restart in common module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_set_pm in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_wtbl_update_hdr_trans in connac module (bsc#1209980). - mt76: connac: rely on MCU_CMD macro (bsc#1209980). - mt76: connac: rely on le16_add_cpu in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - mt76: connac: remove MCU_FW_PREFIX bit (bsc#1209980). - mt76: connac: remove PHY_MODE_AX_6G configuration in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2} (bsc#1209980). - mt76: connac: set 6G phymode in single-sku support (bsc#1209980). - mt76: debugfs: fix queue reporting for mt76-usb (bsc#1209980). - mt76: debugfs: improve queue node readability (bsc#1209980). - mt76: disable BH around napi_schedule() calls (bsc#1209980). - mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs (bsc#1209980). - mt76: do not always copy ethhdr in reverse_frag0_hdr_trans (bsc#1209980). - mt76: do not reset MIB counters in get_stats callback (bsc#1209980). - mt76: eeprom: tolerate corrected bit-flips (bsc#1209980). - mt76: fill boottime_ns in Rx path (bsc#1209980). - mt76: fix antenna config missing in 6G cap (bsc#1209980). - mt76: fix boolreturn.cocci warnings (bsc#1209980). - mt76: fix dfs state issue with 160 MHz channels (bsc#1209980). - mt76: fix endianness errors in reverse_frag0_hdr_trans (bsc#1209980). - mt76: fix invalid rssi report (bsc#1209980). - mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi (bsc#1209980). - mt76: fix monitor rx FCS error in DFS channel (bsc#1209980). - mt76: fix possible OOB issue in mt76_calculate_default_rate (bsc#1209980). - mt76: fix possible pktid leak (bsc#1209980). - mt76: fix the wiphy's available antennas to the correct value (bsc#1209980). - mt76: fix timestamp check in tx_status (bsc#1209980). - mt76: fix tx status related use-after-free race on station removal (bsc#1209980). - mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes). - mt76: fix wrong HE data rate in sniffer tool (bsc#1209980). - mt76: improve signal strength reporting (bsc#1209980). - mt76: introduce packet_id idr (bsc#1209980). - mt76: make mt76_sar_capa static (bsc#1209980). - mt76: move mt76_ethtool_worker_info in mt76 module (bsc#1209980). - mt76: move mt76_sta_stats in mt76.h (bsc#1209980). - mt76: move sar utilities to mt76-core module (bsc#1209980). - mt76: move sar_capa configuration in common code (bsc#1209980). - mt76: move spin_lock_bh to spin_lock in tasklet (bsc#1209980). - mt76: mt7603: improve reliability of tx powersave filtering (bsc#1209980). - mt76: mt7603: introduce SAR support (bsc#1209980). - mt76: mt7615: add support for LG LGSBWAC02 (MT7663BUN) (bsc#1209980). - mt76: mt7615: apply cached RF data for DBDC (bsc#1209980). - mt76: mt7615: clear mcu error interrupt status on mt7663 (bsc#1209980). - mt76: mt7615: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7615: fix compiler warning on frame size (bsc#1209980). - mt76: mt7615: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7615: fix throughput regression on DFS channels (bsc#1209980). - mt76: mt7615: fix unused tx antenna mask in testmode (bsc#1209980). - mt76: mt7615: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7615: honor ret from mt7615_mcu_restart in mt7663u_mcu_init (bsc#1209980). - mt76: mt7615: in debugfs queue stats, skip wmm index 3 on mt7663 (bsc#1209980). - mt76: mt7615: introduce SAR support (bsc#1209980). - mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module (bsc#1209980). - mt76: mt7615: remove dead code in get_omac_idx (bsc#1209980). - mt76: mt7615: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7615e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7663: disable 4addr capability (bsc#1209980). - mt76: mt7663s: flush runtime-pm queue after waking up the device (bsc#1209980). - mt76: mt7663s: rely on mcu reg access utility (bsc#1209980). - mt76: mt7663u: introduce mt7663u_mcu_power_on routine (bsc#1209980). - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (bsc#1209980). - mt76: mt76x02: improve tx hang detection (bsc#1209980). - mt76: mt76x02: introduce SAR support (bsc#1209980). - mt76: mt76x02: use mt76_phy_dfs_state to determine radar detector state (bsc#1209980). - mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset (bsc#1209980). - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() (bsc#1209980). - mt76: mt7915: Fix channel state update error issue (bsc#1209980). - mt76: mt7915: add 6 GHz support (bsc#1209980). - mt76: mt7915: add HE-LTF into fixed rate command (bsc#1209980). - mt76: mt7915: add LED support (bsc#1209980). - mt76: mt7915: add WA firmware log support (bsc#1209980). - mt76: mt7915: add control knobs for thermal throttling (bsc#1209980). - mt76: mt7915: add debugfs knobs for MCU utilization (bsc#1209980). - mt76: mt7915: add default calibrated data support (bsc#1209980). - mt76: mt7915: add device id for mt7916 (bsc#1209980). - mt76: mt7915: add ethtool stats support (bsc#1209980). - mt76: mt7915: add firmware support for mt7916 (bsc#1209980). - mt76: mt7915: add mib counters to ethtool stats (bsc#1209980). - mt76: mt7915: add missing DATA4_TB_SPTL_REUSE1 to mt7915_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7915: add more MIB registers (bsc#1209980). - mt76: mt7915: add mt7915_mmio_probe() as a common probing function (bsc#1209980). - mt76: mt7915: add mt7916 calibrated data support (bsc#1209980). - mt76: mt7915: add mu-mimo and ofdma debugfs knobs (bsc#1209980). - mt76: mt7915: add some per-station tx stats to ethtool (bsc#1209980). - mt76: mt7915: add support for MT7986 (bsc#1209980). - mt76: mt7915: add support for passing chip/firmware debug data to user space (bsc#1209980). - mt76: mt7915: add twt_stats knob in debugfs (bsc#1209980). - mt76: mt7915: add tx mu/su counters to mib (bsc#1209980). - mt76: mt7915: add tx stats gathered from tx-status callbacks (bsc#1209980). - mt76: mt7915: add txfree event v3 (bsc#1209980). - mt76: mt7915: add txpower init for 6GHz (bsc#1209980). - mt76: mt7915: allow beaconing on all chains (bsc#1209980). - mt76: mt7915: change max rx len limit of hw modules (bsc#1209980). - mt76: mt7915: check band idx for bcc event (bsc#1209980). - mt76: mt7915: check for devm_pinctrl_get() failure (bsc#1209980). - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set (bsc#1209980). - mt76: mt7915: enable HE UL MU-MIMO (bsc#1209980). - mt76: mt7915: enable configured beacon tx rate (bsc#1209980). - mt76: mt7915: enable radar background detection (bsc#1209980). - mt76: mt7915: enable radar trigger on rdd2 (bsc#1209980). - mt76: mt7915: enable twt responder capability (bsc#1209980). - mt76: mt7915: enlarge wcid size to 544 (bsc#1209980). - mt76: mt7915: fix DBDC default band selection on MT7915D (bsc#1209980). - mt76: mt7915: fix DFS no radar detection event (bsc#1209980). - mt76: mt7915: fix SMPS operation fail (bsc#1209980). - mt76: mt7915: fix WMM index on DBDC cards (bsc#1209980). - mt76: mt7915: fix beamforming mib stats (bsc#1209980). - mt76: mt7915: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7915: fix eeprom fields of txpower init values (bsc#1209980). - mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_debugfs_rx_fw_monitor (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_mac_tx_free() (bsc#1209980). - mt76: mt7915: fix he_mcs capabilities for 160mhz (bsc#1209980). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs() (bsc#1209980). - mt76: mt7915: fix missing HE phy cap (bsc#1209980). - mt76: mt7915: fix phy cap in mt7915_set_stream_he_txbf_caps() (bsc#1209980). - mt76: mt7915: fix polling firmware-own status (git-fixes). - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (git-fixes). - mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta (bsc#1209980). - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup (bsc#1209980). - mt76: mt7915: fix potential NPE in TXS processing (bsc#1209980). - mt76: mt7915: fix potential memory leak of fw monitor packets (bsc#1209980). - mt76: mt7915: fix return condition in mt7915_tm_reg_backup_restore() (bsc#1209980). - mt76: mt7915: fix the muru tlv issue (bsc#1209980). - mt76: mt7915: fix the nss setting in bitrates (bsc#1209980). - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev (bsc#1209980). - mt76: mt7915: fix txbf starec TLV issues (bsc#1209980). - mt76: mt7915: fix typos in comments (bsc#1209980). - mt76: mt7915: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7915: get rid of mt7915_mcu_set_fixed_rate routine (bsc#1209980). - mt76: mt7915: honor all possible error conditions in mt7915_mcu_init() (bsc#1209980). - mt76: mt7915: improve code readability for xmit-queue handler (bsc#1209980). - mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht (bsc#1209980). - mt76: mt7915: improve starec readability of txbf (bsc#1209980). - mt76: mt7915: improve wmm index allocation (bsc#1209980). - mt76: mt7915: initialize smps mode in mt7915_mcu_sta_rate_ctrl_tlv() (bsc#1209980). - mt76: mt7915: introduce SAR support (bsc#1209980). - mt76: mt7915: introduce __mt7915_get_tsf routine (bsc#1209980). - mt76: mt7915: introduce band_idx in mt7915_phy (bsc#1209980). - mt76: mt7915: introduce bss coloring support (bsc#1209980). - mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy (bsc#1209980). - mt76: mt7915: introduce mt76_vif in mt7915_vif (bsc#1209980). - mt76: mt7915: introduce mt7915_mac_add_twt_setup routine (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_beacon_check_caps() (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command (bsc#1209980). - mt76: mt7915: introduce mt7915_set_radar_background routine (bsc#1209980). - mt76: mt7915: introduce rdd_monitor debugfs node (bsc#1209980). - mt76: mt7915: move pci specific code back to pci.c (bsc#1209980). - mt76: mt7915: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7915: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7915: refine register definition (bsc#1209980). - mt76: mt7915: rely on mt76_connac definitions (bsc#1209980). - mt76: mt7915: rely on mt76_connac_get_phy utilities (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_add_tlv routine (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_sta_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_wtbl_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_init_download (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_patch_sem_ctrl/mt76_connac_mcu_start_patch (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_set_rts_thresh (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_basic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_uapsd (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_start_firmware (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_generic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_hdr_trans_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ht_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_smps_tlv (bsc#1209980). - mt76: mt7915: remove dead code in debugfs code (bsc#1209980). - mt76: mt7915: remove duplicated defs in mcu.h (bsc#1209980). - mt76: mt7915: remove mt7915_mcu_add_he() (bsc#1209980). - mt76: mt7915: rename debugfs tx-queues (bsc#1209980). - mt76: mt7915: report radar pattern if detected by rdd2 (bsc#1209980). - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate (bsc#1209980). - mt76: mt7915: rework .set_bitrate_mask() to support more options (bsc#1209980). - mt76: mt7915: rework debugfs fixed-rate knob (bsc#1209980). - mt76: mt7915: rework debugfs queue info (bsc#1209980). - mt76: mt7915: rework dma.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework eeprom.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework mt7915_mcu_sta_muru_tlv() (bsc#1209980). - mt76: mt7915: rework starec TLV tags (bsc#1209980). - mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex (bsc#1209980). - mt76: mt7915: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7915: set VTA bit in tx descriptor (bsc#1209980). - mt76: mt7915: set band1 TGID field in tx descriptor (bsc#1209980). - mt76: mt7915: set bssinfo/starec command when adding interface (bsc#1209980). - mt76: mt7915: set muru platform type (bsc#1209980). - mt76: mt7915: simplify conditional (bsc#1209980). - mt76: mt7915: switch proper tx arbiter mode in testmode (bsc#1209980). - mt76: mt7915: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7915: update mac timing settings (bsc#1209980). - mt76: mt7915: update max_mpdu_size in mt7915_mcu_sta_amsdu_tlv() (bsc#1209980). - mt76: mt7915: update mt7915_chan_mib_offs for mt7916 (bsc#1209980). - mt76: mt7915: update rx rate reporting for mt7916 (bsc#1209980). - mt76: mt7915: use min_t() to make code cleaner (bsc#1209980). - mt76: mt7915e: Add a hwmon attribute to get the actual throttle state (bsc#1209980). - mt76: mt7915e: Enable thermal management by default (bsc#1209980). - mt76: mt7915e: Fix degraded performance after temporary overheat (bsc#1209980). - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (git-fixes). - mt76: mt7921: add 6GHz support (bsc#1209980). - mt76: mt7921: add MT7921_COMMON module (bsc#1209980). - mt76: mt7921: add MU EDCA cmd support (bsc#1209980). - mt76: mt7921: add delay config for sched scan (bsc#1209980). - mt76: mt7921: add mt7921u driver (bsc#1209980). - mt76: mt7921: add per-vif counters in ethtool (bsc#1209980). - mt76: mt7921: add some more MIB counters (bsc#1209980). - mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb (bsc#1209980). - mt76: mt7921: add support for PCIe ID 0x0608/0x0616 (bsc#1209980). - mt76: mt7921: add support for tx status reporting (bsc#1209980). - mt76: mt7921: clear pm->suspended in mt7921_mac_reset_work (bsc#1209980). - mt76: mt7921: disable 4addr capability (bsc#1209980). - mt76: mt7921: disable runtime pm for usb (bsc#1209980). - mt76: mt7921: do not always disable fw runtime-pm (bsc#1209980). - mt76: mt7921: do not enable beacon filter when IEEE80211_CONF_CHANGE_MONITOR is set (bsc#1209980). - mt76: mt7921: do not update pm states in case of error (git-fixes). - mt76: mt7921: fix MT7921E reset failure (bsc#1209980). - mt76: mt7921: fix Wformat build warning (bsc#1209980). - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7921: fix boolreturn.cocci warning (bsc#1209980). - mt76: mt7921: fix build regression (bsc#1209980). - mt76: mt7921: fix endianness issues in mt7921_mcu_set_tx() (bsc#1209980). - mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap (bsc#1209980). - mt76: mt7921: fix ht mcs in mt7921_mac_add_txs_skb() (bsc#1209980). - mt76: mt7921: fix injected MPDU transmission to not use HW A-MSDU (bsc#1209980). - mt76: mt7921: fix kernel crash at mt7921_pci_remove (git-fixes). - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (git-fixes). - mt76: mt7921: fix mt7921s Kconfig (bsc#1209980). - mt76: mt7921: fix network buffer leak by txs missing (bsc#1209980). - mt76: mt7921: fix possible NULL pointer dereference in mt7921_mac_write_txwi (bsc#1209980). - mt76: mt7921: fix up the monitor mode (bsc#1209980). - mt76: mt7921: fix xmit-queue dump for usb and sdio (bsc#1209980). - mt76: mt7921: forbid the doze mode when coredump is in progress (bsc#1209980). - mt76: mt7921: get rid of monitor_vif (bsc#1209980). - mt76: mt7921: get rid of mt7921_mcu_get_eeprom (bsc#1209980). - mt76: mt7921: get rid of mt7921_wait_for_mcu_init declaration (bsc#1209980). - mt76: mt7921: honor mt76_connac_mcu_set_rate_txpower return value in mt7921_config (bsc#1209980). - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter (bsc#1209980). - mt76: mt7921: introduce 160 MHz channel bandwidth support (bsc#1209980). - mt76: mt7921: introduce mt7921s support (bsc#1209980). - mt76: mt7921: introduce stats reporting through ethtool (bsc#1209980). - mt76: mt7921: make all event parser reusable between mt7921s and mt7921e (bsc#1209980). - mt76: mt7921: make mt7921_init_tx_queues static (bsc#1209980). - mt76: mt7921: move mt76_connac_mcu_set_hif_suspend to bus-related files (bsc#1209980). - mt76: mt7921: move mt7921_init_hw in a dedicated work (bsc#1209980). - mt76: mt7921: move mt7921_queue_rx_skb to mac.c (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_complete_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_prepare_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_status_data in mac common code (bsc#1209980). - mt76: mt7921: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7921: reduce log severity levels for informative messages (bsc#1209980). - mt76: mt7921: refactor dma.c to be pcie specific (bsc#1209980). - mt76: mt7921: refactor init.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mac.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mcu.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mt7921_mcu_send_message (bsc#1209980). - mt76: mt7921: rely on mcu_get_nic_capability (bsc#1209980). - mt76: mt7921: remove dead definitions (bsc#1209980). - mt76: mt7921: remove duplicated code in mt7921_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7921: remove mcu rate reporting code (bsc#1209980). - mt76: mt7921: remove mt7921_sta_stats (bsc#1209980). - mt76: mt7921: report tx rate directly from tx status (bsc#1209980). - mt76: mt7921: robustify hardware initialization flow (bsc#1209980). - mt76: mt7921: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7921: set EDCA parameters with the MCU CE command (bsc#1209980). - mt76: mt7921: start reworking tx rate reporting (bsc#1209980). - mt76: mt7921: toggle runtime-pm adding a monitor vif (bsc#1209980). - mt76: mt7921: update mib counters dumping phy stats (bsc#1209980). - mt76: mt7921: update mt7921_skb_add_usb_sdio_hdr to support usb (bsc#1209980). - mt76: mt7921: use correct iftype data on 6GHz cap init (bsc#1209980). - mt76: mt7921: use mt76_hw instead of open coding it (bsc#1209980). - mt76: mt7921: use physical addr to unify register access (bsc#1209980). - mt76: mt7921e: fix possible probe failure after reboot (bsc#1198835). - mt76: mt7921e: make dev->fw_assert usage consistent (bsc#1209980). - mt76: mt7921e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7921s: add reset support (bsc#1209980). - mt76: mt7921s: clear MT76_STATE_MCU_RUNNING immediately after reset (bsc#1209980). - mt76: mt7921s: fix a possible memory leak in mt7921_load_patch (bsc#1209980). - mt76: mt7921s: fix bus hang with wrong privilege (bsc#1209980). - mt76: mt7921s: fix cmd timeout in throughput test (bsc#1209980). - mt76: mt7921s: fix firmware download random fail (bsc#1209980). - mt76: mt7921s: fix missing fc type/sub-type for 802.11 pkts (bsc#1209980). - mt76: mt7921s: fix mt7921s_mcu_[fw|drv]_pmctrl (bsc#1209980). - mt76: mt7921s: fix possible kernel crash due to invalid Rx count (bsc#1209980). - mt76: mt7921s: fix possible sdio deadlock in command fail (bsc#1209980). - mt76: mt7921s: fix suspend error with enlarging mcu timeout value (bsc#1209980). - mt76: mt7921s: fix the device cannot sleep deeply in suspend (bsc#1209980). - mt76: mt7921s: make pm->suspended usage consistent (bsc#1209980). - mt76: mt7921s: run sleep mode by default (bsc#1209980). - mt76: mt7921s: update mt7921s_wfsys_reset sequence (bsc#1209980). - mt76: only access ieee80211_hdr after mt76_insert_ccmp_hdr (bsc#1209980). - mt76: only set rx radiotap flag from within decoder functions (bsc#1209980). - mt76: redefine mt76_for_each_q_rx to adapt mt7986 changes (bsc#1209980). - mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature (bsc#1209980). - mt76: remove mt76_wcid pointer from mt76_tx_status_check signature (bsc#1209980). - mt76: remove variable set but not used (bsc#1209980). - mt76: reverse the first fragmented frame to 802.11 (bsc#1209980). - mt76: schedule status timeout at dma completion (bsc#1209980). - mt76: sdio: disable interrupt in mt76s_sdio_irq (bsc#1209980). - mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines (bsc#1209980). - mt76: sdio: extend sdio module to support CONNAC2 (bsc#1209980). - mt76: sdio: honor the largest Tx buffer the hardware can support (bsc#1209980). - mt76: sdio: introduce parse_irq callback (bsc#1209980). - mt76: sdio: lock sdio when it is needed (bsc#1209980). - mt76: sdio: move common code in mt76_sdio module (bsc#1209980). - mt76: set wlan_idx_hi on mt7916 (bsc#1209980). - mt76: split single ldpc cap bit into bits (bsc#1209980). - mt76: substitute sk_buff_head status_list with spinlock_t status_lock (bsc#1209980). - mt76: support reading EEPROM data embedded in fdt (bsc#1209980). - mt76: switch from 'pci_' to 'dma_' API (bsc#1209980). - mt76: testmode: add support to set MAC (bsc#1209980). - mt76: usb: add req_type to ___mt76u_rr signature (bsc#1209980). - mt76: usb: add req_type to ___mt76u_wr signature (bsc#1209980). - mt76: usb: introduce __mt76u_init utility routine (bsc#1209980). - mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD (bsc#1209980). - mt76: use a separate CCMP PN receive counter for management frames (bsc#1209980). - mt76: use le32/16_get_bits() whenever possible (bsc#1209980). - mt76x02: improve mac error check/reset reliability (bsc#1209980). - mtd: core: fix error path for nvmem provider (git-fixes). - mtd: core: fix nvmem error reporting (git-fixes). - mtd: core: provide unique name for nvmem device, take two (git-fixes). - mtd: dataflash: remove duplicate SPI ID table (git-fixes). - mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes). - mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes). - mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes). - mtd: rawnand: marvell: ensure timing values are written (git-fixes). - mtd: rawnand: meson: fix bitmask for length in command word (git-fixes). - mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes). - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes). - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes). - mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes). - mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes). - mtd: spi-nor: Fix a trivial typo (git-fixes). - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes). - mtd: spi-nor: core: fix implicit declaration warning (git-fixes). - mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes). - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes). - mtdblock: tolerate corrected bit-flips (git-fixes). - nbd: Fix hung on disconnect request if socket is closed before (git-fixes). - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes). - nbd: Fix hungtask when nbd_config_put (git-fixes). - nbd: add missing definition of pr_fmt (git-fixes). - nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes). - nbd: fix io hung while disconnecting device (git-fixes). - nbd: fix race between nbd_alloc_config() and module removal (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes). - net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175). - net/rose: Fix to not accept on connected socket (git-fixes). - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842). - net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes). - net/x25: Fix to not accept on connected socket (git-fixes). - net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes). - net: add missing include in include/net/gro.h (git-fixes). - net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes). - net: bridge: command/utility delivers no return output(bsc#1208368). - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes). - net: devlink: Fix missing mutex_unlock() call (git-fixes). - net: linkwatch: be more careful about dev->linkwatch_dev_tracker (git-fixes). - net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982). - net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022). - net: mana: Add support for jumbo frame (bsc#1210551). - net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153). - net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551). - net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022). - net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022). - net: mana: Enable RX path to handle various MTU sizes (bsc#1210551). - net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875). - net: mana: Fix accessing freed irq affinity_hint (bsc#1208153). - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes). - net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022). - net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022). - net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022). - net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022). - net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551). - net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551). - net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022). - net: mana: Use napi_build_skb in RX path (bsc#1210551). - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes). - net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes). - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564). - net: natsemi: fix hw address initialization for jazz and xtensa (git-fixes). - net: of: fix stub of_net helpers for CONFIG_NET=n (git-fixes). - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes). - net: phy: Ensure state transitions are processed from phy_stop() (git-fixes). - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes). - net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes). - net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes). - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes). - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes). - net: phy: mxl-gpy: add MDINT workaround (git-fixes). - net: phy: nxp-c45-tja11xx: add remove callback (git-fixes). - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes). - net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes). - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes). - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes). - net: qrtr: correct types of trace event parameters (git-fixes). - net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes). - net: tun: avoid disabling NAPI twice (git-fixes). - net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes). - net: tun: stop NAPI when detaching queues (git-fixes). - net: tun: unlink NAPI from device on destruction (git-fixes). - net: usb: asix: remove redundant assignment to variable reg (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes). - net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - net: usb: use eth_hw_addr_set() (git-fixes). - net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes). - netrom: Fix use-after-free caused by accept on already connected socket (git-fixes). - netrom: Fix use-after-free of a listening socket (git-fixes). - nfc: change order inside nfc_se_io error path (git-fixes). - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes). - nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes). - nfc: pn533: initialize struct pn533_out_arg properly (git-fixes). - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes). - nfp: flower-ct: fix error return code in nfp_fl_ct_add_offload() (git-fixes). - nfp: flower: fix ingress police using matchall filter (git-fixes). - nfs4: Fix kmemleak when allocate slot failed (git-fixes). - nfs4trace: fix state manager flag printing (git-fixes). - nfs: nfs4clinet: check the return value of kstrdup() (git-fixes). - nfsd: Fix a memory leak in an error handling path (git-fixes). - nfsd: call op_release, even when op_func returns an error (git-fixes). - nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes). - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes). - nfsd: fix race to check ls_layouts (git-fixes). - nfsd: shut down the NFSv4 state objects before the filecache (git-fixes). - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes). - nfsd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes). - nilfs2: do not write dirty data after degenerating to read-only (git-fixes). - nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes). - nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes). - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes). - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes). - nilfs2: fix sysfs interface lifetime (git-fixes). - nilfs2: fix underflow in second superblock position calculations (git-fixes). - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes). - nilfs2: initialize unused bytes in segment summary blocks (git-fixes). - null_blk: fix ida error handling in null_add_dev() (git-fixes). - nvdimm: disable namespace on error (bsc#1166486). - nvdimm: disable namespace on error (bsc#1166486). - nvme initialize core quirks before calling nvme_init_subsystem (git-fixes). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes). - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (git-fixes). - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes). - nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes). - nvme-multipath: fix hang when disk goes live over reconnect (git-fixes). - nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes). - nvme-pci: add bogus ID quirk for ADATA SX6000PNP (bsc#1207827). - nvme-pci: add quirks for Samsung X5 SSDs (git-fixes). - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes). - nvme-pci: clear the prp2 field when not used (git-fixes). - nvme-pci: disable write zeroes on various Kingston SSD (git-fixes). - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes). - nvme-pci: fix doorbell buffer value endianness (git-fixes). - nvme-pci: fix mempool alloc size (git-fixes). - nvme-pci: fix page size checks (git-fixes). - nvme-pci: fix timeout request state check (git-fixes). - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes). - nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes). - nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: always fail a request when sending it failed (bsc#1208902). - nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes). - nvme-tcp: fix bogus request completion when failing to send AER (git-fixes). - nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes). - nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes). - nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes). - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes). - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes). - nvme: add device name to warning in uuid_show() (git-fixes). - nvme: also return I/O command effects from nvme_command_effects (git-fixes). - nvme: bring back auto-removal of deleted namespaces during sequential scan (git-fixes). - nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes). - nvme: check for duplicate identifiers earlier (git-fixes). - nvme: cleanup __nvme_check_ids (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes). - nvme: fix async event trace event (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix handling single range discard request (git-fixes). - nvme: fix interpretation of DMRSL (git-fixes). - nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes). - nvme: fix passthrough csi check (git-fixes). - nvme: fix per-namespace chardev deletion (git-fixes). - nvme: fix the CRIMS and CRWMS definitions to match the spec (git-fixes). - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes). - nvme: fix the name of Zone Append for verbose logging (git-fixes). - nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes). - nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes). - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes). - nvme: move nvme_multi_css into nvme.h (git-fixes). - nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes). - nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes). - nvme: return err on nvme_init_non_mdts_limits fail (git-fixes). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: set dma alignment to dword (git-fixes). - nvme: set non-mdts limits in nvme_scan_work (git-fixes). - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (git-fixes). - nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes). - nvmet-tcp: add bounds check on Transfer Tag (git-fixes). - nvmet-tcp: fix incomplete data digest send (git-fixes). - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes). - nvmet-tcp: fix regression in data_digest calculation (git-fixes). - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes). - nvmet: add helpers to set the result field for connect commands (git-fixes). - nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes). - nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes). - nvmet: fix I/O Command Set specific Identify Controller (git-fixes). - nvmet: fix Identify Active Namespace ID list handling (git-fixes). - nvmet: fix Identify Controller handling (git-fixes). - nvmet: fix Identify Namespace handling (git-fixes). - nvmet: fix a memory leak (git-fixes). - nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes). - nvmet: fix a use-after-free (git-fixes). - nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes). - nvmet: fix mar and mor off-by-one errors (git-fixes). - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: force reconnect when number of queue changes (git-fixes). - nvmet: looks at the passthrough controller when initializing CAP (git-fixes). - nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes). - nvmet: only allocate a single slab for bvecs (git-fixes). - nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes). - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes). - objtool: Add a missing comma to avoid string concatenation (bsc#1207328). - ocfs2: Fix data corruption after failed write (bsc#1208542). - ocfs2: clear dinode links count in case of error (bsc#1207650). - ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649). - ocfs2: fix crash when mount with quota enabled (bsc#1207640). - ocfs2: fix defrag path triggering jbd2 ASSERT (bsc#1199304). - ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652). - ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651). - ocfs2: fix non-auto defrag path not working issue (bsc#1199304). - ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770). - ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768). - ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771). - octeon: constify netdev->dev_addr (git-fixes). - of/address: Return an error when no valid dma-ranges are found (git-fixes). - pNFS/filelayout: Fix coalescing test for single DS (git-fixes). - panic: Consolidate open-coded panic_on_warn checks (bsc#1207328). - panic: Introduce warn_limit (bsc#1207328). - panic: unset panic_on_warn inside panic() (bsc#1207328). - perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes). - perf/core: Call LSM hook after copying perf_event_attr (git fixes). - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes). - perf/core: Fix the same task check in perf_event_set_output (git fixes). - perf/core: Inherit event_caps (git fixes). - perf/x86/amd: fix potential integer overflow on shift of a int (git fixes). - perf/x86/intel/ds: Fix precise store latency handling (git fixes). - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes). - perf/x86/intel/pt: Fix sampling using single range output (git fixes). - perf/x86/intel/pt: Relax address filter validation (git fixes). - perf/x86/intel/uncore: Add Emerald Rapids (git fixes). - perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes). - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes). - perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes). - perf/x86/intel: Add Emerald Rapids (git fixes). - perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes). - perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes). - perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes). - perf/x86/intel: Fix event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for ADL (git fixes). - perf/x86/intel: Fix pebs event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for SPR (git fixes). - perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes). - perf/x86/msr: Add Emerald Rapids (git fixes). - perf/x86/rapl: Add support for Intel AlderLake-N (git fixes). - perf/x86/rapl: Add support for Intel Emerald Rapids (PED-4394). - perf/x86/rapl: Treat Tigerlake like Icelake (git fixes). - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes). - perf/x86/rapl: fix AMD event handling (git fixes). - perf/x86/uncore: Add Raptor Lake uncore support (git fixes). - perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes). - perf/x86/uncore: Add new Raptor Lake S support (git fixes). - perf/x86/uncore: Clean up uncore_pci_ids (git fixes). - perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf: Always wake the parent event (git fixes). - perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes). - perf: Fix possible memleak in pmu_dev_alloc() (git fixes). - perf: fix perf_event_context->time (git fixes). - phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes). - phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes). - phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes). - pinctrl: amd: Disable and mask interrupts on resume (git-fixes). - pinctrl: aspeed: Fix confusing types in return value (git-fixes). - pinctrl: at91-pio4: fix domain name assignment (git-fixes). - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes). - pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes). - pinctrl: mediatek: Initialize variable *buf to zero (git-fixes). - pinctrl: mediatek: fix coding style (git-fixes). - pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes). - pinctrl: ocelot: Fix alt mode for ocelot (git-fixes). - pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes). - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes). - pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes). - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes). - pinctrl: single: fix potential NULL dereference (git-fixes). - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes). - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes). - platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes). - platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd: Fix refcount leak in amd_pmc_probe (bsc#1210644). - platform/x86/amd: pmc: Add a module parameter to disable workarounds (bsc#1210644). - platform/x86/amd: pmc: Add a workaround for an s0i3 issue on Cezanne (bsc#1210644). - platform/x86/amd: pmc: Add defines for STB events (bsc#1210644). - platform/x86/amd: pmc: Add line break for readability (bsc#1210644). - platform/x86/amd: pmc: Add new ACPI ID AMDI0009 (bsc#1210644). - platform/x86/amd: pmc: Add num_samples message id support to STB (bsc#1210644). - platform/x86/amd: pmc: Add sysfs files for SMU (bsc#1210644). - platform/x86/amd: pmc: Always write to the STB (bsc#1210644). - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN (bsc#1210644). - platform/x86/amd: pmc: Do not dump data after resume from s0i3 on picasso (git-fixes). - platform/x86/amd: pmc: Do not try to read SMU version on Picasso (git-fixes). - platform/x86/amd: pmc: Fix build without debugfs (bsc#1210644). - platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() (bsc#1210644). - platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso (git-fixes). - platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` (git-fixes). - platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init (git-fixes). - platform/x86/amd: pmc: Read SMU version during suspend on Cezanne systems (bsc#1210644). - platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: Utilize SMN index 0 for driver probe (git-fixes). - platform/x86/amd: pmc: Write dummy postcode into the STB DRAM (bsc#1210644). - platform/x86/amd: pmc: add CONFIG_SERIO dependency (git-fixes). - platform/x86/amd: pmc: differentiate STB/SMU messaging prints (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_SUSPEND checks (bsc#1210644). - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes). - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420). - platform/x86: ISST: Remove 8 socket limit (bsc#1211836). - platform/x86: Move AMD platform drivers to separate directory (bsc#1210644). - platform/x86: amd-pmc: Add a message to print resume time info (bsc#1210644). - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Smart Trace Buffer (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Spill to DRAM STB feature (bsc#1210644). - platform/x86: amd-pmc: Avoid reading SMU version at probe time (bsc#1210644). - platform/x86: amd-pmc: Check s0i3 cycle status (bsc#1210644). - platform/x86: amd-pmc: Correct usage of SMU version (git-fixes). - platform/x86: amd-pmc: Downgrade dev_info message to dev_dbg (bsc#1210644). - platform/x86: amd-pmc: Drop CPU QoS workaround (bsc#1210644). - platform/x86: amd-pmc: Drop check for valid alarm time (bsc#1210644). - platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes). - platform/x86: amd-pmc: Fix build error unused-function (bsc#1210644). - platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes). - platform/x86: amd-pmc: Fix compilation without CONFIG_SUSPEND (bsc#1210644). - platform/x86: amd-pmc: Make amd_pmc_stb_debugfs_fops static (bsc#1210644). - platform/x86: amd-pmc: Move FCH init to first use (bsc#1210644). - platform/x86: amd-pmc: Move SMU logging setup out of init (bsc#1210644). - platform/x86: amd-pmc: Move to later in the suspend process (bsc#1210644). - platform/x86: amd-pmc: Only report STB errors when STB enabled (bsc#1210644). - platform/x86: amd-pmc: Output error codes in messages (bsc#1210644). - platform/x86: amd-pmc: Send command to dump data after clearing OS_HINT (bsc#1210644). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1210644). - platform/x86: amd-pmc: Shuffle location of amd_pmc_get_smu_version() (bsc#1210644). - platform/x86: amd-pmc: Simplify error handling and store the pci_dev in amd_pmc_dev structure (bsc#1210644). - platform/x86: amd-pmc: Validate entry into the deepest state on resume (bsc#1210644). - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd` (bsc#1210644). - platform/x86: amd-pmc: fix compilation without CONFIG_RTC_SYSTOHC_DEVICE (bsc#1210644). - platform/x86: amd-pmc: uninitialized variable in amd_pmc_s2d_init() (bsc#1210644). - platform/x86: amd: pmc: Remove __maybe_unused from amd_pmc_suspend_handler() (bsc#1210644). - platform/x86: amd: pmc: provide user message where s0ix is not supported (bsc#1210644). - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes). - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes). - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes). - platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes). - platform/x86: hp-wmi: Support touchpad on/off (git-fixes). - platform/x86: intel-uncore-freq: add Emerald Rapids support (PED-4390). - platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes). - platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes). - platform/x86: think-lmi: Certificate authentication support (bsc#1210050). - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes). - platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes). - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes). - platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050). - platform/x86: think-lmi: Opcode support (bsc#1210050). - platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050). - platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050). - platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050). - platform/x86: think-lmi: add debug_cmd (bsc#1210050). - platform/x86: think-lmi: add missing type attribute (git-fixes). - platform/x86: think-lmi: certificate support clean ups (bsc#1210050). - platform/x86: think-lmi: only display possible_values if available (git-fixes). - platform/x86: think-lmi: use correct possible_values delimiters (git-fixes). - platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050). - platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050). - platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050). - platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050). - platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050). - platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050). - platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050). - platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050). - platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050). - platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050). - platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050). - platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050). - platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050). - platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050). - platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050). - platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050). - platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050). - platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050). - platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050). - platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050). - platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050). - platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050). - platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050). - platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050). - platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050). - platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050). - platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050). - platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050). - platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050). - platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050). - platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050). - platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050). - platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050). - platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050). - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes). - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes). - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes). - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes). - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes). - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes). - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes). - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes). - power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes). - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes). - power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes). - power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes). - power: supply: bq27xxx: expose battery data when CI=1 (git-fixes). - power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes). - power: supply: generic-adc-battery: fix unit scaling (git-fixes). - power: supply: leds: Fix blink to LED on transition (git-fixes). - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes). - powercap: fix possible name leak in powercap_register_zone() (git-fixes). - powercap: intel_rapl: add support for Emerald Rapids (PED-4398). - powerpc/64: Always build with 128-bit long double (bsc#1194869). - powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869). - powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729). - powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes). - powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612). - powerpc/hv-gpci: Fix hv_gpci event list (bsc#1207935). - powerpc/hv-gpci: Fix hv_gpci event list (git fixes). - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869). - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869). - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes). - powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869). - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869). - powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869). - powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869). - powerpc/kexec_file: fix implicit decl error (bsc#1194869). - powerpc/mm: Fix false detection of read faults (bsc#1208864). - powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled (bsc#1210216 ltc#202189). - powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729). - powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869). - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869). - powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869). - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869). - powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729). - powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662). - powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869). - powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662). - powerpc: declare unmodified attribute_group usages const (bsc#1207935). - powerpc: declare unmodified attribute_group usages const (git-fixes). - powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869). - printf: fix errname.c list (git-fixes). - prlimit: do_prlimit needs to have a speculation check (bsc#1209256). - pstore: Revert pmsg_lock back to a normal mutex (git-fixes). - purgatory: fix disabling debug info (git-fixes). - pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes). - pwm: meson: Fix axg ao mux parents (git-fixes). - pwm: meson: Fix g12a ao clk81 name (git-fixes). - pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes). - pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes). - qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001). - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (jsc#SLE-19001). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001). - qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001). - qede: avoid uninitialized entries in coal_entry array (bsc#1205846). - qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001). - qede: fix interrupt coalescing configuration (bsc#1205846). - quota: Check next/prev free block number after reading from quota file (bsc#1206640). - quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: fix flow control issue of RTL8156A (git-fixes). - r8152: fix the poor throughput for 2.5G devices (git-fixes). - r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes). - r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes). - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes). - rcu: Fix rcu_torture_read ftrace event (git-fixes). - rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159). - ref_tracker: use __GFP_NOFAIL more carefully (git-fixes). - regmap: Account for register length when chunking (git-fixes). - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes). - regulator: Flag uncontrollable regulators as always_on (git-fixes). - regulator: Handle deferred clk (git-fixes). - regulator: core: Avoid lockdep reports when resolving supplies (git-fixes). - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes). - regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes). - regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes). - regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes). - regulator: fan53555: Explicitly include bits header (git-fixes). - regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes). - regulator: max77802: Bounds check regulator id against opmode (git-fixes). - regulator: mt6359: add read check for PMIC MT6359 (git-fixes). - regulator: pca9450: Fix BUCK2 enable_mask (git-fixes). - regulator: s5m8767: Bounds check id indexing into arrays (git-fixes). - regulator: stm32-pwr: fix of_iomap leak (git-fixes). - reiserfs: Add missing calls to reiserfs_security_free() (git-fixes). - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes). - remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes). - remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes). - remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes). - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes). - remoteproc: st: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes). - remove 'PCI: hv: Use async probing to reduce boot time' (bsc#1207185). - rethook: Reject getting a rethook if RCU is not watching (git-fixes). - rethook: fix a potential memleak in rethook_alloc() (git-fixes). - rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler (git-fixes). - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (git-fixes). - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes). - ring-buffer: Fix kernel-doc (git-fixes). - ring-buffer: Fix race while reader and writer are on the same page (git-fixes). - ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes). - ring-buffer: Sync IRQ works before buffer destruction (git-fixes). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435) - rpm/kernel-obs-build.spec.in: Remove SLE11 cruft - rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches - rtc: allow rtc_read_alarm without read_alarm callback (git-fixes). - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes). - rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes). - rtc: pm8xxx: fix set-alarm race (git-fixes). - rtc: sun6i: Always export the internal oscillator (git-fixes). - rtmutex: Ensure that the top waiter is always woken up (git-fixes). - s390/ap: fix crash on older machines based on QCI info missing (git-fixes bsc#1210947). - s390/boot: simplify and fix kernel memory layout setup (bsc#1209600). - s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686). - s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes). - s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687). - s390/dasd: fix no record found for raw_track_access (bsc#1207574). - s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes). - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688). - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689). - s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690). - s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691). - s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692). - s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693). - s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes). - s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes). - s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - s390x: Fixed hard lockups while running stress-ng and LPAR hangs (bsc#1195655 ltc#195733). - sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes) - sched/core: Avoid obvious double update_rq_clock warning (git-fixes) - sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes) - sched/core: Introduce sched_asym_cpucap_active() (git-fixes) - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes) - sched/fair: Fix imbalance overflow (bsc#1155798). - sched/fair: Limit sched slice duration (bsc#1189999). - sched/fair: Move calculate of avg_load to a better location (bsc#1155798). - sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325). - sched/fair: sanitize vruntime of entity being placed (bsc#1203325). - sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999). - sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799). - sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes) - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes) - sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes) - sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798). - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (git-fixes). - scsi: aacraid: Allocate cmd_priv with scsicmd (git-fixes). - scsi: aic94xx: Add missing check for dma_map_single() (git-fixes). - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes). - scsi: core: Fix a procfs host directory removal regression (git-fixes). - scsi: core: Fix a source code comment (git-fixes). - scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes). - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes). - scsi: hisi_sas: Check devm_add_action() return value (git-fixes). - scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes). - scsi: hisi_sas: Revert change to limit max hw sectors for v3 HW (bsc#1210230). - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes). - scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes). - scsi: ipr: Work around fortify-string warning (git-fixes). - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes). - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes). - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: libsas: Add sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes). - scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847). - scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes). - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (bsc#1211847). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Update congestion warning notification period (bsc#1211847). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847). - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes). - scsi: megaraid_sas: Fix crash after a double completion (git-fixes). - scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (git-fixes). - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (git-fixes). - scsi: mpi3mr: Fix throttle_groups memory leak (git-fixes). - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (git-fixes). - scsi: mpi3mr: Suppress command reply debug prints (bsc#1211820). - scsi: mpt3sas: Do not print sense pool info twice (git-fixes). - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes). - scsi: mpt3sas: Fix a memory leak (git-fixes). - scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes). - scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix hang in task management (bsc#1211960). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix mem access after free (bsc#1211960). - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960). - scsi: qla2xxx: Fix task management cmd failure (bsc#1211960). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Multi-que support for TMF (bsc#1211960). - scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes). - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes). - scsi: scsi_ioctl: Validate command size (git-fixes). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Revert 'Rework asynchronous resume support' (bsc#1209092). - scsi: ses: Do not attach if enclosure has no components (git-fixes). - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes). - scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes). - scsi: smartpqi: Add controller cache flush during rmmod (bsc#1207315). - scsi: smartpqi: Add new controller PCI IDs (bsc#1207315). - scsi: smartpqi: Change sysfs raid_level attribute to N/A for controllers (bsc#1207315). - scsi: smartpqi: Change version to 2.1.20-035 (bsc#1207315). - scsi: smartpqi: Convert to host_tagset (bsc#1207315). - scsi: smartpqi: Correct device removal for multi-actuator devices (bsc#1207315). - scsi: smartpqi: Correct max LUN number (bsc#1207315). - scsi: smartpqi: Initialize feature section info (bsc#1207315). - scsi: smartpqi: Replace one-element array with flexible-array member (bsc#1207315). - scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes). - scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes). - scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes). - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes). - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes). - scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes). - scsi: ufs: core: Enable link lost interrupt (git-fixes). - scsi_disk kABI: add back members (bsc#1209092). - sctp: fail if no bound addresses can be used for a given scope (bsc#1206677). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - seccomp: Move copy_seccomp() to no failure path (bsc#1210817). - sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes). - selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes). - selftests mount: Fix mount_setattr_test builds failed (git-fixes). - selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103). - selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103). - selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes). - selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232). - selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232). - selftests/powerpc: Move perror closer to its use (bsc#1206232). - selftests/resctrl: Allow ->setup() to return errors (git-fixes). - selftests/resctrl: Check for return value after write_schemata() (git-fixes). - selftests/resctrl: Extend CPU vendor detection (git-fixes). - selftests/resctrl: Move ->setup() call outside of test specific branches (git-fixes). - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes). - selftests/sgx: Add 'test_encl.elf' to TEST_FILES (git-fixes). - selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes). - selftests: Provide local define of __cpuid_count() (git-fixes). - selftests: forwarding: lib: quote the sysctl values (git-fixes). - selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes). - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes). - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes). - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes). - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes). - selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes). - selftests: sigaltstack: fix -Wuninitialized (git-fixes). - selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes). - selftests: xsk: Disable IPv6 on VETH1 (git-fixes). - selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes). - selinux: do not use make's grouped targets feature yet (git-fixes). - selinux: ensure av_permissions.h is built when needed (git-fixes). - selinux: fix Makefile dependencies of flask.h (git-fixes). - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes). - serial: 8250: Add missing wakeup event reporting (git-fixes). - serial: 8250: Reinit port->pm on port specific driver unbind (git-fixes). - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes). - serial: 8250_bcm7271: Fix arbitration handling (git-fixes). - serial: 8250_bcm7271: balance clk_enable calls (git-fixes). - serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes). - serial: 8250_dma: Fix DMA Rx rearm race (git-fixes). - serial: 8250_em: Fix UART port type (git-fixes). - serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes). - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes). - serial: 8250_fsl: fix handle_irq locking (git-fixes). - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes). - serial: Add support for Advantech PCI-1611U card (git-fixes). - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes). - serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes). - serial: fsl_lpuart: Fix comment typo (git-fixes). - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes). - serial: qcom-geni: fix console shutdown hang (git-fixes). - serial: qcom-geni: fix enabling deactivated interrupt (git-fixes). - serial: sc16is7xx: setup GPIO controller later in probe (git-fixes). - serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes). - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes). - sfc: Change VF mac via PF as first preference if available (git-fixes). - sfc: Fix module EEPROM reporting for QSFP modules (git-fixes). - sfc: Fix use-after-free due to selftest_work (git-fixes). - sfc: correctly advertise tunneled IPv6 segmentation (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: ef10: do not overwrite offload features at NIC reset (git-fixes). - sfc: fix TX channel offset when using legacy interrupts (git-fixes). - sfc: fix considering that all channels have TX queues (git-fixes). - sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes). - sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes). - sfc: include vport_id in filter spec hash and equal() (git-fixes). - signal handling: do not use BUG_ON() for debugging (bsc#1210439). - signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes). - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes). - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes). - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816). - signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816). - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816). - signal: Implement force_fatal_sig (git-fixes). - smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629). - smb3: display debug information better for encryption (bsc#1193629). - smb3: fix problem remounting a share after shutdown (bsc#1193629). - smb3: fix unusable share after force unmount failure (bsc#1193629). - smb3: improve parallel reads of large files (bsc#1193629). - smb3: lower default deferred close timeout to address perf regression (bsc#1193629). - smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629). - smb3: move some common open context structs to smbfs_common (bsc#1193629). - soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 (git-fixes). - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes). - soundwire: cadence: Do not overflow the command FIFOs (git-fixes). - soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes). - soundwire: qcom: gracefully handle too many ports in DT (git-fixes). - spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes). - spi: cadence-quadspi: fix suspend-resume implementations (git-fixes). - spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes). - spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes). - spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes). - spi: qup: Do not skip cleanup in remove's error path (git-fixes). - spi: qup: Request DMA before enabling clocks (git-fixes). - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (git-fixes). - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - spi: spidev: remove debug messages that access spidev->spi without locking (git-fixes). - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes). - spi: tegra210-quad: Fix validate combined sequence (git-fixes). - squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes). - staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes). - staging: iio: resolver: ads1210: fix config mode (git-fixes). - staging: mt7621-dts: change palmbus address to lower case (git-fixes). - staging: mt7621-dts: change some node hex addresses to lower case (git-fixes). - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes). - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (git-fixes). - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (git-fixes). - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes). - stat: fix inconsistency between struct stat and struct compat_stat (git-fixes). - struct ci_hdrc: hide new member at end (git-fixes). - struct dwc3: mask new member (git-fixes). - struct uvc_device move flush_status new member to end (git-fixes). - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes). - sunrpc: only free unix grouplist after RCU settles (git-fixes). - swim3: add missing major.h include (git-fixes). - swiotlb: Free tbl memory in swiotlb_exit() (jsc#PED-3259). - swiotlb: add a SWIOTLB_ANY flag to lift the low memory restriction (PED-3259). - swiotlb: avoid potential left shift overflow (PED-3259). - swiotlb: clean up some coding style and minor issues (PED-3259). - swiotlb: consolidate rounding up default_nslabs (PED-3259). - swiotlb: do not panic when the swiotlb buffer can't be allocated (PED-3259). - swiotlb: ensure a segment does not cross the area boundary (PED-3259). - swiotlb: fail map correctly with failed io_tlb_default_mem (PED-3259). - swiotlb: fix a typo (PED-3259). - swiotlb: fix passing local variable to debugfs_create_ulong() (PED-3259). - swiotlb: fix setting ->force_bounce (PED-3259). - swiotlb: fix use after free on error handling path (PED-3259). - swiotlb: make swiotlb_exit a no-op if SWIOTLB_FORCE is set (PED-3259). - swiotlb: make the swiotlb_init interface more useful (PED-3259). - swiotlb: merge swiotlb-xen initialization into swiotlb (jsc#PED-3259). - swiotlb: panic if nslabs is too small (PED-3259). - swiotlb: pass a gfp_mask argument to swiotlb_init_late (PED-3259). - swiotlb: provide swiotlb_init variants that remap the buffer (PED-3259). - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes). - swiotlb: remove a useless return in swiotlb_init (PED-3259). - swiotlb: remove swiotlb_init_with_tbl and swiotlb_init_late_with_tbl (PED-3259). - swiotlb: remove unused fields in io_tlb_mem (PED-3259). - swiotlb: rename swiotlb_late_init_with_default_size (PED-3259). - swiotlb: simplify debugfs setup (jsc#PED-3259). - swiotlb: simplify swiotlb_max_segment (PED-3259). - swiotlb: split up the global swiotlb lock (PED-3259). - swiotlb: use the right nslabs value in swiotlb_init_remap (PED-3259). - swiotlb: use the right nslabs-derived sizes in swiotlb_init_late (PED-3259). - sysctl: add a new register_sysctl_init() interface (bsc#1207328). - test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes). - thermal/core: Remove duplicate information when an error occurs (git-fixes). - thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes). - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes). - thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes). - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes). - thermal/drivers/tsens: fix slope values for msm8939 (git-fixes). - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes). - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes). - thermal: intel: Fix unsigned comparison with less than zero (git-fixes). - thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes). - thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes). - thermal: intel: quark_dts: fix error pointer dereference (git-fixes). - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes). - thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Disable interrupt auto clear for rings (git-fixes). - thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165). - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes). - thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes). - thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes). - timers: Prevent union confusion from unexpected (git-fixes) - tools/iio/iio_utils:fix memory leak (git-fixes). - tools/virtio: compile with -pthread (git-fixes). - tools/virtio: fix the vringh test for virtio ring changes (git-fixes). - tools/virtio: fix virtio_test execution (git-fixes). - tools/virtio: initialize spinlocks in vring_test.c (git-fixes). - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes). - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes). - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes). - tpm, tpm_tis: Request threaded interrupt handler (git-fixes). - tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes). - tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes). - trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes). - trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace_events_hist: add check for return value of 'create_hist_field' (git-fixes). - tracing/fprobe: Fix to check whether fprobe is registered correctly (git-fixes). - tracing/hist: Fix issue of losting command info in error_log (git-fixes). - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes). - tracing/hist: Fix wrong return value in parse_action_params() (git-fixes). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes). - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing/probes: Handle system names with hyphens (git-fixes). - tracing: Add '__rel_loc' using trace event macros (git-fixes). - tracing: Add DYNAMIC flag for dynamic events (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - tracing: Add trace_array_puts() to write into instance (git-fixes). - tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes). - tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing: Avoid adding tracer option before update_tracer_options (git-fixes). - tracing: Check field value in hist_field_name() (git-fixes). - tracing: Do not let histogram values have some modifiers (git-fixes). - tracing: Do not use out-of-sync va_list in event printing (git-fixes). - tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes). - tracing: Fix a kmemleak false positive in tracing_map (git-fixes). - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes). - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes). - tracing: Fix issue of missing one synthetic field (git-fixes). - tracing: Fix mismatched comment in __string_len (git-fixes). - tracing: Fix permissions for the buffer_percent file (git-fixes). - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes). - tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes). - tracing: Fix race where histograms can be called before the event (git-fixes). - tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes). - tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes). - tracing: Fix warning on variable 'struct trace_array' (git-fixes). - tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes). - tracing: Free error logs of tracing instances (git-fixes). - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes). - tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes). - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes). - tracing: Have type enum modifications copy the strings (git-fixes). - tracing: Make splice_read available again (git-fixes). - tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes). - tracing: Make tp_printk work on syscall tracepoints (git-fixes). - tracing: Make tracepoint lockdep check actually test something (git-fixes). - tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes). - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes). - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes). - tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes). - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes). - tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes). - tty: serial: fsl_lpuart: avoid checking for transfer complete when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes). - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes). - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes). - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes). - tty: serial: imx: Handle RS485 DE signal active high (git-fixes). - tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes). - tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes). - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes). - tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes). - tun: annotate access to queue->trans_start (jsc#PED-370). - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes). - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328). - udf: Check consistency of Space Bitmap Descriptor (bsc#1210771). - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649). - udf: Support splicing to file (bsc#1210770). - update internal module version number for cifs.ko (bsc#1193629). - usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes). - usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes). - usb: cdns3: Fix issue with using incorrect PCI device function (git-fixes). - usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes). - usb: cdnsp: Fixes issue with redundant Status Stage (git-fixes). - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes). - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes). - usb: chipidea: core: fix possible concurrent when switch role (git-fixes). - usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes). - usb: chipidea: imx: avoid unnecessary probe defer (git-fixes). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes). - usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes). - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes). - usb: dwc3: Align DWC3_EP_* flag macros (git-fixes). - usb: dwc3: Fix a repeated word checkpatch warning (git-fixes). - usb: dwc3: Fix a typo in field name (git-fixes). - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes). - usb: dwc3: core: Host wake up support from system suspend (git-fixes). - usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes). - usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes). - usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes). - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes). - usb: dwc3: gadget: Change condition for processing suspend event (git-fixes). - usb: dwc3: gadget: Delay issuing End Transfer (git-fixes). - usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes). - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes). - usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes). - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes). - usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes). - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes). - usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes). - usb: dwc3: qcom: clean up icc init (git-fixes). - usb: dwc3: qcom: clean up suspend callbacks (git-fixes). - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes). - usb: dwc3: qcom: fix gadget-only builds (git-fixes). - usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes). - usb: dwc3: qcom: fix wakeup implementation (git-fixes). - usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes). - usb: dwc3: qcom: suppress unused-variable warning (git-fixes). - usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes). - usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes). - usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes). - usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes). - usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes). - usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes). - usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes). - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes). - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes). - usb: gadget: f_hid: fix refcount leak on error path (git-fixes). - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes). - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes). - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes). - usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes). - usb: gadget: u_audio: do not let userspace block driver unbind (git-fixes). - usb: gadget: u_ether: Fix host MAC address case (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes). - usb: gadget: udc: do not clear gadget driver.bus (git-fixes). - usb: gadget: udc: renesas_usb3: Fix use after free bug in renesas_usb3_remove due to race condition (git-fixes). - usb: host: xhci-rcar: remove leftover quirk handling (git-fixes). - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes). - usb: max-3421: Fix setting of I/O pins (git-fixes). - usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes). - usb: musb: Add and use inline function musb_otg_state_string (git-fixes). - usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes). - usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes). - usb: musb: remove schedule work called after flush (git-fixes). - usb: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes). - usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes). - usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes). - usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes). - usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes). - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix multiple times discover svids error (git-fixes). - usb: typec: tcpm: fix warning when handle discover_identity message (git-fixes). - usb: typec: ucsi: Do not attempt to resume the ports before they exist (git-fixes). - usb: typec: ucsi: Do not warn on probe deferral (git-fixes). - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes). - usb: ucsi: Fix ucsi->connector race (git-fixes). - usb: ucsi_acpi: Increase the command completion timeout (git-fixes). - usb: usbfs: Enforce page requirements for mmap (git-fixes). - usb: usbfs: Use consistent mmap functions (git-fixes). - usb: uvc: Enumerate valid values for color matching (git-fixes). - usb: xhci: tegra: fix sleep in atomic call (git-fixes). - usrmerge: Compatibility with earlier rpm (boo#1211796) - usrmerge: Remove usrmerge compatibility symlink in buildroot (boo#1211796). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: modify vcs_size() handling in vcs_read() (git-fixes). - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes). - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes). - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (git-fixes). - vdpa: fix use-after-free on vp_vdpa_remove (git-fixes). - vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes). - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes). - vfio/type1: prevent underflow of locked_vm via exec() (git-fixes). - vfio/type1: restore locked_vm (git-fixes). - vfio/type1: track locked_vm per dma (git-fixes). - vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642). - vfs: make sync_filesystem return errors from ->sync_fs (git-fixes). - vhost/net: Clear the pending messages when the backend is removed (git-fixes). - virt/coco/sev-guest: Add throttling awareness (bsc#1209927). - virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927). - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927). - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927). - virt/coco/sev-guest: Do some code style cleanups (bsc#1209927). - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927). - virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927). - virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449). - virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449). - virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449). - virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927). - virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449). - virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449). - virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449). - virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes). - virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes). - virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes). - virtio_net: split free_unused_bufs() (git-fixes). - virtio_net: suppress cpu stall when free_unused_bufs (git-fixes). - virtio_pci: modify ENOENT to EINVAL (git-fixes). - virtio_ring: do not update event idx on get_buf (git-fixes). - vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes). - vmxnet3: move rss code block under eop descriptor (bsc#1208212). - vmxnet3: use gro callback when UPT is enabled (bsc#1209739). - vp_vdpa: fix the crash in hot unplug with vp_vdpa (git-fixes). - wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes) - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617). - watchdog-diag288_wdt-fix-__diag288-inline-assembly.patch - watchdog/hpwdt: Enable HP_WATCHDOG for ARM64 systems. (jsc#PED-3210) Also enable module in aarch64 default configuration. - watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes). - watchdog: allow building BCM7038_WDT for BCM4908 (bsc#1208619). - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes). - watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497). - watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497). - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes). - watchdog: ixp4xx: Implement restart (bsc#1208619). - watchdog: ixp4xx: Rewrite driver to use core (bsc#1208619). - watchdog: ixp4xx_wdt: Fix address space warning (bsc#1208619). - watchdog: menz069_wdt: fix watchdog initialisation (git-fixes). - watchdog: orion_wdt: support pretimeout on Armada-XP (bsc#1208619). - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes). - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes). - watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes). - wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes). - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes). - wifi: ath11k: allow system suspend to survive ath11k (git-fixes). - wifi: ath11k: fix SAC bug on peer addition with sta band migration (git-fixes). - wifi: ath11k: fix deinitialization of firmware resources (git-fixes). - wifi: ath11k: fix writing to unintended memory region (git-fixes). - wifi: ath11k: reduce the MHI timeout to 20s (bsc#1207948). - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes). - wifi: ath6kl: minor fix for allocation size (git-fixes). - wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes). - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes). - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes). - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes). - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes). - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes). - wifi: ath9k: use proper statements in conditionals (git-fixes). - wifi: ath: Silence memcpy run-time false positive warning (git-fixes). - wifi: b43: fix incorrect __packed annotation (git-fixes). - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes). - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes). - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes). - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes). - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes). - wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes). - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes). - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes). - wifi: cfg80211: Fix use after free for wext (git-fixes). - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (git-fixes). - wifi: cfg80211: fix locking in regulatory disconnect (git-fixes). - wifi: cfg80211: fix locking in sched scan stop work (git-fixes). - wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes). - wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes). - wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes). - wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes). - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes). - wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes). - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes). - wifi: iwlwifi: fw: fix DBGI dump (git-fixes). - wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes). - wifi: iwlwifi: fw: move memset before early return (git-fixes). - wifi: iwlwifi: make the loop for card preparation effective (git-fixes). - wifi: iwlwifi: mvm: check firmware response size (git-fixes). - wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes). - wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes). - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes). - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes). - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (git-fixes). - wifi: iwlwifi: mvm: initialize seq variable (git-fixes). - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes). - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes). - wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes). - wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes). - wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes). - wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes). - wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (bsc#1209980). - wifi: mac80211: adjust scan cancel comment/check (git-fixes). - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes). - wifi: mac80211: fix min center freq offset tracing (git-fixes). - wifi: mac80211: fix qos on mesh interfaces (git-fixes). - wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes). - wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes). - wifi: mac80211: simplify chanctx allocation (git-fixes). - wifi: mt7601u: fix an integer underflow (git-fixes). - wifi: mt76: add flexible polling wait-interval support (git-fixes). - wifi: mt76: add memory barrier to SDIO queue kick (bsc#1209980). - wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes). - wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1209980). - wifi: mt76: fix 6GHz high channel not be scanned (git-fixes). - wifi: mt76: fix receiving LLC packets on mt7615/mt7915 (bsc#1209980). - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes). - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes). - wifi: mt76: mt7915: add missing of_node_put() (bsc#1209980). - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work (bsc#1209980). - wifi: mt76: mt7915: check return value before accessing free_block_num (bsc#1209980). - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() (bsc#1209980). - wifi: mt76: mt7915: expose device tree match table (git-fixes). - wifi: mt76: mt7915: fix mcs value in ht mode (bsc#1209980). - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit (git-fixes). - wifi: mt76: mt7915: fix mt7915_mac_set_timing() (bsc#1209980). - wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup (bsc#1209980). - wifi: mt76: mt7915: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() (bsc#1209980). - wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` (git-fixes). - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes). - wifi: mt76: mt7921e: fix crash in chip reset fail (bsc#1209980). - wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix rmmod crash in driver reload test (bsc#1209980). - wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes). - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (git-fixes). - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume (bsc#1209980). - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (bsc#1209980). - wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes). - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes). - wifi: mwifiex: mark OF related data as maybe unused (git-fixes). - wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes). - wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes). - wifi: rt2x00: Fix memory leak when handling surveys (git-fixes). - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes). - wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes). - wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes). - wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes). - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes). - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes). - wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes). - wifi: rtw89: Add missing check for alloc_workqueue (git-fixes). - wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes). - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes). - wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wireguard: ratelimiter: use hrtimer in selftest (git-fixes) - workqueue: Fix hung time report of worker pools (bsc#1211044). - workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044). - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044). - workqueue: Warn when a new worker could not be created (bsc#1211044). - workqueue: Warn when a rescuer could not be created (bsc#1211044). - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769). - writeback: avoid use-after-free after removing device (bsc#1207638). - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes). - x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes). - x86/ACPI/boot: Use FADT version to check support for online capable (git-fixes). - x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes). - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes). - x86/MCE/AMD: Use an u64 for bank_map (git-fixes). - x86/PAT: Have pat_enabled() properly reflect state when running on Xen (git-fixes). - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes). - x86/acpi/boot: Correct acpi_is_processor_usable() check (git-fixes). - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (git-fixes). - x86/alternative: Make debug-alternative selective (bsc#1206578). - x86/alternative: Report missing return thunk details (git-fixes). - x86/alternative: Support relocations in alternatives (bsc#1206578). - x86/amd: Use IBPB for firmware calls (git-fixes). - x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848). - x86/asm: Fix an assembler warning with current binutils (git-fixes). - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes). - x86/boot: Skip realmode init code when running as Xen PV guest (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes). - x86/bugs: Add 'unknown' reporting for MMIO Stale Data (git-fixes). - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes). - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes). - x86/bugs: Warn when 'ibrs' mitigation is selected on Enhanced IBRS parts (git-fixes). - x86/cpu: Add CPU model numbers for Meteor Lake (git fixes). - x86/cpu: Add Raptor Lake to Intel family (git fixes). - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes). - x86/cpu: Add new Raptor Lake CPU model number (git fixes). - x86/cpu: Add several Intel server CPU model numbers (git fixes). - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes). - x86/cpufeatures: Add macros for Intel's new fast rep string features (bsc#1211140). - x86/cpufeatures: Introduce x2AVIC CPUID bit (bsc#1208619). - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes). - x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes). - x86/entry: Avoid very early RET (git-fixes). - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes). - x86/entry: Do not call error_entry() for XENPV (git-fixes). - x86/entry: Move CLD to the start of the idtentry macro (git-fixes). - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes). - x86/entry: Switch the stack after error_entry() returns (git-fixes). - x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu: Cache xfeature flags from CPUID (git-fixes). - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes). - x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes). - x86/fpu: Prevent FPU state corruption (git-fixes). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes). - x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes). - x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes). - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes). - x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes). - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes). - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes). - x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes). - x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). This is a preparation for the next patch - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes). - x86/microcode/AMD: Fix mixed steppings support (git-fixes). - x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). - x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes). - x86/microcode: Add explicit CPU vendor dependency (git-fixes). - x86/microcode: Adjust late loading result reporting message (git-fixes). - x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes). - x86/microcode: Rip out the OLD_INTERFACE (git-fixes). - x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Use proper mask when setting PUD mapping (git-fixes). - x86/msi: Fix msi message data shadow struct (git-fixes). - x86/msr: Remove .fixup usage (git-fixes). - x86/nospec: Unwreck the RSB stuffing (git-fixes). - x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes). - x86/pat: Fix x86_has_pat_wp() (git-fixes). - x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes). - x86/perf/zhaoxin: Add stepping check for ZXC (git fixes). - x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes). - x86/perf: Default set FREEZE_ON_SMI for all (git fixes). - x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes). - x86/resctrl: Fix min_cbm_bits for AMD (git-fixes). - x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes). - x86/sgx: Fix free page accounting (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/signal: Fix the value returned by strict_sas_size() (git-fixes). - x86/speculation/mmio: Print SMT warning (git-fixes). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes). - x86/static_call: Serialize __static_call_fixup() properly (git-fixes). - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes). - x86/topology: Fix duplicated core ID within a package (git-fixes). - x86/topology: Fix multiple packages shown on a single-package system (git-fixes). - x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes). - x86/tsx: Add a feature bit for TSX control MSR support (git-fixes). - x86/tsx: Disable TSX development mode at boot (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes). - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes). - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Fix return value of __setup handlers (git-fixes). - x86: Handle idle=nomwait cmdline properly for x86_idle (bsc#1208619). - x86: Remove vendor checks from prefer_mwait_c1_over_halt (bsc#1208619). - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (git-fixes). - x86: centralize setting SWIOTLB_FORCE when guest memory encryption is enabled (jsc#PED-3259). - x86: do not use REP_GOOD or ERMS for small memory clearing (bsc#1211140). - x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (git-fixes). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: remove cruft from &lt;asm/dma-mapping.h> (PED-3259). - xen-netfront: Fix NULL sring after live migration (git-fixes). - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes). - xen/arm: Fix race in RB-tree based P2M accounting (git-fixes) - xen/netback: do not do grant copy across page boundary (git-fixes). - xen/netback: do some code cleanup (git-fixes). - xen/netback: fix build warning (git-fixes). - xen/netback: use same error messages for same errors (git-fixes). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes). - xen/platform-pci: add missing free_irq() in error path (git-fixes). - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: convert ptag flags to unsigned (git-fixes). - xfs: do not assert fail on perag references on teardown (git-fixes). - xfs: do not leak btree cursor when insrec fails after a split (git-fixes). - xfs: estimate post-merge refcounts correctly (bsc#1208183). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix rm_offset flag handling in rmap keys (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get root inode correctly at bulkstat (bsc#1207501). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: hoist refcount record merge predicates (bsc#1208183). - xfs: initialize the check_owner object fully (git-fixes). - xfs: initialize the check_owner object fully (git-fixes). - xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: remove xfs_setattr_time() declaration (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes). - xfs: zero inode fork buffer at allocation (git-fixes). - xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci: Fix incorrect tracking of free space on transfer rings (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Free the command allocated for setting LPM if we return early (git-fixes). - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes). - xhci: fix debugfs register accesses while suspended (git-fixes). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes). - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes). - xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes). - zram: do not lookup algorithm in backends table (git-fixes). Important SUSE bug 1065729 SUSE bug 1109158 SUSE bug 1142685 SUSE bug 1152472 SUSE bug 1152489 SUSE bug 1155798 SUSE bug 1160435 SUSE bug 1166486 SUSE bug 1172073 SUSE bug 1174777 SUSE bug 1177529 SUSE bug 1186449 SUSE bug 1189998 SUSE bug 1189999 SUSE bug 1191731 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1195175 SUSE bug 1195655 SUSE bug 1195921 SUSE bug 1196058 SUSE bug 1197534 SUSE bug 1197617 SUSE bug 1198101 SUSE bug 1198438 SUSE bug 1198835 SUSE bug 1199304 SUSE bug 1200054 SUSE bug 1202353 SUSE bug 1202633 SUSE bug 1203039 SUSE bug 1203200 SUSE bug 1203325 SUSE bug 1203331 SUSE bug 1203332 SUSE bug 1203693 SUSE bug 1203906 SUSE bug 1204356 SUSE bug 1204662 SUSE bug 1204993 SUSE bug 1205191 SUSE bug 1205205 SUSE bug 1205544 SUSE bug 1205650 SUSE bug 1205756 SUSE bug 1205758 SUSE bug 1205760 SUSE bug 1205762 SUSE bug 1205803 SUSE bug 1205846 SUSE bug 1206024 SUSE bug 1206036 SUSE bug 1206056 SUSE bug 1206057 SUSE bug 1206103 SUSE bug 1206224 SUSE bug 1206232 SUSE bug 1206340 SUSE bug 1206459 SUSE bug 1206492 SUSE bug 1206493 SUSE bug 1206552 SUSE bug 1206578 SUSE bug 1206640 SUSE bug 1206649 SUSE bug 1206677 SUSE bug 1206824 SUSE bug 1206843 SUSE bug 1206876 SUSE bug 1206877 SUSE bug 1206878 SUSE bug 1206880 SUSE bug 1206881 SUSE bug 1206882 SUSE bug 1206883 SUSE bug 1206884 SUSE bug 1206885 SUSE bug 1206886 SUSE bug 1206887 SUSE bug 1206888 SUSE bug 1206889 SUSE bug 1206890 SUSE bug 1206891 SUSE bug 1206893 SUSE bug 1206894 SUSE bug 1206935 SUSE bug 1206992 SUSE bug 1207034 SUSE bug 1207050 SUSE bug 1207088 SUSE bug 1207149 SUSE bug 1207158 SUSE bug 1207168 SUSE bug 1207185 SUSE bug 1207270 SUSE bug 1207315 SUSE bug 1207328 SUSE bug 1207497 SUSE bug 1207500 SUSE bug 1207501 SUSE bug 1207506 SUSE bug 1207507 SUSE bug 1207521 SUSE bug 1207553 SUSE bug 1207560 SUSE bug 1207574 SUSE bug 1207588 SUSE bug 1207589 SUSE bug 1207590 SUSE bug 1207591 SUSE bug 1207592 SUSE bug 1207593 SUSE bug 1207594 SUSE bug 1207602 SUSE bug 1207603 SUSE bug 1207605 SUSE bug 1207606 SUSE bug 1207607 SUSE bug 1207608 SUSE bug 1207609 SUSE bug 1207610 SUSE bug 1207611 SUSE bug 1207612 SUSE bug 1207613 SUSE bug 1207614 SUSE bug 1207615 SUSE bug 1207616 SUSE bug 1207617 SUSE bug 1207618 SUSE bug 1207619 SUSE bug 1207620 SUSE bug 1207621 SUSE bug 1207622 SUSE bug 1207623 SUSE bug 1207624 SUSE bug 1207625 SUSE bug 1207626 SUSE bug 1207627 SUSE bug 1207628 SUSE bug 1207629 SUSE bug 1207630 SUSE bug 1207631 SUSE bug 1207632 SUSE bug 1207633 SUSE bug 1207634 SUSE bug 1207635 SUSE bug 1207636 SUSE bug 1207637 SUSE bug 1207638 SUSE bug 1207639 SUSE bug 1207640 SUSE bug 1207641 SUSE bug 1207642 SUSE bug 1207643 SUSE bug 1207644 SUSE bug 1207645 SUSE bug 1207646 SUSE bug 1207647 SUSE bug 1207648 SUSE bug 1207649 SUSE bug 1207650 SUSE bug 1207651 SUSE bug 1207652 SUSE bug 1207653 SUSE bug 1207734 SUSE bug 1207768 SUSE bug 1207769 SUSE bug 1207770 SUSE bug 1207771 SUSE bug 1207773 SUSE bug 1207795 SUSE bug 1207827 SUSE bug 1207842 SUSE bug 1207845 SUSE bug 1207875 SUSE bug 1207878 SUSE bug 1207935 SUSE bug 1207948 SUSE bug 1208050 SUSE bug 1208076 SUSE bug 1208081 SUSE bug 1208105 SUSE bug 1208107 SUSE bug 1208128 SUSE bug 1208130 SUSE bug 1208149 SUSE bug 1208153 SUSE bug 1208183 SUSE bug 1208212 SUSE bug 1208219 SUSE bug 1208290 SUSE bug 1208368 SUSE bug 1208420 SUSE bug 1208428 SUSE bug 1208429 SUSE bug 1208449 SUSE bug 1208534 SUSE bug 1208541 SUSE bug 1208542 SUSE bug 1208570 SUSE bug 1208588 SUSE bug 1208598 SUSE bug 1208599 SUSE bug 1208600 SUSE bug 1208602 SUSE bug 1208604 SUSE bug 1208605 SUSE bug 1208607 SUSE bug 1208619 SUSE bug 1208628 SUSE bug 1208700 SUSE bug 1208758 SUSE bug 1208759 SUSE bug 1208776 SUSE bug 1208777 SUSE bug 1208784 SUSE bug 1208787 SUSE bug 1208815 SUSE bug 1208816 SUSE bug 1208829 SUSE bug 1208837 SUSE bug 1208843 SUSE bug 1208845 SUSE bug 1208848 SUSE bug 1208864 SUSE bug 1208902 SUSE bug 1208948 SUSE bug 1208976 SUSE bug 1209008 SUSE bug 1209052 SUSE bug 1209092 SUSE bug 1209159 SUSE bug 1209256 SUSE bug 1209258 SUSE bug 1209262 SUSE bug 1209287 SUSE bug 1209288 SUSE bug 1209290 SUSE bug 1209292 SUSE bug 1209367 SUSE bug 1209457 SUSE bug 1209504 SUSE bug 1209532 SUSE bug 1209556 SUSE bug 1209600 SUSE bug 1209635 SUSE bug 1209636 SUSE bug 1209637 SUSE bug 1209684 SUSE bug 1209687 SUSE bug 1209693 SUSE bug 1209739 SUSE bug 1209779 SUSE bug 1209788 SUSE bug 1209798 SUSE bug 1209799 SUSE bug 1209804 SUSE bug 1209805 SUSE bug 1209856 SUSE bug 1209871 SUSE bug 1209927 SUSE bug 1209980 SUSE bug 1209982 SUSE bug 1209999 SUSE bug 1210034 SUSE bug 1210050 SUSE bug 1210158 SUSE bug 1210165 SUSE bug 1210202 SUSE bug 1210203 SUSE bug 1210206 SUSE bug 1210216 SUSE bug 1210230 SUSE bug 1210294 SUSE bug 1210301 SUSE bug 1210329 SUSE bug 1210336 SUSE bug 1210409 SUSE bug 1210439 SUSE bug 1210449 SUSE bug 1210450 SUSE bug 1210469 SUSE bug 1210498 SUSE bug 1210506 SUSE bug 1210533 SUSE bug 1210551 SUSE bug 1210629 SUSE bug 1210644 SUSE bug 1210647 SUSE bug 1210725 SUSE bug 1210741 SUSE bug 1210762 SUSE bug 1210763 SUSE bug 1210764 SUSE bug 1210765 SUSE bug 1210766 SUSE bug 1210767 SUSE bug 1210768 SUSE bug 1210769 SUSE bug 1210770 SUSE bug 1210771 SUSE bug 1210775 SUSE bug 1210783 SUSE bug 1210791 SUSE bug 1210793 SUSE bug 1210806 SUSE bug 1210816 SUSE bug 1210817 SUSE bug 1210827 SUSE bug 1210940 SUSE bug 1210943 SUSE bug 1210947 SUSE bug 1210953 SUSE bug 1210986 SUSE bug 1211025 SUSE bug 1211037 SUSE bug 1211043 SUSE bug 1211044 SUSE bug 1211089 SUSE bug 1211105 SUSE bug 1211113 SUSE bug 1211131 SUSE bug 1211140 SUSE bug 1211205 SUSE bug 1211263 SUSE bug 1211280 SUSE bug 1211281 SUSE bug 1211299 SUSE bug 1211387 SUSE bug 1211414 SUSE bug 1211449 SUSE bug 1211465 SUSE bug 1211519 SUSE bug 1211564 SUSE bug 1211590 SUSE bug 1211592 SUSE bug 1211593 SUSE bug 1211595 SUSE bug 1211654 SUSE bug 1211686 SUSE bug 1211687 SUSE bug 1211688 SUSE bug 1211689 SUSE bug 1211690 SUSE bug 1211691 SUSE bug 1211692 SUSE bug 1211693 SUSE bug 1211714 SUSE bug 1211796 SUSE bug 1211804 SUSE bug 1211807 SUSE bug 1211808 SUSE bug 1211820 SUSE bug 1211836 SUSE bug 1211847 SUSE bug 1211855 SUSE bug 1211960 SUSE bug 1212129 SUSE bug 1212154 SUSE bug 1212155 SUSE bug 1212158 CVE-2022-2196 CVE-2022-36280 CVE-2022-38096 CVE-2022-4269 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2022-4744 CVE-2023-0045 CVE-2023-0122 CVE-2023-0179 CVE-2023-0394 CVE-2023-0461 CVE-2023-0469 CVE-2023-0590 CVE-2023-0597 CVE-2023-1075 CVE-2023-1076 CVE-2023-1077 CVE-2023-1079 CVE-2023-1095 CVE-2023-1118 CVE-2023-1380 CVE-2023-1382 CVE-2023-1513 CVE-2023-1582 CVE-2023-1583 CVE-2023-1611 CVE-2023-1637 CVE-2023-1652 CVE-2023-1670 CVE-2023-1838 CVE-2023-1855 CVE-2023-1989 CVE-2023-1998 CVE-2023-2002 CVE-2023-21102 CVE-2023-21106 CVE-2023-2124 CVE-2023-2156 CVE-2023-2162 CVE-2023-2176 CVE-2023-2235 CVE-2023-2269 CVE-2023-22998 CVE-2023-23000 CVE-2023-23001 CVE-2023-23004 CVE-2023-23006 CVE-2023-2483 CVE-2023-25012 CVE-2023-2513 CVE-2023-26545 CVE-2023-28327 CVE-2023-28410 CVE-2023-28464 CVE-2023-3006 CVE-2023-30456 CVE-2023-30772 CVE-2023-31084 CVE-2023-3141 CVE-2023-31436 CVE-2023-3161 CVE-2023-32233 CVE-2023-33288 CVE-2023-33951 CVE-2023-33952 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for amazon-ssm-agent (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for terraform-provider-aws (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for terraform-provider-helm (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of terraform-provider-helm fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for terraform-provider-null (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of terraform-provider-null fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for amazon-ecs-init (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of amazon-ecs-init fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1206346). Important SUSE bug 1206346 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rmt-server (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rmt-server fixes the following issues: Update to version 2.13: - CVE-2023-28120: Fixed a possible XSS Security Vulnerability in bytesliced strings for html_safe (bsc#1209507). - CVE-2023-27530: Fixed a DoS in multipart mime parsing (bsc#1209096). - CVE-2022-31254: Fixed escalation vector bug from user _rmt to root in the packaging file (bsc#1204285). Bug fixes: - Handle X-Original-URI header, partial fix for (bsc#1211398) - Force rmt-client-setup-res script to use https (bsc#1209825) - Mark secrets.yml.key file as part of the rpm to allow seamless downgrades (bsc#1207670) - Adding -f to the file move command when moving the mirrored directory to its final location (bsc#1203171) - Fix %post install of pubcloud subpackage reload of nginx (bsc#1206593) - Skip warnings regarding nokogiri libxml version mismatch (bsc#1202053) - Add option to turn off system token support (bsc#1205089) - Do not retry to import non-existing files in air-gapped mode (bsc#1204769) Important SUSE bug 1202053 SUSE bug 1203171 SUSE bug 1204285 SUSE bug 1204769 SUSE bug 1205089 SUSE bug 1206593 SUSE bug 1207670 SUSE bug 1209096 SUSE bug 1209507 SUSE bug 1209825 SUSE bug 1211398 CVE-2022-31254 CVE-2023-27530 CVE-2023-28120 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues: grpc: - Update in SLE-15 (bsc#1197726, bsc#1144068) protobuf: - Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681 - Fix a potential DoS issue when parsing with binary data in protobuf-java, CVE-2022-3171, bsc#1204256 - Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530 - Add missing dependency of python subpackages on python-six (bsc#1177127) - Updated to version 3.9.2 (bsc#1162343) * Remove OSReadLittle* due to alignment requirements. * Don't use unions and instead use memcpy for the type swaps. - Disable LTO (bsc#1133277) python-aiocontextvars: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-avro: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-cryptography: - update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331) * SECURITY ISSUE: Fixed a bug where certain sequences of update() calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. CVE-2020-36242 python-cryptography-vectors: - update to 3.2 (bsc#1178168, CVE-2020-25659): * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities. Due to limitations imposed by our API, we cannot completely mitigate this vulnerability. * Support for OpenSSL 1.0.2 has been removed. * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder. - update to 3.3.2 (bsc#1198331) python-Deprecated: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 1.2.13: python-google-api-core: - Update to 1.14.2 python-googleapis-common-protos: - Update to 1.6.0 python-grpcio-gcp: - Initial spec for v0.2.2 python-humanfriendly: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to 10.0 python-jsondiff: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.0 python-knack: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 0.9.0 python-opencensus: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Disable Python2 build - Update to 0.8.0 python-opencensus-context: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-opencensus-ext-threading: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial build version 0.1.2 python-opentelemetry-api: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Version update to 1.5.0 python-psutil: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 5.9.1 - remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753) - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-PyGithub: - Update to 1.43.5: python-pytest-asyncio: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial release of python-pytest-asyncio 0.8.0 python-requests: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-websocket-client: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.2 python-websockets: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 9.1: Important SUSE bug 1099269 SUSE bug 1133277 SUSE bug 1144068 SUSE bug 1162343 SUSE bug 1177127 SUSE bug 1178168 SUSE bug 1182066 SUSE bug 1184753 SUSE bug 1194530 SUSE bug 1197726 SUSE bug 1198331 SUSE bug 1199282 SUSE bug 1203681 SUSE bug 1204256 CVE-2018-1000518 CVE-2020-25659 CVE-2020-36242 CVE-2021-22569 CVE-2021-22570 CVE-2022-1941 CVE-2022-3171 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-2430: Fixed a possible denial of service via a missing lock in the io_uring subsystem (bsc#1211014). - CVE-2023-28866: Fixed an out-of-bounds access in net/bluetooth/hci_sync.c because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but did not (bsc#1209780). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265). - CVE-2023-3220: Fixed a NULL pointer dereference flaw in dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() (bsc#1212556). - CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504). - CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494). - CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). - CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495). The following non-security bugs were fixed: - ACPI: CPPC: Add AMD pstate energy performance preference cppc control (bsc#1212445). - ACPI: CPPC: Add auto select register read/write support (bsc#1212445). - ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes). - ALSA: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes). - ALSA: fireface: make read-only const array for model names static (git-fixes). - ALSA: hda/realtek: Add 'Intel Reference board' and 'NUC 13' SSID in the ALC256 (git-fixes). - ALSA: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes). - ALSA: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes). - ALSA: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes). - ALSA: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes). - ALSA: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (git-fixes). - ALSA: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes). - ALSA: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes). - ALSA: hda/realtek: Whitespace fix (git-fixes). - ALSA: hda: LNL: add HD Audio PCI ID (git-fixes). - ALSA: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes). - ALSA: jack: Fix mutex call in snd_jack_report() (git-fixes). - ALSA: oxfw: make read-only const array models static (git-fixes). - ALSA: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes). - ALSA: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes). - ALSA: usb-audio: Fix broken resume due to UAC3 power state (git-fixes). - ARM: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes) - ARM: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - ARM: dts: Fix erroneous ADS touchscreen polarities (git-fixes). - ARM: dts: vexpress: add missing cache properties (git-fixes). - ASoC: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes). - ASoC: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes). - ASoC: es8316: Increment max value for ALC Capture Target Volume control (git-fixes). - ASoC: imx-audmix: check return value of devm_kasprintf() (git-fixes). - ASoC: mediatek: mt8173: Fix irq error path (git-fixes). - ASoC: nau8824: Add quirk to active-high jack-detect (git-fixes). - ASoC: simple-card: Add missing of_node_put() in case of error (git-fixes). - ASoC: soc-pcm: test if a BE can be prepared (git-fixes). - Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes). - Bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes). - Documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes). - Documentation: bonding: fix the doc of peer_notif_delay (git-fixes). - Documentation: devlink: add add devlink-selftests to the table of contents (git-fixes). - Documentation: devlink: mlx5.rst: Fix htmldoc build warning (git-fixes). - Documentation: timers: hrtimers: Make hybrid union historical (git-fixes). - Drop a buggy dvb-core fix patch (bsc#1205758) - Fix documentation of panic_on_warn (git-fixes). - Get module prefix from kmod (bsc#1212835). - HID: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes). - HID: wacom: Add error check to wacom_parse_and_register() (git-fixes). - IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes) - IB/isert: Fix dead lock in ib_isert (git-fixes) - IB/isert: Fix incorrect release of isert connection (git-fixes) - IB/isert: Fix possible list corruption in CMA handler (git-fixes) - IB/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes) - Input: adxl34x - do not hardcode interrupt trigger type (git-fixes). - Input: drv260x - fix typo in register value define (git-fixes). - Input: drv260x - remove unused .reg_defaults (git-fixes). - Input: drv260x - sleep between polling GO bit (git-fixes). - Input: psmouse - fix OOB access in Elantech protocol (git-fixes). - Input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes). - KVM: arm64: Do not hypercall before EL2 init (git-fixes) - KVM: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes) - KVM: arm64: Save PSTATE early on exit (git-fixes) - KVM: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes) - NTB: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes). - NTB: ntb_tool: Add check for devm_kcalloc (git-fixes). - NTB: ntb_transport: fix possible memory leak while device_register() fails (git-fixes). - PCI/ASPM: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes). - PCI: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes). - PCI: Release resource invalidated by coalescing (git-fixes). - PCI: cadence: Fix Gen2 Link Retraining process (git-fixes). - PCI: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes). - PCI: ftpci100: Release the clock resources (git-fixes). - PCI: pciehp: Cancel bringup sequence if card is not present (git-fixes). - PCI: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes). - PCI: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes). - PCI: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes). - PCI: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes). - PCI: rockchip: Set address alignment for endpoint mode (git-fixes). - PCI: rockchip: Use u32 variable to access 32-bit registers (git-fixes). - PCI: rockchip: Write PCI Device ID to correct register (git-fixes). - PCI: vmd: Reset VMD config register between soft reboots (git-fixes). - PM: domains: fix integer overflow issues in genpd_parse_state() (git-fixes). - RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes) - RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes) - RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes) - RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes) - RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes) - RDMA/bnxt_re: Remove unnecessary checks (git-fixes) - RDMA/bnxt_re: Return directly without goto jumps (git-fixes) - RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes) - RDMA/bnxt_re: wraparound mbox producer index (git-fixes) - RDMA/cma: Always set static rate to 0 for RoCE (git-fixes) - RDMA/hns: Fix hns_roce_table_get return value (git-fixes) - RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes) - RDMA/mlx5: Create an indirect flow table for steering anchor (git-fixes) - RDMA/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes) - RDMA/mlx5: Fix affinity assignment (git-fixes) - RDMA/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes) - RDMA/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253). - RDMA/rtrs: Fix rxe_dealloc_pd warning (git-fixes) - RDMA/rtrs: Fix the last iu->buf leak in err path (git-fixes) - RDMA/rxe: Fix access checks in rxe_check_bind_mw (git-fixes) - RDMA/rxe: Fix packet length checks (git-fixes) - RDMA/rxe: Fix ref count error in check_rkey() (git-fixes) - RDMA/rxe: Fix rxe_cq_post (git-fixes) - RDMA/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes) - RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes) - RDMA/rxe: Remove the unused variable obj (git-fixes) - RDMA/rxe: Removed unused name from rxe_task struct (git-fixes) - RDMA/uverbs: Restrict usage of privileged QKEYs (git-fixes) - RDMA/vmw_pvrdma: Remove unnecessary check on wr->opcode (git-fixes) - Remove more packaging cruft for SLE &lt; 12 SP3 - Remove orphaned CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT (bsc#1189998 git-fixes). - Revert 'drm/amd/display: edp do not add non-edid timings' (git-fixes). - Revert 'mtd: rawnand: arasan: Prevent an unsupported configuration' (git-fixes). - Revert 'net: phy: dp83867: perform soft reset and retain established link' (git-fixes). - SUNRPC: Clean up svc_deferred_class trace events (git-fixes). - USB: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes). - USB: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes). - USB: dwc3: fix use-after-free on core driver unbind (git-fixes). - USB: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes). - USB: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes). - USB: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes). - USB: dwc3: qcom: Fix potential memory leak (git-fixes). - USB: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes). - USB: dwc3: qcom: fix NULL-deref on suspend (git-fixes). - USB: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes). - USB: gadget: udc: fix NULL dereference in remove() (git-fixes). - USB: hide unused usbfs_notify_suspend/resume functions (git-fixes). - USB: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes). - USB: serial: option: add Quectel EM061KGL series (git-fixes). - USB: typec: ucsi: Fix command cancellation (git-fixes). - USB: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes). - Update commit 52b1b46c39ae ('of: Create platform devices for OF framebuffers') (bsc#1212405). - Update patches.suse/KVM-x86-fix-sending-PV-IPI.patch (git-fixes, bsc#1210853). - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes). - apparmor: fix missing error check for rhashtable_insert_fast (git-fixes). - arm64: Add missing Set/Way CMO encodings (git-fixes). - arm64: Always load shadow stack pointer directly from the task struct (git-fixes) - arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes) - arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes) - arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes) - arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes) - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes) - bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes). - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes). - bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes). - bonding: Fix negative jump label count on nested bonding (bsc#1212685). - bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes) - bpf, arm64: Clear prog->jited_len along prog->jited (git-fixes) - bpf, arm64: Feed byte-offset into bpf line info (git-fixes) - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes) - bpf: Add extra path pointer check to d_path helper (git-fixes). - bpf: Fix UAF in task local storage (bsc#1212564). - bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes). - bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes). - can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes). - can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes). - can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes). - can: length: fix bitstuffing count (git-fixes). - can: length: fix description of the RRS field (git-fixes). - can: length: make header self contained (git-fixes). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540). - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563). - cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561). - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563). - clk: Fix memory leak in devm_clk_notifier_register() (git-fixes). - clk: cdce925: check return value of kasprintf() (git-fixes). - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes). - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes). - clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes). - clk: keystone: sci-clk: check return value of kasprintf() (git-fixes). - clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes). - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes). - clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes). - clk: si5341: check return value of {devm_}kasprintf() (git-fixes). - clk: si5341: free unused memory on probe failure (git-fixes). - clk: si5341: return error if one synth clock registration fails (git-fixes). - clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes). - clk: ti: clkctrl: check return value of kasprintf() (git-fixes). - clk: vc5: check memory returned by kasprintf() (git-fixes). - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes). - crypto: marvell/cesa - Fix type mismatch warning (git-fixes). - crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes). - device-dax: Fix duplicate 'hmem' device registration (bsc#1211400). - disable two x86 PAT related patches (bsc#1212456). - docs/memory-barriers.txt: Add a missed closing parenthesis (git-fixes). - docs: networking: Update codeaurora references for rmnet (git-fixes). - drivers: meson: secure-pwrc: always enable DMA domain (git-fixes). - drm/amd/display: Add logging for display MALL refresh setting (git-fixes). - drm/amd/display: Add minimal pipe split transition state (git-fixes). - drm/amd/display: Add wrapper to call planes and stream update (git-fixes). - drm/amd/display: Explicitly specify update type per plane info change (git-fixes). - drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes). - drm/amd/display: Use dc_update_planes_and_stream (git-fixes). - drm/amd/display: add a NULL pointer check (bsc#1212848, bsc#1212961). - drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848, bsc#1212961). - drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes). - drm/amd/display: edp do not add non-edid timings (git-fixes). - drm/amd/display: fix the system hang while disable PSR (git-fixes). - drm/amd/pm: Fix power context allocation in SMU13 (git-fixes). - drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (bsc#1212848, bsc#1212961). - drm/amd/pm: update the LC_L1_INACTIVITY setting to address possible noise issue (bsc#1212848, bsc#1212961). - drm/amd: Disable PSR-SU on Parade 0803 TCON (bsc#1212848, bsc#1212961). - drm/amd: Do not try to enable secure display TA multiple times (bsc#1212848, bsc#1212961). - drm/amd: Make sure image is written to trigger VBIOS image update flow (git-fixes). - drm/amd: Tighten permissions on VBIOS flashing attributes (git-fixes). - drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes). - drm/amdgpu: Validate VM ioctl flags (git-fixes). - drm/amdgpu: add missing radeon secondary PCI ID (git-fixes). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (bsc#1212848, bsc#1212961). - drm/amdgpu: fix number of fence calculations (bsc#1212848, bsc#1212961). - drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes). - drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes). - drm/bridge: tc358768: always enable HS video mode (git-fixes). - drm/bridge: tc358768: fix PLL parameters computation (git-fixes). - drm/bridge: tc358768: fix PLL target frequency (git-fixes). - drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes). - drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes). - drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow (git-fixes). - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes). - drm/exynos: vidi: fix a wrong error return (git-fixes). - drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes). - drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes). - drm/i915/selftests: Add some missing error propagation (git-fixes). - drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes). - drm/i915/selftests: Stop using kthread_stop() (git-fixes). - drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes). - drm/i915: Use 18 fast wake AUX sync len (git-fixes). - drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes). - drm/msm/dp: Free resources after unregistering them (git-fixes). - drm/msm/dpu: correct MERGE_3D length (git-fixes). - drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes). - drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes). - drm/nouveau/dp: check for NULL nv_connector->native_mode (git-fixes). - drm/nouveau: add nv_encoder pointer check for NULL (git-fixes). - drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes). - drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes). - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes). - drm/radeon: fix possible division-by-zero errors (git-fixes). - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes). - drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes). - drm/vram-helper: fix function names in vram helper doc (git-fixes). - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes). - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes). - dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes). - dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes). - elf: correct note name comment (git-fixes). - ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020). - ext4: add EA_INODE checking to ext4_iget() (bsc#1213106). - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088). - ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109). - ext4: add strict range checks while freeing blocks (bsc#1213089). - ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016). - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018). - ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090). - ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103). - ext4: disallow ea_inodes with extended attributes (bsc#1213108). - ext4: fail ext4_iget if special inode unallocated (bsc#1213010). - ext4: fix WARNING in ext4_update_inline_data (bsc#1213012). - ext4: fix WARNING in mb_find_extent (bsc#1213099). - ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111). - ext4: fix data races when using cached status extents (bsc#1213102). - ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105). - ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015). - ext4: fix lockdep warning when enabling MMP (bsc#1213100). - ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096). - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021). - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098). - ext4: improve error handling from ext4_dirhash() (bsc#1213104). - ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017). - ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011). - ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019). - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087). - ext4: refuse to create ea block when umounted (bsc#1213093). - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107). - ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110). - ext4: update s_journal_inum if it changes after journal replay (bsc#1213094). - ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092). - ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013). - extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes). - extcon: Fix kernel doc of property fields to avoid warnings (git-fixes). - extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes). - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes). - extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes). - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes). - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes). - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes). - hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861). - hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861). - hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861). - hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861). - hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861). - hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861). - hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes). - hwrng: imx-rngc - fix the timeout for init and self check (git-fixes). - hwrng: st - keep clock enabled while hwrng is registered (git-fixes). - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes). - i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes). - iavf: remove mask from iavf_irq_enable_queues() (git-fixes). - ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604). - ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes). - ice: Do not double unplug aux on peer initiated reset (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (jsc#PED-376). - ice: Fix DSCP PFC TLV creation (git-fixes). - ice: Fix DSCP PFC TLV creation (jsc#PED-376). - ice: Fix XDP memory leak when NIC is brought up and down (git-fixes). - ice: Fix ice VF reset during iavf initialization (jsc#PED-376). - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields (jsc#PED-376). - ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes). - ice: Fix memory corruption in VF driver (git-fixes). - ice: Ignore EEXIST when setting promisc mode (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (jsc#PED-376). - ice: Reset FDIR counter in FDIR init stage (git-fixes). - ice: Reset FDIR counter in FDIR init stage (jsc#PED-376). - ice: add profile conflict check for AVF FDIR (git-fixes). - ice: add profile conflict check for AVF FDIR (jsc#PED-376). - ice: block LAN in case of VF to VF offload (git-fixes). - ice: block LAN in case of VF to VF offload (jsc#PED-376). - ice: check if VF exists before mode check (jsc#PED-376). - ice: config netdev tc before setting queues number (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (jsc#PED-376). - ice: ethtool: Prohibit improper channel config for DCB (git-fixes). - ice: ethtool: advertise 1000M speeds properly (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (jsc#PED-376). - ice: fix lost multicast packets in promisc mode (jsc#PED-376). - ice: fix wrong fallback logic for FDIR (git-fixes). - ice: fix wrong fallback logic for FDIR (jsc#PED-376). - ice: handle E822 generic device ID in PLDM header (git-fixes). - ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes). - ice: switch: fix potential memleak in ice_add_adv_recipe() (jsc#PED-376). - ice: use bitmap_free instead of devm_kfree (git-fixes). - ice: xsk: disable txq irq before flushing hw (jsc#PED-376). - ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes). - ieee802154: hwsim: Fix possible memory leaks (git-fixes). - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253). - igb: Fix extts capture value format for 82580/i354/i350 (git-fixes). - igb: fix bit_shift to be in [1..8] range (git-fixes). - igb: fix nvm.ops.read() error handling (git-fixes). - igc: Clean the TX buffer and TX descriptor ring (git-fixes). - igc: Fix possible system crash when loading module (git-fixes). - iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes). - iio: accel: fxls8962af: fixup buffer scan element type (git-fixes). - iio: adc: ad7192: Fix internal/external clock selection (git-fixes). - iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448). - init: Provide arch_cpu_finalize_init() (bsc#1212448). - init: Remove check_bugs() leftovers (bsc#1212448). - inotify: Avoid reporting event with invalid wd (bsc#1213025). - integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes). - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available (git-fixes). - io_uring: do not expose io_fill_cqe_aux() (bsc#1211014). - io_uring: do not gate task_work run on TIF_NOTIFY_SIGNAL (git-fixes). - io_uring: fix return value when removing provided buffers (git-fixes). - io_uring: fix size calculation when registering buf ring (git-fixes). - irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes). - irqchip/ftintc010: Mark all function static (git-fixes). - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes). - jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095). - jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014). - kABI workaround for cpp_acpi extensions for EPP (bsc#1212445). - kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base. - kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741). - kprobe: reverse kp->flags when arm_kprobe failed (git-fixes). - kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes). - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes). - kprobes: Forbid probing on trampoline and BPF code areas (git-fixes). - kprobes: Prohibit probes in gate area (git-fixes). - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes). - kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes). - lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852). - lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852). - lpfc: Clean up SLI-4 CQE status handling (bsc#1211852). - lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852). - lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852). - lpfc: Enhance congestion statistics collection (bsc#1211852). - lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346). - lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852). - lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852). - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes). - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes). - media: cec: core: do not set last_initiator if tx in progress (git-fixes). - media: cec: i2c: ch7322: also select REGMAP (git-fixes). - media: i2c: Correct format propagation for st-mipid02 (git-fixes). - media: usb: Check az6007_read() return value (git-fixes). - media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes). - media: venus: helpers: Fix ALIGN() of non power of two (git-fixes). - media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes). - memory: brcmstb_dpfe: fix testing array offset after use (git-fixes). - meson saradc: fix clock divider mask length (git-fixes). - mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes). - mfd: pm8008: Fix module autoloading (git-fixes). - mfd: rt5033: Drop rt5033-battery sub-device (git-fixes). - mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes). - mfd: stmfx: Nullify stmfx->vdd in case of error (git-fixes). - mfd: stmpe: Only disable the regulators if they are enabled (git-fixes). - misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes). - misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes). - misc: pci_endpoint_test: Re-init completion for every test (git-fixes). - mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253). - mlx5: fix possible ptp queue fifo use-after-free (jsc#PED-1549). - mlx5: fix skb leak while fifo resync and push (jsc#PED-1549). - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes). - mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410). - mm: Move mm_cachep initialization to mm_init() (bsc#1212448). - mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410). - mmc: bcm2835: fix deferred probing (git-fixes). - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes). - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes). - mmc: mmci: stm32: fix max busy timeout calculation (git-fixes). - mmc: mtk-sd: fix deferred probing (git-fixes). - mmc: mvsdio: fix deferred probing (git-fixes). - mmc: omap: fix deferred probing (git-fixes). - mmc: omap_hsmmc: fix deferred probing (git-fixes). - mmc: owl: fix deferred probing (git-fixes). - mmc: sdhci-acpi: fix deferred probing (git-fixes). - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes). - mmc: sdhci-spear: fix deferred probing (git-fixes). - mmc: sh_mmcif: fix deferred probing (git-fixes). - mmc: sunxi: fix deferred probing (git-fixes). - mmc: usdhi60rol0: fix deferred probing (git-fixes). - mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#PED-1549). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253). - net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253). - net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253). - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253). - net/mlx5: Avoid recovery in probe flows (jsc#PED-1549 bsc#1211794). - net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#PED-1549). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253). - net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253). - net/mlx5: Collect command failures data only for known commands (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#PED-1549). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253). - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#PED-1549). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253). - net/mlx5: Devcom, serialize devcom registration (jsc#PED-1549). - net/mlx5: Disable eswitch before waiting for VF pages (jsc#PED-1549). - net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253). - net/mlx5: Do not use already freed action pointer (jsc#SLE-19253). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#PED-1549). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#PED-1549). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#PED-1549). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#PED-1549). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#PED-1549). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5: E-switch, Fix switchdev mode after devlink reload (jsc#PED-1549). - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules (jsc#PED-1549). - net/mlx5: ECPF, wait for VF pages only after disabling host PFs (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253). - net/mlx5: Expose SF firmware pages counter (jsc#PED-1549). - net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253). - net/mlx5: Fix RoCE setting at HCA level (jsc#PED-1549). - net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253). - net/mlx5: Fix command stats access after free (jsc#PED-1549). - net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253). - net/mlx5: Fix error message when failing to allocate device memory (jsc#PED-1549). - net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253). - net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253). - net/mlx5: Fix io_eq_size and event_eq_size params validation (jsc#PED-1549). - net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253). - net/mlx5: Fix ptp max frequency adjustment range (jsc#PED-1549). - net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253). - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#SLE-19253). - net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#PED-1549). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253). - net/mlx5: Handle pairing of E-switch via uplink un/load APIs (jsc#PED-1549). - net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253). - net/mlx5: Lag, fix failure to cancel delayed bond work (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#PED-1549). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253). - net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253). - net/mlx5: SF, Drain health before removing device (jsc#PED-1549). - net/mlx5: SF, Drain health before removing device (jsc#SLE-19253). - net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253). - net/mlx5: Serialize module cleanup with reload and remove (jsc#PED-1549). - net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253). - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver (jsc#PED-1549). - net/mlx5: Store page counters in a single array (jsc#PED-1549). - net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253). - net/mlx5: add IFC bits for bypassing port select flow table (git-fixes) - net/mlx5: check attr pointer validity before dereferencing it (jsc#PED-1549). - net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253). - net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253). - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253). - net/mlx5: fs, fail conflicting actions (jsc#SLE-19253). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#PED-1549). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253). - net/mlx5: fw_tracer, Fix event handling (jsc#PED-1549). - net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#PED-1549). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#PED-1549). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#PED-1549). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#PED-1549). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253). - net/mlx5e: CT: Fix ct debugfs folder name (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253). - net/mlx5e: Do not cache tunnel offloads capability (jsc#PED-1549). - net/mlx5e: Do not clone flow post action attributes second time (jsc#PED-1549). - net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253). - net/mlx5e: Do not support encap rules with gbp option (jsc#PED-1549). - net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253). - net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253). - net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253). - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253). - net/mlx5e: Fix RX reporter for XSK RQs (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253). - net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253). - net/mlx5e: Fix cleanup null-ptr deref on encap lock (jsc#PED-1549). - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (jsc#PED-1549). - net/mlx5e: Fix deadlock in tc route query code (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#PED-1549). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253). - net/mlx5e: Fix macsec ASO context alignment (jsc#PED-1549). - net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (jsc#PED-1549). - net/mlx5e: Fix macsec ssci attribute handling in offload path (jsc#PED-1549). - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253). - net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253). - net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253). - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253). - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (jsc#PED-1549). - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253). - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253). - net/mlx5e: Initialize link speed to zero (jsc#PED-1549). - net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253). - net/mlx5e: Nullify table pointer when failing to create (jsc#PED-1549). - net/mlx5e: Overcome slow response for first macsec ASO WQE (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5e: Remove redundant xsk pointer check in mlx5e_mpwrq_validate_xsk (jsc#PED-1549). - net/mlx5e: Set decap action based on attr for sample (jsc#PED-1549). - net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253). - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253). - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253). - net/mlx5e: Use correct encap attribute during invalidation (jsc#PED-1549). - net/mlx5e: Verify dev is present for fix features ndo (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#PED-1549). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253). - net/net_failover: fix txq exceeding warning (git-fixes). - net/sched: fix initialization order when updating chain 0 head (git-fixes). - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes). - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes). - net: ena: Account for the number of processed bytes in XDP (git-fixes). - net: ena: Do not register memory info on XDP exchange (git-fixes). - net: ena: Fix rx_copybreak value update (git-fixes). - net: ena: Fix toeplitz initial hash value (git-fixes). - net: ena: Set default value for RX interrupt moderation (git-fixes). - net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes). - net: ena: Use bitmask to indicate packet redirection (git-fixes). - net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes). - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes). - net: hns3: fix reset delay time to avoid configuration timeout (git-fixes). - net: hns3: fix sending pfc frames after reset issue (git-fixes). - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#PED-1549). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#SLE-19253). - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes). - net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes). - nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes). - nfp: only report pause frame configuration for physical device (git-fixes). - nilfs2: fix buffer corruption due to concurrent device reads (git-fixes). - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes). - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes). - nouveau: fix client work fence deletion race (git-fixes). - ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes). - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes). - nvme-core: fix dev_pm_qos memleak (git-fixes). - nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes). - nvme-core: fix memory leak in dhchap_secret_store (git-fixes). - nvme-multipath: support io stats on the mpath device (bsc#1210565). - nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes). - nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes). - nvme: introduce nvme_start_request (bsc#1210565). - ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes). - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes). - ocfs2: fix non-auto defrag path not working issue (git-fixes). - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes). - octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes). - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes). - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes). - opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes). - perf/x86/intel/cstate: Add Emerald Rapids (PED-4396). - phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes). - phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes). - phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes). - pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes). - pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes). - pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes). - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes). - platform/x86: think-lmi: Correct NVME password handling (git-fixes). - platform/x86: think-lmi: Correct System password interface (git-fixes). - platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes). - platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes). - power: supply: Fix logic checking if system is running from battery (git-fixes). - power: supply: Ratelimit no data debug output (git-fixes). - power: supply: ab8500: Fix external_power_changed race (git-fixes). - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes). - power: supply: sc27xx: Fix external_power_changed race (git-fixes). - powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869). - powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701). - powerpc/purgatory: remove PGO flags (bsc#1194869). - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869). - pstore/ram: Add check for kstrdup (git-fixes). - pwm: ab8500: Fix error code in probe() (git-fixes). - pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes). - pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes). - qed/qede: Fix scheduling while atomic (git-fixes). - radeon: avoid double free in ci_dpm_init() (git-fixes). - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes). - regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes). - regulator: Fix error checking for debugfs_create_dir (git-fixes). - regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes). - regulator: core: Streamline debugfs operations (git-fixes). - regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes). - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes). - rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE. - rtc: efi: Add wakeup support (bsc#1213116). - rtc: efi: Enable SET/GET WAKEUP services as optional (bsc#1213116). - rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116). - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes). - s390/ap: fix memory leak in ap_init_qci_info() (git-fixes). - s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592). - s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892). - s390/pkey: zeroize key blobs (git-fixes bsc#1212619). - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() (git-fixes). - sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes) - sched: Fix DEBUG && !SCHEDSTATS warn (git-fixes) - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes). - scsi: stex: Fix gcc 13 warnings (git-fixes). - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes). - selftests: mptcp: depend on SYN_COOKIES (git-fixes). - selftests: mptcp: sockopt: return error if wrong mark (git-fixes). - serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes). - serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes). - serial: 8250: omap: Fix freeing of resources on failed register (git-fixes). - serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes). - serial: atmel: do not enable IRQs prematurely (git-fixes). - serial: lantiq: add missing interrupt ack (git-fixes). - signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861). - soc/fsl/qe: fix usb.c build errors (git-fixes). - soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes). - soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes). - soundwire: qcom: fix storing port config out-of-bounds (git-fixes). - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes). - spi: dw: Round of n_bytes to power of 2 (git-fixes). - spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes). - spi: lpspi: disable lpspi module irq in DMA mode (git-fixes). - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes). - spi: tegra210-quad: Fix combined sequence (bsc#1212584) - spi: tegra210-quad: Fix iterator outside loop (git-fixes). - spi: tegra210-quad: Multi-cs support (bsc#1212584) - supported.conf: Move bt878 and bttv modules to kernel-*-extra (jsc#PED-3931) - task_work: Decouple TIF_NOTIFY_SIGNAL and task_work (git-fixes). - task_work: Introduce task_work_pending (git-fixes). - test_firmware: Use kstrtobool() instead of strtobool() (git-fixes). - test_firmware: prevent race conditions by a correct implementation of locking (git-fixes). - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes). - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes). - thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes). - tls: Skip tls_append_frag on zero copy size (git-fixes). - tools: bpftool: Remove invalid \' json escape (git-fixes). - tracing/histograms: Allow variables to have some modifiers (git-fixes). - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes). - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes). - tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350). - tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes). - tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350). - tty: serial: imx: fix rs485 rx after tx (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes). - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - ubi: ensure that VID header offset + VID header size &lt;= alloc, size (bsc#1210584). - udf: Avoid double brelse() in udf_rename() (bsc#1213032). - udf: Define EFSCORRUPTED error code (bsc#1213038). - udf: Detect system inodes linked into directory hierarchy (bsc#1213114). - udf: Discard preallocation before extending file with a hole (bsc#1213036). - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035). - udf: Do not bother merging very long extents (bsc#1213040). - udf: Do not update file length for failed writes to inline files (bsc#1213041). - udf: Fix error handling in udf_new_inode() (bsc#1213112). - udf: Fix extending file within last block (bsc#1213037). - udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034). - udf: Preserve link count of system files (bsc#1213113). - udf: Truncate added extents on failed expansion (bsc#1213039). - usrmerge: Adjust module path in the kernel sources (bsc#1212835). - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (jsc#PED-1549). - vDPA: check virtio device features to detect MQ (jsc#PED-1549). - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (jsc#PED-1549). - vdpa/ifcvf: fix the calculation of queuepair (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#SLE-19253). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#PED-1549). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253). - vdpa/mlx5: Fix rule forwarding VLAN to TIR (jsc#PED-1549). - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253). - vdpa/mlx5: Fix wrong mac address deletion (jsc#PED-1549). - vdpa/mlx5: Initialize CVQ iotlb spinlock (jsc#PED-1549). - vdpa/mlx5: should not activate virtq object when suspended (jsc#PED-1549). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#PED-1549). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253). - vdpa: Use BIT_ULL for bit operations (jsc#PED-1549). - vdpa: conditionally fill max max queue pair for stats (jsc#PED-1549). - vduse: Fix NULL pointer dereference on sysfs access (jsc#PED-1549). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (jsc#PED-1549). - vduse: avoid empty string for dev name (jsc#PED-1549). - vduse: check that offset is within bounds in get_config() (jsc#PED-1549). - vduse: fix memory corruption in vduse_dev_ioctl() (jsc#PED-1549). - vduse: prevent uninitialized memory accesses (jsc#PED-1549). - vhost-vdpa: fix an iotlb memory leak (jsc#PED-1549). - vhost-vdpa: free iommu domain after last use during cleanup (jsc#PED-1549). - vhost_vdpa: fix the crash in unmap a large memory (jsc#PED-1549). - vhost_vdpa: fix unmap process in no-batch mode (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253). - w1: fix loop in w1_fini() (git-fixes). - w1: w1_therm: fix locking behavior in convert_t (git-fixes). - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes). - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: convert msecs to jiffies where needed (git-fixes). - wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes). - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes). - wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes). - wifi: cfg80211: rewrite merging of inherited elements (git-fixes). - wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes). - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes). - wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes). - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes). - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes). - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes). - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes). - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes). - wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes). - writeback: fix call of incorrect macro (bsc#1213024). - writeback: fix dereferencing NULL mapping->host on writeback_page_template (git-fixes). - x86/build: Avoid relocation information in final vmlinux (bsc#1187829). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - x86/fpu: Mark init functions __init (bsc#1212448). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448). - x86/init: Initialize signal frame size late (bsc#1212448). - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes). - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes). - x86/microcode: Print previous version of microcode after reload (git-fixes). - x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes). - x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes). - x86/mm: Initialize text poking earlier (bsc#1212448). - x86/mm: Use mm_alloc() in poking_init() (bsc#1212448). - x86/mm: fix poking_init() for Xen PV guests (git-fixes). - x86/msr: Add AMD CPPC MSR definitions (bsc#1212445). - x86/sgx: Fix race between reclaimer and page fault handler (git-fixes). - x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes). - x86/xen: fix secondary processor fpu initialization (bsc#1212869). Important SUSE bug 1187829 SUSE bug 1189998 SUSE bug 1194869 SUSE bug 1205758 SUSE bug 1208410 SUSE bug 1209039 SUSE bug 1209780 SUSE bug 1210335 SUSE bug 1210565 SUSE bug 1210584 SUSE bug 1210853 SUSE bug 1211014 SUSE bug 1211346 SUSE bug 1211400 SUSE bug 1211410 SUSE bug 1211794 SUSE bug 1211852 SUSE bug 1212051 SUSE bug 1212265 SUSE bug 1212350 SUSE bug 1212405 SUSE bug 1212445 SUSE bug 1212448 SUSE bug 1212456 SUSE bug 1212494 SUSE bug 1212495 SUSE bug 1212504 SUSE bug 1212513 SUSE bug 1212540 SUSE bug 1212556 SUSE bug 1212561 SUSE bug 1212563 SUSE bug 1212564 SUSE bug 1212584 SUSE bug 1212592 SUSE bug 1212603 SUSE bug 1212605 SUSE bug 1212606 SUSE bug 1212619 SUSE bug 1212685 SUSE bug 1212701 SUSE bug 1212741 SUSE bug 1212835 SUSE bug 1212838 SUSE bug 1212842 SUSE bug 1212848 SUSE bug 1212861 SUSE bug 1212869 SUSE bug 1212892 SUSE bug 1212961 SUSE bug 1213010 SUSE bug 1213011 SUSE bug 1213012 SUSE bug 1213013 SUSE bug 1213014 SUSE bug 1213015 SUSE bug 1213016 SUSE bug 1213017 SUSE bug 1213018 SUSE bug 1213019 SUSE bug 1213020 SUSE bug 1213021 SUSE bug 1213024 SUSE bug 1213025 SUSE bug 1213032 SUSE bug 1213034 SUSE bug 1213035 SUSE bug 1213036 SUSE bug 1213037 SUSE bug 1213038 SUSE bug 1213039 SUSE bug 1213040 SUSE bug 1213041 SUSE bug 1213087 SUSE bug 1213088 SUSE bug 1213089 SUSE bug 1213090 SUSE bug 1213092 SUSE bug 1213093 SUSE bug 1213094 SUSE bug 1213095 SUSE bug 1213096 SUSE bug 1213098 SUSE bug 1213099 SUSE bug 1213100 SUSE bug 1213102 SUSE bug 1213103 SUSE bug 1213104 SUSE bug 1213105 SUSE bug 1213106 SUSE bug 1213107 SUSE bug 1213108 SUSE bug 1213109 SUSE bug 1213110 SUSE bug 1213111 SUSE bug 1213112 SUSE bug 1213113 SUSE bug 1213114 SUSE bug 1213116 SUSE bug 1213134 CVE-2023-1249 CVE-2023-1829 CVE-2023-2430 CVE-2023-28866 CVE-2023-3090 CVE-2023-3111 CVE-2023-3212 CVE-2023-3220 CVE-2023-3357 CVE-2023-3358 CVE-2023-3389 CVE-2023-35788 CVE-2023-35823 CVE-2023-35828 CVE-2023-35829 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-azure-core, python-azure-storage-blob (Critical) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-azure-core, python-azure-storage-blob fixes the following issues: Security fixes: - CVE-2022-30187: Fixed information disclosure vulnerability (bsc#1202088). Recommended fixes: - New upstream release version 1.23.1 to SLE 15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629). Critical SUSE bug 1199282 SUSE bug 1202088 CVE-2022-30187 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). The following non-security bugs were fixed: - Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758). - Support sub-NUMA clustering on UV (jsc#PED-4718). - Fixed multipath not supported error (bsc#1213311). - Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes) - Revert 'drm/i915: Disable DSB usage for now' (git-fixes). - acpi: Fix suspend with Xen PV (git-fixes). - adreno: Shutdown the GPU properly (git-fixes). - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes) - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes) - arm64: vdso: Pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - asoc: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes). - asoc: SOF: topology: Fix logic for copying tuples (git-fixes). - bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes). - bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes). - bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes). - bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes). - bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - bluetooth: fix use-bdaddr-property quirk (git-fixes). - bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes). - can: bcm: Fix UAF in bcm_proc_show() (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in DebugData (bsc#1193629). - cifs: print client_guid in DebugData (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: tegra194: Fix module loading (git-fixes). - devlink: fix kernel-doc notation warnings (git-fixes). - dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: Add Z8 allow states to z-state support list (git-fixes). - drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes). - drm/amd/display: Add minimum Z8 residency debug option (git-fixes). - drm/amd/display: Add missing WA and MCLK validation (git-fixes). - drm/amd/display: Change default Z8 watermark values (git-fixes). - drm/amd/display: Correct DML calculation to align HW formula (git-fixes). - drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes). - drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes). - drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes). - drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes). - drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes). - drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes). - drm/amd/display: Fix Z8 support configurations (git-fixes). - drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes). - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: Have Payload Properly Created After Resume (git-fixes). - drm/amd/display: Lowering min Z8 residency time (git-fixes). - drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: Refactor eDP PSR codes (git-fixes). - drm/amd/display: Remove FPU guards from the DML folder (git-fixes). - drm/amd/display: Remove optimization for VRR updates (git-fixes). - drm/amd/display: Remove stutter only configurations (git-fixes). - drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes). - drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes). - drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes). - drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes). - drm/amd/pm: resolve reboot exception for si oland (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (git-fixes). - drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (git-fixes). - drm/amd/pm: workaround for compute workload type on some skus (git-fixes). - drm/amd: Add a new helper for loading/validating microcode (git-fixes). - drm/amd: Do not allow s0ix on APUs older than Raven (git-fixes). - drm/amd: Load MES microcode during early_init (git-fixes). - drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes). - drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (git-fixes). - drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes). - drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes). - drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes). - drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes). - drm/amdgpu/mes11: enable reg active poll (git-fixes). - drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes (git-fixes). - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes). - drm/amdgpu: Do not set struct drm_driver.output_poll_changed (git-fixes). - drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes). - drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes). - drm/amdgpu: Fix sdma v4 sw fini error (git-fixes). - drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes). - drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs (git-fixes). - drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes). - drm/amdgpu: change reserved vram info print (git-fixes). - drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes). - drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes). - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes). - drm/amdgpu: refine get gpu clock counter method (git-fixes). - drm/amdgpu: remove deprecated MES version vars (git-fixes). - drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes). - drm/amdgpu: set gfx9 onwards APU atomics support to be true (git-fixes). - drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes). - drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes). - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() (git-fixes). - drm/bridge: anx7625: Prevent endless probe loop (git-fixes). - drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes). - drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes). - drm/client: Fix memory leak in drm_client_target_cloned (git-fixes). - drm/display/dp_mst: Fix payload addition on a disconnected sink (git-fixes). - drm/display: Do not block HDR_OUTPUT_METADATA on unknown EOTF (git-fixes). - drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes). - drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes). - drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage (git-fixes). - drm/etnaviv: move idle mapping reaping into separate function (git-fixes). - drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes). - drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs (bsc#1213493). - drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes). - drm/i915/gt: Cleanup partial engine discovery failures (git-fixes). - drm/i915/guc: Add error-capture init warnings when needed (git-fixes). - drm/i915/guc: Fix missing ecodes (git-fixes). - drm/i915/guc: Limit scheduling properties to avoid overflow (git-fixes). - drm/i915/guc: Rename GuC register state capture node to be more obvious (git-fixes). - drm/i915/mtl: update scaler source and destination limits for MTL (git-fixes). - drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs (git-fixes). - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes). - drm/i915/tc: Fix TC port link ref init for DP MST during HW readout (git-fixes). - drm/i915: Allow panel fixed modes to have differing sync polarities (git-fixes). - drm/i915: Check pipe source size when using skl+ scalers (git-fixes). - drm/i915: Do panel VBT init early if the VBT declares an explicit panel type (git-fixes). - drm/i915: Fix TypeC mode initialization during system resume (git-fixes). - drm/i915: Fix a memory leak with reused mmap_offset (git-fixes). - drm/i915: Fix negative value passed as remaining time (git-fixes). - drm/i915: Fix one wrong caching mode enum usage (git-fixes). - drm/i915: Introduce intel_panel_init_alloc() (git-fixes). - drm/i915: Never return 0 if not all requests retired (git-fixes). - drm/i915: Populate encoder->devdata for DSI on icl+ (git-fixes). - drm/i915: Print return value on error (git-fixes). - drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes). - drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (git-fixes). - drm/msm/a5xx: really check for A510 in a5xx_gpu_init (git-fixes). - drm/msm/adreno: Simplify read64/write64 helpers (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: Add DSC hardware blocks to register snapshot (git-fixes). - drm/msm/dpu: Assign missing writeback log_mask (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes). - drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register (git-fixes). - drm/msm/hdmi: use devres helper for runtime PM management (git-fixes). - drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable (git-fixes). - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes). - drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes). - drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes). - drm/ttm: Do not leak a resource on swapout move error (git-fixes). - drm/virtio: Fix memory leak in virtio_gpu_object_create() (git-fixes). - drm/virtio: Simplify error handling of virtio_gpu_object_create() (git-fixes). - drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable (git-fixes). - drm/vmwgfx: Remove ttm object hashtable (git-fixes). - drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes). - drm/vmwgfx: Write the driver id registers (git-fixes). - drm: Add fixed-point helper to get rounded integer values (git-fixes). - drm: Add missing DP DSC extended capability definitions (git-fixes). - drm: Optimize drm buddy top-down allocation method (git-fixes). - drm: buddy_allocator: Fix buddy allocator init on 32-bit systems (git-fixes). - drm: panel-orientation-quirks: Add quirk for DynaBook K50 (git-fixes). - drm: rcar-du: Add quirk for H3 ES1.x pclk workaround (git-fixes). - drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes). - drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes). - fuse: ioctl: translate ENOSYS in outarg (bsc#1213524). - fuse: revalidate: do not invalidate if interrupted (bsc#1213523). - i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226). - irqchip/gic-v3: Claim iomem resources (bsc#1213533) - irqchip/gicv3: Handle resource request failure consistently (bsc#1213533) - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533) - kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243). - kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers - kabi/severities: ignore kABI of i915 module It's exported only for its sub-module, not really used by externals - kabi/severities: ignore kABI of vmwgfx The driver exports a function unnecessarily without used by anyone else. Ignore the kABI changes. - memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905). - net: mana: Add support for vlan tagging (bsc#1212301). - net: phy: prevent stale pointer dereference in phy_init() (git-fixes). - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (git-fixes). - net: qrtr: start MHI channel after endpoit creation (git-fixes). - nilfs2: reject devices with insufficient block count (git-fixes). - ocfs2: Switch to security_inode_init_security() (git-fixes). - ocfs2: check new file size on fallocate call (git-fixes). - ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes). - pci: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525). - pci: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - perf/x86/amd/core: Always clear status for idx (bsc#1213233). - pie: fix kernel-doc notation warning (git-fixes). - powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869). - powerpc/64s: Fix VAS mm use after free (bsc#1194869). - powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869). - powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869). - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869). - powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869). - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes). - powerpc/mm: Switch obsolete dssall to .long (bsc#1194869). - powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869). - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869). - powerpc/prom_init: Fix kernel config grep (bsc#1194869). - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (jsc#PED-542 git-fixes). - powerpc/secvar: fix refcount leak in format_show() (bsc#1194869). - powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869). - powerpc: clean vdso32 and vdso64 directories (bsc#1194869). - powerpc: define get_cycles macro for arch-override (bsc#1194869). - powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869). - rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*. - rsi: remove kernel-doc comment marker (git-fixes). - s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259). - s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258). - s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263). - s390/pci: clean up left over special treatment for function zero (bsc#1212525). - s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525). - s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525). - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252). - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt; 2.36 (git-fixes bsc#1213264). - s390: discard .interp section (git-fixes bsc#1213247). - security: keys: Modify mismatched function name (git-fixes). - selftests/ir: fix build with ancient kernel headers (git-fixes). - selftests: cgroup: fix unsigned comparison with less than zero (git-fixes). - selftests: forwarding: Fix packet matching in mirroring selftests (git-fixes). - selftests: tc: add 'ct' action kconfig dep (git-fixes). - selftests: tc: add ConnTrack procfs kconfig (git-fixes). - selftests: tc: set timeout to 15 minutes (git-fixes). - signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869). - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869). - smb3: do not reserve too many oplock credits (bsc#1193629). - smb3: missing null check in SMB2_change_notify (bsc#1193629). - smb: client: fix broken file attrs with nodfs mounts (bsc#1193629). - smb: client: fix missed ses refcounting (git-fixes). - smb: client: fix parsing of source mount option (bsc#1193629). - smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629). - smb: client: fix warning in CIFSFindFirst() (bsc#1193629). - smb: client: fix warning in CIFSFindNext() (bsc#1193629). - smb: client: fix warning in cifs_match_super() (bsc#1193629). - smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629). - smb: client: fix warning in generic_ip_connect() (bsc#1193629). - smb: client: improve DFS mount check (bsc#1193629). - smb: client: remove redundant pointer 'server' (bsc#1193629). - smb: delete an unnecessary statement (bsc#1193629). - smb: move client and server files to common directory fs/smb (bsc#1193629). - smb: remove obsolete comment (bsc#1193629). - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (git-fixes). - soundwire: cadence: Drain the RX FIFO after an IO timeout (git-fixes). - soundwire: stream: Add missing clear of alloc_slave_rt (git-fixes). - spi: bcm63xx: fix max prepend length (git-fixes). - swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes). - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes). - usb: dwc2: Fix some error handling paths (git-fixes). - usb: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). - usb: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). - usb: typec: Fix fast_role_swap_current show function (git-fixes). - usb: typec: Fix fast_role_swap_current show function (git-fixes). - wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes). - wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart (git-fixes). - wifi: ath11k: Add missing check for ioremap (git-fixes). - wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes). - x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes). - x86/platform/uv: Add platform resolving #defines for misc GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Fix printed information in calc_mmioh_map (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Remove remaining BUG_ON() and BUG() calls (bsc#1212256 jsc#PED-4718). - x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Update UV platform code for SNC (bsc#1212256 jsc#PED-4718). - x86/platform/uv: When searching for minimums, start at INT_MAX not 99999 (bsc#1212256 jsc#PED-4718). - x86: Fix .brk attribute in linker script (git-fixes). - xfs: clean up the rtbitmap fsmap backend (git-fixes). - xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes). - xfs: do not reverse order of items in bulk AIL insertion (git-fixes). - xfs: fix getfsmap reporting past the last rt extent (git-fixes). - xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes). - xfs: fix interval filtering in multi-step fsmap queries (git-fixes). - xfs: fix logdev fsmap query result filtering (git-fixes). - xfs: fix off-by-one error when the last rt extent is in use (git-fixes). - xfs: fix uninitialized variable access (git-fixes). - xfs: make fsmap backend function key parameters const (git-fixes). - xfs: make the record pointer passed to query_range functions const (git-fixes). - xfs: pass explicit mount pointer to rtalloc query functions (git-fixes). Important SUSE bug 1150305 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1207894 SUSE bug 1208788 SUSE bug 1211243 SUSE bug 1211867 SUSE bug 1212256 SUSE bug 1212301 SUSE bug 1212525 SUSE bug 1212846 SUSE bug 1212905 SUSE bug 1213059 SUSE bug 1213061 SUSE bug 1213205 SUSE bug 1213206 SUSE bug 1213226 SUSE bug 1213233 SUSE bug 1213245 SUSE bug 1213247 SUSE bug 1213252 SUSE bug 1213258 SUSE bug 1213259 SUSE bug 1213263 SUSE bug 1213264 SUSE bug 1213286 SUSE bug 1213311 SUSE bug 1213493 SUSE bug 1213523 SUSE bug 1213524 SUSE bug 1213533 SUSE bug 1213543 SUSE bug 1213705 CVE-2023-20593 CVE-2023-2985 CVE-2023-3117 CVE-2023-31248 CVE-2023-3390 CVE-2023-35001 CVE-2023-3812 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417). - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). The following non-security bugs were fixed: - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445). - ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445). - ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes). - ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes). - afs: Adjust ACK interpretation to try and cope with NAT (git-fixes). - afs: Fix access after dec in put functions (git-fixes). - afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes). - afs: Fix dynamic root getattr (git-fixes). - afs: Fix fileserver probe RTT handling (git-fixes). - afs: Fix infinite loop found by xfstest generic/676 (git-fixes). - afs: Fix lost servers_outstanding count (git-fixes). - afs: Fix server->active leak in afs_put_server (git-fixes). - afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes). - afs: Fix updating of i_size with dv jump from server (git-fixes). - afs: Fix vlserver probe RTT handling (git-fixes). - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes). - afs: Use refcount_t rather than atomic_t (git-fixes). - afs: Use the operation issue time instead of the reply time for callbacks (git-fixes). - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes). - ALSA: hda/realtek - remove 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes). - ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes). - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes). - ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes). - ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes). - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes). - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes). - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129). - ALSA: usb-audio: Add quirk for Tascam Model 12 (git-fixes). - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes). - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes). - ALSA: usb-audio: Avoid unnecessary interface change at EP close (git-fixes). - ALSA: usb-audio: Clear fixed clock rate at closing EP (git-fixes). - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Drop superfluous interface setup at parsing (git-fixes). - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes). - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes). - ALSA: usb-audio: More refactoring of hw constraint rules (git-fixes). - ALSA: usb-audio: Properly refcounting clock rate (git-fixes). - ALSA: usb-audio: Rate limit usb_set_interface error reporting (git-fixes). - ALSA: usb-audio: Refcount multiple accesses on the single clock (git-fixes). - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (git-fixes). - ALSA: usb-audio: Update for native DSD support quirks (git-fixes). - ALSA: usb-audio: Use atomic_try_cmpxchg in ep_state_update (git-fixes). - ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes). - amd-pstate: Fix amd_pstate mode switch (git-fixes). - ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes). - ASoC: atmel: Fix the 8K sample parameter in I2SC master (git-fixes). - ASoc: codecs: ES8316: Fix DMIC config (git-fixes). - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes). - ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes). - ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes). - ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes). - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes). - ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes). - ASoC: da7219: Check for failure reading AAD IRQ events (git-fixes). - ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes). - ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes). - ASoC: fsl_spdif: Silence output on stop (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes). - ASoC: tegra: Fix ADX byte map (git-fixes). - ASoC: tegra: Fix AMX byte map (git-fixes). - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (git-fixes). - ata: pata_ns87415: mark ns87560_tf_read static (git-fixes). - block, bfq: Fix division by zero error on zero wsum (bsc#1213653). - block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes). - Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in HCIUARTGETPROTO (bsc#1210780 CVE-2023-31083). - bpf: add missing header file include (bsc#1211738 CVE-2023-0459). - bus: mhi: add new interfaces to handle MHI channels directly (bsc#1207948). - bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948). - can: af_can: fix NULL pointer dereference in can_rcv_filter (bsc#1210627 CVE-2023-2166). - can: af_can: fix NULL pointer dereference in can_rcv_filter (bsc#1210627 CVE-2023-2166). - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes). - ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856). - coda: Avoid partial allocation of sig_inputArgs (git-fixes). - cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445). - cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445). - cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State frequencies attributes (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State performance attributes (bsc#1212445). - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445). - cpufreq: amd-pstate: Add boost mode support for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445). - cpufreq: amd-pstate: Add fast switch function for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: Add guided autonomous mode (bsc#1212445). - cpufreq: amd-pstate: Add guided mode control support via sysfs (bsc#1212445). - cpufreq: amd-pstate: Add more tracepoint for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: Add resume and suspend callbacks (bsc#1212445). - cpufreq: amd-pstate: Add trace for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445). - cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445). - cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445). - cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL register at init (bsc#1212445). - cpufreq: amd-pstate: Expose struct amd_cpudata (bsc#1212445). - cpufreq: amd-pstate: Fix initial highest_perf value (bsc#1212445). - cpufreq: amd-pstate: Fix invalid write to MSR_AMD_CPPC_REQ (bsc#1212445). - cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445). - cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment (bsc#1212445). - cpufreq: amd-pstate: fix white-space (bsc#1212445). - cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445). - cpufreq: amd-pstate: implement Pstate EPP support for the AMD processors (bsc#1212445). - cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445). - cpufreq: amd-pstate: Introduce a new AMD P-State driver to support future processors (bsc#1212445). - cpufreq: amd-pstate: Introduce the support for the processors with shared memory solution (bsc#1212445). - cpufreq: amd-pstate: Let user know amd-pstate is disabled (bsc#1212445). - cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated (bsc#1212445). - cpufreq: amd-pstate: Make varaiable mode_state_machine static (bsc#1212445). - cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (bsc#1212445). - cpufreq: amd-pstate: Remove fast_switch_possible flag from active driver (bsc#1212445). - cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules (bsc#1212445). - cpufreq: amd-pstate: Set a fallback policy based on preferred_profile (bsc#1212445). - cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445). - cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() (bsc#1212445). - cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445). - cpufreq: amd-pstate: Write CPPC enable bit per-socket (bsc#1212445). - crypto: kpp - Add helper to set reqsize (git-fixes). - crypto: qat - Use helper to set reqsize (git-fixes). - dlm: fix missing lkb refcount handling (git-fixes). - dlm: fix plock invalid read (git-fixes). - Documentation: cpufreq: amd-pstate: Move amd_pstate param to alphabetical order (bsc#1212445). - Documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes). - drm/amd: Fix an error handling mistake in psp_sw_init() (git-fixes). - drm/amd/display: Add monitor specific edid quirk (git-fixes). - drm/amd/display: Add polling method to handle MST reply packet (bsc#1213578). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes). - drm/amd/display: Disable MPC split by default on special asic (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix seamless odm transitions (git-fixes). - drm/amd/display: Keep PHY active for DP displays on DCN31 (git-fixes). - drm/amd/display: only accept async flips for fast updates (git-fixes). - drm/amd/display: Only update link settings after successful MST link train (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() (git-fixes). - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes). - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 (git-fixes). - drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes). - drm/amd/pm: share the code around SMU13 pcie parameters update (git-fixes). - drm/amdgpu: add the fan abnormal detection feature (git-fixes). - drm/amdgpu: avoid restore process run into dead loop (git-fixes). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes). - drm/amdgpu: Fix minmax warning (git-fixes). - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes). - drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (git-fixes). - drm/client: Fix memory leak in drm_client_modeset_probe (git-fixes). - drm/dp_mst: Clear MSG_RDY flag before sending new message (bsc#1213578). - drm/i915: Do not preserve dpll_hw_state for slave crtc in Bigjoiner (git-fixes). - drm/i915: Fix an error handling path in igt_write_huge() (git-fixes). - drm/i915/dpt: Use shmem for dpt objects (git-fixes). - drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks (git-fixes). - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (git-fixes). - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/radeon: Fix integer overflow in radeon_cs_parser_init (git-fixes). - drm/ttm: fix bulk_move corruption when adding a entry (git-fixes). - drm/ttm: fix warning that we shouldn't mix (git-fixes). - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (bsc#1213632). - drm/vmwgfx: Remove explicit and broken vblank handling (bsc#1213632). - drm/vmwgfx: Remove rcu locks from user resources (bsc#1213632). - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes). - fbdev: imxfb: Removed unneeded release_mem_region (git-fixes). - fbdev: imxfb: warn about invalid left/right margin (git-fixes). - file: always lock position for FMODE_ATOMIC_POS (bsc#1213759). - fs: dlm: add midcomms init/start functions (git-fixes). - fs: dlm: do not set stop rx flag after node reset (git-fixes). - fs: dlm: filter user dlm messages for kernel locks (git-fixes). - fs: dlm: fix log of lowcomms vs midcomms (git-fixes). - fs: dlm: fix race between test_bit() and queue_work() (git-fixes). - fs: dlm: fix race in lowcomms (git-fixes). - fs: dlm: handle -EBUSY first in lock arg validation (git-fixes). - fs: dlm: move sending fin message into state change handling (git-fixes). - fs: dlm: retry accept() until -EAGAIN or error returns (git-fixes). - fs: dlm: return positive pid value for F_GETLK (git-fixes). - fs: dlm: start midcomms before scand (git-fixes). - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (git-fixes). - FS: JFS: Check for read-only mounted filesystem in txBegin (git-fixes). - FS: JFS: Fix null-ptr-deref Read in txBegin (git-fixes). - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (git-fixes). - gve: Set default duplex configuration to full (git-fixes). - gve: unify driver name usage (git-fixes). - hwmon: (adm1275) Allow setting sample averaging (git-fixes). - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (git-fixes). - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (git-fixes). - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes). - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes). - i2c: xiic: Do not try to handle more interrupt events after error (git-fixes). - iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED (git-fixes). - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes). - iavf: Fix out-of-bounds when setting channels on remove (git-fixes). - iavf: fix potential deadlock on allocation failure (git-fixes). - iavf: fix reset task race with iavf_remove() (git-fixes). - iavf: Fix use-after-free in free_netdev (git-fixes). - iavf: Move netdev_update_features() into watchdog task (git-fixes). - iavf: use internal state to free traffic IRQs (git-fixes). - iavf: Wait for reset in callbacks which trigger it (git-fixes). - IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes) - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - ice: handle extts in the miscellaneous interrupt thread (git-fixes). - igc: Check if hardware TX timestamping is enabled earlier (git-fixes). - igc: Enable and fix RX hash usage by netstack (git-fixes). - igc: Fix inserting of empty frame for launchtime (git-fixes). - igc: Fix Kernel Panic during ndo_tx_timeout callback (git-fixes). - igc: Fix launchtime before start of cycle (git-fixes). - igc: Fix race condition in PTP tx code (git-fixes). - igc: Handle PPS start time programming for past time values (git-fixes). - igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes). - igc: Remove delay during TX ring configuration (git-fixes). - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes). - igc: Work around HW bug causing missing timestamps (git-fixes). - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (git-fixes). - Input: iqs269a - do not poll during ATI (git-fixes). - Input: iqs269a - do not poll during suspend or resume (git-fixes). - io_uring: ensure IOPOLL locks around deferred work (bsc#1213272 CVE-2023-21400). - ipv6: rpl: Fix Route of Death (CVE-2023-2156 bsc#1211131). - jffs2: fix memory leak in jffs2_do_fill_super (git-fixes). - jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes). - jffs2: fix memory leak in jffs2_scan_medium (git-fixes). - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes). - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (git-fixes). - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes). - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (git-fixes). - kabi/severities: relax kABI for ath11k local symbols (bsc#1207948) - kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes). - KVM: Add GDS_NO support to KVM (bsc#1206418, CVE-2022-40982). - KVM: arm64: Do not read a HW interrupt pending state in user context (git-fixes) - KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620) - KVM: Do not null dereference ops->destroy (git-fixes) - KVM: downgrade two BUG_ONs to WARN_ON_ONCE (git-fixes) - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL (git-fixes) - KVM: s390: pv: fix index value of replaced ASCE (git-fixes bsc#1213867). - KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) (git-fixes). - KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported (git-fixes). - KVM: VMX: restore vmx_vmexit alignment (git-fixes). - KVM: x86: Account fastpath-only VM-Exits in vCPU stats (git-fixes). - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes). - libceph: harden msgr2.1 frame segment length checks (bsc#1213857). - md: add error_handlers for raid0 and linear (bsc#1212766). - media: staging: atomisp: select V4L2_FWNODE (git-fixes). - mhi_power_down() kABI workaround (bsc#1207948). - mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes). - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes). - net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes). - net: mana: Batch ringing RX queue doorbell on receiving packets (bsc#1212901). - net: mana: Use the correct WQE count for ringing RQ doorbell (bsc#1212901). - net: nfc: Fix use-after-free caused by nfc_llcp_find_local (bsc#1213601 CVE-2023-3863). - net: phy: marvell10g: fix 88x3310 power up (git-fixes). - net/mlx5: DR, Support SW created encap actions for FW table (git-fixes). - net/mlx5e: Check for NOT_READY flag state after locking (git-fixes). - net/mlx5e: fix double free in mlx5e_destroy_flow_table (git-fixes). - net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (git-fixes). - net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes). - net/mlx5e: XDP, Allow growing tail for XDP multi buffer (git-fixes). - net/mlx5e: xsk: Set napi_id to support busy polling on XSK RQ (git-fixes). - net/sched: cls_fw: Fix improper refcount update leads to use-after-free (CVE-2023-3776 bsc#1213588). - net/sched: cls_u32: Fix reference counter leak leading to overflow (CVE-2023-3609 bsc#1213586). - net/sched: sch_qfq: account for stab overhead in qfq_enqueue (CVE-2023-3611 bsc#1213585). - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585). - netfilter: nft_set_pipapo: fix improper element removal (bsc#1213812 CVE-2023-4004). - nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601 CVE-2023-3863). - nfsd: add encoding of op_recall flag for write delegation (git-fixes). - nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes). - nfsd: Fix sparse warning (git-fixes). - nfsd: Remove open coding of string copy (git-fixes). - NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease (git-fixes). - NFSv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (git-fixes). - nvme-pci: fix DMA direction of unmapping integrity data (git-fixes). - nvme-pci: remove nvme_queue from nvme_iod (git-fixes). - nvme: do not reject probe due to duplicate IDs for single-ported PCIe devices (git-fixes). - nvme: fix the NVME_ID_NS_NVM_STS_MASK definition (git-fixes). - octeontx-af: fix hardware timestamp configuration (git-fixes). - octeontx2-af: Move validation of ptp pointer before its usage (git-fixes). - octeontx2-pf: Add additional check for MCAM rules (git-fixes). - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes). - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes). - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (git-fixes). - pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes). - pinctrl: amd: Do not show Invalid config param errors (git-fixes). - pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes). - pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes). - pinctrl: amd: Use amd_pinconf_set() for all config options (git-fixes). - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (git-fixes). - RDMA/bnxt_re: Fix hang during driver unload (git-fixes) - RDMA/bnxt_re: Prevent handling any completions after qp destroy (git-fixes) - RDMA/core: Update CMA destination address on rdma_resolve_addr (git-fixes) - RDMA/irdma: Add missing read barriers (git-fixes) - RDMA/irdma: Fix data race on CQP completion stats (git-fixes) - RDMA/irdma: Fix data race on CQP request done (git-fixes) - RDMA/irdma: Fix op_type reporting in CQEs (git-fixes) - RDMA/irdma: Report correct WC error (git-fixes) - RDMA/mlx4: Make check for invalid flags stricter (git-fixes) - RDMA/mthca: Fix crash when polling CQ for shared QPs (git-fixes) - regmap: Account for register length in SMBus I/O limits (git-fixes). - regmap: Drop initial version of maximum transfer length fixes (git-fixes). - relayfs: fix out-of-bounds access in relay_file_read (bsc#1212502 CVE-2023-3268). - rxrpc, afs: Fix selection of abort codes (git-fixes). - s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870). - s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870). - s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810). - s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872). - s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863). - s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871). - s390/qeth: Fix vipa deletion (git-fixes bsc#1213713). - s390/vmem: fix empty page tables cleanup under KASAN (git-fixes bsc#1213715). - scftorture: Count reschedule IPIs (git-fixes). - scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected (bsc#1213756). - scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756). - scsi: lpfc: Clean up SLI-4 sysfs resource reporting (bsc#1213756). - scsi: lpfc: Copyright updates for 14.2.0.14 patches (bsc#1213756). - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (bsc#1213756). - scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756). - scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (bsc#1213756). - scsi: lpfc: Pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756). - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (bsc#1213756). - scsi: lpfc: Refactor cpu affinity assignment paths (bsc#1213756). - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (bsc#1213756). - scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (bsc#1213756). - scsi: lpfc: Replace one-element array with flexible-array member (bsc#1213756). - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756). - scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (bsc#1213756). - scsi: lpfc: Simplify fcp_abort transport callback log message (bsc#1213756). - scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756). - scsi: lpfc: Use struct_size() helper (bsc#1213756). - scsi: qla2xxx: Adjust IOCB resource on qpair create (bsc#1213747). - scsi: qla2xxx: Array index may go out of bound (bsc#1213747). - scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747). - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (bsc#1213747). - scsi: qla2xxx: Correct the index of array (bsc#1213747). - scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747). - scsi: qla2xxx: Fix buffer overrun (bsc#1213747). - scsi: qla2xxx: Fix command flush during TMF (bsc#1213747). - scsi: qla2xxx: Fix deletion race condition (bsc#1213747). - scsi: qla2xxx: Fix end of loop test (bsc#1213747). - scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747). - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (bsc#1213747). - scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747). - scsi: qla2xxx: Fix NULL pointer dereference in target mode (bsc#1213747). - scsi: qla2xxx: Fix potential NULL pointer dereference (bsc#1213747). - scsi: qla2xxx: Fix session hang in gnl (bsc#1213747). - scsi: qla2xxx: Fix TMF leak through (bsc#1213747). - scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747). - scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747). - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (bsc#1213747). - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (bsc#1213747). - scsi: qla2xxx: Silence a static checker warning (bsc#1213747). - scsi: qla2xxx: Turn off noisy message log (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747). - scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747). - selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes). - serial: qcom-geni: drop bogus runtime pm state update (git-fixes). - serial: sifive: Fix sifive_serial_console_setup() section (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - sfc: fix XDP queues mode with legacy IRQ (git-fixes). - sfc: use budget for TX completions (git-fixes). - soundwire: qcom: update status correctly with mask (git-fixes). - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes). - staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (git-fixes). - SUNRPC: always free ctxt when freeing deferred request (git-fixes). - SUNRPC: double free xprt_ctxt while still in use (git-fixes). - SUNRPC: Fix trace_svc_register() call site (git-fixes). - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (git-fixes). - SUNRPC: Remove dead code in svc_tcp_release_rqst() (git-fixes). - SUNRPC: remove the maximum number of retries in call_bind_status (git-fixes). - svcrdma: Prevent page release when nothing was received (git-fixes). - tpm_tis: Explicitly check for error code (git-fixes). - tty: n_gsm: fix UAF in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes). - uaccess: Add speculation barrier to copy_from_user() (bsc#1211738 CVE-2023-0459). - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (git-fixes). - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (git-fixes). - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes). - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (git-fixes). - ubifs: Fix AA deadlock when setting xattr for encrypted file (git-fixes). - ubifs: Fix build errors as symbol undefined (git-fixes). - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (git-fixes). - ubifs: Fix memory leak in alloc_wbufs() (git-fixes). - ubifs: Fix memory leak in do_rename (git-fixes). - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes). - ubifs: Fix to add refcount once page is set private (git-fixes). - ubifs: Fix wrong dirty space budget for dirty inode (git-fixes). - ubifs: Free memory for tmpfile name (git-fixes). - ubifs: Re-statistic cleaned znode count if commit failed (git-fixes). - ubifs: Rectify space amount budget for mkdir/tmpfile operations (git-fixes). - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes). - ubifs: Rectify space budget for ubifs_xrename() (git-fixes). - ubifs: Rename whiteout atomically (git-fixes). - ubifs: rename_whiteout: correct old_dir size computing (git-fixes). - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (git-fixes). - ubifs: Reserve one leb for each journal head while doing budget (git-fixes). - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (git-fixes). - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (git-fixes). - usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes). - usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes). - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (git-fixes). - usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). - USB: serial: option: add LARA-R6 01B PIDs (git-fixes). - usb: typec: Iterate pds array when showing the pd list (git-fixes). - usb: typec: Set port->pd before adding device for typec_port (git-fixes). - usb: typec: Use sysfs_emit_at when concatenating the string (git-fixes). - usb: xhci-mtk: set the dma max_seg_size (git-fixes). - vhost_net: revert upend_idx only on retriable error (git-fixes). - vhost: support PACKED when setting-getting vring_base (git-fixes). - virtio_net: Fix error unwinding of XDP initialization (git-fixes). - virtio-net: Maintain reverse cleanup order (git-fixes). - wifi: ath11k: add support for suspend in power down state (bsc#1207948). - wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948). - wifi: ath11k: handle thermal device registeration together with MAC (bsc#1207948). - wifi: ath11k: remove MHI LOOPBACK channels (bsc#1207948). - wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes). - wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes). - wl3501_cs: use eth_hw_addr_set() (git-fixes). - x86/PVH: obtain VGA console info in Dom0 (git-fixes). - x86/speculation: Add Kconfig option for GDS (bsc#1206418, CVE-2022-40982). - x86/srso: Add IBPB on VMEXIT (bsc#1213287, CVE-2023-20569). - x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569). - xen/blkfront: Only check REQ_FUA for writes (git-fixes). - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes). - xfs: AIL needs asynchronous CIL forcing (bsc#1211811). - xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811). - xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811). - xfs: CIL work is serialised, not pipelined (bsc#1211811). - xfs: do not run shutdown callbacks on active iclogs (bsc#1211811). - xfs: drop async cache flushes from CIL commits (bsc#1211811). - xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811). - xfs: move the CIL workqueue to the CIL (bsc#1211811). - xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811). - xfs: order CIL checkpoint start records (bsc#1211811). - xfs: pass a CIL context to xlog_write() (bsc#1211811). - xfs: rework xlog_state_do_callback() (bsc#1211811). - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811). - xfs: separate out log shutdown callback processing (bsc#1211811). - xfs: wait iclog complete before tearing down AIL (bsc#1211811). - xfs: XLOG_STATE_IOERROR must die (bsc#1211811). - xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes). - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes). - xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes). Important SUSE bug 1206418 SUSE bug 1207129 SUSE bug 1207948 SUSE bug 1210627 SUSE bug 1210780 SUSE bug 1210825 SUSE bug 1211131 SUSE bug 1211738 SUSE bug 1211811 SUSE bug 1212445 SUSE bug 1212502 SUSE bug 1212604 SUSE bug 1212766 SUSE bug 1212901 SUSE bug 1213167 SUSE bug 1213272 SUSE bug 1213287 SUSE bug 1213304 SUSE bug 1213417 SUSE bug 1213578 SUSE bug 1213585 SUSE bug 1213586 SUSE bug 1213588 SUSE bug 1213601 SUSE bug 1213620 SUSE bug 1213632 SUSE bug 1213653 SUSE bug 1213713 SUSE bug 1213715 SUSE bug 1213747 SUSE bug 1213756 SUSE bug 1213759 SUSE bug 1213777 SUSE bug 1213810 SUSE bug 1213812 SUSE bug 1213856 SUSE bug 1213857 SUSE bug 1213863 SUSE bug 1213867 SUSE bug 1213870 SUSE bug 1213871 SUSE bug 1213872 CVE-2022-40982 CVE-2023-0459 CVE-2023-20569 CVE-2023-21400 CVE-2023-2156 CVE-2023-2166 CVE-2023-31083 CVE-2023-3268 CVE-2023-3567 CVE-2023-3609 CVE-2023-3611 CVE-2023-3776 CVE-2023-38409 CVE-2023-3863 CVE-2023-4004 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for amazon-ecs-init (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of amazon-ecs-init fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for amazon-ssm-agent (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of amazon-ssm-agent fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for terraform-provider-helm (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of terraform-provider-helm fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for terraform-provider-null (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of terraform-provider-null fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for terraform-provider-aws (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update of terraform-provider-aws fixes the following issues: - rebuild the package with the go 1.21 security release (bsc#1212475). Important SUSE bug 1212475 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330). - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727). - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). The following non-security bugs were fixed: - ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305). - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes). - ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes). - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes). - ALSA: ac97: Fix possible error value of *rac97 (git-fixes). - ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes). - ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes). - ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes). - ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes). - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes). - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes). - ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes). - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes). - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes). - ARM: dts: imx6sll: fixup of operating points (git-fixes). - ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes). - ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes). - ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes). - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes). - ASoC: rt5665: add missed regulator_bulk_disable (git-fixes). - ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes). - ASoC: tegra: Fix SFC conversion for few rates (git-fixes). - Bluetooth: Fix potential use-after-free when clear keys (git-fixes). - Bluetooth: L2CAP: Fix use-after-free (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes). - Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes). - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes). - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b - CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123 - Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel. - Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes). - Documentation: devices.txt: Remove ttyIOC* (git-fixes). - Documentation: devices.txt: Remove ttySIOC* (git-fixes). - Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453). - Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453). - Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453). - Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453). - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453). - Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453). - Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453). - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453). - Drop cfg80211 lock fix patches that caused a regression (bsc#1213757) - Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) - Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes). - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes). - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes). - HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes). - HID: wacom: remove the battery when the EKR is off (git-fixes). - HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes). - IB/hfi1: Fix possible panic during hotplug remove (git-fixes) - IB/uverbs: Fix an potential error pointer dereference (git-fixes) - Input: exc3000 - properly stop timer on shutdown (git-fixes). - KVM: s390: fix sthyi error handling (git-fixes bsc#1214370). - Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756). - Kbuild: move to -std=gnu11 (bsc#1214756). - PCI/ASPM: Avoid link retraining race (git-fixes). - PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes). - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes). - PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes). - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes). - PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453). - PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453). - PCI: meson: Remove cast between incompatible function type (git-fixes). - PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes). - PCI: microchip: Remove cast between incompatible function type (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: rockchip: Remove writes to unused registers (git-fixes). - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes). - PCI: tegra194: Fix possible array out of bounds access (git-fixes). - PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes). - RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes) - RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes) - RDMA/efa: Fix wrong resources deallocation order (git-fixes) - RDMA/hns: Fix CQ and QP cache affinity (git-fixes) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes) - RDMA/hns: Fix port active speed (git-fixes) - RDMA/irdma: Prevent zero-length STAG registration (git-fixes) - RDMA/irdma: Replace one-element array with flexible-array member (git-fixes) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes) - RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes) - RDMA/siw: Correct wrong debug message (git-fixes) - RDMA/umem: Set iova in ODP flow (git-fixes) - README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer. - Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes) - Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes). - Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - amba: bus: fix refcount leak (git-fixes). - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes). - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes). - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes). - audit: fix possible soft lockup in __audit_inode_child() (git-fixes). - backlight/bd6107: Compare against struct fb_info.device (git-fixes). - backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes). - backlight/lv5207lp: Compare against struct fb_info.device (git-fixes). - batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes). - batman-adv: Do not increase MTU when set by user (git-fixes). - batman-adv: Fix TT global entry leak when client roamed back (git-fixes). - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes). - batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes). - batman-adv: Trigger events for auto adjusted MTU (git-fixes). - bnx2x: fix page fault following EEH recovery (bsc#1214299). - bpf: Disable preemption in bpf_event_output (git-fixes). - bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924). - bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes). - bus: ti-sysc: Fix build warning for 64-bit build (git-fixes). - bus: ti-sysc: Fix cast to enum warning (git-fixes). - bus: ti-sysc: Flush posted write on enable before reset (git-fixes). - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes). - ceph: defer stopping mdsc delayed_work (bsc#1214392). - ceph: do not check for quotas on MDS stray dirs (bsc#1214238). - ceph: never send metrics if disable_send_metrics is set (bsc#1214180). - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. - cifs: add missing return value check for cifs_sb_tlink (bsc#1193629). - cifs: allow dumping keys for directories too (bsc#1193629). - cifs: fix mid leak during reconnection after timeout threshold (git-fixes). - cifs: if deferred close is disabled then close files immediately (git-fixes). - cifs: is_network_name_deleted should return a bool (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes). - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes). - clk: imx8mp: fix sai4 clock (git-fixes). - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes). - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes). - clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes). - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes). - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes). - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes). - clk: sunxi-ng: Modify mismatched function name (git-fixes). - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453). - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453). - clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453). - clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453). - clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453). - clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453). - cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes). - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659). - cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004). - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - crypto: caam - fix unchecked return value error (git-fixes). - crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes). - define more Hyper-V related constants (bsc#1206453). - dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes). - dma-buf/sync_file: Fix docs syntax (git-fixes). - dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes). - dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes). - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes). - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes). - docs/process/howto: Replace C89 with C11 (bsc#1214756). - docs: kernel-parameters: Refer to the correct bitmap function (git-fixes). - docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes). - docs: printk-formats: Fix hex printing of signed values (git-fixes). - driver core: test_async: fix an error code (git-fixes). - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes). - drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes). - drm/amd/display: Apply 60us prefetch for DCFCLK &lt;= 300Mhz (git-fixes). - drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes). - drm/amd/display: Do not set drr on pipe commit (git-fixes). - drm/amd/display: Enable dcn314 DPP RCO (git-fixes). - drm/amd/display: Ensure that planes are in the same order (git-fixes). - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes). - drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes). - drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes). - drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes). - drm/amd/display: disable RCO for DCN314 (git-fixes). - drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes). - drm/amd/display: limit DPIA link rate to HBR3 (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: trigger timing sync only if TG is running (git-fixes). - drm/amd/pm/smu7: move variables to where they are used (git-fixes). - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes). - drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes). - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes). - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes). - drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes). - drm/amd: flush any delayed gfxoff on suspend entry (git-fixes). - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes). - drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes). - drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes). - drm/amdgpu: Remove unnecessary domain argument (git-fixes). - drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes). - drm/amdgpu: add S/G display parameter (git-fixes). - drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes). - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes). - drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes). - drm/amdgpu: fix memory leak in mes self test (git-fixes). - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes). - drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes). - drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes). - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes). - drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes). - drm/ast: Fix DRAM init on AST2200 (git-fixes). - drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes). - drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes). - drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes). - drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes). - drm/bridge: fix -Wunused-const-variable= warning (git-fixes). - drm/bridge: tc358764: Fix debug print parameter order (git-fixes). - drm/etnaviv: fix dumping of active MMU context (git-fixes). - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes). - drm/i915/sdvo: fix panel_type initialization (git-fixes). - drm/i915: Fix premature release of request's reusable memory (git-fixes). - drm/mediatek: Fix dereference before null check (git-fixes). - drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes). - drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes). - drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes). - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes). - drm/msm/mdp5: Do not leak some plane state (git-fixes). - drm/msm: Update dev core dump to not print backwards (git-fixes). - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes). - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes). - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073). - drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes). - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes). - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes). - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes). - drm/qxl: fix UAF on handle creation (git-fixes). - drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes). - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes). - drm/rockchip: Do not spam logs in atomic check (git-fixes). - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes). - drm/stm: ltdc: fix late dereference check (git-fixes). - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes). - drm/ttm: check null pointer before accessing when swapping (git-fixes). - drm/ttm: never consider pinned BOs for eviction&swap (git-fixes). - drm/vmwgfx: Fix shader stage validation (git-fixes). - drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes). - drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes). - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes). - dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes). - dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes). - dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes). - e1000: Fix typos in comments (jsc#PED-5738). - e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738). - e1000: switch to napi_build_skb() (jsc#PED-5738). - e1000: switch to napi_consume_skb() (jsc#PED-5738). - enable TPM in azure (bsc#1214760) - exfat: fix unexpected EOF while reading dir (bsc#1214000). - exfat: release s_lock before calling dir_emit() (bsc#1214000). - exfat_iterate(): do not open-code file_inode(file) (bsc#1214000). - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes). - fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes). - fbdev: Improve performance of sys_imageblit() (git-fixes). - fbdev: Update fbdev source file paths (git-fixes). - fbdev: fix potential OOB read in fast_imageblit() (git-fixes). - fbdev: mmp: fix value check in mmphw_probe() (git-fixes). - file: reinstate f_pos locking optimization for regular files (bsc#1213759). - firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes). - firmware: cs_dsp: Fix new control name check (git-fixes). - firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes). - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes). - fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes). - fsi: aspeed: Reset master errors after CFAM reset (git-fixes). - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes). - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes). - gpio: mvebu: Make use of devm_pwmchip_add (git-fixes). - gpio: mvebu: fix irq domain leak (git-fixes). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes). - hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453). - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes). - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes). - hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes). - hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes). - hwrng: pic32 - use devm_clk_get_enabled (git-fixes). - i2c: Delete error messages for failed memory allocations (git-fixes). - i2c: Improve size determinations (git-fixes). - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes). - i2c: designware: Correct length byte validation logic (git-fixes). - i2c: designware: Handle invalid SMBus block data response length value (git-fixes). - i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes). - i2c: nomadik: Remove a useless call in the remove function (git-fixes). - i2c: nomadik: Remove unnecessary goto label (git-fixes). - i2c: nomadik: Use devm_clk_get_enabled() (git-fixes). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - iavf: fix potential races for FDIR filters (git-fixes). - ice: Fix RDMA VSI removal during queue rebuild (git-fixes). - ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes). - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes). - iio: adc: stx104: Implement and utilize register structures (git-fixes). - iio: adc: stx104: Utilize iomap interface (git-fixes). - iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes). - intel/e1000:fix repeated words in comments (jsc#PED-5738). - intel: remove unused macros (jsc#PED-5738). - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes). - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). - iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes). - iommu/amd: Fix compile warning in init code (git-fixes). - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes). - iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes). - iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes). - iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes). - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes). - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes). - iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes). - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes). - iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes). - iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes). - iommu/dma: Fix iova map result check bug (git-fixes). - iommu/dma: return error code from iommu_dma_map_sg() (git-fixes). - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes). - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes). - iommu/iova: Fix module config properly (git-fixes). - iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes). - iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes). - iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes). - iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes). - iommu/mediatek: Use component_match_add (git-fixes). - iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes). - iommu/omap: Fix buffer overflow in debugfs (git-fixes). - iommu/rockchip: fix permission bits in page table entries v2 (git-fixes). - iommu/s390: Fix duplicate domain attachments (git-fixes). - iommu/sun50i: Consider all fault sources for reset (git-fixes). - iommu/sun50i: Fix R/W permission check (git-fixes). - iommu/sun50i: Fix flush size (git-fixes). - iommu/sun50i: Fix reset release (git-fixes). - iommu/sun50i: Implement .iotlb_sync_map (git-fixes). - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes). - iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes). - iommu/vt-d: Check correct capability for sagaw determination (git-fixes). - iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes). - iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes). - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes). - iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes). - ipmi:ssif: Add check for kstrdup (git-fixes). - ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes). - ipmi_si: fix a memleak in try_smi_init() (git-fixes). - jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes). - kabi/severities: Ignore newly added SRSO mitigation functions - kabi: Allow extra bugsints (bsc#1213927). - kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there. - kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12. - kunit: make kunit_test_timeout compatible with comment (git-fixes). - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes). - leds: multicolor: Use rounded division when calculating color components (git-fixes). - leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes). - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes). - leds: turris-omnia: Drop unnecessary mutex locking (git-fixes). - lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes). - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes). - libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924). - libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924). - libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924). - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393). - md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916). - md/raid0: Fix performance regression for large sequential writes (bsc#1213916). - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes). - media: cx24120: Add retval check for cx24120_message_send() (git-fixes). - media: dib7000p: Fix potential division by zero (git-fixes). - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes). - media: go7007: Remove redundant if statement (git-fixes). - media: i2c: ccs: Check rules is non-NULL (git-fixes). - media: i2c: rdacm21: Fix uninitialized value (git-fixes). - media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes). - media: ov2680: Add ov2680_fill_format() helper function (git-fixes). - media: ov2680: Do not take the lock for try_fmt calls (git-fixes). - media: ov2680: Fix ov2680_bayer_order() (git-fixes). - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes). - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes). - media: ov2680: Fix vflip / hflip set functions (git-fixes). - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes). - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes). - media: rkvdec: increase max supported height for H.264 (git-fixes). - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes). - media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes). - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes). - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes). - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - mlxsw: pci: Add shutdown method in PCI driver (git-fixes). - mmc: block: Fix in_flight[issue_type] value error (git-fixes). - mmc: moxart: read scr register without changing byte order (git-fixes). - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes). - mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes). - mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes). - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes). - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes). - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes). - mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes). - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes). - mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes). - mtd: spi-nor: Check bus width while setting QE bit (git-fixes). - mtd: spinand: toshiba: Fix ecc_get_status (git-fixes). - n_tty: Rename tail to old_tail in n_tty_read() (git-fixes). - net: hns3: fix wrong bw weight of disabled tc issue (git-fixes). - net: ieee802154: at86rf230: Stop leaking skb's (git-fixes). - net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes). - net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes). - net: phy: broadcom: stub c45 read/write for 54810 (git-fixes). - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes). - net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733) - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes). - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946). - netfs: fix parameter of cleanup() (bsc#1214743). - nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes). - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes). - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes). - nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902). - nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902). - objtool/x86: Fix SRSO mess (git-fixes). - objtool/x86: Fixup frame-pointer vs rethunk (git-fixes). - objtool: Union instruction::{call_dest,jump_table} (git-fixes). - old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes). - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes). - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes). - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes). - phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes). - phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes). - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes). - pinctrl: amd: Mask wake bits on probe again (git-fixes). - pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes). - pinctrl: cherryview: fix address_space_handler() argument (git-fixes). - pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes). - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes). - platform/x86: dell-sysman: Fix reference leak (git-fixes). - powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106). - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106). - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106). - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106). - powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106). - powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106). - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106). - powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106). - powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes). - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106). - powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106). - powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106). - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/rtas: block error injection when locked down (bsc#1023051). - powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051). - powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). - powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869). - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes). - powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files. - powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503). - powerpc: fix typos in comments (bsc#1212091 ltc#199106). - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503). - pstore/ram: Check start of empty przs during init (git-fixes). - pwm: Add a stub for devm_pwmchip_add() (git-fixes). - pwm: meson: Simplify duplicated per-channel tracking (git-fixes). - pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes). - qed: Fix scheduling in a tasklet while getting stats (git-fixes). - regmap: rbtree: Use alloc_flags for memory allocations (git-fixes). - ring-buffer: Do not swap cpu_buffer during resize process (git-fixes). - ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes). - rpm/mkspec-dtb: support for nested subdirs - rpmsg: glink: Add check for kstrdup (git-fixes). - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976). - s390/purgatory: disable branch profiling (git-fixes bsc#1214372). - s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949). - sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes). - sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes). - sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: RDMA/srp: Fix residual handling (git-fixes) - scsi: bsg: Increase number of devices (bsc#1210048). - scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284). - scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: core: Improve warning message in scsi_device_block() (bsc#1209284). - scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: sg: Increase number of devices (bsc#1210048). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Always set no_report_opcodes (git-fixes). - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes). - scsi: storvsc: Handle SRB status value 0x30 (git-fixes). - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes). - scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371). - selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924). - selftests/futex: Order calls to futex_lock_pi (git-fixes). - selftests/harness: Actually report SKIP for signal tests (git-fixes). - selftests/resctrl: Close perf value read fd on errors (git-fixes). - selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes). - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes). - selftests/rseq: check if libc rseq support is registered (git-fixes). - selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes). - selftests: forwarding: Skip test when no interfaces are specified (git-fixes). - selftests: forwarding: Switch off timeout (git-fixes). - selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes). - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes). - selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes). - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes). - selftests: forwarding: tc_flower: Relax success criterion (git-fixes). - selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes). - serial: sc16is7xx: fix broken port 0 uart init (git-fixes). - serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes). - serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes). - serial: sprd: Fix DMA buffer leak issue (git-fixes). - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - smb3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes). - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629). - smb: client: Fix -Wstringop-overflow issues (bsc#1193629). - smb: client: fix dfs link mount against w2k8 (bsc#1212142). - smb: client: fix null auth (git-fixes). - soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes). - soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes). - soundwire: fix enumeration completion (git-fixes). - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes). - supported.conf: fix typos for -!optional markers - swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453). - target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026). - target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873). - target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857). - target_core_rbd: remove snapshot existence validation code (bsc#1212857). - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes). - timers: Add shutdown mechanism to the internal functions (bsc#1213970). - timers: Provide timer_shutdown[_sync]() (bsc#1213970). - timers: Rename del_timer() to timer_delete() (bsc#1213970). - timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: Replace BUG_ON()s (bsc#1213970). - timers: Silently ignore timers with a NULL function (bsc#1213970). - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: Update kernel-doc for various functions (bsc#1213970). - timers: Use del_timer_sync() even on UP (bsc#1213970). - tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes). - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes). - tracing/probes: Fix not to count error code to total length (git-fixes). - tracing/probes: Fix to avoid double count of the string length on the array (git-fixes). - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes). - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes). - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes). - tracing: Fix memleak due to race between current_tracer and trace (git-fixes). - tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes). - tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes). - tracing: Fix warning in trace_buffered_event_disable() (git-fixes). - tty: fix hang on tty device with no_room set (git-fixes). - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes). - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes). - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes). - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes). - ubifs: Fix memleak when insert_old_idx() failed (git-fixes). - usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes). - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes). - usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes). - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes). - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes). - usb: dwc3: Fix typos in gadget.c (git-fixes). - usb: dwc3: Properly handle processing of pending events (git-fixes). - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes). - usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes). - usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes). - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes). - usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes). - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes). - usb: quirks: add quirk for Focusrite Scarlett (git-fixes). - usb: serial: option: add Quectel EC200A module support (git-fixes). - usb: serial: option: support Quectel EM060K_128 (git-fixes). - usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes). - usb: serial: simple: sort driver entries (git-fixes). - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes). - usb: typec: tcpm: Fix response to vsafe0V event (git-fixes). - usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes). - usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes). - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes). - wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes). - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes). - wifi: cfg80211: Fix return value in scan logic (git-fixes). - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes). - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes). - wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes). - wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes). - wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes). - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes). - wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes). - wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes). - wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes). - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes). - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes). - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes). - wifi: radiotap: fix kernel-doc notation warnings (git-fixes). - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes). - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes). - x86/alternative: Make custom return thunk unconditional (git-fixes). - x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes). - x86/cpu: Clean up SRSO return thunk mess (git-fixes). - x86/cpu: Cleanup the untrain mess (git-fixes). - x86/cpu: Fix __x86_return_thunk symbol type (git-fixes). - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes). - x86/cpu: Rename original retbleed methods (git-fixes). - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes). - x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453). - x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453). - x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453). - x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453). - x86/hyperv: Reorder code to facilitate future work (bsc#1206453). - x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453). - x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453). - x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes). - x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453). - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes). - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). - x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes). - x86/speculation: Add cpu_show_gds() prototype (git-fixes). - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). - x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). - x86/srso: Disable the mitigation on unaffected configurations (git-fixes). - x86/srso: Explain the untraining sequences a bit more (git-fixes). - x86/srso: Fix build breakage with the LLVM linker (git-fixes). - x86/srso: Fix return thunks in generated code (git-fixes). - x86/static_call: Fix __static_call_fixup() (git-fixes). - x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453). - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453). - x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453). - x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453). - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453). - xfs: fix sb write verify for lazysbcount (bsc#1214661). Important SUSE bug 1023051 SUSE bug 1120059 SUSE bug 1177719 SUSE bug 1188885 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203329 SUSE bug 1203330 SUSE bug 1205462 SUSE bug 1206453 SUSE bug 1208902 SUSE bug 1208949 SUSE bug 1209284 SUSE bug 1209799 SUSE bug 1210048 SUSE bug 1210448 SUSE bug 1211220 SUSE bug 1212091 SUSE bug 1212142 SUSE bug 1212423 SUSE bug 1212526 SUSE bug 1212857 SUSE bug 1212873 SUSE bug 1213026 SUSE bug 1213123 SUSE bug 1213546 SUSE bug 1213580 SUSE bug 1213601 SUSE bug 1213666 SUSE bug 1213733 SUSE bug 1213757 SUSE bug 1213759 SUSE bug 1213916 SUSE bug 1213921 SUSE bug 1213927 SUSE bug 1213946 SUSE bug 1213949 SUSE bug 1213968 SUSE bug 1213970 SUSE bug 1213971 SUSE bug 1214000 SUSE bug 1214019 SUSE bug 1214073 SUSE bug 1214120 SUSE bug 1214149 SUSE bug 1214180 SUSE bug 1214233 SUSE bug 1214238 SUSE bug 1214285 SUSE bug 1214297 SUSE bug 1214299 SUSE bug 1214305 SUSE bug 1214350 SUSE bug 1214368 SUSE bug 1214370 SUSE bug 1214371 SUSE bug 1214372 SUSE bug 1214380 SUSE bug 1214386 SUSE bug 1214392 SUSE bug 1214393 SUSE bug 1214397 SUSE bug 1214404 SUSE bug 1214428 SUSE bug 1214451 SUSE bug 1214659 SUSE bug 1214661 SUSE bug 1214727 SUSE bug 1214729 SUSE bug 1214742 SUSE bug 1214743 SUSE bug 1214756 SUSE bug 1214760 SUSE bug 1214976 CVE-2022-38457 CVE-2022-40133 CVE-2023-2007 CVE-2023-20588 CVE-2023-34319 CVE-2023-3610 CVE-2023-37453 CVE-2023-3772 CVE-2023-3863 CVE-2023-40283 CVE-2023-4128 CVE-2023-4133 CVE-2023-4134 CVE-2023-4147 CVE-2023-4194 CVE-2023-4273 CVE-2023-4387 CVE-2023-4459 CVE-2023-4563 CVE-2023-4569 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-brotlipy (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-brotlipy fixes the following issues: - CVE-2020-8927: Fixed integer overflow when input chunk is larger than 2GiB (bsc#1175825). Moderate SUSE bug 1175825 CVE-2020-8927 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Public Cloud 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 The SUSE Linux Enterprise 15 SP5 Azure kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2023-39192: Fixed an out of bounds read in the netfilter (bsc#1215858). - CVE-2023-39193: Fixed an out of bounds read in the xtables subsystem (bsc#1215860). - CVE-2023-39194: Fixed an out of bounds read in the XFRM subsystem (bsc#1215861). - CVE-2023-42754: Fixed a NULL pointer dereference in the IPv4 stack that could lead to denial of service (bsc#1215467). - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation (bsc#1215899). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table which could be exploited by network adjacent attackers, increasing CPU usage by 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages (bsc#1214022). - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes). - ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes). - ARM: pxa: remove use of symbol_get() (git-fixes). - ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes). - ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes). - ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes). - ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes). - ASoC: meson: spdifin: start hw on dai probe (git-fixes). - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5640: Revert 'Fix sleep in atomic context' (git-fixes). - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes). - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes). - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453). - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453). - Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453). - Drop amdgpu patch causing spamming (bsc#1215523). - Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes). - KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes). - KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes). - KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911). - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915). - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896). - KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916). - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894). - KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895). - KVM: x86/mmu: Include mmu.h in spte.h (git-fixes). - KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes). - NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes). - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes). - NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes). - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes). - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes). - NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes). - NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes). - PCI: Free released resource after coalescing (git-fixes). - RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes) - Revert 'PCI: Mark NVIDIA T4 GPUs to avoid bus reset' (git-fixes). - Revert 'scsi: qla2xxx: Fix buffer overrun' (bsc#1214928). - SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes). - USB: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). - USB: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). - arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes) - arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453). - arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes). - arm64: module-plts: inline linux/moduleloader.h (git-fixes) - arm64: module: Use module_init_layout_section() to spot init sections (git-fixes) - arm64: sdei: abort running SDEI handlers during crash (git-fixes) - arm64: tegra: Update AHUB clock parent and rate (git-fixes) - ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes). - ata: pata_falcon: fix IO base selection for Q40 (git-fixes). - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes). - ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes). - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes). - blacklist.conf: workqueue: compiler warning on 32-bit systems with Clang (bsc#1215877) - blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986). - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992). - block/mq-deadline: use correct way to throttling write requests (bsc#1214993). - bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322). - bpf: Clear the probe_addr for uprobe (git-fixes). - btrfs: do not hold CPU for too long when defragging a file (bsc#1214988). - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453). - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - drm/amd/display: Add smu write msg id fail retry process (git-fixes). - drm/amd/display: Remove wait while locked (git-fixes). - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes). - drm/amd/display: fix the white screen issue when >= 64GB DRAM (git-fixes). - drm/amd/display: prevent potential division by zero errors (git-fixes). - drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes). - drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: * rename ast_device to ast_private - drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: * rename ast_device to ast_private * context changes - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808). - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes). - drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes). - drm/i915/gvt: Verify pfn is 'valid' before dereferencing 'struct page' (git-fixes). - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes). - drm/meson: fix memory leak on ->hpd_notify callback (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes). - ext4: Remove ext4 locking of moved directory (bsc#1214957). - ext4: avoid potential data overflow in next_linear_group (bsc#1214951). - ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954). - ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). - ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944). - ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942). - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941). - ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). - fs: Establish locking order for unrelated directories (bsc#1214958). - fs: Lock moved directories (bsc#1214959). - fs: do not update freeing inode i_io_list (bsc#1214813). - fs: lockd: avoid possible wrong NULL parameter (git-fixes). - fs: no need to check source (bsc#1215752). - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813). - fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581). - gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479). - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: use vmalloc_array and vcalloc (bsc#1214479). - hwrng: virtio - Fix race on data_avail and actual data (git-fixes). - hwrng: virtio - add an internal buffer (git-fixes). - hwrng: virtio - always add a pending request (git-fixes). - hwrng: virtio - do not wait on cleanup (git-fixes). - hwrng: virtio - do not waste entropy (git-fixes). - i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes). - i3c: master: svc: fix probe failure when no i3c device exist (git-fixes). - i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes). - idr: fix param name in idr_alloc_cyclic() doc (git-fixes). - iommu/virtio: Detach domain on endpoint release (git-fixes). - iommu/virtio: Return size mapped for a detached domain (git-fixes). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). - jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). - jbd2: correct the end of the journal recovery scan range (bsc#1214955). - jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). - jbd2: fix checkpoint cleanup performance regression (bsc#1214952). - jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). - jbd2: remove journal_clean_one_cp_list() (bsc#1214947). - jbd2: remove t_checkpoint_io_list (bsc#1214946). - jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). - kabi/severities: ignore mlx4 internal symbols - s390/ipl: add support for List-Directed dump from ECKD DASD (jsc#PED-2023, jsc#PED-2025). - kconfig: fix possible buffer overflow (git-fixes). - kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template. - kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist. - kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes). - loop: Fix use-after-free issues (bsc#1214991). - loop: loop_set_status_from_info() check before assignment (bsc#1214990). - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236). - mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236). - mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236). - mlx4: Delete custom device management logic (bsc#1187236). - mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236). - mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236). - mlx4: Move the bond work to the core driver (bsc#1187236). - mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236). - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236). - mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236). - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236). - module: Expose module_init_layout_section() (git-fixes) - net/mlx4: Remove many unnecessary NULL values (bsc#1187236). - net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). - net: mana: Add page pool for RX buffers (bsc#1214040). - net: mana: Configure hwc timeout from hardware (bsc#1214037). - net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes). - net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). - nfs/blocklayout: Use the passed in gfp flags (git-fixes). - nfsd: Fix race to FREE_STATEID and cl_revoked (git-fixes). - nfsd: fix change_info in NFSv4 RENAME replies (git-fixes). - ntb: Clean up tx tail index on link down (git-fixes). - ntb: Drop packets when qp link is down (git-fixes). - ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes). - nvme-auth: use chap->s2 to indicate bidirectional authentication (bsc#1214543). - nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284). - nvme-tcp: add recovery_delay to sysfs (bsc#1201284). - nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284). - nvme-tcp: make 'err_work' a delayed work (bsc#1201284). - pNFS: Fix assignment of xprtdata.cred (git-fixes). - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes). - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes). - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes). - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes). - platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes). - platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes). - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582). - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). - powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). - printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875). - pwm: lpc32xx: Remove handling of PWM channels (git-fixes). - quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). - quota: add new helper dquot_active() (bsc#1214998). - quota: factor out dquot_write_dquot() (bsc#1214995). - quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963). - quota: fix warning in dqgrab() (bsc#1214962). - quota: rename dquot_active() to inode_quota_active() (bsc#1214997). - s390/dasd: fix hanging device after request requeue (git-fixes bsc#1215124). - s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes). - s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148). - s390: add z16 elf platform (git-fixes bsc#1215956, bsc#1215957). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes). - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes). - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes). - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes). - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes). - scsi: lpfc: Remove reftag check in DIF paths (git-fixes). - scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928). - scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928). - scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928). - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928). - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928). - scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928). - scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928). - scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928). - scsi: qla2xxx: Remove unused declarations (bsc#1214928). - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928). - scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928). - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Handle additional SRB status values (git-fixes). - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941). - selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549). - selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes). - spi: Add TPM HW flow flag (bsc#1213534) - spi: tegra210-quad: Enable TPM wait polling (bsc#1213534) - spi: tegra210-quad: set half duplex flag (bsc#1213534) - tcpm: Avoid soft reset when partner does not support get_status (git-fixes). - tpm_tis_spi: Add hardware wait polling (bsc#1213534) - tracing: Fix race issue between cpu buffer write and swap (git-fixes). - tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes). - tracing: Remove unnecessary copying of tr->current_trace (git-fixes). - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes). - udf: Fix extension of the last extent in the file (bsc#1214964). - udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965). - udf: Fix off-by-one error when discarding preallocation (bsc#1214966). - udf: Fix uninitialized array access for some pathnames (bsc#1214967). - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes). - usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes). - usb: ehci: move new member has_ci_pec_bug into hole (git-fixes). - usb: typec: tcpci: clear the fault status bit (git-fixes). - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes). - vhost-scsi: unbreak any layout for response (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: fix hung thread due to erroneous iotlb entries (git-fixes). - vhost: handle error while adding split ranges to iotlb (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (git-fixes). - virtio-blk: set req->state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes). - virtio-mmio: do not break lifecycle of vm_dev (git-fixes). - virtio-net: fix race between set queues and probe (git-fixes). - virtio-net: set queues after driver_ok (git-fixes). - virtio-rng: make device ready before making request (git-fixes). - virtio: acknowledge all features before access (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: add checking sq is full inside xdp xmit (git-fixes). - virtio_net: reorder some funcs (git-fixes). - virtio_net: separate the logic of checking whether sq is full (git-fixes). - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes). - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582). - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes). - word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729). - x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes). - x86/alternative: Fix race in try_get_desc() (git-fixes). - x86/boot/e820: Fix typo in e820.c comment (git-fixes). - x86/bugs: Reset speculation control settings on init (git-fixes). - x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453). - x86/coco: Export cc_vendor (bsc#1206453). - x86/cpu: Add Lunar Lake M (git-fixes). - x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes). - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes). - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes). - x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453). - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453). - x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453). - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453). - x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453) - x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453). - x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453). - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453). - x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453). - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453). - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453). - x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453). - x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453). - x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453). - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes). - x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes). - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes). - x86/mce: Retrieve poison range from hardware (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes). - x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes). - x86/purgatory: remove PGO flags (git-fixes). - x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes). - x86/resctl: fix scheduler confusion with 'current' (git-fixes). - x86/resctrl: Fix task CLOSID/RMID update race (git-fixes). - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). - x86/rtc: Remove __init for runtime functions (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/sgx: Reduce delay and interference of enclave release (git-fixes). - x86/srso: Do not probe microcode in a guest (git-fixes). - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). - x86/srso: Fix srso_show_state() side effect (git-fixes). - x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes). - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes). - xen: remove a confusing comment on auto-translated guest I/O (git-fixes). - xprtrdma: Remap Receive buffers after a reconnect (git-fixes). Important SUSE bug 1065729 SUSE bug 1152472 SUSE bug 1187236 SUSE bug 1201284 SUSE bug 1202845 SUSE bug 1206453 SUSE bug 1208995 SUSE bug 1210169 SUSE bug 1210643 SUSE bug 1210658 SUSE bug 1212639 SUSE bug 1212703 SUSE bug 1213123 SUSE bug 1213534 SUSE bug 1213808 SUSE bug 1214022 SUSE bug 1214037 SUSE bug 1214040 SUSE bug 1214233 SUSE bug 1214351 SUSE bug 1214479 SUSE bug 1214543 SUSE bug 1214635 SUSE bug 1214813 SUSE bug 1214873 SUSE bug 1214928 SUSE bug 1214940 SUSE bug 1214941 SUSE bug 1214942 SUSE bug 1214943 SUSE bug 1214944 SUSE bug 1214945 SUSE bug 1214946 SUSE bug 1214947 SUSE bug 1214948 SUSE bug 1214949 SUSE bug 1214950 SUSE bug 1214951 SUSE bug 1214952 SUSE bug 1214953 SUSE bug 1214954 SUSE bug 1214955 SUSE bug 1214957 SUSE bug 1214958 SUSE bug 1214959 SUSE bug 1214961 SUSE bug 1214962 SUSE bug 1214963 SUSE bug 1214964 SUSE bug 1214965 SUSE bug 1214966 SUSE bug 1214967 SUSE bug 1214986 SUSE bug 1214988 SUSE bug 1214990 SUSE bug 1214991 SUSE bug 1214992 SUSE bug 1214993 SUSE bug 1214995 SUSE bug 1214997 SUSE bug 1214998 SUSE bug 1215115 SUSE bug 1215117 SUSE bug 1215123 SUSE bug 1215124 SUSE bug 1215148 SUSE bug 1215150 SUSE bug 1215221 SUSE bug 1215275 SUSE bug 1215322 SUSE bug 1215467 SUSE bug 1215523 SUSE bug 1215581 SUSE bug 1215752 SUSE bug 1215858 SUSE bug 1215860 SUSE bug 1215861 SUSE bug 1215875 SUSE bug 1215877 SUSE bug 1215894 SUSE bug 1215895 SUSE bug 1215896 SUSE bug 1215899 SUSE bug 1215911 SUSE bug 1215915 SUSE bug 1215916 SUSE bug 1215941 SUSE bug 1215956 SUSE bug 1215957 CVE-2023-1192 CVE-2023-1206 CVE-2023-1859 CVE-2023-2177 CVE-2023-37453 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-40283 CVE-2023-4155 CVE-2023-42753 CVE-2023-42754 CVE-2023-4389 CVE-2023-4622 CVE-2023-4623 CVE-2023-4881 CVE-2023-4921 CVE-2023-5345 cpe:/o:suse:sle-module-public-cloud:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python311 (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python311 fixes the following issues: - CVE-2007-4559: Fixed filter for tarfile.extractall (bsc#1203750). Moderate SUSE bug 1203750 CVE-2007-4559 cpe:/o:suse:sle-module-python3:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python-pip (Low) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python-pip fixes the following issues: - Removed .exe files from the RPM package, to prevent issues with security scanners (bsc#1212015). Low SUSE bug 1212015 cpe:/o:suse:sle-module-python3:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python311 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python311 fixes the following issues: python was updated to version 3.11.4: - CVE-2023-24329: Fixed blocklist bypass via the urllib.parse component when supplying a URL that starts with blank characters (bsc#1208471). - CVE-2007-4559: Fixed python tarfile module directory traversal (bsc#1203750). - Fixed a security in flaw in uu.decode() that could allow for directory traversal based on the input if no out_file was specified. - Do not expose the local on-disk location in directory indexes produced by http.client.SimpleHTTPRequestHandler. Bugfixes: - trace.__main__ now uses io.open_code() for files to be executed instead of raw open(). Important SUSE bug 1203750 SUSE bug 1208471 CVE-2007-4559 CVE-2023-24329 cpe:/o:suse:sle-module-python3:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libxml2 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libxml2 fixes the following issues: - CVE-2023-39615: Fixed crafted xml can cause global buffer overflow (bsc#1214768). Important SUSE bug 1214768 CVE-2023-39615 cpe:/o:suse:sle-module-python3:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for python311 (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Python 3 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for python311 fixes the following issues: Update to 3.11.5. - CVE-2023-40217: Fixed TLS handshake bypass on closed sockets (bsc#1214692). - CVE-2023-41105: Fixed input truncation on null bytes in os.path.normpath (bsc#1214693). Important SUSE bug 1214692 SUSE bug 1214693 CVE-2023-40217 CVE-2023-41105 cpe:/o:suse:sle-module-python3:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for prometheus-sap_host_exporter (Important) SUSE Linux Enterprise Module for SAP Applications 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for prometheus-sap_host_exporter fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1208270). - fixed exporter package description (bsc#1211311). Important SUSE bug 1208270 SUSE bug 1211311 cpe:/o:suse:sle-module-sap-applications:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for mariadb (Low) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for mariadb fixes the following issues: Updated to version 10.6.13: - CVE-2022-47015: Fixed a denial of service that could be triggered by a crafted SQL query (bsc#1207404). Low SUSE bug 1207404 CVE-2022-47015 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for frr (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for frr fixes the following issues: - CVE-2023-31489: Fixed a remote denial of service via a malformed BGP packet (bsc#1211248). - CVE-2023-31490: Fixed a remote denial of service via a malformed BGP packet (bsc#1211249). Important SUSE bug 1211248 SUSE bug 1211249 CVE-2023-31489 CVE-2023-31490 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xen (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xen fixes the following issues: Security fixes: - CVE-2022-42336: Fix an issue where guests configuring AMD Speculative Store Bypass Disable would have no effect (XSA-431) (bsc#1211433). - CVE-2022-42335: Fixed an issue where guests running under shadow mode with a PCI devices passed through could force the hypervisor to dereference arbitrary memory, leading to a denial of service (XSA-430) (bsc#1210315). Non-security fixes: - Fixed a build warning false positive (bsc#1210570). - Added missing debug-info to xen-syms (bsc#1209237). - Updated to version 4.17.1 (bsc#1027519). - Fixed a failure during VM destruction when using host-assisted kexec and kdump (bsc#1209245). - Other upstream fixes (bsc#1027519). Important SUSE bug 1027519 SUSE bug 1208736 SUSE bug 1209237 SUSE bug 1209245 SUSE bug 1210315 SUSE bug 1210570 SUSE bug 1211433 CVE-2022-42335 CVE-2022-42336 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openvswitch3 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openvswitch3 fixes the following issues: - CVE-2023-1668: Fixed a remote denial of service that could be triggered via malformed IP packets (bsc#1210054). Important SUSE bug 1210054 CVE-2023-1668 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libvirt (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libvirt fixes the following issues: - CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList (bsc#1211390) - apparmor: Add support for local profile customizations (bsc#1211472) - qemu: Fix cdrom media change (bsc#1210666) - qemu: Fix potential crash during driver cleanup (bsc#1209861) Moderate SUSE bug 1209861 SUSE bug 1210666 SUSE bug 1211390 SUSE bug 1211472 CVE-2023-2700 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for iniparser (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for iniparser fixes the following issues: - CVE-2023-33461: Fixed NULL pointer dereference in iniparser_getboolean() (bsc#1211889). Moderate SUSE bug 1211889 CVE-2023-33461 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rmt-server (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rmt-server fixes the following issues: Update to version 2.13: - CVE-2023-28120: Fixed a possible XSS Security Vulnerability in bytesliced strings for html_safe (bsc#1209507). - CVE-2023-27530: Fixed a DoS in multipart mime parsing (bsc#1209096). - CVE-2022-31254: Fixed escalation vector bug from user _rmt to root in the packaging file (bsc#1204285). Bug fixes: - Handle X-Original-URI header, partial fix for (bsc#1211398) - Force rmt-client-setup-res script to use https (bsc#1209825) - Mark secrets.yml.key file as part of the rpm to allow seamless downgrades (bsc#1207670) - Adding -f to the file move command when moving the mirrored directory to its final location (bsc#1203171) - Fix %post install of pubcloud subpackage reload of nginx (bsc#1206593) - Skip warnings regarding nokogiri libxml version mismatch (bsc#1202053) - Add option to turn off system token support (bsc#1205089) - Do not retry to import non-existing files in air-gapped mode (bsc#1204769) Important SUSE bug 1202053 SUSE bug 1203171 SUSE bug 1204285 SUSE bug 1204769 SUSE bug 1205089 SUSE bug 1206593 SUSE bug 1207670 SUSE bug 1209096 SUSE bug 1209507 SUSE bug 1209825 SUSE bug 1211398 CVE-2022-31254 CVE-2023-27530 CVE-2023-28120 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for grpc, protobuf, python-Deprecated, python-PyGithub, python-aiocontextvars, python-avro, python-bcrypt, python-cryptography, python-cryptography-vectors, python-google-api-core, python-googleapis-common-protos, python-grpcio-gcp, python-humanfriendly, python-jsondiff, python-knack, python-opencensus, python-opencensus-context, python-opencensus-ext-threading, python-opentelemetry-api, python-psutil, python-pytest-asyncio, python-requests, python-websocket-client, python-websockets fixes the following issues: grpc: - Update in SLE-15 (bsc#1197726, bsc#1144068) protobuf: - Fix a potential DoS issue in protobuf-cpp and protobuf-python, CVE-2022-1941, bsc#1203681 - Fix a potential DoS issue when parsing with binary data in protobuf-java, CVE-2022-3171, bsc#1204256 - Fix potential Denial of Service in protobuf-java in the parsing procedure for binary data, CVE-2021-22569, bsc#1194530 - Add missing dependency of python subpackages on python-six (bsc#1177127) - Updated to version 3.9.2 (bsc#1162343) * Remove OSReadLittle* due to alignment requirements. * Don't use unions and instead use memcpy for the type swaps. - Disable LTO (bsc#1133277) python-aiocontextvars: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-avro: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-cryptography: - update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331) * SECURITY ISSUE: Fixed a bug where certain sequences of update() calls when symmetrically encrypting very large payloads (>2GB) could result in an integer overflow, leading to buffer overflows. CVE-2020-36242 python-cryptography-vectors: - update to 3.2 (bsc#1178168, CVE-2020-25659): * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time, to protect against Bleichenbacher vulnerabilities. Due to limitations imposed by our API, we cannot completely mitigate this vulnerability. * Support for OpenSSL 1.0.2 has been removed. * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder. - update to 3.3.2 (bsc#1198331) python-Deprecated: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 1.2.13: python-google-api-core: - Update to 1.14.2 python-googleapis-common-protos: - Update to 1.6.0 python-grpcio-gcp: - Initial spec for v0.2.2 python-humanfriendly: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to 10.0 python-jsondiff: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.0 python-knack: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 0.9.0 python-opencensus: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Disable Python2 build - Update to 0.8.0 python-opencensus-context: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-opencensus-ext-threading: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial build version 0.1.2 python-opentelemetry-api: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Version update to 1.5.0 python-psutil: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 5.9.1 - remove the dependency on net-tools, since it conflicts with busybox-hostnmame which is default on MicroOS. (bsc#1184753) - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-PyGithub: - Update to 1.43.5: python-pytest-asyncio: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Initial release of python-pytest-asyncio 0.8.0 python-requests: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) python-websocket-client: - Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - Update to version 1.3.2 python-websockets: - Include in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629) - update to 9.1: Important SUSE bug 1099269 SUSE bug 1133277 SUSE bug 1144068 SUSE bug 1162343 SUSE bug 1177127 SUSE bug 1178168 SUSE bug 1182066 SUSE bug 1184753 SUSE bug 1194530 SUSE bug 1197726 SUSE bug 1198331 SUSE bug 1199282 SUSE bug 1203681 SUSE bug 1204256 CVE-2018-1000518 CVE-2020-25659 CVE-2020-36242 CVE-2021-22569 CVE-2021-22570 CVE-2022-1941 CVE-2022-3171 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for rabbitmq-c (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for rabbitmq-c fixes the following issues: - CVE-2023-35789: Fixed insecure credentials submission (bsc#1212499). Important SUSE bug 1212499 CVE-2023-35789 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for bind (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bind fixes the following issues: Update to release 9.16.42 Security Fixes: * The overmem cleaning process has been improved, to prevent the cache from significantly exceeding the configured max-cache-size limit. (CVE-2023-2828) * A query that prioritizes stale data over lookup triggers a fetch to refresh the stale data in cache. If the fetch is aborted for exceeding the recursion quota, it was possible for named to enter an infinite callback loop and crash due to stack overflow. This has been fixed. (CVE-2023-2911) Bug Fixes: * Previously, it was possible for a delegation from cache to be returned to the client after the stale-answer-client-timeout duration. This has been fixed. [bsc#1212544, bsc#1212567, jsc#SLE-24600] Update to release 9.16.41 Bug Fixes: * When removing delegations from an opt-out range, empty-non-terminal NSEC3 records generated by those delegations were not cleaned up. This has been fixed. [jsc#SLE-24600] Update to release 9.16.40 Bug Fixes: * Logfiles using timestamp-style suffixes were not always correctly removed when the number of files exceeded the limit set by versions. This has been fixed for configurations which do not explicitly specify a directory path as part of the file argument in the channel specification. * Performance of DNSSEC validation in zones with many DNSKEY records has been improved. Update to release 9.16.39 Feature Changes: * libuv support for receiving multiple UDP messages in a single recvmmsg() system call has been tweaked several times between libuv versions 1.35.0 and 1.40.0; the current recommended libuv version is 1.40.0 or higher. New rules are now in effect for running with a different version of libuv than the one used at compilation time. These rules may trigger a fatal error at startup: - Building against or running with libuv versions 1.35.0 and 1.36.0 is now a fatal error. - Running with libuv version higher than 1.34.2 is now a fatal error when named is built against libuv version 1.34.2 or lower. - Running with libuv version higher than 1.39.0 is now a fatal error when named is built against libuv version 1.37.0, 1.38.0, 1.38.1, or 1.39.0. * This prevents the use of libuv versions that may trigger an assertion failure when receiving multiple UDP messages in a single system call. Bug Fixes: * named could crash with an assertion failure when adding a new zone into the configuration file for a name which was already configured as a member zone for a catalog zone. This has been fixed. * When named starts up, it sends a query for the DNSSEC key for each configured trust anchor to determine whether the key has changed. In some unusual cases, the query might depend on a zone for which the server is itself authoritative, and would have failed if it were sent before the zone was fully loaded. This has now been fixed by delaying the key queries until all zones have finished loading. [jsc#SLE-24600] Important SUSE bug 1212090 SUSE bug 1212544 SUSE bug 1212567 CVE-2023-2828 CVE-2023-2911 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for redis (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for redis fixes the following issues: - CVE-2022-24834: Fixed heap overflow in the cjson and cmsgpack libraries (bsc#1213193). Important SUSE bug 1213193 CVE-2022-24834 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for redis7 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for redis7 fixes the following issues: - CVE-2022-24834: Fixed heap overflow in the cjson and cmsgpack libraries (bsc#1213193). - CVE-2023-28856: Fixed HINCRBYFLOAT invalid key crash (bsc#1210548). - CVE-2022-36021: Fixed integer overflow via Specially crafted SRANDMEMBER, ZRANDMEMBER, and HRANDFIELD (bsc#1208790). - CVE-2023-25155: Fixed Integer Overflow in RAND commands (bsc#1208793). - CVE-2023-28425: Fixed denial-of-service via Specially crafted MSETNX command (bsc#1209528). - CVE-2023-36824: Fixed heap overflow in COMMAND GETKEYS and ACL evaluation (bsc#1213249). Important SUSE bug 1208790 SUSE bug 1208793 SUSE bug 1209528 SUSE bug 1210548 SUSE bug 1213193 SUSE bug 1213249 CVE-2022-24834 CVE-2022-36021 CVE-2023-25155 CVE-2023-28425 CVE-2023-28856 CVE-2023-36824 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libvirt (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for libvirt fixes the following issues: Security fixes: - CVE-2023-3750: Fixed mproper locking in virStoragePoolObjListSearch that may lead to denial of service (bsc#1213447). Other fixes: - build library with support for modular daemons (bsc#1213352). Moderate SUSE bug 1213352 SUSE bug 1213447 CVE-2023-3750 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for grub2 (Important) (in QA) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for grub2 fixes the following issues: Security fixes: - CVE-2023-4692: Fixed an out-of-bounds write at fs/ntfs.c which may lead to unsigned code execution. (bsc#1215935) - CVE-2023-4693: Fixed an out-of-bounds read at fs/ntfs.c which may lead to leak sensitive information. (bsc#1215936) Other fixes: - Fix a boot delay issue in PowerPC PXE boot (bsc#1201300) This patch is currently in QA and not yet available for download. Important SUSE bug 1201300 SUSE bug 1215935 SUSE bug 1215936 CVE-2023-4692 CVE-2023-4693 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for qemu (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for qemu fixes the following issues: - CVE-2023-3301: Fixed incorrect cleanup of the vdpa/vhost-net structures if peer nic is present (bsc#1213414). - CVE-2023-0330: Fixed reentrancy issues in the LSI controller (bsc#1207205). - CVE-2023-2861: Fixed opening special files in 9pfs (bsc#1212968). - CVE-2023-3255: Fixed infinite loop in inflate_buffer() leads to denial of service (bsc#1213001). Bugfixes: - hw/ide/piix: properly initialize the BMIBA register (bsc#bsc#1179993) - Fixed issue where Guest did not run on XEN SLES15SP2 (bsc#1181740). Important SUSE bug 1179993 SUSE bug 1181740 SUSE bug 1207205 SUSE bug 1212968 SUSE bug 1213001 SUSE bug 1213414 CVE-2023-0330 CVE-2023-2861 CVE-2023-3255 CVE-2023-3301 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xmltooling (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xmltooling fixes the following issues: - CVE-2023-36661: Fix server-side request forgery vulnerability (bsc#1212359) Moderate SUSE bug 1212359 CVE-2023-36661 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for salt (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for salt fixes the following issues: Security fixes: - CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741) Bug fixes: - Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994) - Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591) Moderate SUSE bug 1210994 SUSE bug 1211591 SUSE bug 1211741 CVE-2023-28370 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for cjose (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for cjose fixes the following issues: - CVE-2023-37464: Fixed AES GCM decryption uses the Tag length from the actual Authentication Tag (bsc#1213385). Important SUSE bug 1213385 CVE-2023-37464 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for krb5 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for krb5 fixes the following issues: - CVE-2023-36054: Fixed a DoS that could be triggered by an authenticated remote user. (bsc#1214054) Important SUSE bug 1214054 CVE-2023-36054 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for postgresql15 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postgresql15 fixes the following issues: - Update to 15.4 - CVE-2023-39417: Fixed potential SQL injection for trusted extensions. (bsc#1214059) - CVE-2023-39418: Fix MERGE to enforce row security. (bsc#1214061) Moderate SUSE bug 1214059 SUSE bug 1214061 CVE-2023-39417 CVE-2023-39418 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for postfix (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for postfix fixes the following issues: - CVE-2023-32182: Fixed config_postfix SUSE specific script potentially bad /tmp file usage (bsc#1211196). - Update to from 3.7.2 to 3.7.3: - Fixes a bug where some messages were not delivered after 'warning: Unexpected record type 'X'. (bsc#1213515) Important SUSE bug 1211196 SUSE bug 1213515 CVE-2023-32182 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for erlang (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for erlang fixes the following issues: - Replaced the CVE-2022-37026 patch with the one released by the upstream to fix a regression in the previous one. (bsc#1205318) Important SUSE bug 1205318 SUSE bug 1207113 CVE-2022-37026 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xen (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xen fixes the following issues: - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434) - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling'. (bsc#1214083, XSA-435) - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information. (bsc#1213616, XSA-433) Moderate SUSE bug 1027519 SUSE bug 1212684 SUSE bug 1213616 SUSE bug 1214082 SUSE bug 1214083 CVE-2022-40982 CVE-2023-20569 CVE-2023-20593 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for frr (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for frr fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284). - CVE-2023-41358: Fixed crash in bgpd/bgp_packet.c (bsc#1214735). - CVE-2023-41360: Fixed out-of-bounds read in bgpd/bgp_packet.c (bsc#1214739). - CVE-2023-3748: Fixed inifinite loop in babld message parsing may cause DoS (bsc#1213434). - CVE-2023-41909: Fixed NULL pointer dereference due to processing in bgp_nlri_parse_flowspec (bsc#1215065). Important SUSE bug 1213284 SUSE bug 1213434 SUSE bug 1214735 SUSE bug 1214739 SUSE bug 1215065 CVE-2023-3748 CVE-2023-38802 CVE-2023-41358 CVE-2023-41360 CVE-2023-41909 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for openvswitch3 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for openvswitch3 fixes the following issues: - CVE-2023-3153: Fixed service monitor MAC flow is not rate limited (bsc#1212125). Moderate SUSE bug 1212125 CVE-2023-3152 CVE-2023-3153 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for redis7 (Low) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for redis7 fixes the following issues: - CVE-2023-41053: Fixed SORT_RO may bypass ACL configuration (bsc#1215094). Low SUSE bug 1215094 CVE-2023-41053 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for bind (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for bind fixes the following issues: Update to release 9.16.44: - CVE-2023-3341: Fixed stack exhaustion flaw in control channel code may cause named to terminate unexpectedly (bsc#1215472). Update to release 9.16.43 * Processing already-queued queries received over TCP could cause an assertion failure, when the server was reconfigured at the same time or the cache was being flushed. This has been fixed. Important SUSE bug 1215472 CVE-2023-3341 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xen (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xen fixes the following issues: - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). - CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). Important SUSE bug 1215145 SUSE bug 1215474 CVE-2023-20588 CVE-2023-34322 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for quagga (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for quagga fixes the following issues: - CVE-2023-38802: Fixed bad length handling in BGP attribute handling (bsc#1213284). - CVE-2023-41358: Fixed possible crash when processing NLRIs if the attribute length is zero (bsc#1214735). Important SUSE bug 1213284 SUSE bug 1214735 CVE-2023-38802 CVE-2023-41358 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for salt (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441) - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. (bsc#1214797, bsc#1193948) Bugs fixed: - Create minion_id with reproducible mtime - Fix broken tests to make them running in the testsuite - Fix detection of Salt codename by 'salt_version' execution module - Fix inconsistency in reported version by egg-info metadata (bsc#1215489) - Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844) - Fix the regression of user.present state when group is unset (bsc#1212855) - Fix utf8 handling in 'pass' renderer and make it more robust - Fix zypper repositories always being reconfigured - Make sure configured user is properly set by Salt (bsc#1210994) - Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794) - Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses (bsc#1213960, bsc#1213630, bsc#1213257) Moderate SUSE bug 1193948 SUSE bug 1210994 SUSE bug 1212794 SUSE bug 1212844 SUSE bug 1212855 SUSE bug 1213257 SUSE bug 1213441 SUSE bug 1213630 SUSE bug 1213960 SUSE bug 1214796 SUSE bug 1214797 SUSE bug 1215489 CVE-2023-20897 CVE-2023-20898 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for xen (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for xen fixes the following issues: - CVE-2023-34323: A transaction conflict can crash C Xenstored (XSA-440, bsc#1215744) - CVE-2023-34326: Missing IOMMU TLB flushing (XSA-442, bsc#1215746) - CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443, bsc#1215747) - CVE-2023-34327: Debug Mask handling (XSA-444, bsc#1215748) - CVE-2023-34328: Debug Mask handling (XSA-444, bsc#1215748) Important SUSE bug 1215744 SUSE bug 1215746 SUSE bug 1215747 SUSE bug 1215748 CVE-2023-34323 CVE-2023-34325 CVE-2023-34326 CVE-2023-34327 CVE-2023-34328 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for erlang (Critical) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Server Applications 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for erlang fixes the following issues: - Updated to version 23.3.4.19 (jsc#PED-6209): - CVE-2022-37026: Complete a previous insufficient fix for an authentication bypass (bsc#1205318). Critical SUSE bug 1205318 CVE-2022-37026 cpe:/o:suse:sle-module-server-applications:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for salt (Moderate) SUSE Linux Enterprise Module for Transactional Server 15 SP5 This update for salt fixes the following issues: Security fixes: - CVE-2023-28370: Fix an open redirect vulnerability in 'StaticFileHandler' under certain configurations (bsc#1211741) Bug fixes: - Prevent error loading 'known_hosts' when '$HOME' is not set (bsc#1210994) - Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591) Moderate SUSE bug 1210994 SUSE bug 1211591 SUSE bug 1211741 CVE-2023-28370 cpe:/o:suse:sle-module-transactional-server:15:sp5 Security update for salt (Moderate) SUSE Linux Enterprise Module for Transactional Server 15 SP5 This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. (bsc#1214796, bsc#1213441) - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. (bsc#1214797, bsc#1193948) Bugs fixed: - Create minion_id with reproducible mtime - Fix broken tests to make them running in the testsuite - Fix detection of Salt codename by 'salt_version' execution module - Fix inconsistency in reported version by egg-info metadata (bsc#1215489) - Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844) - Fix the regression of user.present state when group is unset (bsc#1212855) - Fix utf8 handling in 'pass' renderer and make it more robust - Fix zypper repositories always being reconfigured - Make sure configured user is properly set by Salt (bsc#1210994) - Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794) - Revert usage of long running REQ channel to prevent possible missing responses on requests and duplicated responses (bsc#1213960, bsc#1213630, bsc#1213257) Moderate SUSE bug 1193948 SUSE bug 1210994 SUSE bug 1212794 SUSE bug 1212844 SUSE bug 1212855 SUSE bug 1213257 SUSE bug 1213441 SUSE bug 1213630 SUSE bug 1213960 SUSE bug 1214796 SUSE bug 1214797 SUSE bug 1215489 CVE-2023-20897 CVE-2023-20898 cpe:/o:suse:sle-module-transactional-server:15:sp5 Security update for apache-commons-fileupload (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for apache-commons-fileupload fixes the following issues: Updated to version 1.5: - CVE-2023-24998: Added a configurable maximum number of files to upload per request (bsc#1208513). Important SUSE bug 1208513 CVE-2023-24998 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for tomcat (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for tomcat fixes the following issues: Updated to version 9.0.75: - CVE-2023-28709: Mended an incomplete fix for CVE-2023-24998 (bsc#1208513, bsc#1211608). Important SUSE bug 1208513 SUSE bug 1211608 CVE-2023-24998 CVE-2023-28709 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for php8 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php8 fixes the following issues: - CVE-2023-3247: Fixed missing error check and insufficient random bytes in HTTP Digest authentication for SOAP (bsc#1212349). Moderate SUSE bug 1212349 CVE-2023-3247 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for nodejs18 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for nodejs18 fixes the following issues: Update to version 18.16.1: - CVE-2023-30581: Fixed mainModule.__proto__ Bypass Experimental Policy Mechanism (bsc#1212574). - CVE-2023-30585: Fixed privilege escalation via Malicious Registry Key manipulation during Node.js installer repair process (bsc#1212579). - CVE-2023-30588: Fixed process interuption due to invalid Public Key information in x509 certificates (bsc#1212581). - CVE-2023-30589: Fixed HTTP Request Smuggling via empty headers separated by CR (bsc#1212582). - CVE-2023-30590: Fixed DiffieHellman key generation after setting a private key (bsc#1212583). - CVE-2023-31124: Fixed cross compilation issue with AutoTools that does not set CARES_RANDOM_FILE (bsc#1211607). - CVE-2023-31130: Fixed buffer underwrite problem in ares_inet_net_pton() (bsc#1211606). - CVE-2023-31147: Fixed insufficient randomness in generation of DNS query IDs (bsc#1211605). - CVE-2023-32067: Fixed denial-of-service via 0-byte UDP payload (bsc#1211604). - CVE-2022-25881: Fixed a Regular Expression Denial of Service (bsc#1208744). Bug fixes: - Increased the default timeout on unit tests from 2 to 20 minutes. This seems to have lead to build failures on some platforms, like s390x in Factory. (bsc#1211407) Important SUSE bug 1208744 SUSE bug 1211407 SUSE bug 1211604 SUSE bug 1211605 SUSE bug 1211606 SUSE bug 1211607 SUSE bug 1212574 SUSE bug 1212579 SUSE bug 1212581 SUSE bug 1212582 SUSE bug 1212583 CVE-2022-25881 CVE-2023-30581 CVE-2023-30585 CVE-2023-30588 CVE-2023-30589 CVE-2023-30590 CVE-2023-31124 CVE-2023-31130 CVE-2023-31147 CVE-2023-32067 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for tomcat (Important) (in QA) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for tomcat fixes the following issues: Tomcat was updated to version 9.0.82 (jsc#PED-6376, jsc#PED-6377): - Security issues fixed: * CVE-2023-41080: Avoid protocol relative redirects in FORM authentication. (bsc#1214666) * CVE-2023-44487: Fix HTTP/2 Rapid Reset Attack. (bsc#1216182) - Update to Tomcat 9.0.82: * Catalina + Add: 65770: Provide a lifecycle listener that will automatically reload TLS configurations a set time before the certificate is due to expire. This is intended to be used with third-party tools that regularly renew TLS certificates. + Fix: Fix handling of an error reading a context descriptor on deployment. + Fix: Fix rewrite rule qsd (query string discard) being ignored if qsa was also use, while it should instead take precedence. + Fix: 67472: Send fewer CORS-related headers when CORS is not actually being engaged. + Add: Improve handling of failures within recycle() methods. * Coyote + Fix: 67670: Fix regression with HTTP compression after code refactoring. + Fix: 67198: Ensure that the AJP connector attribute tomcatAuthorization takes precedence over the tomcatAuthentication attribute when processing an auth_type attribute received from a proxy server. + Fix: 67235: Fix a NullPointerException when an AsyncListener handles an error with a dispatch rather than a complete. + Fix: When an error occurs during asynchronous processing, ensure that the error handling process is only triggered once per asynchronous cycle. + Fix: Fix logic issue trying to match no argument method in IntropectionUtil. + Fix: Improve thread safety around readNotify and writeNotify in the NIO2 endpoint. + Fix: Avoid rare thread safety issue accessing message digest map. + Fix: Improve statistics collection for upgraded connections under load. + Fix: Align validation of HTTP trailer fields with standard fields. + Fix: Improvements to HTTP/2 overhead protection (bsc#1216182, CVE-2023-44487) * jdbc-pool + Fix: 67664: Correct a regression in the clean-up of unnecessary use of fully qualified class names in 9.0.81 that broke the jdbc-pool. * Jasper + Fix: 67080: Improve performance of EL expressions in JSPs that use implicit objects - Update to Tomcat 9.0.80 (jsc#PED-6376, jsc#PED-6377): * Catalina: + Add RateLimitFilter which can be used to mitigate DoS and Brute Force attacks + Move the management of the utility executor from the init()/destroy() methods of components to the start()/stop() methods. + Add org.apache.catalina.core.StandardVirtualThreadExecutor, a virtual thread based executor that may be used with one or more Connectors to process requests received by those Connectors using virtual threads. This Executor requires a minimum Java version of Java 21. + Add a per session Semaphore to the PersistentValve that ensures that, within a single Tomcat instance, there is no more than one concurrent request per session. Also expand the debug logging to include whether a request bypasses the Valve and the reason if a request fails to obtain the per session Semaphore. + Ensure that the default servlet correctly escapes file names in directory listings when using XML output. + Add a numeric last modified field to the XML directory listings produced by the default servlet to enable sorting in the XSLT. + Attempts to lock a collection with WebDAV may incorrectly fail if a child collection has an expired lock. + Deprecate the xssProtectionEnabled setting from the HttpHeaderSecurityFilter and change the default value to false as support for the associated HTTP header has been removed from all major browsers. + Add org.apache.catalina.core.ContextNamingInfoListener, a listener which creates context naming information environment entries. + Add org.apache.catalina.core.PropertiesRoleMappingListener, a listener which populates the context's role mapping from a properties file. + Fix an edge case where intra-web application symlinks would be followed if the web applications were deliberately crafted to allow it even when allowLinking was set to false. + Add utility config file resource lookup on Context to allow looking up resources from the webapp (prefixed with webapp:) and make the resource lookup API more visible. + Fix potential database connection leaks in DataSourceUserDatabase identified by Coverity Scan. + Make parsing of ExtendedAccessLogValve patterns more robust. + Fix failure trying to persist configuration for an internal credential handler. + When serializing a session during the session presistence process, do not log a warning that null Principals are not serializable. + Catch NamingException in JNDIRealm#getPrincipal. It is used in Java up to 17 to signal closed connections. + Use the same naming format in log messages for Connector instances as the associated ProtocolHandler instance. + The parts count should also lower the actual maxParameterCount used for parsing parameters if parts are parsed first. + If an application or library sets both a non-500 error code and the javax.servlet.error.exception request attribute, use the provided error code during error page processing rather than assuming an error code of 500. + Update code comments and Tomcat output to use MiB for 1024 * 1024 bytes and KiB for 1024 bytes rather than MB and kB. * Coyote: + Update the HTTP/2 implementation to use the prioritization scheme defined in RFC 9218 rather than the one defined in RFC 7540. + Fix not sending WINDOW_UPDATE when dataLength is ZERO on call SwallowedDataFramePayload. + Restore the documented behaviour of MessageBytes.getType() that it returns the type of the original content rather than reflecting the most recent conversion. + Correct certificate logging on start-up so it differentiates between keystore based keys/certificates: PEM file based keys/certificates and logs the relevant information for each. + Refactor blocking reads and writes for the NIO connector to remove code paths that could allow a notification from the Poller to be missed resuting in a timeout rather than the expected read or write. + Refactor waiting for an HTTP/2 stream or connection window update to handle spurious wake-ups during the wait. + Correct a regression introduced in 9.0.78 and use the correct constant when constructing the default value for the certificateKeystoreFile attribute of an SSLHostConfigCertificate instance. + Refactor HTTP/2 implementation to reduce pinning when using virtual threads. + Pass through ciphers referring to an OpenSSL profile, such as PROFILE=SYSTEM instead of producing an error trying to parse it. + Ensure that AsyncListener.onError() is called after an error during asynchronous processing with HTTP/2. + When using asynchronous I/O (the default for NIO and NIO2), include DATA frames when calculating the HTTP/2 overhead count to ensure that connections are not prematurely terminated. + Correct a race condition that could cause spurious RST messages to be sent after the response had been written to an HTTP/2 stream. * WebSocket: + Expand the validation of the value of the Sec-Websocket-Key header in the HTTP upgrade request that initiates a WebSocket connection. The value is not decoded but it is checked for the correct length and that only valid characters from the base64 alphabet are used. + Improve handling of error conditions for the WebSocket server, particularly during Tomcat shutdown. + Correct a regression in the fix for 66574 that meant the WebSocket session could return false for onOpen() before the onClose() event had been completed. + Fix a NullPointerException when flushing batched messages with compression enabled using permessage-deflate. * Web applications: + Add RateLimitFilter which can be used to mitigate DoS and Brute Force attacks attribute in the configuration section for the Digest authentication value. + Documentation: Expand the security guidance to cover the embedded use case and add notes on the uses made of the java.io.tmpdir system property. + Documentation: Fix a typo in the name of the algorithms + Documentation: Update documentation to use MiB for 1024 * 1024 bytes and KiB for 1024 bytes rather than MB and kB. * jdbc-pool: + Fix the releaseIdleCounter does not increment when testAllIdle releases them. + Fix the ConnectionState state will be inconsistent with actual state on the connection when an exception occurs while writing. * Other: + Update to Commons Daemon 1.3.4. + Improvements to French translations. + Update Checkstyle to 10.12.0. + Update the packaged version of the Apache Tomcat Native Library to 1.2.37 to pick up the Windows binaries built with with OpenSSL 1.1.1u. + Include the Windows specific binary distributions in the files uploaded to Maven Central. + Improvements to French translations. + Improvements to Japanese translations. + Update UnboundID to 6.0.9. + Update Checkstyle to 10.12.1. + Update BND to 6.4.1.66665: + Update JSign to 5.0. + Correct properties for JSign dependency. + Align documentation for maxParameterCount to match hard-coded defaults. + Update NSIS to 3.0.9. + Update Checkstyle to 10.12.2. + Improvements to French translations. + Improvements to Japanese translations. + Fix quoting so users can use the _RUNJAVA environment variable as intended on Windows when the path to the Java executable contains spaces. + Update Tomcat Native to 1.2.38 to pick up Windows binaries built with OpenSSL 1.1.1v. + Improvements to Chinese translations. + Improvements to French translations. + Improvements to Japanese translations This patch is currently in QA and not yet available for download. Important SUSE bug 1214666 SUSE bug 1216182 CVE-2023-41080 CVE-2023-44487 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for nodejs18 (Important) (in QA) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for nodejs18 fixes the following issues: - Update to version 18.18.2 - CVE-2023-44487: Fixed the Rapid Reset attack in nghttp2. (bsc#1216190) - CVE-2023-45143: Fixed a cookie leakage in undici. (bsc#1216205) - CVE-2023-38552: Fixed an integrity checks according to policies that could be circumvented. (bsc#1216272) - CVE-2023-39333: Fixed a code injection via WebAssembly export names. (bsc#1216273) This patch is currently in QA and not yet available for download. Important SUSE bug 1216190 SUSE bug 1216205 SUSE bug 1216272 SUSE bug 1216273 CVE-2023-38552 CVE-2023-39333 CVE-2023-44487 CVE-2023-45143 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for nodejs18 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for nodejs18 fixes the following issues: Update to LTS version 18.17.1. - CVE-2023-32002: Fixed permissions policies bypass via Module._load (bsc#1214150). - CVE-2023-32006: Fixed permissions policies impersonation using module.constructor.createRequire() (bsc#1214156). - CVE-2023-32559: Fixed permissions policies bypass via process.binding (bsc#1214154). Important SUSE bug 1214150 SUSE bug 1214154 SUSE bug 1214156 CVE-2023-32002 CVE-2023-32006 CVE-2023-32559 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for php7 (Important) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php7 fixes the following issues: - CVE-2023-3823: Fixed an issue with external entity loading in XML without enabling it. (bsc#1214106) - CVE-2023-3824: Fixed a buffer overflow in phar_dir_read(). (bsc#1214103) Important SUSE bug 1214103 SUSE bug 1214106 CVE-2023-3823 CVE-2023-3824 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for php-composer2 (Moderate) SUSE Linux Enterprise High Performance Computing 15 SP5 SUSE Linux Enterprise Module for Web and Scripting 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 This update for php-composer2 fixes the following issues: - CVE-2023-43655: Fixed a remote code execution issue that could be triggered if users published a web-accessible composer.phar file (bsc#1215859). Moderate SUSE bug 1215859 CVE-2023-43655 cpe:/o:suse:sle-module-web-scripting:15:sp5 cpe:/o:suse:sle_hpc:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for prometheus-ha_cluster_exporter (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for prometheus-ha_cluster_exporter fixes the following issues: - rebuild the package with the go 1.20 security release (bsc#1208296). Important SUSE bug 1208296 cpe:/o:suse:sle-ha:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bsc#1207050). - CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034). - CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-0469: Fixed a use-after-free flaw in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent (bsc#1207521). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-1583: Fixed a NULL pointer dereference in io_file_bitmap_get in io_uring/filetable.c (bsc#1209637). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155). - CVE-2023-21106: Fixed possible memory corruption due to double free in adreno_set_param of adreno_gpu.c (bsc#1211654). - CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). - CVE-2023-2235: Fixed a use-after-free vulnerability in the Performance Events system that could have been exploited to achieve local privilege escalation (bsc#1210986). - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-23006: Fixed NULL vs IS_ERR checking in dr_domain_init_resources (bsc#1208845). - CVE-2023-2430: Fixed a missing lock on overflow for IOPOLL (bsc#1211014). - CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1209052). - CVE-2023-28866: Fixed an out-of-bounds access in net/bluetooth/hci_sync.c because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but did not (bsc#1209780). - CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855). - CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294). - CVE-2023-30772: Fixed race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265). - CVE-2023-3220: Fixed a NULL pointer dereference flaw in dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() (bsc#1212556). - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043). - CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590). - CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838). - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593). - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504). - CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494). - CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). - CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495). The following non-security bugs were fixed: - 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes). - Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes). - Avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529). - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Fix page corruption caused by racy check in __free_pages (bsc#1208149). - Get module prefix from kmod (bsc#1212835). - Move upstreamed x86, scsi and arm patches into sorted section - Fixed typo that might caused (bsc#1209457). - Fix bug introduced by broken backport (bsc#1208628). - Update patch for launch issue (bsc#1210853). - [infiniband] READ is 'data destination', not source... (git-fixes) - [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes). - acpi / x86: Add support for LPS0 callback handler (git-fixes). - acpi: Do not build ACPICA with '-Os' (git-fixes). - acpi: EC: Fix EC address space handler unregistration (bsc#1207149). - acpi: EC: Fix ECDT probe ordering issues (bsc#1207149). - acpi: EC: Fix oops when removing custom query handlers (git-fixes). - acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes). - acpi: PM: Do not turn of unused power resources on the Toshiba Click Mini (git-fixes). - acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - acpi: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (git-fixes). - acpi: VIOT: Initialize the correct IOMMU fwspec (git-fixes). - acpi: battery: Fix missing NUL-termination with large strings (git-fixes). - acpi: bus: Ensure that notify handlers are not running after removal (git-fixes). - acpi: cppc: Add AMD pstate energy performance preference cppc control (bsc#1212445). - acpi: cppc: Add auto select register read/write support (bsc#1212445). - acpi: cppc: Disable FIE if registers in PCC regions (bsc#1210953). - acpi: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - acpi: resource: Add IRQ override quirk for LG UltraPC 17U70P (git-fixes). - acpi: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models (git-fixes). - acpi: resource: Add Medion S17413 to IRQ override quirk (git-fixes). - acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - acpi: resource: Do IRQ override on all TongFang GMxRGxx (git-fixes). - acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes). - acpi: tables: Add support for NBFT (bsc#1195921). - acpi: tables: Add support for NBFT (bsc#1206340). - acpi: video: Add acpi_video_backlight_use_native() helper (bsc#1206843). - acpi: video: Allow GPU drivers to report no panels (bsc#1206843). - acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - acpi: video: Fix missing native backlight on Chromebooks (bsc#1206843). - acpi: video: Refactor acpi_video_get_backlight_type() a bit (bsc#1203693). - acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - acpi: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes). - acpica: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes). - acpica: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149). - acpica: Avoid undefined behavior: applying zero offset to null pointer (git-fixes). - acpica: Drop port I/O validation for some regions (git-fixes). - acpica: include/acpi/acpixf.h: Fix indentation (bsc#1207149). - acpica: nsrepair: handle cases without a return value correctly (git-fixes). - add mainline tags to five pci_hyperv patches - affs: initialize fsdata in affs_truncate() (git-fixes). - alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes) - alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes). - alsa: asihpi: check pao in control_message() (git-fixes). - alsa: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes). - alsa: cs46xx: mark snd_cs46xx_download_image as static (git-fixes). - alsa: emu10k1: do not create old pass-through playback device on Audigy (git-fixes). - alsa: emu10k1: fix capture interrupt handler unlinking (git-fixes). - alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - alsa: fireface: make read-only const array for model names static (git-fixes). - alsa: firewire-digi00x: prevent potential use after free (git-fixes). - alsa: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes). - alsa: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes). - alsa: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes). - alsa: hda/ca0132: minor fix for allocation size (git-fixes). - alsa: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes). - alsa: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes). - alsa: hda/conexant: add a new hda codec SN6180 (git-fixes). - alsa: hda/hdmi: Preserve the previous PCM device upon re-enablement (git-fixes). - alsa: hda/hdmi: disable KAE for Intel DG2 (git-fixes). - alsa: hda/realtek - fixed wrong gpio assigned (git-fixes). - alsa: hda/realtek: Add 'Intel Reference board' and 'NUC 13' SSID in the ALC256 (git-fixes). - alsa: hda/realtek: Add Acer Predator PH315-54 (git-fixes). - alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes). - alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes). - alsa: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes). - alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes). - alsa: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for Clevo L140AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo X370SNW (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - alsa: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes). - alsa: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes). - alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes). - alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes). - alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes). - alsa: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (git-fixes). - alsa: hda/realtek: Add quirks for some Clevo laptops (git-fixes). - alsa: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes). - alsa: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (git-fixes). - alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes). - alsa: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes). - alsa: hda/realtek: Fix support for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - alsa: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Whitespace fix (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes). - alsa: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes). - alsa: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes). - alsa: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes). - alsa: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes). - alsa: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes). - alsa: hda: Do not unset preset when cleaning up codec (git-fixes). - alsa: hda: Fix Oops by 9.1 surround channel names (git-fixes). - alsa: hda: Fix unhandled register update during auto-suspend period (git-fixes). - alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes). - alsa: hda: LNL: add HD Audio PCI ID (git-fixes). - alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - alsa: hda: cs35l41: Enable Amp High Pass Filter (git-fixes). - alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes). - alsa: hda: intel-dsp-config: add MTL PCI id (git-fixes). - alsa: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes). - alsa: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes). - alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - alsa: jack: Fix mutex call in snd_jack_report() (git-fixes). - alsa: memalloc: Workaround for Xen PV (git-fixes). - alsa: oss: avoid missing-prototype warnings (git-fixes). - alsa: oxfw: make read-only const array models static (git-fixes). - alsa: pci: lx6464es: fix a debug loop (git-fixes). - alsa: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes). - alsa: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes). - alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes). - alsa: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes). - alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes). - alsa: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes). - alsa: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes). - alsa: ymfpci: Fix BUG_ON in probe function (git-fixes). - amdgpu/nv.c: Corrected typo in the video capabilities resolution (git-fixes). - amdgpu: disable powerpc support for the newer display engine (bsc#1194869). - amdgpu: fix build on non-DCN platforms (git-fixes). - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes). - apparmor: add a kernel label to use on kernel objects (bsc#1211113). - apparmor: fix missing error check for rhashtable_insert_fast (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arch: fix broken BuildID for arm64 and riscv (bsc#1209798). - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64: Add missing Set/Way CMO encodings (git-fixes). - arm64: Always load shadow stack pointer directly from the task struct (git-fixes) - arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes) - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes). - arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes). - arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes) - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes). - arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes) - arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes) - arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes) - arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes). - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes). - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes). - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes). - arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes). - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes) - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes) - arm64: dts: imx8mp: correct usb clocks (git-fixes) - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes). - arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes) - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes) - arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: specify full DMC range (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes). - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes). - arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes). - arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes). - arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes). - arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes). - arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes). - arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes). - arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes). - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes). - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes). - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes). - arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes). - arm64: efi: Execute runtime services from a dedicated stack (git-fixes). - arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes). - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage. - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes). - arm64: make is_ttbrX_addr() noinstr-safe (git-fixes) - arm64: mm: kfence: only handle translation faults (git-fixes) - arm: 9290/1: uaccess: Fix KASAN false-positives (git-fixes). - arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes) - arm: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes). - arm: bcm2835_defconfig: Enable the framebuffer (git-fixes). - arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - arm: defconfig: drop CONFIG_DRM_RCAR_LVDS (git-fixes). - arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes). - arm: dts: am5748: keep usb4_tm disabled (git-fixes) - arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes). - arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes). - arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes). - arm: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes). - arm: dts: gta04: fix excess dma channel usage (git-fixes). - arm: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes) - arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes). - arm: dts: imx: Fix pca9547 i2c-mux node name (git-fixes). - arm: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes). - arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes) - arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes). - arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes). - arm: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes). - arm: dts: s5pv210: correct MIPI CSIS clock name (git-fixes). - arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes). - arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes) - arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes) - arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes). - arm: dts: vexpress: add missing cache properties (git-fixes). - arm: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes). - arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes). - arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes) - arm: oMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes). - arm: oMAP2+: Fix memory leak in realtime_counter_init() (git-fixes). - arm: omap: remove debug-leds driver (git-fixes) - arm: remove some dead code (git-fixes) - arm: renumber bits related to _TIF_WORK_MASK (git-fixes) - arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes). - arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes) - arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes). - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes). - asn.1: Fix check for strdup() success (git-fixes). - asoc: adau7118: do not disable regulators on device unbind (git-fixes). - asoc: amd: acp-es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes). - asoc: codecs: lpass: fix incorrect mclk rate (git-fixes). - asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes). - asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes). - asoc: cs35l41: Only disable internal boost (git-fixes). - asoc: cs42l56: fix DT probe (git-fixes). - asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes). - asoc: dwc: limit the number of overrun messages (git-fixes). - asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes). - asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes). - asoc: es8316: Handle optional IRQ assignment (git-fixes). - asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes). - asoc: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes). - asoc: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes). - asoc: fsl_micfil: Correct the number of steps on SX controls (git-fixes). - asoc: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes). - asoc: fsl_mqs: move of_node_put() to the correct location (git-fixes). - asoc: fsl_sai: Update to modern clocking terminology (git-fixes). - asoc: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes). - asoc: hdac_hdmi: use set_stream() instead of set_tdm_slots() (git-fixes). - asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes). - asoc: intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes). - asoc: intel: Skylake: Fix driver hang during shutdown (git-fixes). - asoc: intel: avs: Access path components under lock (git-fixes). - asoc: intel: avs: Fix declaration of enum avs_channel_config (git-fixes). - asoc: intel: avs: Implement PCI shutdown (git-fixes). - asoc: intel: avs: Use min_t instead of min with cast (git-fixes). - asoc: intel: boards: fix spelling in comments (git-fixes). - asoc: intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcht_es8316: move comment to the right place (git-fixes). - asoc: intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes). - asoc: intel: bytcr_rt5640: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: soc-acpi-byt: Fix 'WM510205' match no longer working (git-fixes). - asoc: intel: soc-acpi: fix copy-paste issue in topology names (git-fixes). - asoc: intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes). - asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes). - asoc: lpass: Fix for KASAN use_after_free out of bounds (git-fixes). - asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes). - asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes). - asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes). - asoc: mediatek: mt8173: Fix irq error path (git-fixes). - asoc: nau8824: Add quirk to active-high jack-detect (git-fixes). - asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes). - asoc: rsnd: fixup #endif position (git-fixes). - asoc: rt1308-sdw: add the default value of some registers (git-fixes). - asoc: rt5682: Disable jack detection interrupt during suspend (git-fixes). - asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes). - asoc: simple-card: Add missing of_node_put() in case of error (git-fixes). - asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes). - asoc: soc-compress: Inherit atomicity from DAI link for Compress FE (git-fixes). - asoc: soc-compress: Reposition and add pcm_mutex (git-fixes). - asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes). - asoc: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (git-fixes). - asoc: soc-pcm: test if a BE can be prepared (git-fixes). - asoc: sof: Intel: MTL: Fix the device description (git-fixes). - asoc: sof: ipc4-topology: set dmic dai index from copier (git-fixes). - asoc: sof: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data() (git-fixes). - asoc: ssm2602: Add workaround for playback distortions (git-fixes). - asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes). - asoc: topology: Properly access value coming from topology file (git-fixes). - asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes). - asoc: zl38060 add gpiolib dependency (git-fixes). - asoc: zl38060: Remove spurious gpiolib select (git-fixes). - ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes). - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes). - ata: libata: Set __ATA_BASE_SHT max_sectors (git-fixes). - ata: libata: fix NCQ autosense logic (git-fixes). - ata: pata_macio: Fix compilation warning (git-fixes). - ata: pata_octeon_cf: drop kernel-doc notation (git-fixes). - ata: pata_octeon_cf: fix call to trace_ata_bmdma_stop() (git-fixes). - ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes). - ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes). - ath9k: hif_usb: simplify if-if to if-else (git-fixes). - ath9k: htc: clean up statistics macros (git-fixes). - atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes). - audit: update the mailing list in MAINTAINERS (git-fixes). - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes). - backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes). - batman-adv: Broken sync while rescheduling delayed work (git-fixes). - bcache: Revert 'bcache: use bvec_virt' (git-fixes). - bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes). - bcache: fix wrong bdev parameter when calling bio_alloc_clone() in do_bio_hook() (git-fixes). - bcache: put bch_bio_map() back to correct location in journal_write_unlocked() (git-fixes). - bfq: fix use-after-free in bfq_dispatch_request (git-fixes). - bfq: fix waker_bfqq inconsistency crash (git-fixes). - Blacklist commit that might cause regression (bsc#1210947) - blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes). - blk-cgroup: properly pin the parent in blkcg_css_online (bsc#1208105). - blk-lib: fix blkdev_issue_secure_erase (git-fixes). - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (git-fixes). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: run queue no matter whether the request is the last request (git-fixes). - blk-throttle: fix that io throttle can only work for single bio (git-fixes). - blk-throttle: prevent overflow while calculating wait time (git-fixes). - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - block, bfq: do not move oom_bfqq (git-fixes). - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes). - block, bfq: fix possible uaf for 'bfqq->bic' (git-fixes). - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes). - block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bfq-iosched.c: use 'false' rather than 'BLK_RW_ASYNC' (git-fixes). - block/bfq_wf2q: correct weight to ioprio (git-fixes). - block/bio: remove duplicate append pages code (git-fixes). - block: Fix possible memory leak for rq_wb on add_disk failure (git-fixes). - block: add a bdev_max_zone_append_sectors helper (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: check minor range in device_add_disk() (git-fixes). - block: clear ->slave_dir when dropping the main slave_dir reference (git-fixes). - block: do not allow splitting of a REQ_NOWAIT bio (git-fixes). - block: do not allow the same type rq_qos add more than once (git-fixes). - block: do not reverse request order when flushing plug list (bsc#1208588 bsc#1208128). - block: ensure iov_iter advances for added pages (git-fixes). - block: fix and cleanup bio_check_ro (git-fixes). - block: fix default IO priority handling again (git-fixes). - block: fix infinite loop for invalid zone append (git-fixes). - block: fix leaking minors of hidden disks (git-fixes). - block: fix memory leak for elevator on add_disk failure (git-fixes). - block: fix missing blkcg_bio_issue_init (bsc#1208107). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (git-fixes). - block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes). - block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes). - block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes). - block: null_blk: Fix null_zone_write() (git-fixes). - block: pop cached rq before potentially blocking rq_qos_throttle() (git-fixes). - block: use bdev_get_queue() in bio.c (git-fixes). - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes). - bluetooth: Fix crash when replugging CSR fake controllers (git-fixes). - bluetooth: Fix double free in hci_conn_cleanup (bsc#1209052 CVE-2023-28464). - bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes). - bluetooth: Fix race condition in hci_cmd_sync_clear (git-fixes). - bluetooth: Fix race condition in hidp_session_thread (git-fixes). - bluetooth: Fix support for Read Local Supported Codecs V2 (git-fixes). - bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes). - bluetooth: HCI: Fix global-out-of-bounds (git-fixes). - bluetooth: ISO: Avoid circular locking dependency (git-fixes). - bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - bluetooth: ISO: do not try to remove CIG if there are bound CIS left (git-fixes). - bluetooth: ISO: fix timestamped HCI ISO data packet parsing (git-fixes). - bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes). - bluetooth: L2CAP: Fix potential user-after-free (git-fixes). - bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes). - bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes). - bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (git-fixes). - bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes). - bluetooth: Remove codec id field in vendor codec definition (git-fixes). - bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (git-fixes). - bluetooth: Set ISO Data Path on broadcast sink (git-fixes). - bluetooth: btintel: Add LE States quirk support (git-fixes). - bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes). - bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes). - bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - bluetooth: btusb: Remove detection of ISO packets over bulk (git-fixes). - bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes). - bluetooth: hci_conn: Fix memory leaks (git-fixes). - bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (git-fixes). - bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (git-fixes). - bluetooth: hci_conn: use HCI dst_type values also for BIS (git-fixes). - bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (git-fixes). - bluetooth: hci_core: fix error handling in hci_register_dev() (git-fixes). - bluetooth: hci_event: Fix Invalid wait context (git-fixes). - bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - bluetooth: hci_qca: fix debugfs registration (git-fixes). - bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes). - bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes). - bluetooth: hci_sync: Fix not indicating power state (git-fixes). - bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (git-fixes). - bluetooth: hci_sync: cancel cmd_timer if hci_open failed (git-fixes). - bnxt: Do not read past the end of test names (jsc#SLE-18978). - bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978). - bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978). - bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978). - bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978). - bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes). - bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978). - bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978). - bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978). - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes). - bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978). - bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978). - bonding: Fix negative jump label count on nested bonding (bsc#1212685). - bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes) - bpf, arm64: Clear prog->jited_len along prog->jited (git-fixes) - bpf, arm64: Feed byte-offset into bpf line info (git-fixes) - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes) - bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes). - bpf, x64: Factor out emission of REX byte in more cases (git-fixes). - bpf: Add extra path pointer check to d_path helper (git-fixes). - bpf: Fix UAF in task local storage (bsc#1212564). - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes). - bpf: Fix extable address check (git-fixes). - bpf: Fix extable fixup offset (git-fixes). - bpf: Skip task with pid=1 in send_signal_common() (git-fixes). - btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158). - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158). - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes). - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158). - btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158). - btrfs: qgroup: remove outdated TODO comments (bsc#1207158). - bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes). - bus: mhi: host: Fix race between channel preparation and M0 event (git-fixes). - bus: mhi: host: Range check CHDBOFF and ERDBOFF (git-fixes). - bus: mhi: host: Remove duplicate ee check for syserr (git-fixes). - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (git-fixes). - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes). - bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes). - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes). - ca8210: fix mac_len negative array access (git-fixes). - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes). - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes). - can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes). - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes). - can: j1939: change j1939_netdev_lock type to mutex (git-fixes). - can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes). - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes). - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes). - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes). - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes). - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes). - can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes). - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes). - can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes). - can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes). - can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes). - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes). - can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes). - can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes). - can: length: fix bitstuffing count (git-fixes). - can: length: fix description of the RRS field (git-fixes). - can: length: make header self contained (git-fixes). - cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes). - ceph: avoid use-after-free in ceph_fl_release_lock() (jsc#SES-1880). - ceph: blocklist the kclient when receiving corrupted snap trace (jsc#SES-1880). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540). - ceph: flush cap releases when the session is flushed (bsc#1208428). - ceph: flush cap releases when the session is flushed (jsc#SES-1880). - ceph: force updating the msg pointer in non-split case (bsc#1211804). - ceph: move mount state enum to super.h (jsc#SES-1880). - ceph: remove useless session parameter for check_caps() (jsc#SES-1880). - ceph: switch to vfs_inode_has_locks() to fix file lock bug (jsc#SES-1880). - ceph: try to check caps immediately after async creating finishes (jsc#SES-1880). - ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504). - ceph: use locks_inode_context helper (jsc#SES-1880). - cfg80211: allow continuous radar monitoring on offchannel chain (bsc#1209980). - cfg80211: fix possible NULL pointer dereference in cfg80211_stop_offchan_radar_detection (bsc#1209980). - cfg80211: implement APIs for dedicated radar detection HW (bsc#1209980). - cfg80211: move offchan_cac_event to a dedicated work (bsc#1209980). - cfg80211: rename offchannel_chain structs to background_chain to avoid confusion with ETSI standard (bsc#1209980). - cfg80211: schedule offchan_cac_abort_wk in cfg80211_radar_event (bsc#1209980). - cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906). - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827). - cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650). - cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650). - cgroup: Make cgroup_get_from_id() prettier (bsc#1205650). - cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650). - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563). - cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561). - cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (bsc#1205650). - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563). - cgroup: reduce dependency on cgroup_mutex (bsc#1205650). - cifs: Avoid a cast in add_lease_context() (bsc#1193629). - cifs: Check the lease context if we actually got a lease (bsc#1193629). - cifs: Convert struct fealist away from 1-element array (bsc#1193629). - cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (git-fixes). - cifs: Fix smb2_set_path_size() (git-fixes). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629). - cifs: Fix use-after-free in rdata->read_into_pages() (git-fixes). - cifs: Fix warning and UAF when destroy the MR list (git-fixes). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629). - cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes). - cifs: Replace remaining 1-element arrays (bsc#1193629). - cifs: Replace zero-length arrays with flexible-array members (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Use kstrtobool() instead of strtobool() (bsc#1193629). - cifs: append path to open_enter trace event (bsc#1193629). - cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758). - cifs: avoid race conditions with parallel reconnects (bsc#1193629). - cifs: avoid races in parallel reconnects in smb1 (bsc#1193629). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629). - cifs: check only tcon status on tcon related functions (bsc#1193629). - cifs: do not include page data when checking signature (git-fixes). - cifs: do not poll server interfaces too regularly (bsc#1193629). - cifs: do not take exclusive lock for updating target hints (bsc#1193629). - cifs: do not try to use rdma offload on encrypted connections (bsc#1193629). - cifs: double lock in cifs_reconnect_tcon() (git-fixes). - cifs: dump pending mids for all channels in DebugData (bsc#1193629). - cifs: empty interface list when server does not support query interfaces (bsc#1193629). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629). - cifs: fix dentry lookups in directory handle cache (bsc#1193629). - cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629). - cifs: fix mount on old smb servers (boo#1206935). - cifs: fix negotiate context parsing (bsc#1210301). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629). - cifs: fix potential deadlock in cache_refresh_path() (git-fixes). - cifs: fix potential race when tree connecting ipc (bsc#1208758). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629). - cifs: fix sharing of DFS connections (bsc#1208758). - cifs: fix smb1 mount regression (bsc#1193629). - cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629). - cifs: generate signkey for the channel that's reconnecting (bsc#1193629). - cifs: get rid of dead check in smb2_reconnect() (bsc#1193629). - cifs: get rid of dns resolve worker (bsc#1193629). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629). - cifs: handle cache lookup errors different than -ENOENT (bsc#1193629). - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629). - cifs: lock chan_lock outside match_session (bsc#1193629). - cifs: mapchars mount option ignored (bsc#1193629). - cifs: match even the scope id for ipv6 addresses (bsc#1193629). - cifs: missing lock when updating session status (bsc#1193629). - cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629). - cifs: prevent data race in smb2_reconnect() (bsc#1193629). - cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629). - cifs: print last update time for interface list (bsc#1193629). - cifs: print session id while listing open files (bsc#1193629). - cifs: print smb3_fs_context::source when mounting (bsc#1193629). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758). - cifs: protect session status check in smb2_reconnect() (bsc#1208758). - cifs: release leases for deferred close handles when freezing (bsc#1193629). - cifs: remove duplicate code in __refresh_tcon() (bsc#1193629). - cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629). - cifs: remove unused function (bsc#1193629). - cifs: return DFS root session id in DebugData (bsc#1193629). - cifs: return a single-use cfid if we did not get a lease (bsc#1193629). - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629). - cifs: sanitize paths in cifs_update_super_prepath (git-fixes). - cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629). - cifs: split out smb3_use_rdma_offload() helper (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - cifs: update ip_addr for ses only for primary chan setup (bsc#1193629). - cifs: use DFS root session instead of tcon ses (bsc#1193629). - cifs: use tcon allocation functions even for dummy tcon (git-fixes). - cifs: use the least loaded channel for sending requests (bsc#1193629). - clk: Fix memory leak in devm_clk_notifier_register() (git-fixes). - clk: HI655X: select REGMAP instead of depending on it (git-fixes). - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes). - clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes). - clk: at91: clk-sam9x60-pll: fix return value check (git-fixes). - clk: cdce925: check return value of kasprintf() (git-fixes). - clk: imx: avoid memory leak (git-fixes). - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes). - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes). - clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (git-fixes). - clk: keystone: sci-clk: check return value of kasprintf() (git-fixes). - clk: mxl: Add option to override gate clks (git-fixes). - clk: mxl: Fix a clk entry by adding relevant flags (git-fixes). - clk: mxl: Remove redundant spinlocks (git-fixes). - clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes). - clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes). - clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes). - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes). - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes). - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes). - clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes). - clk: qcom: regmap: add PHY clock source implementation (git-fixes). - clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes). - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes). - clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes). - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes). - clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes). - clk: si5341: check return value of {devm_}kasprintf() (git-fixes). - clk: si5341: free unused memory on probe failure (git-fixes). - clk: si5341: return error if one synth clock registration fails (git-fixes). - clk: sprd: set max_register according to mapping range (git-fixes). - clk: tegra20: fix gcc-7 constant overflow warning (git-fixes). - clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes). - clk: ti: clkctrl: check return value of kasprintf() (git-fixes). - clk: vc5: check memory returned by kasprintf() (git-fixes). - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes). - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes). - clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes). - clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes). - comedi: use menuconfig for main Comedi menu (git-fixes). - configfs: fix possible memory leak in configfs_create_dir() (git-fixes). - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes). - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953). - cpufreq: CPPC: Fix performance/frequency conversion (git-fixes). - cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - crypto: acomp - define max size for destination (jsc#PED-3692) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - crypto: caam - Clear some memory in instantiate_rng (git-fixes). - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes). - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes). - crypto: crypto4xx - Call dma_unmap_page when done (git-fixes). - crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes). - crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692) - crypto: essiv - Handle EBUSY correctly (git-fixes). - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (git-fixes). - crypto: marvell/cesa - Fix type mismatch warning (git-fixes). - crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes). - crypto: qat - Fix unsigned function returning negative (jsc#PED-3692) - crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692) - crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692) - crypto: qat - abstract PFVF receive logic (jsc#PED-3692) - crypto: qat - abstract PFVF send function (jsc#PED-3692) - crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692) - crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692) - crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692) - crypto: qat - add backlog mechanism (jsc#PED-3692) - crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692) - crypto: qat - add check to validate firmware images (jsc#PED-3692) - crypto: qat - add limit to linked list parsing (jsc#PED-3692) - crypto: qat - add misc workqueue (jsc#PED-3692) - crypto: qat - add missing restarting event notification in (jsc#PED-3692) - crypto: qat - add param check for DH (jsc#PED-3692) - crypto: qat - add param check for RSA (jsc#PED-3692) - crypto: qat - add pfvf_ops (jsc#PED-3692) - crypto: qat - add resubmit logic for decompression (jsc#PED-3692) - crypto: qat - add support for 401xx devices (jsc#PED-3692) - crypto: qat - add support for compression for 4xxx (jsc#PED-3692) - crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692) - crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692) - crypto: qat - change PFVF ACK behaviour (jsc#PED-3692) - crypto: qat - change behaviour of (jsc#PED-3692) - crypto: qat - change bufferlist logic interface (jsc#PED-3692) - crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692) - crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692) - crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692) - crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692) - crypto: qat - do not rely on min version (jsc#PED-3692) - crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692) - crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692) - crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692) - crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692) - crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692) - crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - extend buffer list interface (jsc#PED-3692) - crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692) - crypto: qat - extract send and wait from (jsc#PED-3692) - crypto: qat - fix DMA transfer direction (jsc#PED-3692) - crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692) - crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692) - crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692) - crypto: qat - fix a typo in a comment (jsc#PED-3692) - crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692) - crypto: qat - fix definition of ring reset results (jsc#PED-3692) - crypto: qat - fix error return code in adf_probe (git-fixes). - crypto: qat - fix error return code in adf_probe (jsc#PED-3692) - crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692) - crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692) - crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692) - crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692) - crypto: qat - fix out-of-bounds read (git-fixes). - crypto: qat - fix wording and formatting in code comment (jsc#PED-3692) - crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692) - crypto: qat - free irq in case of failure (jsc#PED-3692) - crypto: qat - free irqs only if allocated (jsc#PED-3692) - crypto: qat - generalize crypto request buffers (jsc#PED-3692) - crypto: qat - get compression extended capabilities (jsc#PED-3692) - crypto: qat - handle retries due to collisions in (jsc#PED-3692) - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692) - crypto: qat - improve logging of PFVF messages (jsc#PED-3692) - crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692) - crypto: qat - introduce support for PFVF block messages (jsc#PED-3692) - crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692) - crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692) - crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692) - crypto: qat - make PFVF message construction direction (jsc#PED-3692) - crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692) - crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692) - crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692) - crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692) - crypto: qat - move pfvf collision detection values (jsc#PED-3692) - crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692) - crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692) - crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692) - crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692) - crypto: qat - re-enable registration of algorithms (jsc#PED-3692) - crypto: qat - refactor PF top half for PFVF (jsc#PED-3692) - crypto: qat - refactor pfvf version request messages (jsc#PED-3692) - crypto: qat - refactor submission logic (jsc#PED-3692) - crypto: qat - relocate PFVF PF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF VF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF disabled function (jsc#PED-3692) - crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692) - crypto: qat - relocate backlog related structures (jsc#PED-3692) - crypto: qat - relocate bufferlist logic (jsc#PED-3692) - crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692) - crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692) - crypto: qat - remove empty sriov_configure() (jsc#PED-3692) - crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692) - crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692) - crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692) - crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692) - crypto: qat - remove unneeded assignment (jsc#PED-3692) - crypto: qat - remove unneeded braces (jsc#PED-3692) - crypto: qat - remove unneeded packed attribute (jsc#PED-3692) - crypto: qat - remove unused PFVF stubs (jsc#PED-3692) - crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692) - crypto: qat - rename bufferlist functions (jsc#PED-3692) - crypto: qat - rename pfvf collision constants (jsc#PED-3692) - crypto: qat - reorganize PFVF code (jsc#PED-3692) - crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692) - crypto: qat - replace deprecated MSI API (jsc#PED-3692) - crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692) - crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692) - crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692) - crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692) - crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692) - crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692) - crypto: qat - simplify adf_enable_aer() (jsc#PED-3692) - crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692) - crypto: qat - split PFVF message decoding from handling (jsc#PED-3692) - crypto: qat - stop using iommu_present() (jsc#PED-3692) - crypto: qat - store the PFVF protocol version of the (jsc#PED-3692) - crypto: qat - store the ring-to-service mapping (jsc#PED-3692) - crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692) - crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692) - crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692) - crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692) - crypto: qat - use hweight for bit counting (jsc#PED-3692) - crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692) - crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692) - crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692) - crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes). - crypto: sa2ul - Select CRYPTO_DES (git-fixes). - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes). - crypto: seqiv - Handle EBUSY correctly (git-fixes). - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes). - crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes). - crypto: xts - Handle EBUSY correctly (git-fixes). - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes). - device-dax: Fix duplicate 'hmem' device registration (bsc#1211400). - devlink: hold region lock when flushing snapshots (git-fixes). - disable two x86 PAT related patches (bsc#1212456) This may break i915 when booted with nopat, but fixes /dev/mem access in Xen PV domU. - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm clone: Fix UAF in clone_dtr() (git-fixes). - dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes). - dm integrity: clear the journal on suspend (git-fixes). - dm integrity: flush the journal on suspend (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm raid: fix address sanitizer warning in raid_resume (git-fixes). - dm raid: fix address sanitizer warning in raid_status (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes). - dm: fix alloc_dax error handling in alloc_dev (git-fixes). - dm: requeue IO if mapping table not yet available (git-fixes). - dma-buf: Use dma_fence_unwrap_for_each when importing fences (git-fixes). - dma-buf: cleanup kerneldoc of removed component (git-fixes). - dma-direct: use is_swiotlb_active in dma_direct_map_page (PED-3259). - dma-mapping: reformat comment to suppress htmldoc warning (git-fixes). - dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes). - dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes). - dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes). - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes). - dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes). - dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes). - dmaengine: dw-edma: Drop chancnt initialization (git-fixes). - dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes). - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes). - dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes). - dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes). - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes). - dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes). - dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes). - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes). - dmaengine: mv_xor_v2: Fix an error code (git-fixes). - dmaengine: pl330: rename _start to prevent build error (git-fixes). - dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes). - dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes). - dmaengine: tegra: Fix memory leak in terminate_all() (git-fixes). - do not reuse connection if share marked as isolated (bsc#1193629). - docs/memory-barriers.txt: Add a missed closing parenthesis (git-fixes). - docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes). - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (git-fixes). - docs: driver-api: firmware_loader: fix missing argument in usage example (git-fixes). - docs: ftrace: fix a issue with duplicated subtitle number (git-fixes). - docs: gdbmacros: print newest record (git-fixes). - docs: networking: Update codeaurora references for rmnet (git-fixes). - docs: networking: fix x25-iface.rst heading & index order (git-fixes). - documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes). - documentation: bonding: fix the doc of peer_notif_delay (git-fixes). - documentation: timers: hrtimers: Make hybrid union historical (git-fixes). - driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes). - driver core: fix potential null-ptr-deref in device_add() (git-fixes). - driver core: fix resource leak in device_add() (git-fixes). - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes). - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815). - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815). - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes). - drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: transport_class: fix possible memory leak (git-fixes). - drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes). - drivers: meson: secure-pwrc: always enable DMA domain (git-fixes). - drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes). - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes). - drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - drm-hyperv: Add a bug reference to two existing changes (bsc#1211281). - drm/amd/amdgpu: fix warning during suspend (bsc#1206843). - drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes). - drm/amd/display: Add DCN314 display SG Support (bsc#1206843). - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes). - drm/amd/display: Add NULL plane_state check for cursor disable logic (git-fixes). - drm/amd/display: Add check for DET fetch latency hiding for dcn32 (bsc#1206843). - drm/amd/display: Add logging for display MALL refresh setting (git-fixes). - drm/amd/display: Add minimal pipe split transition state (git-fixes). - drm/amd/display: Add missing brackets in calculation (bsc#1206843). - drm/amd/display: Add wrapper to call planes and stream update (git-fixes). - drm/amd/display: Adjust downscaling limits for dcn314 (bsc#1206843). - drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 (bsc#1206843). - drm/amd/display: Clear MST topology if it fails to resume (git-fixes). - drm/amd/display: Conversion to bool not necessary (git-fixes). - drm/amd/display: Defer DIG FIFO disable after VID stream enable (bsc#1206843). - drm/amd/display: Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now (bsc#1206843). - drm/amd/display: Do not clear GPINT register when releasing DMUB from reset (git-fixes). - drm/amd/display: Do not commit pipe when updating DRR (bsc#1206843). - drm/amd/display: Do not set DRR on pipe Commit (bsc#1206843). - drm/amd/display: Enable P-state validation checks for DCN314 (bsc#1206843). - drm/amd/display: Explicitly specify update type per plane info change (git-fixes). - drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes). - drm/amd/display: Fix DP MST sinks removal issue (git-fixes). - drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming (bsc#1206843). - drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes). - drm/amd/display: Fix display corruption w/ VSR enable (bsc#1206843). - drm/amd/display: Fix hang when skipping modeset (git-fixes). - drm/amd/display: Fix potential null dereference (git-fixes). - drm/amd/display: Fix potential null-deref in dm_resume (git-fixes). - drm/amd/display: Fix race condition in DPIA AUX transfer (bsc#1206843). - drm/amd/display: Fix set scaling doesn's work (git-fixes). - drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes). - drm/amd/display: Fixes for dcn32_clk_mgr implementation (git-fixes). - drm/amd/display: Include virtual signal to set k1 and k2 values (bsc#1206843). - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB (bsc#1206843). - drm/amd/display: Pass the right info to drm_dp_remove_payload (bsc#1206843). - drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes). - drm/amd/display: Properly reuse completion structure (bsc#1206843). - drm/amd/display: Reduce expected sdp bandwidth for dcn321 (bsc#1206843). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1206843). - drm/amd/display: Report to ACPI video if no panels were found (bsc#1206843). - drm/amd/display: Reset DMUB mailbox SW state after HW reset (bsc#1206843). - drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset (git-fixes). - drm/amd/display: Return error code on DSC atomic check failure (git-fixes). - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write (git-fixes). - drm/amd/display: Set dcn32 caps.seamless_odm (bsc#1206843). - drm/amd/display: Set hvm_enabled flag for S/G mode (bsc#1206843). - drm/amd/display: Simplify same effect if/else blocks (git-fixes). - drm/amd/display: Take FEC Overhead into Timeslot Calculation (bsc#1206843). - drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734). - drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 (bsc#1206843). - drm/amd/display: Uninitialized variables causing 4k60 UCLK to stay at DPM1 and not DPM0 (bsc#1206843). - drm/amd/display: Update bounding box values for DCN321 (git-fixes). - drm/amd/display: Update clock table to include highest clock setting (bsc#1206843). - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes). - drm/amd/display: Use dc_update_planes_and_stream (git-fixes). - drm/amd/display: Use min transition for SubVP into MPO (bsc#1206843). - drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit (bsc#1206843). - drm/amd/display: add a NULL pointer check (bsc#1212848, bsc#1212961). - drm/amd/display: adjust MALL size available for DCN32 and DCN321 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.4 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.5 (bsc#1206843). - drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848, bsc#1212961). - drm/amd/display: disconnect MPCC only on OTG change (bsc#1206843). - drm/amd/display: do not call dc_interrupt_set() for disabled crtcs (git-fixes). - drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes). - drm/amd/display: edp do not add non-edid timings (git-fixes). - drm/amd/display: fix FCLK pstate change underflow (bsc#1206843). - drm/amd/display: fix cursor offset on rotation 180 (git-fixes). - drm/amd/display: fix duplicate assignments (git-fixes). - drm/amd/display: fix flickering caused by S/G mode (git-fixes). - drm/amd/display: fix issues with driver unload (git-fixes). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1206843). - drm/amd/display: fix mapping to non-allocated address (bsc#1206843). - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes). - drm/amd/display: fix the system hang while disable PSR (git-fixes). - drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk (bsc#1206843). - drm/amd/display: move remaining FPU code to dml folder (bsc#1206843). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1206843). - drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes). - drm/amd/display: revert Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: skip commit minimal transition state (bsc#1206843). - drm/amd/display: wait for vblank during pipe programming (git-fixes). - drm/amd/pm/smu13: BACO is supported when it's in BACO state (bsc#1206843). - drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 (bsc#1206843). - drm/amd/pm: Fix output of pp_od_clk_voltage (git-fixes). - drm/amd/pm: Fix power context allocation in SMU13 (git-fixes). - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (bsc#1206843). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1206843). - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 (bsc#1206843). - drm/amd/pm: add missing SMU13.0.0 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add missing SMU13.0.7 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 (bsc#1206843). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.4 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU13.0.0 driver_if header to version 0x34 (bsc#1206843). - drm/amd/pm: correct SMU13.0.0 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 max shader clock reporting (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct the fan speed retrieving in PWM for some SMU13 asics (bsc#1206843). - drm/amd/pm: correct the pcie link state check for SMU13 (bsc#1206843). - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation (bsc#1206843). - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 (bsc#1206843). - drm/amd/pm: enable mode1 reset on smu_v13_0_10 (bsc#1206843). - drm/amd/pm: parse pp_handle under appropriate conditions (git-fixes). - drm/amd/pm: remove unused num_of_active_display variable (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes). - drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (bsc#1212848, bsc#1212961). - drm/amd/pm: update SMU13.0.0 reported maximum shader clock (bsc#1206843). - drm/amd/pm: update the LC_L1_INACTIVITY setting to address possible noise issue (bsc#1212848, bsc#1212961). - drm/amd: Avoid ASSERT for some message failures (bsc#1206843). - drm/amd: Avoid BUG() for case of SRIOV missing IP version (bsc#1206843). - drm/amd: Delay removal of the firmware framebuffer (git-fixes). - drm/amd: Disable PSR-SU on Parade 0803 TCON (bsc#1212848, bsc#1212961). - drm/amd: Do not try to enable secure display TA multiple times (bsc#1212848, bsc#1212961). - drm/amd: Fix an out of bounds error in BIOS parser (git-fixes). - drm/amd: Fix initialization for nbio 4.3.0 (bsc#1206843). - drm/amd: Fix initialization for nbio 7.5.1 (bsc#1206843). - drm/amd: Fix initialization mistake for NBIO 7.3.0 (bsc#1206843). - drm/amd: Make sure image is written to trigger VBIOS image update flow (git-fixes). - drm/amd: Tighten permissions on VBIOS flashing attributes (git-fixes). - drm/amdgpu/discovery: add PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable mes support for GC v11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 (bsc#1206843). - drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: set the APU flag for GC 11.0.4 (bsc#1206843). - drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments (bsc#1206843). - drm/amdgpu/display/mst: adjust the naming of mst_port and port of aconnector (bsc#1206843). - drm/amdgpu/display/mst: limit payload to be updated one by one (bsc#1206843). - drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD (bsc#1206843). - drm/amdgpu/dm/dp_mst: Do not grab mst_mgr->lock when computing DSC state (bsc#1206843). - drm/amdgpu/dm/mst: Fix uninitialized var in pre_compute_mst_dsc_configs_for_state() (bsc#1206843). - drm/amdgpu/dm/mst: Use the correct topology mgr pointer in amdgpu_dm_connector (bsc#1206843). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes). - drm/amdgpu/gfx10: Disable gfxoff before disabling powergating (git-fixes). - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes). - drm/amdgpu/mst: Stop ignoring error codes and deadlocking (bsc#1206843). - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (bsc#1206843). - drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 (bsc#1206843). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1206843). - drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 (bsc#1206843). - drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/soc21: do not expose AV1 if VCN0 is harvested (bsc#1206843). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1206843). - drm/amdgpu: Correct the power calcultion for Renior/Cezanne (git-fixes). - drm/amdgpu: Do not register backlight when another backlight should be used (v3) (bsc#1206843). - drm/amdgpu: Do not resume IOMMU after incomplete init (bsc#1206843). - drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN (bsc#1206843). - drm/amdgpu: Enable vclk dclk node for gc11.0.3 (bsc#1206843). - drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (bsc#1206843). - drm/amdgpu: Fix potential NULL dereference (bsc#1206843). - drm/amdgpu: Fix potential double free and null pointer dereference (bsc#1206843). - drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1206843). - drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes). - drm/amdgpu: Fixed bug on error when unloading amdgpu (bsc#1206843). - drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869). - drm/amdgpu: Register ACPI video backlight when skipping amdgpu backlight registration (bsc#1206843). - drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1206843). - drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes). - drm/amdgpu: Use the sched from entity for amdgpu_cs trace (git-fixes). - drm/amdgpu: Validate VM ioctl flags (git-fixes). - drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes). - drm/amdgpu: add gfx support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add gmc v11 support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add missing radeon secondary PCI ID (git-fixes). - drm/amdgpu: add smu 13 support for smu 13.0.11 (bsc#1206843). - drm/amdgpu: add soc21 common ip block support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add tmz support for GC 11.0.1 (bsc#1206843). - drm/amdgpu: add tmz support for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: allow more APUs to do mode2 reset when go to S4 (bsc#1206843). - drm/amdgpu: allow multipipe policy on ASICs with one MEC (bsc#1206843). - drm/amdgpu: change gfx 11.0.4 external_id range (git-fixes). - drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes). - drm/amdgpu: correct MEC number for gfx11 APUs (bsc#1206843). - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes). - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes). - drm/amdgpu: drop experimental flag on aldebaran (git-fixes). - drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable GFX IP v11.0.4 CG support (bsc#1206843). - drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable HDP SD for gfx 11.0.3 (bsc#1206843). - drm/amdgpu: enable PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu: enable VCN DPG for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram (git-fixes). - drm/amdgpu: fix amdgpu_job_free_resources v2 (bsc#1206843). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (bsc#1212848, bsc#1212961). - drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv (bsc#1206843). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 (bsc#1206843). - drm/amdgpu: fix mmhub register base coding error (git-fixes). - drm/amdgpu: fix number of fence calculations (bsc#1212848, bsc#1212961). - drm/amdgpu: fix return value check in kfd (git-fixes). - drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (bsc#1206843). - drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes). - drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume (git-fixes). - drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (git-fixes). - drm/amdgpu: reposition the gpu reset checking for reuse (bsc#1206843). - drm/amdgpu: set GC 11.0.4 family (bsc#1206843). - drm/amdgpu: skip ASIC reset for APUs when go to S4 (bsc#1206843). - drm/amdgpu: skip MES for S0ix as well since it's part of GFX (bsc#1206843). - drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes). - drm/amdgpu: skip mes self test after s0i3 resume for MES IP v11.0 (bsc#1206843). - drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset (git-fixes). - drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes). - drm/amdgpu: update wave data type to 3 for gfx11 (bsc#1206843). - drm/amdkfd: Add sync after creating vram bo (bsc#1206843). - drm/amdkfd: Fix BO offset for multi-VMA page migration (git-fixes). - drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU (bsc#1206843). - drm/amdkfd: Fix an illegal memory access (git-fixes). - drm/amdkfd: Fix double release compute pasid (bsc#1206843). - drm/amdkfd: Fix kfd_process_device_init_vm error handling (bsc#1206843). - drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes). - drm/amdkfd: Fix the memory overrun (bsc#1206843). - drm/amdkfd: Fix the warning of array-index-out-of-bounds (bsc#1206843). - drm/amdkfd: Fixed kfd_process cleanup on module exit (git-fixes). - drm/amdkfd: Get prange->offset after svm_range_vram_node_new (git-fixes). - drm/amdkfd: Page aligned memory reserve size (bsc#1206843). - drm/amdkfd: add GC 11.0.4 KFD support (bsc#1206843). - drm/amdkfd: fix a potential double free in pqm_create_queue (git-fixes). - drm/amdkfd: fix potential kgd_mem UAFs (git-fixes). - drm/amdkfd: introduce dummy cache info for property asic (bsc#1206843). - drm/armada: Fix a potential double free in an error handling path (git-fixes). - drm/ast: Fix ARM compatibility (git-fixes). - drm/bochs: fix blanking (git-fixes). - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes). - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes). - drm/bridge: it6505: Fix return value check for pm_runtime_get_sync (git-fixes). - drm/bridge: lt8912b: Add hot plug detection (git-fixes). - drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes). - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes). - drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes). - drm/bridge: lt9611: fix HPD reenablement (git-fixes). - drm/bridge: lt9611: fix clock calculation (git-fixes). - drm/bridge: lt9611: fix polarity programming (git-fixes). - drm/bridge: lt9611: fix programming of video modes (git-fixes). - drm/bridge: lt9611: fix sleep mode setup (git-fixes). - drm/bridge: lt9611: pass a pointer to the of node (git-fixes). - drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes). - drm/bridge: tc358768: always enable HS video mode (git-fixes). - drm/bridge: tc358768: fix PLL parameters computation (git-fixes). - drm/bridge: tc358768: fix PLL target frequency (git-fixes). - drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes). - drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec (git-fixes). - drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow (git-fixes). - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (git-fixes). - drm/connector: print max_requested_bpc in state debugfs (git-fixes). - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state() (bsc#1206843). - drm/display/dp_mst: Add helper for finding payloads in atomic MST state (bsc#1206843). - drm/display/dp_mst: Add helpers for serializing SST &lt;-> MST transitions (bsc#1206843). - drm/display/dp_mst: Add nonblocking helpers for DP MST (bsc#1206843). - drm/display/dp_mst: Call them time slots, not VCPI slots (bsc#1206843). - drm/display/dp_mst: Correct the kref of port (bsc#1206843). - drm/display/dp_mst: Do not open code modeset checks for releasing time slots (bsc#1206843). - drm/display/dp_mst: Drop all ports from topology on CSNs before queueing link address work (bsc#1206843). - drm/display/dp_mst: Fix confusing docs for drm_dp_atomic_release_time_slots() (bsc#1206843). - drm/display/dp_mst: Fix down message handling after a packet reception error (git-fixes). - drm/display/dp_mst: Fix down/up message handling after sink disconnect (git-fixes). - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (git-fixes). - drm/display/dp_mst: Fix modeset tracking in drm_dp_atomic_release_vcpi_slots() (bsc#1206843). - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload() (bsc#1206843). - drm/display/dp_mst: Maintain time slot allocations when deleting payloads (bsc#1206843). - drm/display/dp_mst: Move all payload info into the atomic state (bsc#1206843). - drm/display/dp_mst: Rename drm_dp_mst_vcpi_allocation (bsc#1206843). - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (git-fixes). - drm/displayid: add displayid_get_header() and check bounds better (git-fixes). - drm/dp: Do not rewrite link config when setting phy test pattern (git-fixes). - drm/dp_mst: Avoid deleting payloads for connectors staying enabled (bsc#1206843). - drm/dp_mst: fix drm_dp_dpcd_read return value checks (git-fixes). - drm/edid: fix AVI infoframe aspect ratio handling (git-fixes). - drm/edid: fix parsing of 3D modes from HDMI VSDB (git-fixes). - drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes). - drm/exynos: fix g2d_open/close helper function definitions (git-fixes). - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes). - drm/exynos: vidi: fix a wrong error return (git-fixes). - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes). - drm/fbdev-generic: prohibit potential out-of-bounds access (git-fixes). - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes). - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes). - drm/hyperv: Add error message for fb size greater than allocated (git-fixes). - drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes). - drm/i915/active: Fix missing debug object activation (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/adlp: Fix typo for reference clock (git-fixes). - drm/i915/color: Fix typo for Plane CSC indexes (git-fixes). - drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes). - drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes). - drm/i915/dg2: Drop one PCI ID (git-fixes). - drm/i915/dg2: Support 4k@30 on HDMI (git-fixes). - drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU (git-fixes). - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes). - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes). - drm/i915/display: Check source height is > 0 (git-fixes). - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes). - drm/i915/display: clean up comments (git-fixes). - drm/i915/dmc: Update DG2 DMC version to v2.08 (git-fixes). - drm/i915/dp: prevent potential div-by-zero (git-fixes). - drm/i915/dp_mst: Fix mst_mgr lookup during atomic check (bsc#1206843). - drm/i915/dp_mst: Fix payload removal during output disabling (bsc#1206843). - drm/i915/dpt: Treat the DPT BO as a framebuffer (git-fixes). - drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() (git-fixes). - drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes). - drm/i915/gem: Flush lmem contents after construction (git-fixes). - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes). - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes). - drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes). - drm/i915/gt: perform uc late init after probe error injection (git-fixes). - drm/i915/guc: Do not capture Gen8 regs on Xe devices (git-fixes). - drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes). - drm/i915/huc: always init the delayed load fence (git-fixes). - drm/i915/huc: bump timeout for delayed load and reduce print verbosity (git-fixes). - drm/i915/huc: fix leak of debug object in huc load fence on driver unload (git-fixes). - drm/i915/migrate: Account for the reserved_space (git-fixes). - drm/i915/migrate: fix corner case in CCS aux copying (git-fixes). - drm/i915/psr: Fix PSR_IMR/IIR field handling (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes). - drm/i915/pxp: use &lt;> instead of '' for headers in include/ (git-fixes). - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes). - drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes). - drm/i915/selftests: Add some missing error propagation (git-fixes). - drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes). - drm/i915/selftests: Stop using kthread_stop() (git-fixes). - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes). - drm/i915: Allow switching away via vga-switcheroo if uninitialized (git-fixes). - drm/i915: Avoid potential vm use-after-free (git-fixes). - drm/i915: Disable DC states for all commits (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes). - drm/i915: Fix NULL ptr deref by checking new_crtc_state (git-fixes). - drm/i915: Fix VBT DSI DVO port handling (git-fixes). - drm/i915: Fix context runtime accounting (git-fixes). - drm/i915: Fix fast wake AUX sync len (git-fixes). - drm/i915: Fix potential bit_17 double-free (git-fixes). - drm/i915: Fix potential context UAFs (git-fixes). - drm/i915: Fix request ref counting during error capture & debugfs dump (git-fixes). - drm/i915: Fix up locking around dumping requests lists (git-fixes). - drm/i915: Initialize the obj flags for shmem objects (git-fixes). - drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes). - drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on skl/glk (git-fixes). - drm/i915: Move fd_install after last use of fence (git-fixes). - drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes). - drm/i915: Remove __maybe_unused from mtl_info (git-fixes). - drm/i915: Remove unused bits of i915_vma/active api (git-fixes). - drm/i915: Remove unused variable (git-fixes). - drm/i915: Use 18 fast wake AUX sync len (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: move a Kconfig symbol to unbreak the menu presentation (git-fixes). - drm/i915: stop abusing swiotlb_max_segment (git-fixes). - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes). - drm/mediatek: Clean dangling pointer on bind error path (git-fixes). - drm/mediatek: Drop unbalanced obj unref (git-fixes). - drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes). - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes). - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes). - drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes). - drm/meson: fix missing component unbind on bind errors (git-fixes). - drm/meson: reorder driver deinit sequence to fix use-after-free bug (git-fixes). - drm/mgag200: Fix gamma lut not initialized (git-fixes). - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes). - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes). - drm/msm/a5xx: fix context faults during ring switch (git-fixes). - drm/msm/a5xx: fix highest bank bit for a530 (git-fixes). - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes). - drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes). - drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage (git-fixes). - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (git-fixes). - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes). - drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error (git-fixes). - drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at gpu load (git-fixes). - drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes). - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes). - drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes). - drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes). - drm/msm/dp: Free resources after unregistering them (git-fixes). - drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training (git-fixes). - drm/msm/dp: unregister audio driver during unbind (git-fixes). - drm/msm/dpu: Add INTF_5 interrupts (git-fixes). - drm/msm/dpu: Add check for cstate (git-fixes). - drm/msm/dpu: Add check for pstates (git-fixes). - drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes). - drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes). - drm/msm/dpu: Reject topologies for which no DSC blocks are available (git-fixes). - drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes). - drm/msm/dpu: Remove num_enc from topology struct in favour of num_dsc (git-fixes). - drm/msm/dpu: Wire up DSC mask for active CTL configuration (git-fixes). - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (git-fixes). - drm/msm/dpu: clear DSPP reservations in rm release (git-fixes). - drm/msm/dpu: correct MERGE_3D length (git-fixes). - drm/msm/dpu: disable features unsupported by QCM2290 (git-fixes). - drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes). - drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK (git-fixes). - drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes). - drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks (git-fixes). - drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes). - drm/msm/dpu: sc7180: add missing WB2 clock control (git-fixes). - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes). - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/dsi: Allow 2 CTRLs on v2.5.0 (git-fixes). - drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes). - drm/msm/gem: Add check for kmalloc (git-fixes). - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/mdp5: Add check for kzalloc (git-fixes). - drm/msm/mdp5: fix reading hw revision on db410c platform (git-fixes). - drm/msm: Be more shouty if per-process pgtables are not working (git-fixes). - drm/msm: Fix potential invalid ptr free (git-fixes). - drm/msm: Set max segment size earlier (git-fixes). - drm/msm: clean event_thread->worker in case of an error (git-fixes). - drm/msm: fix NULL-deref on irq uninstall (git-fixes). - drm/msm: fix NULL-deref on snapshot tear down (git-fixes). - drm/msm: fix drm device leak on bind errors (git-fixes). - drm/msm: fix missing wq allocation error handling (git-fixes). - drm/msm: fix vram leak on bind errors (git-fixes). - drm/msm: fix workqueue leak on bind errors (git-fixes). - drm/msm: use strscpy instead of strncpy (git-fixes). - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes). - drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes). - drm/nouveau/dp: check for NULL nv_connector->native_mode (git-fixes). - drm/nouveau/kms/nv50-: remove unused functions (git-fixes). - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes). - drm/nouveau/kms: Cache DP encoders in nouveau_connector (bsc#1206843). - drm/nouveau/kms: Pull mst state in for all modesets (bsc#1206843). - drm/nouveau: add nv_encoder pointer check for NULL (git-fixes). - drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes). - drm/omap: dsi: Fix excessive stack usage (git-fixes). - drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes). - drm/panel: novatek-nt35950: Improve error handling (git-fixes). - drm/panel: novatek-nt35950: Only unregister DSI1 if it exists (git-fixes). - drm/panel: otm8009a: Set backlight parent to panel device (git-fixes). - drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes). - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes). - drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes). - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes). - drm/probe-helper: Cancel previous job before starting new one (git-fixes). - drm/radeon: Drop legacy MST support (bsc#1206843). - drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes). - drm/radeon: fix possible division-by-zero errors (git-fixes). - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes). - drm/radeon: free iio for atombios when driver shutdown (git-fixes). - drm/radeon: reintroduce radeon_dp_work_func content (git-fixes). - drm/rockchip: Drop unbalanced obj unref (git-fixes). - drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes). - drm/sched: Remove redundant check (git-fixes). - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() (git-fixes). - drm/shmem-helper: Remove another errant put in error path (git-fixes). - drm/shmem-helper: Revert accidental non-GPL export (git-fixes). - drm/sun4i: fix missing component unbind on bind errors (git-fixes). - drm/tegra: Avoid potential 32-bit integer overflow (git-fixes). - drm/tegra: firewall: Check for is_addr_reg existence in IMM check (git-fixes). - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes). - drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes). - drm/ttm: Fix a NULL pointer dereference (git-fixes). - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (git-fixes). - drm/ttm: optimize pool allocations a bit v2 (git-fixes). - drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking (git-fixes). - drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: drv: Call component_unbind_all() (git-fixes). - drm/vc4: hdmi: Correct interlaced timings again (git-fixes). - drm/vc4: hdmi: make CEC adapter name unique (git-fixes). - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes). - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 (git-fixes). - drm/vc4: hvs: Set AXI panic modes (git-fixes). - drm/vc4: kms: Sort the CRTCs by output before assigning them (git-fixes). - drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes). - drm/vgem: add missing mutex_destroy (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - drm/virtio: exbuf->fence_fd unmodified on interrupted wait (git-fixes). - drm/vkms: Fix memory leak in vkms_init() (git-fixes). - drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes). - drm/vmwgfx: Do not drop the reference to the handle too soon (git-fixes). - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (git-fixes). - drm/vmwgfx: Fix race issue calling pin_user_pages (git-fixes). - drm/vmwgfx: Stop accessing buffer objects which failed init (git-fixes). - drm/vram-helper: fix function names in vram helper doc (git-fixes). - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes). - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes). - drm: amd: display: Fix memory leakage (git-fixes). - drm: bridge: adv7511: unregister cec i2c device after cec adapter (git-fixes). - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags (git-fixes). - drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes). - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC (git-fixes). - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes). - drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes). - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes). - drm: tidss: Fix pixel format definition (git-fixes). - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes). - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes). - dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes). - dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes). - dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes). - dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes). - dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes). - dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes). - dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes). - dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes). - dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes). - dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes). - dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes). - dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes). - dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes). - dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes). - dt-bindings: power: renesas,apmu: Fix cpus property limits (git-fixes). - dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes). - dt-bindings: remoteproc: st,stm32-rproc: Fix phandle-array parameters description (git-fixes). - dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes). - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes). - dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes). - dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes). - dt-bindings: usb: snps,dwc3: Fix 'snps,hsphy_interface' type (git-fixes). - e1000e: Disable TSO on i219-LM card to increase speed (git-fixes). - edac/i10nm: Add Intel Emerald Rapids server support (PED-4400). - eeprom: at24: also select REGMAP (git-fixes). - eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes). - efi/x86: libstub: Fix typo in __efi64_argmap* name (git-fixes). - efi: Accept version 2 of memory attributes table (git-fixes). - efi: efivars: Fix variable writes with unsupported query_variable_store() (git-fixes). - efi: efivars: Fix variable writes without query_variable_store() (git-fixes). - efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes). - efi: rt-wrapper: Add missing include (git-fixes). - efi: ssdt: Do not free memory if ACPI table was loaded successfully (git-fixes). - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes). - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes). - elevator: update the document of elevator_switch (git-fixes). - elf: correct note name comment (git-fixes). - ethernet: 3com/typhoon: do not write directly to netdev->dev_addr (git-fixes). - ethernet: 8390/etherh: do not write directly to netdev->dev_addr (git-fixes). - ethernet: i825xx: do not write directly to netdev->dev_addr (git-fixes). - ethernet: ice: avoid gcc-9 integer overflow warning (jsc#PED-376). - ethernet: seeq/ether3: do not write directly to netdev->dev_addr (git-fixes). - ethernet: tundra: do not write directly to netdev->dev_addr (git-fixes). - exit: Add and use make_task_dead (bsc#1207328). - exit: Allow oops_limit to be disabled (bsc#1207328). - exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328). - exit: Move force_uaccess back into do_exit (bsc#1207328). - exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328). - exit: Put an upper limit on how often we can oops (bsc#1207328). - exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328). - exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328). - ext4,f2fs: fix readahead of verity data (bsc#1207648). - ext4: Fix deadlock during directory rename (bsc#1210763). - ext4: Fix possible corruption when moving a directory (bsc#1210763). - ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020). - ext4: add EA_INODE checking to ext4_iget() (bsc#1213106). - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088). - ext4: add helper to check quota inums (bsc#1207618). - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617). - ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109). - ext4: add missing validation of fast-commit record lengths (bsc#1207626). - ext4: add strict range checks while freeing blocks (bsc#1213089). - ext4: allocate extended attribute value in vmalloc area (bsc#1207635). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016). - ext4: avoid resizing to a partial cluster size (bsc#1206880). - ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634). - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018). - ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090). - ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103). - ext4: continue to expand file system when the target size does not reach (bsc#1206882). - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592). - ext4: correct max_inline_xattr_value_size computing (bsc#1206878). - ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878). - ext4: disable fast-commit of encrypted dir operations (bsc#1207623). - ext4: disallow ea_inodes with extended attributes (bsc#1213108). - ext4: do not allow journal inode to have encrypt flag (bsc#1207621). - ext4: do not increase iversion counter for ea_inodes (bsc#1207605). - ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603). - ext4: do not set up encryption key during jbd2 transaction (bsc#1207624). - ext4: drop ineligible txn start stop APIs (bsc#1207588). - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606). - ext4: factor out ext4_fc_get_tl() (bsc#1207615). - ext4: fail ext4_iget if special inode unallocated (bsc#1213010). - ext4: fast commit may miss file actions (bsc#1207591). - ext4: fast commit may not fallback for ineligible commit (bsc#1207590). - ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886). - ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766). - ext4: fix WARNING in ext4_update_inline_data (bsc#1213012). - ext4: fix WARNING in mb_find_extent (bsc#1213099). - ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767). - ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076). - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1206881). - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620). - ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111). - ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594). - ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765). - ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891). - ext4: fix data races when using cached status extents (bsc#1213102). - ext4: fix deadlock due to mbcache entry corruption (bsc#1207653). - ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105). - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631). - ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608). - ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630). - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593). - ext4: fix extent status tree race in writeback error recovery path (bsc#1206877). - ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015). - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764). - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636). - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894). - ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625). - ext4: fix lockdep warning when enabling MMP (bsc#1213100). - ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609). - ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884). - ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628). - ext4: fix possible double unlock when moving a directory (bsc#1210763). - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611). - ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612). - ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616). - ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637). - ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096). - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021). - ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627). - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890). - ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893). - ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888). - ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622). - ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878). - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098). - ext4: fix warning in 'ext4_da_release_space' (bsc#1206887). - ext4: goto right label 'failed_mount3a' (bsc#1207610). - ext4: improve error handling from ext4_dirhash() (bsc#1213104). - ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017). - ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629). - ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633). - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614). - ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602). - ext4: make ext4_lazyinit_thread freezable (bsc#1206885). - ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011). - ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019). - ext4: place buffer head allocation before handle start (bsc#1207607). - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087). - ext4: refuse to create ea block when umounted (bsc#1213093). - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - ext4: simplify updating of fast commit stats (bsc#1207589). - ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110). - ext4: unconditionally enable the i_version counter (bsc#1211299). - ext4: update 'state->fc_regions_size' after successful memory allocation (bsc#1207613). - ext4: update s_journal_inum if it changes after journal replay (bsc#1213094). - ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876). - ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092). - ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793). - ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013). - extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes). - extcon: Fix kernel doc of property fields to avoid warnings (git-fixes). - extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes). - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes). - extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes). - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes). - extcon: usbc-tusb320: fix kernel-doc warning (git-fixes). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (git-fixes). - fbcon: Fix error paths in set_con2fb_map (git-fixes). - fbcon: Fix null-ptr-deref in soft_cursor (git-fixes). - fbcon: set_con2fb_map needs to set con2fb_map! (git-fixes). - fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472). - fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes). - fbdev: au1200fb: Fix potential divide by zero (git-fixes). - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes). - fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387). - fbdev: intelfb: Fix potential divide by zero (git-fixes). - fbdev: lxfb: Fix potential divide by zero (git-fixes). - fbdev: mmp: Fix deferred clk handling in mmphw_probe() (git-fixes). - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes). - fbdev: nvidia: Fix potential divide by zero (git-fixes). - fbdev: omapfb: avoid stack overflow warning (git-fixes). - fbdev: omapfb: cleanup inconsistent indentation (git-fixes). - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes). - fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes). - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes). - fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes). - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes). - fbdev: tgafb: Fix potential divide by zero (git-fixes). - fbdev: udlfb: Fix endpoint check (git-fixes). - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes). - filelock: new helper: vfs_inode_has_locks (jsc#SES-1880). - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes). - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes). - firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes). - firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes). - firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes). - firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes). - firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes). - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes). - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes). - firmware: qcom_scm: Clear download bit during reboot (git-fixes). - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes). - firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes). - flow_dissector: Do not count vlan tags inside tunnel payload (git-fixes). - fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258). - fotg210-udc: Add missing completion handler (git-fixes). - fpga: bridge: fix kernel-doc parameter description (git-fixes). - fpga: bridge: properly initialize bridge device before populating children (git-fixes). - fpga: m10bmc-sec: Fix probe rollback (git-fixes). - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes). - fprobe: Check rethook_alloc() return in rethook initialization (git-fixes). - fprobe: Fix smatch type mismatch warning (git-fixes). - fprobe: add recursion detection in fprobe_exit_handler (git-fixes). - fprobe: make fprobe_kprobe_handler recursion free (git-fixes). - fs/jfs: fix shift exponent db_agl2size negative (git-fixes). - fs: account for filesystem mappings (bsc#1205191). - fs: account for group membership (bsc#1205191). - fs: add i_user_ns() helper (bsc#1205191). - fs: dlm: do not call kernel_getpeername() in error_report() (bsc#1208130). - fs: dlm: use sk->sk_socket instead of con->sock (bsc#1208130). - fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632). - fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes). - fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes). - fs: move mapping helpers (bsc#1205191) - fs: remove __sync_filesystem (git-fixes). - fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes). - fs: tweak fsuidgid_has_mapping() (bsc#1205191). - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (bsc#1210409). - fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429). - ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes). - ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes). - ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes). - fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759). - fuse: always revalidate rename target dentry (bsc#1211808). - fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807). - futex: Resend potentially swallowed owner death notification (git-fixes). - genirq: Provide new interfaces for affinity hints (bsc#1208153). - git-sort: Add io_uring 6.3 fixes remote - google/gve:fix repeated words in comments (bsc#1211519). - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes). - gpio: davinci: Add irq chip flag to skip set wake (git-fixes). - gpio: mockup: Fix mode of debugfs files (git-fixes). - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes). - gpio: vf610: connect GPIO label to dev name (git-fixes). - gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes). - gpu: host1x: Fix mask for syncpoint increment register (git-fixes). - gpu: host1x: Fix potential double free if IOMMU is disabled (git-fixes). - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes). - gve: Adding a new AdminQ command to verify driver (bsc#1211519). - gve: Cache link_speed value from device (git-fixes). - gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519). - gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519). - gve: Handle alternate miss completions (bsc#1211519). - gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519). - gve: Remove the code of clearing PBA bit (git-fixes). - gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes). - gve: enhance no queue page list detection (bsc#1211519). - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes). - hfs/hfsplus: use WARN_ON for sanity check (git-fixes). - hfs: Fix OOB Write in hfs_asc2mac (git-fixes). - hfs: fix OOB Read in __hfs_brec_find (git-fixes). - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes). - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes). - hid: Add Mapping for System Microphone Mute (git-fixes). - hid: asus: use spinlock to protect concurrent accesses (git-fixes). - hid: asus: use spinlock to safely schedule workers (git-fixes). - hid: bigben: use spinlock to protect concurrent accesses (git-fixes). - hid: bigben: use spinlock to safely schedule workers (git-fixes). - hid: bigben_probe(): validate report count (git-fixes). - hid: bigben_worker() remove unneeded check on report_field (git-fixes). - hid: core: Fix deadloop in hid_apply_multiplier (git-fixes). - hid: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes). - hid: elecom: add support for TrackBall 056E:011C (git-fixes). - hid: google: add jewel USB id (git-fixes). - hid: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes). - hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes). - hid: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes). - hid: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes). - hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes). - hid: microsoft: Add rumble support to latest xbox controllers (bsc#1211280). - hid: multitouch: Add quirks for flipped axes (git-fixes). - hid: playstation: sanity check DualSense calibration data (git-fixes). - hid: retain initial quirks set up when creating HID devices (git-fixes). - hid: wacom: Add error check to wacom_parse_and_register() (git-fixes). - hid: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes). - hid: wacom: Force pen out of prox if no events have been received in a while (git-fixes). - hid: wacom: Set a default resolution for older tablets (git-fixes). - hid: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes). - hid: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes). - hid: wacom: generic: Set battery quirk only when we see battery data (git-fixes). - hv: fix comment typo in vmbus_channel/low_latency (git-fixes). - hv: hv_balloon: fix memory leak with using debugfs_lookup() (git-fixes). - hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes). - hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes). - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes). - hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861). - hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861). - hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861). - hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861). - hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861). - hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861). - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes). - hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes). - hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes). - hwmon: (coretemp) Simplify platform device handling (git-fixes). - hwmon: (ftsteutates) Fix scaling of measurements (git-fixes). - hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes). - hwmon: (ina3221) return prober error code (git-fixes). - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes). - hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848). - hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes). - hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes). - hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes). - hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes). - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes). - hwmon: fix potential sensor registration fail if of_node is missing (git-fixes). - hwmon: tmp512: drop of_match_ptr for ID table (git-fixes). - hwrng: imx-rngc - fix the timeout for init and self check (git-fixes). - hwrng: st - keep clock enabled while hwrng is registered (git-fixes). - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes). - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes). - i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes). - i2c: hisi: Avoid redundant interrupts (git-fixes). - i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes). - i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes). - i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes). - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes). - i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes). - i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes). - i2c: mv64xxx: Remove shutdown method from driver (git-fixes). - i2c: mxs: suppress probe-deferral error message (git-fixes). - i2c: ocores: generate stop condition after timeout in polling mode (git-fixes). - i2c: omap: Fix standard mode false ACK readings (git-fixes). - i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes). - i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes). - i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes). - i2c: tegra: Fix PEC support for SMBUS block read (git-fixes). - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes). - i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378). - i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378). - i40e: Fix DMA mappings leak (jsc#SLE-18378). - i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378). - i40e: Fix VF set max MTU size (jsc#SLE-18378). - i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378). - i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378). - i40e: Fix calculating the number of queue pairs (jsc#SLE-18378). - i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378). - i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378). - i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378). - i40e: Fix for VF MAC address 0 (jsc#SLE-18378). - i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378). - i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378). - i40e: Fix kernel crash during module removal (jsc#SLE-18378). - i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378). - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378). - i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378). - i40e: Refactor tc mqprio checks (jsc#SLE-18378). - i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378). - i40e: fix accessing vsi->active_filters without holding lock (jsc#SLE-18378). - i40e: fix flow director packet filter programming (jsc#SLE-18378). - i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378). - i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378). - i825xx: sni_82596: use eth_hw_addr_set() (git-fixes). - i915 kABI workaround (git-fixes). - i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes). - iavf/iavf_main: actually log ->src mask when talking about it (jsc#SLE-18385). - iavf: Detach device during reset task (jsc#SLE-18385). - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385). - iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385). - iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385). - iavf: Fix a crash during reset task (jsc#SLE-18385). - iavf: Fix bad page state (jsc#SLE-18385). - iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385). - iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385). - iavf: Fix max_rate limiting (jsc#SLE-18385). - iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385). - iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385). - iavf: do not track VLAN 0 filters (jsc#PED-835). - iavf: fix hang on reboot with ice (jsc#SLE-18385). - iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385). - iavf: fix temporary deadlock and failure to set MAC address (jsc#PED-835). - iavf: refactor VLAN filter states (jsc#PED-835). - iavf: remove active_cvlans and active_svlans bitmaps (jsc#PED-835). - iavf: remove mask from iavf_irq_enable_queues() (git-fixes). - iavf: schedule watchdog immediately when changing primary MAC (jsc#PED-835). - ib/hfi1: Assign npages earlier (git-fixes) - ib/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes) - ib/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes) - ib/hfi1: Fix expected receive setup error exit issues (git-fixes) - ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes) - ib/hfi1: Fix sdma.h tx->num_descs off-by-one errors (git-fixes) - ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes) - ib/hfi1: Immediately remove invalid memory from hardware (git-fixes) - ib/hfi1: Reject a zero-length user expected buffer (git-fixes) - ib/hfi1: Remove user expected buffer invalidate race (git-fixes) - ib/hfi1: Reserve user expected TIDs (git-fixes) - ib/hfi1: Restore allocated resources on failed copyout (git-fixes) - ib/hfi1: Update RMT size calculation (git-fixes) - ib/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes) - ib/iPoIB: Fix legacy IPoIB due to wrong number of queues (git-fixes) - ib/isert: Fix dead lock in ib_isert (git-fixes) - ib/isert: Fix incorrect release of isert connection (git-fixes) - ib/isert: Fix possible list corruption in CMA handler (git-fixes) - ib/mad: Do not call to function that might sleep while in atomic context (git-fixes). - ib/mlx5: Add support for 400G_8X lane speed (git-fixes) - ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes) - ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes) - ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604). - ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes). - ice: Add check for kzalloc (jsc#PED-376). - ice: Do not double unplug aux on peer initiated reset (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (jsc#PED-376). - ice: Fix DSCP PFC TLV creation (git-fixes). - ice: Fix DSCP PFC TLV creation (jsc#PED-376). - ice: Fix XDP memory leak when NIC is brought up and down (git-fixes). - ice: Fix disabling Rx VLAN filtering with port VLAN enabled (jsc#PED-376). - ice: Fix ice VF reset during iavf initialization (jsc#PED-376). - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields (jsc#PED-376). - ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes). - ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375). - ice: Fix memory corruption in VF driver (git-fixes). - ice: Fix potential memory leak in ice_gnss_tty_write() (jsc#PED-376). - ice: Ignore EEXIST when setting promisc mode (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (jsc#PED-376). - ice: Reset FDIR counter in FDIR init stage (git-fixes). - ice: Reset FDIR counter in FDIR init stage (jsc#PED-376). - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375). - ice: add profile conflict check for AVF FDIR (git-fixes). - ice: add profile conflict check for AVF FDIR (jsc#PED-376). - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158). - ice: block LAN in case of VF to VF offload (git-fixes). - ice: block LAN in case of VF to VF offload (jsc#PED-376). - ice: check if VF exists before mode check (jsc#PED-376). - ice: config netdev tc before setting queues number (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (jsc#PED-376). - ice: ethtool: Prohibit improper channel config for DCB (git-fixes). - ice: ethtool: advertise 1000M speeds properly (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (jsc#PED-376). - ice: fix lost multicast packets in promisc mode (jsc#PED-376). - ice: fix wrong fallback logic for FDIR (git-fixes). - ice: fix wrong fallback logic for FDIR (jsc#PED-376). - ice: handle E822 generic device ID in PLDM header (git-fixes). - ice: move devlink port creation/deletion (jsc#PED-376). - ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes). - ice: switch: fix potential memleak in ice_add_adv_recipe() (jsc#PED-376). - ice: use bitmap_free instead of devm_kfree (git-fixes). - ice: xsk: Fix cleaning of XDP_TX frames (jsc#PED-376). - ice: xsk: disable txq irq before flushing hw (jsc#PED-376). - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (jsc#PED-376). - ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes). - ieee80211: add TWT element definitions (bsc#1209980). - ieee802154: hwsim: Fix possible memory leaks (git-fixes). - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253). - igb: Add lock to avoid data race (jsc#SLE-18379). - igb: Enable SR-IOV after reinit (jsc#SLE-18379). - igb: Fix PPS input and output using 3rd and 4th SDP (jsc#PED-370). - igb: Fix extts capture value format for 82580/i354/i350 (git-fixes). - igb: Initialize mailbox message for VF reset (jsc#SLE-18379). - igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379). - igb: fix bit_shift to be in [1..8] range (git-fixes). - igb: fix nvm.ops.read() error handling (git-fixes). - igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379). - igbvf: Regard vf reset nack as success (jsc#SLE-18379). - igc: Add checking for basetime less than zero (jsc#SLE-18377). - igc: Add ndo_tx_timeout support (jsc#SLE-18377). - igc: Clean the TX buffer and TX descriptor ring (git-fixes). - igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377). - igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377). - igc: Fix possible system crash when loading module (git-fixes). - igc: Lift TAPRIO schedule restriction (jsc#SLE-18377). - igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377). - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377). - igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377). - igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377). - igc: fix the validation logic for taprio's gate list (jsc#SLE-18377). - igc: read before write to SRRCTL register (jsc#SLE-18377). - igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377). - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377). - iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes). - iio: accel: fxls8962af: fixup buffer scan element type (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes). - iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes). - iio: adc: ad7192: Change 'shorted' channels to differential (git-fixes). - iio: adc: ad7192: Fix internal/external clock selection (git-fixes). - iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes). - iio: adc: ad7791: fix IRQ flags (git-fixes). - iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes). - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes). - iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes). - iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes). - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes). - iio: adc: stm32-dfsdm: fill module aliases (git-fixes). - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes). - iio: adis16480: select CONFIG_CRC32 (git-fixes). - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes). - iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes). - iio: hid: fix the retval in accel_3d_capture_sample (git-fixes). - iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes). - iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes). - iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes). - iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes). - iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes). - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes). - iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes). - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes). - iio: imu: inv_icm42600: fix timestamp reset (git-fixes). - iio: light: cm32181: Unregister second I2C client if present (git-fixes). - iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes). - iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes). - iio: light: vcnl4035: fixed chip ID check (git-fixes). - iio:adc:twl6030: Enable measurement of VAC (git-fixes). - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes). - ima: Fix memory leak in __ima_inode_hash() (git-fixes). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448). - init: Provide arch_cpu_finalize_init() (bsc#1212448). - init: Remove check_bugs() leftovers (bsc#1212448). - inotify: Avoid reporting event with invalid wd (bsc#1213025). - input: ads7846 - always set last command to PWRDOWN (git-fixes). - input: ads7846 - do not check penirq immediately for 7845 (git-fixes). - input: ads7846 - do not report pressure for ads7845 (git-fixes). - input: adxl34x - do not hardcode interrupt trigger type (git-fixes). - input: alps - fix compatibility with -funsigned-char (bsc#1209805). - input: drv260x - fix typo in register value define (git-fixes). - input: drv260x - remove unused .reg_defaults (git-fixes). - input: drv260x - sleep between polling GO bit (git-fixes). - input: exc3000 - properly stop timer on shutdown (git-fixes). - input: fix open count when closing inhibited device (git-fixes). - input: focaltech - use explicitly signed char type (git-fixes). - input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes). - input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes). - input: iqs269a - configure device with a single block write (git-fixes). - input: iqs269a - drop unused device node references (git-fixes). - input: iqs269a - increase interrupt handler return delay (git-fixes). - input: iqs626a - drop unused device node references (git-fixes). - input: psmouse - fix OOB access in Elantech protocol (git-fixes). - input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes). - input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes). - input: xpad - add constants for GIP interface numbers (git-fixes). - input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes). - integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes). - intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379). - intel_idle: add Emerald Rapids Xeon support (PED-3849). - interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes). - interconnect: fix mem leak when freeing nodes (git-fixes). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes). - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128 (git-fixes). - io_uring/kbuf: fix not advancing READV kbuf ring (git-fixes). - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available (git-fixes). - io_uring: do not expose io_fill_cqe_aux() (bsc#1211014). - io_uring: do not gate task_work run on TIF_NOTIFY_SIGNAL (git-fixes). - io_uring: ensure that cached task references are always put on exit (git-fixes). - io_uring: fix CQ waiting timeout handling (git-fixes). - io_uring: fix fget leak when fs do not support nowait buffered read (bsc#1205205). - io_uring: fix ordering of args in io_uring_queue_async_work (git-fixes). - io_uring: fix return value when removing provided buffers (git-fixes). - io_uring: fix size calculation when registering buf ring (git-fixes). - io_uring: recycle kbuf recycle on tw requeue (git-fixes). - iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes). - iommu/vt-d: Add a fix for devices need extra dtlb flush (bsc#1208219). - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode (bsc#1208948). - iommu/vt-d: Fix buggy QAT device mask (bsc#1208219). - ipmi: fix SSIF not responding under certain cond (git-fixes). - ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459). - ipmi:ssif: Add a timer between request retries (bsc#1206459). - ipmi:ssif: Add send_retries increment (git-fixes). - ipmi:ssif: Increase the message retry time (bsc#1206459). - ipmi:ssif: Remove rtc_us_timer (bsc#1206459). - ipmi:ssif: resend_msg() cannot fail (bsc#1206459). - ipmi_ssif: Rename idle state and check (bsc#1206459). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes). - irqchip/ftintc010: Mark all function static (git-fixes). - irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes). - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes) - iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553). - ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384). - ixgbe: Enable setting RSS table to default values (jsc#SLE-18384). - ixgbe: Fix panic during XDP_TX with > 64 CPUs (jsc#SLE-18384). - ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384). - ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384). - ixgbe: fix pci device refcount leak (jsc#SLE-18384). - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384). - jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590). - jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641). - jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095). - jbd2: fix potential buffer head reference count leak (bsc#1207644). - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645). - jbd2: use the correct print format (git-fixes). - jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643). - jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014). - jfs: Fix fortify moan in symlink (git-fixes). - k-m-s: Drop Linux 2.6 support - kABI compatibility workaround for efivars (git-fixes). - kABI workaround for btbcm.c (git-fixes). - kABI workaround for cpp_acpi extensions for EPP (bsc#1212445). - kABI workaround for drm_dp_mst helper updates (bsc#1206843). - kABI workaround for hid quirks (git-fixes). - kABI workaround for ieee80211 and co (bsc#1209980). - kABI workaround for mt76_poll_msec() (git-fixes). - kABI workaround for struct acpi_ec (bsc#1207149). - kABI workaround for xhci (git-fixes). - kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest (git-fixes) - kABI: PCI: Reduce warnings on possible RW1C corruption (kabi). - kABI: PCI: dwc: Add dw_pcie_ops.host_deinit() callback (kabi). - kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi). - kABI: Preserve TRACE_EVENT_FL values (git-fixes). - kABI: Work around kABI changes after '20347fca71a3 swiotlb: split up the global swiotlb lock' (jsc#PED-3259). - kABI: x86/msi: Fix msi message data shadow struct (kabi). - kABI: x86/msr: Remove .fixup usage (kabi). - kabi FIX FOR NFSv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - kabi FIX FOR: NFS: Further optimisations for 'ls -l' (git-fixes). - kabi FIX FOR: NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - kabi FIX FOR: NFSv4.1 query for fs_location attr on a new file system (Never, kabi). - kabi FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi). - kabi fix for: NFSv3: handle out-of-order write replies (bsc#1205544). - kabi/severities: add mlx5 internal symbols - kabi/severities: added Microsoft mana symbold (bsc#1210551) - kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users. - kabi/severities: ignore kABI changes for mt76/* local modules (bsc#1209980) - kabi/severities: ignore kABI in bq27xxx_battery module Those are local symbols that are used only by child drivers - kasan: no need to unset panic_on_warn in end_report() (bsc#1207328). - kconfig: Update config changed flag before calling callback (git-fixes). - kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi - kernel-binary: install expoline.o (boo#1210791 bsc#1211089) - kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base. - kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741). - kernel-source: Remove unused macro variant_symbols - kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). rpm only supports full length release, no provides - kernel: Do not sign the vanilla kernel (bsc#1209008). - kernel: Kernel is locked down even though secure boot is disabled (bsc#1198101, bsc#1208976). - keys: Add missing function documentation (git-fixes). - keys: Create static version of public_key_verify_signature (git-fixes). - keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes). - keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - keys: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes). - keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes). - kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes) Update config/armv7hl/default too. - kprobe: reverse kp->flags when arm_kprobe failed (git-fixes). - kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes). - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes). - kprobes: Forbid probing on trampoline and BPF code areas (git-fixes). - kprobes: Prohibit probes in gate area (git-fixes). - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes). - kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes). - kvm/vfio: Fix potential deadlock on vfio group_lock (git-fixes) - kvm/vfio: Fix potential deadlock problem in vfio (git-fixes) - kvm: Destroy target device if coalesced MMIO unregistration fails (git-fixes) - kvm: Disallow user memslot with size that exceeds 'unsigned long' (git-fixes) - kvm: Do not create VM debugfs files outside of the VM directory (git-fixes) - kvm: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes) - kvm: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes). - kvm: Prevent module exit until all VMs are freed (git-fixes) - kvm: arm64: Do not arm a hrtimer for an already pending timer (git-fixes) - kvm: arm64: Do not hypercall before EL2 init (git-fixes) - kvm: arm64: Do not return from void function (git-fixes) - kvm: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes) - kvm: arm64: Fix S1PTW handling on RO memslots (git-fixes) - kvm: arm64: Fix bad dereference on MTE-enabled systems (git-fixes) - kvm: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes) - kvm: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes) - kvm: arm64: Free hypervisor allocations if vector slot init fails (git-fixes) - kvm: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes) - kvm: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes) - kvm: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes) - kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes) - kvm: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes) - kvm: arm64: Save PSTATE early on exit (git-fixes) - kvm: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes) - kvm: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes) - kvm: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes) - kvm: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes) - kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes) - kvm: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes). - kvm: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes). - kvm: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes). - kvm: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes). - kvm: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (git-fixes). - kvm: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes). - kvm: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes). - kvm: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes). - kvm: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes). - kvm: s390: selftest: memop: Fix integer literal (git-fixes). - kvm: svm: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes). - kvm: svm: Fix benign 'bool vs. int' comparison in svm_set_cr0() (git-fixes). - kvm: svm: Fix potential overflow in SEV's send|receive_update_data() (git-fixes). - kvm: svm: Require logical ID to be power-of-2 for AVIC entry (git-fixes). - kvm: svm: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes). - kvm: svm: hyper-v: placate modpost section mismatch error (git-fixes). - kvm: vmx: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes). - kvm: vmx: Resume guest immediately when injecting #GP on ECREATE (git-fixes). - kvm: vmx: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes). - kvm: vmx: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes). - kvm: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes). - kvm: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes). - kvm: x86/pmu: Ignore pmu->global_ctrl check if vPMU does not support global_ctrl (git-fixes). - kvm: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes). - kvm: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes). - kvm: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes). - kvm: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes). - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes). - kvm: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes). - kvm: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes). - kvm: x86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes). - kvm: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes). - kvm: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes). - kvm: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes). - kvm: x86: Protect the unused bits in MSR exiting flags (git-fixes). - kvm: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes). - kvm: x86: Report deprecated x87 features in supported CPUID (git-fixes). - kvm: x86: do not set st->preempted when going back to user space (git-fixes). - kvm: x86: fix sending PV IPI (git-fixes). - kvm: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes). - kvm: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes). - lan78xx: Add missing return code checks (git-fixes). - lan78xx: Fix exception on link speed change (git-fixes). - lan78xx: Fix memory allocation bug (git-fixes). - lan78xx: Fix partial packet errors on suspend/resume (git-fixes). - lan78xx: Fix race condition in disconnect handling (git-fixes). - lan78xx: Fix race conditions in suspend/resume handling (git-fixes). - lan78xx: Fix white space and style issues (git-fixes). - lan78xx: Remove unused pause frame queue (git-fixes). - lan78xx: Remove unused timer (git-fixes). - lan78xx: Set flow control threshold to prevent packet loss (git-fixes). - leds: Fix reference to led_set_brightness() in doc (git-fixes). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes). - leds: led-class: Add missing put_device() to led_put() (git-fixes). - leds: led-core: Fix refcount leak in of_led_get() (git-fixes). - leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes). - lib/mpi: Fix buffer overrun when SG is too long (git-fixes). - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (git-fixes). - lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes). - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes). - lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes). - locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552). - locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes). - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270). - locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270). - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270). - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270). - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270). - locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270). - locking/rwsem: Make handoff bit handling more consistent (bsc#1207270). - locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270). - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270). - locking: Add missing __sched attributes (bsc#1207270). - loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes). - loop: fix ioctl calls using compat_loop_info (git-fixes). - lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852). - lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852). - lpfc: Clean up SLI-4 CQE status handling (bsc#1211852). - lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852). - lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852). - lpfc: Enhance congestion statistics collection (bsc#1211852). - lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346). - lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852). - lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852). - lpfc: update metadata - mac80211: introduce individual TWT support in AP mode (bsc#1209980). - mac80211: introduce set_radar_offchan callback (bsc#1209980). - mac80211: twt: do not use potentially unaligned pointer (bsc#1209980). - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes). - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes). - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes). - mailbox: zynqmp: Fix IPI isr handling (git-fixes). - mailbox: zynqmp: Fix typo in IPI documentation (git-fixes). - mbcache: Avoid nesting of cache->c_list_lock under bit locks (bsc#1207647). - mbcache: Fixup kABI of mb_cache_entry (bsc#1207653). - mce: fix set_mce_nospec to always unmap the whole page (git-fixes). - md/bitmap: Fix bitmap chunk size overflow issues (git-fixes). - md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes). - md/raid5: Improve performance for sequential IO (bsc#1208081). - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes). - md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes). - md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes). - md: fix a crash in mempool_free (git-fixes). - md: protect md_unregister_thread from reentrancy (git-fixes). - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes). - media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes). - media: cec: core: do not set last_initiator if tx in progress (git-fixes). - media: cec: i2c: ch7322: also select REGMAP (git-fixes). - media: coda: Add check for dcoda_iram_alloc (git-fixes). - media: coda: Add check for kmalloc (git-fixes). - media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes). - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes). - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes). - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes). - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes). - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes). - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes). - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes). - media: dvb_ca_en50221: fix a size write bug (git-fixes). - media: dvb_demux: fix a bug for the continuity counter (git-fixes). - media: i2c: Correct format propagation for st-mipid02 (git-fixes). - media: i2c: imx219: Fix binning for RAW8 capture (git-fixes). - media: i2c: imx219: Split common registers from mode tables (git-fixes). - media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes). - media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes). - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes). - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes). - media: m5mols: fix off-by-one loop termination error (git-fixes). - media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes). - media: max9286: Free control handler (git-fixes). - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes). - media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes). - media: netup_unidvb: fix use-after-free at del_timer() (git-fixes). - media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes). - media: ov5640: Fix analogue gain control (git-fixes). - media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes). - media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes). - media: platform: ti: Add missing check for devm_regulator_get (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes). - media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes). - media: rc: gpio-ir-recv: add remove function (git-fixes). - media: rcar_fdp1: Fix the correct variable assignments (git-fixes). - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes). - media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes). - media: saa7134: Use video_unregister_device for radio_dev (git-fixes). - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes). - media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes). - media: usb: Check az6007_read() return value (git-fixes). - media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes). - media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes). - media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes). - media: uvcvideo: Check controls flags before accessing them (git-fixes). - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes). - media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes). - media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes). - media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes). - media: uvcvideo: Handle cameras with invalid descriptors (git-fixes). - media: uvcvideo: Handle errors from calls to usb_string (git-fixes). - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes). - media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes). - media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes). - media: uvcvideo: Use control names from framework (git-fixes). - media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes). - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes). - media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes). - media: venus: dec: Fix handling of the start cmd (git-fixes). - media: venus: helpers: Fix ALIGN() of non power of two (git-fixes). - media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes). - mei: bus-fixup:upon error print return values of send and receive (git-fixes). - mei: bus: fix unlink on bus in error path (git-fixes). - mei: me: add meteor lake point M DID (git-fixes). - mei: pxp: Use correct macros to initialize uuid_le (git-fixes). - memory: brcmstb_dpfe: fix testing array offset after use (git-fixes). - memstick: fix memory leak if card device is never registered (git-fixes). - memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449). - meson saradc: fix clock divider mask length (git-fixes). - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes). - mfd: cs5535: Do not build on UML (git-fixes). - mfd: dln2: Fix memory leak in dln2_probe() (git-fixes). - mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes). - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes). - mfd: pm8008: Fix module autoloading (git-fixes). - mfd: rt5033: Drop rt5033-battery sub-device (git-fixes). - mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes). - mfd: stmfx: Nullify stmfx->vdd in case of error (git-fixes). - mfd: stmpe: Only disable the regulators if they are enabled (git-fixes). - mfd: tqmx86: Correct board names for TQMxE39x (git-fixes). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes). - misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes). - misc: enclosure: Fix doc for enclosure_find() (git-fixes). - misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes). - misc: fastrpc: reject new invocations during device removal (git-fixes). - misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes). - misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes). - misc: pci_endpoint_test: Re-init completion for every test (git-fixes). - mkinitrd: Replace dependency with dracut (bsc#1202353). - mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253). - mlx5: fix possible ptp queue fifo use-after-free (jsc#PED-1549). - mlx5: fix skb leak while fifo resync and push (jsc#PED-1549). - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes). - mlxsw: minimal: Fix deadlock in ports creation (git-fixes). - mlxsw: spectrum: Allow driver to load with old firmware versions (git-fixes). - mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768). - mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410). - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769). - mm: Move mm_cachep initialization to mm_init() (bsc#1212448). - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262). - mm: memcg: fix swapcached stat accounting (bsc#1209804). - mm: mmap: remove newline at the end of the trace (git-fixes). - mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034). - mm: take a page reference when removing device exclusive entries (bsc#1211025). - mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410). - mmc: atmel-mci: fix race between stop command and start of next command (git-fixes). - mmc: bcm2835: fix deferred probing (git-fixes). - mmc: block: Remove error check of hw_reset on reset (git-fixes). - mmc: block: ensure error propagation for non-blk (git-fixes). - mmc: jz4740: Work around bug on JZ4760(B) (git-fixes). - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes). - mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes). - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes). - mmc: mmci: stm32: fix max busy timeout calculation (git-fixes). - mmc: mtk-sd: fix deferred probing (git-fixes). - mmc: mvsdio: fix deferred probing (git-fixes). - mmc: omap: fix deferred probing (git-fixes). - mmc: omap_hsmmc: fix deferred probing (git-fixes). - mmc: owl: fix deferred probing (git-fixes). - mmc: sdhci-acpi: fix deferred probing (git-fixes). - mmc: sdhci-esdhc-imx: make 'no-mmc-hs400' works (git-fixes). - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes). - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes). - mmc: sdhci-spear: fix deferred probing (git-fixes). - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes). - mmc: sdhci_am654: lower power-on failed message severity (git-fixes). - mmc: sdio: fix possible resource leaks in some error paths (git-fixes). - mmc: sh_mmcif: fix deferred probing (git-fixes). - mmc: sunxi: fix deferred probing (git-fixes). - mmc: usdhi60rol0: fix deferred probing (git-fixes). - mmc: vub300: fix invalid response handling (git-fixes). - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - mt76: Make use of the helper macro kthread_run() (bsc#1209980). - mt76: Print error message when reading EEPROM from mtd failed (bsc#1209980). - mt76: add 6GHz support (bsc#1209980). - mt76: add MT_RXQ_MAIN_WA for mt7916 (bsc#1209980). - mt76: add support for setting mcast rate (bsc#1209980). - mt76: allow drivers to drop rx packets early (bsc#1209980). - mt76: clear sta powersave flag after notifying driver (bsc#1209980). - mt76: connac: add 6 GHz support for wtbl and starec configuration (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss (bsc#1209980). - mt76: connac: add support for limiting to maximum regulatory Tx power (bsc#1209980). - mt76: connac: add support for passing the cipher field in bss_info (bsc#1209980). - mt76: connac: adjust wlan_idx size from u8 to u16 (bsc#1209980). - mt76: connac: align MCU_EXT definitions with 7915 driver (bsc#1209980). - mt76: connac: enable 6GHz band for hw scan (bsc#1209980). - mt76: connac: enable hw amsdu @ 6GHz (bsc#1209980). - mt76: connac: extend mcu_get_nic_capability (bsc#1209980). - mt76: connac: fix a theoretical NULL pointer dereference in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: fix last_chan configuration in mt76_connac_mcu_rate_txpower_band (bsc#1209980). - mt76: connac: fix unresolved symbols when CONFIG_PM is unset (bsc#1209980). - mt76: connac: introduce MCU_CE_CMD macro (bsc#1209980). - mt76: connac: introduce MCU_EXT macros (bsc#1209980). - mt76: connac: introduce MCU_UNI_CMD macro (bsc#1209980). - mt76: connac: introduce is_connac_v1 utility routine (bsc#1209980). - mt76: connac: make read-only array ba_range static const (bsc#1209980). - mt76: connac: move mcu reg access utility routines in mt76_connac_lib module (bsc#1209980). - mt76: connac: move mt76_connac_chan_bw in common code (bsc#1209980). - mt76: connac: move mt76_connac_lmac_mapping in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_add_key in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_basic_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_ext_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_omac_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_gen_dl_mode in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_get_cipher in common code (bsc#1209980). - mt76: connac: move mt76_connac_mcu_rdd_cmd in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_restart in common module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_set_pm in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_wtbl_update_hdr_trans in connac module (bsc#1209980). - mt76: connac: rely on MCU_CMD macro (bsc#1209980). - mt76: connac: rely on le16_add_cpu in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - mt76: connac: remove MCU_FW_PREFIX bit (bsc#1209980). - mt76: connac: remove PHY_MODE_AX_6G configuration in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2} (bsc#1209980). - mt76: connac: set 6G phymode in single-sku support (bsc#1209980). - mt76: debugfs: fix queue reporting for mt76-usb (bsc#1209980). - mt76: debugfs: improve queue node readability (bsc#1209980). - mt76: disable BH around napi_schedule() calls (bsc#1209980). - mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs (bsc#1209980). - mt76: do not always copy ethhdr in reverse_frag0_hdr_trans (bsc#1209980). - mt76: do not reset MIB counters in get_stats callback (bsc#1209980). - mt76: eeprom: tolerate corrected bit-flips (bsc#1209980). - mt76: fill boottime_ns in Rx path (bsc#1209980). - mt76: fix antenna config missing in 6G cap (bsc#1209980). - mt76: fix boolreturn.cocci warnings (bsc#1209980). - mt76: fix dfs state issue with 160 MHz channels (bsc#1209980). - mt76: fix endianness errors in reverse_frag0_hdr_trans (bsc#1209980). - mt76: fix invalid rssi report (bsc#1209980). - mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi (bsc#1209980). - mt76: fix monitor rx FCS error in DFS channel (bsc#1209980). - mt76: fix possible OOB issue in mt76_calculate_default_rate (bsc#1209980). - mt76: fix possible pktid leak (bsc#1209980). - mt76: fix the wiphy's available antennas to the correct value (bsc#1209980). - mt76: fix timestamp check in tx_status (bsc#1209980). - mt76: fix tx status related use-after-free race on station removal (bsc#1209980). - mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes). - mt76: fix wrong HE data rate in sniffer tool (bsc#1209980). - mt76: improve signal strength reporting (bsc#1209980). - mt76: introduce packet_id idr (bsc#1209980). - mt76: make mt76_sar_capa static (bsc#1209980). - mt76: move mt76_ethtool_worker_info in mt76 module (bsc#1209980). - mt76: move mt76_sta_stats in mt76.h (bsc#1209980). - mt76: move sar utilities to mt76-core module (bsc#1209980). - mt76: move sar_capa configuration in common code (bsc#1209980). - mt76: move spin_lock_bh to spin_lock in tasklet (bsc#1209980). - mt76: mt7603: improve reliability of tx powersave filtering (bsc#1209980). - mt76: mt7603: introduce SAR support (bsc#1209980). - mt76: mt7615: add support for LG LGSBWAC02 (MT7663BUN) (bsc#1209980). - mt76: mt7615: apply cached RF data for DBDC (bsc#1209980). - mt76: mt7615: clear mcu error interrupt status on mt7663 (bsc#1209980). - mt76: mt7615: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7615: fix compiler warning on frame size (bsc#1209980). - mt76: mt7615: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7615: fix throughput regression on DFS channels (bsc#1209980). - mt76: mt7615: fix unused tx antenna mask in testmode (bsc#1209980). - mt76: mt7615: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7615: honor ret from mt7615_mcu_restart in mt7663u_mcu_init (bsc#1209980). - mt76: mt7615: in debugfs queue stats, skip wmm index 3 on mt7663 (bsc#1209980). - mt76: mt7615: introduce SAR support (bsc#1209980). - mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module (bsc#1209980). - mt76: mt7615: remove dead code in get_omac_idx (bsc#1209980). - mt76: mt7615: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7615e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7663: disable 4addr capability (bsc#1209980). - mt76: mt7663s: flush runtime-pm queue after waking up the device (bsc#1209980). - mt76: mt7663s: rely on mcu reg access utility (bsc#1209980). - mt76: mt7663u: introduce mt7663u_mcu_power_on routine (bsc#1209980). - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (bsc#1209980). - mt76: mt76x02: improve tx hang detection (bsc#1209980). - mt76: mt76x02: introduce SAR support (bsc#1209980). - mt76: mt76x02: use mt76_phy_dfs_state to determine radar detector state (bsc#1209980). - mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset (bsc#1209980). - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() (bsc#1209980). - mt76: mt7915: Fix channel state update error issue (bsc#1209980). - mt76: mt7915: add 6 GHz support (bsc#1209980). - mt76: mt7915: add HE-LTF into fixed rate command (bsc#1209980). - mt76: mt7915: add LED support (bsc#1209980). - mt76: mt7915: add WA firmware log support (bsc#1209980). - mt76: mt7915: add control knobs for thermal throttling (bsc#1209980). - mt76: mt7915: add debugfs knobs for MCU utilization (bsc#1209980). - mt76: mt7915: add default calibrated data support (bsc#1209980). - mt76: mt7915: add device id for mt7916 (bsc#1209980). - mt76: mt7915: add ethtool stats support (bsc#1209980). - mt76: mt7915: add firmware support for mt7916 (bsc#1209980). - mt76: mt7915: add mib counters to ethtool stats (bsc#1209980). - mt76: mt7915: add missing DATA4_TB_SPTL_REUSE1 to mt7915_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7915: add more MIB registers (bsc#1209980). - mt76: mt7915: add mt7915_mmio_probe() as a common probing function (bsc#1209980). - mt76: mt7915: add mt7916 calibrated data support (bsc#1209980). - mt76: mt7915: add mu-mimo and ofdma debugfs knobs (bsc#1209980). - mt76: mt7915: add some per-station tx stats to ethtool (bsc#1209980). - mt76: mt7915: add support for MT7986 (bsc#1209980). - mt76: mt7915: add support for passing chip/firmware debug data to user space (bsc#1209980). - mt76: mt7915: add twt_stats knob in debugfs (bsc#1209980). - mt76: mt7915: add tx mu/su counters to mib (bsc#1209980). - mt76: mt7915: add tx stats gathered from tx-status callbacks (bsc#1209980). - mt76: mt7915: add txfree event v3 (bsc#1209980). - mt76: mt7915: add txpower init for 6GHz (bsc#1209980). - mt76: mt7915: allow beaconing on all chains (bsc#1209980). - mt76: mt7915: change max rx len limit of hw modules (bsc#1209980). - mt76: mt7915: check band idx for bcc event (bsc#1209980). - mt76: mt7915: check for devm_pinctrl_get() failure (bsc#1209980). - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set (bsc#1209980). - mt76: mt7915: enable HE UL MU-MIMO (bsc#1209980). - mt76: mt7915: enable configured beacon tx rate (bsc#1209980). - mt76: mt7915: enable radar background detection (bsc#1209980). - mt76: mt7915: enable radar trigger on rdd2 (bsc#1209980). - mt76: mt7915: enable twt responder capability (bsc#1209980). - mt76: mt7915: enlarge wcid size to 544 (bsc#1209980). - mt76: mt7915: fix DBDC default band selection on MT7915D (bsc#1209980). - mt76: mt7915: fix DFS no radar detection event (bsc#1209980). - mt76: mt7915: fix SMPS operation fail (bsc#1209980). - mt76: mt7915: fix WMM index on DBDC cards (bsc#1209980). - mt76: mt7915: fix beamforming mib stats (bsc#1209980). - mt76: mt7915: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7915: fix eeprom fields of txpower init values (bsc#1209980). - mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_debugfs_rx_fw_monitor (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_mac_tx_free() (bsc#1209980). - mt76: mt7915: fix he_mcs capabilities for 160mhz (bsc#1209980). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs() (bsc#1209980). - mt76: mt7915: fix missing HE phy cap (bsc#1209980). - mt76: mt7915: fix phy cap in mt7915_set_stream_he_txbf_caps() (bsc#1209980). - mt76: mt7915: fix polling firmware-own status (git-fixes). - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (git-fixes). - mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta (bsc#1209980). - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup (bsc#1209980). - mt76: mt7915: fix potential NPE in TXS processing (bsc#1209980). - mt76: mt7915: fix potential memory leak of fw monitor packets (bsc#1209980). - mt76: mt7915: fix return condition in mt7915_tm_reg_backup_restore() (bsc#1209980). - mt76: mt7915: fix the muru tlv issue (bsc#1209980). - mt76: mt7915: fix the nss setting in bitrates (bsc#1209980). - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev (bsc#1209980). - mt76: mt7915: fix txbf starec TLV issues (bsc#1209980). - mt76: mt7915: fix typos in comments (bsc#1209980). - mt76: mt7915: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7915: get rid of mt7915_mcu_set_fixed_rate routine (bsc#1209980). - mt76: mt7915: honor all possible error conditions in mt7915_mcu_init() (bsc#1209980). - mt76: mt7915: improve code readability for xmit-queue handler (bsc#1209980). - mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht (bsc#1209980). - mt76: mt7915: improve starec readability of txbf (bsc#1209980). - mt76: mt7915: improve wmm index allocation (bsc#1209980). - mt76: mt7915: initialize smps mode in mt7915_mcu_sta_rate_ctrl_tlv() (bsc#1209980). - mt76: mt7915: introduce SAR support (bsc#1209980). - mt76: mt7915: introduce __mt7915_get_tsf routine (bsc#1209980). - mt76: mt7915: introduce band_idx in mt7915_phy (bsc#1209980). - mt76: mt7915: introduce bss coloring support (bsc#1209980). - mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy (bsc#1209980). - mt76: mt7915: introduce mt76_vif in mt7915_vif (bsc#1209980). - mt76: mt7915: introduce mt7915_mac_add_twt_setup routine (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_beacon_check_caps() (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command (bsc#1209980). - mt76: mt7915: introduce mt7915_set_radar_background routine (bsc#1209980). - mt76: mt7915: introduce rdd_monitor debugfs node (bsc#1209980). - mt76: mt7915: move pci specific code back to pci.c (bsc#1209980). - mt76: mt7915: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7915: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7915: refine register definition (bsc#1209980). - mt76: mt7915: rely on mt76_connac definitions (bsc#1209980). - mt76: mt7915: rely on mt76_connac_get_phy utilities (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_add_tlv routine (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_sta_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_wtbl_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_init_download (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_patch_sem_ctrl/mt76_connac_mcu_start_patch (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_set_rts_thresh (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_basic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_uapsd (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_start_firmware (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_generic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_hdr_trans_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ht_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_smps_tlv (bsc#1209980). - mt76: mt7915: remove dead code in debugfs code (bsc#1209980). - mt76: mt7915: remove duplicated defs in mcu.h (bsc#1209980). - mt76: mt7915: remove mt7915_mcu_add_he() (bsc#1209980). - mt76: mt7915: rename debugfs tx-queues (bsc#1209980). - mt76: mt7915: report radar pattern if detected by rdd2 (bsc#1209980). - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate (bsc#1209980). - mt76: mt7915: rework .set_bitrate_mask() to support more options (bsc#1209980). - mt76: mt7915: rework debugfs fixed-rate knob (bsc#1209980). - mt76: mt7915: rework debugfs queue info (bsc#1209980). - mt76: mt7915: rework dma.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework eeprom.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework mt7915_mcu_sta_muru_tlv() (bsc#1209980). - mt76: mt7915: rework starec TLV tags (bsc#1209980). - mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex (bsc#1209980). - mt76: mt7915: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7915: set VTA bit in tx descriptor (bsc#1209980). - mt76: mt7915: set band1 TGID field in tx descriptor (bsc#1209980). - mt76: mt7915: set bssinfo/starec command when adding interface (bsc#1209980). - mt76: mt7915: set muru platform type (bsc#1209980). - mt76: mt7915: simplify conditional (bsc#1209980). - mt76: mt7915: switch proper tx arbiter mode in testmode (bsc#1209980). - mt76: mt7915: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7915: update mac timing settings (bsc#1209980). - mt76: mt7915: update max_mpdu_size in mt7915_mcu_sta_amsdu_tlv() (bsc#1209980). - mt76: mt7915: update mt7915_chan_mib_offs for mt7916 (bsc#1209980). - mt76: mt7915: update rx rate reporting for mt7916 (bsc#1209980). - mt76: mt7915: use min_t() to make code cleaner (bsc#1209980). - mt76: mt7915e: Add a hwmon attribute to get the actual throttle state (bsc#1209980). - mt76: mt7915e: Enable thermal management by default (bsc#1209980). - mt76: mt7915e: Fix degraded performance after temporary overheat (bsc#1209980). - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (git-fixes). - mt76: mt7921: add 6GHz support (bsc#1209980). - mt76: mt7921: add MT7921_COMMON module (bsc#1209980). - mt76: mt7921: add MU EDCA cmd support (bsc#1209980). - mt76: mt7921: add delay config for sched scan (bsc#1209980). - mt76: mt7921: add mt7921u driver (bsc#1209980). - mt76: mt7921: add per-vif counters in ethtool (bsc#1209980). - mt76: mt7921: add some more MIB counters (bsc#1209980). - mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb (bsc#1209980). - mt76: mt7921: add support for PCIe ID 0x0608/0x0616 (bsc#1209980). - mt76: mt7921: add support for tx status reporting (bsc#1209980). - mt76: mt7921: clear pm->suspended in mt7921_mac_reset_work (bsc#1209980). - mt76: mt7921: disable 4addr capability (bsc#1209980). - mt76: mt7921: disable runtime pm for usb (bsc#1209980). - mt76: mt7921: do not always disable fw runtime-pm (bsc#1209980). - mt76: mt7921: do not enable beacon filter when IEEE80211_CONF_CHANGE_MONITOR is set (bsc#1209980). - mt76: mt7921: do not update pm states in case of error (git-fixes). - mt76: mt7921: fix MT7921E reset failure (bsc#1209980). - mt76: mt7921: fix Wformat build warning (bsc#1209980). - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7921: fix boolreturn.cocci warning (bsc#1209980). - mt76: mt7921: fix build regression (bsc#1209980). - mt76: mt7921: fix endianness issues in mt7921_mcu_set_tx() (bsc#1209980). - mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap (bsc#1209980). - mt76: mt7921: fix ht mcs in mt7921_mac_add_txs_skb() (bsc#1209980). - mt76: mt7921: fix injected MPDU transmission to not use HW A-MSDU (bsc#1209980). - mt76: mt7921: fix kernel crash at mt7921_pci_remove (git-fixes). - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (git-fixes). - mt76: mt7921: fix mt7921s Kconfig (bsc#1209980). - mt76: mt7921: fix network buffer leak by txs missing (bsc#1209980). - mt76: mt7921: fix possible NULL pointer dereference in mt7921_mac_write_txwi (bsc#1209980). - mt76: mt7921: fix up the monitor mode (bsc#1209980). - mt76: mt7921: fix xmit-queue dump for usb and sdio (bsc#1209980). - mt76: mt7921: forbid the doze mode when coredump is in progress (bsc#1209980). - mt76: mt7921: get rid of monitor_vif (bsc#1209980). - mt76: mt7921: get rid of mt7921_mcu_get_eeprom (bsc#1209980). - mt76: mt7921: get rid of mt7921_wait_for_mcu_init declaration (bsc#1209980). - mt76: mt7921: honor mt76_connac_mcu_set_rate_txpower return value in mt7921_config (bsc#1209980). - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter (bsc#1209980). - mt76: mt7921: introduce 160 MHz channel bandwidth support (bsc#1209980). - mt76: mt7921: introduce mt7921s support (bsc#1209980). - mt76: mt7921: introduce stats reporting through ethtool (bsc#1209980). - mt76: mt7921: make all event parser reusable between mt7921s and mt7921e (bsc#1209980). - mt76: mt7921: make mt7921_init_tx_queues static (bsc#1209980). - mt76: mt7921: move mt76_connac_mcu_set_hif_suspend to bus-related files (bsc#1209980). - mt76: mt7921: move mt7921_init_hw in a dedicated work (bsc#1209980). - mt76: mt7921: move mt7921_queue_rx_skb to mac.c (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_complete_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_prepare_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_status_data in mac common code (bsc#1209980). - mt76: mt7921: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7921: reduce log severity levels for informative messages (bsc#1209980). - mt76: mt7921: refactor dma.c to be pcie specific (bsc#1209980). - mt76: mt7921: refactor init.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mac.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mcu.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mt7921_mcu_send_message (bsc#1209980). - mt76: mt7921: rely on mcu_get_nic_capability (bsc#1209980). - mt76: mt7921: remove dead definitions (bsc#1209980). - mt76: mt7921: remove duplicated code in mt7921_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7921: remove mcu rate reporting code (bsc#1209980). - mt76: mt7921: remove mt7921_sta_stats (bsc#1209980). - mt76: mt7921: report tx rate directly from tx status (bsc#1209980). - mt76: mt7921: robustify hardware initialization flow (bsc#1209980). - mt76: mt7921: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7921: set EDCA parameters with the MCU CE command (bsc#1209980). - mt76: mt7921: start reworking tx rate reporting (bsc#1209980). - mt76: mt7921: toggle runtime-pm adding a monitor vif (bsc#1209980). - mt76: mt7921: update mib counters dumping phy stats (bsc#1209980). - mt76: mt7921: update mt7921_skb_add_usb_sdio_hdr to support usb (bsc#1209980). - mt76: mt7921: use correct iftype data on 6GHz cap init (bsc#1209980). - mt76: mt7921: use mt76_hw instead of open coding it (bsc#1209980). - mt76: mt7921: use physical addr to unify register access (bsc#1209980). - mt76: mt7921e: fix possible probe failure after reboot (bsc#1198835). - mt76: mt7921e: make dev->fw_assert usage consistent (bsc#1209980). - mt76: mt7921e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7921s: add reset support (bsc#1209980). - mt76: mt7921s: clear MT76_STATE_MCU_RUNNING immediately after reset (bsc#1209980). - mt76: mt7921s: fix a possible memory leak in mt7921_load_patch (bsc#1209980). - mt76: mt7921s: fix bus hang with wrong privilege (bsc#1209980). - mt76: mt7921s: fix cmd timeout in throughput test (bsc#1209980). - mt76: mt7921s: fix firmware download random fail (bsc#1209980). - mt76: mt7921s: fix missing fc type/sub-type for 802.11 pkts (bsc#1209980). - mt76: mt7921s: fix mt7921s_mcu_[fw|drv]_pmctrl (bsc#1209980). - mt76: mt7921s: fix possible kernel crash due to invalid Rx count (bsc#1209980). - mt76: mt7921s: fix possible sdio deadlock in command fail (bsc#1209980). - mt76: mt7921s: fix suspend error with enlarging mcu timeout value (bsc#1209980). - mt76: mt7921s: fix the device cannot sleep deeply in suspend (bsc#1209980). - mt76: mt7921s: make pm->suspended usage consistent (bsc#1209980). - mt76: mt7921s: run sleep mode by default (bsc#1209980). - mt76: mt7921s: update mt7921s_wfsys_reset sequence (bsc#1209980). - mt76: only access ieee80211_hdr after mt76_insert_ccmp_hdr (bsc#1209980). - mt76: only set rx radiotap flag from within decoder functions (bsc#1209980). - mt76: redefine mt76_for_each_q_rx to adapt mt7986 changes (bsc#1209980). - mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature (bsc#1209980). - mt76: remove mt76_wcid pointer from mt76_tx_status_check signature (bsc#1209980). - mt76: remove variable set but not used (bsc#1209980). - mt76: reverse the first fragmented frame to 802.11 (bsc#1209980). - mt76: schedule status timeout at dma completion (bsc#1209980). - mt76: sdio: disable interrupt in mt76s_sdio_irq (bsc#1209980). - mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines (bsc#1209980). - mt76: sdio: extend sdio module to support CONNAC2 (bsc#1209980). - mt76: sdio: honor the largest Tx buffer the hardware can support (bsc#1209980). - mt76: sdio: introduce parse_irq callback (bsc#1209980). - mt76: sdio: lock sdio when it is needed (bsc#1209980). - mt76: sdio: move common code in mt76_sdio module (bsc#1209980). - mt76: set wlan_idx_hi on mt7916 (bsc#1209980). - mt76: split single ldpc cap bit into bits (bsc#1209980). - mt76: substitute sk_buff_head status_list with spinlock_t status_lock (bsc#1209980). - mt76: support reading EEPROM data embedded in fdt (bsc#1209980). - mt76: switch from 'pci_' to 'dma_' API (bsc#1209980). - mt76: testmode: add support to set MAC (bsc#1209980). - mt76: usb: add req_type to ___mt76u_rr signature (bsc#1209980). - mt76: usb: add req_type to ___mt76u_wr signature (bsc#1209980). - mt76: usb: introduce __mt76u_init utility routine (bsc#1209980). - mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD (bsc#1209980). - mt76: use a separate CCMP PN receive counter for management frames (bsc#1209980). - mt76: use le32/16_get_bits() whenever possible (bsc#1209980). - mt76x02: improve mac error check/reset reliability (bsc#1209980). - mtd: core: fix error path for nvmem provider (git-fixes). - mtd: core: fix nvmem error reporting (git-fixes). - mtd: core: provide unique name for nvmem device, take two (git-fixes). - mtd: dataflash: remove duplicate SPI ID table (git-fixes). - mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes). - mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes). - mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes). - mtd: rawnand: marvell: ensure timing values are written (git-fixes). - mtd: rawnand: meson: fix bitmask for length in command word (git-fixes). - mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes). - mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes). - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes). - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes). - mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes). - mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes). - mtd: spi-nor: Fix a trivial typo (git-fixes). - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes). - mtd: spi-nor: core: fix implicit declaration warning (git-fixes). - mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes). - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes). - mtdblock: tolerate corrected bit-flips (git-fixes). - nbd: Fix hung on disconnect request if socket is closed before (git-fixes). - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes). - nbd: Fix hungtask when nbd_config_put (git-fixes). - nbd: add missing definition of pr_fmt (git-fixes). - nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes). - nbd: fix io hung while disconnecting device (git-fixes). - nbd: fix race between nbd_alloc_config() and module removal (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#PED-1549). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253). - net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253). - net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253). - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253). - net/mlx5: Avoid recovery in probe flows (jsc#PED-1549 bsc#1211794). - net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#PED-1549). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253). - net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253). - net/mlx5: Collect command failures data only for known commands (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#PED-1549). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253). - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#PED-1549). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253). - net/mlx5: Devcom, serialize devcom registration (jsc#PED-1549). - net/mlx5: Disable eswitch before waiting for VF pages (jsc#PED-1549). - net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253). - net/mlx5: Do not use already freed action pointer (jsc#SLE-19253). - net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#PED-1549). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#PED-1549). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#PED-1549). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#PED-1549). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#PED-1549). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5: E-switch, Fix switchdev mode after devlink reload (jsc#PED-1549). - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules (jsc#PED-1549). - net/mlx5: ECPF, wait for VF pages only after disabling host PFs (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253). - net/mlx5: Expose SF firmware pages counter (jsc#PED-1549). - net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253). - net/mlx5: Fix RoCE setting at HCA level (jsc#PED-1549). - net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253). - net/mlx5: Fix command stats access after free (jsc#PED-1549). - net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253). - net/mlx5: Fix error message when failing to allocate device memory (jsc#PED-1549). - net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253). - net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253). - net/mlx5: Fix io_eq_size and event_eq_size params validation (jsc#PED-1549). - net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253). - net/mlx5: Fix ptp max frequency adjustment range (jsc#PED-1549). - net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253). - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#SLE-19253). - net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#PED-1549). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253). - net/mlx5: Handle pairing of E-switch via uplink un/load APIs (jsc#PED-1549). - net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253). - net/mlx5: Lag, fix failure to cancel delayed bond work (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#PED-1549). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253). - net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253). - net/mlx5: SF, Drain health before removing device (jsc#PED-1549). - net/mlx5: SF, Drain health before removing device (jsc#SLE-19253). - net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253). - net/mlx5: Serialize module cleanup with reload and remove (jsc#PED-1549). - net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253). - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver (jsc#PED-1549). - net/mlx5: Store page counters in a single array (jsc#PED-1549). - net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253). - net/mlx5: add IFC bits for bypassing port select flow table (git-fixes) - net/mlx5: check attr pointer validity before dereferencing it (jsc#PED-1549). - net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253). - net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253). - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253). - net/mlx5: fs, fail conflicting actions (jsc#SLE-19253). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#PED-1549). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253). - net/mlx5: fw_tracer, Fix event handling (jsc#PED-1549). - net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#PED-1549). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#PED-1549). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#PED-1549). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#PED-1549). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253). - net/mlx5e: CT: Fix ct debugfs folder name (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253). - net/mlx5e: Do not cache tunnel offloads capability (jsc#PED-1549). - net/mlx5e: Do not clone flow post action attributes second time (jsc#PED-1549). - net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253). - net/mlx5e: Do not support encap rules with gbp option (jsc#PED-1549). - net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253). - net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253). - net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253). - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253). - net/mlx5e: Fix RX reporter for XSK RQs (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253). - net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253). - net/mlx5e: Fix cleanup null-ptr deref on encap lock (jsc#PED-1549). - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (jsc#PED-1549). - net/mlx5e: Fix deadlock in tc route query code (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#PED-1549). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253). - net/mlx5e: Fix macsec ASO context alignment (jsc#PED-1549). - net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (jsc#PED-1549). - net/mlx5e: Fix macsec ssci attribute handling in offload path (jsc#PED-1549). - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253). - net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253). - net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253). - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253). - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (jsc#PED-1549). - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253). - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253). - net/mlx5e: Initialize link speed to zero (jsc#PED-1549). - net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253). - net/mlx5e: Nullify table pointer when failing to create (jsc#PED-1549). - net/mlx5e: Overcome slow response for first macsec ASO WQE (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5e: Remove redundant xsk pointer check in mlx5e_mpwrq_validate_xsk (jsc#PED-1549). - net/mlx5e: Set decap action based on attr for sample (jsc#PED-1549). - net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253). - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253). - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253). - net/mlx5e: Use correct encap attribute during invalidation (jsc#PED-1549). - net/mlx5e: Verify dev is present for fix features ndo (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#PED-1549). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253). - net/net_failover: fix txq exceeding warning (git-fixes). - net/rose: Fix to not accept on connected socket (git-fixes). - net/sched: fix initialization order when updating chain 0 head (git-fixes). - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes). - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes). - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842). - net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes). - net/x25: Fix to not accept on connected socket (git-fixes). - net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes). - net: add missing include in include/net/gro.h (git-fixes). - net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes). - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes). - net: devlink: Fix missing mutex_unlock() call (git-fixes). - net: ena: Account for the number of processed bytes in XDP (git-fixes). - net: ena: Do not register memory info on XDP exchange (git-fixes). - net: ena: Fix rx_copybreak value update (git-fixes). - net: ena: Fix toeplitz initial hash value (git-fixes). - net: ena: Set default value for RX interrupt moderation (git-fixes). - net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes). - net: ena: Use bitmask to indicate packet redirection (git-fixes). - net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes). - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes). - net: hns3: fix reset delay time to avoid configuration timeout (git-fixes). - net: hns3: fix sending pfc frames after reset issue (git-fixes). - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes). - net: linkwatch: be more careful about dev->linkwatch_dev_tracker (git-fixes). - net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982). - net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022). - net: mana: Add support for jumbo frame (bsc#1210551). - net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153). - net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551). - net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022). - net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022). - net: mana: Enable RX path to handle various MTU sizes (bsc#1210551). - net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875). - net: mana: Fix accessing freed irq affinity_hint (bsc#1208153). - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes). - net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022). - net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022). - net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022). - net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022). - net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551). - net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551). - net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022). - net: mana: Use napi_build_skb in RX path (bsc#1210551). - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes). - net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes). - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#PED-1549). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#SLE-19253). - net: natsemi: fix hw address initialization for jazz and xtensa (git-fixes). - net: of: fix stub of_net helpers for CONFIG_NET=n (git-fixes). - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes). - net: phy: Ensure state transitions are processed from phy_stop() (git-fixes). - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes). - net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes). - net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes). - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes). - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes). - net: phy: mxl-gpy: add MDINT workaround (git-fixes). - net: phy: nxp-c45-tja11xx: add remove callback (git-fixes). - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes). - net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes). - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes). - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes). - net: qrtr: correct types of trace event parameters (git-fixes). - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes). - net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes). - net: tun: avoid disabling NAPI twice (git-fixes). - net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes). - net: tun: stop NAPI when detaching queues (git-fixes). - net: tun: unlink NAPI from device on destruction (git-fixes). - net: usb: asix: remove redundant assignment to variable reg (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes). - net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes). - net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - net: usb: use eth_hw_addr_set() (git-fixes). - net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes). - netrom: Fix use-after-free caused by accept on already connected socket (git-fixes). - netrom: Fix use-after-free of a listening socket (git-fixes). - nfc: change order inside nfc_se_io error path (git-fixes). - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes). - nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes). - nfc: pn533: initialize struct pn533_out_arg properly (git-fixes). - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes). - nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes). - nfp: flower-ct: fix error return code in nfp_fl_ct_add_offload() (git-fixes). - nfp: flower: fix ingress police using matchall filter (git-fixes). - nfp: only report pause frame configuration for physical device (git-fixes). - nfs4: Fix kmemleak when allocate slot failed (git-fixes). - nfs4trace: fix state manager flag printing (git-fixes). - nfs: Always initialise fattr->label in nfs_fattr_alloc() (git-fixes). - nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes). - nfs: Cleanup unused rpc_clnt variable (git-fixes). - nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes). - nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes). - nfs: Fix an Oops in nfs_d_automount() (git-fixes). - nfs: Further optimisations for 'ls -l' (git-fixes). - nfs: Pass i_size to fscache_unuse_cookie() when a file is released (git-fixes). - nfs: fix disabling of swap (git-fixes). - nfs: nfs4clinet: check the return value of kstrdup() (git-fixes). - nfs: nfsiod should not block forever in mempool_alloc() (git-fixes). - nfsd: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (git-fixes). - nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes). - nfsd: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (git-fixes). - nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes). - nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes). - nfsd: Fix a memory leak in an error handling path (git-fixes). - nfsd: Fix handling of oversized NFSv4 COMPOUND requests (git-fixes). - nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes). - nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - nfsd: Protect against filesystem freezing (git-fixes). - nfsd: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - nfsd: call op_release, even when op_func returns an error (git-fixes). - nfsd: callback request does not use correct credential for AUTH_SYS (git-fixes). - nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes). - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes). - nfsd: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes). - nfsd: fix problems with cleanup on errors in nfsd4_copy (git-fixes). - nfsd: fix race to check ls_layouts (git-fixes). - nfsd: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes). - nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes). - nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes). - nfsd: shut down the NFSv4 state objects before the filecache (git-fixes). - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes). - nfsd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes). - nfsv3: handle out-of-order write replies (bsc#1205544). - nfsv4 expose nfs_parse_server_name function (git-fixes). - nfsv4 handle port presence in fs_location server string (git-fixes). - nfsv4 only print the label when its queried (git-fixes). - nfsv4 remove zero number of fs_locations entries error check (git-fixes). - nfsv4 store server support for fs_location attribute (git-fixes). - nfsv4.1 provide mount option to toggle trunking discovery (git-fixes). - nfsv4.1 query for fs_location attr on a new file system (git-fixes). - nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes). - nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - nfsv4.2: Fix initialisation of struct nfs4_label (git-fixes). - nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes). - nfsv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - nfsv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes). - nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes). - nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes). - nfsv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes). - nfsv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - nfsv4: Fix a potential state reclaim deadlock (git-fixes). - nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - nfsv4: Fix hangs when recovering open state after a server reboot (git-fixes). - nfsv4: Protect the state recovery thread against direct reclaim (git-fixes). - nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes). - nfsv4: keep state manager thread active if swap is enabled (git-fixes). - nilfs2: do not write dirty data after degenerating to read-only (git-fixes). - nilfs2: fix buffer corruption due to concurrent device reads (git-fixes). - nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes). - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes). - nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes). - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes). - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes). - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes). - nilfs2: fix sysfs interface lifetime (git-fixes). - nilfs2: fix underflow in second superblock position calculations (git-fixes). - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes). - nilfs2: initialize unused bytes in segment summary blocks (git-fixes). - nouveau: fix client work fence deletion race (git-fixes). - ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes). - ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes). - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes). - ntb: ntb_tool: Add check for devm_kcalloc (git-fixes). - ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes). - null_blk: fix ida error handling in null_add_dev() (git-fixes). - nvdimm: disable namespace on error (bsc#1166486). - nvme initialize core quirks before calling nvme_init_subsystem (git-fixes). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-core: fix dev_pm_qos memleak (git-fixes). - nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes). - nvme-core: fix memory leak in dhchap_secret_store (git-fixes). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes). - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (git-fixes). - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes). - nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes). - nvme-multipath: fix hang when disk goes live over reconnect (git-fixes). - nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes). - nvme-multipath: support io stats on the mpath device (bsc#1210565). - nvme-pci: add bogus ID quirk for ADATA SX6000PNP (bsc#1207827). - nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes). - nvme-pci: add quirks for Samsung X5 SSDs (git-fixes). - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes). - nvme-pci: clear the prp2 field when not used (git-fixes). - nvme-pci: disable write zeroes on various Kingston SSD (git-fixes). - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes). - nvme-pci: fix doorbell buffer value endianness (git-fixes). - nvme-pci: fix mempool alloc size (git-fixes). - nvme-pci: fix page size checks (git-fixes). - nvme-pci: fix timeout request state check (git-fixes). - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes). - nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes). - nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: always fail a request when sending it failed (bsc#1208902). - nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes). - nvme-tcp: fix bogus request completion when failing to send AER (git-fixes). - nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes). - nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes). - nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes). - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes). - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes). - nvme: add device name to warning in uuid_show() (git-fixes). - nvme: also return I/O command effects from nvme_command_effects (git-fixes). - nvme: bring back auto-removal of deleted namespaces during sequential scan (git-fixes). - nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes). - nvme: check for duplicate identifiers earlier (git-fixes). - nvme: cleanup __nvme_check_ids (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes). - nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes). - nvme: fix async event trace event (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix handling single range discard request (git-fixes). - nvme: fix interpretation of DMRSL (git-fixes). - nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes). - nvme: fix passthrough csi check (git-fixes). - nvme: fix per-namespace chardev deletion (git-fixes). - nvme: fix the CRIMS and CRWMS definitions to match the spec (git-fixes). - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes). - nvme: fix the name of Zone Append for verbose logging (git-fixes). - nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes). - nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes). - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes). - nvme: introduce nvme_start_request (bsc#1210565). - nvme: move nvme_multi_css into nvme.h (git-fixes). - nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes). - nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes). - nvme: return err on nvme_init_non_mdts_limits fail (git-fixes). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: set dma alignment to dword (git-fixes). - nvme: set non-mdts limits in nvme_scan_work (git-fixes). - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (git-fixes). - nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes). - nvmet-tcp: add bounds check on Transfer Tag (git-fixes). - nvmet-tcp: fix incomplete data digest send (git-fixes). - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes). - nvmet-tcp: fix regression in data_digest calculation (git-fixes). - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes). - nvmet: add helpers to set the result field for connect commands (git-fixes). - nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes). - nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes). - nvmet: fix I/O Command Set specific Identify Controller (git-fixes). - nvmet: fix Identify Active Namespace ID list handling (git-fixes). - nvmet: fix Identify Controller handling (git-fixes). - nvmet: fix Identify Namespace handling (git-fixes). - nvmet: fix a memory leak (git-fixes). - nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes). - nvmet: fix a use-after-free (git-fixes). - nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes). - nvmet: fix mar and mor off-by-one errors (git-fixes). - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: force reconnect when number of queue changes (git-fixes). - nvmet: looks at the passthrough controller when initializing CAP (git-fixes). - nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes). - nvmet: only allocate a single slab for bvecs (git-fixes). - nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes). - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes). - objtool: Add a missing comma to avoid string concatenation (bsc#1207328). - ocfs2: Fix data corruption after failed write (bsc#1208542). - ocfs2: clear dinode links count in case of error (bsc#1207650). - ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649). - ocfs2: fix crash when mount with quota enabled (bsc#1207640). - ocfs2: fix defrag path triggering jbd2 ASSERT (bsc#1199304). - ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes). - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes). - ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652). - ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651). - ocfs2: fix non-auto defrag path not working issue (bsc#1199304). - ocfs2: fix non-auto defrag path not working issue (git-fixes). - ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770). - ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768). - ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771). - octeon: constify netdev->dev_addr (git-fixes). - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes). - octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes). - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes). - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes). - of/address: Return an error when no valid dma-ranges are found (git-fixes). - opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes). - pNFS/filelayout: Fix coalescing test for single DS (git-fixes). - panic: Consolidate open-coded panic_on_warn checks (bsc#1207328). - panic: Introduce warn_limit (bsc#1207328). - panic: unset panic_on_warn inside panic() (bsc#1207328). - pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes). - pci/aspm: Remove pcie_aspm_pm_state_change() (git-fixes). - pci/dpc: Await readiness of secondary bus after reset (git-fixes). - pci/edr: Clear Device Status after EDR error recovery (git-fixes). - pci/iov: Enlarge virtfn sysfs name buffer (git-fixes). - pci/pm: Always disable PTM for all devices during suspend (git-fixes). - pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes). - pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes). - pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes). - pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes). - pci: Add ACS quirk for Wangxun NICs (git-fixes). - pci: Add SolidRun vendor ID (git-fixes). - pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes). - pci: Align extra resources for hotplug bridges properly (git-fixes). - pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes). - pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes). - pci: Fix dropping valid root bus resources with .end = zero (git-fixes). - pci: Reduce warnings on possible RW1C corruption (git-fixes). - pci: Release resource invalidated by coalescing (git-fixes). - pci: Take other bus devices into account when distributing resources (git-fixes). - pci: Unify delay handling for reset and resume (git-fixes). - pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes). - pci: aardvark: Fix link training (git-fixes). - pci: cadence: Fix Gen2 Link Retraining process (git-fixes). - pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes). - pci: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes). - pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes). - pci: ftpci100: Release the clock resources (git-fixes). - pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes). - pci: hv: Add a per-bus mutex state_lock (bsc#1207185). - pci: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185). - pci: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185). - pci: hv: Use async probing to reduce boot time (bsc#1207185). - pci: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185). - pci: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes). - pci: imx6: Install the fault handler only on compatible match (git-fixes). - pci: loongson: Add more devices that need MRRS quirk (git-fixes). - pci: loongson: Prevent LS7A MRRS increases (git-fixes). - pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes). - pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes). - pci: pciehp: Cancel bringup sequence if card is not present (git-fixes). - pci: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes). - pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes). - pci: qcom: Fix host-init error handling (git-fixes). - pci: qcom: Fix pipe clock imbalance (git-fixes). - pci: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes). - pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes). - pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes). - pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes). - pci: rockchip: Set address alignment for endpoint mode (git-fixes). - pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes). - pci: rockchip: Write PCI Device ID to correct register (git-fixes). - pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes). - pci: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - pci: vmd: Reset VMD config register between soft reboots (git-fixes). - pci: xgene: Revert 'PCI: xgene: Use inbound resources for setup' (git-fixes). - perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes). - perf/core: Call LSM hook after copying perf_event_attr (git fixes). - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes). - perf/core: Fix the same task check in perf_event_set_output (git fixes). - perf/core: Inherit event_caps (git fixes). - perf/x86/amd: fix potential integer overflow on shift of a int (git fixes). - perf/x86/intel/cstate: Add Emerald Rapids (PED-4396). - perf/x86/intel/ds: Fix precise store latency handling (git fixes). - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes). - perf/x86/intel/pt: Fix sampling using single range output (git fixes). - perf/x86/intel/pt: Relax address filter validation (git fixes). - perf/x86/intel/uncore: Add Emerald Rapids (git fixes). - perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes). - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes). - perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes). - perf/x86/intel: Add Emerald Rapids (git fixes). - perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes). - perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes). - perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes). - perf/x86/intel: Fix event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for ADL (git fixes). - perf/x86/intel: Fix pebs event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for SPR (git fixes). - perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes). - perf/x86/msr: Add Emerald Rapids (git fixes). - perf/x86/rapl: Add support for Intel AlderLake-N (git fixes). - perf/x86/rapl: Add support for Intel Emerald Rapids (PED-4394). - perf/x86/rapl: Treat Tigerlake like Icelake (git fixes). - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes). - perf/x86/rapl: fix AMD event handling (git fixes). - perf/x86/uncore: Add Raptor Lake uncore support (git fixes). - perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes). - perf/x86/uncore: Add new Raptor Lake S support (git fixes). - perf/x86/uncore: Clean up uncore_pci_ids (git fixes). - perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf: Always wake the parent event (git fixes). - perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes). - perf: Fix possible memleak in pmu_dev_alloc() (git fixes). - perf: fix perf_event_context->time (git fixes). - phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes). - phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes). - phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes). - phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes). - phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes). - phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes). - pinctrl: amd: Disable and mask interrupts on resume (git-fixes). - pinctrl: aspeed: Fix confusing types in return value (git-fixes). - pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes). - pinctrl: at91-pio4: fix domain name assignment (git-fixes). - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes). - pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes). - pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes). - pinctrl: mediatek: Initialize variable *buf to zero (git-fixes). - pinctrl: mediatek: fix coding style (git-fixes). - pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes). - pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes). - pinctrl: ocelot: Fix alt mode for ocelot (git-fixes). - pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes). - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes). - pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes). - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes). - pinctrl: single: fix potential NULL dereference (git-fixes). - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes). - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes). - platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes). - platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd: Fix refcount leak in amd_pmc_probe (bsc#1210644). - platform/x86/amd: pmc: Add a module parameter to disable workarounds (bsc#1210644). - platform/x86/amd: pmc: Add a workaround for an s0i3 issue on Cezanne (bsc#1210644). - platform/x86/amd: pmc: Add defines for STB events (bsc#1210644). - platform/x86/amd: pmc: Add line break for readability (bsc#1210644). - platform/x86/amd: pmc: Add new ACPI ID AMDI0009 (bsc#1210644). - platform/x86/amd: pmc: Add num_samples message id support to STB (bsc#1210644). - platform/x86/amd: pmc: Add sysfs files for SMU (bsc#1210644). - platform/x86/amd: pmc: Always write to the STB (bsc#1210644). - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN (bsc#1210644). - platform/x86/amd: pmc: Do not dump data after resume from s0i3 on picasso (git-fixes). - platform/x86/amd: pmc: Do not try to read SMU version on Picasso (git-fixes). - platform/x86/amd: pmc: Fix build without debugfs (bsc#1210644). - platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() (bsc#1210644). - platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso (git-fixes). - platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` (git-fixes). - platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init (git-fixes). - platform/x86/amd: pmc: Read SMU version during suspend on Cezanne systems (bsc#1210644). - platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: Utilize SMN index 0 for driver probe (git-fixes). - platform/x86/amd: pmc: Write dummy postcode into the STB DRAM (bsc#1210644). - platform/x86/amd: pmc: add CONFIG_SERIO dependency (git-fixes). - platform/x86/amd: pmc: differentiate STB/SMU messaging prints (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_SUSPEND checks (bsc#1210644). - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes). - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420). - platform/x86: ISST: Remove 8 socket limit (bsc#1211836). - platform/x86: Move AMD platform drivers to separate directory (bsc#1210644). - platform/x86: amd-pmc: Add a message to print resume time info (bsc#1210644). - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Smart Trace Buffer (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Spill to DRAM STB feature (bsc#1210644). - platform/x86: amd-pmc: Avoid reading SMU version at probe time (bsc#1210644). - platform/x86: amd-pmc: Check s0i3 cycle status (bsc#1210644). - platform/x86: amd-pmc: Correct usage of SMU version (git-fixes). - platform/x86: amd-pmc: Downgrade dev_info message to dev_dbg (bsc#1210644). - platform/x86: amd-pmc: Drop CPU QoS workaround (bsc#1210644). - platform/x86: amd-pmc: Drop check for valid alarm time (bsc#1210644). - platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes). - platform/x86: amd-pmc: Fix build error unused-function (bsc#1210644). - platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes). - platform/x86: amd-pmc: Fix compilation without CONFIG_SUSPEND (bsc#1210644). - platform/x86: amd-pmc: Make amd_pmc_stb_debugfs_fops static (bsc#1210644). - platform/x86: amd-pmc: Move FCH init to first use (bsc#1210644). - platform/x86: amd-pmc: Move SMU logging setup out of init (bsc#1210644). - platform/x86: amd-pmc: Move to later in the suspend process (bsc#1210644). - platform/x86: amd-pmc: Only report STB errors when STB enabled (bsc#1210644). - platform/x86: amd-pmc: Output error codes in messages (bsc#1210644). - platform/x86: amd-pmc: Send command to dump data after clearing OS_HINT (bsc#1210644). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1210644). - platform/x86: amd-pmc: Shuffle location of amd_pmc_get_smu_version() (bsc#1210644). - platform/x86: amd-pmc: Simplify error handling and store the pci_dev in amd_pmc_dev structure (bsc#1210644). - platform/x86: amd-pmc: Validate entry into the deepest state on resume (bsc#1210644). - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd` (bsc#1210644). - platform/x86: amd-pmc: fix compilation without CONFIG_RTC_SYSTOHC_DEVICE (bsc#1210644). - platform/x86: amd-pmc: uninitialized variable in amd_pmc_s2d_init() (bsc#1210644). - platform/x86: amd: pmc: Remove __maybe_unused from amd_pmc_suspend_handler() (bsc#1210644). - platform/x86: amd: pmc: provide user message where s0ix is not supported (bsc#1210644). - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes). - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes). - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes). - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes). - platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes). - platform/x86: hp-wmi: Support touchpad on/off (git-fixes). - platform/x86: intel-uncore-freq: add Emerald Rapids support (PED-4390). - platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes). - platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes). - platform/x86: think-lmi: Certificate authentication support (bsc#1210050). - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes). - platform/x86: think-lmi: Correct NVME password handling (git-fixes). - platform/x86: think-lmi: Correct System password interface (git-fixes). - platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes). - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes). - platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050). - platform/x86: think-lmi: Opcode support (bsc#1210050). - platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050). - platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050). - platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050). - platform/x86: think-lmi: add debug_cmd (bsc#1210050). - platform/x86: think-lmi: add missing type attribute (git-fixes). - platform/x86: think-lmi: certificate support clean ups (bsc#1210050). - platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes). - platform/x86: think-lmi: only display possible_values if available (git-fixes). - platform/x86: think-lmi: use correct possible_values delimiters (git-fixes). - platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050). - platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050). - platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050). - platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050). - platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050). - platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050). - platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050). - platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050). - platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050). - platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050). - platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050). - platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050). - platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050). - platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050). - platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050). - platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050). - platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050). - platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050). - platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050). - platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes). - platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050). - platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050). - platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050). - platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050). - platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050). - platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050). - platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050). - platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050). - platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050). - platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050). - platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050). - platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050). - platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050). - platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050). - platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050). - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes). - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes). - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes). - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes). - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes). - pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes). - pm: hibernate: Do not get block device exclusively in test_resume mode (git-fixes). - pm: hibernate: Turn snapshot_test into global variable (git-fixes). - pm: hibernate: fix load_image_and_restore() error path (git-fixes). - power: supply: Fix logic checking if system is running from battery (git-fixes). - power: supply: Ratelimit no data debug output (git-fixes). - power: supply: ab8500: Fix external_power_changed race (git-fixes). - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes). - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes). - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes). - power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes). - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes). - power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes). - power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes). - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes). - power: supply: bq27xxx: expose battery data when CI=1 (git-fixes). - power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes). - power: supply: generic-adc-battery: fix unit scaling (git-fixes). - power: supply: leds: Fix blink to LED on transition (git-fixes). - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes). - power: supply: sc27xx: Fix external_power_changed race (git-fixes). - powercap: fix possible name leak in powercap_register_zone() (git-fixes). - powercap: intel_rapl: add support for Emerald Rapids (PED-4398). - powerpc/64: Always build with 128-bit long double (bsc#1194869). - powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869). - powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869). - powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729). - powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes). - powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612). - powerpc/hv-gpci: Fix hv_gpci event list (bsc#1207935). - powerpc/hv-gpci: Fix hv_gpci event list (git fixes). - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869). - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869). - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes). - powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701). - powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869). - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869). - powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869). - powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869). - powerpc/kexec_file: fix implicit decl error (bsc#1194869). - powerpc/mm: Fix false detection of read faults (bsc#1208864). - powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled (bsc#1210216 ltc#202189). - powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/purgatory: remove PGO flags (bsc#1194869). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729). - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869). - powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869). - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869). - powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869). - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869). - powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729). - powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662). - powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869). - powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662). - powerpc: declare unmodified attribute_group usages const (bsc#1207935). - powerpc: declare unmodified attribute_group usages const (git-fixes). - powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869). - printf: fix errname.c list (git-fixes). - prlimit: do_prlimit needs to have a speculation check (bsc#1209256). - pstore/ram: Add check for kstrdup (git-fixes). - pstore: Revert pmsg_lock back to a normal mutex (git-fixes). - purgatory: fix disabling debug info (git-fixes). - pwm: ab8500: Fix error code in probe() (git-fixes). - pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes). - pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes). - pwm: meson: Fix axg ao mux parents (git-fixes). - pwm: meson: Fix g12a ao clk81 name (git-fixes). - pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes). - pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes). - pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes). - qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001). - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (jsc#SLE-19001). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001). - qed/qede: Fix scheduling while atomic (git-fixes). - qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001). - qede: avoid uninitialized entries in coal_entry array (bsc#1205846). - qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001). - qede: fix interrupt coalescing configuration (bsc#1205846). - quota: Check next/prev free block number after reading from quota file (bsc#1206640). - quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: fix flow control issue of RTL8156A (git-fixes). - r8152: fix the poor throughput for 2.5G devices (git-fixes). - r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes). - r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes). - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes). - radeon: avoid double free in ci_dpm_init() (git-fixes). - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes). - rcu: Fix rcu_torture_read ftrace event (git-fixes). - rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159). - rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes) - rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes) - rdma/bnxt_re: Fix a possible memory leak (git-fixes) - rdma/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes) - rdma/bnxt_re: Fix the page_size used during the MR creation (git-fixes) - rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes) - rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes) - rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes) - rdma/bnxt_re: Remove unnecessary checks (git-fixes) - rdma/bnxt_re: Return directly without goto jumps (git-fixes) - rdma/bnxt_re: Use unique names while registering interrupts (git-fixes) - rdma/bnxt_re: wraparound mbox producer index (git-fixes) - rdma/cm: Trace icm_send_rej event before the cm state is reset (git-fixes) - rdma/cma: Allow UD qp_type to join multicast only (git-fixes) - rdma/cma: Always set static rate to 0 for RoCE (git-fixes) - rdma/core: Fix GID entry ref leak when create_ah fails (git-fixes) - rdma/core: Fix ib block iterator counter overflow (bsc#1207878). - rdma/core: Fix ib block iterator counter overflow (git-fixes) - rdma/core: Fix multiple -Warray-bounds warnings (git-fixes) - rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes) - rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes) - rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes) - rdma/efa: Fix unsupported page sizes in device (git-fixes) - rdma/hns: Fix base address table allocation (git-fixes) - rdma/hns: Fix hns_roce_table_get return value (git-fixes) - rdma/hns: Fix timeout attr in query qp for HIP08 (git-fixes) - rdma/hns: Modify the value of long message loopback slice (git-fixes) - rdma/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383). - rdma/irdma: Add ipv4 check to irdma_find_listener() (git-fixes) - rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383). - rdma/irdma: Fix Local Invalidate fencing (git-fixes) - rdma/irdma: Fix RQ completion opcode (jsc#SLE-18383). - rdma/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383). - rdma/irdma: Fix inline for multiple SGE's (jsc#SLE-18383). - rdma/irdma: Fix memory leak of PBLE objects (git-fixes) - rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes) - rdma/irdma: Increase iWARP CM default rexmit count (git-fixes) - rdma/irdma: Prevent QP use after free (git-fixes) - rdma/irdma: Remove enum irdma_status_code (jsc#SLE-18383). - rdma/irdma: Remove excess error variables (jsc#SLE-18383). - rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes) - rdma/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022). - rdma/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022). - rdma/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255). - rdma/mlx5: Create an indirect flow table for steering anchor (git-fixes) - rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes) - rdma/mlx5: Fix affinity assignment (git-fixes) - rdma/mlx5: Fix flow counter query via DEVX (git-fixes) - rdma/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes) - rdma/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes) - rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes) - rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253). - rdma/mlx5: Use correct device num_ports when modify DC (git-fixes) - rdma/mlx5: Use rdma_umem_for_each_dma_block() (git-fixes) - rdma/rdmavt: Delete unnecessary NULL check (git-fixes) - rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes) - rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes) - rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes) - rdma/rtrs: Fix the last iu->buf leak in err path (git-fixes) - rdma/rxe: Fix access checks in rxe_check_bind_mw (git-fixes) - rdma/rxe: Fix inaccurate constants in rxe_type_info (git-fixes) - rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes) - rdma/rxe: Fix mr->map double free (git-fixes) - rdma/rxe: Fix oops with zero length reads (git-fixes) - rdma/rxe: Fix packet length checks (git-fixes) - rdma/rxe: Fix ref count error in check_rkey() (git-fixes) - rdma/rxe: Fix rxe_cq_post (git-fixes) - rdma/rxe: Fix the error 'trying to register non-static key in rxe_cleanup_task' (git-fixes) - rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes) - rdma/rxe: Make responder handle RDMA Read failures (git-fixes) - rdma/rxe: Prevent faulty rkey generation (git-fixes) - rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes) - rdma/rxe: Remove tasklet call from rxe_cq.c (git-fixes) - rdma/rxe: Remove the unused variable obj (git-fixes) - rdma/rxe: Removed unused name from rxe_task struct (git-fixes) - rdma/siw: Fix potential page_array out of range access (git-fixes) - rdma/siw: Fix user page pinning accounting (git-fixes) - rdma/siw: Remove namespace check from siw_netdev_event() (git-fixes) - rdma/srp: Move large values to a new enum for gcc13 (git-fixes) - rdma/srpt: Add a check for valid 'mad_agent' pointer (git-fixes) - rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes) - rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes) - rdma/vmw_pvrdma: Remove unnecessary check on wr->opcode (git-fixes) - rdma: Handle the return code from dma_resv_wait_timeout() properly (git-fixes) - ref_tracker: use __GFP_NOFAIL more carefully (git-fixes). - regmap: Account for register length when chunking (git-fixes). - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes). - regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes). - regulator: Fix error checking for debugfs_create_dir (git-fixes). - regulator: Flag uncontrollable regulators as always_on (git-fixes). - regulator: Handle deferred clk (git-fixes). - regulator: core: Avoid lockdep reports when resolving supplies (git-fixes). - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes). - regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes). - regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes). - regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes). - regulator: core: Streamline debugfs operations (git-fixes). - regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes). - regulator: fan53555: Explicitly include bits header (git-fixes). - regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes). - regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes). - regulator: max77802: Bounds check regulator id against opmode (git-fixes). - regulator: mt6359: add read check for PMIC MT6359 (git-fixes). - regulator: pca9450: Fix BUCK2 enable_mask (git-fixes). - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes). - regulator: s5m8767: Bounds check id indexing into arrays (git-fixes). - regulator: stm32-pwr: fix of_iomap leak (git-fixes). - reiserfs: Add missing calls to reiserfs_security_free() (git-fixes). - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes). - remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes). - remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes). - remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes). - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes). - remoteproc: st: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes). - remove 'PCI: hv: Use async probing to reduce boot time' (bsc#1207185). - rethook: Reject getting a rethook if RCU is not watching (git-fixes). - rethook: fix a potential memleak in rethook_alloc() (git-fixes). - rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler (git-fixes). - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (git-fixes). - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes). - ring-buffer: Fix kernel-doc (git-fixes). - ring-buffer: Fix race while reader and writer are on the same page (git-fixes). - ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes). - ring-buffer: Sync IRQ works before buffer destruction (git-fixes). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE. - rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435) - rpm/kernel-obs-build.spec.in: Remove SLE11 cruft - rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches - rtc: allow rtc_read_alarm without read_alarm callback (git-fixes). - rtc: efi: Add wakeup support (bsc#1213116). - rtc: efi: Enable SET/GET WAKEUP services as optional (bsc#1213116). - rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116). - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes). - rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes). - rtc: pm8xxx: fix set-alarm race (git-fixes). - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes). - rtc: sun6i: Always export the internal oscillator (git-fixes). - rtmutex: Ensure that the top waiter is always woken up (git-fixes). - s390/ap: fix memory leak in ap_init_qci_info() (git-fixes). - s390/boot: simplify and fix kernel memory layout setup (bsc#1209600). - s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686). - s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes). - s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592). - s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687). - s390/dasd: fix no record found for raw_track_access (bsc#1207574). - s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes). - s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892). - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688). - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689). - s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690). - s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691). - s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692). - s390/pkey: zeroize key blobs (git-fixes bsc#1212619). - s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693). - s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes). - s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes). - s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714). - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() (git-fixes). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes) - sched/core: Avoid obvious double update_rq_clock warning (git-fixes) - sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes) - sched/core: Introduce sched_asym_cpucap_active() (git-fixes) - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes) - sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes) - sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)). - sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325). - sched/fair: sanitize vruntime of entity being placed (bsc#1203325). - sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)). - sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799). - sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes) - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes) - sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes) - sched: Fix DEBUG && !SCHEDSTATS warn (git-fixes) - sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)). - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (git-fixes). - scsi: aacraid: Allocate cmd_priv with scsicmd (git-fixes). - scsi: aic94xx: Add missing check for dma_map_single() (git-fixes). - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes). - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes). - scsi: core: Fix a procfs host directory removal regression (git-fixes). - scsi: core: Fix a source code comment (git-fixes). - scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes). - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes). - scsi: hisi_sas: Check devm_add_action() return value (git-fixes). - scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes). - scsi: hisi_sas: Revert change to limit max hw sectors for v3 HW (bsc#1210230). - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes). - scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes). - scsi: ipr: Work around fortify-string warning (git-fixes). - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes). - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes). - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: libsas: Add sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes). - scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847). - scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes). - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (bsc#1211847). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Update congestion warning notification period (bsc#1211847). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847). - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes). - scsi: megaraid_sas: Fix crash after a double completion (git-fixes). - scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (git-fixes). - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (git-fixes). - scsi: mpi3mr: Fix throttle_groups memory leak (git-fixes). - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (git-fixes). - scsi: mpi3mr: Suppress command reply debug prints (bsc#1211820). - scsi: mpt3sas: Do not print sense pool info twice (git-fixes). - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes). - scsi: mpt3sas: Fix a memory leak (git-fixes). - scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes). - scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix hang in task management (bsc#1211960). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix mem access after free (bsc#1211960). - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960). - scsi: qla2xxx: Fix task management cmd failure (bsc#1211960). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Multi-que support for TMF (bsc#1211960). - scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes). - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes). - scsi: scsi_ioctl: Validate command size (git-fixes). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Revert 'Rework asynchronous resume support' (bsc#1209092). - scsi: ses: Do not attach if enclosure has no components (git-fixes). - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes). - scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes). - scsi: smartpqi: Add controller cache flush during rmmod (bsc#1207315). - scsi: smartpqi: Add new controller PCI IDs (bsc#1207315). - scsi: smartpqi: Change sysfs raid_level attribute to N/A for controllers (bsc#1207315). - scsi: smartpqi: Change version to 2.1.20-035 (bsc#1207315). - scsi: smartpqi: Convert to host_tagset (bsc#1207315). - scsi: smartpqi: Correct device removal for multi-actuator devices (bsc#1207315). - scsi: smartpqi: Correct max LUN number (bsc#1207315). - scsi: smartpqi: Initialize feature section info (bsc#1207315). - scsi: smartpqi: Replace one-element array with flexible-array member (bsc#1207315). - scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes). - scsi: stex: Fix gcc 13 warnings (git-fixes). - scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes). - scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes). - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes). - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes). - scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes). - scsi: ufs: core: Enable link lost interrupt (git-fixes). - scsi_disk kABI: add back members (bsc#1209092). - sctp: fail if no bound addresses can be used for a given scope (bsc#1206677). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - seccomp: Move copy_seccomp() to no failure path (bsc#1210817). - sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes). - selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes). - selftests mount: Fix mount_setattr_test builds failed (git-fixes). - selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103). - selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103). - selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes). - selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232). - selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232). - selftests/powerpc: Move perror closer to its use (bsc#1206232). - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes). - selftests/resctrl: Allow ->setup() to return errors (git-fixes). - selftests/resctrl: Check for return value after write_schemata() (git-fixes). - selftests/resctrl: Extend CPU vendor detection (git-fixes). - selftests/resctrl: Move ->setup() call outside of test specific branches (git-fixes). - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes). - selftests/sgx: Add 'test_encl.elf' to TEST_FILES (git-fixes). - selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes). - selftests: Provide local define of __cpuid_count() (git-fixes). - selftests: forwarding: lib: quote the sysctl values (git-fixes). - selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: depend on SYN_COOKIES (git-fixes). - selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: sockopt: return error if wrong mark (git-fixes). - selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes). - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes). - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes). - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes). - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes). - selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes). - selftests: sigaltstack: fix -Wuninitialized (git-fixes). - selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes). - selftests: xsk: Disable IPv6 on VETH1 (git-fixes). - selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes). - selinux: do not use make's grouped targets feature yet (git-fixes). - selinux: ensure av_permissions.h is built when needed (git-fixes). - selinux: fix Makefile dependencies of flask.h (git-fixes). - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes). - serial: 8250: Add missing wakeup event reporting (git-fixes). - serial: 8250: Reinit port->pm on port specific driver unbind (git-fixes). - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes). - serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes). - serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes). - serial: 8250: omap: Fix freeing of resources on failed register (git-fixes). - serial: 8250_bcm7271: Fix arbitration handling (git-fixes). - serial: 8250_bcm7271: balance clk_enable calls (git-fixes). - serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes). - serial: 8250_dma: Fix DMA Rx rearm race (git-fixes). - serial: 8250_em: Fix UART port type (git-fixes). - serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes). - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes). - serial: 8250_fsl: fix handle_irq locking (git-fixes). - serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes). - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes). - serial: Add support for Advantech PCI-1611U card (git-fixes). - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes). - serial: atmel: do not enable IRQs prematurely (git-fixes). - serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes). - serial: fsl_lpuart: Fix comment typo (git-fixes). - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes). - serial: lantiq: add missing interrupt ack (git-fixes). - serial: qcom-geni: fix console shutdown hang (git-fixes). - serial: qcom-geni: fix enabling deactivated interrupt (git-fixes). - serial: sc16is7xx: setup GPIO controller later in probe (git-fixes). - serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes). - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes). - sfc: Change VF mac via PF as first preference if available (git-fixes). - sfc: Fix module EEPROM reporting for QSFP modules (git-fixes). - sfc: Fix use-after-free due to selftest_work (git-fixes). - sfc: correctly advertise tunneled IPv6 segmentation (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: ef10: do not overwrite offload features at NIC reset (git-fixes). - sfc: fix TX channel offset when using legacy interrupts (git-fixes). - sfc: fix considering that all channels have TX queues (git-fixes). - sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes). - sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes). - sfc: include vport_id in filter spec hash and equal() (git-fixes). - signal handling: do not use BUG_ON() for debugging (bsc#1210439). - signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861). - signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes). - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes). - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes). - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816). - signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816). - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816). - signal: Implement force_fatal_sig (git-fixes). - smb3.1.1: add new tree connect ShareFlags (bsc#1193629). - smb3: Add missing locks to protect deferred close file list (git-fixes). - smb3: Close all deferred handles of inode in case of handle lease break (bsc#1193629). - smb3: Close deferred file handles in case of handle lease break (bsc#1193629). - smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629). - smb3: display debug information better for encryption (bsc#1193629). - smb3: drop reference to cfile before sending oplock break (bsc#1193629). - smb3: fix problem remounting a share after shutdown (bsc#1193629). - smb3: fix unusable share after force unmount failure (bsc#1193629). - smb3: force unmount was failing to close deferred close files (bsc#1193629). - smb3: improve parallel reads of large files (bsc#1193629). - smb3: lower default deferred close timeout to address perf regression (bsc#1193629). - smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629). - smb3: move some common open context structs to smbfs_common (bsc#1193629). - soc/fsl/qe: fix usb.c build errors (git-fixes). - soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 (git-fixes). - soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes). - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes). - soundwire: cadence: Do not overflow the command FIFOs (git-fixes). - soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes). - soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes). - soundwire: qcom: fix storing port config out-of-bounds (git-fixes). - soundwire: qcom: gracefully handle too many ports in DT (git-fixes). - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes). - spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes). - spi: cadence-quadspi: fix suspend-resume implementations (git-fixes). - spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes). - spi: dw: Round of n_bytes to power of 2 (git-fixes). - spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes). - spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes). - spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes). - spi: lpspi: disable lpspi module irq in DMA mode (git-fixes). - spi: qup: Do not skip cleanup in remove's error path (git-fixes). - spi: qup: Request DMA before enabling clocks (git-fixes). - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes). - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (git-fixes). - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - spi: spidev: remove debug messages that access spidev->spi without locking (git-fixes). - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes). - spi: tegra210-quad: Fix combined sequence (bsc#1212584) - spi: tegra210-quad: Fix iterator outside loop (git-fixes). - spi: tegra210-quad: Fix validate combined sequence (git-fixes). - spi: tegra210-quad: Multi-cs support (bsc#1212584) - squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes). - staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes). - staging: iio: resolver: ads1210: fix config mode (git-fixes). - staging: mt7621-dts: change palmbus address to lower case (git-fixes). - staging: mt7621-dts: change some node hex addresses to lower case (git-fixes). - staging: octeon: delete my name from TODO contact (git-fixes). - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes). - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (git-fixes). - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (git-fixes). - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes). - stat: fix inconsistency between struct stat and struct compat_stat (git-fixes). - struct ci_hdrc: hide new member at end (git-fixes). - struct dwc3: mask new member (git-fixes). - struct uvc_device move flush_status new member to end (git-fixes). - sunrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes). - sunrpc: Clean up svc_deferred_class trace events (git-fixes). - sunrpc: Do not dereference xprt->snd_task if it's a cookie (git-fixes). - sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes). - sunrpc: Fix a server shutdown leak (git-fixes). - sunrpc: Fix missing release socket in rpc_sockname() (git-fixes). - sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes). - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes). - sunrpc: Fix socket waits for write buffer space (git-fixes). - sunrpc: Return true/false (not 1/0) from bool functions (git-fixes). - sunrpc: Update trace flags (git-fixes). - sunrpc: Use BIT() macro in rpc_show_xprt_state() (git-fixes). - sunrpc: ensure the matching upcall is in-flight upon downcall (git-fixes). - sunrpc: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775). - sunrpc: only free unix grouplist after RCU settles (git-fixes). - swim3: add missing major.h include (git-fixes). - swiotlb: Free tbl memory in swiotlb_exit() (jsc#PED-3259). - swiotlb: add a SWIOTLB_ANY flag to lift the low memory restriction (PED-3259). - swiotlb: avoid potential left shift overflow (PED-3259). - swiotlb: clean up some coding style and minor issues (PED-3259). - swiotlb: consolidate rounding up default_nslabs (PED-3259). - swiotlb: do not panic when the swiotlb buffer can't be allocated (PED-3259). - swiotlb: ensure a segment does not cross the area boundary (PED-3259). - swiotlb: fail map correctly with failed io_tlb_default_mem (PED-3259). - swiotlb: fix a typo (PED-3259). - swiotlb: fix passing local variable to debugfs_create_ulong() (PED-3259). - swiotlb: fix setting ->force_bounce (PED-3259). - swiotlb: fix use after free on error handling path (PED-3259). - swiotlb: make swiotlb_exit a no-op if SWIOTLB_FORCE is set (PED-3259). - swiotlb: make the swiotlb_init interface more useful (PED-3259). - swiotlb: merge swiotlb-xen initialization into swiotlb (jsc#PED-3259). - swiotlb: panic if nslabs is too small (PED-3259). - swiotlb: pass a gfp_mask argument to swiotlb_init_late (PED-3259). - swiotlb: provide swiotlb_init variants that remap the buffer (PED-3259). - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes). - swiotlb: remove a useless return in swiotlb_init (PED-3259). - swiotlb: remove swiotlb_init_with_tbl and swiotlb_init_late_with_tbl (PED-3259). - swiotlb: remove unused fields in io_tlb_mem (PED-3259). - swiotlb: rename swiotlb_late_init_with_default_size (PED-3259). - swiotlb: simplify debugfs setup (jsc#PED-3259). - swiotlb: simplify swiotlb_max_segment (PED-3259). - swiotlb: split up the global swiotlb lock (PED-3259). - swiotlb: use the right nslabs value in swiotlb_init_remap (PED-3259). - swiotlb: use the right nslabs-derived sizes in swiotlb_init_late (PED-3259). - sysctl: add a new register_sysctl_init() interface (bsc#1207328). - task_work: Decouple TIF_NOTIFY_SIGNAL and task_work (git-fixes). - task_work: Introduce task_work_pending (git-fixes). - test_firmware: Use kstrtobool() instead of strtobool() (git-fixes). - test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes). - test_firmware: prevent race conditions by a correct implementation of locking (git-fixes). - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes). - thermal/core: Remove duplicate information when an error occurs (git-fixes). - thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes). - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes). - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes). - thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes). - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes). - thermal/drivers/tsens: fix slope values for msm8939 (git-fixes). - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes). - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes). - thermal: intel: Fix unsigned comparison with less than zero (git-fixes). - thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes). - thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes). - thermal: intel: quark_dts: fix error pointer dereference (git-fixes). - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes). - thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Disable interrupt auto clear for rings (git-fixes). - thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165). - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes). - thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes). - thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes). - thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes). - timers: Prevent union confusion from unexpected (git-fixes) - tls: Skip tls_append_frag on zero copy size (git-fixes). - tools/iio/iio_utils:fix memory leak (git-fixes). - tools/virtio: compile with -pthread (git-fixes). - tools/virtio: fix the vringh test for virtio ring changes (git-fixes). - tools/virtio: fix virtio_test execution (git-fixes). - tools/virtio: initialize spinlocks in vring_test.c (git-fixes). - tools: bpftool: Remove invalid \' json escape (git-fixes). - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes). - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes). - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes). - tpm, tpm_tis: Request threaded interrupt handler (git-fixes). - tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes). - tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes). - trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes). - trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace_events_hist: add check for return value of 'create_hist_field' (git-fixes). - tracing/fprobe: Fix to check whether fprobe is registered correctly (git-fixes). - tracing/hist: Fix issue of losting command info in error_log (git-fixes). - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes). - tracing/hist: Fix wrong return value in parse_action_params() (git-fixes). - tracing/histograms: Allow variables to have some modifiers (git-fixes). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes). - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes). - tracing/probes: Handle system names with hyphens (git-fixes). - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes). - tracing: Add '__rel_loc' using trace event macros (git-fixes). - tracing: Add DYNAMIC flag for dynamic events (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - tracing: Add trace_array_puts() to write into instance (git-fixes). - tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes). - tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing: Avoid adding tracer option before update_tracer_options (git-fixes). - tracing: Check field value in hist_field_name() (git-fixes). - tracing: Do not let histogram values have some modifiers (git-fixes). - tracing: Do not use out-of-sync va_list in event printing (git-fixes). - tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes). - tracing: Fix a kmemleak false positive in tracing_map (git-fixes). - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes). - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes). - tracing: Fix issue of missing one synthetic field (git-fixes). - tracing: Fix mismatched comment in __string_len (git-fixes). - tracing: Fix permissions for the buffer_percent file (git-fixes). - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes). - tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes). - tracing: Fix race where histograms can be called before the event (git-fixes). - tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes). - tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes). - tracing: Fix warning on variable 'struct trace_array' (git-fixes). - tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes). - tracing: Free error logs of tracing instances (git-fixes). - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes). - tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350). - tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes). - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes). - tracing: Have type enum modifications copy the strings (git-fixes). - tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes). - tracing: Make splice_read available again (git-fixes). - tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes). - tracing: Make tp_printk work on syscall tracepoints (git-fixes). - tracing: Make tracepoint lockdep check actually test something (git-fixes). - tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350). - tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes). - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes). - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes). - tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes). - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes). - tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes). - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes). - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes). - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes). - tty: serial: imx: Handle RS485 DE signal active high (git-fixes). - tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes). - tty: serial: imx: fix rs485 rx after tx (git-fixes). - tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes). - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes). - tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes). - tun: annotate access to queue->trans_start (jsc#PED-370). - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes). - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - ubi: ensure that VID header offset + VID header size &lt;= alloc, size (bsc#1210584). - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328). - udf: Avoid double brelse() in udf_rename() (bsc#1213032). - udf: Check consistency of Space Bitmap Descriptor (bsc#1210771). - udf: Define EFSCORRUPTED error code (bsc#1213038). - udf: Detect system inodes linked into directory hierarchy (bsc#1213114). - udf: Discard preallocation before extending file with a hole (bsc#1213036). - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035). - udf: Do not bother merging very long extents (bsc#1213040). - udf: Do not update file length for failed writes to inline files (bsc#1213041). - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649). - udf: Fix error handling in udf_new_inode() (bsc#1213112). - udf: Fix extending file within last block (bsc#1213037). - udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034). - udf: Preserve link count of system files (bsc#1213113). - udf: Support splicing to file (bsc#1210770). - udf: Truncate added extents on failed expansion (bsc#1213039). - update internal module version number for cifs.ko (bsc#1193629). - usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes). - usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes). - usb: cdns3: Fix issue with using incorrect PCI device function (git-fixes). - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes). - usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes). - usb: cdnsp: Fixes issue with redundant Status Stage (git-fixes). - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes). - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes). - usb: chipidea: core: fix possible concurrent when switch role (git-fixes). - usb: chipidea: fix memory leak with using debugfs_lookup() (git-fixes). - usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes). - usb: chipidea: imx: avoid unnecessary probe defer (git-fixes). - usb: core: Add routines for endpoint checks in old drivers (git-fixes). - usb: core: Do not hold device lock while reading the 'descriptors' sysfs file (git-fixes). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes). - usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes). - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes). - usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes). - usb: dwc3: Align DWC3_EP_* flag macros (git-fixes). - usb: dwc3: Fix a repeated word checkpatch warning (git-fixes). - usb: dwc3: Fix a typo in field name (git-fixes). - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes). - usb: dwc3: core: Host wake up support from system suspend (git-fixes). - usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes). - usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes). - usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes). - usb: dwc3: fix memory leak with using debugfs_lookup() (git-fixes). - usb: dwc3: fix runtime pm imbalance on probe errors (git-fixes). - usb: dwc3: fix runtime pm imbalance on unbind (git-fixes). - usb: dwc3: fix use-after-free on core driver unbind (git-fixes). - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes). - usb: dwc3: gadget: Change condition for processing suspend event (git-fixes). - usb: dwc3: gadget: Delay issuing End Transfer (git-fixes). - usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes). - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes). - usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes). - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes). - usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes). - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes). - usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes). - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes). - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes). - usb: dwc3: qcom: Fix potential memory leak (git-fixes). - usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes). - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes). - usb: dwc3: qcom: clean up icc init (git-fixes). - usb: dwc3: qcom: clean up suspend callbacks (git-fixes). - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes). - usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes). - usb: dwc3: qcom: fix gadget-only builds (git-fixes). - usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes). - usb: dwc3: qcom: fix wakeup implementation (git-fixes). - usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes). - usb: dwc3: qcom: suppress unused-variable warning (git-fixes). - usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes). - usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes). - usb: ene_usb6250: Allocate enough memory for full object (git-fixes). - usb: fix memory leak with using debugfs_lookup() (git-fixes). - usb: fotg210: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes). - usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes). - usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes). - usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes). - usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes). - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes). - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes). - usb: gadget: f_hid: fix refcount leak on error path (git-fixes). - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes). - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes). - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes). - usb: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes). - usb: gadget: u_audio: do not let userspace block driver unbind (git-fixes). - usb: gadget: u_ether: Fix host MAC address case (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes). - usb: gadget: udc: do not clear gadget driver.bus (git-fixes). - usb: gadget: udc: fix NULL dereference in remove() (git-fixes). - usb: hide unused usbfs_notify_suspend/resume functions (git-fixes). - usb: host: xhci-rcar: remove leftover quirk handling (git-fixes). - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes). - usb: isp116x: fix memory leak with using debugfs_lookup() (git-fixes). - usb: isp1362: fix memory leak with using debugfs_lookup() (git-fixes). - usb: max-3421: Fix setting of I/O pins (git-fixes). - usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes). - usb: musb: Add and use inline function musb_otg_state_string (git-fixes). - usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes). - usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes). - usb: musb: remove schedule work called after flush (git-fixes). - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes). - usb: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes). - usb: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes). - usb: serial: option: add Quectel EC200U modem (git-fixes). - usb: serial: option: add Quectel EM05-G (CS) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (GR) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (RS) modem (git-fixes). - usb: serial: option: add Quectel EM05CN (SG) modem (git-fixes). - usb: serial: option: add Quectel EM05CN modem (git-fixes). - usb: serial: option: add Quectel EM061KGL series (git-fixes). - usb: serial: option: add Quectel RM500U-CN modem (git-fixes). - usb: serial: option: add Telit FE990 compositions (git-fixes). - usb: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes). - usb: serial: option: add support for VW/Skoda 'Carstick LTE' (git-fixes). - usb: sisusbvga: Add endpoint checks (git-fixes). - usb: sl811: fix memory leak with using debugfs_lookup() (git-fixes). - usb: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes). - usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes). - usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes). - usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes). - usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes). - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix multiple times discover svids error (git-fixes). - usb: typec: tcpm: fix warning when handle discover_identity message (git-fixes). - usb: typec: ucsi: Do not attempt to resume the ports before they exist (git-fixes). - usb: typec: ucsi: Do not warn on probe deferral (git-fixes). - usb: typec: ucsi: Fix command cancellation (git-fixes). - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes). - usb: ucsi: Fix ucsi->connector race (git-fixes). - usb: ucsi_acpi: Increase the command completion timeout (git-fixes). - usb: uhci: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes). - usb: uhci: fix memory leak with using debugfs_lookup() (git-fixes). - usb: usbfs: Enforce page requirements for mmap (git-fixes). - usb: usbfs: Use consistent mmap functions (git-fixes). - usb: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes). - usb: uvc: Enumerate valid values for color matching (git-fixes). - usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes). - usb: xhci: tegra: fix sleep in atomic call (git-fixes). - usrmerge: Adjust module path in the kernel sources (bsc#1212835). With the module path adjustment applied as source patch only ALP/Tumbleweed kernel built on SLE/Leap needs the path changed back to non-usrmerged. - usrmerge: Compatibility with earlier rpm (boo#1211796) - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (jsc#PED-1549). - vDPA: check virtio device features to detect MQ (jsc#PED-1549). - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (jsc#PED-1549). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: modify vcs_size() handling in vcs_read() (git-fixes). - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes). - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes). - vdpa/ifcvf: fix the calculation of queuepair (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#SLE-19253). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#PED-1549). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253). - vdpa/mlx5: Fix rule forwarding VLAN to TIR (jsc#PED-1549). - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253). - vdpa/mlx5: Fix wrong mac address deletion (jsc#PED-1549). - vdpa/mlx5: Initialize CVQ iotlb spinlock (jsc#PED-1549). - vdpa/mlx5: should not activate virtq object when suspended (jsc#PED-1549). - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (git-fixes). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#PED-1549). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253). - vdpa: Use BIT_ULL for bit operations (jsc#PED-1549). - vdpa: conditionally fill max max queue pair for stats (jsc#PED-1549). - vdpa: fix use-after-free on vp_vdpa_remove (git-fixes). - vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes). - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes). - vduse: Fix NULL pointer dereference on sysfs access (jsc#PED-1549). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (jsc#PED-1549). - vduse: avoid empty string for dev name (jsc#PED-1549). - vduse: check that offset is within bounds in get_config() (jsc#PED-1549). - vduse: fix memory corruption in vduse_dev_ioctl() (jsc#PED-1549). - vduse: prevent uninitialized memory accesses (jsc#PED-1549). - vfio/type1: prevent underflow of locked_vm via exec() (git-fixes). - vfio/type1: restore locked_vm (git-fixes). - vfio/type1: track locked_vm per dma (git-fixes). - vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642). - vfs: filename_create(): fix incorrect intent (bsc#1197534). - vfs: make sync_filesystem return errors from ->sync_fs (git-fixes). - vhost-vdpa: fix an iotlb memory leak (jsc#PED-1549). - vhost-vdpa: free iommu domain after last use during cleanup (jsc#PED-1549). - vhost/net: Clear the pending messages when the backend is removed (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (jsc#PED-1549). - vhost_vdpa: fix unmap process in no-batch mode (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253). - virt/coco/sev-guest: Add throttling awareness (bsc#1209927). - virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927). - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927). - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927). - virt/coco/sev-guest: Do some code style cleanups (bsc#1209927). - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927). - virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927). - virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449). - virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449). - virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449). - virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927). - virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449). - virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449). - virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449). - virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes). - virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes). - virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes). - virtio_net: split free_unused_bufs() (git-fixes). - virtio_net: suppress cpu stall when free_unused_bufs (git-fixes). - virtio_pci: modify ENOENT to EINVAL (git-fixes). - virtio_ring: do not update event idx on get_buf (git-fixes). - vmci: check context->notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes). - vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes). - vmxnet3: move rss code block under eop descriptor (bsc#1208212). - vmxnet3: use gro callback when UPT is enabled (bsc#1209739). - vp_vdpa: fix the crash in hot unplug with vp_vdpa (git-fixes). - w1: fix loop in w1_fini() (git-fixes). - w1: w1_therm: fix locking behavior in convert_t (git-fixes). - wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes) - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617). - watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes). - watchdog: allow building BCM7038_WDT for BCM4908 (bsc#1208619). - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes). - watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497). - watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497). - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes). - watchdog: ixp4xx: Implement restart (bsc#1208619). - watchdog: ixp4xx: Rewrite driver to use core (bsc#1208619). - watchdog: ixp4xx_wdt: Fix address space warning (bsc#1208619). - watchdog: menz069_wdt: fix watchdog initialisation (git-fixes). - watchdog: orion_wdt: support pretimeout on Armada-XP (bsc#1208619). - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes). - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes). - watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes). - wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes). - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes). - wifi: ath11k: allow system suspend to survive ath11k (git-fixes). - wifi: ath11k: fix SAC bug on peer addition with sta band migration (git-fixes). - wifi: ath11k: fix deinitialization of firmware resources (git-fixes). - wifi: ath11k: fix writing to unintended memory region (git-fixes). - wifi: ath11k: reduce the MHI timeout to 20s (bsc#1207948). - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes). - wifi: ath6kl: minor fix for allocation size (git-fixes). - wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes). - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes). - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes). - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes). - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: convert msecs to jiffies where needed (git-fixes). - wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes). - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes). - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes). - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes). - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes). - wifi: ath9k: use proper statements in conditionals (git-fixes). - wifi: ath: Silence memcpy run-time false positive warning (git-fixes). - wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes). - wifi: b43: fix incorrect __packed annotation (git-fixes). - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes). - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes). - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes). - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes). - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes). - wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes). - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes). - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes). - wifi: cfg80211: Fix use after free for wext (git-fixes). - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (git-fixes). - wifi: cfg80211: fix locking in regulatory disconnect (git-fixes). - wifi: cfg80211: fix locking in sched scan stop work (git-fixes). - wifi: cfg80211: rewrite merging of inherited elements (git-fixes). - wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes). - wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes). - wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes). - wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes). - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes). - wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes). - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes). - wifi: iwlwifi: fw: fix DBGI dump (git-fixes). - wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes). - wifi: iwlwifi: fw: move memset before early return (git-fixes). - wifi: iwlwifi: make the loop for card preparation effective (git-fixes). - wifi: iwlwifi: mvm: check firmware response size (git-fixes). - wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes). - wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes). - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes). - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes). - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (git-fixes). - wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes). - wifi: iwlwifi: mvm: initialize seq variable (git-fixes). - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes). - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes). - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes). - wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes). - wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes). - wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes). - wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes). - wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes). - wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (bsc#1209980). - wifi: mac80211: adjust scan cancel comment/check (git-fixes). - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes). - wifi: mac80211: fix min center freq offset tracing (git-fixes). - wifi: mac80211: fix qos on mesh interfaces (git-fixes). - wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes). - wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes). - wifi: mac80211: simplify chanctx allocation (git-fixes). - wifi: mt7601u: fix an integer underflow (git-fixes). - wifi: mt76: add flexible polling wait-interval support (git-fixes). - wifi: mt76: add memory barrier to SDIO queue kick (bsc#1209980). - wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes). - wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1209980). - wifi: mt76: fix 6GHz high channel not be scanned (git-fixes). - wifi: mt76: fix receiving LLC packets on mt7615/mt7915 (bsc#1209980). - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes). - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes). - wifi: mt76: mt7915: add missing of_node_put() (bsc#1209980). - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work (bsc#1209980). - wifi: mt76: mt7915: check return value before accessing free_block_num (bsc#1209980). - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() (bsc#1209980). - wifi: mt76: mt7915: expose device tree match table (git-fixes). - wifi: mt76: mt7915: fix mcs value in ht mode (bsc#1209980). - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit (git-fixes). - wifi: mt76: mt7915: fix mt7915_mac_set_timing() (bsc#1209980). - wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup (bsc#1209980). - wifi: mt76: mt7915: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() (bsc#1209980). - wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` (git-fixes). - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes). - wifi: mt76: mt7921e: fix crash in chip reset fail (bsc#1209980). - wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix rmmod crash in driver reload test (bsc#1209980). - wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes). - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (git-fixes). - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume (bsc#1209980). - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (bsc#1209980). - wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes). - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes). - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes). - wifi: mwifiex: mark OF related data as maybe unused (git-fixes). - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes). - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes). - wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes). - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes). - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes). - wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes). - wifi: rt2x00: Fix memory leak when handling surveys (git-fixes). - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes). - wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes). - wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes). - wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes). - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes). - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes). - wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes). - wifi: rtw89: Add missing check for alloc_workqueue (git-fixes). - wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes). - wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes). - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes). - wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wireguard: ratelimiter: use hrtimer in selftest (git-fixes) - workqueue: Fix hung time report of worker pools (bsc#1211044). - workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044). - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044). - workqueue: Warn when a new worker could not be created (bsc#1211044). - workqueue: Warn when a rescuer could not be created (bsc#1211044). - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769). - writeback: avoid use-after-free after removing device (bsc#1207638). - writeback: fix call of incorrect macro (bsc#1213024). - writeback: fix dereferencing NULL mapping->host on writeback_page_template (git-fixes). - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes). - x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes). - x86/ACPI/boot: Use FADT version to check support for online capable (git-fixes). - x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes). - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes). - x86/MCE/AMD: Use an u64 for bank_map (git-fixes). - x86/PAT: Have pat_enabled() properly reflect state when running on Xen (git-fixes). - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes). - x86/acpi/boot: Correct acpi_is_processor_usable() check (git-fixes). - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (git-fixes). - x86/alternative: Make debug-alternative selective (bsc#1206578). - x86/alternative: Report missing return thunk details (git-fixes). - x86/alternative: Support relocations in alternatives (bsc#1206578). - x86/amd: Use IBPB for firmware calls (git-fixes). - x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848). - x86/asm: Fix an assembler warning with current binutils (git-fixes). - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes). - x86/boot: Skip realmode init code when running as Xen PV guest (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes). - x86/bugs: Add 'unknown' reporting for MMIO Stale Data (git-fixes). - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes). - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes). - x86/bugs: Warn when 'ibrs' mitigation is selected on Enhanced IBRS parts (git-fixes). - x86/build: Avoid relocation information in final vmlinux (bsc#1187829). - x86/cpu: Add CPU model numbers for Meteor Lake (git fixes). - x86/cpu: Add Raptor Lake to Intel family (git fixes). - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes). - x86/cpu: Add new Raptor Lake CPU model number (git fixes). - x86/cpu: Add several Intel server CPU model numbers (git fixes). - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - x86/cpufeatures: Introduce x2AVIC CPUID bit (bsc#1208619). - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes). - x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes). - x86/entry: Avoid very early RET (git-fixes). - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes). - x86/entry: Do not call error_entry() for XENPV (git-fixes). - x86/entry: Move CLD to the start of the idtentry macro (git-fixes). - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes). - x86/entry: Switch the stack after error_entry() returns (git-fixes). - x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu: Cache xfeature flags from CPUID (git-fixes). - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes). - x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes). - x86/fpu: Mark init functions __init (bsc#1212448). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448). - x86/fpu: Prevent FPU state corruption (git-fixes). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes). - x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes). - x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes). - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes). - x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes). - x86/init: Initialize signal frame size late (bsc#1212448). - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes). - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes). - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes). - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes). - x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes). - x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes). - x86/microcode/AMD: Fix mixed steppings support (git-fixes). - x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes). - x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes). - x86/microcode: Add explicit CPU vendor dependency (git-fixes). - x86/microcode: Adjust late loading result reporting message (git-fixes). - x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes). - x86/microcode: Print previous version of microcode after reload (git-fixes). - x86/microcode: Rip out the OLD_INTERFACE (git-fixes). - x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes). - x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes). - x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Initialize text poking earlier (bsc#1212448). - x86/mm: Use mm_alloc() in poking_init() (bsc#1212448). - x86/mm: Use proper mask when setting PUD mapping (git-fixes). - x86/mm: fix poking_init() for Xen PV guests (git-fixes). - x86/msi: Fix msi message data shadow struct (git-fixes). - x86/msr: Add AMD CPPC MSR definitions (bsc#1212445). - x86/msr: Remove .fixup usage (git-fixes). - x86/nospec: Unwreck the RSB stuffing (git-fixes). - x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes). - x86/pat: Fix x86_has_pat_wp() (git-fixes). - x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes). - x86/perf/zhaoxin: Add stepping check for ZXC (git fixes). - x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes). - x86/perf: Default set FREEZE_ON_SMI for all (git fixes). - x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes). - x86/resctrl: Fix min_cbm_bits for AMD (git-fixes). - x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes). - x86/sgx: Fix free page accounting (git-fixes). - x86/sgx: Fix race between reclaimer and page fault handler (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/signal: Fix the value returned by strict_sas_size() (git-fixes). - x86/speculation/mmio: Print SMT warning (git-fixes). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes). - x86/static_call: Serialize __static_call_fixup() properly (git-fixes). - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes). - x86/topology: Fix duplicated core ID within a package (git-fixes). - x86/topology: Fix multiple packages shown on a single-package system (git-fixes). - x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes). - x86/tsx: Add a feature bit for TSX control MSR support (git-fixes). - x86/tsx: Disable TSX development mode at boot (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes). - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes). - x86/xen: fix secondary processor fpu initialization (bsc#1212869). - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Fix return value of __setup handlers (git-fixes). - x86: Handle idle=nomwait cmdline properly for x86_idle (bsc#1208619). - x86: Remove vendor checks from prefer_mwait_c1_over_halt (bsc#1208619). - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (git-fixes). - x86: centralize setting SWIOTLB_FORCE when guest memory encryption is enabled (jsc#PED-3259). - x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (git-fixes). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: remove cruft from &lt;asm/dma-mapping.h> (PED-3259). - xen-netfront: Fix NULL sring after live migration (git-fixes). - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes). - xen/arm: Fix race in RB-tree based P2M accounting (git-fixes) - xen/netback: do not do grant copy across page boundary (git-fixes). - xen/netback: do some code cleanup (git-fixes). - xen/netback: fix build warning (git-fixes). - xen/netback: use same error messages for same errors (git-fixes). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes). - xen/platform-pci: add missing free_irq() in error path (git-fixes). - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: convert ptag flags to unsigned (git-fixes). - xfs: do not assert fail on perag references on teardown (git-fixes). - xfs: do not leak btree cursor when insrec fails after a split (git-fixes). - xfs: estimate post-merge refcounts correctly (bsc#1208183). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix rm_offset flag handling in rmap keys (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: hoist refcount record merge predicates (bsc#1208183). - xfs: initialize the check_owner object fully (git-fixes). - xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: remove xfs_setattr_time() declaration (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes). - xfs: zero inode fork buffer at allocation (git-fixes). - xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci: Fix incorrect tracking of free space on transfer rings (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Free the command allocated for setting LPM if we return early (git-fixes). - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes). - xhci: fix debugfs register accesses while suspended (git-fixes). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes). - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes). - xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes). - zram: do not lookup algorithm in backends table (git-fixes). Important SUSE bug 1065729 SUSE bug 1109158 SUSE bug 1142685 SUSE bug 1152472 SUSE bug 1152489 SUSE bug 1155798 SUSE bug 1160435 SUSE bug 1166486 SUSE bug 1172073 SUSE bug 1174777 SUSE bug 1177529 SUSE bug 1186449 SUSE bug 1187829 SUSE bug 1189998 SUSE bug 1189999 SUSE bug 1191731 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1195175 SUSE bug 1195655 SUSE bug 1195921 SUSE bug 1196058 SUSE bug 1197534 SUSE bug 1197617 SUSE bug 1198101 SUSE bug 1198400 SUSE bug 1198438 SUSE bug 1198835 SUSE bug 1199304 SUSE bug 1199701 SUSE bug 1200054 SUSE bug 1202353 SUSE bug 1202633 SUSE bug 1203039 SUSE bug 1203200 SUSE bug 1203325 SUSE bug 1203331 SUSE bug 1203332 SUSE bug 1203693 SUSE bug 1203906 SUSE bug 1204356 SUSE bug 1204363 SUSE bug 1204662 SUSE bug 1204993 SUSE bug 1205153 SUSE bug 1205191 SUSE bug 1205205 SUSE bug 1205544 SUSE bug 1205650 SUSE bug 1205756 SUSE bug 1205758 SUSE bug 1205760 SUSE bug 1205762 SUSE bug 1205803 SUSE bug 1205846 SUSE bug 1206024 SUSE bug 1206036 SUSE bug 1206056 SUSE bug 1206057 SUSE bug 1206103 SUSE bug 1206224 SUSE bug 1206232 SUSE bug 1206340 SUSE bug 1206459 SUSE bug 1206492 SUSE bug 1206493 SUSE bug 1206552 SUSE bug 1206578 SUSE bug 1206640 SUSE bug 1206649 SUSE bug 1206677 SUSE bug 1206824 SUSE bug 1206843 SUSE bug 1206876 SUSE bug 1206877 SUSE bug 1206878 SUSE bug 1206880 SUSE bug 1206881 SUSE bug 1206882 SUSE bug 1206883 SUSE bug 1206884 SUSE bug 1206885 SUSE bug 1206886 SUSE bug 1206887 SUSE bug 1206888 SUSE bug 1206889 SUSE bug 1206890 SUSE bug 1206891 SUSE bug 1206893 SUSE bug 1206894 SUSE bug 1206935 SUSE bug 1206992 SUSE bug 1207034 SUSE bug 1207036 SUSE bug 1207050 SUSE bug 1207051 SUSE bug 1207088 SUSE bug 1207125 SUSE bug 1207149 SUSE bug 1207158 SUSE bug 1207168 SUSE bug 1207185 SUSE bug 1207270 SUSE bug 1207315 SUSE bug 1207328 SUSE bug 1207497 SUSE bug 1207500 SUSE bug 1207501 SUSE bug 1207506 SUSE bug 1207507 SUSE bug 1207521 SUSE bug 1207553 SUSE bug 1207560 SUSE bug 1207574 SUSE bug 1207588 SUSE bug 1207589 SUSE bug 1207590 SUSE bug 1207591 SUSE bug 1207592 SUSE bug 1207593 SUSE bug 1207594 SUSE bug 1207602 SUSE bug 1207603 SUSE bug 1207605 SUSE bug 1207606 SUSE bug 1207607 SUSE bug 1207608 SUSE bug 1207609 SUSE bug 1207610 SUSE bug 1207611 SUSE bug 1207612 SUSE bug 1207613 SUSE bug 1207614 SUSE bug 1207615 SUSE bug 1207616 SUSE bug 1207617 SUSE bug 1207618 SUSE bug 1207619 SUSE bug 1207620 SUSE bug 1207621 SUSE bug 1207622 SUSE bug 1207623 SUSE bug 1207624 SUSE bug 1207625 SUSE bug 1207626 SUSE bug 1207627 SUSE bug 1207628 SUSE bug 1207629 SUSE bug 1207630 SUSE bug 1207631 SUSE bug 1207632 SUSE bug 1207633 SUSE bug 1207634 SUSE bug 1207635 SUSE bug 1207636 SUSE bug 1207637 SUSE bug 1207638 SUSE bug 1207639 SUSE bug 1207640 SUSE bug 1207641 SUSE bug 1207642 SUSE bug 1207643 SUSE bug 1207644 SUSE bug 1207645 SUSE bug 1207646 SUSE bug 1207647 SUSE bug 1207648 SUSE bug 1207649 SUSE bug 1207650 SUSE bug 1207651 SUSE bug 1207652 SUSE bug 1207653 SUSE bug 1207734 SUSE bug 1207768 SUSE bug 1207769 SUSE bug 1207770 SUSE bug 1207771 SUSE bug 1207773 SUSE bug 1207795 SUSE bug 1207827 SUSE bug 1207842 SUSE bug 1207845 SUSE bug 1207875 SUSE bug 1207878 SUSE bug 1207933 SUSE bug 1207935 SUSE bug 1207948 SUSE bug 1208050 SUSE bug 1208076 SUSE bug 1208081 SUSE bug 1208105 SUSE bug 1208107 SUSE bug 1208128 SUSE bug 1208130 SUSE bug 1208149 SUSE bug 1208153 SUSE bug 1208183 SUSE bug 1208212 SUSE bug 1208219 SUSE bug 1208290 SUSE bug 1208368 SUSE bug 1208410 SUSE bug 1208420 SUSE bug 1208428 SUSE bug 1208429 SUSE bug 1208449 SUSE bug 1208534 SUSE bug 1208541 SUSE bug 1208542 SUSE bug 1208570 SUSE bug 1208588 SUSE bug 1208598 SUSE bug 1208599 SUSE bug 1208600 SUSE bug 1208601 SUSE bug 1208602 SUSE bug 1208604 SUSE bug 1208605 SUSE bug 1208607 SUSE bug 1208619 SUSE bug 1208628 SUSE bug 1208700 SUSE bug 1208741 SUSE bug 1208758 SUSE bug 1208759 SUSE bug 1208776 SUSE bug 1208777 SUSE bug 1208784 SUSE bug 1208787 SUSE bug 1208815 SUSE bug 1208816 SUSE bug 1208829 SUSE bug 1208837 SUSE bug 1208843 SUSE bug 1208845 SUSE bug 1208848 SUSE bug 1208864 SUSE bug 1208902 SUSE bug 1208948 SUSE bug 1208976 SUSE bug 1209008 SUSE bug 1209039 SUSE bug 1209052 SUSE bug 1209092 SUSE bug 1209159 SUSE bug 1209256 SUSE bug 1209258 SUSE bug 1209262 SUSE bug 1209287 SUSE bug 1209288 SUSE bug 1209290 SUSE bug 1209291 SUSE bug 1209292 SUSE bug 1209366 SUSE bug 1209367 SUSE bug 1209436 SUSE bug 1209457 SUSE bug 1209504 SUSE bug 1209532 SUSE bug 1209556 SUSE bug 1209600 SUSE bug 1209615 SUSE bug 1209635 SUSE bug 1209636 SUSE bug 1209637 SUSE bug 1209684 SUSE bug 1209687 SUSE bug 1209693 SUSE bug 1209739 SUSE bug 1209779 SUSE bug 1209780 SUSE bug 1209788 SUSE bug 1209798 SUSE bug 1209799 SUSE bug 1209804 SUSE bug 1209805 SUSE bug 1209856 SUSE bug 1209871 SUSE bug 1209927 SUSE bug 1209980 SUSE bug 1209982 SUSE bug 1209999 SUSE bug 1210034 SUSE bug 1210050 SUSE bug 1210158 SUSE bug 1210165 SUSE bug 1210202 SUSE bug 1210203 SUSE bug 1210206 SUSE bug 1210216 SUSE bug 1210230 SUSE bug 1210294 SUSE bug 1210301 SUSE bug 1210329 SUSE bug 1210335 SUSE bug 1210336 SUSE bug 1210337 SUSE bug 1210409 SUSE bug 1210439 SUSE bug 1210449 SUSE bug 1210450 SUSE bug 1210453 SUSE bug 1210454 SUSE bug 1210498 SUSE bug 1210506 SUSE bug 1210533 SUSE bug 1210551 SUSE bug 1210565 SUSE bug 1210584 SUSE bug 1210629 SUSE bug 1210644 SUSE bug 1210647 SUSE bug 1210725 SUSE bug 1210741 SUSE bug 1210762 SUSE bug 1210763 SUSE bug 1210764 SUSE bug 1210765 SUSE bug 1210766 SUSE bug 1210767 SUSE bug 1210768 SUSE bug 1210769 SUSE bug 1210770 SUSE bug 1210771 SUSE bug 1210775 SUSE bug 1210783 SUSE bug 1210791 SUSE bug 1210793 SUSE bug 1210806 SUSE bug 1210816 SUSE bug 1210817 SUSE bug 1210827 SUSE bug 1210853 SUSE bug 1210940 SUSE bug 1210943 SUSE bug 1210947 SUSE bug 1210953 SUSE bug 1210986 SUSE bug 1211014 SUSE bug 1211025 SUSE bug 1211037 SUSE bug 1211043 SUSE bug 1211044 SUSE bug 1211089 SUSE bug 1211105 SUSE bug 1211113 SUSE bug 1211131 SUSE bug 1211205 SUSE bug 1211263 SUSE bug 1211280 SUSE bug 1211281 SUSE bug 1211299 SUSE bug 1211346 SUSE bug 1211387 SUSE bug 1211400 SUSE bug 1211410 SUSE bug 1211414 SUSE bug 1211449 SUSE bug 1211465 SUSE bug 1211519 SUSE bug 1211564 SUSE bug 1211590 SUSE bug 1211592 SUSE bug 1211593 SUSE bug 1211595 SUSE bug 1211654 SUSE bug 1211686 SUSE bug 1211687 SUSE bug 1211688 SUSE bug 1211689 SUSE bug 1211690 SUSE bug 1211691 SUSE bug 1211692 SUSE bug 1211693 SUSE bug 1211714 SUSE bug 1211794 SUSE bug 1211796 SUSE bug 1211804 SUSE bug 1211807 SUSE bug 1211808 SUSE bug 1211820 SUSE bug 1211836 SUSE bug 1211847 SUSE bug 1211852 SUSE bug 1211855 SUSE bug 1211960 SUSE bug 1212051 SUSE bug 1212129 SUSE bug 1212154 SUSE bug 1212155 SUSE bug 1212158 SUSE bug 1212265 SUSE bug 1212350 SUSE bug 1212445 SUSE bug 1212448 SUSE bug 1212456 SUSE bug 1212494 SUSE bug 1212495 SUSE bug 1212504 SUSE bug 1212513 SUSE bug 1212540 SUSE bug 1212556 SUSE bug 1212561 SUSE bug 1212563 SUSE bug 1212564 SUSE bug 1212584 SUSE bug 1212592 SUSE bug 1212603 SUSE bug 1212605 SUSE bug 1212606 SUSE bug 1212619 SUSE bug 1212685 SUSE bug 1212701 SUSE bug 1212741 SUSE bug 1212835 SUSE bug 1212838 SUSE bug 1212842 SUSE bug 1212848 SUSE bug 1212861 SUSE bug 1212869 SUSE bug 1212892 SUSE bug 1212961 SUSE bug 1213010 SUSE bug 1213011 SUSE bug 1213012 SUSE bug 1213013 SUSE bug 1213014 SUSE bug 1213015 SUSE bug 1213016 SUSE bug 1213017 SUSE bug 1213018 SUSE bug 1213019 SUSE bug 1213020 SUSE bug 1213021 SUSE bug 1213024 SUSE bug 1213025 SUSE bug 1213032 SUSE bug 1213034 SUSE bug 1213035 SUSE bug 1213036 SUSE bug 1213037 SUSE bug 1213038 SUSE bug 1213039 SUSE bug 1213040 SUSE bug 1213041 SUSE bug 1213087 SUSE bug 1213088 SUSE bug 1213089 SUSE bug 1213090 SUSE bug 1213092 SUSE bug 1213093 SUSE bug 1213094 SUSE bug 1213095 SUSE bug 1213096 SUSE bug 1213098 SUSE bug 1213099 SUSE bug 1213100 SUSE bug 1213102 SUSE bug 1213103 SUSE bug 1213104 SUSE bug 1213105 SUSE bug 1213106 SUSE bug 1213107 SUSE bug 1213108 SUSE bug 1213109 SUSE bug 1213110 SUSE bug 1213111 SUSE bug 1213112 SUSE bug 1213113 SUSE bug 1213114 SUSE bug 1213116 SUSE bug 1213134 CVE-2022-36280 CVE-2022-38096 CVE-2022-4269 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2022-4744 CVE-2023-0045 CVE-2023-0122 CVE-2023-0179 CVE-2023-0394 CVE-2023-0461 CVE-2023-0469 CVE-2023-0590 CVE-2023-0597 CVE-2023-1075 CVE-2023-1076 CVE-2023-1077 CVE-2023-1079 CVE-2023-1095 CVE-2023-1118 CVE-2023-1249 CVE-2023-1382 CVE-2023-1513 CVE-2023-1582 CVE-2023-1583 CVE-2023-1611 CVE-2023-1637 CVE-2023-1652 CVE-2023-1670 CVE-2023-1829 CVE-2023-1838 CVE-2023-1855 CVE-2023-1989 CVE-2023-1998 CVE-2023-2002 CVE-2023-21102 CVE-2023-21106 CVE-2023-2124 CVE-2023-2156 CVE-2023-2162 CVE-2023-2176 CVE-2023-2235 CVE-2023-2269 CVE-2023-22998 CVE-2023-23000 CVE-2023-23001 CVE-2023-23004 CVE-2023-23006 CVE-2023-2430 CVE-2023-2483 CVE-2023-25012 CVE-2023-2513 CVE-2023-26545 CVE-2023-28327 CVE-2023-28410 CVE-2023-28464 CVE-2023-28866 CVE-2023-3006 CVE-2023-30456 CVE-2023-30772 CVE-2023-3090 CVE-2023-31084 CVE-2023-3111 CVE-2023-3141 CVE-2023-31436 CVE-2023-3161 CVE-2023-3212 CVE-2023-3220 CVE-2023-32233 CVE-2023-33288 CVE-2023-3357 CVE-2023-3358 CVE-2023-3389 CVE-2023-33951 CVE-2023-33952 CVE-2023-35788 CVE-2023-35823 CVE-2023-35828 CVE-2023-35829 cpe:/o:suse:sle-ha:15:sp5 Security update for samba (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for samba fixes the following issues: samba was updated to version 4.17.9: - CVE-2022-2127: Fixed issue where lm_resp_len was not checked properly in winbindd_pam_auth_crap_send (bsc#1213174). - CVE-2023-34966: Fixed samba spotlight mdssvc RPC Request Infinite Loop Denial-of-Service Vulnerability (bsc#1213173). - CVE-2023-34967: Fixed samba spotlight mdssvc RPC Request Type Confusion Denial-of-Service Vulnerability (bsc#1213172). - CVE-2023-34968: Fixed spotlight server-side Share Path Disclosure (bsc#1213171). - CVE-2023-3347: Fixed issue where SMB2 packet signing not enforced (bsc#1213170). - CVE-2020-25720: Fixed issue where creating child permission allowed full write to all attributes (bsc#1213386). Bugfixes: - Fixed trust relationship failure (bsc#1213384). - Backported --pidl-developer fixes. - Fixed smbd_scavenger crash when service smbd is stopped. - Fixed issue where vfs_fruit might cause a failing open for delete. - Fixed named crashes on DLZ zone update. - Fixed issue where winbind recurses into itself via rpcd_lsad. - Fixed cli_list looping 100% CPU against pre-lanman2 servers. - Fixed smbclient leaks fds with showacls. - Fixed aes256 smb3 encryption algorithms not allowed in smb3_sid_parse(). - Fixed winbindd getting stuck on NT_STATUS_RPC_SEC_PKG_ERROR. - Fixed smbget memory leak if failed to download files recursively. - Fixed log flood: smbd_calculate_access_mask_fsp: Access denied: message level should be lower. - Fixed floating point exception (FPE) via cli_pull_send at source3/libsmb/clireadwrite.c. - Fixed test_tstream_more_tcp_user_timeout_spin fails intermittently on Rackspace GitLab runners. - Reduce flapping of ridalloc test. - Fixed unreliable large_ldap test. - Fixed filename parser not checking veto files smb.conf parameter. - Fixed mdssvc may crash when initializing. - Fixed broken large directory optimization for non-lcomp path elements - Fixed streams_depot failing to create streams. - Fixed shadow_copy2 and streams_depot issues. - Fixed wbinfo -u fails on ad dc with >1000 users. - Fixed winbindd idmap child contacting the domain controller without a need. - Fixed idmap_autorid may fail to map sids of trusted domains for the first time. - Fixed idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings. - Fixed net ads search -P doesn't work against servers in other domains. - Fixed DS ACEs might be inherited to unrelated object classes. - Fixed temporary smbXsrv_tcon_global.tdb can't be parsed. - Fixed setting veto files = /.*/ breaking listing directories (bsc#1212375). - Fixed dsgetdcname assuming local system uses IPv4. Important SUSE bug 1212375 SUSE bug 1213170 SUSE bug 1213171 SUSE bug 1213172 SUSE bug 1213173 SUSE bug 1213174 SUSE bug 1213384 SUSE bug 1213386 CVE-2020-25720 CVE-2022-2127 CVE-2023-3347 CVE-2023-34966 CVE-2023-34967 CVE-2023-34968 cpe:/o:suse:sle-ha:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). The following non-security bugs were fixed: - Dropped patch that caused issues with k3s (bsc#1213705). - ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes). - ASoC: SOF: topology: Fix logic for copying tuples (git-fixes). - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes). - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes). - Bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes). - Bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes). - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - Bluetooth: fix use-bdaddr-property quirk (git-fixes). - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - Bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes). - Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758) - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525). - PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes) - Revert 'drm/i915: Disable DSB usage for now' (git-fixes). - USB: dwc2: Fix some error handling paths (git-fixes). - USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). - USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). - USB: typec: Fix fast_role_swap_current show function (git-fixes). - Update config and supported.conf files due to renaming. - acpi: Fix suspend with Xen PV (git-fixes). - adreno: Shutdown the GPU properly (git-fixes). - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes) - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes) - arm64: vdso: Pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - can: bcm: Fix UAF in bcm_proc_show() (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in DebugData (bsc#1193629). - cifs: print client_guid in DebugData (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: tegra194: Fix module loading (git-fixes). - devlink: fix kernel-doc notation warnings (git-fixes). - dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: Add Z8 allow states to z-state support list (git-fixes). - drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes). - drm/amd/display: Add minimum Z8 residency debug option (git-fixes). - drm/amd/display: Add missing WA and MCLK validation (git-fixes). - drm/amd/display: Change default Z8 watermark values (git-fixes). - drm/amd/display: Correct DML calculation to align HW formula (git-fixes). - drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes). - drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes). - drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes). - drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes). - drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes). - drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes). - drm/amd/display: Fix Z8 support configurations (git-fixes). - drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes). - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: Have Payload Properly Created After Resume (git-fixes). - drm/amd/display: Lowering min Z8 residency time (git-fixes). - drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: Refactor eDP PSR codes (git-fixes). - drm/amd/display: Remove FPU guards from the DML folder (git-fixes). - drm/amd/display: Remove optimization for VRR updates (git-fixes). - drm/amd/display: Remove stutter only configurations (git-fixes). - drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes). - drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes). - drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes). - drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes). - drm/amd/pm: resolve reboot exception for si oland (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (git-fixes). - drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (git-fixes). - drm/amd/pm: workaround for compute workload type on some skus (git-fixes). - drm/amd: Add a new helper for loading/validating microcode (git-fixes). - drm/amd: Do not allow s0ix on APUs older than Raven (git-fixes). - drm/amd: Load MES microcode during early_init (git-fixes). - drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes). - drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (git-fixes). - drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes). - drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes). - drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes). - drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes). - drm/amdgpu/mes11: enable reg active poll (git-fixes). - drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes (git-fixes). - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes). - drm/amdgpu: Do not set struct drm_driver.output_poll_changed (git-fixes). - drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes). - drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes). - drm/amdgpu: Fix sdma v4 sw fini error (git-fixes). - drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes). - drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs (git-fixes). - drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes). - drm/amdgpu: change reserved vram info print (git-fixes). - drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes). - drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes). - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes). - drm/amdgpu: refine get gpu clock counter method (git-fixes). - drm/amdgpu: remove deprecated MES version vars (git-fixes). - drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes). - drm/amdgpu: set gfx9 onwards APU atomics support to be true (git-fixes). - drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes). - drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes). - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() (git-fixes). - drm/bridge: anx7625: Prevent endless probe loop (git-fixes). - drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes). - drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes). - drm/client: Fix memory leak in drm_client_target_cloned (git-fixes). - drm/display/dp_mst: Fix payload addition on a disconnected sink (git-fixes). - drm/display: Do not block HDR_OUTPUT_METADATA on unknown EOTF (git-fixes). - drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes). - drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes). - drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage (git-fixes). - drm/etnaviv: move idle mapping reaping into separate function (git-fixes). - drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes). - drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs (bsc#1213493). - drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes). - drm/i915/gt: Cleanup partial engine discovery failures (git-fixes). - drm/i915/guc: Add error-capture init warnings when needed (git-fixes). - drm/i915/guc: Fix missing ecodes (git-fixes). - drm/i915/guc: Limit scheduling properties to avoid overflow (git-fixes). - drm/i915/guc: Rename GuC register state capture node to be more obvious (git-fixes). - drm/i915/mtl: update scaler source and destination limits for MTL (git-fixes). - drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs (git-fixes). - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes). - drm/i915/tc: Fix TC port link ref init for DP MST during HW readout (git-fixes). - drm/i915: Allow panel fixed modes to have differing sync polarities (git-fixes). - drm/i915: Check pipe source size when using skl+ scalers (git-fixes). - drm/i915: Do panel VBT init early if the VBT declares an explicit panel type (git-fixes). - drm/i915: Fix TypeC mode initialization during system resume (git-fixes). - drm/i915: Fix a memory leak with reused mmap_offset (git-fixes). - drm/i915: Fix negative value passed as remaining time (git-fixes). - drm/i915: Fix one wrong caching mode enum usage (git-fixes). - drm/i915: Introduce intel_panel_init_alloc() (git-fixes). - drm/i915: Never return 0 if not all requests retired (git-fixes). - drm/i915: Populate encoder->devdata for DSI on icl+ (git-fixes). - drm/i915: Print return value on error (git-fixes). - drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes). - drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (git-fixes). - drm/msm/a5xx: really check for A510 in a5xx_gpu_init (git-fixes). - drm/msm/adreno: Simplify read64/write64 helpers (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: Add DSC hardware blocks to register snapshot (git-fixes). - drm/msm/dpu: Assign missing writeback log_mask (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes). - drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register (git-fixes). - drm/msm/hdmi: use devres helper for runtime PM management (git-fixes). - drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable (git-fixes). - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes). - drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes). - drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes). - drm/ttm: Do not leak a resource on swapout move error (git-fixes). - drm/virtio: Fix memory leak in virtio_gpu_object_create() (git-fixes). - drm/virtio: Simplify error handling of virtio_gpu_object_create() (git-fixes). - drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable (git-fixes). - drm/vmwgfx: Remove ttm object hashtable (git-fixes). - drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes). - drm/vmwgfx: Write the driver id registers (git-fixes). - drm: Add fixed-point helper to get rounded integer values (git-fixes). - drm: Add missing DP DSC extended capability definitions (git-fixes). - drm: Optimize drm buddy top-down allocation method (git-fixes). - drm: buddy_allocator: Fix buddy allocator init on 32-bit systems (git-fixes). - drm: panel-orientation-quirks: Add quirk for DynaBook K50 (git-fixes). - drm: rcar-du: Add quirk for H3 ES1.x pclk workaround (git-fixes). - drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes). - drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes). - fuse: ioctl: translate ENOSYS in outarg (bsc#1213524). - fuse: revalidate: do not invalidate if interrupted (bsc#1213523). - i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226). - irqchip/gic-v3: Claim iomem resources (bsc#1213533) - irqchip/gicv3: Handle resource request failure consistently (bsc#1213533) - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533) - kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243). - kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers - kabi/severities: ignore kABI of i915 module It's exported only for its sub-module, not really used by externals - kabi/severities: ignore kABI of vmwgfx The driver exports a function unnecessarily without used by anyone else. Ignore the kABI changes. - memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905). - net: mana: Add support for vlan tagging (bsc#1212301). - net: phy: prevent stale pointer dereference in phy_init() (git-fixes). - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (git-fixes). - net: qrtr: start MHI channel after endpoit creation (git-fixes). - nilfs2: reject devices with insufficient block count (git-fixes). - ocfs2: Switch to security_inode_init_security() (git-fixes). - ocfs2: check new file size on fallocate call (git-fixes). - ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes). - perf/x86/amd/core: Always clear status for idx (bsc#1213233). - pie: fix kernel-doc notation warning (git-fixes). - powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869). - powerpc/64s: Fix VAS mm use after free (bsc#1194869). - powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869). - powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869). - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869). - powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869). - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes). - powerpc/mm: Switch obsolete dssall to .long (bsc#1194869). - powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869). - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869). - powerpc/prom_init: Fix kernel config grep (bsc#1194869). - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (jsc#PED-542 git-fixes). - powerpc/secvar: fix refcount leak in format_show() (bsc#1194869). - powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869). - powerpc: clean vdso32 and vdso64 directories (bsc#1194869). - powerpc: define get_cycles macro for arch-override (bsc#1194869). - powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869). - rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*. - rsi: remove kernel-doc comment marker (git-fixes). - s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259). - s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258). - s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263). - s390/pci: clean up left over special treatment for function zero (bsc#1212525). - s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525). - s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525). - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252). - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt; 2.36 (git-fixes bsc#1213264). - s390: discard .interp section (git-fixes bsc#1213247). - security: keys: Modify mismatched function name (git-fixes). - selftests/ir: fix build with ancient kernel headers (git-fixes). - selftests: cgroup: fix unsigned comparison with less than zero (git-fixes). - selftests: forwarding: Fix packet matching in mirroring selftests (git-fixes). - selftests: tc: add 'ct' action kconfig dep (git-fixes). - selftests: tc: add ConnTrack procfs kconfig (git-fixes). - selftests: tc: set timeout to 15 minutes (git-fixes). - signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869). - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869). - smb3: do not reserve too many oplock credits (bsc#1193629). - smb3: missing null check in SMB2_change_notify (bsc#1193629). - smb: client: fix broken file attrs with nodfs mounts (bsc#1193629). - smb: client: fix missed ses refcounting (git-fixes). - smb: client: fix parsing of source mount option (bsc#1193629). - smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629). - smb: client: fix warning in CIFSFindFirst() (bsc#1193629). - smb: client: fix warning in CIFSFindNext() (bsc#1193629). - smb: client: fix warning in cifs_match_super() (bsc#1193629). - smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629). - smb: client: fix warning in generic_ip_connect() (bsc#1193629). - smb: client: improve DFS mount check (bsc#1193629). - smb: client: remove redundant pointer 'server' (bsc#1193629). - smb: delete an unnecessary statement (bsc#1193629). - smb: move client and server files to common directory fs/smb (bsc#1193629). - smb: remove obsolete comment (bsc#1193629). - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (git-fixes). - soundwire: cadence: Drain the RX FIFO after an IO timeout (git-fixes). - soundwire: stream: Add missing clear of alloc_slave_rt (git-fixes). - spi: bcm63xx: fix max prepend length (git-fixes). - swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes). - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes). - wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes). - wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart (git-fixes). - wifi: ath11k: Add missing check for ioremap (git-fixes). - wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes). - x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes). - x86/platform/uv: Add platform resolving #defines for misc GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Fix printed information in calc_mmioh_map (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Remove remaining BUG_ON() and BUG() calls (bsc#1212256 jsc#PED-4718). - x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Update UV platform code for SNC (bsc#1212256 jsc#PED-4718). - x86/platform/uv: When searching for minimums, start at INT_MAX not 99999 (bsc#1212256 jsc#PED-4718). - x86: Fix .brk attribute in linker script (git-fixes). - xfs: clean up the rtbitmap fsmap backend (git-fixes). - xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes). - xfs: do not reverse order of items in bulk AIL insertion (git-fixes). - xfs: fix getfsmap reporting past the last rt extent (git-fixes). - xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes). - xfs: fix interval filtering in multi-step fsmap queries (git-fixes). - xfs: fix logdev fsmap query result filtering (git-fixes). - xfs: fix off-by-one error when the last rt extent is in use (git-fixes). - xfs: fix uninitialized variable access (git-fixes). - xfs: make fsmap backend function key parameters const (git-fixes). - xfs: make the record pointer passed to query_range functions const (git-fixes). - xfs: pass explicit mount pointer to rtalloc query functions (git-fixes). Important SUSE bug 1150305 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1207894 SUSE bug 1208788 SUSE bug 1211243 SUSE bug 1211867 SUSE bug 1212256 SUSE bug 1212301 SUSE bug 1212525 SUSE bug 1212846 SUSE bug 1212905 SUSE bug 1213059 SUSE bug 1213061 SUSE bug 1213205 SUSE bug 1213206 SUSE bug 1213226 SUSE bug 1213233 SUSE bug 1213245 SUSE bug 1213247 SUSE bug 1213252 SUSE bug 1213258 SUSE bug 1213259 SUSE bug 1213263 SUSE bug 1213264 SUSE bug 1213286 SUSE bug 1213493 SUSE bug 1213523 SUSE bug 1213524 SUSE bug 1213533 SUSE bug 1213543 SUSE bug 1213705 CVE-2023-20593 CVE-2023-2985 CVE-2023-3117 CVE-2023-31248 CVE-2023-3390 CVE-2023-35001 CVE-2023-3812 cpe:/o:suse:sle-ha:15:sp5 Security update for rubygem-actionpack-5_1 (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-actionpack-5_1 fixes the following issues: - CVE-2023-28362: Fixed possible XSS via User Supplied Values to redirect_to (bsc#1213312). Important SUSE bug 1213312 CVE-2023-28362 cpe:/o:suse:sle-ha:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627). - CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417). - CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812). The following non-security bugs were fixed: - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445). - ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445). - ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes). - ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes). - afs: Adjust ACK interpretation to try and cope with NAT (git-fixes). - afs: Fix access after dec in put functions (git-fixes). - afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes). - afs: Fix dynamic root getattr (git-fixes). - afs: Fix fileserver probe RTT handling (git-fixes). - afs: Fix infinite loop found by xfstest generic/676 (git-fixes). - afs: Fix lost servers_outstanding count (git-fixes). - afs: Fix server->active leak in afs_put_server (git-fixes). - afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes). - afs: Fix updating of i_size with dv jump from server (git-fixes). - afs: Fix vlserver probe RTT handling (git-fixes). - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes). - afs: Use refcount_t rather than atomic_t (git-fixes). - afs: Use the operation issue time instead of the reply time for callbacks (git-fixes). - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes). - ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes). - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes). - ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes). - ALSA: hda/realtek - remove 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes). - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes). - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes). - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129). - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes). - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes). - ALSA: usb-audio: Avoid unnecessary interface change at EP close (git-fixes). - ALSA: usb-audio: Clear fixed clock rate at closing EP (git-fixes). - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Drop superfluous interface setup at parsing (git-fixes). - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes). - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes). - ALSA: usb-audio: More refactoring of hw constraint rules (git-fixes). - ALSA: usb-audio: Properly refcounting clock rate (git-fixes). - ALSA: usb-audio: Rate limit usb_set_interface error reporting (git-fixes). - ALSA: usb-audio: Refcount multiple accesses on the single clock (git-fixes). - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (git-fixes). - ALSA: usb-audio: Update for native DSD support quirks (git-fixes). - ALSA: usb-audio: Use atomic_try_cmpxchg in ep_state_update (git-fixes). - ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes). - amd-pstate: Fix amd_pstate mode switch (git-fixes). - ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes). - ASoC: atmel: Fix the 8K sample parameter in I2SC master (git-fixes). - ASoc: codecs: ES8316: Fix DMIC config (git-fixes). - ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes). - ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes). - ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes). - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes). - ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes). - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes). - ASoC: da7219: Check for failure reading AAD IRQ events (git-fixes). - ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes). - ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes). - ASoC: fsl_spdif: Silence output on stop (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes). - ASoC: tegra: Fix ADX byte map (git-fixes). - ASoC: tegra: Fix AMX byte map (git-fixes). - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (git-fixes). - ata: pata_ns87415: mark ns87560_tf_read static (git-fixes). - block, bfq: Fix division by zero error on zero wsum (bsc#1213653). - block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes). - bus: mhi: add new interfaces to handle MHI channels directly (bsc#1207948). - bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948). - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes). - ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856). - coda: Avoid partial allocation of sig_inputArgs (git-fixes). - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State frequencies attributes (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State performance attributes (bsc#1212445). - cpufreq: amd-pstate: Add boost mode support for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445). - cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445). - cpufreq: amd-pstate: Add fast switch function for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: Add guided autonomous mode (bsc#1212445). - cpufreq: amd-pstate: Add guided mode control support via sysfs (bsc#1212445). - cpufreq: amd-pstate: Add more tracepoint for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: Add resume and suspend callbacks (bsc#1212445). - cpufreq: amd-pstate: Add trace for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445). - cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445). - cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445). - cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL register at init (bsc#1212445). - cpufreq: amd-pstate: Expose struct amd_cpudata (bsc#1212445). - cpufreq: amd-pstate: Fix initial highest_perf value (bsc#1212445). - cpufreq: amd-pstate: Fix invalid write to MSR_AMD_CPPC_REQ (bsc#1212445). - cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445). - cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment (bsc#1212445). - cpufreq: amd-pstate: fix white-space (bsc#1212445). - cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445). - cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445). - cpufreq: amd-pstate: implement Pstate EPP support for the AMD processors (bsc#1212445). - cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445). - cpufreq: amd-pstate: Introduce a new AMD P-State driver to support future processors (bsc#1212445). - cpufreq: amd-pstate: Introduce the support for the processors with shared memory solution (bsc#1212445). - cpufreq: amd-pstate: Let user know amd-pstate is disabled (bsc#1212445). - cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated (bsc#1212445). - cpufreq: amd-pstate: Make varaiable mode_state_machine static (bsc#1212445). - cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445). - cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (bsc#1212445). - cpufreq: amd-pstate: Remove fast_switch_possible flag from active driver (bsc#1212445). - cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules (bsc#1212445). - cpufreq: amd-pstate: Set a fallback policy based on preferred_profile (bsc#1212445). - cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445). - cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() (bsc#1212445). - cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445). - cpufreq: amd-pstate: Write CPPC enable bit per-socket (bsc#1212445). - crypto: kpp - Add helper to set reqsize (git-fixes). - crypto: qat - Use helper to set reqsize (git-fixes). - dlm: fix missing lkb refcount handling (git-fixes). - dlm: fix plock invalid read (git-fixes). - Documentation: cpufreq: amd-pstate: Move amd_pstate param to alphabetical order (bsc#1212445). - Documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes). - drm/amd/display: Add monitor specific edid quirk (git-fixes). - drm/amd/display: Add polling method to handle MST reply packet (bsc#1213578). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes). - drm/amd/display: Disable MPC split by default on special asic (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix seamless odm transitions (git-fixes). - drm/amd/display: Keep PHY active for DP displays on DCN31 (git-fixes). - drm/amd/display: only accept async flips for fast updates (git-fixes). - drm/amd/display: Only update link settings after successful MST link train (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() (git-fixes). - drm/amd: Fix an error handling mistake in psp_sw_init() (git-fixes). - drm/amdgpu: add the fan abnormal detection feature (git-fixes). - drm/amdgpu: avoid restore process run into dead loop (git-fixes). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes). - drm/amdgpu: Fix minmax warning (git-fixes). - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes). - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 (git-fixes). - drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes). - drm/amd/pm: share the code around SMU13 pcie parameters update (git-fixes). - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes). - drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (git-fixes). - drm/client: Fix memory leak in drm_client_modeset_probe (git-fixes). - drm/dp_mst: Clear MSG_RDY flag before sending new message (bsc#1213578). - drm: Fix null pointer dereference in drm_dp_atomic_find_time_slots() (bsc#1213578). - drm/i915: Do not preserve dpll_hw_state for slave crtc in Bigjoiner (git-fixes). - drm/i915/dpt: Use shmem for dpt objects (git-fixes). - drm/i915: Fix an error handling path in igt_write_huge() (git-fixes). - drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks (git-fixes). - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (git-fixes). - drm/radeon: Fix integer overflow in radeon_cs_parser_init (git-fixes). - drm/ttm: fix bulk_move corruption when adding a entry (git-fixes). - drm/ttm: fix warning that we shouldn't mix && and || (git-fixes). - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (bsc#1213632). - drm/vmwgfx: Remove explicit and broken vblank handling (bsc#1213632). - drm/vmwgfx: Remove rcu locks from user resources (bsc#1213632). - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes). - fbdev: imxfb: Removed unneeded release_mem_region (git-fixes). - fbdev: imxfb: warn about invalid left/right margin (git-fixes). - file: always lock position for FMODE_ATOMIC_POS (bsc#1213759). - fs: dlm: add midcomms init/start functions (git-fixes). - fs: dlm: do not set stop rx flag after node reset (git-fixes). - fs: dlm: filter user dlm messages for kernel locks (git-fixes). - fs: dlm: fix log of lowcomms vs midcomms (git-fixes). - fs: dlm: fix race between test_bit() and queue_work() (git-fixes). - fs: dlm: fix race in lowcomms (git-fixes). - fs: dlm: handle -EBUSY first in lock arg validation (git-fixes). - fs: dlm: move sending fin message into state change handling (git-fixes). - fs: dlm: retry accept() until -EAGAIN or error returns (git-fixes). - fs: dlm: return positive pid value for F_GETLK (git-fixes). - fs: dlm: start midcomms before scand (git-fixes). - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (git-fixes). - FS: JFS: Check for read-only mounted filesystem in txBegin (git-fixes). - FS: JFS: Fix null-ptr-deref Read in txBegin (git-fixes). - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (git-fixes). - gve: Set default duplex configuration to full (git-fixes). - gve: unify driver name usage (git-fixes). - hwmon: (adm1275) Allow setting sample averaging (git-fixes). - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (git-fixes). - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (git-fixes). - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes). - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes). - i2c: xiic: Do not try to handle more interrupt events after error (git-fixes). - iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED (git-fixes). - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes). - iavf: Fix out-of-bounds when setting channels on remove (git-fixes). - iavf: fix potential deadlock on allocation failure (git-fixes). - iavf: fix reset task race with iavf_remove() (git-fixes). - iavf: Fix use-after-free in free_netdev (git-fixes). - iavf: Move netdev_update_features() into watchdog task (git-fixes). - iavf: use internal state to free traffic IRQs (git-fixes). - iavf: Wait for reset in callbacks which trigger it (git-fixes). - IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes) - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - ice: handle extts in the miscellaneous interrupt thread (git-fixes). - igc: Check if hardware TX timestamping is enabled earlier (git-fixes). - igc: Enable and fix RX hash usage by netstack (git-fixes). - igc: Fix inserting of empty frame for launchtime (git-fixes). - igc: Fix Kernel Panic during ndo_tx_timeout callback (git-fixes). - igc: Fix launchtime before start of cycle (git-fixes). - igc: Fix race condition in PTP tx code (git-fixes). - igc: Handle PPS start time programming for past time values (git-fixes). - igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes). - igc: Remove delay during TX ring configuration (git-fixes). - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes). - igc: Work around HW bug causing missing timestamps (git-fixes). - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (git-fixes). - Input: iqs269a - do not poll during ATI (git-fixes). - Input: iqs269a - do not poll during suspend or resume (git-fixes). - jffs2: fix memory leak in jffs2_do_fill_super (git-fixes). - jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes). - jffs2: fix memory leak in jffs2_scan_medium (git-fixes). - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes). - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (git-fixes). - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes). - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (git-fixes). - kABI fix after Restore kABI for NVidia vGPU driver (bsc#1210825). - kabi/severities: relax kABI for ath11k local symbols (bsc#1207948) - kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes). - KVM: arm64: Do not read a HW interrupt pending state in user context (git-fixes) - KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620) - KVM: Do not null dereference ops->destroy (git-fixes) - KVM: downgrade two BUG_ONs to WARN_ON_ONCE (git-fixes) - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL (git-fixes) - KVM: s390: pv: fix index value of replaced ASCE (git-fixes bsc#1213867). - KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported (git-fixes). - KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) (git-fixes). - KVM: VMX: restore vmx_vmexit alignment (git-fixes). - KVM: x86: Account fastpath-only VM-Exits in vCPU stats (git-fixes). - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes). - libceph: harden msgr2.1 frame segment length checks (bsc#1213857). - MAINTAINERS: Add AMD P-State driver maintainer entry (bsc#1212445). - m ALSA: usb-audio: Add quirk for Tascam Model 12 (git-fixes). - md: add error_handlers for raid0 and linear (bsc#1212766). - media: staging: atomisp: select V4L2_FWNODE (git-fixes). - mhi_power_down() kABI workaround (bsc#1207948). - mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes). - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes). - net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes). - net: mana: Batch ringing RX queue doorbell on receiving packets (bsc#1212901). - net: mana: Use the correct WQE count for ringing RQ doorbell (bsc#1212901). - net/mlx5: DR, Support SW created encap actions for FW table (git-fixes). - net/mlx5e: Check for NOT_READY flag state after locking (git-fixes). - net/mlx5e: fix double free in mlx5e_destroy_flow_table (git-fixes). - net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (git-fixes). - net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes). - net/mlx5e: XDP, Allow growing tail for XDP multi buffer (git-fixes). - net/mlx5e: xsk: Set napi_id to support busy polling on XSK RQ (git-fixes). - net: phy: marvell10g: fix 88x3310 power up (git-fixes). - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585). - nfsd: add encoding of op_recall flag for write delegation (git-fixes). - nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes). - nfsd: Fix sparse warning (git-fixes). - nfsd: Remove open coding of string copy (git-fixes). - nfsv4.1: Always send a RECLAIM_COMPLETE after establishing lease (git-fixes). - nfsv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (git-fixes). - nvme: do not reject probe due to duplicate IDs for single-ported PCIe devices (git-fixes). - nvme: fix the NVME_ID_NS_NVM_STS_MASK definition (git-fixes). - nvme-pci: fix DMA direction of unmapping integrity data (git-fixes). - nvme-pci: remove nvme_queue from nvme_iod (git-fixes). - octeontx2-af: Move validation of ptp pointer before its usage (git-fixes). - octeontx2-pf: Add additional check for MCAM rules (git-fixes). - octeontx-af: fix hardware timestamp configuration (git-fixes). - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes). - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes). - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (git-fixes). - pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes). - pinctrl: amd: Do not show `Invalid config param` errors (git-fixes). - pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes). - pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes). - pinctrl: amd: Use amd_pinconf_set() for all config options (git-fixes). - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (git-fixes). - RDMA/bnxt_re: Fix hang during driver unload (git-fixes) - RDMA/bnxt_re: Prevent handling any completions after qp destroy (git-fixes) - RDMA/core: Update CMA destination address on rdma_resolve_addr (git-fixes) - RDMA/irdma: Add missing read barriers (git-fixes) - RDMA/irdma: Fix data race on CQP completion stats (git-fixes) - RDMA/irdma: Fix data race on CQP request done (git-fixes) - RDMA/irdma: Fix op_type reporting in CQEs (git-fixes) - RDMA/irdma: Report correct WC error (git-fixes) - RDMA/mlx4: Make check for invalid flags stricter (git-fixes) - RDMA/mthca: Fix crash when polling CQ for shared QPs (git-fixes) - regmap: Account for register length in SMBus I/O limits (git-fixes). - regmap: Drop initial version of maximum transfer length fixes (git-fixes). - Restore kABI for NVidia vGPU driver (bsc#1210825). - Revert 'ALSA: usb-audio: Drop superfluous interface setup at parsing' (git-fixes). - Revert 'debugfs, coccinelle: check for obsolete DEFINE_SIMPLE_ATTRIBUTE() usage' (git-fixes). - Revert 'Drop AMDGPU patches for fixing regression (bsc#1213304,bsc#1213777)' - Revert 'iavf: Detach device during reset task' (git-fixes). - Revert 'iavf: Do not restart Tx queues after reset task failure' (git-fixes). - Revert 'NFSv4: Retry LOCK on OLD_STATEID during delegation return' (git-fixes). - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (git-fixes). - Revert 'usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()' (git-fixes). - Revert 'usb: xhci: tegra: Fix error check' (git-fixes). - Revert 'xhci: add quirk for host controllers that do not update endpoint DCS' (git-fixes). - Revive drm_dp_mst_hpd_irq() function (bsc#1213578). - rxrpc, afs: Fix selection of abort codes (git-fixes). - s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870). - s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810). - s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872). - s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863). - s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870). - s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871). - s390/qeth: Fix vipa deletion (git-fixes bsc#1213713). - s390/vmem: fix empty page tables cleanup under KASAN (git-fixes bsc#1213715). - scftorture: Count reschedule IPIs (git-fixes). - scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected (bsc#1213756). - scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756). - scsi: lpfc: Clean up SLI-4 sysfs resource reporting (bsc#1213756). - scsi: lpfc: Copyright updates for 14.2.0.14 patches (bsc#1213756). - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (bsc#1213756). - scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756). - scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (bsc#1213756). - scsi: lpfc: Pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756). - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (bsc#1213756). - scsi: lpfc: Refactor cpu affinity assignment paths (bsc#1213756). - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (bsc#1213756). - scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (bsc#1213756). - scsi: lpfc: Replace one-element array with flexible-array member (bsc#1213756). - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756). - scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (bsc#1213756). - scsi: lpfc: Simplify fcp_abort transport callback log message (bsc#1213756). - scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756). - scsi: lpfc: Use struct_size() helper (bsc#1213756). - scsi: qla2xxx: Adjust IOCB resource on qpair create (bsc#1213747). - scsi: qla2xxx: Array index may go out of bound (bsc#1213747). - scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747). - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (bsc#1213747). - scsi: qla2xxx: Correct the index of array (bsc#1213747). - scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747). - scsi: qla2xxx: Fix buffer overrun (bsc#1213747). - scsi: qla2xxx: Fix command flush during TMF (bsc#1213747). - scsi: qla2xxx: Fix deletion race condition (bsc#1213747). - scsi: qla2xxx: Fix end of loop test (bsc#1213747). - scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747). - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (bsc#1213747). - scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747). - scsi: qla2xxx: Fix NULL pointer dereference in target mode (bsc#1213747). - scsi: qla2xxx: Fix potential NULL pointer dereference (bsc#1213747). - scsi: qla2xxx: Fix session hang in gnl (bsc#1213747). - scsi: qla2xxx: Fix TMF leak through (bsc#1213747). - scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747). - scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747). - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (bsc#1213747). - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (bsc#1213747). - scsi: qla2xxx: Silence a static checker warning (bsc#1213747). - scsi: qla2xxx: Turn off noisy message log (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747). - scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747). - selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes). - serial: qcom-geni: drop bogus runtime pm state update (git-fixes). - serial: sifive: Fix sifive_serial_console_setup() section (git-fixes). - series: udpate metadata Refresh - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - sfc: fix XDP queues mode with legacy IRQ (git-fixes). - sfc: use budget for TX completions (git-fixes). - soundwire: qcom: update status correctly with mask (git-fixes). - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes). - staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (git-fixes). - SUNRPC: always free ctxt when freeing deferred request (git-fixes). - SUNRPC: double free xprt_ctxt while still in use (git-fixes). - SUNRPC: Fix trace_svc_register() call site (git-fixes). - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (git-fixes). - SUNRPC: Remove dead code in svc_tcp_release_rqst() (git-fixes). - SUNRPC: remove the maximum number of retries in call_bind_status (git-fixes). - svcrdma: Prevent page release when nothing was received (git-fixes). - tpm_tis: Explicitly check for error code (git-fixes). - tty: n_gsm: fix UAF in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes). - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (git-fixes). - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (git-fixes). - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes). - ubifs: Fix AA deadlock when setting xattr for encrypted file (git-fixes). - ubifs: Fix build errors as symbol undefined (git-fixes). - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (git-fixes). - ubifs: Fix memory leak in alloc_wbufs() (git-fixes). - ubifs: Fix memory leak in do_rename (git-fixes). - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes). - ubifs: Fix to add refcount once page is set private (git-fixes). - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (git-fixes). - ubifs: Fix wrong dirty space budget for dirty inode (git-fixes). - ubifs: Free memory for tmpfile name (git-fixes). - ubifs: Rectify space amount budget for mkdir/tmpfile operations (git-fixes). - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes). - ubifs: Rectify space budget for ubifs_xrename() (git-fixes). - ubifs: Rename whiteout atomically (git-fixes). - ubifs: rename_whiteout: correct old_dir size computing (git-fixes). - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (git-fixes). - ubifs: Reserve one leb for each journal head while doing budget (git-fixes). - ubifs: Re-statistic cleaned znode count if commit failed (git-fixes). - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (git-fixes). - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (git-fixes). - Update config files: enable CONFIG_X86_AMD_PSTATE (bsc#1212445) - usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes). - usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes). - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (git-fixes). - usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). - USB: serial: option: add LARA-R6 01B PIDs (git-fixes). - usb: typec: Iterate pds array when showing the pd list (git-fixes). - usb: typec: Set port->pd before adding device for typec_port (git-fixes). - usb: typec: Use sysfs_emit_at when concatenating the string (git-fixes). - usb: xhci-mtk: set the dma max_seg_size (git-fixes). - vhost_net: revert upend_idx only on retriable error (git-fixes). - vhost: support PACKED when setting-getting vring_base (git-fixes). - virtio_net: Fix error unwinding of XDP initialization (git-fixes). - virtio-net: Maintain reverse cleanup order (git-fixes). - wifi: ath11k: add support for suspend in power down state (bsc#1207948). - wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948). - wifi: ath11k: handle thermal device registeration together with MAC (bsc#1207948). - wifi: ath11k: remove MHI LOOPBACK channels (bsc#1207948). - wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes). - wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes). - wl3501_cs: use eth_hw_addr_set() (git-fixes). - x86/PVH: obtain VGA console info in Dom0 (git-fixes). - xen/blkfront: Only check REQ_FUA for writes (git-fixes). - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes). - xfs: AIL needs asynchronous CIL forcing (bsc#1211811). - xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811). - xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811). - xfs: CIL work is serialised, not pipelined (bsc#1211811). - xfs: do not run shutdown callbacks on active iclogs (bsc#1211811). - xfs: drop async cache flushes from CIL commits (bsc#1211811). - xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811). - xfs: move the CIL workqueue to the CIL (bsc#1211811). - xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811). - xfs: order CIL checkpoint start records (bsc#1211811). - xfs: pass a CIL context to xlog_write() (bsc#1211811). - xfs: rework xlog_state_do_callback() (bsc#1211811). - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811). - xfs: separate out log shutdown callback processing (bsc#1211811). - xfs: wait iclog complete before tearing down AIL (bsc#1211811). - xfs: XLOG_STATE_IOERROR must die (bsc#1211811). - xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes). - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes). - xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes). Important SUSE bug 1206418 SUSE bug 1207129 SUSE bug 1207948 SUSE bug 1210627 SUSE bug 1210780 SUSE bug 1210825 SUSE bug 1211131 SUSE bug 1211738 SUSE bug 1211811 SUSE bug 1212445 SUSE bug 1212502 SUSE bug 1212604 SUSE bug 1212766 SUSE bug 1212901 SUSE bug 1213167 SUSE bug 1213272 SUSE bug 1213287 SUSE bug 1213304 SUSE bug 1213417 SUSE bug 1213578 SUSE bug 1213585 SUSE bug 1213586 SUSE bug 1213588 SUSE bug 1213601 SUSE bug 1213620 SUSE bug 1213632 SUSE bug 1213653 SUSE bug 1213713 SUSE bug 1213715 SUSE bug 1213747 SUSE bug 1213756 SUSE bug 1213759 SUSE bug 1213777 SUSE bug 1213810 SUSE bug 1213812 SUSE bug 1213856 SUSE bug 1213857 SUSE bug 1213863 SUSE bug 1213867 SUSE bug 1213870 SUSE bug 1213871 SUSE bug 1213872 CVE-2022-40982 CVE-2023-0459 CVE-2023-20569 CVE-2023-21400 CVE-2023-2156 CVE-2023-2166 CVE-2023-31083 CVE-2023-3268 CVE-2023-3567 CVE-2023-3609 CVE-2023-3611 CVE-2023-3776 CVE-2023-38409 CVE-2023-3863 CVE-2023-4004 cpe:/o:suse:sle-ha:15:sp5 Security update for haproxy (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for haproxy fixes the following issues: - CVE-2023-40225: Fixed request smuggling with empty content-length header value (bsc#1214102). Moderate SUSE bug 1214102 CVE-2023-40225 cpe:/o:suse:sle-ha:15:sp5 Security update for rubygem-rails-html-sanitizer (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-rails-html-sanitizer fixes the following issues: - CVE-2022-23517: Fixed inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. (bsc#1206433) - CVE-2022-23518: Fixed XSS via data URIs when used in combination with Loofah. (bsc#1206434) - CVE-2022-23519: Fixed XSS vulnerability with certain configurations of Rails::Html::Sanitizer. (bsc#1206435) - CVE-2022-23520: Fixed XSS vulnerability with certain configurations of Rails::Html::Sanitizer. (bsc#1206436) Important SUSE bug 1206433 SUSE bug 1206434 SUSE bug 1206435 SUSE bug 1206436 CVE-2022-23517 CVE-2022-23518 CVE-2022-23519 CVE-2022-23520 cpe:/o:suse:sle-ha:15:sp5 Security update for rubygem-actionview-5_1 (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-actionview-5_1 fixes the following issues: - CVE-2023-23913: Fixed DOM Based Cross-site Scripting in rails-ujs (bsc#1209826). Important SUSE bug 1209826 CVE-2023-23913 cpe:/o:suse:sle-ha:15:sp5 Security update for libqb (Moderate) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for libqb fixes the following issues: - CVE-2023-39976: Fixed potential buffer overflow with long log messages (bsc#1214066). Moderate SUSE bug 1214066 CVE-2023-39976 cpe:/o:suse:sle-ha:15:sp5 Security update for rubygem-puma (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for rubygem-puma fixes the following issues: - CVE-2023-40175: Fixed HTTP request smuggling when parsing chunked transfer encoding bodies and zero-length content-length headers (bsc#1214425). Important SUSE bug 1214425 CVE-2023-40175 cpe:/o:suse:sle-ha:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330). - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727). - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729). The following non-security bugs were fixed: - ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305). - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes). - ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes). - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes). - ALSA: ac97: Fix possible error value of *rac97 (git-fixes). - ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes). - ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes). - ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes). - ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes). - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes). - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes). - ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes). - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes). - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes). - ARM: dts: imx6sll: fixup of operating points (git-fixes). - ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes). - ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes). - ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes). - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes). - ASoC: rt5665: add missed regulator_bulk_disable (git-fixes). - ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes). - ASoC: tegra: Fix SFC conversion for few rates (git-fixes). - Bluetooth: Fix potential use-after-free when clear keys (git-fixes). - Bluetooth: L2CAP: Fix use-after-free (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes). - Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes). - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes). - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b - CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123 - Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel. - Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes). - Documentation: devices.txt: Remove ttyIOC* (git-fixes). - Documentation: devices.txt: Remove ttySIOC* (git-fixes). - Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453). - Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453). - Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453). - Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453). - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453). - Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453). - Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453). - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453). - Drop amdgpu patch causing spamming (bsc#1215523) - Drop cfg80211 lock fix patches that caused a regression (bsc#1213757) - Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) - Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes). - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes). - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes). - HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes). - HID: wacom: remove the battery when the EKR is off (git-fixes). - HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes). - IB/hfi1: Fix possible panic during hotplug remove (git-fixes) - IB/uverbs: Fix an potential error pointer dereference (git-fixes) - Input: exc3000 - properly stop timer on shutdown (git-fixes). - KVM: s390: fix sthyi error handling (git-fixes bsc#1214370). - Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756). - Kbuild: move to -std=gnu11 (bsc#1214756). - PCI/ASPM: Avoid link retraining race (git-fixes). - PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes). - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes). - PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes). - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes). - PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453). - PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453). - PCI: meson: Remove cast between incompatible function type (git-fixes). - PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes). - PCI: microchip: Remove cast between incompatible function type (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: rockchip: Remove writes to unused registers (git-fixes). - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes). - PCI: tegra194: Fix possible array out of bounds access (git-fixes). - PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes). - RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes) - RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes) - RDMA/efa: Fix wrong resources deallocation order (git-fixes) - RDMA/hns: Fix CQ and QP cache affinity (git-fixes) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes) - RDMA/hns: Fix port active speed (git-fixes) - RDMA/irdma: Prevent zero-length STAG registration (git-fixes) - RDMA/irdma: Replace one-element array with flexible-array member (git-fixes) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes) - RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes) - RDMA/siw: Correct wrong debug message (git-fixes) - RDMA/umem: Set iova in ODP flow (git-fixes) - README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer. - Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes) - Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes). - SMB3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes). - Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - amba: bus: fix refcount leak (git-fixes). - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes). - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes). - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes). - audit: fix possible soft lockup in __audit_inode_child() (git-fixes). - backlight/bd6107: Compare against struct fb_info.device (git-fixes). - backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes). - backlight/lv5207lp: Compare against struct fb_info.device (git-fixes). - batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes). - batman-adv: Do not increase MTU when set by user (git-fixes). - batman-adv: Fix TT global entry leak when client roamed back (git-fixes). - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes). - batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes). - batman-adv: Trigger events for auto adjusted MTU (git-fixes). - bnx2x: fix page fault following EEH recovery (bsc#1214299). - bpf: Disable preemption in bpf_event_output (git-fixes). - bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924). - bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes). - bus: ti-sysc: Fix build warning for 64-bit build (git-fixes). - bus: ti-sysc: Fix cast to enum warning (git-fixes). - bus: ti-sysc: Flush posted write on enable before reset (git-fixes). - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes). - ceph: defer stopping mdsc delayed_work (bsc#1214392). - ceph: do not check for quotas on MDS stray dirs (bsc#1214238). - ceph: never send metrics if disable_send_metrics is set (bsc#1214180). - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. - cifs: add missing return value check for cifs_sb_tlink (bsc#1193629). - cifs: allow dumping keys for directories too (bsc#1193629). - cifs: fix mid leak during reconnection after timeout threshold (git-fixes). - cifs: if deferred close is disabled then close files immediately (git-fixes). - cifs: is_network_name_deleted should return a bool (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes). - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes). - clk: imx8mp: fix sai4 clock (git-fixes). - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes). - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes). - clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes). - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes). - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes). - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes). - clk: sunxi-ng: Modify mismatched function name (git-fixes). - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453). - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453). - clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453). - clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453). - clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453). - clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453). - cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes). - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659). - cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004). - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - crypto: caam - fix unchecked return value error (git-fixes). - crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes). - define more Hyper-V related constants (bsc#1206453). - dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes). - dma-buf/sync_file: Fix docs syntax (git-fixes). - dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes). - dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes). - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes). - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes). - docs/process/howto: Replace C89 with C11 (bsc#1214756). - docs: kernel-parameters: Refer to the correct bitmap function (git-fixes). - docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes). - docs: printk-formats: Fix hex printing of signed values (git-fixes). - driver core: test_async: fix an error code (git-fixes). - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes). - drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes). - drm/amd/display: Apply 60us prefetch for DCFCLK &lt;= 300Mhz (git-fixes). - drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes). - drm/amd/display: Do not set drr on pipe commit (git-fixes). - drm/amd/display: Enable dcn314 DPP RCO (git-fixes). - drm/amd/display: Ensure that planes are in the same order (git-fixes). - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes). - drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes). - drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes). - drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes). - drm/amd/display: disable RCO for DCN314 (git-fixes). - drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes). - drm/amd/display: limit DPIA link rate to HBR3 (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: trigger timing sync only if TG is running (git-fixes). - drm/amd/pm/smu7: move variables to where they are used (git-fixes). - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes). - drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes). - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes). - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes). - drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes). - drm/amd: flush any delayed gfxoff on suspend entry (git-fixes). - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes). - drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes). - drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes). - drm/amdgpu: Remove unnecessary domain argument (git-fixes). - drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes). - drm/amdgpu: add S/G display parameter (git-fixes). - drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes). - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes). - drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes). - drm/amdgpu: fix memory leak in mes self test (git-fixes). - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes). - drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes). - drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes). - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes). - drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes). - drm/ast: Fix DRAM init on AST2200 (git-fixes). - drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes). - drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes). - drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes). - drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes). - drm/bridge: fix -Wunused-const-variable= warning (git-fixes). - drm/bridge: tc358764: Fix debug print parameter order (git-fixes). - drm/etnaviv: fix dumping of active MMU context (git-fixes). - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes). - drm/i915/sdvo: fix panel_type initialization (git-fixes). - drm/i915: Fix premature release of request's reusable memory (git-fixes). - drm/mediatek: Fix dereference before null check (git-fixes). - drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes). - drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes). - drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes). - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes). - drm/msm/mdp5: Do not leak some plane state (git-fixes). - drm/msm: Update dev core dump to not print backwards (git-fixes). - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes). - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes). - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073). - drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes). - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes). - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes). - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes). - drm/qxl: fix UAF on handle creation (git-fixes). - drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes). - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes). - drm/rockchip: Do not spam logs in atomic check (git-fixes). - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes). - drm/stm: ltdc: fix late dereference check (git-fixes). - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes). - drm/ttm: check null pointer before accessing when swapping (git-fixes). - drm/ttm: never consider pinned BOs for eviction&swap (git-fixes). - drm/vmwgfx: Fix shader stage validation (git-fixes). - drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes). - drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes). - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes). - dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes). - dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes). - dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes). - e1000: Fix typos in comments (jsc#PED-5738). - e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738). - e1000: switch to napi_build_skb() (jsc#PED-5738). - e1000: switch to napi_consume_skb() (jsc#PED-5738). - exfat: fix unexpected EOF while reading dir (bsc#1214000). - exfat: release s_lock before calling dir_emit() (bsc#1214000). - exfat_iterate(): do not open-code file_inode(file) (bsc#1214000). - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes). - fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes). - fbdev: Improve performance of sys_imageblit() (git-fixes). - fbdev: Update fbdev source file paths (git-fixes). - fbdev: fix potential OOB read in fast_imageblit() (git-fixes). - fbdev: mmp: fix value check in mmphw_probe() (git-fixes). - file: reinstate f_pos locking optimization for regular files (bsc#1213759). - firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes). - firmware: cs_dsp: Fix new control name check (git-fixes). - firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes). - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes). - fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes). - fsi: aspeed: Reset master errors after CFAM reset (git-fixes). - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes). - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes). - gpio: mvebu: Make use of devm_pwmchip_add (git-fixes). - gpio: mvebu: fix irq domain leak (git-fixes). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes). - hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453). - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes). - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes). - hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes). - hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes). - hwrng: pic32 - use devm_clk_get_enabled (git-fixes). - i2c: Delete error messages for failed memory allocations (git-fixes). - i2c: Improve size determinations (git-fixes). - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes). - i2c: designware: Correct length byte validation logic (git-fixes). - i2c: designware: Handle invalid SMBus block data response length value (git-fixes). - i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes). - i2c: nomadik: Remove a useless call in the remove function (git-fixes). - i2c: nomadik: Remove unnecessary goto label (git-fixes). - i2c: nomadik: Use devm_clk_get_enabled() (git-fixes). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - iavf: fix potential races for FDIR filters (git-fixes). - ice: Fix RDMA VSI removal during queue rebuild (git-fixes). - ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes). - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes). - iio: adc: stx104: Implement and utilize register structures (git-fixes). - iio: adc: stx104: Utilize iomap interface (git-fixes). - iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes). - intel/e1000:fix repeated words in comments (jsc#PED-5738). - intel: remove unused macros (jsc#PED-5738). - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes). - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). - iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes). - iommu/amd: Fix compile warning in init code (git-fixes). - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes). - iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes). - iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes). - iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes). - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes). - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes). - iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes). - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes). - iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes). - iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes). - iommu/dma: Fix iova map result check bug (git-fixes). - iommu/dma: return error code from iommu_dma_map_sg() (git-fixes). - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes). - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes). - iommu/iova: Fix module config properly (git-fixes). - iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes). - iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes). - iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes). - iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes). - iommu/mediatek: Use component_match_add (git-fixes). - iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes). - iommu/omap: Fix buffer overflow in debugfs (git-fixes). - iommu/rockchip: fix permission bits in page table entries v2 (git-fixes). - iommu/s390: Fix duplicate domain attachments (git-fixes). - iommu/sun50i: Consider all fault sources for reset (git-fixes). - iommu/sun50i: Fix R/W permission check (git-fixes). - iommu/sun50i: Fix flush size (git-fixes). - iommu/sun50i: Fix reset release (git-fixes). - iommu/sun50i: Implement .iotlb_sync_map (git-fixes). - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes). - iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes). - iommu/vt-d: Check correct capability for sagaw determination (git-fixes). - iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes). - iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes). - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes). - iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes). - ipmi:ssif: Add check for kstrdup (git-fixes). - ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes). - ipmi_si: fix a memleak in try_smi_init() (git-fixes). - jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes). - kabi/severities: Ignore newly added SRSO mitigation functions - kabi: Allow extra bugsints (bsc#1213927). - kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there. - kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12. - kunit: make kunit_test_timeout compatible with comment (git-fixes). - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes). - leds: multicolor: Use rounded division when calculating color components (git-fixes). - leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes). - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes). - leds: turris-omnia: Drop unnecessary mutex locking (git-fixes). - lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes). - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes). - libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924). - libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924). - libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924). - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393). - md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916). - md/raid0: Fix performance regression for large sequential writes (bsc#1213916). - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes). - media: cx24120: Add retval check for cx24120_message_send() (git-fixes). - media: dib7000p: Fix potential division by zero (git-fixes). - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes). - media: go7007: Remove redundant if statement (git-fixes). - media: i2c: ccs: Check rules is non-NULL (git-fixes). - media: i2c: rdacm21: Fix uninitialized value (git-fixes). - media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes). - media: ov2680: Add ov2680_fill_format() helper function (git-fixes). - media: ov2680: Do not take the lock for try_fmt calls (git-fixes). - media: ov2680: Fix ov2680_bayer_order() (git-fixes). - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes). - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes). - media: ov2680: Fix vflip / hflip set functions (git-fixes). - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes). - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes). - media: rkvdec: increase max supported height for H.264 (git-fixes). - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes). - media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes). - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes). - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes). - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - mlxsw: pci: Add shutdown method in PCI driver (git-fixes). - mmc: block: Fix in_flight[issue_type] value error (git-fixes). - mmc: moxart: read scr register without changing byte order (git-fixes). - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes). - mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes). - mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes). - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes). - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes). - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes). - mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes). - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes). - mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes). - mtd: spi-nor: Check bus width while setting QE bit (git-fixes). - mtd: spinand: toshiba: Fix ecc_get_status (git-fixes). - n_tty: Rename tail to old_tail in n_tty_read() (git-fixes). - net: hns3: fix wrong bw weight of disabled tc issue (git-fixes). - net: ieee802154: at86rf230: Stop leaking skb's (git-fixes). - net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes). - net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes). - net: phy: broadcom: stub c45 read/write for 54810 (git-fixes). - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes). - net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733) - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes). - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946). - netfs: fix parameter of cleanup() (bsc#1214743). - nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes). - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes). - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes). - nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902). - nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902). - objtool/x86: Fix SRSO mess (git-fixes). - objtool/x86: Fixup frame-pointer vs rethunk (git-fixes). - objtool: Union instruction::{call_dest,jump_table} (git-fixes). - old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes). - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes). - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes). - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes). - phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes). - phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes). - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes). - pinctrl: amd: Mask wake bits on probe again (git-fixes). - pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes). - pinctrl: cherryview: fix address_space_handler() argument (git-fixes). - pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes). - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes). - platform/x86: dell-sysman: Fix reference leak (git-fixes). - powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106). - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106). - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106). - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106). - powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106). - powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106). - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106). - powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106). - powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes). - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106). - powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106). - powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106). - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/rtas: block error injection when locked down (bsc#1023051). - powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051). - powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). - powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869). - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes). - powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files. - powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503). - powerpc: fix typos in comments (bsc#1212091 ltc#199106). - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503). - pstore/ram: Check start of empty przs during init (git-fixes). - pwm: Add a stub for devm_pwmchip_add() (git-fixes). - pwm: meson: Simplify duplicated per-channel tracking (git-fixes). - pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes). - qed: Fix scheduling in a tasklet while getting stats (git-fixes). - regmap: rbtree: Use alloc_flags for memory allocations (git-fixes). - ring-buffer: Do not swap cpu_buffer during resize process (git-fixes). - ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes). - rpm/mkspec-dtb: support for nested subdirs - rpmsg: glink: Add check for kstrdup (git-fixes). - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976). - s390/purgatory: disable branch profiling (git-fixes bsc#1214372). - s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949). - sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes). - sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes). - sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: RDMA/srp: Fix residual handling (git-fixes) - scsi: bsg: Increase number of devices (bsc#1210048). - scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284). - scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: core: Improve warning message in scsi_device_block() (bsc#1209284). - scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: sg: Increase number of devices (bsc#1210048). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Always set no_report_opcodes (git-fixes). - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes). - scsi: storvsc: Handle SRB status value 0x30 (git-fixes). - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes). - scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371). - selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924). - selftests/futex: Order calls to futex_lock_pi (git-fixes). - selftests/harness: Actually report SKIP for signal tests (git-fixes). - selftests/resctrl: Close perf value read fd on errors (git-fixes). - selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes). - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes). - selftests/rseq: check if libc rseq support is registered (git-fixes). - selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes). - selftests: forwarding: Skip test when no interfaces are specified (git-fixes). - selftests: forwarding: Switch off timeout (git-fixes). - selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes). - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes). - selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes). - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes). - selftests: forwarding: tc_flower: Relax success criterion (git-fixes). - selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes). - serial: sc16is7xx: fix broken port 0 uart init (git-fixes). - serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes). - serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes). - serial: sprd: Fix DMA buffer leak issue (git-fixes). - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629). - smb: client: Fix -Wstringop-overflow issues (bsc#1193629). - smb: client: fix dfs link mount against w2k8 (bsc#1212142). - smb: client: fix null auth (git-fixes). - soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes). - soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes). - soundwire: fix enumeration completion (git-fixes). - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes). - supported.conf: fix typos for -!optional markers - swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453). - target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026). - target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873). - target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857). - target_core_rbd: remove snapshot existence validation code (bsc#1212857). - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes). - timers: Add shutdown mechanism to the internal functions (bsc#1213970). - timers: Provide timer_shutdown[_sync]() (bsc#1213970). - timers: Rename del_timer() to timer_delete() (bsc#1213970). - timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: Replace BUG_ON()s (bsc#1213970). - timers: Silently ignore timers with a NULL function (bsc#1213970). - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: Update kernel-doc for various functions (bsc#1213970). - timers: Use del_timer_sync() even on UP (bsc#1213970). - tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes). - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes). - tracing/probes: Fix not to count error code to total length (git-fixes). - tracing/probes: Fix to avoid double count of the string length on the array (git-fixes). - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes). - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes). - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes). - tracing: Fix memleak due to race between current_tracer and trace (git-fixes). - tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes). - tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes). - tracing: Fix warning in trace_buffered_event_disable() (git-fixes). - tty: fix hang on tty device with no_room set (git-fixes). - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes). - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes). - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes). - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes). - ubifs: Fix memleak when insert_old_idx() failed (git-fixes). - usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes). - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes). - usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes). - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes). - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes). - usb: dwc3: Fix typos in gadget.c (git-fixes). - usb: dwc3: Properly handle processing of pending events (git-fixes). - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes). - usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes). - usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes). - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes). - usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes). - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes). - usb: quirks: add quirk for Focusrite Scarlett (git-fixes). - usb: serial: option: add Quectel EC200A module support (git-fixes). - usb: serial: option: support Quectel EM060K_128 (git-fixes). - usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes). - usb: serial: simple: sort driver entries (git-fixes). - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes). - usb: typec: tcpm: Fix response to vsafe0V event (git-fixes). - usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes). - usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes). - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes). - wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes). - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes). - wifi: cfg80211: Fix return value in scan logic (git-fixes). - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes). - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes). - wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes). - wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes). - wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes). - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes). - wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes). - wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes). - wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes). - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes). - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes). - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes). - wifi: radiotap: fix kernel-doc notation warnings (git-fixes). - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes). - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes). - x86/alternative: Make custom return thunk unconditional (git-fixes). - x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes). - x86/cpu: Clean up SRSO return thunk mess (git-fixes). - x86/cpu: Cleanup the untrain mess (git-fixes). - x86/cpu: Fix __x86_return_thunk symbol type (git-fixes). - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes). - x86/cpu: Rename original retbleed methods (git-fixes). - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes). - x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453). - x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453). - x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453). - x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453). - x86/hyperv: Reorder code to facilitate future work (bsc#1206453). - x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453). - x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453). - x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes). - x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453). - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes). - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). - x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/speculation: Add cpu_show_gds() prototype (git-fixes). - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). - x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). - x86/srso: Disable the mitigation on unaffected configurations (git-fixes). - x86/srso: Explain the untraining sequences a bit more (git-fixes). - x86/srso: Fix build breakage with the LLVM linker (git-fixes). - x86/srso: Fix return thunks in generated code (git-fixes). - x86/static_call: Fix __static_call_fixup() (git-fixes). - x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453). - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453). - x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453). - x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453). - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453). - xfs: fix sb write verify for lazysbcount (bsc#1214661). Important SUSE bug 1023051 SUSE bug 1120059 SUSE bug 1177719 SUSE bug 1188885 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203329 SUSE bug 1203330 SUSE bug 1205462 SUSE bug 1206453 SUSE bug 1208902 SUSE bug 1208949 SUSE bug 1209284 SUSE bug 1209799 SUSE bug 1210048 SUSE bug 1210448 SUSE bug 1211220 SUSE bug 1212091 SUSE bug 1212142 SUSE bug 1212423 SUSE bug 1212526 SUSE bug 1212857 SUSE bug 1212873 SUSE bug 1213026 SUSE bug 1213123 SUSE bug 1213546 SUSE bug 1213580 SUSE bug 1213601 SUSE bug 1213666 SUSE bug 1213733 SUSE bug 1213757 SUSE bug 1213759 SUSE bug 1213916 SUSE bug 1213921 SUSE bug 1213927 SUSE bug 1213946 SUSE bug 1213949 SUSE bug 1213968 SUSE bug 1213970 SUSE bug 1213971 SUSE bug 1214000 SUSE bug 1214019 SUSE bug 1214073 SUSE bug 1214120 SUSE bug 1214149 SUSE bug 1214180 SUSE bug 1214233 SUSE bug 1214238 SUSE bug 1214285 SUSE bug 1214297 SUSE bug 1214299 SUSE bug 1214305 SUSE bug 1214350 SUSE bug 1214368 SUSE bug 1214370 SUSE bug 1214371 SUSE bug 1214372 SUSE bug 1214380 SUSE bug 1214386 SUSE bug 1214392 SUSE bug 1214393 SUSE bug 1214397 SUSE bug 1214404 SUSE bug 1214428 SUSE bug 1214451 SUSE bug 1214635 SUSE bug 1214659 SUSE bug 1214661 SUSE bug 1214727 SUSE bug 1214729 SUSE bug 1214742 SUSE bug 1214743 SUSE bug 1214756 SUSE bug 1214976 SUSE bug 1215522 SUSE bug 1215523 SUSE bug 1215552 SUSE bug 1215553 CVE-2022-38457 CVE-2022-40133 CVE-2023-2007 CVE-2023-20588 CVE-2023-34319 CVE-2023-3610 CVE-2023-37453 CVE-2023-3772 CVE-2023-3863 CVE-2023-40283 CVE-2023-4128 CVE-2023-4133 CVE-2023-4134 CVE-2023-4147 CVE-2023-4194 CVE-2023-4273 CVE-2023-4387 CVE-2023-4459 CVE-2023-4563 CVE-2023-4569 cpe:/o:suse:sle-ha:15:sp5 Security update for samba (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 This update for samba fixes the following issues: - CVE-2023-4091: Fixed a bug where a client can truncate file with read-only permissions. (bsc#1215904) - CVE-2023-42669: Fixed a bug in 'rpcecho' development server which allows Denial of Service via sleep() call on AD DC. (bsc#1215905) - CVE-2023-42670: Fixed the procedure number which was out of range when starting Active Directory Users and Computers. (bsc#1215906) - CVE-2023-3961: Fixed an unsanitized client pipe name passed to local_np_connect(). (bsc#1215907) - CVE-2023-4154: Fixed a bug in dirsync which allows SYSTEM access with only 'GUID_DRS_GET_CHANGES' right. (bsc#1215908) Important SUSE bug 1215904 SUSE bug 1215905 SUSE bug 1215906 SUSE bug 1215907 SUSE bug 1215908 CVE-2023-3961 CVE-2023-4091 CVE-2023-4154 CVE-2023-42669 CVE-2023-42670 cpe:/o:suse:sle-ha:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise High Availability Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861) - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860) - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858) - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467) - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899) - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022) - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes). - ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes). - ARM: pxa: remove use of symbol_get() (git-fixes). - arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes). - arm64: module-plts: inline linux/moduleloader.h (git-fixes) - arm64: module: Use module_init_layout_section() to spot init sections (git-fixes) - arm64: sdei: abort running SDEI handlers during crash (git-fixes) - arm64: tegra: Update AHUB clock parent and rate (git-fixes) - arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes) - arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453). - ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes). - ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes). - ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes). - ASoC: meson: spdifin: start hw on dai probe (git-fixes). - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5640: Revert 'Fix sleep in atomic context' (git-fixes). - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes). - ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes). - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes). - ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes). - ata: pata_falcon: fix IO base selection for Q40 (git-fixes). - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes). - ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes). - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes). - blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986). - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992). - block/mq-deadline: use correct way to throttling write requests (bsc#1214993). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes). - bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322). - bpf: Clear the probe_addr for uprobe (git-fixes). - btrfs: do not hold CPU for too long when defragging a file (bsc#1214988). - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453). - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453). - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453). - Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453). - drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes). - drm/amd/display: Add smu write msg id fail retry process (git-fixes). - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes). - drm/amd/display: fix the white screen issue when >= 64GB DRAM (git-fixes). - drm/amd/display: prevent potential division by zero errors (git-fixes). - drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes). - drm/amd/display: Remove wait while locked (git-fixes). - drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: * rename ast_device to ast_private - drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: * rename ast_device to ast_private * context changes - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808). - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes). - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes). - drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes). - drm/i915/gvt: Verify pfn is 'valid' before dereferencing 'struct page' (git-fixes). - drm/meson: fix memory leak on ->hpd_notify callback (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - ext4: avoid potential data overflow in next_linear_group (bsc#1214951). - ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954). - ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). - ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944). - ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942). - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941). - ext4: Remove ext4 locking of moved directory (bsc#1214957). - ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). - fs: do not update freeing inode i_io_list (bsc#1214813). - fs: Establish locking order for unrelated directories (bsc#1214958). - fs: Lock moved directories (bsc#1214959). - fs: lockd: avoid possible wrong NULL parameter (git-fixes). - fs: no need to check source (bsc#1215752). - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813). - fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581). - gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479). - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: use vmalloc_array and vcalloc (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - hwrng: virtio - add an internal buffer (git-fixes). - hwrng: virtio - always add a pending request (git-fixes). - hwrng: virtio - do not wait on cleanup (git-fixes). - hwrng: virtio - do not waste entropy (git-fixes). - hwrng: virtio - Fix race on data_avail and actual data (git-fixes). - i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes). - i3c: master: svc: fix probe failure when no i3c device exist (git-fixes). - i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes). - idr: fix param name in idr_alloc_cyclic() doc (git-fixes). - Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes). - iommu/virtio: Detach domain on endpoint release (git-fixes). - iommu/virtio: Return size mapped for a detached domain (git-fixes). - jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). - jbd2: correct the end of the journal recovery scan range (bsc#1214955). - jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). - jbd2: fix checkpoint cleanup performance regression (bsc#1214952). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). - jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). - jbd2: remove journal_clean_one_cp_list() (bsc#1214947). - jbd2: remove t_checkpoint_io_list (bsc#1214946). - jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). - kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025). - kabi/severities: ignore mlx4 internal symbols - kconfig: fix possible buffer overflow (git-fixes). - kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template. - kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist. - kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes). - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915). - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896). - KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916). - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894). - KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895). - KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911). - KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes). - KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes). - KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes). - KVM: x86/mmu: Include mmu.h in spte.h (git-fixes). - loop: Fix use-after-free issues (bsc#1214991). - loop: loop_set_status_from_info() check before assignment (bsc#1214990). - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236). - mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236). - mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236). - mlx4: Delete custom device management logic (bsc#1187236). - mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236). - mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236). - mlx4: Move the bond work to the core driver (bsc#1187236). - mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236). - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236). - mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236). - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236). - module: Expose module_init_layout_section() (git-fixes) - net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). - net: mana: Add page pool for RX buffers (bsc#1214040). - net: mana: Configure hwc timeout from hardware (bsc#1214037). - net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes). - net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). - net/mlx4: Remove many unnecessary NULL values (bsc#1187236). - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes). - NFS/blocklayout: Use the passed in gfp flags (git-fixes). - NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes). - NFSD: fix change_info in NFSv4 RENAME replies (git-fixes). - NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes). - NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes). - NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes). - NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes). - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes). - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes). - ntb: Clean up tx tail index on link down (git-fixes). - ntb: Drop packets when qp link is down (git-fixes). - ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes). - nvme-auth: use chap->s2 to indicate bidirectional authentication (bsc#1214543). - nvme-tcp: add recovery_delay to sysfs (bsc#1201284). - nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284). - nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284). - nvme-tcp: make 'err_work' a delayed work (bsc#1201284). - PCI: Free released resource after coalescing (git-fixes). - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes). - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes). - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes). - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes). - platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes). - platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes). - pNFS: Fix assignment of xprtdata.cred (git-fixes). - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582). - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). - powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). - printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875). - pwm: lpc32xx: Remove handling of PWM channels (git-fixes). - quota: add new helper dquot_active() (bsc#1214998). - quota: factor out dquot_write_dquot() (bsc#1214995). - quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963). - quota: fix warning in dqgrab() (bsc#1214962). - quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). - quota: rename dquot_active() to inode_quota_active() (bsc#1214997). - RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes) - s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes). - s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124). - s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023). - s390/ipl: add eckd dump support (jsc#PED-2025). - s390/ipl: add eckd support (jsc#PED-2023). - s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023). - s390/ipl: use octal values instead of S_* macros (jsc#PED-2023). - s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes). - s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes). - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes). - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes). - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes). - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes). - scsi: lpfc: Remove reftag check in DIF paths (git-fixes). - scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928). - scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928). - scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928). - scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928). - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928). - scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928). - scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928). - scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928). - scsi: qla2xxx: Remove unused declarations (bsc#1214928). - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928). - scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928). - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Handle additional SRB status values (git-fixes). - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941). - selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549). - selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes). - spi: Add TPM HW flow flag (bsc#1213534) - spi: tegra210-quad: Enable TPM wait polling (bsc#1213534) - spi: tegra210-quad: set half duplex flag (bsc#1213534) - SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes). - tcpm: Avoid soft reset when partner does not support get_status (git-fixes). - tpm_tis_spi: Add hardware wait polling (bsc#1213534) - tracing: Fix race issue between cpu buffer write and swap (git-fixes). - tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes). - tracing: Remove unnecessary copying of tr->current_trace (git-fixes). - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes). - udf: Fix extension of the last extent in the file (bsc#1214964). - udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965). - udf: Fix off-by-one error when discarding preallocation (bsc#1214966). - udf: Fix uninitialized array access for some pathnames (bsc#1214967). - Update metadata - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes). - usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes). - usb: ehci: move new member has_ci_pec_bug into hole (git-fixes). - usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). - usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). - usb: typec: tcpci: clear the fault status bit (git-fixes). - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (git-fixes). - vhost-scsi: unbreak any layout for response (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: fix hung thread due to erroneous iotlb entries (git-fixes). - vhost: handle error while adding split ranges to iotlb (git-fixes). - virtio_net: add checking sq is full inside xdp xmit (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: reorder some funcs (git-fixes). - virtio_net: separate the logic of checking whether sq is full (git-fixes). - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes). - virtio-blk: set req->state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes). - virtio-mmio: do not break lifecycle of vm_dev (git-fixes). - virtio-net: fix race between set queues and probe (git-fixes). - virtio-net: set queues after driver_ok (git-fixes). - virtio-rng: make device ready before making request (git-fixes). - virtio: acknowledge all features before access (git-fixes). - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582). - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes). - word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729). - x86/alternative: Fix race in try_get_desc() (git-fixes). - x86/boot/e820: Fix typo in e820.c comment (git-fixes). - x86/bugs: Reset speculation control settings on init (git-fixes). - x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453). - x86/coco: Export cc_vendor (bsc#1206453). - x86/cpu: Add Lunar Lake M (git-fixes). - x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes). - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes). - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes). - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453). - x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453). - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453). - x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453) - x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453). - x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453). - x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453). - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453). - x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453). - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453). - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453). - x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453). - x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453). - x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453). - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes). - x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes). - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes). - x86/mce: Retrieve poison range from hardware (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes). - x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes). - x86/purgatory: remove PGO flags (git-fixes). - x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes). - x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes). - x86/resctl: fix scheduler confusion with 'current' (git-fixes). - x86/resctrl: Fix task CLOSID/RMID update race (git-fixes). - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). - x86/rtc: Remove __init for runtime functions (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/sgx: Reduce delay and interference of enclave release (git-fixes). - x86/srso: Do not probe microcode in a guest (git-fixes). - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). - x86/srso: Fix srso_show_state() side effect (git-fixes). - x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes). - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes). - xen: remove a confusing comment on auto-translated guest I/O (git-fixes). - xprtrdma: Remap Receive buffers after a reconnect (git-fixes). Important SUSE bug 1152472 SUSE bug 1202845 SUSE bug 1206453 SUSE bug 1213808 SUSE bug 1214928 SUSE bug 1214942 SUSE bug 1214943 SUSE bug 1214944 SUSE bug 1214950 SUSE bug 1214951 SUSE bug 1214954 SUSE bug 1214957 SUSE bug 1214986 SUSE bug 1214988 SUSE bug 1214992 SUSE bug 1214993 SUSE bug 1215322 SUSE bug 1215877 SUSE bug 1215894 SUSE bug 1215895 SUSE bug 1215896 SUSE bug 1215911 SUSE bug 1215915 SUSE bug 1215916 CVE-2023-1192 CVE-2023-1206 CVE-2023-1859 CVE-2023-2177 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-4155 CVE-2023-42753 CVE-2023-42754 CVE-2023-4389 CVE-2023-4622 CVE-2023-4623 CVE-2023-4881 CVE-2023-4921 CVE-2023-5345 cpe:/o:suse:sle-ha:15:sp5 Security update for libwebp (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libwebp fixes the following issues: - CVE-2023-1999: Fixed a double free (bsc#1210212). Important SUSE bug 1210212 CVE-2023-1999 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for bluez (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events (bsc#1210398). Important SUSE bug 1210398 CVE-2023-27349 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaThunderbird (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 102.12 MFSA 2023-21 (bsc#1211922): - CVE-2023-34414: Click-jacking certificate exceptions through rendering lag - CVE-2023-34416: Memory safety bugs fixed in Thunderbird 102.12 Important SUSE bug 1211922 CVE-2023-34414 CVE-2023-34416 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for dnsdist (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for dnsdist fixes the following issues: - update to 1.8.0 - Implements dnsdist in SLE15 (jsc#PED-3402) - Security fix: fixes a possible record smugging with a crafted DNS query with trailing data (CVE-2018-14663, bsc#1114511) - update to 1.2.0 (bsc#1054799, bsc#1054802) This release also addresses two security issues of low severity, CVE-2016-7069 and CVE-2017-7557. The first issue can lead to a denial of service on 32-bit if a backend sends crafted answers, and the second to an alteration of dnsdist’s ACL if the API is enabled, writable and an authenticated user is tricked into visiting a crafted website. Moderate SUSE bug 1054799 SUSE bug 1054802 SUSE bug 1114511 CVE-2016-7069 CVE-2017-7557 CVE-2018-14663 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver (bsc#1203332). - CVE-2022-38096: Fixed NULL-ptr deref in vmw_cmd_dx_define_query() (bsc#1203331). - CVE-2022-4269: Fixed a flaw was found inside the Traffic Control (TC) subsystem (bsc#1206024). - CVE-2022-45884: Fixed a use-after-free in dvbdev.c, related to dvb_register_device dynamically allocating fops (bsc#1205756). - CVE-2022-45885: Fixed a race condition in dvb_frontend.c that could cause a use-after-free when a device is disconnected (bsc#1205758). - CVE-2022-45886: Fixed a .disconnect versus dvb_device_open race condition in dvb_net.c that lead to a use-after-free (bsc#1205760). - CVE-2022-45887: Fixed a memory leak in ttusb_dec.c caused by the lack of a dvb_frontend_detach call (bsc#1205762). - CVE-2022-45919: Fixed a use-after-free in dvb_ca_en50221.c that could occur if there is a disconnect after an open, because of the lack of a wait_event (bsc#1205803). - CVE-2022-4744: Fixed double-free that could lead to DoS or privilege escalation in TUN/TAP device driver functionality (bsc#1209635). - CVE-2023-0045: Fixed missing Flush IBP in ib_prctl_set (bsc#1207773). - CVE-2023-0122: Fixed a NULL pointer dereference vulnerability in nvmet_setup_auth(), that allowed an attacker to perform a Pre-Auth Denial of Service (DoS) attack on a remote machine (bsc#1207050). - CVE-2023-0179: Fixed incorrect arithmetics when fetching VLAN header bits (bsc#1207034). - CVE-2023-0394: Fixed a null pointer dereference in the network subcomponent. This flaw could cause system crashes (bsc#1207168). - CVE-2023-0461: Fixed use-after-free in icsk_ulp_data (bsc#1208787). - CVE-2023-0469: Fixed a use-after-free flaw in io_uring/filetable.c in io_install_fixed_file in the io_uring subcomponent (bsc#1207521). - CVE-2023-0590: Fixed race condition in qdisc_graft() (bsc#1207795). - CVE-2023-0597: Fixed lack of randomization of per-cpu entry area in x86/mm (bsc#1207845). - CVE-2023-1075: Fixed a type confusion in tls_is_tx_ready (bsc#1208598). - CVE-2023-1076: Fixed incorrect UID assigned to tun/tap sockets (bsc#1208599). - CVE-2023-1077: Fixed a type confusion in pick_next_rt_entity(), that could cause memory corruption (bsc#1208600). - CVE-2023-1079: Fixed a use-after-free problem that could have been triggered in asus_kbd_backlight_set when plugging/disconnecting a malicious USB device (bsc#1208604). - CVE-2023-1095: Fixed a NULL pointer dereference in nf_tables due to zeroed list head (bsc#1208777). - CVE-2023-1118: Fixed a use-after-free bugs caused by ene_tx_irqsim() in media/rc (bsc#1208837). - CVE-2023-1249: Fixed a use-after-free flaw in the core dump subsystem that allowed a local user to crash the system (bsc#1209039). - CVE-2023-1382: Fixed denial of service in tipc_conn_close (bsc#1209288). - CVE-2023-1513: Fixed an uninitialized portions of the kvm_debugregs structure that could be copied to userspace, causing an information leak (bsc#1209532). - CVE-2023-1582: Fixed soft lockup in __page_mapcount (bsc#1209636). - CVE-2023-1583: Fixed a NULL pointer dereference in io_file_bitmap_get in io_uring/filetable.c (bsc#1209637). - CVE-2023-1611: Fixed an use-after-free flaw in btrfs_search_slot (bsc#1209687). - CVE-2023-1637: Fixed vulnerability that could lead to unauthorized access to CPU memory after resuming CPU from suspend-to-RAM (bsc#1209779). - CVE-2023-1652: Fixed use-after-free that could lead to DoS and information leak in nfsd4_ssc_setup_dul in fs/nfsd/nfs4proc.c (bsc#1209788). - CVE-2023-1670: Fixed a use after free in the Xircom 16-bit PCMCIA Ethernet driver. A local user could use this flaw to crash the system or potentially escalate their privileges on the system (bsc#1209871). - CVE-2023-1829: Fixed a use-after-free vulnerability in the control index filter (tcindex) (bsc#1210335). - CVE-2023-1838: Fixed an use-after-free flaw in virtio network subcomponent. This flaw could allow a local attacker to crash the system and lead to a kernel information leak problem. (bsc#1210203). - CVE-2023-1855: Fixed a use after free in xgene_hwmon_remove (bsc#1210202). - CVE-2023-1989: Fixed a use after free in btsdio_remove (bsc#1210336). - CVE-2023-1998: Fixed a use after free during login when accessing the shost ipaddress (bsc#1210506). - CVE-2023-2002: Fixed a flaw that allowed an attacker to unauthorized execution of management commands, compromising the confidentiality, integrity, and availability of Bluetooth communication (bsc#1210533). - CVE-2023-21102: Fixed possible bypass of shadow stack protection in __efi_rt_asm_wrapper of efi-rt-wrapper.S (bsc#1212155). - CVE-2023-21106: Fixed possible memory corruption due to double free in adreno_set_param of adreno_gpu.c (bsc#1211654). - CVE-2023-2124: Fixed an out-of-bound access in the XFS subsystem that could have lead to denial-of-service or potentially privilege escalation (bsc#1210498). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2162: Fixed an use-after-free flaw in iscsi_sw_tcp_session_create (bsc#1210647). - CVE-2023-2176: Fixed an out-of-boundary read in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA (bsc#1210629). - CVE-2023-2235: Fixed a use-after-free vulnerability in the Performance Events system that could have been exploited to achieve local privilege escalation (bsc#1210986). - CVE-2023-2269: Fixed a denial-of-service problem due to a possible recursive locking scenario, resulting in a deadlock in table_clear in drivers/md/dm-ioctl.c (bsc#1210806). - CVE-2023-22998: Fixed NULL vs IS_ERR checking in virtio_gpu_object_shmem_init (bsc#1208776). - CVE-2023-23000: Fixed return value of tegra_xusb_find_port_node function phy/tegra (bsc#1208816). - CVE-2023-23001: Fixed misinterpretation of regulator_get return value in drivers/scsi/ufs/ufs-mediatek.c (bsc#1208829). - CVE-2023-23004: Fixed misinterpretation of get_sg_table return value (bsc#1208843). - CVE-2023-23006: Fixed NULL vs IS_ERR checking in dr_domain_init_resources (bsc#1208845). - CVE-2023-2430: Fixed a missing lock on overflow for IOPOLL (bsc#1211014). - CVE-2023-2483: Fixed a use after free bug in emac_remove caused by a race condition (bsc#1211037). - CVE-2023-25012: Fixed a use-after-free in bigben_set_led() (bsc#1207560). - CVE-2023-2513: Fixed a use-after-free vulnerability in the ext4 filesystem (bsc#1211105). - CVE-2023-26545: Fixed double free in net/mpls/af_mpls.c upon an allocation failure (bsc#1208700). - CVE-2023-28327: Fixed DoS in in_skb in unix_diag_get_exact() (bsc#1209290). - CVE-2023-28410: Fixed improper restriction of operations within the bounds of a memory buffer in some Intel(R) i915 Graphics drivers that may have allowed an authenticated user to potentially enable escalation of privilege via local access (bsc#1211263). - CVE-2023-28464: Fixed user-after-free that could lead to privilege escalation in hci_conn_cleanup in net/uetooth/hci_conn.c (bsc#1209052). - CVE-2023-28866: Fixed an out-of-bounds access in net/bluetooth/hci_sync.c because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element, but did not (bsc#1209780). - CVE-2023-3006: Fixed a known cache speculation vulnerability, known as Branch History Injection (BHI) or Spectre-BHB, for the new hw AmpereOne (bsc#1211855). - CVE-2023-30456: Fixed an issue in arch/x86/kvm/vmx/nested.c with nVMX on x86_64 lacks consistency checks for CR0 and CR4 (bsc#1210294). - CVE-2023-30772: Fixed race condition and resultant use-after-free in da9150_charger_remove (bsc#1210329). - CVE-2023-3090: Fixed a heap out-of-bounds write in the ipvlan network driver (bsc#1212842). - CVE-2023-31084: Fixed a blocking issue in drivers/media/dvb-core/dvb_frontend.c (bsc#1210783). - CVE-2023-3111: Fixed a use-after-free vulnerability in prepare_to_relocate in fs/btrfs/relocation.c (bsc#1212051). - CVE-2023-3141: Fixed a use-after-free flaw in r592_remove in drivers/memstick/host/r592.c, that allowed local attackers to crash the system at device disconnect (bsc#1212129). - CVE-2023-31436: Fixed an out-of-bounds write in qfq_change_class() because lmax can exceed QFQ_MIN_LMAX (bsc#1210940). - CVE-2023-3161: Fixed shift-out-of-bounds in fbcon_set_font() (bsc#1212154). - CVE-2023-3212: Fixed a NULL pointer dereference flaw in the gfs2 file system (bsc#1212265). - CVE-2023-3220: Fixed a NULL pointer dereference flaw in dpu_crtc_atomic_check in drivers/gpu/drm/msm/disp/dpu1/dpu_crtc.c lacks check of the return value of kzalloc() (bsc#1212556). - CVE-2023-32233: Fixed a use-after-free in Netfilter nf_tables when processing batch requests (bsc#1211043). - CVE-2023-33288: Fixed a use-after-free in bq24190_remove in drivers/power/supply/bq24190_charger.c (bsc#1211590). - CVE-2023-3357: Fixed a NULL pointer dereference flaw in the AMD Sensor Fusion Hub driver (bsc#1212605). - CVE-2023-3358: Fixed a NULL pointer dereference flaw in the Integrated Sensor Hub (ISH) driver (bsc#1212606). - CVE-2023-3389: Fixed a use-after-free vulnerability in the io_uring subsystem (bsc#1212838). - CVE-2023-33951: Fixed a race condition that could have led to an information disclosure inside the vmwgfx driver (bsc#1211593). - CVE-2023-33952: Fixed a double free that could have led to a local privilege escalation inside the vmwgfx driver (bsc#1211595). - CVE-2023-35788: Fixed an out-of-bounds write in the flower classifier code via TCA_FLOWER_KEY_ENC_OPTS_GENEVE packets in fl_set_geneve_opt in net/sched/cls_flower.c (bsc#1212504). - CVE-2023-35823: Fixed a use-after-free flaw in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c (bsc#1212494). - CVE-2023-35828: Fixed a use-after-free flaw in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c (bsc#1212513). - CVE-2023-35829: Fixed a use-after-free flaw in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c (bsc#1212495). The following non-security bugs were fixed: - 3c589_cs: Fix an error handling path in tc589_probe() (git-fixes). - Add MODULE_FIRMWARE() for FIRMWARE_TG357766 (git-fixes). - Avoid deadlock for recursive I/O on dm-thin when used as swap (bsc#1177529). - Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158). - Fix page corruption caused by racy check in __free_pages (bsc#1208149). - Get module prefix from kmod (bsc#1212835). - Move upstreamed x86, scsi and arm patches into sorted section - Fixed typo that might caused (bsc#1209457). - Fix bug introduced by broken backport (bsc#1208628). - Update patch for launch issue (bsc#1210853). - [infiniband] READ is 'data destination', not source... (git-fixes) - [xen] fix 'direction' argument of iov_iter_kvec() (git-fixes). - acpi / x86: Add support for LPS0 callback handler (git-fixes). - acpi: Do not build ACPICA with '-Os' (git-fixes). - acpi: EC: Fix EC address space handler unregistration (bsc#1207149). - acpi: EC: Fix ECDT probe ordering issues (bsc#1207149). - acpi: EC: Fix oops when removing custom query handlers (git-fixes). - acpi: NFIT: fix a potential deadlock during NFIT teardown (git-fixes). - acpi: PM: Do not turn of unused power resources on the Toshiba Click Mini (git-fixes). - acpi: PM: s2idle: Add support for upcoming AMD uPEP HID AMDI008 (bsc#1206224). - acpi: PM: s2idle: Use LPS0 idle if ACPI_FADT_LOW_POWER_S0 is unset (bsc#1206224). - acpi: PPTT: Fix to avoid sleep in the atomic context when PPTT is absent (git-fixes). - acpi: VIOT: Initialize the correct IOMMU fwspec (git-fixes). - acpi: battery: Fix missing NUL-termination with large strings (git-fixes). - acpi: bus: Ensure that notify handlers are not running after removal (git-fixes). - acpi: cppc: Add AMD pstate energy performance preference cppc control (bsc#1212445). - acpi: cppc: Add auto select register read/write support (bsc#1212445). - acpi: cppc: Disable FIE if registers in PCC regions (bsc#1210953). - acpi: processor: Fix evaluating _PDC method when running as Xen dom0 (git-fixes). - acpi: resource: Add IRQ override quirk for LG UltraPC 17U70P (git-fixes). - acpi: resource: Add IRQ overrides for MAINGEAR Vector Pro 2 models (git-fixes). - acpi: resource: Add Medion S17413 to IRQ override quirk (git-fixes). - acpi: resource: Add helper function acpi_dev_get_memory_resources() (git-fixes). - acpi: resource: Do IRQ override on all TongFang GMxRGxx (git-fixes). - acpi: sleep: Avoid breaking S3 wakeup due to might_sleep() (git-fixes). - acpi: tables: Add support for NBFT (bsc#1195921). - acpi: tables: Add support for NBFT (bsc#1206340). - acpi: video: Add acpi_video_backlight_use_native() helper (bsc#1206843). - acpi: video: Allow GPU drivers to report no panels (bsc#1206843). - acpi: video: Fix Lenovo Ideapad Z570 DMI match (git-fixes). - acpi: video: Fix missing native backlight on Chromebooks (bsc#1206843). - acpi: video: Refactor acpi_video_get_backlight_type() a bit (bsc#1203693). - acpi: x86: s2idle: Add a quirk for ASUS ROG Zephyrus G14 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUS TUF Gaming A17 FA707RE (bsc#1206224). - acpi: x86: s2idle: Add a quirk for ASUSTeK COMPUTER INC. ROG Flow X13 (bsc#1206224). - acpi: x86: s2idle: Add a quirk for Lenovo Slim 7 Pro 14ARH7 (bsc#1206224). - acpi: x86: s2idle: Add another ID to s2idle_dmi_table (bsc#1206224). - acpi: x86: s2idle: Add module parameter to prefer Microsoft GUID (bsc#1206224). - acpi: x86: s2idle: Fix a NULL pointer dereference (bsc#1206224). - acpi: x86: s2idle: Force AMD GUID/_REV 2 on HP Elitebook 865 (bsc#1206224). - acpi: x86: s2idle: If a new AMD _HID is missing assume Rembrandt (bsc#1206224). - acpi: x86: s2idle: Move _HID handling for AMD systems into structures (bsc#1206224). - acpi: x86: s2idle: Stop using AMD specific codepath for Rembrandt+ (bsc#1206224). - acpi: x86: utils: Add Cezanne to the list for forcing StorageD3Enable (git-fixes). - acpica: ACPICA: check null return of ACPI_ALLOCATE_ZEROED in acpi_db_display_objects (git-fixes). - acpica: Allow address_space_handler Install and _REG execution as 2 separate steps (bsc#1207149). - acpica: Avoid undefined behavior: applying zero offset to null pointer (git-fixes). - acpica: Drop port I/O validation for some regions (git-fixes). - acpica: include/acpi/acpixf.h: Fix indentation (bsc#1207149). - acpica: nsrepair: handle cases without a return value correctly (git-fixes). - add mainline tags to five pci_hyperv patches - affs: initialize fsdata in affs_truncate() (git-fixes). - alarmtimer: Prevent starvation by small intervals and SIG_IGN (git-fixes) - alsa: ac97: Fix possible NULL dereference in snd_ac97_mixer (git-fixes). - alsa: asihpi: check pao in control_message() (git-fixes). - alsa: caiaq: input: Add error handling for unsupported input methods in `snd_usb_caiaq_input_init` (git-fixes). - alsa: cs46xx: mark snd_cs46xx_download_image as static (git-fixes). - alsa: emu10k1: do not create old pass-through playback device on Audigy (git-fixes). - alsa: emu10k1: fix capture interrupt handler unlinking (git-fixes). - alsa: emux: Avoid potential array out-of-bound in snd_emux_xg_control() (git-fixes). - alsa: fireface: make read-only const array for model names static (git-fixes). - alsa: firewire-digi00x: prevent potential use after free (git-fixes). - alsa: firewire-tascam: add missing unwind goto in snd_tscm_stream_start_duplex() (git-fixes). - alsa: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes). - alsa: hda/ca0132: fixup buffer overrun at tuning_ctl_set() (git-fixes). - alsa: hda/ca0132: minor fix for allocation size (git-fixes). - alsa: hda/cirrus: Add extra 10 ms delay to allow PLL settle and lock (git-fixes). - alsa: hda/conexant: Partial revert of a quirk for Lenovo (git-fixes). - alsa: hda/conexant: add a new hda codec SN6180 (git-fixes). - alsa: hda/hdmi: Preserve the previous PCM device upon re-enablement (git-fixes). - alsa: hda/hdmi: disable KAE for Intel DG2 (git-fixes). - alsa: hda/realtek - fixed wrong gpio assigned (git-fixes). - alsa: hda/realtek: Add 'Intel Reference board' and 'NUC 13' SSID in the ALC256 (git-fixes). - alsa: hda/realtek: Add Acer Predator PH315-54 (git-fixes). - alsa: hda/realtek: Add Lenovo P3 Tower platform (git-fixes). - alsa: hda/realtek: Add Positivo N14KP6-TG (git-fixes). - alsa: hda/realtek: Add a quirk for Compaq N14JP6 (git-fixes). - alsa: hda/realtek: Add a quirk for HP EliteDesk 805 (git-fixes). - alsa: hda/realtek: Add a quirk for HP Slim Desktop S01 (git-fixes). - alsa: hda/realtek: Add quirk for 2nd ASUS GU603 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G614Jx (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG G634Z (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GA402X (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GV601V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GX650P (git-fixes). - alsa: hda/realtek: Add quirk for ASUS ROG GZ301V (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402 using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for ASUS UM3402YAR using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirk for Clevo L140AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NPx0SNx (git-fixes). - alsa: hda/realtek: Add quirk for Clevo NS50AU (git-fixes). - alsa: hda/realtek: Add quirk for Clevo X370SNW (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteBook G10 laptops (git-fixes). - alsa: hda/realtek: Add quirk for HP EliteDesk 800 G6 Tower PC (git-fixes). - alsa: hda/realtek: Add quirk for Lenovo ZhaoYang CF4620Z (git-fixes). - alsa: hda/realtek: Add quirk for ThinkPad P1 Gen 6 (git-fixes). - alsa: hda/realtek: Add quirks for ASUS GU604V and GU603V (git-fixes). - alsa: hda/realtek: Add quirks for Asus ROG 2024 laptops using CS35L41 (git-fixes). - alsa: hda/realtek: Add quirks for Lenovo Z13/Z16 Gen2 (git-fixes). - alsa: hda/realtek: Add quirks for ROG ALLY CS35l41 audio (git-fixes). - alsa: hda/realtek: Add quirks for Unis H3C Desktop B760 & Q760 (git-fixes). - alsa: hda/realtek: Add quirks for some Clevo laptops (git-fixes). - alsa: hda/realtek: Amend G634 quirk to enable rear speakers (git-fixes). - alsa: hda/realtek: Apply HP B&O top speaker profile to Pavilion 15 (git-fixes). - alsa: hda/realtek: Enable 4 amplifiers instead of 2 on a HP platform (git-fixes). - alsa: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and limit mic boost on EliteBook (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs and speaker support for HP Laptops (git-fixes). - alsa: hda/realtek: Enable mute/micmute LEDs on HP Elitebook, 645 G9 (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for an HP laptop (git-fixes). - alsa: hda/realtek: Fix mute and micmute LEDs for yet another HP laptop (git-fixes). - alsa: hda/realtek: Fix support for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro (git-fixes). - alsa: hda/realtek: Fix the speaker output on Samsung Galaxy Book2 Pro 360 (git-fixes). - alsa: hda/realtek: Remove specific patch for Dell Precision 3260 (git-fixes). - alsa: hda/realtek: Whitespace fix (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs for a HP ProBook (git-fixes). - alsa: hda/realtek: fix mute/micmute LEDs, speaker do not work for a HP platform (git-fixes). - alsa: hda/realtek: fix speaker, mute/micmute LEDs not work on a HP platform (git-fixes). - alsa: hda/realtek: support HP Pavilion Aero 13-be0xxx Mute LED (git-fixes). - alsa: hda/sigmatel: add pin overrides for Intel DP45SG motherboard (git-fixes). - alsa: hda/sigmatel: fix S/PDIF out on Intel D*45* motherboards (git-fixes). - alsa: hda/via: Avoid potential array out-of-bound in add_secret_dac_path() (git-fixes). - alsa: hda: Add NVIDIA codec IDs a3 through a7 to patch table (git-fixes). - alsa: hda: Do not unset preset when cleaning up codec (git-fixes). - alsa: hda: Fix Oops by 9.1 surround channel names (git-fixes). - alsa: hda: Fix unhandled register update during auto-suspend period (git-fixes). - alsa: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor IDs (git-fixes). - alsa: hda: LNL: add HD Audio PCI ID (git-fixes). - alsa: hda: Match only Intel devices with CONTROLLER_IN_GPU() (git-fixes). - alsa: hda: cs35l41: Enable Amp High Pass Filter (git-fixes). - alsa: hda: fix a possible null-pointer dereference due to data race in snd_hdac_regmap_sync() (git-fixes). - alsa: hda: intel-dsp-config: add MTL PCI id (git-fixes). - alsa: hda: patch_realtek: add quirk for Asus N7601ZM (git-fixes). - alsa: i2c/cs8427: fix iec958 mixer control deactivation (git-fixes). - alsa: ice1712: Delete unreachable code in aureon_add_controls() (git-fixes). - alsa: ice1712: Do not left ice->gpio_mutex locked in aureon_add_controls() (git-fixes). - alsa: jack: Fix mutex call in snd_jack_report() (git-fixes). - alsa: memalloc: Workaround for Xen PV (git-fixes). - alsa: oss: avoid missing-prototype warnings (git-fixes). - alsa: oxfw: make read-only const array models static (git-fixes). - alsa: pci: lx6464es: fix a debug loop (git-fixes). - alsa: pcm: Fix potential data race at PCM memory allocation helpers (git-fixes). - alsa: usb-audio: Add a sample rate workaround for Line6 Pod Go (git-fixes). - alsa: usb-audio: Add quirk flag for HEM devices to enable native DSD playback (git-fixes). - alsa: usb-audio: Add quirk for Pioneer DDJ-800 (git-fixes). - alsa: usb-audio: Fix broken resume due to UAC3 power state (git-fixes). - alsa: usb-audio: Fix recursive locking at XRUN during syncing (git-fixes). - alsa: usb-audio: Fix regression on detection of Roland VS-100 (git-fixes). - alsa: ymfpci: Fix BUG_ON in probe function (git-fixes). - amdgpu/nv.c: Corrected typo in the video capabilities resolution (git-fixes). - amdgpu: disable powerpc support for the newer display engine (bsc#1194869). - amdgpu: fix build on non-DCN platforms (git-fixes). - amdgpu: validate offset_in_bo of drm_amdgpu_gem_va (git-fixes). - apparmor: add a kernel label to use on kernel objects (bsc#1211113). - apparmor: fix missing error check for rhashtable_insert_fast (git-fixes). - applicom: Fix PCI device refcount leak in applicom_init() (git-fixes). - arch: fix broken BuildID for arm64 and riscv (bsc#1209798). - arm64/cpufeature: Fix field sign for DIT hwcap detection (git-fixes) - arm64: Add missing Set/Way CMO encodings (git-fixes). - arm64: Always load shadow stack pointer directly from the task struct (git-fixes) - arm64: Stash shadow stack pointer in the task struct on interrupt (git-fixes) - arm64: Treat ESR_ELx as a 64-bit register (git-fixes) - arm64: atomics: remove LL/SC trampolines (git-fixes) - arm64: cacheinfo: Fix incorrect assignment of signed error value to (git-fixes) - arm64: cmpxchg_double*: hazard against entire exchange variable (git-fixes) - arm64: dts: Add DTS files for bcmbca SoC BCM4912 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM63158 (git-fixes). - arm64: dts: Add DTS files for bcmbca SoC BCM6858 (git-fixes). - arm64: dts: Add base DTS file for bcmbca device Asus GT-AX6000 (git-fixes). - arm64: dts: Move BCM4908 dts to bcmbca folder (git-fixes) - arm64: dts: amlogic: meson-axg: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gx-libretech-pc: fix update button name (git-fixes). - arm64: dts: amlogic: meson-gx: add missing SCPI sensors compatible (git-fixes). - arm64: dts: amlogic: meson-gx: add missing unit address to rng node name (git-fixes). - arm64: dts: amlogic: meson-gx: fix SCPI clock dvfs node name (git-fixes). - arm64: dts: amlogic: meson-gxbb-kii-pro: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-phicomm-n1: fix led node name (git-fixes). - arm64: dts: amlogic: meson-gxl-s905d-sml5442tw: drop invalid clock-names property (git-fixes). - arm64: dts: amlogic: meson-gxl: add missing unit address to eth-phy-mux node name (git-fixes). - arm64: dts: amlogic: meson-sm1-bananapi-m5: fix adc keys node names (git-fixes). - arm64: dts: amlogic: meson-sm1-odroid-hc4: fix active fan thermal trip (git-fixes). - arm64: dts: arm: drop unused interrupt-names in MHU (git-fixes) - arm64: dts: broadcom: bcm4908: add DT for Netgear RAXE500 (git-fixes). - arm64: dts: broadcom: bcmbca: bcm4908: fix NAND interrupt name (git-fixes) - arm64: dts: broadcom: bcmbca: bcm4908: fix procmon nodename (git-fixes) - arm64: dts: freescale: Fix pca954x i2c-mux node names (git-fixes) - arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts (git-fixes). - arm64: dts: imx8m: Align SoC unique ID node unit address (git-fixes). - arm64: dts: imx8mm-evk: correct pmic clock source (git-fixes). - arm64: dts: imx8mm-nitrogen-r2: fix WM8960 clock name (git-fixes). - arm64: dts: imx8mm: Fix pad control for UART1_DTE_RX (git-fixes). - arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes). - arm64: dts: imx8mn-var-som: fix PHY detection bug by adding deassert (git-fixes) - arm64: dts: imx8mn: specify #sound-dai-cells for SAI nodes (git-fixes). - arm64: dts: imx8mp-phycore-som: Remove invalid PMIC property (git-fixes) - arm64: dts: imx8mp: correct usb clocks (git-fixes) - arm64: dts: imx8mq-thor96: fix no-mmc property for SDHCI (git-fixes). - arm64: dts: imx8mq: add mipi csi phy and csi bridge descriptions (git-fixes) - arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers (git-fixes) - arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP signals (git-fixes). - arm64: dts: juno: Add missing MHU secure-irq (git-fixes) - arm64: dts: mediatek: mt7622: Add missing pwm-cells to pwm node (git-fixes). - arm64: dts: mediatek: mt8183: Fix systimer 13 MHz clock description (git-fixes). - arm64: dts: meson-axg: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson-g12-common: specify full DMC range (git-fixes). - arm64: dts: meson-g12a: Fix internal Ethernet PHY unit name (git-fixes). - arm64: dts: meson-gx: Fix Ethernet MAC address unit name (git-fixes). - arm64: dts: meson-gx: Fix the SCPI DVFS node name and unit address (git-fixes). - arm64: dts: meson-gx: Make mmc host controller interrupts level-sensitive (git-fixes). - arm64: dts: meson: bananapi-m5: switch VDDIO_C pin to OPEN_DRAIN (git-fixes). - arm64: dts: meson: remove CPU opps below 1GHz for G12A boards (git-fixes). - arm64: dts: mt8192: Fix CPU map for single-cluster SoC (git-fixes). - arm64: dts: qcom: Fix IPQ8074 PCIe PHY nodes (git-fixes). - arm64: dts: qcom: ipq8074-hk01: enable QMP device, not the PHY node (git-fixes). - arm64: dts: qcom: ipq8074: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: ipq8074: correct Gen2 PCIe ranges (git-fixes). - arm64: dts: qcom: ipq8074: correct PCIe QMP PHY output clock names (git-fixes). - arm64: dts: qcom: ipq8074: correct USB3 QMP PHY-s clock output names (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen2 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe QMP PHY (git-fixes). - arm64: dts: qcom: ipq8074: fix Gen3 PCIe node (git-fixes). - arm64: dts: qcom: ipq8074: fix PCIe PHY serdes size (git-fixes). - arm64: dts: qcom: msm8992-libra: Add CPU regulators (git-fixes). - arm64: dts: qcom: msm8992-libra: Fix the memory map (git-fixes). - arm64: dts: qcom: msm8994-kitakami: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8994-msft-lumia-octagon: drop unit address from PMI8994 regulator (git-fixes). - arm64: dts: qcom: msm8996: Add missing DWC3 quirks (git-fixes). - arm64: dts: qcom: msm8996: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: msm8998: Fix stm-stimulus-base reg name (git-fixes). - arm64: dts: qcom: msm8998: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: pmk8350: Specify PBS register for PON (git-fixes). - arm64: dts: qcom: pmk8350: Use the correct PON compatible (git-fixes). - arm64: dts: qcom: qcs404: use symbol names for PCIe resets (git-fixes). - arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified sc7180-lite boards (git-fixes). - arm64: dts: qcom: sc7180-trogdor-lazor: correct trackpad supply (git-fixes). - arm64: dts: qcom: sc7180: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sc7280: correct SPMI bus address cells (git-fixes). - arm64: dts: qcom: sdm845-db845c: fix audio codec interrupt pin name (git-fixes). - arm64: dts: qcom: sdm845: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8150-kumano: Panel framebuffer is 2.5k instead of 4k (git-fixes). - arm64: dts: qcom: sm8250: Fix the PCI I/O port range (git-fixes). - arm64: dts: qcom: sm8350: Mark UFS controller as cache coherent (git-fixes). - arm64: dts: renesas: beacon-renesom: Fix gpio expander reference (git-fixes). - arm64: dts: renesas: r8a774c0: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: renesas: r8a77990: Remove bogus voltages from OPP table (git-fixes). - arm64: dts: rockchip: drop unused LED mode property from rk3328-roc-cc (git-fixes). - arm64: dts: ti: k3-j7200: Fix wakeup pinmux range (git-fixes). - arm64: dts: ti: k3-j721e-main: Remove ti,strobe-sel property (git-fixes). - arm64: efi: Execute runtime services from a dedicated stack (git-fixes). - arm64: efi: Make efi_rt_lock a raw_spinlock (git-fixes). - arm64: errata: add detection for AMEVCNTR01 incrementing incorrectly (git-fixes) Enable workaround and fix kABI breakage. - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes) - arm64: kgdb: Set PSTATE.SS to 1 to re-enable single-step (git-fixes). - arm64: make is_ttbrX_addr() noinstr-safe (git-fixes) - arm64: mm: kfence: only handle translation faults (git-fixes) - arm: 9290/1: uaccess: Fix KASAN false-positives (git-fixes). - arm: 9295/1: unwind:fix unwind abort for uleb128 case (git-fixes) - arm: 9296/1: HP Jornada 7XX: fix kernel-doc warnings (git-fixes). - arm: bcm2835_defconfig: Enable the framebuffer (git-fixes). - arm: cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - arm: defconfig: drop CONFIG_DRM_RCAR_LVDS (git-fixes). - arm: dts: Fix erroneous ADS touchscreen polarities (git-fixes). - arm: dts: am5748: keep usb4_tm disabled (git-fixes) - arm: dts: exynos: Use Exynos5420 compatible for the MIPI video phy (git-fixes). - arm: dts: exynos: correct HDMI phy compatible in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos4210 (git-fixes). - arm: dts: exynos: correct TMU phandle in Exynos5250 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid HC1 (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU (git-fixes). - arm: dts: exynos: correct TMU phandle in Odroid XU3 family (git-fixes). - arm: dts: exynos: correct wr-active property in Exynos3250 Rinato (git-fixes). - arm: dts: exynos: fix WM8960 clock name in Itop Elite (git-fixes). - arm: dts: gta04: fix excess dma channel usage (git-fixes). - arm: dts: imx6sl: tolino-shine2hd: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx6sll: e60k02: fix usbotg1 pinctrl (git-fixes). - arm: dts: imx7-colibri-eval-v3: correct can controller comment (git-fixes) - arm: dts: imx7s: correct iomuxc gpr mux controller cells (git-fixes). - arm: dts: imx: Fix pca9547 i2c-mux node name (git-fixes). - arm: dts: qcom: ipq4019: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: Fix the PCI I/O port range (git-fixes). - arm: dts: qcom: ipq8064: reduce pci IO size to 64K (git-fixes). - arm: dts: qcom: msm8974: add required ranges to OCMEM (git-fixes) - arm: dts: qcom: sdx55: Add Qcom SMMU-500 as the fallback for IOMMU node (git-fixes). - arm: dts: rockchip: add power-domains property to dp node on rk3288 (git-fixes). - arm: dts: rockchip: fix a typo error for rk3288 spdif node (git-fixes). - arm: dts: s5pv210: correct MIPI CSIS clock name (git-fixes). - arm: dts: spear320-hmi: correct STMPE GPIO compatible (git-fixes). - arm: dts: stm32: add missing usbh clock and fix clk order on (git-fixes) - arm: dts: stm32: use usbphyc ck_usbo_48m as USBH OHCI clock on (git-fixes) - arm: dts: sun8i: nanopi-duo2: Fix regulator GPIO reference (git-fixes). - arm: dts: vexpress: add missing cache properties (git-fixes). - arm: dts: vf610: Fix pca9548 i2c-mux node names (git-fixes). - arm: imx: Call ida_simple_remove() for ida_simple_get (git-fixes). - arm: imx: rename DEBUG_IMX21_IMX27_UART to DEBUG_IMX27_UART (git-fixes) - arm: oMAP1: call platform_device_put() in error case in omap1_dm_timer_init() (git-fixes). - arm: oMAP2+: Fix memory leak in realtime_counter_init() (git-fixes). - arm: omap: remove debug-leds driver (git-fixes) - arm: remove some dead code (git-fixes) - arm: renumber bits related to _TIF_WORK_MASK (git-fixes) - arm: s3c: fix s3c64xx_set_timer_source prototype (git-fixes). - arm: shmobile: rcar-gen2: Add missing of_node_put() (git-fixes) - arm: zynq: Fix refcount leak in zynq_early_slcr_init (git-fixes). - asm-generic/io.h: suppress endianness warnings for readq() and writeq() (git-fixes). - asn.1: Fix check for strdup() success (git-fixes). - asoc: adau7118: do not disable regulators on device unbind (git-fixes). - asoc: amd: acp-es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: codecs: Change bulk clock voting to optional voting in digital codecs (git-fixes). - asoc: codecs: lpass: fix incorrect mclk rate (git-fixes). - asoc: codecs: rx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: rx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds (git-fixes). - asoc: codecs: tx-macro: move clk provider to managed variants (git-fixes). - asoc: codecs: tx-macro: move to individual clks from bulk (git-fixes). - asoc: codecs: wsa881x: do not set can_multi_write flag (git-fixes). - asoc: cs35l41: Only disable internal boost (git-fixes). - asoc: cs42l56: fix DT probe (git-fixes). - asoc: dt-bindings: meson: fix gx-card codec node regex (git-fixes). - asoc: dwc: limit the number of overrun messages (git-fixes). - asoc: dwc: move DMA init to snd_soc_dai_driver probe() (git-fixes). - asoc: es8316: Do not set rate constraints for unsupported MCLKs (git-fixes). - asoc: es8316: Handle optional IRQ assignment (git-fixes). - asoc: es8316: Increment max value for ALC Capture Target Volume control (git-fixes). - asoc: fsl-asoc-card: Fix naming of AC'97 CODEC widgets (git-fixes). - asoc: fsl_asrc_dma: fix potential null-ptr-deref (git-fixes). - asoc: fsl_micfil: Correct the number of steps on SX controls (git-fixes). - asoc: fsl_micfil: Fix error handler with pm_runtime_enable (git-fixes). - asoc: fsl_mqs: move of_node_put() to the correct location (git-fixes). - asoc: fsl_sai: Update to modern clocking terminology (git-fixes). - asoc: fsl_ssi: Rename AC'97 streams to avoid collisions with AC'97 CODEC (git-fixes). - asoc: hdac_hdmi: use set_stream() instead of set_tdm_slots() (git-fixes). - asoc: imx-audmix: check return value of devm_kasprintf() (git-fixes). - asoc: intel: Skylake: Fix declaration of enum skl_ch_cfg (git-fixes). - asoc: intel: Skylake: Fix driver hang during shutdown (git-fixes). - asoc: intel: avs: Access path components under lock (git-fixes). - asoc: intel: avs: Fix declaration of enum avs_channel_config (git-fixes). - asoc: intel: avs: Implement PCI shutdown (git-fixes). - asoc: intel: avs: Use min_t instead of min with cast (git-fixes). - asoc: intel: boards: fix spelling in comments (git-fixes). - asoc: intel: bytcht_es8316: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcht_es8316: move comment to the right place (git-fixes). - asoc: intel: bytcr_rt5640: Add quirk for the Acer Iconia One 7 B1-750 (git-fixes). - asoc: intel: bytcr_rt5640: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_rt5651: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: bytcr_wm5102: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: soc-acpi-byt: Fix 'WM510205' match no longer working (git-fixes). - asoc: intel: soc-acpi: fix copy-paste issue in topology names (git-fixes). - asoc: intel: sof_cs42l42: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_es8336: Drop reference count of ACPI device after use (git-fixes). - asoc: intel: sof_rt5682: always set dpcm_capture for amplifiers (git-fixes). - asoc: intel: sof_sdw: add quirk for Intel 'Rooks County' NUC M15 (git-fixes). - asoc: kirkwood: Iterate over array indexes instead of using pointer math (git-fixes). - asoc: lpass: Fix for KASAN use_after_free out of bounds (git-fixes). - asoc: mchp-spdifrx: Fix uninitialized use of mr in mchp_spdifrx_hw_params() (git-fixes). - asoc: mchp-spdifrx: disable all interrupts in mchp_spdifrx_dai_remove() (git-fixes). - asoc: mchp-spdifrx: fix controls which rely on rsr register (git-fixes). - asoc: mediatek: mt8173: Fix irq error path (git-fixes). - asoc: nau8824: Add quirk to active-high jack-detect (git-fixes). - asoc: rsnd: Remove unnecessary rsnd_dbg_dai_call() (git-fixes). - asoc: rsnd: fixup #endif position (git-fixes). - asoc: rt1308-sdw: add the default value of some registers (git-fixes). - asoc: rt5682: Disable jack detection interrupt during suspend (git-fixes). - asoc: rt715-sdca: fix clock stop prepare timeout issue (git-fixes). - asoc: simple-card: Add missing of_node_put() in case of error (git-fixes). - asoc: soc-compress.c: fixup private_data on snd_soc_new_compress() (git-fixes). - asoc: soc-compress: Inherit atomicity from DAI link for Compress FE (git-fixes). - asoc: soc-compress: Reposition and add pcm_mutex (git-fixes). - asoc: soc-dapm.h: fixup warning struct snd_pcm_substream not declared (git-fixes). - asoc: soc-pcm: fix hw->formats cleared by soc_pcm_hw_init() for dpcm (git-fixes). - asoc: soc-pcm: test if a BE can be prepared (git-fixes). - asoc: sof: Intel: MTL: Fix the device description (git-fixes). - asoc: sof: ipc4-topology: set dmic dai index from copier (git-fixes). - asoc: sof: ipc4: Ensure DSP is in D0I0 during sof_ipc4_set_get_data() (git-fixes). - asoc: ssm2602: Add workaround for playback distortions (git-fixes). - asoc: tlv320adcx140: fix 'ti,gpio-config' DT property init (git-fixes). - asoc: topology: Properly access value coming from topology file (git-fixes). - asoc: topology: Return -ENOMEM on memory allocation failure (git-fixes). - asoc: zl38060 add gpiolib dependency (git-fixes). - asoc: zl38060: Remove spurious gpiolib select (git-fixes). - ata: libata-scsi: Use correct device no in ata_find_dev() (git-fixes). - ata: libata: Fix sata_down_spd_limit() when no link speed is reported (git-fixes). - ata: libata: Set __ATA_BASE_SHT max_sectors (git-fixes). - ata: libata: fix NCQ autosense logic (git-fixes). - ata: pata_macio: Fix compilation warning (git-fixes). - ata: pata_octeon_cf: drop kernel-doc notation (git-fixes). - ata: pata_octeon_cf: fix call to trace_ata_bmdma_stop() (git-fixes). - ath11k: Fix unexpected return buffer manager error for QCA6390 (git-fixes). - ath6kl: Use struct_group() to avoid size-mismatched casting (git-fixes). - ath9k: hif_usb: simplify if-if to if-else (git-fixes). - ath9k: htc: clean up statistics macros (git-fixes). - atm: idt77252: fix kmemleak when rmmod idt77252 (git-fixes). - audit: update the mailing list in MAINTAINERS (git-fixes). - auxdisplay: hd44780: Fix potential memory leak in hd44780_remove() (git-fixes). - backlight: backlight: Fix doc for backlight_device_get_by_name (git-fixes). - batman-adv: Broken sync while rescheduling delayed work (git-fixes). - bcache: Revert 'bcache: use bvec_virt' (git-fixes). - bcache: fix set_at_max_writeback_rate() for multiple attached devices (git-fixes). - bcache: fix wrong bdev parameter when calling bio_alloc_clone() in do_bio_hook() (git-fixes). - bcache: put bch_bio_map() back to correct location in journal_write_unlocked() (git-fixes). - bfq: fix use-after-free in bfq_dispatch_request (git-fixes). - bfq: fix waker_bfqq inconsistency crash (git-fixes). - Blacklist commit that might cause regression (bsc#1210947) - blk-cgroup: fix missing pd_online_fn() while activating policy (git-fixes). - blk-cgroup: properly pin the parent in blkcg_css_online (bsc#1208105). - blk-lib: fix blkdev_issue_secure_erase (git-fixes). - blk-mq: Fix kmemleak in blk_mq_init_allocated_queue (git-fixes). - blk-mq: fix null pointer dereference in blk_mq_clear_rq_mapping() (git-fixes). - blk-mq: fix possible memleak when register 'hctx' failed (git-fixes). - blk-mq: run queue no matter whether the request is the last request (git-fixes). - blk-throttle: fix that io throttle can only work for single bio (git-fixes). - blk-throttle: prevent overflow while calculating wait time (git-fixes). - blk-wbt: fix that 'rwb->wc' is always set to 1 in wbt_init() (git-fixes). - blktrace: Fix output non-blktrace event when blk_classic option enabled (git-fixes). - block, bfq: do not move oom_bfqq (git-fixes). - block, bfq: fix null pointer dereference in bfq_bio_bfqg() (git-fixes). - block, bfq: fix possible uaf for 'bfqq->bic' (git-fixes). - block, bfq: fix uaf for bfqq in bfq_exit_icq_bfqq (git-fixes). - block, bfq: fix uaf for bfqq in bic_set_bfqq() (git-fixes). - block, bfq: protect 'bfqd->queued' by 'bfqd->lock' (git-fixes). - block/bfq-iosched.c: use 'false' rather than 'BLK_RW_ASYNC' (git-fixes). - block/bfq_wf2q: correct weight to ioprio (git-fixes). - block/bio: remove duplicate append pages code (git-fixes). - block: Fix possible memory leak for rq_wb on add_disk failure (git-fixes). - block: add a bdev_max_zone_append_sectors helper (git-fixes). - block: bio-integrity: Copy flags when bio_integrity_payload is cloned (bsc#1208541). - block: check minor range in device_add_disk() (git-fixes). - block: clear ->slave_dir when dropping the main slave_dir reference (git-fixes). - block: do not allow splitting of a REQ_NOWAIT bio (git-fixes). - block: do not allow the same type rq_qos add more than once (git-fixes). - block: do not reverse request order when flushing plug list (bsc#1208588 bsc#1208128). - block: ensure iov_iter advances for added pages (git-fixes). - block: fix and cleanup bio_check_ro (git-fixes). - block: fix default IO priority handling again (git-fixes). - block: fix infinite loop for invalid zone append (git-fixes). - block: fix leaking minors of hidden disks (git-fixes). - block: fix memory leak for elevator on add_disk failure (git-fixes). - block: fix missing blkcg_bio_issue_init (bsc#1208107). - block: loop:use kstatfs.f_bsize of backing file to set discard granularity (git-fixes). - block: mq-deadline: Do not break sequential write streams to zoned HDDs (git-fixes). - block: mq-deadline: Fix dd_finish_request() for zoned devices (git-fixes). - block: mq-deadline: Rename deadline_is_seq_writes() (git-fixes). - block: null_blk: Fix null_zone_write() (git-fixes). - block: pop cached rq before potentially blocking rq_qos_throttle() (git-fixes). - block: use bdev_get_queue() in bio.c (git-fixes). - bluetooth: Add cmd validity checks at the start of hci_sock_ioctl() (git-fixes). - bluetooth: Fix crash when replugging CSR fake controllers (git-fixes). - bluetooth: Fix double free in hci_conn_cleanup (bsc#1209052 CVE-2023-28464). - bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes). - bluetooth: Fix race condition in hci_cmd_sync_clear (git-fixes). - bluetooth: Fix race condition in hidp_session_thread (git-fixes). - bluetooth: Fix support for Read Local Supported Codecs V2 (git-fixes). - bluetooth: Fix use-after-free in hci_remove_ltk/hci_remove_irk (git-fixes). - bluetooth: HCI: Fix global-out-of-bounds (git-fixes). - bluetooth: ISO: Avoid circular locking dependency (git-fixes). - bluetooth: ISO: Fix possible circular locking dependency (git-fixes). - bluetooth: ISO: do not try to remove CIG if there are bound CIS left (git-fixes). - bluetooth: ISO: fix timestamped HCI ISO data packet parsing (git-fixes). - bluetooth: L2CAP: Add missing checks for invalid DCID (git-fixes). - bluetooth: L2CAP: Fix potential user-after-free (git-fixes). - bluetooth: L2CAP: Fix responding with wrong PDU type (git-fixes). - bluetooth: L2CAP: Fix use-after-free in l2cap_disconnect_{req,rsp} (git-fixes). - bluetooth: L2CAP: fix 'bad unlock balance' in l2cap_disconnect_rsp (git-fixes). - bluetooth: Perform careful capability checks in hci_sock_ioctl() (git-fixes). - bluetooth: Remove codec id field in vendor codec definition (git-fixes). - bluetooth: SCO: Fix possible circular locking dependency sco_sock_getsockopt (git-fixes). - bluetooth: Set ISO Data Path on broadcast sink (git-fixes). - bluetooth: btintel: Add LE States quirk support (git-fixes). - bluetooth: btqcomsmd: Fix command timeout after setting BD address (git-fixes). - bluetooth: btsdio: fix use after free bug in btsdio_remove due to unfinished work (git-fixes). - bluetooth: btusb: Add VID:PID 13d3:3529 for Realtek RTL8821CE (git-fixes). - bluetooth: btusb: Remove detection of ISO packets over bulk (git-fixes). - bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if not set (git-fixes). - bluetooth: hci_conn: Fix memory leaks (git-fixes). - bluetooth: hci_conn: Fix not cleaning up on LE Connection failure (git-fixes). - bluetooth: hci_conn: Refactor hci_bind_bis() since it always succeeds (git-fixes). - bluetooth: hci_conn: use HCI dst_type values also for BIS (git-fixes). - bluetooth: hci_core: Detect if an ACL packet is in fact an ISO packet (git-fixes). - bluetooth: hci_core: fix error handling in hci_register_dev() (git-fixes). - bluetooth: hci_event: Fix Invalid wait context (git-fixes). - bluetooth: hci_qca: Fix the teardown problem for real (git-fixes). - bluetooth: hci_qca: fix debugfs registration (git-fixes). - bluetooth: hci_qca: get wakeup status from serdev device handle (git-fixes). - bluetooth: hci_sock: purge socket queues in the destruct() callback (git-fixes). - bluetooth: hci_sync: Fix not indicating power state (git-fixes). - bluetooth: hci_sync: Fix use HCI_OP_LE_READ_BUFFER_SIZE_V2 (git-fixes). - bluetooth: hci_sync: cancel cmd_timer if hci_open failed (git-fixes). - bnxt: Do not read past the end of test names (jsc#SLE-18978). - bnxt: prevent skb UAF after handing over to PTP worker (jsc#SLE-18978). - bnxt_en: Add missing 200G link speed reporting (jsc#SLE-18978). - bnxt_en: Avoid order-5 memory allocation for TPA data (jsc#SLE-18978). - bnxt_en: Do not initialize PTP on older P3/P4 chips (jsc#SLE-18978). - bnxt_en: Do not issue AP reset during ethtool's reset operation (git-fixes). - bnxt_en: Fix mqprio and XDP ring checking logic (jsc#SLE-18978). - bnxt_en: Fix reporting of test result in ethtool selftest (jsc#SLE-18978). - bnxt_en: Fix typo in PCI id to device description string mapping (jsc#SLE-18978). - bnxt_en: Implement .set_port / .unset_port UDP tunnel callbacks (git-fixes). - bnxt_en: Prevent kernel panic when receiving unexpected PHC_UPDATE event (git-fixes). - bnxt_en: Query default VLAN before VNIC setup on a VF (git-fixes). - bnxt_en: Skip firmware fatal error recovery if chip is not accessible (git-fixes). - bnxt_en: fix NQ resource accounting during vf creation on 57500 chips (jsc#SLE-18978). - bnxt_en: set missing reload flag in devlink features (jsc#SLE-18978). - bonding: Fix negative jump label count on nested bonding (bsc#1212685). - bpf, arm64: Call build_prologue() first in first JIT pass (git-fixes) - bpf, arm64: Clear prog->jited_len along prog->jited (git-fixes) - bpf, arm64: Feed byte-offset into bpf line info (git-fixes) - bpf, arm64: Use emit_addr_mov_i64() for BPF_PSEUDO_FUNC (git-fixes) - bpf, perf: Use subprog name when reporting subprog ksymbol (git fixes). - bpf, x64: Factor out emission of REX byte in more cases (git-fixes). - bpf: Add extra path pointer check to d_path helper (git-fixes). - bpf: Fix UAF in task local storage (bsc#1212564). - bpf: Fix a possible task gone issue with bpf_send_signal[_thread]() helpers (git-fixes). - bpf: Fix extable address check (git-fixes). - bpf: Fix extable fixup offset (git-fixes). - bpf: Skip task with pid=1 in send_signal_common() (git-fixes). - btrfs: fix race between quota enable and quota rescan ioctl (bsc#1207158). - btrfs: fix race between quota rescan and disable leading to NULL pointer deref (bsc#1207158). - btrfs: fix trace event name typo for FLUSH_DELAYED_REFS (git-fixes). - btrfs: move QUOTA_ENABLED check to rescan_should_stop from btrfs_qgroup_rescan_worker (bsc#1207158). - btrfs: qgroup: remove duplicated check in adding qgroup relations (bsc#1207158). - btrfs: qgroup: remove outdated TODO comments (bsc#1207158). - bus: fsl-mc: fsl-mc-allocator: Drop a write-only variable (git-fixes). - bus: mhi: host: Fix race between channel preparation and M0 event (git-fixes). - bus: mhi: host: Range check CHDBOFF and ERDBOFF (git-fixes). - bus: mhi: host: Remove duplicate ee check for syserr (git-fixes). - bus: mhi: host: Use mhi_tryset_pm_state() for setting fw error state (git-fixes). - bus: sunxi-rsb: Fix error handling in sunxi_rsb_init() (git-fixes). - bus: ti-sysc: Fix dispc quirk masking bool variables (git-fixes). - ca8210: Fix unsigned mac_len comparison with zero in ca8210_skb_tx() (git-fixes). - ca8210: fix mac_len negative array access (git-fixes). - can: bcm: bcm_tx_setup(): fix KMSAN uninit-value in vfs_write (git-fixes). - can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT events (git-fixes). - can: isotp: isotp_sendmsg(): fix return error fix on TX path (git-fixes). - can: isotp: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: j1939: avoid possible use-after-free when j1939_can_rx_register fails (git-fixes). - can: j1939: change j1939_netdev_lock type to mutex (git-fixes). - can: j1939: do not wait 250 ms if the same addr was already claimed (git-fixes). - can: j1939: fix errant WARN_ON_ONCE in j1939_session_deactivate (git-fixes). - can: j1939: j1939_sk_send_loop_abort(): improved error queue handling in J1939 Socket (git-fixes). - can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory access (git-fixes). - can: j1939: recvmsg(): allow MSG_CMSG_COMPAT flag (git-fixes). - can: kvaser_pciefd: Call request_irq() before enabling interrupts (git-fixes). - can: kvaser_pciefd: Clear listen-only bit if not explicitly requested (git-fixes). - can: kvaser_pciefd: Disable interrupts in probe error path (git-fixes). - can: kvaser_pciefd: Do not send EFLUSH command on TFD interrupt (git-fixes). - can: kvaser_pciefd: Empty SRB buffer in probe (git-fixes). - can: kvaser_pciefd: Remove handler for unused KVASER_PCIEFD_PACK_TYPE_EFRAME_ACK (git-fixes). - can: kvaser_pciefd: Remove useless write to interrupt register (git-fixes). - can: kvaser_pciefd: Set CAN_STATE_STOPPED in kvaser_pciefd_stop() (git-fixes). - can: kvaser_usb: Add struct kvaser_usb_busparams (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Get capabilities from device (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Handle CMD_ERROR_EVENT (git-fixes). - can: kvaser_usb: kvaser_usb_leaf: Rename {leaf,usbcan}_cmd_error_event to {leaf,usbcan}_cmd_can_error_event (git-fixes). - can: kvaser_usb_leaf: Fix overread with an invalid command (git-fixes). - can: length: fix bitstuffing count (git-fixes). - can: length: fix description of the RRS field (git-fixes). - can: length: make header self contained (git-fixes). - cassini: Fix a memory leak in the error handling path of cas_init_one() (git-fixes). - ceph: avoid use-after-free in ceph_fl_release_lock() (jsc#SES-1880). - ceph: blocklist the kclient when receiving corrupted snap trace (jsc#SES-1880). - ceph: fix use-after-free bug for inodes when flushing capsnaps (bsc#1212540). - ceph: flush cap releases when the session is flushed (bsc#1208428). - ceph: flush cap releases when the session is flushed (jsc#SES-1880). - ceph: force updating the msg pointer in non-split case (bsc#1211804). - ceph: move mount state enum to super.h (jsc#SES-1880). - ceph: remove useless session parameter for check_caps() (jsc#SES-1880). - ceph: switch to vfs_inode_has_locks() to fix file lock bug (jsc#SES-1880). - ceph: try to check caps immediately after async creating finishes (jsc#SES-1880). - ceph: update the time stamps and try to drop the suid/sgid (bsc#1209504). - ceph: use locks_inode_context helper (jsc#SES-1880). - cfg80211: allow continuous radar monitoring on offchannel chain (bsc#1209980). - cfg80211: fix possible NULL pointer dereference in cfg80211_stop_offchan_radar_detection (bsc#1209980). - cfg80211: implement APIs for dedicated radar detection HW (bsc#1209980). - cfg80211: move offchan_cac_event to a dedicated work (bsc#1209980). - cfg80211: rename offchannel_chain structs to background_chain to avoid confusion with ETSI standard (bsc#1209980). - cfg80211: schedule offchan_cac_abort_wk in cfg80211_radar_event (bsc#1209980). - cgroup.c: add helper __cset_cgroup_from_root to cleanup duplicated codes (bsc#1203906). - cgroup/cpuset: Wake up cpuset_attach_wq tasks in cpuset_cancel_attach() (bsc#1210827). - cgroup: Homogenize cgroup_get_from_id() return value (bsc#1205650). - cgroup: Honor caller's cgroup NS when resolving path (bsc#1205650). - cgroup: Make cgroup_get_from_id() prettier (bsc#1205650). - cgroup: Reorganize css_set_lock and kernfs path processing (bsc#1205650). - cgroup: Use cgroup_attach_{lock,unlock}() from cgroup_attach_task_all() (bsc#1212563). - cgroup: always put cset in cgroup_css_set_put_fork (bsc#1212561). - cgroup: cgroup: Honor caller's cgroup NS when resolving cgroup id (bsc#1205650). - cgroup: fix missing cpus_read_{lock,unlock}() in cgroup_transfer_tasks() (bsc#1212563). - cgroup: reduce dependency on cgroup_mutex (bsc#1205650). - cifs: Avoid a cast in add_lease_context() (bsc#1193629). - cifs: Check the lease context if we actually got a lease (bsc#1193629). - cifs: Convert struct fealist away from 1-element array (bsc#1193629). - cifs: Fix lost destroy smbd connection when MR allocate failed (git-fixes). - cifs: Fix oops due to uncleared server->smbd_conn in reconnect (git-fixes). - cifs: Fix smb2_set_path_size() (git-fixes). - cifs: Fix uninitialized memory read in smb3_qfs_tcon() (bsc#1193629). - cifs: Fix uninitialized memory reads for oparms.mode (bsc#1193629). - cifs: Fix use-after-free in rdata->read_into_pages() (git-fixes). - cifs: Fix warning and UAF when destroy the MR list (git-fixes). - cifs: Get rid of unneeded conditional in the smb2_get_aead_req() (bsc#1193629). - cifs: Move the in_send statistic to __smb_send_rqst() (git-fixes). - cifs: Replace remaining 1-element arrays (bsc#1193629). - cifs: Replace zero-length arrays with flexible-array members (bsc#1193629). - cifs: Simplify SMB2_open_init() (bsc#1193629). - cifs: Use kstrtobool() instead of strtobool() (bsc#1193629). - cifs: append path to open_enter trace event (bsc#1193629). - cifs: avoid dup prefix path in dfs_get_automount_devname() (git-fixes). - cifs: avoid potential races when handling multiple dfs tcons (bsc#1208758). - cifs: avoid race conditions with parallel reconnects (bsc#1193629). - cifs: avoid races in parallel reconnects in smb1 (bsc#1193629). - cifs: avoid re-lookups in dfs_cache_find() (bsc#1193629). - cifs: check only tcon status on tcon related functions (bsc#1193629). - cifs: do not include page data when checking signature (git-fixes). - cifs: do not poll server interfaces too regularly (bsc#1193629). - cifs: do not take exclusive lock for updating target hints (bsc#1193629). - cifs: do not try to use rdma offload on encrypted connections (bsc#1193629). - cifs: double lock in cifs_reconnect_tcon() (git-fixes). - cifs: dump pending mids for all channels in DebugData (bsc#1193629). - cifs: empty interface list when server does not support query interfaces (bsc#1193629). - cifs: fix DFS traversal oops without CONFIG_CIFS_DFS_UPCALL (bsc#1193629). - cifs: fix dentry lookups in directory handle cache (bsc#1193629). - cifs: fix missing unload_nls() in smb2_reconnect() (bsc#1193629). - cifs: fix mount on old smb servers (boo#1206935). - cifs: fix negotiate context parsing (bsc#1210301). - cifs: fix pcchunk length type in smb2_copychunk_range (bsc#1193629). - cifs: fix potential deadlock in cache_refresh_path() (git-fixes). - cifs: fix potential race when tree connecting ipc (bsc#1208758). - cifs: fix potential use-after-free bugs in TCP_Server_Info::hostname (bsc#1208758). - cifs: fix return of uninitialized rc in dfs_cache_update_tgthint() (bsc#1193629). - cifs: fix sharing of DFS connections (bsc#1208758). - cifs: fix smb1 mount regression (bsc#1193629). - cifs: fix use-after-free bug in refresh_cache_worker() (bsc#1193629). - cifs: generate signkey for the channel that's reconnecting (bsc#1193629). - cifs: get rid of dead check in smb2_reconnect() (bsc#1193629). - cifs: get rid of dns resolve worker (bsc#1193629). - cifs: get rid of unneeded conditional in cifs_get_num_sgs() (bsc#1193629). - cifs: handle cache lookup errors different than -ENOENT (bsc#1193629). - cifs: improve checking of DFS links over STATUS_OBJECT_NAME_INVALID (git-fixes). - cifs: introduce cifs_io_parms in smb2_async_writev() (bsc#1193629). - cifs: lock chan_lock outside match_session (bsc#1193629). - cifs: mapchars mount option ignored (bsc#1193629). - cifs: match even the scope id for ipv6 addresses (bsc#1193629). - cifs: missing lock when updating session status (bsc#1193629). - cifs: prevent data race in cifs_reconnect_tcon() (bsc#1193629). - cifs: prevent data race in smb2_reconnect() (bsc#1193629). - cifs: prevent infinite recursion in CIFSGetDFSRefer() (bsc#1193629). - cifs: print last update time for interface list (bsc#1193629). - cifs: print session id while listing open files (bsc#1193629). - cifs: print smb3_fs_context::source when mounting (bsc#1193629). - cifs: protect access of TCP_Server_Info::{origin,leaf}_fullpath (bsc#1208758). - cifs: protect session status check in smb2_reconnect() (bsc#1208758). - cifs: release leases for deferred close handles when freezing (bsc#1193629). - cifs: remove duplicate code in __refresh_tcon() (bsc#1193629). - cifs: remove unneeded 2bytes of padding from smb2 tree connect (bsc#1193629). - cifs: remove unused function (bsc#1193629). - cifs: return DFS root session id in DebugData (bsc#1193629). - cifs: return a single-use cfid if we did not get a lease (bsc#1193629). - cifs: reuse cifs_match_ipaddr for comparison of dstaddr too (bsc#1193629). - cifs: sanitize paths in cifs_update_super_prepath (git-fixes). - cifs: set DFS root session in cifs_get_smb_ses() (bsc#1193629). - cifs: split out smb3_use_rdma_offload() helper (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - cifs: update ip_addr for ses only for primary chan setup (bsc#1193629). - cifs: use DFS root session instead of tcon ses (bsc#1193629). - cifs: use tcon allocation functions even for dummy tcon (git-fixes). - cifs: use the least loaded channel for sending requests (bsc#1193629). - clk: Fix memory leak in devm_clk_notifier_register() (git-fixes). - clk: HI655X: select REGMAP instead of depending on it (git-fixes). - clk: Honor CLK_OPS_PARENT_ENABLE in clk_core_is_enabled() (git-fixes). - clk: add missing of_node_put() in 'assigned-clocks' property parsing (git-fixes). - clk: at91: clk-sam9x60-pll: fix return value check (git-fixes). - clk: cdce925: check return value of kasprintf() (git-fixes). - clk: imx: avoid memory leak (git-fixes). - clk: imx: clk-imx8mn: fix memory leak in imx8mn_clocks_probe (git-fixes). - clk: imx: clk-imx8mp: improve error handling in imx8mp_clocks_probe() (git-fixes). - clk: imx: scu: use _safe list iterator to avoid a use after free (git-fixes). - clk: ingenic: jz4760: Update M/N/OD calculation algorithm (git-fixes). - clk: keystone: sci-clk: check return value of kasprintf() (git-fixes). - clk: mxl: Add option to override gate clks (git-fixes). - clk: mxl: Fix a clk entry by adding relevant flags (git-fixes). - clk: mxl: Remove redundant spinlocks (git-fixes). - clk: mxl: Switch from direct readl/writel based IO to regmap based IO (git-fixes). - clk: mxl: syscon_node_to_regmap() returns error pointers (git-fixes). - clk: qcom: camcc-sc7180: Add parent dependency to all camera GDSCs (git-fixes). - clk: qcom: gcc-ipq6018: Use floor ops for sdcc clocks (git-fixes). - clk: qcom: gcc-qcs404: disable gpll[04]_out_aux parents (git-fixes). - clk: qcom: gcc-qcs404: fix names of the DSI clocks used as parents (git-fixes). - clk: qcom: gcc-sm8350: fix PCIe PIPE clocks handling (git-fixes). - clk: qcom: regmap: add PHY clock source implementation (git-fixes). - clk: ralink: fix 'mt7621_gate_is_enabled()' function (git-fixes). - clk: renesas: cpg-mssr: Fix use after free if cpg_mssr_common_init() failed (git-fixes). - clk: renesas: cpg-mssr: Remove superfluous check in resume code (git-fixes). - clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src to reparent (git-fixes). - clk: samsung: Add Exynos4212 compatible to CLKOUT driver (git-fixes). - clk: si5341: check return value of {devm_}kasprintf() (git-fixes). - clk: si5341: free unused memory on probe failure (git-fixes). - clk: si5341: return error if one synth clock registration fails (git-fixes). - clk: sprd: set max_register according to mapping range (git-fixes). - clk: tegra20: fix gcc-7 constant overflow warning (git-fixes). - clk: tegra: tegra124-emc: Fix potential memory leak (git-fixes). - clk: ti: clkctrl: check return value of kasprintf() (git-fixes). - clk: vc5: check memory returned by kasprintf() (git-fixes). - clocksource/drivers/cadence-ttc: Fix memory leak in ttc_timer_probe (git-fixes). - clocksource/drivers/davinci: Fix memory leak in davinci_timer_register when init fails (git-fixes). - clocksource/drivers/mediatek: Optimize systimer irq clear flow on shutdown (git-fixes). - clocksource: Suspend the watchdog temporarily when high read latency detected (git-fixes). - comedi: use menuconfig for main Comedi menu (git-fixes). - configfs: fix possible memory leak in configfs_create_dir() (git-fixes). - cpufreq: Add Tegra234 to cpufreq-dt-platdev blocklist (git-fixes). - cpufreq: CPPC: Fix build error without CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953). - cpufreq: CPPC: Fix performance/frequency conversion (git-fixes). - cpufreq: armada-37xx: stop using 0 as NULL pointer (git-fixes). - cpumask: fix incorrect cpumask scanning result checks (bsc#1210943). - crypto: acomp - define max size for destination (jsc#PED-3692) - crypto: arm64 - Fix unused variable compilation warnings of (git-fixes) - crypto: caam - Clear some memory in instantiate_rng (git-fixes). - crypto: ccp - Avoid page allocation failure warning for SEV_GET_ID2 (git-fixes). - crypto: ccp - Failure on re-initialization due to duplicate sysfs filename (git-fixes). - crypto: crypto4xx - Call dma_unmap_page when done (git-fixes). - crypto: drbg - Only fail when jent is unavailable in FIPS mode (git-fixes). - crypto: drivers - move from strlcpy with unused retval to (jsc#PED-3692) - crypto: essiv - Handle EBUSY correctly (git-fixes). - crypto: hisilicon/qm - add missing pci_dev_put() in q_num_set() (git-fixes). - crypto: marvell/cesa - Fix type mismatch warning (git-fixes). - crypto: nx - fix build warnings when DEBUG_FS is not enabled (git-fixes). - crypto: qat - Fix unsigned function returning negative (jsc#PED-3692) - crypto: qat - Removes the x86 dependency on the QAT drivers (jsc#PED-3692) - crypto: qat - abstract PFVF messages with struct pfvf_message (jsc#PED-3692) - crypto: qat - abstract PFVF receive logic (jsc#PED-3692) - crypto: qat - abstract PFVF send function (jsc#PED-3692) - crypto: qat - add PFVF support to enable the reset of ring (jsc#PED-3692) - crypto: qat - add PFVF support to the GEN4 host driver (jsc#PED-3692) - crypto: qat - add VF and PF wrappers to common send function (jsc#PED-3692) - crypto: qat - add backlog mechanism (jsc#PED-3692) - crypto: qat - add check for invalid PFVF protocol version 0 (jsc#PED-3692) - crypto: qat - add check to validate firmware images (jsc#PED-3692) - crypto: qat - add limit to linked list parsing (jsc#PED-3692) - crypto: qat - add misc workqueue (jsc#PED-3692) - crypto: qat - add missing restarting event notification in (jsc#PED-3692) - crypto: qat - add param check for DH (jsc#PED-3692) - crypto: qat - add param check for RSA (jsc#PED-3692) - crypto: qat - add pfvf_ops (jsc#PED-3692) - crypto: qat - add resubmit logic for decompression (jsc#PED-3692) - crypto: qat - add support for 401xx devices (jsc#PED-3692) - crypto: qat - add support for compression for 4xxx (jsc#PED-3692) - crypto: qat - add the adf_get_pmisc_base() helper function (jsc#PED-3692) - crypto: qat - allow detection of dc capabilities for 4xxx (jsc#PED-3692) - crypto: qat - change PFVF ACK behaviour (jsc#PED-3692) - crypto: qat - change behaviour of (jsc#PED-3692) - crypto: qat - change bufferlist logic interface (jsc#PED-3692) - crypto: qat - config VFs based on ring-to-svc mapping (jsc#PED-3692) - crypto: qat - differentiate between pf2vf and vf2pf offset (jsc#PED-3692) - crypto: qat - disable AER if an error occurs in probe (jsc#PED-3692) - crypto: qat - do not handle PFVF sources for qat_4xxx (jsc#PED-3692) - crypto: qat - do not rely on min version (jsc#PED-3692) - crypto: qat - enable deflate for QAT GEN4 (jsc#PED-3692) - crypto: qat - enable power management for QAT GEN4 (jsc#PED-3692) - crypto: qat - exchange device capabilities over PFVF (jsc#PED-3692) - crypto: qat - exchange ring-to-service mappings over PFVF (jsc#PED-3692) - crypto: qat - expose deflate through acomp api for QAT GEN2 (jsc#PED-3692) - crypto: qat - expose device config through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - expose device state through sysfs for 4xxx (jsc#PED-3692) - crypto: qat - extend buffer list interface (jsc#PED-3692) - crypto: qat - extend crypto capability detection for 4xxx (jsc#PED-3692) - crypto: qat - extract send and wait from (jsc#PED-3692) - crypto: qat - fix DMA transfer direction (jsc#PED-3692) - crypto: qat - fix ETR sources enabled by default on GEN2 (jsc#PED-3692) - crypto: qat - fix VF IDs in PFVF log messages (jsc#PED-3692) - crypto: qat - fix a signedness bug in get_service_enabled() (jsc#PED-3692) - crypto: qat - fix a typo in a comment (jsc#PED-3692) - crypto: qat - fix access to PFVF interrupt registers for GEN4 (jsc#PED-3692) - crypto: qat - fix definition of ring reset results (jsc#PED-3692) - crypto: qat - fix error return code in adf_probe (git-fixes). - crypto: qat - fix error return code in adf_probe (jsc#PED-3692) - crypto: qat - fix handling of VF to PF interrupts (jsc#PED-3692) - crypto: qat - fix initialization of pfvf cap_msg structures (jsc#PED-3692) - crypto: qat - fix initialization of pfvf rts_map_msg (jsc#PED-3692) - crypto: qat - fix off-by-one error in PFVF debug print (jsc#PED-3692) - crypto: qat - fix out-of-bounds read (git-fixes). - crypto: qat - fix wording and formatting in code comment (jsc#PED-3692) - crypto: qat - flush vf workqueue at driver removal (jsc#PED-3692) - crypto: qat - free irq in case of failure (jsc#PED-3692) - crypto: qat - free irqs only if allocated (jsc#PED-3692) - crypto: qat - generalize crypto request buffers (jsc#PED-3692) - crypto: qat - get compression extended capabilities (jsc#PED-3692) - crypto: qat - handle retries due to collisions in (jsc#PED-3692) - crypto: qat - honor CRYPTO_TFM_REQ_MAY_SLEEP flag (jsc#PED-3692) - crypto: qat - improve logging of PFVF messages (jsc#PED-3692) - crypto: qat - improve the ACK timings in PFVF send (jsc#PED-3692) - crypto: qat - introduce support for PFVF block messages (jsc#PED-3692) - crypto: qat - leverage bitfield.h utils for PFVF messages (jsc#PED-3692) - crypto: qat - leverage read_poll_timeout in PFVF send (jsc#PED-3692) - crypto: qat - leverage the GEN2 VF mask definiton (jsc#PED-3692) - crypto: qat - make PFVF message construction direction (jsc#PED-3692) - crypto: qat - make PFVF send and receive direction agnostic (jsc#PED-3692) - crypto: qat - move VF message handler to adf_vf2pf_msg.c (jsc#PED-3692) - crypto: qat - move and rename GEN4 error register definitions (jsc#PED-3692) - crypto: qat - move interrupt code out of the PFVF handler (jsc#PED-3692) - crypto: qat - move pfvf collision detection values (jsc#PED-3692) - crypto: qat - move vf2pf interrupt helpers (jsc#PED-3692) - crypto: qat - pass the PF2VF responses back to the callers (jsc#PED-3692) - crypto: qat - prevent spurious MSI interrupt in VF (jsc#PED-3692) - crypto: qat - re-enable interrupts for legacy PFVF messages (jsc#PED-3692) - crypto: qat - re-enable registration of algorithms (jsc#PED-3692) - crypto: qat - refactor PF top half for PFVF (jsc#PED-3692) - crypto: qat - refactor pfvf version request messages (jsc#PED-3692) - crypto: qat - refactor submission logic (jsc#PED-3692) - crypto: qat - relocate PFVF PF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF VF related logic (jsc#PED-3692) - crypto: qat - relocate PFVF disabled function (jsc#PED-3692) - crypto: qat - relocate and rename adf_sriov_prepare_restart() (jsc#PED-3692) - crypto: qat - relocate backlog related structures (jsc#PED-3692) - crypto: qat - relocate bufferlist logic (jsc#PED-3692) - crypto: qat - relocate qat_algs_alloc_flags() (jsc#PED-3692) - crypto: qat - remove duplicated logic across GEN2 drivers (jsc#PED-3692) - crypto: qat - remove empty sriov_configure() (jsc#PED-3692) - crypto: qat - remove line wrapping for pfvf_ops functions (jsc#PED-3692) - crypto: qat - remove the unnecessary get_vintmsk_offset() (jsc#PED-3692) - crypto: qat - remove unmatched CPU affinity to cluster IRQ (jsc#PED-3692) - crypto: qat - remove unnecessary tests to detect PFVF support (jsc#PED-3692) - crypto: qat - remove unneeded assignment (jsc#PED-3692) - crypto: qat - remove unneeded braces (jsc#PED-3692) - crypto: qat - remove unneeded packed attribute (jsc#PED-3692) - crypto: qat - remove unused PFVF stubs (jsc#PED-3692) - crypto: qat - rename and relocate GEN2 config function (jsc#PED-3692) - crypto: qat - rename bufferlist functions (jsc#PED-3692) - crypto: qat - rename pfvf collision constants (jsc#PED-3692) - crypto: qat - reorganize PFVF code (jsc#PED-3692) - crypto: qat - reorganize PFVF protocol definitions (jsc#PED-3692) - crypto: qat - replace deprecated MSI API (jsc#PED-3692) - crypto: qat - replace disable_vf2pf_interrupts() (jsc#PED-3692) - crypto: qat - replace get_current_node() with numa_node_id() (jsc#PED-3692) - crypto: qat - rework the VF2PF interrupt handling logic (jsc#PED-3692) - crypto: qat - set CIPHER capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for DH895XCC (jsc#PED-3692) - crypto: qat - set COMPRESSION capability for QAT GEN2 (jsc#PED-3692) - crypto: qat - set DMA mask to 48 bits for Gen2 (jsc#PED-3692) - crypto: qat - set PFVF_MSGORIGIN just before sending (jsc#PED-3692) - crypto: qat - share adf_enable_pf2vf_comms() from (jsc#PED-3692) - crypto: qat - simplify adf_enable_aer() (jsc#PED-3692) - crypto: qat - simplify code and axe the use of a deprecated (jsc#PED-3692) - crypto: qat - split PFVF message decoding from handling (jsc#PED-3692) - crypto: qat - stop using iommu_present() (jsc#PED-3692) - crypto: qat - store the PFVF protocol version of the (jsc#PED-3692) - crypto: qat - store the ring-to-service mapping (jsc#PED-3692) - crypto: qat - support fast ACKs in the PFVF protocol (jsc#PED-3692) - crypto: qat - support the reset of ring pairs on PF (jsc#PED-3692) - crypto: qat - test PFVF registers for spurious interrupts on (jsc#PED-3692) - crypto: qat - use enums for PFVF protocol codes (jsc#PED-3692) - crypto: qat - use hweight for bit counting (jsc#PED-3692) - crypto: qat - use pre-allocated buffers in datapath (jsc#PED-3692) - crypto: qat - use reference to structure in dma_map_single() (jsc#PED-3692) - crypto: qat - use u32 variables in all GEN4 pfvf_ops (jsc#PED-3692) - crypto: rsa-pkcs1pad - Use akcipher_request_complete (git-fixes). - crypto: sa2ul - Select CRYPTO_DES (git-fixes). - crypto: safexcel - Cleanup ring IRQ workqueues on load failure (git-fixes). - crypto: seqiv - Handle EBUSY correctly (git-fixes). - crypto: sun8i-ss - Fix a test in sun8i_ss_setup_ivs() (git-fixes). - crypto: x86/ghash - fix unaligned access in ghash_setkey() (git-fixes). - crypto: xts - Handle EBUSY correctly (git-fixes). - cxgb4: fix missing unlock on ETHOFLD desc collect fail path (jsc#SLE-18992). - debugfs: add debugfs_lookup_and_remove() (git-fixes). - debugfs: fix error when writing negative value to atomic_t debugfs file (git-fixes). - device-dax: Fix duplicate 'hmem' device registration (bsc#1211400). - devlink: hold region lock when flushing snapshots (git-fixes). - disable two x86 PAT related patches (bsc#1212456) This may break i915 when booted with nopat, but fixes /dev/mem access in Xen PV domU. - dm btree: add a defensive bounds check to insert_at() (git-fixes). - dm cache: Fix ABBA deadlock between shrink_slab and dm_cache_metadata_abort (git-fixes). - dm cache: Fix UAF in destroy() (git-fixes). - dm cache: set needs_check flag after aborting metadata (git-fixes). - dm clone: Fix UAF in clone_dtr() (git-fixes). - dm integrity: Fix UAF in dm_integrity_dtr() (git-fixes). - dm integrity: clear the journal on suspend (git-fixes). - dm integrity: flush the journal on suspend (git-fixes). - dm ioctl: fix misbehavior if list_versions races with module loading (git-fixes). - dm ioctl: prevent potential spectre v1 gadget (git-fixes). - dm raid: fix address sanitizer warning in raid_resume (git-fixes). - dm raid: fix address sanitizer warning in raid_status (git-fixes). - dm space map common: add bounds check to sm_ll_lookup_bitmap() (git-fixes). - dm thin: Fix ABBA deadlock between shrink_slab and dm_pool_abort_metadata (git-fixes). - dm thin: Fix UAF in run_timer_softirq() (git-fixes). - dm thin: Use last transaction's pmd->root when commit failed (git-fixes). - dm thin: resume even if in FAIL mode (git-fixes). - dm writecache: set a default MAX_WRITEBACK_JOBS (git-fixes). - dm: fix alloc_dax error handling in alloc_dev (git-fixes). - dm: requeue IO if mapping table not yet available (git-fixes). - dma-buf: Use dma_fence_unwrap_for_each when importing fences (git-fixes). - dma-buf: cleanup kerneldoc of removed component (git-fixes). - dma-direct: use is_swiotlb_active in dma_direct_map_page (PED-3259). - dma-mapping: reformat comment to suppress htmldoc warning (git-fixes). - dma: gpi: remove spurious unlock in gpi_ch_init (git-fixes). - dmaengine: at_xdmac: Move the free desc to the tail of the desc list (git-fixes). - dmaengine: at_xdmac: do not enable all cyclic channels (git-fixes). - dmaengine: at_xdmac: fix potential Oops in at_xdmac_prep_interleaved() (git-fixes). - dmaengine: dw-axi-dmac: Do not dereference NULL structure (git-fixes). - dmaengine: dw-edma: Do not permit non-inc interleaved xfers (git-fixes). - dmaengine: dw-edma: Drop chancnt initialization (git-fixes). - dmaengine: dw-edma: Fix invalid interleaved xfers semantics (git-fixes). - dmaengine: dw-edma: Fix missing src/dst address of interleaved xfers (git-fixes). - dmaengine: dw-edma: Fix readq_ch() return value truncation (git-fixes). - dmaengine: dw-edma: Fix to change for continuous transfer (git-fixes). - dmaengine: dw-edma: Fix to enable to issue dma request on DMA processing (git-fixes). - dmaengine: idxd: Do not enable user type Work Queue without Shared Virtual Addressing (git-fixes). - dmaengine: idxd: Only call idxd_enable_system_pasid() if succeeded in enabling SVA feature (git-fixes). - dmaengine: idxd: Separate user and kernel pasid enabling (git-fixes). - dmaengine: idxd: Set traffic class values in GRPCFG on DSA 2.0 (git-fixes). - dmaengine: imx-sdma: Fix a possible memory leak in sdma_transfer_init (git-fixes). - dmaengine: mv_xor_v2: Fix an error code (git-fixes). - dmaengine: pl330: rename _start to prevent build error (git-fixes). - dmaengine: ptdma: check for null desc before calling pt_cmd_callback (git-fixes). - dmaengine: sf-pdma: pdma_desc memory leak fix (git-fixes). - dmaengine: tegra: Fix memory leak in terminate_all() (git-fixes). - do not reuse connection if share marked as isolated (bsc#1193629). - docs/memory-barriers.txt: Add a missed closing parenthesis (git-fixes). - docs/scripts/gdb: add necessary make scripts_gdb step (git-fixes). - docs: Correct missing 'd_' prefix for dentry_operations member d_weak_revalidate (git-fixes). - docs: driver-api: firmware_loader: fix missing argument in usage example (git-fixes). - docs: ftrace: fix a issue with duplicated subtitle number (git-fixes). - docs: gdbmacros: print newest record (git-fixes). - docs: networking: Update codeaurora references for rmnet (git-fixes). - docs: networking: fix x25-iface.rst heading & index order (git-fixes). - documentation: ABI: sysfs-class-net-qmi: pass_through contact update (git-fixes). - documentation: bonding: fix the doc of peer_notif_delay (git-fixes). - documentation: timers: hrtimers: Make hybrid union historical (git-fixes). - driver core: Do not require dynamic_debug for initcall_debug probe timing (git-fixes). - driver core: fix potential null-ptr-deref in device_add() (git-fixes). - driver core: fix resource leak in device_add() (git-fixes). - driver core: fw_devlink: Add DL_FLAG_CYCLE support to device links (git-fixes). - drivers/base: Fix unsigned comparison to -1 in CPUMAP_FILE_MAX_BYTES (bsc#1208815). - drivers/base: fix userspace break from using bin_attributes for cpumap and cpulist (bsc#1208815). - drivers/md/md-bitmap: check the return value of md_bitmap_get_counter() (git-fixes). - drivers: base: component: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: dd: fix memory leak with using debugfs_lookup() (git-fixes). - drivers: base: transport_class: fix possible memory leak (git-fixes). - drivers: base: transport_class: fix resource leak when transport_add_device() fails (git-fixes). - drivers: meson: secure-pwrc: always enable DMA domain (git-fixes). - drivers: staging: rtl8723bs: Fix locking in _rtw_join_timeout_handler() (git-fixes). - drivers: staging: rtl8723bs: Fix locking in rtw_scan_timeout_handler() (git-fixes). - drivers: vmbus: Check for channel allocation before looking up relids (git-fixes). - drivers:md:fix a potential use-after-free bug (git-fixes). - drm-hyperv: Add a bug reference to two existing changes (bsc#1211281). - drm/amd/amdgpu: fix warning during suspend (bsc#1206843). - drm/amd/display/dc/dce60/Makefile: Fix previous attempt to silence known override-init warnings (git-fixes). - drm/amd/display: Add DCN314 display SG Support (bsc#1206843). - drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub (git-fixes). - drm/amd/display: Add NULL plane_state check for cursor disable logic (git-fixes). - drm/amd/display: Add check for DET fetch latency hiding for dcn32 (bsc#1206843). - drm/amd/display: Add logging for display MALL refresh setting (git-fixes). - drm/amd/display: Add minimal pipe split transition state (git-fixes). - drm/amd/display: Add missing brackets in calculation (bsc#1206843). - drm/amd/display: Add wrapper to call planes and stream update (git-fixes). - drm/amd/display: Adjust downscaling limits for dcn314 (bsc#1206843). - drm/amd/display: Allow subvp on vactive pipes that are 2560x1440@60 (bsc#1206843). - drm/amd/display: Clear MST topology if it fails to resume (git-fixes). - drm/amd/display: Conversion to bool not necessary (git-fixes). - drm/amd/display: Defer DIG FIFO disable after VID stream enable (bsc#1206843). - drm/amd/display: Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: Disable HUBP/DPP PG on DCN314 for now (bsc#1206843). - drm/amd/display: Do not clear GPINT register when releasing DMUB from reset (git-fixes). - drm/amd/display: Do not commit pipe when updating DRR (bsc#1206843). - drm/amd/display: Do not set DRR on pipe Commit (bsc#1206843). - drm/amd/display: Enable P-state validation checks for DCN314 (bsc#1206843). - drm/amd/display: Explicitly specify update type per plane info change (git-fixes). - drm/amd/display: Fail atomic_check early on normalize_zpos error (git-fixes). - drm/amd/display: Fix DP MST sinks removal issue (git-fixes). - drm/amd/display: Fix DTBCLK disable requests and SRC_SEL programming (bsc#1206843). - drm/amd/display: Fix artifacting on eDP panels when engaging freesync video mode (git-fixes). - drm/amd/display: Fix display corruption w/ VSR enable (bsc#1206843). - drm/amd/display: Fix hang when skipping modeset (git-fixes). - drm/amd/display: Fix potential null dereference (git-fixes). - drm/amd/display: Fix potential null-deref in dm_resume (git-fixes). - drm/amd/display: Fix race condition in DPIA AUX transfer (bsc#1206843). - drm/amd/display: Fix set scaling doesn's work (git-fixes). - drm/amd/display: Fix timing not changning when freesync video is enabled (git-fixes). - drm/amd/display: Fixes for dcn32_clk_mgr implementation (git-fixes). - drm/amd/display: Include virtual signal to set k1 and k2 values (bsc#1206843). - drm/amd/display: Move DCN314 DOMAIN power control to DMCUB (bsc#1206843). - drm/amd/display: Pass the right info to drm_dp_remove_payload (bsc#1206843). - drm/amd/display: Properly handle additional cases where DCN is not supported (git-fixes). - drm/amd/display: Properly reuse completion structure (bsc#1206843). - drm/amd/display: Reduce expected sdp bandwidth for dcn321 (bsc#1206843). - drm/amd/display: Remove OTG DIV register write for Virtual signals (bsc#1206843). - drm/amd/display: Report to ACPI video if no panels were found (bsc#1206843). - drm/amd/display: Reset DMUB mailbox SW state after HW reset (bsc#1206843). - drm/amd/display: Reset OUTBOX0 r/w pointer on DMUB reset (git-fixes). - drm/amd/display: Return error code on DSC atomic check failure (git-fixes). - drm/amd/display: Revert Reduce delay when sink device not able to ACK 00340h write (git-fixes). - drm/amd/display: Set dcn32 caps.seamless_odm (bsc#1206843). - drm/amd/display: Set hvm_enabled flag for S/G mode (bsc#1206843). - drm/amd/display: Simplify same effect if/else blocks (git-fixes). - drm/amd/display: Take FEC Overhead into Timeslot Calculation (bsc#1206843). - drm/amd/display: Take emulated dc_sink into account for HDCP (bsc#1207734). - drm/amd/display: Unassign does_plane_fit_in_mall function from dcn3.2 (bsc#1206843). - drm/amd/display: Uninitialized variables causing 4k60 UCLK to stay at DPM1 and not DPM0 (bsc#1206843). - drm/amd/display: Update bounding box values for DCN321 (git-fixes). - drm/amd/display: Update clock table to include highest clock setting (bsc#1206843). - drm/amd/display: Use DC_LOG_DC in the trasform pixel function (git-fixes). - drm/amd/display: Use dc_update_planes_and_stream (git-fixes). - drm/amd/display: Use min transition for SubVP into MPO (bsc#1206843). - drm/amd/display: Workaround to increase phantom pipe vactive in pipesplit (bsc#1206843). - drm/amd/display: add a NULL pointer check (bsc#1212848, bsc#1212961). - drm/amd/display: adjust MALL size available for DCN32 and DCN321 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.4 (bsc#1206843). - drm/amd/display: disable S/G display on DCN 3.1.5 (bsc#1206843). - drm/amd/display: disable seamless boot if force_odm_combine is enabled (bsc#1212848, bsc#1212961). - drm/amd/display: disconnect MPCC only on OTG change (bsc#1206843). - drm/amd/display: do not call dc_interrupt_set() for disabled crtcs (git-fixes). - drm/amd/display: drop redundant memset() in get_available_dsc_slices() (git-fixes). - drm/amd/display: edp do not add non-edid timings (git-fixes). - drm/amd/display: fix FCLK pstate change underflow (bsc#1206843). - drm/amd/display: fix cursor offset on rotation 180 (git-fixes). - drm/amd/display: fix duplicate assignments (git-fixes). - drm/amd/display: fix flickering caused by S/G mode (git-fixes). - drm/amd/display: fix issues with driver unload (git-fixes). - drm/amd/display: fix k1 k2 divider programming for phantom streams (bsc#1206843). - drm/amd/display: fix mapping to non-allocated address (bsc#1206843). - drm/amd/display: fix shift-out-of-bounds in CalculateVMAndRowBytes (git-fixes). - drm/amd/display: fix the system hang while disable PSR (git-fixes). - drm/amd/display: fix wrong index used in dccg32_set_dpstreamclk (bsc#1206843). - drm/amd/display: move remaining FPU code to dml folder (bsc#1206843). - drm/amd/display: properly handling AGP aperture in vm setup (bsc#1206843). - drm/amd/display: reduce else-if to else in dcn10_blank_pixel_data() (git-fixes). - drm/amd/display: revert Disable DRR actions during state commit (bsc#1206843). - drm/amd/display: skip commit minimal transition state (bsc#1206843). - drm/amd/display: wait for vblank during pipe programming (git-fixes). - drm/amd/pm/smu13: BACO is supported when it's in BACO state (bsc#1206843). - drm/amd/pm: Enable bad memory page/channel recording support for smu v13_0_0 (bsc#1206843). - drm/amd/pm: Fix output of pp_od_clk_voltage (git-fixes). - drm/amd/pm: Fix power context allocation in SMU13 (git-fixes). - drm/amd/pm: Fix sienna cichlid incorrect OD volage after resume (bsc#1206843). - drm/amd/pm: add SMU 13.0.7 missing GetPptLimit message mapping (bsc#1206843). - drm/amd/pm: add missing AllowIHInterrupt message mapping for SMU13.0.0 (bsc#1206843). - drm/amd/pm: add missing SMU13.0.0 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add missing SMU13.0.7 mm_dpm feature mapping (bsc#1206843). - drm/amd/pm: add the missing mapping for PPT feature on SMU13.0.0 and 13.0.7 (bsc#1206843). - drm/amd/pm: bump SMU 13.0.0 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.4 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU 13.0.7 driver_if header version (bsc#1206843). - drm/amd/pm: bump SMU13.0.0 driver_if header to version 0x34 (bsc#1206843). - drm/amd/pm: correct SMU13.0.0 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 max shader clock reporting (bsc#1206843). - drm/amd/pm: correct SMU13.0.7 pstate profiling clock settings (bsc#1206843). - drm/amd/pm: correct the fan speed retrieving in PWM for some SMU13 asics (bsc#1206843). - drm/amd/pm: correct the pcie link state check for SMU13 (bsc#1206843). - drm/amd/pm: correct the reference clock for fan speed(rpm) calculation (bsc#1206843). - drm/amd/pm: drop unneeded dpm features disablement for SMU 13.0.4/11 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.0 (bsc#1206843). - drm/amd/pm: enable GPO dynamic control support for SMU13.0.7 (bsc#1206843). - drm/amd/pm: enable mode1 reset on smu_v13_0_10 (bsc#1206843). - drm/amd/pm: parse pp_handle under appropriate conditions (git-fixes). - drm/amd/pm: remove unused num_of_active_display variable (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for renoir (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for vangogh (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp (git-fixes). - drm/amd/pm: revise the ASPM settings for thunderbolt attached scenario (bsc#1212848, bsc#1212961). - drm/amd/pm: update SMU13.0.0 reported maximum shader clock (bsc#1206843). - drm/amd/pm: update the LC_L1_INACTIVITY setting to address possible noise issue (bsc#1212848, bsc#1212961). - drm/amd: Avoid ASSERT for some message failures (bsc#1206843). - drm/amd: Avoid BUG() for case of SRIOV missing IP version (bsc#1206843). - drm/amd: Delay removal of the firmware framebuffer (git-fixes). - drm/amd: Disable PSR-SU on Parade 0803 TCON (bsc#1212848, bsc#1212961). - drm/amd: Do not try to enable secure display TA multiple times (bsc#1212848, bsc#1212961). - drm/amd: Fix an out of bounds error in BIOS parser (git-fixes). - drm/amd: Fix initialization for nbio 4.3.0 (bsc#1206843). - drm/amd: Fix initialization for nbio 7.5.1 (bsc#1206843). - drm/amd: Fix initialization mistake for NBIO 7.3.0 (bsc#1206843). - drm/amd: Make sure image is written to trigger VBIOS image update flow (git-fixes). - drm/amd: Tighten permissions on VBIOS flashing attributes (git-fixes). - drm/amdgpu/discovery: add PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu/discovery: enable gfx v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable gmc v11 for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable mes support for GC v11.0.4 (bsc#1206843). - drm/amdgpu/discovery: enable nbio support for NBIO v7.7.1 (bsc#1206843). - drm/amdgpu/discovery: enable soc21 common for GC 11.0.4 (bsc#1206843). - drm/amdgpu/discovery: set the APU flag for GC 11.0.4 (bsc#1206843). - drm/amdgpu/display/mst: Fix mst_state->pbn_div and slot count assignments (bsc#1206843). - drm/amdgpu/display/mst: adjust the naming of mst_port and port of aconnector (bsc#1206843). - drm/amdgpu/display/mst: limit payload to be updated one by one (bsc#1206843). - drm/amdgpu/display/mst: update mst_mgr relevant variable when long HPD (bsc#1206843). - drm/amdgpu/dm/dp_mst: Do not grab mst_mgr->lock when computing DSC state (bsc#1206843). - drm/amdgpu/dm/mst: Fix uninitialized var in pre_compute_mst_dsc_configs_for_state() (bsc#1206843). - drm/amdgpu/dm/mst: Use the correct topology mgr pointer in amdgpu_dm_connector (bsc#1206843). - drm/amdgpu/fence: Fix oops due to non-matching drm_sched init/fini (git-fixes). - drm/amdgpu/gfx10: Disable gfxoff before disabling powergating (git-fixes). - drm/amdgpu/gfx: disable gfx9 cp_ecc_error_irq only when enabling legacy gfx ras (git-fixes). - drm/amdgpu/mst: Stop ignoring error codes and deadlocking (bsc#1206843). - drm/amdgpu/nv: Apply ASPM quirk on Intel ADL + AMD Navi (bsc#1206843). - drm/amdgpu/pm: add GFXOFF control IP version check for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: enable swsmu for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/pm: use the specific mailbox registers only for SMU IP v13.0.4 (bsc#1206843). - drm/amdgpu/smu: skip pptable init under sriov (bsc#1206843). - drm/amdgpu/soc21: Add video cap query support for VCN_4_0_4 (bsc#1206843). - drm/amdgpu/soc21: add mode2 asic reset for SMU IP v13.0.11 (bsc#1206843). - drm/amdgpu/soc21: do not expose AV1 if VCN0 is harvested (bsc#1206843). - drm/amdgpu: Add unique_id support for GC 11.0.1/2 (bsc#1206843). - drm/amdgpu: Correct the power calcultion for Renior/Cezanne (git-fixes). - drm/amdgpu: Do not register backlight when another backlight should be used (v3) (bsc#1206843). - drm/amdgpu: Do not resume IOMMU after incomplete init (bsc#1206843). - drm/amdgpu: Enable pg/cg flags on GC11_0_4 for VCN (bsc#1206843). - drm/amdgpu: Enable vclk dclk node for gc11.0.3 (bsc#1206843). - drm/amdgpu: Fix call trace warning and hang when removing amdgpu device (bsc#1206843). - drm/amdgpu: Fix potential NULL dereference (bsc#1206843). - drm/amdgpu: Fix potential double free and null pointer dereference (bsc#1206843). - drm/amdgpu: Fix size validation for non-exclusive domains (v4) (bsc#1206843). - drm/amdgpu: Fix vram recover does not work after whole GPU reset (v2) (git-fixes). - drm/amdgpu: Fixed bug on error when unloading amdgpu (bsc#1206843). - drm/amdgpu: Re-enable DCN for 64-bit powerpc (bsc#1194869). - drm/amdgpu: Register ACPI video backlight when skipping amdgpu backlight registration (bsc#1206843). - drm/amdgpu: Set vmbo destroy after pt bo is created (git-fixes). - drm/amdgpu: Use the TGID for trace_amdgpu_vm_update_ptes (bsc#1206843). - drm/amdgpu: Use the default reset when loading or reloading the driver (git-fixes). - drm/amdgpu: Use the sched from entity for amdgpu_cs trace (git-fixes). - drm/amdgpu: Validate VM ioctl flags (git-fixes). - drm/amdgpu: add a missing lock for AMDGPU_SCHED (git-fixes). - drm/amdgpu: add gfx support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add gmc v11 support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add missing radeon secondary PCI ID (git-fixes). - drm/amdgpu: add smu 13 support for smu 13.0.11 (bsc#1206843). - drm/amdgpu: add soc21 common ip block support for GC 11.0.4 (bsc#1206843). - drm/amdgpu: add tmz support for GC 11.0.1 (bsc#1206843). - drm/amdgpu: add tmz support for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: allow more APUs to do mode2 reset when go to S4 (bsc#1206843). - drm/amdgpu: allow multipipe policy on ASICs with one MEC (bsc#1206843). - drm/amdgpu: change gfx 11.0.4 external_id range (git-fixes). - drm/amdgpu: complete gfxoff allow signal during suspend without delay (git-fixes). - drm/amdgpu: correct MEC number for gfx11 APUs (bsc#1206843). - drm/amdgpu: disable runtime pm on several sienna cichlid cards(v2) (git-fixes). - drm/amdgpu: disable sdma ecc irq only when sdma RAS is enabled in suspend (git-fixes). - drm/amdgpu: drop experimental flag on aldebaran (git-fixes). - drm/amdgpu: enable GFX Clock Gating control for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable GFX IP v11.0.4 CG support (bsc#1206843). - drm/amdgpu: enable GFX Power Gating for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: enable HDP SD for gfx 11.0.3 (bsc#1206843). - drm/amdgpu: enable PSP IP v13.0.11 support (bsc#1206843). - drm/amdgpu: enable VCN DPG for GC IP v11.0.4 (bsc#1206843). - drm/amdgpu: fix Null pointer dereference error in amdgpu_device_recover_vram (git-fixes). - drm/amdgpu: fix amdgpu_job_free_resources v2 (bsc#1206843). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (bsc#1212848, bsc#1212961). - drm/amdgpu: fix enum odm_combine_mode mismatch (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for nv (bsc#1206843). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc15 (git-fixes). - drm/amdgpu: fix error checking in amdgpu_read_mm_registers for soc21 (bsc#1206843). - drm/amdgpu: fix mmhub register base coding error (git-fixes). - drm/amdgpu: fix number of fence calculations (bsc#1212848, bsc#1212961). - drm/amdgpu: fix return value check in kfd (git-fixes). - drm/amdgpu: fix ttm_bo calltrace warning in psp_hw_fini (bsc#1206843). - drm/amdgpu: fix xclk freq on CHIP_STONEY (git-fixes). - drm/amdgpu: for S0ix, skip SDMA 5.x+ suspend/resume (git-fixes). - drm/amdgpu: release gpu full access after 'amdgpu_device_ip_late_init' (git-fixes). - drm/amdgpu: reposition the gpu reset checking for reuse (bsc#1206843). - drm/amdgpu: set GC 11.0.4 family (bsc#1206843). - drm/amdgpu: skip ASIC reset for APUs when go to S4 (bsc#1206843). - drm/amdgpu: skip MES for S0ix as well since it's part of GFX (bsc#1206843). - drm/amdgpu: skip disabling fence driver src_irqs when device is unplugged (git-fixes). - drm/amdgpu: skip mes self test after s0i3 resume for MES IP v11.0 (bsc#1206843). - drm/amdgpu: skip psp suspend for IMU enabled ASICs mode2 reset (git-fixes). - drm/amdgpu: update drm_display_info correctly when the edid is read (git-fixes). - drm/amdgpu: update wave data type to 3 for gfx11 (bsc#1206843). - drm/amdkfd: Add sync after creating vram bo (bsc#1206843). - drm/amdkfd: Fix BO offset for multi-VMA page migration (git-fixes). - drm/amdkfd: Fix NULL pointer error for GC 11.0.1 on mGPU (bsc#1206843). - drm/amdkfd: Fix an illegal memory access (git-fixes). - drm/amdkfd: Fix double release compute pasid (bsc#1206843). - drm/amdkfd: Fix kfd_process_device_init_vm error handling (bsc#1206843). - drm/amdkfd: Fix potential deallocation of previously deallocated memory (git-fixes). - drm/amdkfd: Fix the memory overrun (bsc#1206843). - drm/amdkfd: Fix the warning of array-index-out-of-bounds (bsc#1206843). - drm/amdkfd: Fixed kfd_process cleanup on module exit (git-fixes). - drm/amdkfd: Get prange->offset after svm_range_vram_node_new (git-fixes). - drm/amdkfd: Page aligned memory reserve size (bsc#1206843). - drm/amdkfd: add GC 11.0.4 KFD support (bsc#1206843). - drm/amdkfd: fix a potential double free in pqm_create_queue (git-fixes). - drm/amdkfd: fix potential kgd_mem UAFs (git-fixes). - drm/amdkfd: introduce dummy cache info for property asic (bsc#1206843). - drm/armada: Fix a potential double free in an error handling path (git-fixes). - drm/ast: Fix ARM compatibility (git-fixes). - drm/bochs: fix blanking (git-fixes). - drm/bridge: Fix returned array size name for atomic_get_input_bus_fmts kdoc (git-fixes). - drm/bridge: adv7533: Fix adv7533_mode_valid for adv7533 and adv7535 (git-fixes). - drm/bridge: it6505: Fix return value check for pm_runtime_get_sync (git-fixes). - drm/bridge: lt8912b: Add hot plug detection (git-fixes). - drm/bridge: lt8912b: Fix DSI Video Mode (git-fixes). - drm/bridge: lt8912b: return EPROBE_DEFER if bridge is not found (git-fixes). - drm/bridge: lt9611: Fix PLL being unable to lock (git-fixes). - drm/bridge: lt9611: fix HPD reenablement (git-fixes). - drm/bridge: lt9611: fix clock calculation (git-fixes). - drm/bridge: lt9611: fix polarity programming (git-fixes). - drm/bridge: lt9611: fix programming of video modes (git-fixes). - drm/bridge: lt9611: fix sleep mode setup (git-fixes). - drm/bridge: lt9611: pass a pointer to the of node (git-fixes). - drm/bridge: megachips: Fix error handling in i2c_register_driver() (git-fixes). - drm/bridge: tc358768: always enable HS video mode (git-fixes). - drm/bridge: tc358768: fix PLL parameters computation (git-fixes). - drm/bridge: tc358768: fix PLL target frequency (git-fixes). - drm/bridge: tc358768: fix TCLK_ZEROCNT computation (git-fixes). - drm/bridge: tc358768: fix TXTAGOCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix delay after reset deassert to match spec (git-fixes). - drm/bridge: ti-sn65dsi86: Avoid possible buffer overflow (git-fixes). - drm/cirrus: NULL-check pipe->plane.state->fb in cirrus_pipe_update() (git-fixes). - drm/connector: print max_requested_bpc in state debugfs (git-fixes). - drm/display/dp_mst: Add drm_atomic_get_old_mst_topology_state() (bsc#1206843). - drm/display/dp_mst: Add helper for finding payloads in atomic MST state (bsc#1206843). - drm/display/dp_mst: Add helpers for serializing SST &lt;-> MST transitions (bsc#1206843). - drm/display/dp_mst: Add nonblocking helpers for DP MST (bsc#1206843). - drm/display/dp_mst: Call them time slots, not VCPI slots (bsc#1206843). - drm/display/dp_mst: Correct the kref of port (bsc#1206843). - drm/display/dp_mst: Do not open code modeset checks for releasing time slots (bsc#1206843). - drm/display/dp_mst: Drop all ports from topology on CSNs before queueing link address work (bsc#1206843). - drm/display/dp_mst: Fix confusing docs for drm_dp_atomic_release_time_slots() (bsc#1206843). - drm/display/dp_mst: Fix down message handling after a packet reception error (git-fixes). - drm/display/dp_mst: Fix down/up message handling after sink disconnect (git-fixes). - drm/display/dp_mst: Fix drm_dp_mst_add_affected_dsc_crtcs() return code (git-fixes). - drm/display/dp_mst: Fix modeset tracking in drm_dp_atomic_release_vcpi_slots() (bsc#1206843). - drm/display/dp_mst: Handle old/new payload states in drm_dp_remove_payload() (bsc#1206843). - drm/display/dp_mst: Maintain time slot allocations when deleting payloads (bsc#1206843). - drm/display/dp_mst: Move all payload info into the atomic state (bsc#1206843). - drm/display/dp_mst: Rename drm_dp_mst_vcpi_allocation (bsc#1206843). - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (git-fixes). - drm/displayid: add displayid_get_header() and check bounds better (git-fixes). - drm/dp: Do not rewrite link config when setting phy test pattern (git-fixes). - drm/dp_mst: Avoid deleting payloads for connectors staying enabled (bsc#1206843). - drm/dp_mst: fix drm_dp_dpcd_read return value checks (git-fixes). - drm/edid: fix AVI infoframe aspect ratio handling (git-fixes). - drm/edid: fix parsing of 3D modes from HDMI VSDB (git-fixes). - drm/etnaviv: fix reference leak when mmaping imported buffer (git-fixes). - drm/exynos: fix g2d_open/close helper function definitions (git-fixes). - drm/exynos: fix race condition UAF in exynos_g2d_exec_ioctl (git-fixes). - drm/exynos: vidi: fix a wrong error return (git-fixes). - drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var (git-fixes). - drm/fbdev-generic: prohibit potential out-of-bounds access (git-fixes). - drm/fourcc: Add missing big-endian XRGB1555 and RGB565 formats (git-fixes). - drm/hyperv : Removing the restruction of VRAM allocation with PCI bar size (git-fixes). - drm/hyperv: Add error message for fb size greater than allocated (git-fixes). - drm/hyperv: Fix an error handling path in hyperv_vmbus_probe() (git-fixes). - drm/i915/active: Fix missing debug object activation (git-fixes). - drm/i915/active: Fix misuse of non-idle barriers as fence trackers (git-fixes). - drm/i915/adlp: Fix typo for reference clock (git-fixes). - drm/i915/color: Fix typo for Plane CSC indexes (git-fixes). - drm/i915/dg2: Add HDMI pixel clock frequencies 267.30 and 319.89 MHz (git-fixes). - drm/i915/dg2: Add additional HDMI pixel clock frequencies (git-fixes). - drm/i915/dg2: Drop one PCI ID (git-fixes). - drm/i915/dg2: Support 4k@30 on HDMI (git-fixes). - drm/i915/dgfx: Keep PCI autosuspend control 'on' by default on all dGPU (git-fixes). - drm/i915/display/psr: Handle plane and pipe restrictions at every page flip (git-fixes). - drm/i915/display/psr: Use drm damage helpers to calculate plane damaged area (git-fixes). - drm/i915/display: Check source height is > 0 (git-fixes). - drm/i915/display: Workaround cursor left overs with PSR2 selective fetch enabled (git-fixes). - drm/i915/display: clean up comments (git-fixes). - drm/i915/dmc: Update DG2 DMC version to v2.08 (git-fixes). - drm/i915/dp: prevent potential div-by-zero (git-fixes). - drm/i915/dp_mst: Fix mst_mgr lookup during atomic check (bsc#1206843). - drm/i915/dp_mst: Fix payload removal during output disabling (bsc#1206843). - drm/i915/dpt: Treat the DPT BO as a framebuffer (git-fixes). - drm/i915/dsi: Use unconditional msleep() instead of intel_dsi_msleep() (git-fixes). - drm/i915/dsi: fix DSS CTL register offsets for TGL+ (git-fixes). - drm/i915/gem: Flush lmem contents after construction (git-fixes). - drm/i915/gen11: Moving WAs to icl_gt_workarounds_init() (git-fixes). - drm/i915/gen11: Wa_1408615072/Wa_1407596294 should be on GT list (git-fixes). - drm/i915/gt: Use the correct error value when kernel_context() fails (git-fixes). - drm/i915/gt: perform uc late init after probe error injection (git-fixes). - drm/i915/guc: Do not capture Gen8 regs on Xe devices (git-fixes). - drm/i915/gvt: remove unused variable gma_bottom in command parser (git-fixes). - drm/i915/huc: always init the delayed load fence (git-fixes). - drm/i915/huc: bump timeout for delayed load and reduce print verbosity (git-fixes). - drm/i915/huc: fix leak of debug object in huc load fence on driver unload (git-fixes). - drm/i915/migrate: Account for the reserved_space (git-fixes). - drm/i915/migrate: fix corner case in CCS aux copying (git-fixes). - drm/i915/psr: Fix PSR_IMR/IIR field handling (git-fixes). - drm/i915/psr: Use calculated io and fast wake lines (git-fixes). - drm/i915/psr: Use hw.adjusted mode when calculating io/fast wake times (git-fixes). - drm/i915/pxp: use &lt;> instead of '' for headers in include/ (git-fixes). - drm/i915/quirks: Add inverted backlight quirk for HP 14-r206nv (git-fixes). - drm/i915/selftest: fix intel_selftest_modify_policy argument types (git-fixes). - drm/i915/selftests: Add some missing error propagation (git-fixes). - drm/i915/selftests: Increase timeout for live_parallel_switch (git-fixes). - drm/i915/selftests: Stop using kthread_stop() (git-fixes). - drm/i915/tc: Fix the ICL PHY ownership check in TC-cold state (git-fixes). - drm/i915: Allow switching away via vga-switcheroo if uninitialized (git-fixes). - drm/i915: Avoid potential vm use-after-free (git-fixes). - drm/i915: Disable DC states for all commits (git-fixes). - drm/i915: Do not use BAR mappings for ring buffers with LLC (git-fixes). - drm/i915: Do not use stolen memory for ring buffers with LLC (git-fixes). - drm/i915: Explain the magic numbers for AUX SYNC/precharge length (git-fixes). - drm/i915: Fix NULL ptr deref by checking new_crtc_state (git-fixes). - drm/i915: Fix VBT DSI DVO port handling (git-fixes). - drm/i915: Fix context runtime accounting (git-fixes). - drm/i915: Fix fast wake AUX sync len (git-fixes). - drm/i915: Fix potential bit_17 double-free (git-fixes). - drm/i915: Fix potential context UAFs (git-fixes). - drm/i915: Fix request ref counting during error capture & debugfs dump (git-fixes). - drm/i915: Fix up locking around dumping requests lists (git-fixes). - drm/i915: Initialize the obj flags for shmem objects (git-fixes). - drm/i915: Make intel_get_crtc_new_encoder() less oopsy (git-fixes). - drm/i915: Move CSC load back into .color_commit_arm() when PSR is enabled on skl/glk (git-fixes). - drm/i915: Move fd_install after last use of fence (git-fixes). - drm/i915: Preserve crtc_state->inherited during state clearing (git-fixes). - drm/i915: Remove __maybe_unused from mtl_info (git-fixes). - drm/i915: Remove unused bits of i915_vma/active api (git-fixes). - drm/i915: Remove unused variable (git-fixes). - drm/i915: Use 18 fast wake AUX sync len (git-fixes). - drm/i915: fix race condition UAF in i915_perf_add_config_ioctl (git-fixes). - drm/i915: move a Kconfig symbol to unbreak the menu presentation (git-fixes). - drm/i915: stop abusing swiotlb_max_segment (git-fixes). - drm/lima/lima_drv: Add missing unwind goto in lima_pdev_probe() (git-fixes). - drm/mediatek: Clean dangling pointer on bind error path (git-fixes). - drm/mediatek: Drop unbalanced obj unref (git-fixes). - drm/mediatek: Use NULL instead of 0 for NULL pointer (git-fixes). - drm/mediatek: dsi: Reduce the time of dsi from LP11 to sending cmd (git-fixes). - drm/mediatek: mtk_drm_crtc: Add checks for devm_kcalloc (git-fixes). - drm/meson: fix 1px pink line on GXM when scaling video overlay (git-fixes). - drm/meson: fix missing component unbind on bind errors (git-fixes). - drm/meson: reorder driver deinit sequence to fix use-after-free bug (git-fixes). - drm/mgag200: Fix gamma lut not initialized (git-fixes). - drm/mipi-dsi: Fix byte order of 16-bit DCS set/get brightness (git-fixes). - drm/mipi-dsi: Set the fwnode for mipi_dsi_device (git-fixes). - drm/msm/a5xx: fix context faults during ring switch (git-fixes). - drm/msm/a5xx: fix highest bank bit for a530 (git-fixes). - drm/msm/a5xx: fix setting of the CP_PREEMPT_ENABLE_LOCAL register (git-fixes). - drm/msm/a5xx: fix the emptyness check in the preempt code (git-fixes). - drm/msm/a6xx: Fix kvzalloc vs state_kcalloc usage (git-fixes). - drm/msm/a6xx: Fix speed-bin detection vs probe-defer (git-fixes). - drm/msm/adreno: Fix null ptr access in adreno_gpu_cleanup() (git-fixes). - drm/msm/adreno: adreno_gpu: Use suspend() instead of idle() on load error (git-fixes). - drm/msm/adreno: drop bogus pm_runtime_set_active() (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at gpu load (git-fixes). - drm/msm/adreno: fix sparse warnings in a6xx code (git-fixes). - drm/msm/disp/dpu: check for crtc enable rather than crtc active to release shared resources (git-fixes). - drm/msm/disp/dpu: fix sc7280_pp base offset (git-fixes). - drm/msm/dp: Clean up handling of DP AUX interrupts (git-fixes). - drm/msm/dp: Free resources after unregistering them (git-fixes). - drm/msm/dp: cleared DP_DOWNSPREAD_CTRL register before start link training (git-fixes). - drm/msm/dp: unregister audio driver during unbind (git-fixes). - drm/msm/dpu: Add INTF_5 interrupts (git-fixes). - drm/msm/dpu: Add check for cstate (git-fixes). - drm/msm/dpu: Add check for pstates (git-fixes). - drm/msm/dpu: Disallow unallocated resources to be returned (git-fixes). - drm/msm/dpu: Move non-MDP_TOP INTF_INTR offsets out of hwio header (git-fixes). - drm/msm/dpu: Reject topologies for which no DSC blocks are available (git-fixes). - drm/msm/dpu: Remove duplicate register defines from INTF (git-fixes). - drm/msm/dpu: Remove num_enc from topology struct in favour of num_dsc (git-fixes). - drm/msm/dpu: Wire up DSC mask for active CTL configuration (git-fixes). - drm/msm/dpu: check for null return of devm_kzalloc() in dpu_writeback_init() (git-fixes). - drm/msm/dpu: clear DSPP reservations in rm release (git-fixes). - drm/msm/dpu: correct MERGE_3D length (git-fixes). - drm/msm/dpu: disable features unsupported by QCM2290 (git-fixes). - drm/msm/dpu: do not enable color-management if DSPPs are not available (git-fixes). - drm/msm/dpu: drop DPU_DIM_LAYER from MIXER_MSM8998_MASK (git-fixes). - drm/msm/dpu: drop stale comment from struct dpu_mdp_cfg doc (git-fixes). - drm/msm/dpu: fix clocks settings for msm8998 SSPP blocks (git-fixes). - drm/msm/dpu: fix len of sc7180 ctl blocks (git-fixes). - drm/msm/dpu: sc7180: add missing WB2 clock control (git-fixes). - drm/msm/dpu: set pdpu->is_rt_pipe early in dpu_plane_sspp_atomic_update() (git-fixes). - drm/msm/dsi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/dsi: Allow 2 CTRLs on v2.5.0 (git-fixes). - drm/msm/dsi: do not allow enabling 14nm VCO with unprogrammed rate (git-fixes). - drm/msm/gem: Add check for kmalloc (git-fixes). - drm/msm/hdmi: Add missing check for alloc_ordered_workqueue (git-fixes). - drm/msm/mdp5: Add check for kzalloc (git-fixes). - drm/msm/mdp5: fix reading hw revision on db410c platform (git-fixes). - drm/msm: Be more shouty if per-process pgtables are not working (git-fixes). - drm/msm: Fix potential invalid ptr free (git-fixes). - drm/msm: Set max segment size earlier (git-fixes). - drm/msm: clean event_thread->worker in case of an error (git-fixes). - drm/msm: fix NULL-deref on irq uninstall (git-fixes). - drm/msm: fix NULL-deref on snapshot tear down (git-fixes). - drm/msm: fix drm device leak on bind errors (git-fixes). - drm/msm: fix missing wq allocation error handling (git-fixes). - drm/msm: fix vram leak on bind errors (git-fixes). - drm/msm: fix workqueue leak on bind errors (git-fixes). - drm/msm: use strscpy instead of strncpy (git-fixes). - drm/nouveau/devinit/tu102-: wait for GFW_BOOT_PROGRESS == COMPLETED (git-fixes). - drm/nouveau/disp: Support more modes by checking with lower bpc (git-fixes). - drm/nouveau/dp: check for NULL nv_connector->native_mode (git-fixes). - drm/nouveau/kms/nv50-: remove unused functions (git-fixes). - drm/nouveau/kms/nv50: fix nv50_wndw_new_ prototype (git-fixes). - drm/nouveau/kms: Cache DP encoders in nouveau_connector (bsc#1206843). - drm/nouveau/kms: Pull mst state in for all modesets (bsc#1206843). - drm/nouveau: add nv_encoder pointer check for NULL (git-fixes). - drm/nouveau: do not detect DSM for non-NVIDIA device (git-fixes). - drm/omap: dsi: Fix excessive stack usage (git-fixes). - drm/omapdrm: Remove unused struct csc_coef_rgb2yuv (git-fixes). - drm/panel: novatek-nt35950: Improve error handling (git-fixes). - drm/panel: novatek-nt35950: Only unregister DSI1 if it exists (git-fixes). - drm/panel: otm8009a: Set backlight parent to panel device (git-fixes). - drm/panel: sharp-ls043t1le01: adjust mode settings (git-fixes). - drm/panel: simple: fix active size for Ampire AM-480272H3TMQW-T01H (git-fixes). - drm/panfrost: Do not sync rpm suspension after mmu flushing (git-fixes). - drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path (git-fixes). - drm/probe-helper: Cancel previous job before starting new one (git-fixes). - drm/radeon: Drop legacy MST support (bsc#1206843). - drm/radeon: Fix eDP for single-display iMac11,2 (git-fixes). - drm/radeon: fix possible division-by-zero errors (git-fixes). - drm/radeon: fix race condition UAF in radeon_gem_set_domain_ioctl (git-fixes). - drm/radeon: free iio for atombios when driver shutdown (git-fixes). - drm/radeon: reintroduce radeon_dp_work_func content (git-fixes). - drm/rockchip: Drop unbalanced obj unref (git-fixes). - drm/rockchip: vop: Leave vblank enabled in self-refresh (git-fixes). - drm/sched: Remove redundant check (git-fixes). - drm/shmem-helper: Fix locking for drm_gem_shmem_get_pages_sgt() (git-fixes). - drm/shmem-helper: Remove another errant put in error path (git-fixes). - drm/shmem-helper: Revert accidental non-GPL export (git-fixes). - drm/sun4i: fix missing component unbind on bind errors (git-fixes). - drm/tegra: Avoid potential 32-bit integer overflow (git-fixes). - drm/tegra: firewall: Check for is_addr_reg existence in IMM check (git-fixes). - drm/tiny: ili9486: Do not assume 8-bit only SPI controllers (git-fixes). - drm/ttm/pool: Fix ttm_pool_alloc error path (git-fixes). - drm/ttm: Fix a NULL pointer dereference (git-fixes). - drm/ttm: fix undefined behavior in bit shift for TTM_TT_FLAG_PRIV_POPULATED (git-fixes). - drm/ttm: optimize pool allocations a bit v2 (git-fixes). - drm/vc4: crtc: Increase setup cost in core clock calculation to handle extreme reduced blanking (git-fixes). - drm/vc4: dpi: Add option for inverting pixel clock and output enable (git-fixes). - drm/vc4: dpi: Fix format mapping for RGB565 (git-fixes). - drm/vc4: drv: Call component_unbind_all() (git-fixes). - drm/vc4: hdmi: Correct interlaced timings again (git-fixes). - drm/vc4: hdmi: make CEC adapter name unique (git-fixes). - drm/vc4: hvs: Fix colour order for xRGB1555 on HVS5 (git-fixes). - drm/vc4: hvs: SCALER_DISPBKGND_AUTOHS is only valid on HVS4 (git-fixes). - drm/vc4: hvs: Set AXI panic modes (git-fixes). - drm/vc4: kms: Sort the CRTCs by output before assigning them (git-fixes). - drm/vc4: vec: Use pm_runtime_resume_and_get() in vc4_vec_encoder_enable() (git-fixes). - drm/vgem: add missing mutex_destroy (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - drm/virtio: exbuf->fence_fd unmodified on interrupted wait (git-fixes). - drm/vkms: Fix memory leak in vkms_init() (git-fixes). - drm/vkms: Fix null-ptr-deref in vkms_release() (git-fixes). - drm/vmwgfx: Do not drop the reference to the handle too soon (git-fixes). - drm/vmwgfx: Fix memory leak in vmw_mksstat_add_ioctl() (git-fixes). - drm/vmwgfx: Fix race issue calling pin_user_pages (git-fixes). - drm/vmwgfx: Stop accessing buffer objects which failed init (git-fixes). - drm/vram-helper: fix function names in vram helper doc (git-fixes). - drm: Add orientation quirk for Lenovo ideapad D330-10IGL (git-fixes). - drm: Fix potential null-ptr-deref due to drmm_mode_config_init() (git-fixes). - drm: amd: display: Fix memory leakage (git-fixes). - drm: bridge: adv7511: unregister cec i2c device after cec adapter (git-fixes). - drm: exynos: dsi: Fix MIPI_DSI*_NO_* mode flags (git-fixes). - drm: msm: adreno: Disable preemption on Adreno 510 (git-fixes). - drm: mxsfb: DRM_IMX_LCDIF should depend on ARCH_MXC (git-fixes). - drm: mxsfb: DRM_MXSFB should depend on ARCH_MXS || ARCH_MXC (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo IdeaPad Duet 3 10IGL5 (git-fixes). - drm: panel-orientation-quirks: Add quirk for Lenovo Yoga Book X90F (git-fixes). - drm: rcar-du: Fix a NULL vs IS_ERR() bug (git-fixes). - drm: sun4i_tcon: use devm_clk_get_enabled in `sun4i_tcon_init_clocks` (git-fixes). - drm: tidss: Fix pixel format definition (git-fixes). - drm:amd:amdgpu: Fix missing buffer object unlock in failure path (git-fixes). - dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type (git-fixes). - dt-bindings: arm: fsl: Fix bindings for APF28Dev board (git-fixes). - dt-bindings: arm: fsl: Fix copy-paste error in comment (git-fixes). - dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries (git-fixes). - dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes). - dt-bindings: hwlock: sun6i: Add missing #hwlock-cells (git-fixes). - dt-bindings: i3c: silvaco,i3c-master: fix missing schema restriction (git-fixes). - dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476 compatible value (git-fixes). - dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes). - dt-bindings: input: iqs626a: Redefine trackpad property types (git-fixes). - dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if' match (git-fixes). - dt-bindings: msm: dsi-controller-main: Add vdd* descriptions back in (git-fixes). - dt-bindings: net: snps,dwmac: Fix snps,reset-delays-us dependency (git-fixes). - dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property (git-fixes). - dt-bindings: phy: brcm,brcmstb-usb-phy: Fix error in 'compatible' conditional schema (git-fixes). - dt-bindings: power: renesas,apmu: Fix cpus property limits (git-fixes). - dt-bindings: power: supply: pm8941-coincell: Do not require charging properties (git-fixes). - dt-bindings: remoteproc: st,stm32-rproc: Fix phandle-array parameters description (git-fixes). - dt-bindings: remoteproc: stm32-rproc: Typo fix (git-fixes). - dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs (git-fixes). - dt-bindings: soc: qcom: smd-rpm: re-add missing qcom,rpm-msm8994 (git-fixes). - dt-bindings: usb: amlogic,meson-g12a-usb-ctrl: make G12A usb3-phy0 optional (git-fixes). - dt-bindings: usb: snps,dwc3: Fix 'snps,hsphy_interface' type (git-fixes). - e1000e: Disable TSO on i219-LM card to increase speed (git-fixes). - edac/i10nm: Add Intel Emerald Rapids server support (PED-4400). - eeprom: at24: also select REGMAP (git-fixes). - eeprom: idt_89hpesx: Fix error handling in idt_init() (git-fixes). - efi/x86: libstub: Fix typo in __efi64_argmap* name (git-fixes). - efi: Accept version 2 of memory attributes table (git-fixes). - efi: efivars: Fix variable writes with unsupported query_variable_store() (git-fixes). - efi: efivars: Fix variable writes without query_variable_store() (git-fixes). - efi: fix potential NULL deref in efi_mem_reserve_persistent (git-fixes). - efi: rt-wrapper: Add missing include (git-fixes). - efi: ssdt: Do not free memory if ACPI table was loaded successfully (git-fixes). - efi: sysfb_efi: Add quirk for Lenovo Yoga Book X91F/L (git-fixes). - efi: sysfb_efi: Fix DMI quirks not working for simpledrm (git-fixes). - elevator: update the document of elevator_switch (git-fixes). - elf: correct note name comment (git-fixes). - ethernet: 3com/typhoon: do not write directly to netdev->dev_addr (git-fixes). - ethernet: 8390/etherh: do not write directly to netdev->dev_addr (git-fixes). - ethernet: i825xx: do not write directly to netdev->dev_addr (git-fixes). - ethernet: ice: avoid gcc-9 integer overflow warning (jsc#PED-376). - ethernet: seeq/ether3: do not write directly to netdev->dev_addr (git-fixes). - ethernet: tundra: do not write directly to netdev->dev_addr (git-fixes). - exit: Add and use make_task_dead (bsc#1207328). - exit: Allow oops_limit to be disabled (bsc#1207328). - exit: Guarantee make_task_dead leaks the tsk when calling do_task_exit (bsc#1207328). - exit: Move force_uaccess back into do_exit (bsc#1207328). - exit: Move oops specific logic from do_exit into make_task_dead (bsc#1207328). - exit: Put an upper limit on how often we can oops (bsc#1207328). - exit: Stop poorly open coding do_task_dead in make_task_dead (bsc#1207328). - exit: Use READ_ONCE() for all oops/warn limit reads (bsc#1207328). - ext4,f2fs: fix readahead of verity data (bsc#1207648). - ext4: Fix deadlock during directory rename (bsc#1210763). - ext4: Fix possible corruption when moving a directory (bsc#1210763). - ext4: Fix reusing stale buffer heads from last failed mounting (bsc#1213020). - ext4: add EA_INODE checking to ext4_iget() (bsc#1213106). - ext4: add EXT4_IGET_BAD flag to prevent unexpected bad inode (bsc#1207619). - ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h (bsc#1206878). - ext4: add ext4_sb_block_valid() refactored out of ext4_inode_block_valid() (bsc#1213088). - ext4: add helper to check quota inums (bsc#1207618). - ext4: add inode table check in __ext4_get_inode_loc to aovid possible infinite loop (bsc#1207617). - ext4: add lockdep annotations for i_data_sem for ea_inode's (bsc#1213109). - ext4: add missing validation of fast-commit record lengths (bsc#1207626). - ext4: add strict range checks while freeing blocks (bsc#1213089). - ext4: allocate extended attribute value in vmalloc area (bsc#1207635). - ext4: avoid crash when inline data creation follows DIO write (bsc#1206883). - ext4: avoid deadlock in fs reclaim with page writeback (bsc#1213016). - ext4: avoid resizing to a partial cluster size (bsc#1206880). - ext4: avoid unaccounted block allocation when expanding inode (bsc#1207634). - ext4: bail out of ext4_xattr_ibody_get() fails for any reason (bsc#1213018). - ext4: block range must be validated before use in ext4_mb_clear_bb() (bsc#1213090). - ext4: check iomap type only if ext4_iomap_begin() does not fail (bsc#1213103). - ext4: continue to expand file system when the target size does not reach (bsc#1206882). - ext4: correct cluster len and clusters changed accounting in ext4_mb_mark_bb (bsc#1207592). - ext4: correct max_inline_xattr_value_size computing (bsc#1206878). - ext4: correct the misjudgment in ext4_iget_extra_inode (bsc#1206878). - ext4: disable fast-commit of encrypted dir operations (bsc#1207623). - ext4: disallow ea_inodes with extended attributes (bsc#1213108). - ext4: do not allow journal inode to have encrypt flag (bsc#1207621). - ext4: do not increase iversion counter for ea_inodes (bsc#1207605). - ext4: do not run ext4lazyinit for read-only filesystems (bsc#1207603). - ext4: do not set up encryption key during jbd2 transaction (bsc#1207624). - ext4: drop ineligible txn start stop APIs (bsc#1207588). - ext4: ext4_read_bh_lock() should submit IO if the buffer isn't uptodate (bsc#1207606). - ext4: factor out ext4_fc_get_tl() (bsc#1207615). - ext4: fail ext4_iget if special inode unallocated (bsc#1213010). - ext4: fast commit may miss file actions (bsc#1207591). - ext4: fast commit may not fallback for ineligible commit (bsc#1207590). - ext4: fix BUG_ON() when directory entry has invalid rec_len (bsc#1206886). - ext4: fix RENAME_WHITEOUT handling for inline directories (bsc#1210766). - ext4: fix WARNING in ext4_update_inline_data (bsc#1213012). - ext4: fix WARNING in mb_find_extent (bsc#1213099). - ext4: fix another off-by-one fsmap error on 1k block filesystems (bsc#1210767). - ext4: fix bad checksum after online resize (bsc#1210762 bsc#1208076). - ext4: fix bug in extents parsing when eh_entries == 0 and eh_depth > 0 (bsc#1206881). - ext4: fix bug_on in __es_tree_search caused by bad boot loader inode (bsc#1207620). - ext4: fix bug_on in __es_tree_search caused by bad quota inode (bsc#1213111). - ext4: fix bug_on in start_this_handle during umount filesystem (bsc#1207594). - ext4: fix cgroup writeback accounting with fs-layer encryption (bsc#1210765). - ext4: fix corruption when online resizing a 1K bigalloc fs (bsc#1206891). - ext4: fix data races when using cached status extents (bsc#1213102). - ext4: fix deadlock due to mbcache entry corruption (bsc#1207653). - ext4: fix deadlock when converting an inline directory in nojournal mode (bsc#1213105). - ext4: fix delayed allocation bug in ext4_clu_mapped for bigalloc + inline (bsc#1207631). - ext4: fix dir corruption when ext4_dx_add_entry() fails (bsc#1207608). - ext4: fix error code return to user-space in ext4_get_branch() (bsc#1207630). - ext4: fix ext4_mb_mark_bb() with flex_bg with fast_commit (bsc#1207593). - ext4: fix extent status tree race in writeback error recovery path (bsc#1206877). - ext4: fix i_disksize exceeding i_size problem in paritally written case (bsc#1213015). - ext4: fix incorrect options show of original mount_opt and extend mount_opt2 (bsc#1210764). - ext4: fix inode leak in ext4_xattr_inode_create() on an error path (bsc#1207636). - ext4: fix kernel BUG in 'ext4_write_inline_data_end()' (bsc#1206894). - ext4: fix leaking uninitialized memory in fast-commit journal (bsc#1207625). - ext4: fix lockdep warning when enabling MMP (bsc#1213100). - ext4: fix miss release buffer head in ext4_fc_write_inode (bsc#1207609). - ext4: fix null-ptr-deref in ext4_write_info (bsc#1206884). - ext4: fix off-by-one errors in fast-commit block filling (bsc#1207628). - ext4: fix possible double unlock when moving a directory (bsc#1210763). - ext4: fix potential memory leak in ext4_fc_record_modified_inode() (bsc#1207611). - ext4: fix potential memory leak in ext4_fc_record_regions() (bsc#1207612). - ext4: fix potential out of bound read in ext4_fc_replay_scan() (bsc#1207616). - ext4: fix reserved cluster accounting in __es_remove_extent() (bsc#1207637). - ext4: fix task hung in ext4_xattr_delete_inode (bsc#1213096). - ext4: fix to check return value of freeze_bdev() in ext4_shutdown() (bsc#1213021). - ext4: fix unaligned memory access in ext4_fc_reserve_space() (bsc#1207627). - ext4: fix undefined behavior in bit shift for ext4_check_flag_values (bsc#1206890). - ext4: fix uninititialized value in 'ext4_evict_inode' (bsc#1206893). - ext4: fix use-after-free in ext4_ext_shift_extents (bsc#1206888). - ext4: fix use-after-free in ext4_orphan_cleanup (bsc#1207622). - ext4: fix use-after-free in ext4_xattr_set_entry (bsc#1206878). - ext4: fix use-after-free read in ext4_find_extent for bigalloc + inline (bsc#1213098). - ext4: fix warning in 'ext4_da_release_space' (bsc#1206887). - ext4: goto right label 'failed_mount3a' (bsc#1207610). - ext4: improve error handling from ext4_dirhash() (bsc#1213104). - ext4: improve error recovery code paths in __ext4_remount() (bsc#1213017). - ext4: init quota for 'old.inode' in 'ext4_rename' (bsc#1207629). - ext4: initialize quota before expanding inode in setproject ioctl (bsc#1207633). - ext4: introduce EXT4_FC_TAG_BASE_LEN helper (bsc#1207614). - ext4: limit the number of retries after discarding preallocations blocks (bsc#1207602). - ext4: make ext4_lazyinit_thread freezable (bsc#1206885). - ext4: move where set the MAY_INLINE_DATA flag is set (bsc#1213011). - ext4: only update i_reserved_data_blocks on successful block allocation (bsc#1213019). - ext4: place buffer head allocation before handle start (bsc#1207607). - ext4: refactor ext4_free_blocks() to pull out ext4_mb_clear_bb() (bsc#1213087). - ext4: refuse to create ea block when umounted (bsc#1213093). - ext4: set lockdep subclass for the ea_inode in ext4_xattr_inode_cache_find() (bsc#1213107). - ext4: silence the warning when evicting inode with dioread_nolock (bsc#1206889). - ext4: simplify updating of fast commit stats (bsc#1207589). - ext4: turn quotas off if mount failed after enabling quotas (bsc#1213110). - ext4: unconditionally enable the i_version counter (bsc#1211299). - ext4: update 'state->fc_regions_size' after successful memory allocation (bsc#1207613). - ext4: update s_journal_inum if it changes after journal replay (bsc#1213094). - ext4: update s_overhead_clusters in the superblock during an on-line resize (bsc#1206876). - ext4: use ext4_fc_tl_mem in fast-commit replay path (bsc#1213092). - ext4: use ext4_journal_start/stop for fast commit transactions (bsc#1210793). - ext4: zero i_disksize when initializing the bootloader inode (bsc#1213013). - extcon: Fix kernel doc of property capability fields to avoid warnings (git-fixes). - extcon: Fix kernel doc of property fields to avoid warnings (git-fixes). - extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes). - extcon: usbc-tusb320: Call the Type-C IRQ handler only if a port is registered (git-fixes). - extcon: usbc-tusb320: Unregister typec port on driver removal (git-fixes). - extcon: usbc-tusb320: Update state on probe even if no IRQ pending (git-fixes). - extcon: usbc-tusb320: fix kernel-doc warning (git-fixes). - f2fs: Fix f2fs_truncate_partial_nodes ftrace event (git-fixes). - fbcon: Check font dimension limits (git-fixes). - fbcon: Fix error paths in set_con2fb_map (git-fixes). - fbcon: Fix null-ptr-deref in soft_cursor (git-fixes). - fbcon: set_con2fb_map needs to set con2fb_map! (git-fixes). - fbdev: Prevent possible use-after-free in fb_release() (bsc#1152472). - fbdev: arcfb: Fix error handling in arcfb_probe() (git-fixes). - fbdev: au1200fb: Fix potential divide by zero (git-fixes). - fbdev: ep93xx-fb: Add missing clk_disable_unprepare in ep93xxfb_probe() (git-fixes). - fbdev: fbcon: Destroy mutex on freeing struct fb_info (bsc#1152489) - fbdev: imsttfb: Fix use after free bug in imsttfb_probe (git-fixes bsc#1211387). - fbdev: intelfb: Fix potential divide by zero (git-fixes). - fbdev: lxfb: Fix potential divide by zero (git-fixes). - fbdev: mmp: Fix deferred clk handling in mmphw_probe() (git-fixes). - fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes). - fbdev: nvidia: Fix potential divide by zero (git-fixes). - fbdev: omapfb: avoid stack overflow warning (git-fixes). - fbdev: omapfb: cleanup inconsistent indentation (git-fixes). - fbdev: omapfb: lcd_mipid: Fix an error handling path in mipid_spi_probe() (git-fixes). - fbdev: smscufx: fix error handling code in ufx_usb_probe (git-fixes). - fbdev: stifb: Fall back to cfb_fillrect() on 32-bit HCRX cards (git-fixes). - fbdev: stifb: Fix info entry in sti_struct on error path (git-fixes). - fbdev: stifb: Provide valid pixelclock and add fb_check_var() checks (git-fixes). - fbdev: tgafb: Fix potential divide by zero (git-fixes). - fbdev: udlfb: Fix endpoint check (git-fixes). - fbmem: Reject FB_ACTIVATE_KD_TEXT from userspace (git-fixes). - filelock: new helper: vfs_inode_has_locks (jsc#SES-1880). - firewire: fix memory leak for payload of request subaction to IEC 61883-1 FCP region (git-fixes). - firmware/efi sysfb_efi: Add quirk for Lenovo IdeaPad Duet 3 (git-fixes). - firmware: arm_ffa: Check if ffa_driver remove is present before executing (git-fixes). - firmware: arm_ffa: Set handle field to zero in memory descriptor (git-fixes). - firmware: arm_ffa: Set reserved/MBZ fields to zero in the memory descriptors (git-fixes). - firmware: arm_scmi: Fix device node validation for mailbox transport (git-fixes). - firmware: coreboot: Remove GOOGLE_COREBOOT_TABLE_ACPI/OF Kconfig entries (git-fixes). - firmware: coreboot: framebuffer: Ignore reserved pixel color bits (git-fixes). - firmware: dmi-sysfs: Fix null-ptr-deref in dmi_sysfs_register_handle (git-fixes). - firmware: qcom_scm: Clear download bit during reboot (git-fixes). - firmware: stratix10-svc: Fix a potential resource leak in svc_create_memory_pool() (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - firmware: stratix10-svc: add missing gen_pool_destroy() in stratix10_svc_drv_probe() (git-fixes). - firmware: xilinx: do not make a sleepable memory allocation from an atomic context (git-fixes). - flow_dissector: Do not count vlan tags inside tunnel payload (git-fixes). - fork: allow CLONE_NEWTIME in clone3 flags (bsc#1209258). - fotg210-udc: Add missing completion handler (git-fixes). - fpga: bridge: fix kernel-doc parameter description (git-fixes). - fpga: bridge: properly initialize bridge device before populating children (git-fixes). - fpga: m10bmc-sec: Fix probe rollback (git-fixes). - fpga: stratix10-soc: Fix return value check in s10_ops_write_init() (git-fixes). - fprobe: Check rethook_alloc() return in rethook initialization (git-fixes). - fprobe: Fix smatch type mismatch warning (git-fixes). - fprobe: add recursion detection in fprobe_exit_handler (git-fixes). - fprobe: make fprobe_kprobe_handler recursion free (git-fixes). - fs/jfs: fix shift exponent db_agl2size negative (git-fixes). - fs: account for filesystem mappings (bsc#1205191). - fs: account for group membership (bsc#1205191). - fs: add i_user_ns() helper (bsc#1205191). - fs: dlm: do not call kernel_getpeername() in error_report() (bsc#1208130). - fs: dlm: use sk->sk_socket instead of con->sock (bsc#1208130). - fs: ext4: initialize fsdata in pagecache_write() (bsc#1207632). - fs: hfsplus: fix UAF issue in hfsplus_put_super (git-fixes). - fs: jfs: fix possible NULL pointer dereference in dbFree() (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbAllocAG (git-fixes). - fs: jfs: fix shift-out-of-bounds in dbDiscardAG (git-fixes). - fs: move mapping helpers (bsc#1205191) - fs: remove __sync_filesystem (git-fixes). - fs: sysv: Fix sysv_nblocks() returns wrong value (git-fixes). - fs: tweak fsuidgid_has_mapping() (bsc#1205191). - fscache: Use wait_on_bit() to wait for the freeing of relinquished volume (bsc#1210409). - fscache_cookie_enabled: check cookie is valid before accessing it (bsc#1208429). - ftrace/x86: Add back ftrace_expected for ftrace bug reports (git-fixes). - ftrace: Clean comments related to FTRACE_OPS_FL_PER_CPU (git-fixes). - ftrace: Fix invalid address access in lookup_rec() when index is 0 (git-fixes). - ftrace: Fix issue that 'direct->addr' not restored in modify_ftrace_direct() (git-fixes). - ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes). - fuse: add inode/permission checks to fileattr_get/fileattr_set (bsc#1208759). - fuse: always revalidate rename target dentry (bsc#1211808). - fuse: fix attr version comparison in fuse_read_update_size() (bsc#1211807). - futex: Resend potentially swallowed owner death notification (git-fixes). - genirq: Provide new interfaces for affinity hints (bsc#1208153). - git-sort: Add io_uring 6.3 fixes remote - google/gve:fix repeated words in comments (bsc#1211519). - gpio: GPIO_REGMAP: select REGMAP instead of depending on it (git-fixes). - gpio: davinci: Add irq chip flag to skip set wake (git-fixes). - gpio: mockup: Fix mode of debugfs files (git-fixes). - gpio: tegra186: remove unneeded loop in tegra186_gpio_init_route_mapping() (git-fixes). - gpio: vf610: connect GPIO label to dev name (git-fixes). - gpu: host1x: Do not skip assigning syncpoints to channels (git-fixes). - gpu: host1x: Fix mask for syncpoint increment register (git-fixes). - gpu: host1x: Fix potential double free if IOMMU is disabled (git-fixes). - gpu: ipu-v3: common: Add of_node_put() for reference returned by of_graph_get_port_by_id() (git-fixes). - gve: Adding a new AdminQ command to verify driver (bsc#1211519). - gve: Cache link_speed value from device (git-fixes). - gve: Fix error return code in gve_prefill_rx_pages() (bsc#1211519). - gve: Fix spelling mistake 'droping' -> 'dropping' (bsc#1211519). - gve: Handle alternate miss completions (bsc#1211519). - gve: Reduce alloc and copy costs in the GQ rx path (bsc#1211519). - gve: Remove the code of clearing PBA bit (git-fixes). - gve: Secure enough bytes in the first TX desc for all TCP pkts (git-fixes). - gve: enhance no queue page list detection (bsc#1211519). - hfs/hfsplus: avoid WARN_ON() for sanity check, use proper error handling (git-fixes). - hfs/hfsplus: use WARN_ON for sanity check (git-fixes). - hfs: Fix OOB Write in hfs_asc2mac (git-fixes). - hfs: fix OOB Read in __hfs_brec_find (git-fixes). - hfs: fix missing hfs_bnode_get() in __hfs_bnode_create (git-fixes). - hfsplus: fix bug causing custom uid and gid being unable to be assigned with mount (git-fixes). - hid: Add Mapping for System Microphone Mute (git-fixes). - hid: asus: use spinlock to protect concurrent accesses (git-fixes). - hid: asus: use spinlock to safely schedule workers (git-fixes). - hid: bigben: use spinlock to protect concurrent accesses (git-fixes). - hid: bigben: use spinlock to safely schedule workers (git-fixes). - hid: bigben_probe(): validate report count (git-fixes). - hid: bigben_worker() remove unneeded check on report_field (git-fixes). - hid: core: Fix deadloop in hid_apply_multiplier (git-fixes). - hid: cp2112: Fix driver not registering GPIO IRQ chip as threaded (git-fixes). - hid: elecom: add support for TrackBall 056E:011C (git-fixes). - hid: google: add jewel USB id (git-fixes). - hid: intel-ish-hid: ipc: Fix potential use-after-free in work function (git-fixes). - hid: logitech-hidpp: Do not restart communication if not necessary (git-fixes). - hid: logitech-hidpp: Do not use the USB serial for USB devices (git-fixes). - hid: logitech-hidpp: Reconcile USB and Unifying serials (git-fixes). - hid: logitech-hidpp: add HIDPP_QUIRK_DELAYED_INIT for the T651 (git-fixes). - hid: microsoft: Add rumble support to latest xbox controllers (bsc#1211280). - hid: multitouch: Add quirks for flipped axes (git-fixes). - hid: playstation: sanity check DualSense calibration data (git-fixes). - hid: retain initial quirks set up when creating HID devices (git-fixes). - hid: wacom: Add error check to wacom_parse_and_register() (git-fixes). - hid: wacom: Add new Intuos Pro Small (PTH-460) device IDs (git-fixes). - hid: wacom: Force pen out of prox if no events have been received in a while (git-fixes). - hid: wacom: Set a default resolution for older tablets (git-fixes). - hid: wacom: add three styli to wacom_intuos_get_tool_type (git-fixes). - hid: wacom: avoid integer overflow in wacom_intuos_inout() (git-fixes). - hid: wacom: generic: Set battery quirk only when we see battery data (git-fixes). - hv: fix comment typo in vmbus_channel/low_latency (git-fixes). - hv: hv_balloon: fix memory leak with using debugfs_lookup() (git-fixes). - hv_netvsc: Allocate memory in netvsc_dma_map() with GFP_ATOMIC (git-fixes). - hv_netvsc: Check status in SEND_RNDIS_PKT completion message (git-fixes). - hv_netvsc: Fix missed pagebuf entries in netvsc_dma_map/unmap() (git-fixes). - hvcs: Fix hvcs port reference counting (bsc#1213134 ltc#202861). - hvcs: Get reference to tty in remove (bsc#1213134 ltc#202861). - hvcs: Synchronize hotplug remove with port free (bsc#1213134 ltc#202861). - hvcs: Use dev_groups to manage hvcs device attributes (bsc#1213134 ltc#202861). - hvcs: Use driver groups to manage driver attributes (bsc#1213134 ltc#202861). - hvcs: Use vhangup in hotplug remove (bsc#1213134 ltc#202861). - hwmon: (adm1266) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (adt7475) Display smoothing attributes in correct order (git-fixes). - hwmon: (adt7475) Fix masking of hysteresis registers (git-fixes). - hwmon: (adt7475) Use device_property APIs when configuring polarity (git-fixes). - hwmon: (coretemp) Simplify platform device handling (git-fixes). - hwmon: (ftsteutates) Fix scaling of measurements (git-fixes). - hwmon: (gsc-hwmon) fix fan pwm temperature scaling (git-fixes). - hwmon: (ina3221) return prober error code (git-fixes). - hwmon: (k10temp) Check range scale when CUR_TEMP register is read-write (git-fixes). - hwmon: (k10temp): Add support for new family 17h and 19h models (bsc#1208848). - hwmon: (ltc2945) Handle error case in ltc2945_value_store (git-fixes). - hwmon: (ltc2992) Set `can_sleep` flag for GPIO chip (git-fixes). - hwmon: (mlxreg-fan) Return zero speed for broken fan (git-fixes). - hwmon: (pmbus/fsp-3y) Fix functionality bitmask in FSP-3Y YM-2151E (git-fixes). - hwmon: (ucd90320) Add minimum delay between bus accesses (git-fixes). - hwmon: (xgene) Fix use after free bug in xgene_hwmon_remove due to race condition (git-fixes). - hwmon: fix potential sensor registration fail if of_node is missing (git-fixes). - hwmon: tmp512: drop of_match_ptr for ID table (git-fixes). - hwrng: imx-rngc - fix the timeout for init and self check (git-fixes). - hwrng: st - keep clock enabled while hwrng is registered (git-fixes). - i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on error path (git-fixes). - i2c: designware-pci: Add new PCI IDs for AMD NAVI GPU (git-fixes). - i2c: designware: fix i2c_dw_clk_rate() return size to be u32 (git-fixes). - i2c: hisi: Avoid redundant interrupts (git-fixes). - i2c: hisi: Only use the completion interrupt to finish the transfer (git-fixes). - i2c: imx-lpi2c: check only for enabled interrupt flags (git-fixes). - i2c: imx-lpi2c: clean rx/tx buffers upon new message (git-fixes). - i2c: imx-lpi2c: fix type char overflow issue when calculating the clock cycle (git-fixes). - i2c: mv64xxx: Add atomic_xfer method to driver (git-fixes). - i2c: mv64xxx: Fix reading invalid status value in atomic mode (git-fixes). - i2c: mv64xxx: Remove shutdown method from driver (git-fixes). - i2c: mxs: suppress probe-deferral error message (git-fixes). - i2c: ocores: generate stop condition after timeout in polling mode (git-fixes). - i2c: omap: Fix standard mode false ACK readings (git-fixes). - i2c: qup: Add missing unwind goto in qup_i2c_probe() (git-fixes). - i2c: rk3x: fix a bunch of kernel-doc warnings (git-fixes). - i2c: sprd: Delete i2c adapter in .remove's error path (git-fixes). - i2c: tegra: Fix PEC support for SMBUS block read (git-fixes). - i2c: xgene-slimpro: Fix out-of-bounds bug in xgene_slimpro_i2c_xfer() (git-fixes). - i40e: Add checking for null for nlmsg_find_attr() (jsc#SLE-18378). - i40e: Fix ADQ rate limiting for PF (jsc#SLE-18378). - i40e: Fix DMA mappings leak (jsc#SLE-18378). - i40e: Fix VF hang when reset is triggered on another VF (jsc#SLE-18378). - i40e: Fix VF set max MTU size (jsc#SLE-18378). - i40e: Fix VF's MAC Address change on VM (jsc#SLE-18378). - i40e: Fix adding ADQ filter to TC0 (jsc#SLE-18378). - i40e: Fix calculating the number of queue pairs (jsc#SLE-18378). - i40e: Fix erroneous adapter reinitialization during recovery process (jsc#SLE-18378). - i40e: Fix ethtool rx-flow-hash setting for X722 (jsc#SLE-18378). - i40e: Fix flow-type by setting GL_HASH_INSET registers (jsc#SLE-18378). - i40e: Fix for VF MAC address 0 (jsc#SLE-18378). - i40e: Fix incorrect address type for IPv6 flow rules (jsc#SLE-18378). - i40e: Fix interface init with MSI interrupts (no MSI-X) (jsc#SLE-18378). - i40e: Fix kernel crash during module removal (jsc#SLE-18378). - i40e: Fix kernel crash during reboot when adapter is in recovery mode (jsc#SLE-18378). - i40e: Fix set max_tx_rate when it is lower than 1 Mbps (jsc#SLE-18378). - i40e: Fix the inability to attach XDP program on downed interface (jsc#SLE-18378). - i40e: Refactor tc mqprio checks (jsc#SLE-18378). - i40e: add double of VLAN header when computing the max MTU (jsc#SLE-18378). - i40e: fix accessing vsi->active_filters without holding lock (jsc#SLE-18378). - i40e: fix flow director packet filter programming (jsc#SLE-18378). - i40e: fix i40e_setup_misc_vector() error handling (jsc#SLE-18378). - i40e: fix registers dump after run ethtool adapter self test (jsc#SLE-18378). - i825xx: sni_82596: use eth_hw_addr_set() (git-fixes). - i915 kABI workaround (git-fixes). - i915/perf: Replace DRM_DEBUG with driver specific drm_dbg call (git-fixes). - iavf/iavf_main: actually log ->src mask when talking about it (jsc#SLE-18385). - iavf: Detach device during reset task (jsc#SLE-18385). - iavf: Disallow changing rx/tx-frames and rx/tx-frames-irq (jsc#SLE-18385). - iavf: Do not restart Tx queues after reset task failure (jsc#SLE-18385). - iavf: Fix 'tc qdisc show' listing too many queues (jsc#SLE-18385). - iavf: Fix a crash during reset task (jsc#SLE-18385). - iavf: Fix bad page state (jsc#SLE-18385). - iavf: Fix cached head and tail value for iavf_get_tx_pending (jsc#SLE-18385). - iavf: Fix error handling in iavf_init_module() (jsc#SLE-18385). - iavf: Fix max_rate limiting (jsc#SLE-18385). - iavf: Fix race condition between iavf_shutdown and iavf_remove (jsc#SLE-18385). - iavf: Fix set max MTU size with port VLAN and jumbo frames (jsc#SLE-18385). - iavf: do not track VLAN 0 filters (jsc#PED-835). - iavf: fix hang on reboot with ice (jsc#SLE-18385). - iavf: fix inverted Rx hash condition leading to disabled hash (jsc#SLE-18385). - iavf: fix non-tunneled IPv6 UDP packet type and hashing (jsc#SLE-18385). - iavf: fix temporary deadlock and failure to set MAC address (jsc#PED-835). - iavf: refactor VLAN filter states (jsc#PED-835). - iavf: remove active_cvlans and active_svlans bitmaps (jsc#PED-835). - iavf: remove mask from iavf_irq_enable_queues() (git-fixes). - iavf: schedule watchdog immediately when changing primary MAC (jsc#PED-835). - ib/hfi1: Assign npages earlier (git-fixes) - ib/hfi1: Fix SDMA mmu_rb_node not being evicted in LRU order (git-fixes) - ib/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests (git-fixes) - ib/hfi1: Fix expected receive setup error exit issues (git-fixes) - ib/hfi1: Fix math bugs in hfi1_can_pin_pages() (git-fixes) - ib/hfi1: Fix sdma.h tx->num_descs off-by-one errors (git-fixes) - ib/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes) - ib/hfi1: Immediately remove invalid memory from hardware (git-fixes) - ib/hfi1: Reject a zero-length user expected buffer (git-fixes) - ib/hfi1: Remove user expected buffer invalidate race (git-fixes) - ib/hfi1: Reserve user expected TIDs (git-fixes) - ib/hfi1: Restore allocated resources on failed copyout (git-fixes) - ib/hfi1: Update RMT size calculation (git-fixes) - ib/hifi1: add a null check of kzalloc_node in hfi1_ipoib_txreq_init (git-fixes) - ib/iPoIB: Fix legacy IPoIB due to wrong number of queues (git-fixes) - ib/isert: Fix dead lock in ib_isert (git-fixes) - ib/isert: Fix incorrect release of isert connection (git-fixes) - ib/isert: Fix possible list corruption in CMA handler (git-fixes) - ib/mad: Do not call to function that might sleep while in atomic context (git-fixes). - ib/mlx5: Add support for 400G_8X lane speed (git-fixes) - ib/rdmavt: add missing locks in rvt_ruc_loopback (git-fixes) - ib/uverbs: Fix to consider event queue closing also upon non-blocking mode (git-fixes) - ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603 ltc#202604). - ice, xsk: Diversify return values from xsk_wakeup call paths (git-fixes). - ice: Add check for kzalloc (jsc#PED-376). - ice: Do not double unplug aux on peer initiated reset (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (git-fixes). - ice: Do not use WQ_MEM_RECLAIM flag for workqueue (jsc#PED-376). - ice: Fix DSCP PFC TLV creation (git-fixes). - ice: Fix DSCP PFC TLV creation (jsc#PED-376). - ice: Fix XDP memory leak when NIC is brought up and down (git-fixes). - ice: Fix disabling Rx VLAN filtering with port VLAN enabled (jsc#PED-376). - ice: Fix ice VF reset during iavf initialization (jsc#PED-376). - ice: Fix ice_cfg_rdma_fltr() to only update relevant fields (jsc#PED-376). - ice: Fix ice_xdp_xmit() when XDP TX queue number is not sufficient (git-fixes). - ice: Fix interrupt moderation settings getting cleared (jsc#SLE-18375). - ice: Fix memory corruption in VF driver (git-fixes). - ice: Fix potential memory leak in ice_gnss_tty_write() (jsc#PED-376). - ice: Ignore EEXIST when setting promisc mode (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (git-fixes). - ice: Prevent set_channel from changing queues while RDMA active (jsc#PED-376). - ice: Reset FDIR counter in FDIR init stage (git-fixes). - ice: Reset FDIR counter in FDIR init stage (jsc#PED-376). - ice: Set txq_teid to ICE_INVAL_TEID on ring creation (jsc#SLE-18375). - ice: add profile conflict check for AVF FDIR (git-fixes). - ice: add profile conflict check for AVF FDIR (jsc#PED-376). - ice: avoid bonding causing auxiliary plug/unplug under RTNL lock (bsc#1210158). - ice: block LAN in case of VF to VF offload (git-fixes). - ice: block LAN in case of VF to VF offload (jsc#PED-376). - ice: check if VF exists before mode check (jsc#PED-376). - ice: config netdev tc before setting queues number (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (git-fixes). - ice: copy last block omitted in ice_get_module_eeprom() (jsc#PED-376). - ice: ethtool: Prohibit improper channel config for DCB (git-fixes). - ice: ethtool: advertise 1000M speeds properly (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (git-fixes). - ice: fix invalid check for empty list in ice_sched_assoc_vsi_to_agg() (jsc#PED-376). - ice: fix lost multicast packets in promisc mode (jsc#PED-376). - ice: fix wrong fallback logic for FDIR (git-fixes). - ice: fix wrong fallback logic for FDIR (jsc#PED-376). - ice: handle E822 generic device ID in PLDM header (git-fixes). - ice: move devlink port creation/deletion (jsc#PED-376). - ice: switch: fix potential memleak in ice_add_adv_recipe() (git-fixes). - ice: switch: fix potential memleak in ice_add_adv_recipe() (jsc#PED-376). - ice: use bitmap_free instead of devm_kfree (git-fixes). - ice: xsk: Fix cleaning of XDP_TX frames (jsc#PED-376). - ice: xsk: disable txq irq before flushing hw (jsc#PED-376). - ice: xsk: do not use xdp_return_frame() on tx_buf->raw_buf (jsc#PED-376). - ice: xsk: use Rx ring's XDP ring when picking NAPI context (git-fixes). - ieee80211: add TWT element definitions (bsc#1209980). - ieee802154: hwsim: Fix possible memory leaks (git-fixes). - ifcvf/vDPA: fix misuse virtio-net device config size for blk dev (jsc#SLE-19253). - igb: Add lock to avoid data race (jsc#SLE-18379). - igb: Enable SR-IOV after reinit (jsc#SLE-18379). - igb: Fix PPS input and output using 3rd and 4th SDP (jsc#PED-370). - igb: Fix extts capture value format for 82580/i354/i350 (git-fixes). - igb: Initialize mailbox message for VF reset (jsc#SLE-18379). - igb: conditionalize I2C bit banging on external thermal sensor support (jsc#SLE-18379). - igb: fix bit_shift to be in [1..8] range (git-fixes). - igb: fix nvm.ops.read() error handling (git-fixes). - igb: revert rtnl_lock() that causes deadlock (jsc#SLE-18379). - igbvf: Regard vf reset nack as success (jsc#SLE-18379). - igc: Add checking for basetime less than zero (jsc#SLE-18377). - igc: Add ndo_tx_timeout support (jsc#SLE-18377). - igc: Clean the TX buffer and TX descriptor ring (git-fixes). - igc: Enhance Qbv scheduling by using first flag bit (jsc#SLE-18377). - igc: Fix PPS delta between two synchronized end-points (jsc#SLE-18377). - igc: Fix possible system crash when loading module (git-fixes). - igc: Lift TAPRIO schedule restriction (jsc#SLE-18377). - igc: Reinstate IGC_REMOVED logic and implement it properly (jsc#SLE-18377). - igc: Set Qbv start_time and end_time to end_time if not being configured in GCL (jsc#SLE-18377). - igc: Use strict cycles for Qbv scheduling (jsc#SLE-18377). - igc: allow BaseTime 0 enrollment for Qbv (jsc#SLE-18377). - igc: fix the validation logic for taprio's gate list (jsc#SLE-18377). - igc: read before write to SRRCTL register (jsc#SLE-18377). - igc: recalculate Qbv end_time by considering cycle time (jsc#SLE-18377). - igc: return an error if the mac type is unknown in igc_ptp_systim_to_hwtstamp() (jsc#SLE-18377). - iio: accel: fxls8962af: errata bug only applicable for FXLS8962AF (git-fixes). - iio: accel: fxls8962af: fixup buffer scan element type (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_config_word() (git-fixes). - iio: accel: mma9551_core: Prevent uninitialized variable in mma9551_read_status_word() (git-fixes). - iio: accel: st_accel: Fix invalid mount_matrix on devices without ACPI _ONT method (git-fixes). - iio: adc: ad7192: Change 'shorted' channels to differential (git-fixes). - iio: adc: ad7192: Fix internal/external clock selection (git-fixes). - iio: adc: ad7192: Fix null ad7192_state pointer access (git-fixes). - iio: adc: ad7791: fix IRQ flags (git-fixes). - iio: adc: ad_sigma_delta: Fix IRQ issue by setting IRQ_DISABLE_UNLAZY flag (git-fixes). - iio: adc: at91-sama5d2_adc: fix an error code in at91_adc_allocate_trigger() (git-fixes). - iio: adc: berlin2-adc: Add missing of_node_put() in error path (git-fixes). - iio: adc: mxs-lradc: fix the order of two cleanup operations (git-fixes). - iio: adc: palmas_gpadc: fix NULL dereference on rmmod (git-fixes). - iio: adc: stm32-dfsdm: fill module aliases (git-fixes). - iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip (git-fixes). - iio: adis16480: select CONFIG_CRC32 (git-fixes). - iio: dac: cio-dac: Fix max DAC write value check for 12-bit (git-fixes). - iio: dac: mcp4725: Fix i2c_master_send() return value handling (git-fixes). - iio: hid: fix the retval in accel_3d_capture_sample (git-fixes). - iio: hid: fix the retval in gyro_3d_capture_sample (git-fixes). - iio: imu: fxos8700: fix ACCEL measurement range selection (git-fixes). - iio: imu: fxos8700: fix IMU data bits returned to user space (git-fixes). - iio: imu: fxos8700: fix MAGN sensor scale and unit (git-fixes). - iio: imu: fxos8700: fix failed initialization ODR mode assignment (git-fixes). - iio: imu: fxos8700: fix incomplete ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: fix incorrect ODR mode readback (git-fixes). - iio: imu: fxos8700: fix map label of channel type to MAGN sensor (git-fixes). - iio: imu: fxos8700: fix swapped ACCEL and MAGN channels readback (git-fixes). - iio: imu: fxos8700: remove definition FXOS8700_CTRL_ODR_MIN (git-fixes). - iio: imu: inv_icm42600: fix timestamp reset (git-fixes). - iio: light: cm32181: Unregister second I2C client if present (git-fixes). - iio: light: tsl2563: Do not hardcode interrupt trigger type (git-fixes). - iio: light: tsl2772: fix reading proximity-diodes from device tree (git-fixes). - iio: light: vcnl4035: fixed chip ID check (git-fixes). - iio:adc:twl6030: Enable measurement of VAC (git-fixes). - iio:adc:twl6030: Enable measurements of VUSB, VBAT and others (git-fixes). - ima: Fix memory leak in __ima_inode_hash() (git-fixes). - init, x86: Move mem_encrypt_init() into arch_cpu_finalize_init() (bsc#1212448). - init: Invoke arch_cpu_finalize_init() earlier (bsc#1212448). - init: Provide arch_cpu_finalize_init() (bsc#1212448). - init: Remove check_bugs() leftovers (bsc#1212448). - inotify: Avoid reporting event with invalid wd (bsc#1213025). - input: ads7846 - always set last command to PWRDOWN (git-fixes). - input: ads7846 - do not check penirq immediately for 7845 (git-fixes). - input: ads7846 - do not report pressure for ads7845 (git-fixes). - input: adxl34x - do not hardcode interrupt trigger type (git-fixes). - input: alps - fix compatibility with -funsigned-char (bsc#1209805). - input: drv260x - fix typo in register value define (git-fixes). - input: drv260x - remove unused .reg_defaults (git-fixes). - input: drv260x - sleep between polling GO bit (git-fixes). - input: exc3000 - properly stop timer on shutdown (git-fixes). - input: fix open count when closing inhibited device (git-fixes). - input: focaltech - use explicitly signed char type (git-fixes). - input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report DMI table (git-fixes). - input: hp_sdc_rtc - mark an unused function as __maybe_unused (git-fixes). - input: iqs269a - configure device with a single block write (git-fixes). - input: iqs269a - drop unused device node references (git-fixes). - input: iqs269a - increase interrupt handler return delay (git-fixes). - input: iqs626a - drop unused device node references (git-fixes). - input: psmouse - fix OOB access in Elantech protocol (git-fixes). - input: raspberrypi-ts - fix refcount leak in rpi_ts_probe (git-fixes). - input: soc_button_array - add invalid acpi_index DMI quirk handling (git-fixes). - input: xpad - add constants for GIP interface numbers (git-fixes). - input: xpad - delete a Razer DeathAdder mouse VID/PID entry (git-fixes). - integrity: Fix possible multiple allocation in integrity_inode_get() (git-fixes). - intel/igbvf: free irq on the error path in igbvf_request_msix() (jsc#SLE-18379). - intel_idle: add Emerald Rapids Xeon support (PED-3849). - interconnect: exynos: fix node leak in probe PM QoS error path (git-fixes). - interconnect: fix mem leak when freeing nodes (git-fixes). - interconnect: qcom: osm-l3: fix icc_onecell_data allocation (git-fixes). - io_uring/fdinfo: fix sqe dumping for IORING_SETUP_SQE128 (git-fixes). - io_uring/kbuf: fix not advancing READV kbuf ring (git-fixes). - io_uring: clear TIF_NOTIFY_SIGNAL if set and task_work not available (git-fixes). - io_uring: do not expose io_fill_cqe_aux() (bsc#1211014). - io_uring: do not gate task_work run on TIF_NOTIFY_SIGNAL (git-fixes). - io_uring: ensure that cached task references are always put on exit (git-fixes). - io_uring: fix CQ waiting timeout handling (git-fixes). - io_uring: fix fget leak when fs do not support nowait buffered read (bsc#1205205). - io_uring: fix ordering of args in io_uring_queue_async_work (git-fixes). - io_uring: fix return value when removing provided buffers (git-fixes). - io_uring: fix size calculation when registering buf ring (git-fixes). - io_uring: recycle kbuf recycle on tw requeue (git-fixes). - iommu/hyper-v: Allow hyperv irq remapping without x2apic (git-fixes). - iommu/vt-d: Add a fix for devices need extra dtlb flush (bsc#1208219). - iommu/vt-d: Avoid superfluous IOTLB tracking in lazy mode (bsc#1208948). - iommu/vt-d: Fix buggy QAT device mask (bsc#1208219). - ipmi: fix SSIF not responding under certain cond (git-fixes). - ipmi:ssif: Add 60ms time internal between write retries (bsc#1206459). - ipmi:ssif: Add a timer between request retries (bsc#1206459). - ipmi:ssif: Add send_retries increment (git-fixes). - ipmi:ssif: Increase the message retry time (bsc#1206459). - ipmi:ssif: Remove rtc_us_timer (bsc#1206459). - ipmi:ssif: resend_msg() cannot fail (bsc#1206459). - ipmi_ssif: Rename idle state and check (bsc#1206459). - ipv6: sr: fix out-of-bounds read when setting HMAC data (bsc#1211592). - irqchip/clps711x: Remove unused clps711x_intc_init() function (git-fixes). - irqchip/ftintc010: Mark all function static (git-fixes). - irqchip/gic-v3: Refactor ISB + EOIR at ack time (git-fixes) - irqchip/jcore-aic: Fix missing allocation of IRQ descriptors (git-fixes). - iw_cxgb4: Fix potential NULL dereference in c4iw_fill_res_cm_id_entry() (git-fixes) - iwlwifi: cfg: Add missing MODULE_FIRMWARE() for *.pnvm (bsc#1207553). - ixgbe: Allow flow hash to be set via ethtool (jsc#SLE-18384). - ixgbe: Enable setting RSS table to default values (jsc#SLE-18384). - ixgbe: Fix panic during XDP_TX with > 64 CPUs (jsc#SLE-18384). - ixgbe: add double of VLAN header when computing the max MTU (jsc#SLE-18384). - ixgbe: allow to increase MTU to 3K with XDP enabled (jsc#SLE-18384). - ixgbe: fix pci device refcount leak (jsc#SLE-18384). - ixgbe: stop resetting SYSTIME in ixgbe_ptp_start_cyclecounter (jsc#SLE-18384). - jbd2: Fix up kABI of ext4 fast commit interface (bsc#1207590). - jbd2: add miss release buffer head in fc_do_one_pass() (bsc#1207646). - jbd2: fix a potential race while discarding reserved buffers after an abort (bsc#1207641). - jbd2: fix data missing when reusing bh which is ready to be checkpointed (bsc#1213095). - jbd2: fix potential buffer head reference count leak (bsc#1207644). - jbd2: fix potential use-after-free in jbd2_fc_wait_bufs (bsc#1207645). - jbd2: use the correct print format (git-fixes). - jbd2: wake up journal waiters in FIFO order, not LIFO (bsc#1207643). - jdb2: Do not refuse invalidation of already invalidated buffers (bsc#1213014). - jfs: Fix fortify moan in symlink (git-fixes). - k-m-s: Drop Linux 2.6 support - kABI compatibility workaround for efivars (git-fixes). - kABI workaround for btbcm.c (git-fixes). - kABI workaround for cpp_acpi extensions for EPP (bsc#1212445). - kABI workaround for drm_dp_mst helper updates (bsc#1206843). - kABI workaround for hid quirks (git-fixes). - kABI workaround for ieee80211 and co (bsc#1209980). - kABI workaround for mt76_poll_msec() (git-fixes). - kABI workaround for struct acpi_ec (bsc#1207149). - kABI workaround for xhci (git-fixes). - kABI: Fix kABI after backport Emulate RDPID only if it is enabled in guest (git-fixes) - kABI: PCI: Reduce warnings on possible RW1C corruption (kabi). - kABI: PCI: dwc: Add dw_pcie_ops.host_deinit() callback (kabi). - kABI: PCI: loongson: Prevent LS7A MRRS increases (kabi). - kABI: Preserve TRACE_EVENT_FL values (git-fixes). - kABI: Work around kABI changes after '20347fca71a3 swiotlb: split up the global swiotlb lock' (jsc#PED-3259). - kABI: x86/msi: Fix msi message data shadow struct (kabi). - kABI: x86/msr: Remove .fixup usage (kabi). - kabi FIX FOR NFSv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - kabi FIX FOR: NFS: Further optimisations for 'ls -l' (git-fixes). - kabi FIX FOR: NFSD: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - kabi FIX FOR: NFSv4.1 query for fs_location attr on a new file system (Never, kabi). - kabi FIX FOR: NFSv4: keep state manager thread active if swap is enabled (Never, kabi). - kabi fix for: NFSv3: handle out-of-order write replies (bsc#1205544). - kabi/severities: add mlx5 internal symbols - kabi/severities: added Microsoft mana symbold (bsc#1210551) - kabi/severities: ignore KABI for NVMe target (bsc#1174777) The target code is only for testing and there are no external users. - kabi/severities: ignore kABI changes for mt76/* local modules (bsc#1209980) - kabi/severities: ignore kABI in bq27xxx_battery module Those are local symbols that are used only by child drivers - kasan: no need to unset panic_on_warn in end_report() (bsc#1207328). - kconfig: Update config changed flag before calling callback (git-fixes). - kernel-binary: Add back kernel-default-base guarded by option Add configsh option for splitting off kernel-default-base, and for not signing the kernel on non-efi - kernel-binary: install expoline.o (boo#1210791 bsc#1211089) - kernel-docs: Add buildrequires on python3-base when using python3 The python3 binary is provided by python3-base. - kernel-docs: Use python3 together with python3-Sphinx (bsc#1212741). - kernel-source: Remove unused macro variant_symbols - kernel-spec-macros: Fix up obsolete_rebuilds_subpackage to generate obsoletes correctly (boo#1172073 bsc#1191731). rpm only supports full length release, no provides - kernel: Do not sign the vanilla kernel (bsc#1209008). - kernel: Kernel is locked down even though secure boot is disabled (bsc#1198101, bsc#1208976). - keys: Add missing function documentation (git-fixes). - keys: Create static version of public_key_verify_signature (git-fixes). - keys: Do not cache key in task struct if key is requested from kernel thread (git-fixes). - keys: Fix linking a duplicate key to a keyring's assoc_array (bsc#1207088). - keys: asymmetric: Copy sig and digest in public_key_verify_signature() (git-fixes). - keys: asymmetric: Fix ECDSA use via keyctl uapi (git-fixes). - kmap_local: do not assume kmap PTEs are linear arrays in memory (git-fixes) Update config/armv7hl/default too. - kprobe: reverse kp->flags when arm_kprobe failed (git-fixes). - kprobes: Fix check for probe enabled in kill_kprobe() (git-fixes). - kprobes: Fix to handle forcibly unoptimized kprobes on freeing_list (git-fixes). - kprobes: Forbid probing on trampoline and BPF code areas (git-fixes). - kprobes: Prohibit probes in gate area (git-fixes). - kprobes: Skip clearing aggrprobe's post_handler in kprobe-on-ftrace case (git-fixes). - kprobes: do not call disarm_kprobe() for disabled kprobes (git-fixes). - kvm/vfio: Fix potential deadlock on vfio group_lock (git-fixes) - kvm/vfio: Fix potential deadlock problem in vfio (git-fixes) - kvm: Destroy target device if coalesced MMIO unregistration fails (git-fixes) - kvm: Disallow user memslot with size that exceeds 'unsigned long' (git-fixes) - kvm: Do not create VM debugfs files outside of the VM directory (git-fixes) - kvm: Do not set Accessed/Dirty bits for ZERO_PAGE (git-fixes) - kvm: LAPIC: Enable timer posted-interrupt only when mwait/hlt is advertised (git-fixes). - kvm: Prevent module exit until all VMs are freed (git-fixes) - kvm: arm64: Do not arm a hrtimer for an already pending timer (git-fixes) - kvm: arm64: Do not hypercall before EL2 init (git-fixes) - kvm: arm64: Do not return from void function (git-fixes) - kvm: arm64: Fix PAR_TO_HPFAR() to work independently of PA_BITS. (git-fixes) - kvm: arm64: Fix S1PTW handling on RO memslots (git-fixes) - kvm: arm64: Fix bad dereference on MTE-enabled systems (git-fixes) - kvm: arm64: Fix buffer overflow in kvm_arm_set_fw_reg() (git-fixes) - kvm: arm64: Fix kvm init failure when mode!=vhe and VA_BITS=52. (git-fixes) - kvm: arm64: Free hypervisor allocations if vector slot init fails (git-fixes) - kvm: arm64: GICv4.1: Fix race with doorbell on VPE (git-fixes) - kvm: arm64: Limit length in kvm_vm_ioctl_mte_copy_tags() to INT_MAX (git-fixes) - kvm: arm64: PMU: Restore the guest's EL0 event counting after (git-fixes) - kvm: arm64: Propagate errors from __pkvm_prot_finalize hypercall (git-fixes) - kvm: arm64: Reject 32bit user PSTATE on asymmetric systems (git-fixes) - kvm: arm64: Save PSTATE early on exit (git-fixes) - kvm: arm64: Stop handle_exit() from handling HVC twice when an SError (git-fixes) - kvm: arm64: Treat PMCR_EL1.LC as RES1 on asymmetric systems (git-fixes) - kvm: arm64: nvhe: Eliminate kernel-doc warnings (git-fixes) - kvm: arm64: vgic: Fix exit condition in scan_its_table() (git-fixes) - kvm: arm64: vgic: Read HW interrupt pending state from the HW (git-fixes) - kvm: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when eVMCS (git-fixes). - kvm: nVMX: Do not use Enlightened MSR Bitmap for L3 (git-fixes). - kvm: nVMX: Document that ignoring memory failures for VMCLEAR is deliberate (git-fixes). - kvm: nVMX: Emulate NOPs in L2, and PAUSE if it's not intercepted (git-fixes). - kvm: nVMX: Inject #GP, not #UD, if 'generic' VMXON CR0/CR4 check fails (git-fixes). - kvm: nVMX: Prioritize TSS T-flag #DBs over Monitor Trap Flag (git-fixes). - kvm: nVMX: Properly expose ENABLE_USR_WAIT_PAUSE control to L1 (git-fixes). - kvm: nVMX: Treat General Detect #DB (DR7.GD=1) as fault-like (git-fixes). - kvm: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER (git-fixes). - kvm: s390: selftest: memop: Fix integer literal (git-fixes). - kvm: svm: Do not rewrite guest ICR on AVIC IPI virtualization failure (git-fixes). - kvm: svm: Fix benign 'bool vs. int' comparison in svm_set_cr0() (git-fixes). - kvm: svm: Fix potential overflow in SEV's send|receive_update_data() (git-fixes). - kvm: svm: Require logical ID to be power-of-2 for AVIC entry (git-fixes). - kvm: svm: Skip WRMSR fastpath on VM-Exit if next RIP isn't valid (git-fixes). - kvm: svm: hyper-v: placate modpost section mismatch error (git-fixes). - kvm: vmx: Introduce vmx_msr_bitmap_l01_changed() helper (git-fixes). - kvm: vmx: Resume guest immediately when injecting #GP on ECREATE (git-fixes). - kvm: vmx: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking shadow (git-fixes). - kvm: vmx: Use is_64_bit_mode() to check 64-bit mode in SGX handler (git-fixes). - kvm: x86/emulator: Emulate RDPID only if it is enabled in guest (git-fixes). - kvm: x86/mmu: avoid NULL-pointer dereference on page freeing bugs (git-fixes). - kvm: x86/pmu: Ignore pmu->global_ctrl check if vPMU does not support global_ctrl (git-fixes). - kvm: x86/svm: add __GFP_ACCOUNT to __sev_dbg_{en,de}crypt_user() (git-fixes). - kvm: x86/vmx: Do not skip segment attributes if unusable bit is set (git-fixes). - kvm: x86/xen: Fix memory leak in kvm_xen_write_hypercall_page() (git-fixes). - kvm: x86: Copy filter arg outside kvm_vm_ioctl_set_msr_filter() (git-fixes). - kvm: x86: Disable KVM_HC_CLOCK_PAIRING if tsc is in always catchup mode (git-fixes). - kvm: x86: Do not change ICR on write to APIC_SELF_IPI (git-fixes). - kvm: x86: Fail emulation during EMULTYPE_SKIP on any exception (git-fixes). - kvm: x86: Fix tlb flush for tdp in kvm_invalidate_pcid() (git-fixes). - kvm: x86: Inject #GP if WRMSR sets reserved bits in APIC Self-IPI (git-fixes). - kvm: x86: Mask off reserved bits in CPUID.8000001FH (git-fixes). - kvm: x86: Mask off unsupported and unknown bits of IA32_ARCH_CAPABILITIES (git-fixes). - kvm: x86: Protect the unused bits in MSR exiting flags (git-fixes). - kvm: x86: Remove a redundant guest cpuid check in kvm_set_cr4() (git-fixes). - kvm: x86: Report deprecated x87 features in supported CPUID (git-fixes). - kvm: x86: do not set st->preempted when going back to user space (git-fixes). - kvm: x86: fix sending PV IPI (git-fixes). - kvm: x86: fix typo in __try_cmpxchg_user causing non-atomicness (git-fixes). - kvm: x86: ioapic: Fix level-triggered EOI and userspace I/OAPIC reconfigure race (git-fixes). - lan78xx: Add missing return code checks (git-fixes). - lan78xx: Fix exception on link speed change (git-fixes). - lan78xx: Fix memory allocation bug (git-fixes). - lan78xx: Fix partial packet errors on suspend/resume (git-fixes). - lan78xx: Fix race condition in disconnect handling (git-fixes). - lan78xx: Fix race conditions in suspend/resume handling (git-fixes). - lan78xx: Fix white space and style issues (git-fixes). - lan78xx: Remove unused pause frame queue (git-fixes). - lan78xx: Remove unused timer (git-fixes). - lan78xx: Set flow control threshold to prevent packet loss (git-fixes). - leds: Fix reference to led_set_brightness() in doc (git-fixes). - leds: TI_LMU_COMMON: select REGMAP instead of depending on it (git-fixes). - leds: led-class: Add missing put_device() to led_put() (git-fixes). - leds: led-core: Fix refcount leak in of_led_get() (git-fixes). - leds: tca6507: Fix error handling of using fwnode_property_read_string (git-fixes). - lib/mpi: Fix buffer overrun when SG is too long (git-fixes). - lib/sbitmap: Fix invalid loop in __sbitmap_queue_get_batch() (git-fixes). - lib/zlib: remove redundation assignement of avail_in dfltcc_gdht() (git-fixes). - libfs: add DEFINE_SIMPLE_ATTRIBUTE_SIGNED for signed value (git-fixes). - lockd: set file_lock start and end when decoding nlm4 testargs (git-fixes). - locking/rwbase: Mitigate indefinite writer starvation (bsc#1189998 (PREEMPT_RT prerequisite backports), bsc#1206552). - locking/rwsem: Add __always_inline annotation to __down_read_common() and inlined callers (git-fixes). - locking/rwsem: Allow slowpath writer to ignore handoff bit if not set by first waiter (bsc#1207270). - locking/rwsem: Always try to wake waiters in out_nolock path (bsc#1207270). - locking/rwsem: Conditionally wake waiters in reader/writer slowpaths (bsc#1207270). - locking/rwsem: Disable preemption in all down_read*() and up_read() code paths (bsc#1207270). - locking/rwsem: Disable preemption in all down_write*() and up_write() code paths (bsc#1207270). - locking/rwsem: Disable preemption while trying for rwsem lock (bsc#1207270). - locking/rwsem: Make handoff bit handling more consistent (bsc#1207270). - locking/rwsem: No need to check for handoff bit if wait queue empty (bsc#1207270). - locking/rwsem: Prevent non-first waiter from spinning in down_write() slowpath (bsc#1207270). - locking: Add missing __sched attributes (bsc#1207270). - loop: Fix the max_loop commandline argument treatment when it is set to 0 (git-fixes). - loop: fix ioctl calls using compat_loop_info (git-fixes). - lpfc: Account for fabric domain ctlr device loss recovery (bsc#1211346, bsc#1211852). - lpfc: Change firmware upgrade logging to KERN_NOTICE instead of TRACE_EVENT (bsc#1211852). - lpfc: Clean up SLI-4 CQE status handling (bsc#1211852). - lpfc: Clear NLP_IN_DEV_LOSS flag if already in rediscovery (bsc#1211852). - lpfc: Copyright updates for 14.2.0.13 patches (bsc#1211852). - lpfc: Enhance congestion statistics collection (bsc#1211852). - lpfc: Fix use-after-free rport memory access in lpfc_register_remote_port (bsc#1211852, bsc#1208410, bsc#1211346). - lpfc: Revise NPIV ELS unsol rcv cmpl logic to drop ndlp based on nlp_state (bsc#1211852). - lpfc: Update lpfc version to 14.2.0.13 (bsc#1211852). - lpfc: update metadata - mac80211: introduce individual TWT support in AP mode (bsc#1209980). - mac80211: introduce set_radar_offchan callback (bsc#1209980). - mac80211: twt: do not use potentially unaligned pointer (bsc#1209980). - mailbox: mailbox-test: Fix potential double-free in mbox_test_message_write() (git-fixes). - mailbox: mailbox-test: fix a locking issue in mbox_test_message_write() (git-fixes). - mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0 (git-fixes). - mailbox: zynqmp: Fix IPI isr handling (git-fixes). - mailbox: zynqmp: Fix typo in IPI documentation (git-fixes). - mbcache: Avoid nesting of cache->c_list_lock under bit locks (bsc#1207647). - mbcache: Fixup kABI of mb_cache_entry (bsc#1207653). - mce: fix set_mce_nospec to always unmap the whole page (git-fixes). - md/bitmap: Fix bitmap chunk size overflow issues (git-fixes). - md/raid1: stop mdx_raid1 thread when raid1 array run failed (git-fixes). - md/raid5: Improve performance for sequential IO (bsc#1208081). - md/raid5: Wait for MD_SB_CHANGE_PENDING in raid5d (git-fixes). - md: Flush workqueue md_rdev_misc_wq in md_alloc() (git-fixes). - md: Notify sysfs sync_completed in md_reap_sync_thread() (git-fixes). - md: fix a crash in mempool_free (git-fixes). - md: protect md_unregister_thread from reentrancy (git-fixes). - media: atomisp: gmin_platform: fix out_len in gmin_get_config_dsm_var() (git-fixes). - media: av7110: prevent underflow in write_ts_to_decoder() (git-fixes). - media: cec: core: do not set last_initiator if tx in progress (git-fixes). - media: cec: i2c: ch7322: also select REGMAP (git-fixes). - media: coda: Add check for dcoda_iram_alloc (git-fixes). - media: coda: Add check for kmalloc (git-fixes). - media: cx23885: Fix a null-ptr-deref bug in buffer_prepare() and buffer_finish() (git-fixes). - media: dm1105: Fix use after free bug in dm1105_remove due to race condition (git-fixes). - media: dvb-usb-v2: ce6230: fix null-ptr-deref in ce6230_i2c_master_xfer() (git-fixes). - media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer() (git-fixes). - media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in rtl28xxu_i2c_xfer (git-fixes). - media: dvb-usb: az6027: fix three null-ptr-deref in az6027_i2c_xfer() (git-fixes). - media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer() (git-fixes). - media: dvb-usb: dw2102: fix uninit-value in su3000_read_mac_address (git-fixes). - media: dvb_ca_en50221: fix a size write bug (git-fixes). - media: dvb_demux: fix a bug for the continuity counter (git-fixes). - media: i2c: Correct format propagation for st-mipid02 (git-fixes). - media: i2c: imx219: Fix binning for RAW8 capture (git-fixes). - media: i2c: imx219: Split common registers from mode tables (git-fixes). - media: i2c: ov7670: 0 instead of -EINVAL was returned (git-fixes). - media: i2c: ov772x: Fix memleak in ov772x_probe() (git-fixes). - media: imx: imx7-media-csi: fix missing clk_disable_unprepare() in imx7_csi_init() (git-fixes). - media: ipu3-cio2: Fix PM runtime usage_count in driver unbind (git-fixes). - media: m5mols: fix off-by-one loop termination error (git-fixes). - media: max9286: Fix memleak in max9286_v4l2_register() (git-fixes). - media: max9286: Free control handler (git-fixes). - media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr from ID table (git-fixes). - media: netup_unidvb: fix irq init by register it at the end of probe (git-fixes). - media: netup_unidvb: fix use-after-free at del_timer() (git-fixes). - media: ov2740: Fix memleak in ov2740_init_controls() (git-fixes). - media: ov5640: Fix analogue gain control (git-fixes). - media: ov5675: Fix memleak in ov5675_init_controls() (git-fixes). - media: pci: tw68: Fix null-ptr-deref bug in buf prepare and finish (git-fixes). - media: platform: ti: Add missing check for devm_regulator_get (git-fixes). - media: radio-shark: Add endpoint checks (git-fixes). - media: rc: Fix use-after-free bugs caused by ene_tx_irqsim() (git-fixes). - media: rc: gpio-ir-recv: Fix support for wake-up (git-fixes). - media: rc: gpio-ir-recv: add remove function (git-fixes). - media: rcar_fdp1: Fix the correct variable assignments (git-fixes). - media: rcar_fdp1: Make use of the helper function devm_platform_ioremap_resource() (git-fixes). - media: rkvdec: fix use after free bug in rkvdec_remove (git-fixes). - media: saa7134: Use video_unregister_device for radio_dev (git-fixes). - media: saa7134: fix use after free bug in saa7134_finidev due to race condition (git-fixes). - media: ti: cal: fix possible memory leak in cal_ctx_create() (git-fixes). - media: usb: Check az6007_read() return value (git-fixes). - media: usb: siano: Fix use after free bugs caused by do_submit_urb (git-fixes). - media: usb: siano: Fix warning due to null work_func_t function pointer (git-fixes). - media: uvcvideo: Add support for V4L2_CTRL_TYPE_CTRL_CLASS (git-fixes). - media: uvcvideo: Check controls flags before accessing them (git-fixes). - media: uvcvideo: Check for INACTIVE in uvc_ctrl_is_accessible() (git-fixes). - media: uvcvideo: Do not check for V4L2_CTRL_WHICH_DEF_VAL (git-fixes). - media: uvcvideo: Fix memory leak of object map on error exit path (git-fixes). - media: uvcvideo: Fix race condition with usb_kill_urb (git-fixes). - media: uvcvideo: Handle cameras with invalid descriptors (git-fixes). - media: uvcvideo: Handle errors from calls to usb_string (git-fixes). - media: uvcvideo: Quirk for autosuspend in Logitech B910 and C910 (git-fixes). - media: uvcvideo: Remove s_ctrl and g_ctrl (git-fixes). - media: uvcvideo: Silence memcpy() run-time false positive warnings (git-fixes). - media: uvcvideo: Use control names from framework (git-fixes). - media: uvcvideo: refactor __uvc_ctrl_add_mapping (git-fixes). - media: v4l2-jpeg: correct the skip count in jpeg_parse_app14_data (git-fixes). - media: v4l2-jpeg: ignore the unknown APP14 marker (git-fixes). - media: venus: dec: Fix handling of the start cmd (git-fixes). - media: venus: helpers: Fix ALIGN() of non power of two (git-fixes). - media: videodev2.h: Fix struct v4l2_input tuner index comment (git-fixes). - mei: bus-fixup:upon error print return values of send and receive (git-fixes). - mei: bus: fix unlink on bus in error path (git-fixes). - mei: me: add meteor lake point M DID (git-fixes). - mei: pxp: Use correct macros to initialize uuid_le (git-fixes). - memory: brcmstb_dpfe: fix testing array offset after use (git-fixes). - memstick: fix memory leak if card device is never registered (git-fixes). - memstick: r592: Fix UAF bug in r592_remove due to race condition (bsc#1211449). - meson saradc: fix clock divider mask length (git-fixes). - mfd: arizona: Use pm_runtime_resume_and_get() to prevent refcnt leak (git-fixes). - mfd: cs5535: Do not build on UML (git-fixes). - mfd: dln2: Fix memory leak in dln2_probe() (git-fixes). - mfd: intel-lpss: Add missing check for platform_get_resource (git-fixes). - mfd: pcf50633-adc: Fix potential memleak in pcf50633_adc_async_read() (git-fixes). - mfd: pm8008: Fix module autoloading (git-fixes). - mfd: rt5033: Drop rt5033-battery sub-device (git-fixes). - mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes). - mfd: stmfx: Nullify stmfx->vdd in case of error (git-fixes). - mfd: stmpe: Only disable the regulators if they are enabled (git-fixes). - mfd: tqmx86: Correct board names for TQMxE39x (git-fixes). - mfd: tqmx86: Do not access I2C_DETECT register through io_base (git-fixes). - misc/mei/hdcp: Use correct macros to initialize uuid_le (git-fixes). - misc: enclosure: Fix doc for enclosure_find() (git-fixes). - misc: fastrpc: Create fastrpc scalar with correct buffer count (git-fixes). - misc: fastrpc: reject new invocations during device removal (git-fixes). - misc: fastrpc: return -EPIPE to invocations on device removal (git-fixes). - misc: pci_endpoint_test: Free IRQs before removing the device (git-fixes). - misc: pci_endpoint_test: Re-init completion for every test (git-fixes). - mkinitrd: Replace dependency with dracut (bsc#1202353). - mlx5: do not use RT_TOS for IPv6 flowlabel (jsc#SLE-19253). - mlx5: fix possible ptp queue fifo use-after-free (jsc#PED-1549). - mlx5: fix skb leak while fifo resync and push (jsc#PED-1549). - mlxfw: fix null-ptr-deref in mlxfw_mfa2_tlv_next() (git-fixes). - mlxsw: minimal: Fix deadlock in ports creation (git-fixes). - mlxsw: spectrum: Allow driver to load with old firmware versions (git-fixes). - mm/filemap: fix page end in filemap_get_read_batch (bsc#1210768). - mm/vmalloc: do not output a spurious warning when huge vmalloc() fails (bsc#1211410). - mm: /proc/pid/smaps_rollup: fix no vma's null-deref (bsc#1207769). - mm: Move mm_cachep initialization to mm_init() (bsc#1212448). - mm: memcg: fix NULL pointer in mem_cgroup_track_foreign_dirty_slowpath() (bsc#1209262). - mm: memcg: fix swapcached stat accounting (bsc#1209804). - mm: mmap: remove newline at the end of the trace (git-fixes). - mm: page_alloc: skip regions with hugetlbfs pages when allocating 1G pages (bsc#1210034). - mm: take a page reference when removing device exclusive entries (bsc#1211025). - mm: vmalloc: avoid warn_alloc noise caused by fatal signal (bsc#1211410). - mmc: atmel-mci: fix race between stop command and start of next command (git-fixes). - mmc: bcm2835: fix deferred probing (git-fixes). - mmc: block: Remove error check of hw_reset on reset (git-fixes). - mmc: block: ensure error propagation for non-blk (git-fixes). - mmc: jz4740: Work around bug on JZ4760(B) (git-fixes). - mmc: meson-gx: remove redundant mmc_request_done() call from irq context (git-fixes). - mmc: mmc_spi: fix error handling in mmc_spi_probe() (git-fixes). - mmc: mmci: Set PROBE_PREFER_ASYNCHRONOUS (git-fixes). - mmc: mmci: stm32: fix max busy timeout calculation (git-fixes). - mmc: mtk-sd: fix deferred probing (git-fixes). - mmc: mvsdio: fix deferred probing (git-fixes). - mmc: omap: fix deferred probing (git-fixes). - mmc: omap_hsmmc: fix deferred probing (git-fixes). - mmc: owl: fix deferred probing (git-fixes). - mmc: sdhci-acpi: fix deferred probing (git-fixes). - mmc: sdhci-esdhc-imx: make 'no-mmc-hs400' works (git-fixes). - mmc: sdhci-msm: Disable broken 64-bit DMA on MSM8916 (git-fixes). - mmc: sdhci-of-esdhc: fix quirk to ignore command inhibit for data (git-fixes). - mmc: sdhci-spear: fix deferred probing (git-fixes). - mmc: sdhci_am654: Set HIGH_SPEED_ENA for SDR12 and SDR25 (git-fixes). - mmc: sdhci_am654: lower power-on failed message severity (git-fixes). - mmc: sdio: fix possible resource leaks in some error paths (git-fixes). - mmc: sh_mmcif: fix deferred probing (git-fixes). - mmc: sunxi: fix deferred probing (git-fixes). - mmc: usdhi60rol0: fix deferred probing (git-fixes). - mmc: vub300: fix invalid response handling (git-fixes). - module: Do not wait for GOING modules (bsc#1196058, bsc#1186449, bsc#1204356, bsc#1204662). - mt76: Make use of the helper macro kthread_run() (bsc#1209980). - mt76: Print error message when reading EEPROM from mtd failed (bsc#1209980). - mt76: add 6GHz support (bsc#1209980). - mt76: add MT_RXQ_MAIN_WA for mt7916 (bsc#1209980). - mt76: add support for setting mcast rate (bsc#1209980). - mt76: allow drivers to drop rx packets early (bsc#1209980). - mt76: clear sta powersave flag after notifying driver (bsc#1209980). - mt76: connac: add 6 GHz support for wtbl and starec configuration (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_set_channel_domain (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_sta_tlv (bsc#1209980). - mt76: connac: add 6GHz support to mt76_connac_mcu_uni_add_bss (bsc#1209980). - mt76: connac: add support for limiting to maximum regulatory Tx power (bsc#1209980). - mt76: connac: add support for passing the cipher field in bss_info (bsc#1209980). - mt76: connac: adjust wlan_idx size from u8 to u16 (bsc#1209980). - mt76: connac: align MCU_EXT definitions with 7915 driver (bsc#1209980). - mt76: connac: enable 6GHz band for hw scan (bsc#1209980). - mt76: connac: enable hw amsdu @ 6GHz (bsc#1209980). - mt76: connac: extend mcu_get_nic_capability (bsc#1209980). - mt76: connac: fix a theoretical NULL pointer dereference in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: fix last_chan configuration in mt76_connac_mcu_rate_txpower_band (bsc#1209980). - mt76: connac: fix unresolved symbols when CONFIG_PM is unset (bsc#1209980). - mt76: connac: introduce MCU_CE_CMD macro (bsc#1209980). - mt76: connac: introduce MCU_EXT macros (bsc#1209980). - mt76: connac: introduce MCU_UNI_CMD macro (bsc#1209980). - mt76: connac: introduce is_connac_v1 utility routine (bsc#1209980). - mt76: connac: make read-only array ba_range static const (bsc#1209980). - mt76: connac: move mcu reg access utility routines in mt76_connac_lib module (bsc#1209980). - mt76: connac: move mt76_connac_chan_bw in common code (bsc#1209980). - mt76: connac: move mt76_connac_lmac_mapping in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_add_key in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_basic_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_ext_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_bss_omac_tlv in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_gen_dl_mode in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_get_cipher in common code (bsc#1209980). - mt76: connac: move mt76_connac_mcu_rdd_cmd in mt76-connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_restart in common module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_set_pm in connac module (bsc#1209980). - mt76: connac: move mt76_connac_mcu_wtbl_update_hdr_trans in connac module (bsc#1209980). - mt76: connac: rely on MCU_CMD macro (bsc#1209980). - mt76: connac: rely on le16_add_cpu in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - mt76: connac: remove MCU_FW_PREFIX bit (bsc#1209980). - mt76: connac: remove PHY_MODE_AX_6G configuration in mt76_connac_get_phy_mode (bsc#1209980). - mt76: connac: set 6G phymode in mt76_connac_get_phy_mode{,v2} (bsc#1209980). - mt76: connac: set 6G phymode in single-sku support (bsc#1209980). - mt76: debugfs: fix queue reporting for mt76-usb (bsc#1209980). - mt76: debugfs: improve queue node readability (bsc#1209980). - mt76: disable BH around napi_schedule() calls (bsc#1209980). - mt76: do not access 802.11 header in ccmp check for 802.3 rx skbs (bsc#1209980). - mt76: do not always copy ethhdr in reverse_frag0_hdr_trans (bsc#1209980). - mt76: do not reset MIB counters in get_stats callback (bsc#1209980). - mt76: eeprom: tolerate corrected bit-flips (bsc#1209980). - mt76: fill boottime_ns in Rx path (bsc#1209980). - mt76: fix antenna config missing in 6G cap (bsc#1209980). - mt76: fix boolreturn.cocci warnings (bsc#1209980). - mt76: fix dfs state issue with 160 MHz channels (bsc#1209980). - mt76: fix endianness errors in reverse_frag0_hdr_trans (bsc#1209980). - mt76: fix invalid rssi report (bsc#1209980). - mt76: fix key pointer overwrite in mt7921s_write_txwi/mt7663_usb_sdio_write_txwi (bsc#1209980). - mt76: fix monitor rx FCS error in DFS channel (bsc#1209980). - mt76: fix possible OOB issue in mt76_calculate_default_rate (bsc#1209980). - mt76: fix possible pktid leak (bsc#1209980). - mt76: fix the wiphy's available antennas to the correct value (bsc#1209980). - mt76: fix timestamp check in tx_status (bsc#1209980). - mt76: fix tx status related use-after-free race on station removal (bsc#1209980). - mt76: fix use-after-free by removing a non-RCU wcid pointer (git-fixes). - mt76: fix wrong HE data rate in sniffer tool (bsc#1209980). - mt76: improve signal strength reporting (bsc#1209980). - mt76: introduce packet_id idr (bsc#1209980). - mt76: make mt76_sar_capa static (bsc#1209980). - mt76: move mt76_ethtool_worker_info in mt76 module (bsc#1209980). - mt76: move mt76_sta_stats in mt76.h (bsc#1209980). - mt76: move sar utilities to mt76-core module (bsc#1209980). - mt76: move sar_capa configuration in common code (bsc#1209980). - mt76: move spin_lock_bh to spin_lock in tasklet (bsc#1209980). - mt76: mt7603: improve reliability of tx powersave filtering (bsc#1209980). - mt76: mt7603: introduce SAR support (bsc#1209980). - mt76: mt7615: add support for LG LGSBWAC02 (MT7663BUN) (bsc#1209980). - mt76: mt7615: apply cached RF data for DBDC (bsc#1209980). - mt76: mt7615: clear mcu error interrupt status on mt7663 (bsc#1209980). - mt76: mt7615: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7615: fix compiler warning on frame size (bsc#1209980). - mt76: mt7615: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7615: fix throughput regression on DFS channels (bsc#1209980). - mt76: mt7615: fix unused tx antenna mask in testmode (bsc#1209980). - mt76: mt7615: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7615: honor ret from mt7615_mcu_restart in mt7663u_mcu_init (bsc#1209980). - mt76: mt7615: in debugfs queue stats, skip wmm index 3 on mt7663 (bsc#1209980). - mt76: mt7615: introduce SAR support (bsc#1209980). - mt76: mt7615: move mt7615_mcu_set_p2p_oppps in mt76_connac module (bsc#1209980). - mt76: mt7615: remove dead code in get_omac_idx (bsc#1209980). - mt76: mt7615: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7615e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7663: disable 4addr capability (bsc#1209980). - mt76: mt7663s: flush runtime-pm queue after waking up the device (bsc#1209980). - mt76: mt7663s: rely on mcu reg access utility (bsc#1209980). - mt76: mt7663u: introduce mt7663u_mcu_power_on routine (bsc#1209980). - mt76: mt76_connac: fix MCU_CE_CMD_SET_ROC definition error (bsc#1209980). - mt76: mt76x02: improve tx hang detection (bsc#1209980). - mt76: mt76x02: introduce SAR support (bsc#1209980). - mt76: mt76x02: use mt76_phy_dfs_state to determine radar detector state (bsc#1209980). - mt76: mt76x0: correct VHT MCS 8/9 tx power eeprom offset (bsc#1209980). - mt76: mt7915: Fix PCI device refcount leak in mt7915_pci_init_hif2() (bsc#1209980). - mt76: mt7915: Fix channel state update error issue (bsc#1209980). - mt76: mt7915: add 6 GHz support (bsc#1209980). - mt76: mt7915: add HE-LTF into fixed rate command (bsc#1209980). - mt76: mt7915: add LED support (bsc#1209980). - mt76: mt7915: add WA firmware log support (bsc#1209980). - mt76: mt7915: add control knobs for thermal throttling (bsc#1209980). - mt76: mt7915: add debugfs knobs for MCU utilization (bsc#1209980). - mt76: mt7915: add default calibrated data support (bsc#1209980). - mt76: mt7915: add device id for mt7916 (bsc#1209980). - mt76: mt7915: add ethtool stats support (bsc#1209980). - mt76: mt7915: add firmware support for mt7916 (bsc#1209980). - mt76: mt7915: add mib counters to ethtool stats (bsc#1209980). - mt76: mt7915: add missing DATA4_TB_SPTL_REUSE1 to mt7915_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7915: add more MIB registers (bsc#1209980). - mt76: mt7915: add mt7915_mmio_probe() as a common probing function (bsc#1209980). - mt76: mt7915: add mt7916 calibrated data support (bsc#1209980). - mt76: mt7915: add mu-mimo and ofdma debugfs knobs (bsc#1209980). - mt76: mt7915: add some per-station tx stats to ethtool (bsc#1209980). - mt76: mt7915: add support for MT7986 (bsc#1209980). - mt76: mt7915: add support for passing chip/firmware debug data to user space (bsc#1209980). - mt76: mt7915: add twt_stats knob in debugfs (bsc#1209980). - mt76: mt7915: add tx mu/su counters to mib (bsc#1209980). - mt76: mt7915: add tx stats gathered from tx-status callbacks (bsc#1209980). - mt76: mt7915: add txfree event v3 (bsc#1209980). - mt76: mt7915: add txpower init for 6GHz (bsc#1209980). - mt76: mt7915: allow beaconing on all chains (bsc#1209980). - mt76: mt7915: change max rx len limit of hw modules (bsc#1209980). - mt76: mt7915: check band idx for bcc event (bsc#1209980). - mt76: mt7915: check for devm_pinctrl_get() failure (bsc#1209980). - mt76: mt7915: do not pass data pointer to mt7915_mcu_muru_debug_set (bsc#1209980). - mt76: mt7915: enable HE UL MU-MIMO (bsc#1209980). - mt76: mt7915: enable configured beacon tx rate (bsc#1209980). - mt76: mt7915: enable radar background detection (bsc#1209980). - mt76: mt7915: enable radar trigger on rdd2 (bsc#1209980). - mt76: mt7915: enable twt responder capability (bsc#1209980). - mt76: mt7915: enlarge wcid size to 544 (bsc#1209980). - mt76: mt7915: fix DBDC default band selection on MT7915D (bsc#1209980). - mt76: mt7915: fix DFS no radar detection event (bsc#1209980). - mt76: mt7915: fix SMPS operation fail (bsc#1209980). - mt76: mt7915: fix WMM index on DBDC cards (bsc#1209980). - mt76: mt7915: fix beamforming mib stats (bsc#1209980). - mt76: mt7915: fix decap offload corner case with 4-addr VLAN frames (bsc#1209980). - mt76: mt7915: fix eeprom fields of txpower init values (bsc#1209980). - mt76: mt7915: fix endiannes warning mt7915_mcu_beacon_check_caps (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_debugfs_rx_fw_monitor (bsc#1209980). - mt76: mt7915: fix endianness warnings in mt7915_mac_tx_free() (bsc#1209980). - mt76: mt7915: fix he_mcs capabilities for 160mhz (bsc#1209980). - mt76: mt7915: fix incorrect testmode ipg on band 1 caused by wmm_idx (git-fixes). - mt76: mt7915: fix mcs_map in mt7915_mcu_set_sta_he_mcs() (bsc#1209980). - mt76: mt7915: fix missing HE phy cap (bsc#1209980). - mt76: mt7915: fix phy cap in mt7915_set_stream_he_txbf_caps() (bsc#1209980). - mt76: mt7915: fix polling firmware-own status (git-fixes). - mt76: mt7915: fix possible NULL pointer dereference in mt7915_mac_fill_rx_vector (git-fixes). - mt76: mt7915: fix possible memory leak in mt7915_mcu_add_sta (bsc#1209980). - mt76: mt7915: fix possible uninitialized pointer dereference in mt7986_wmac_gpio_setup (bsc#1209980). - mt76: mt7915: fix potential NPE in TXS processing (bsc#1209980). - mt76: mt7915: fix potential memory leak of fw monitor packets (bsc#1209980). - mt76: mt7915: fix return condition in mt7915_tm_reg_backup_restore() (bsc#1209980). - mt76: mt7915: fix the muru tlv issue (bsc#1209980). - mt76: mt7915: fix the nss setting in bitrates (bsc#1209980). - mt76: mt7915: fix twt table_mask to u16 in mt7915_dev (bsc#1209980). - mt76: mt7915: fix txbf starec TLV issues (bsc#1209980). - mt76: mt7915: fix typos in comments (bsc#1209980). - mt76: mt7915: fix/rewrite the dfs state handling logic (bsc#1209980). - mt76: mt7915: get rid of mt7915_mcu_set_fixed_rate routine (bsc#1209980). - mt76: mt7915: honor all possible error conditions in mt7915_mcu_init() (bsc#1209980). - mt76: mt7915: improve code readability for xmit-queue handler (bsc#1209980). - mt76: mt7915: improve code readability in mt7915_mcu_sta_bfer_ht (bsc#1209980). - mt76: mt7915: improve starec readability of txbf (bsc#1209980). - mt76: mt7915: improve wmm index allocation (bsc#1209980). - mt76: mt7915: initialize smps mode in mt7915_mcu_sta_rate_ctrl_tlv() (bsc#1209980). - mt76: mt7915: introduce SAR support (bsc#1209980). - mt76: mt7915: introduce __mt7915_get_tsf routine (bsc#1209980). - mt76: mt7915: introduce band_idx in mt7915_phy (bsc#1209980). - mt76: mt7915: introduce bss coloring support (bsc#1209980). - mt76: mt7915: introduce mt76 debugfs sub-dir for ext-phy (bsc#1209980). - mt76: mt7915: introduce mt76_vif in mt7915_vif (bsc#1209980). - mt76: mt7915: introduce mt7915_mac_add_twt_setup routine (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_beacon_check_caps() (bsc#1209980). - mt76: mt7915: introduce mt7915_mcu_twt_agrt_update mcu command (bsc#1209980). - mt76: mt7915: introduce mt7915_set_radar_background routine (bsc#1209980). - mt76: mt7915: introduce rdd_monitor debugfs node (bsc#1209980). - mt76: mt7915: move pci specific code back to pci.c (bsc#1209980). - mt76: mt7915: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7915: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7915: refine register definition (bsc#1209980). - mt76: mt7915: rely on mt76_connac definitions (bsc#1209980). - mt76: mt7915: rely on mt76_connac_get_phy utilities (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_add_tlv routine (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_sta_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_alloc_wtbl_req (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_init_download (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_patch_sem_ctrl/mt76_connac_mcu_start_patch (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_set_rts_thresh (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_basic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_sta_uapsd (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_start_firmware (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ba_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_generic_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_hdr_trans_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_ht_tlv (bsc#1209980). - mt76: mt7915: rely on mt76_connac_mcu_wtbl_smps_tlv (bsc#1209980). - mt76: mt7915: remove dead code in debugfs code (bsc#1209980). - mt76: mt7915: remove duplicated defs in mcu.h (bsc#1209980). - mt76: mt7915: remove mt7915_mcu_add_he() (bsc#1209980). - mt76: mt7915: rename debugfs tx-queues (bsc#1209980). - mt76: mt7915: report radar pattern if detected by rdd2 (bsc#1209980). - mt76: mt7915: report rx mode value in mt7915_mac_fill_rx_rate (bsc#1209980). - mt76: mt7915: rework .set_bitrate_mask() to support more options (bsc#1209980). - mt76: mt7915: rework debugfs fixed-rate knob (bsc#1209980). - mt76: mt7915: rework debugfs queue info (bsc#1209980). - mt76: mt7915: rework dma.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework eeprom.c to adapt mt7916 changes (bsc#1209980). - mt76: mt7915: rework mt7915_mcu_sta_muru_tlv() (bsc#1209980). - mt76: mt7915: rework starec TLV tags (bsc#1209980). - mt76: mt7915: run mt7915_get_et_stats holding mt76 mutex (bsc#1209980). - mt76: mt7915: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7915: set VTA bit in tx descriptor (bsc#1209980). - mt76: mt7915: set band1 TGID field in tx descriptor (bsc#1209980). - mt76: mt7915: set bssinfo/starec command when adding interface (bsc#1209980). - mt76: mt7915: set muru platform type (bsc#1209980). - mt76: mt7915: simplify conditional (bsc#1209980). - mt76: mt7915: switch proper tx arbiter mode in testmode (bsc#1209980). - mt76: mt7915: update bss_info with cipher after setting the group key (bsc#1209980). - mt76: mt7915: update mac timing settings (bsc#1209980). - mt76: mt7915: update max_mpdu_size in mt7915_mcu_sta_amsdu_tlv() (bsc#1209980). - mt76: mt7915: update mt7915_chan_mib_offs for mt7916 (bsc#1209980). - mt76: mt7915: update rx rate reporting for mt7916 (bsc#1209980). - mt76: mt7915: use min_t() to make code cleaner (bsc#1209980). - mt76: mt7915e: Add a hwmon attribute to get the actual throttle state (bsc#1209980). - mt76: mt7915e: Enable thermal management by default (bsc#1209980). - mt76: mt7915e: Fix degraded performance after temporary overheat (bsc#1209980). - mt76: mt7921: Fix the error handling path of mt7921_pci_probe() (git-fixes). - mt76: mt7921: add 6GHz support (bsc#1209980). - mt76: mt7921: add MT7921_COMMON module (bsc#1209980). - mt76: mt7921: add MU EDCA cmd support (bsc#1209980). - mt76: mt7921: add delay config for sched scan (bsc#1209980). - mt76: mt7921: add mt7921u driver (bsc#1209980). - mt76: mt7921: add per-vif counters in ethtool (bsc#1209980). - mt76: mt7921: add some more MIB counters (bsc#1209980). - mt76: mt7921: add sta stats accounting in mt7921_mac_add_txs_skb (bsc#1209980). - mt76: mt7921: add support for PCIe ID 0x0608/0x0616 (bsc#1209980). - mt76: mt7921: add support for tx status reporting (bsc#1209980). - mt76: mt7921: clear pm->suspended in mt7921_mac_reset_work (bsc#1209980). - mt76: mt7921: disable 4addr capability (bsc#1209980). - mt76: mt7921: disable runtime pm for usb (bsc#1209980). - mt76: mt7921: do not always disable fw runtime-pm (bsc#1209980). - mt76: mt7921: do not enable beacon filter when IEEE80211_CONF_CHANGE_MONITOR is set (bsc#1209980). - mt76: mt7921: do not update pm states in case of error (git-fixes). - mt76: mt7921: fix MT7921E reset failure (bsc#1209980). - mt76: mt7921: fix Wformat build warning (bsc#1209980). - mt76: mt7921: fix a possible race enabling/disabling runtime-pm (bsc#1209980). - mt76: mt7921: fix boolreturn.cocci warning (bsc#1209980). - mt76: mt7921: fix build regression (bsc#1209980). - mt76: mt7921: fix endianness issues in mt7921_mcu_set_tx() (bsc#1209980). - mt76: mt7921: fix endianness warnings in mt7921_mac_decode_he_mu_radiotap (bsc#1209980). - mt76: mt7921: fix ht mcs in mt7921_mac_add_txs_skb() (bsc#1209980). - mt76: mt7921: fix injected MPDU transmission to not use HW A-MSDU (bsc#1209980). - mt76: mt7921: fix kernel crash at mt7921_pci_remove (git-fixes). - mt76: mt7921: fix kernel panic by accessing unallocated eeprom.data (git-fixes). - mt76: mt7921: fix mt7921s Kconfig (bsc#1209980). - mt76: mt7921: fix network buffer leak by txs missing (bsc#1209980). - mt76: mt7921: fix possible NULL pointer dereference in mt7921_mac_write_txwi (bsc#1209980). - mt76: mt7921: fix up the monitor mode (bsc#1209980). - mt76: mt7921: fix xmit-queue dump for usb and sdio (bsc#1209980). - mt76: mt7921: forbid the doze mode when coredump is in progress (bsc#1209980). - mt76: mt7921: get rid of monitor_vif (bsc#1209980). - mt76: mt7921: get rid of mt7921_mcu_get_eeprom (bsc#1209980). - mt76: mt7921: get rid of mt7921_wait_for_mcu_init declaration (bsc#1209980). - mt76: mt7921: honor mt76_connac_mcu_set_rate_txpower return value in mt7921_config (bsc#1209980). - mt76: mt7921: honor pm user configuration in mt7921_sniffer_interface_iter (bsc#1209980). - mt76: mt7921: introduce 160 MHz channel bandwidth support (bsc#1209980). - mt76: mt7921: introduce mt7921s support (bsc#1209980). - mt76: mt7921: introduce stats reporting through ethtool (bsc#1209980). - mt76: mt7921: make all event parser reusable between mt7921s and mt7921e (bsc#1209980). - mt76: mt7921: make mt7921_init_tx_queues static (bsc#1209980). - mt76: mt7921: move mt76_connac_mcu_set_hif_suspend to bus-related files (bsc#1209980). - mt76: mt7921: move mt7921_init_hw in a dedicated work (bsc#1209980). - mt76: mt7921: move mt7921_queue_rx_skb to mac.c (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_complete_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_prepare_skb in common mac code (bsc#1209980). - mt76: mt7921: move mt7921_usb_sdio_tx_status_data in mac common code (bsc#1209980). - mt76: mt7921: move tx amsdu stats in mib_stats (bsc#1209980). - mt76: mt7921: reduce log severity levels for informative messages (bsc#1209980). - mt76: mt7921: refactor dma.c to be pcie specific (bsc#1209980). - mt76: mt7921: refactor init.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mac.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mcu.c to be bus independent (bsc#1209980). - mt76: mt7921: refactor mt7921_mcu_send_message (bsc#1209980). - mt76: mt7921: rely on mcu_get_nic_capability (bsc#1209980). - mt76: mt7921: remove dead definitions (bsc#1209980). - mt76: mt7921: remove duplicated code in mt7921_mac_decode_he_radiotap (bsc#1209980). - mt76: mt7921: remove mcu rate reporting code (bsc#1209980). - mt76: mt7921: remove mt7921_sta_stats (bsc#1209980). - mt76: mt7921: report tx rate directly from tx status (bsc#1209980). - mt76: mt7921: robustify hardware initialization flow (bsc#1209980). - mt76: mt7921: send EAPOL frames at lowest rate (bsc#1209980). - mt76: mt7921: set EDCA parameters with the MCU CE command (bsc#1209980). - mt76: mt7921: start reworking tx rate reporting (bsc#1209980). - mt76: mt7921: toggle runtime-pm adding a monitor vif (bsc#1209980). - mt76: mt7921: update mib counters dumping phy stats (bsc#1209980). - mt76: mt7921: update mt7921_skb_add_usb_sdio_hdr to support usb (bsc#1209980). - mt76: mt7921: use correct iftype data on 6GHz cap init (bsc#1209980). - mt76: mt7921: use mt76_hw instead of open coding it (bsc#1209980). - mt76: mt7921: use physical addr to unify register access (bsc#1209980). - mt76: mt7921e: fix possible probe failure after reboot (bsc#1198835). - mt76: mt7921e: make dev->fw_assert usage consistent (bsc#1209980). - mt76: mt7921e: process txfree and txstatus without allocating skbs (bsc#1209980). - mt76: mt7921s: add reset support (bsc#1209980). - mt76: mt7921s: clear MT76_STATE_MCU_RUNNING immediately after reset (bsc#1209980). - mt76: mt7921s: fix a possible memory leak in mt7921_load_patch (bsc#1209980). - mt76: mt7921s: fix bus hang with wrong privilege (bsc#1209980). - mt76: mt7921s: fix cmd timeout in throughput test (bsc#1209980). - mt76: mt7921s: fix firmware download random fail (bsc#1209980). - mt76: mt7921s: fix missing fc type/sub-type for 802.11 pkts (bsc#1209980). - mt76: mt7921s: fix mt7921s_mcu_[fw|drv]_pmctrl (bsc#1209980). - mt76: mt7921s: fix possible kernel crash due to invalid Rx count (bsc#1209980). - mt76: mt7921s: fix possible sdio deadlock in command fail (bsc#1209980). - mt76: mt7921s: fix suspend error with enlarging mcu timeout value (bsc#1209980). - mt76: mt7921s: fix the device cannot sleep deeply in suspend (bsc#1209980). - mt76: mt7921s: make pm->suspended usage consistent (bsc#1209980). - mt76: mt7921s: run sleep mode by default (bsc#1209980). - mt76: mt7921s: update mt7921s_wfsys_reset sequence (bsc#1209980). - mt76: only access ieee80211_hdr after mt76_insert_ccmp_hdr (bsc#1209980). - mt76: only set rx radiotap flag from within decoder functions (bsc#1209980). - mt76: redefine mt76_for_each_q_rx to adapt mt7986 changes (bsc#1209980). - mt76: rely on phy pointer in mt76_register_debugfs_fops routine signature (bsc#1209980). - mt76: remove mt76_wcid pointer from mt76_tx_status_check signature (bsc#1209980). - mt76: remove variable set but not used (bsc#1209980). - mt76: reverse the first fragmented frame to 802.11 (bsc#1209980). - mt76: schedule status timeout at dma completion (bsc#1209980). - mt76: sdio: disable interrupt in mt76s_sdio_irq (bsc#1209980). - mt76: sdio: export mt76s_alloc_rx_queue and mt76s_alloc_tx routines (bsc#1209980). - mt76: sdio: extend sdio module to support CONNAC2 (bsc#1209980). - mt76: sdio: honor the largest Tx buffer the hardware can support (bsc#1209980). - mt76: sdio: introduce parse_irq callback (bsc#1209980). - mt76: sdio: lock sdio when it is needed (bsc#1209980). - mt76: sdio: move common code in mt76_sdio module (bsc#1209980). - mt76: set wlan_idx_hi on mt7916 (bsc#1209980). - mt76: split single ldpc cap bit into bits (bsc#1209980). - mt76: substitute sk_buff_head status_list with spinlock_t status_lock (bsc#1209980). - mt76: support reading EEPROM data embedded in fdt (bsc#1209980). - mt76: switch from 'pci_' to 'dma_' API (bsc#1209980). - mt76: testmode: add support to set MAC (bsc#1209980). - mt76: usb: add req_type to ___mt76u_rr signature (bsc#1209980). - mt76: usb: add req_type to ___mt76u_wr signature (bsc#1209980). - mt76: usb: introduce __mt76u_init utility routine (bsc#1209980). - mt76: use IEEE80211_OFFLOAD_ENCAP_ENABLED instead of MT_DRV_AMSDU_OFFLOAD (bsc#1209980). - mt76: use a separate CCMP PN receive counter for management frames (bsc#1209980). - mt76: use le32/16_get_bits() whenever possible (bsc#1209980). - mt76x02: improve mac error check/reset reliability (bsc#1209980). - mtd: core: fix error path for nvmem provider (git-fixes). - mtd: core: fix nvmem error reporting (git-fixes). - mtd: core: provide unique name for nvmem device, take two (git-fixes). - mtd: dataflash: remove duplicate SPI ID table (git-fixes). - mtd: rawnand: fsl_elbc: Propagate HW ECC settings to HW (git-fixes). - mtd: rawnand: ingenic: fix empty stub helper definitions (git-fixes). - mtd: rawnand: marvell: do not set the NAND frequency select (git-fixes). - mtd: rawnand: marvell: ensure timing values are written (git-fixes). - mtd: rawnand: meson: fix bitmask for length in command word (git-fixes). - mtd: rawnand: meson: fix unaligned DMA buffers handling (git-fixes). - mtd: rawnand: meson: invalidate cache on polling ECC bit (git-fixes). - mtd: rawnand: stm32_fmc2: remove unsupported EDO mode (git-fixes). - mtd: rawnand: stm32_fmc2: use timings.mode instead of checking tRC_min (git-fixes). - mtd: rawnand: sunxi: Clean up chips after failed init (git-fixes). - mtd: rawnand: sunxi: Fix the size of the last OOB region (git-fixes). - mtd: spi-nor: Fix a trivial typo (git-fixes). - mtd: spi-nor: Fix shift-out-of-bounds in spi_nor_set_erase_type (git-fixes). - mtd: spi-nor: core: fix implicit declaration warning (git-fixes). - mtd: spi-nor: sfdp: Fix index value for SCCR dwords (git-fixes). - mtd: spi-nor: spansion: Consider reserved bits in CFR5 register (git-fixes). - mtdblock: tolerate corrected bit-flips (git-fixes). - nbd: Fix hung on disconnect request if socket is closed before (git-fixes). - nbd: Fix hung when signal interrupts nbd_start_device_ioctl() (git-fixes). - nbd: Fix hungtask when nbd_config_put (git-fixes). - nbd: add missing definition of pr_fmt (git-fixes). - nbd: call genl_unregister_family() first in nbd_cleanup() (git-fixes). - nbd: fix io hung while disconnecting device (git-fixes). - nbd: fix race between nbd_alloc_config() and module removal (git-fixes). - net/iucv: Fix size of interrupt data (bsc#1211465 git-fixes). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#PED-1549). - net/mlx5: Add forgotten cleanup calls into mlx5_init_once() error path (jsc#SLE-19253). - net/mlx5: Allow async trigger completion execution on single CPU systems (jsc#SLE-19253). - net/mlx5: Allow future addition of IPsec object modifiers (jsc#SLE-19253). - net/mlx5: Avoid false positive lockdep warning by adding lock_class_key (jsc#SLE-19253). - net/mlx5: Avoid recovery in probe flows (jsc#PED-1549 bsc#1211794). - net/mlx5: Avoid recovery in probe flows (jsc#SLE-19253). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#PED-1549). - net/mlx5: Bridge, fix ageing of peer FDB entries (jsc#SLE-19253). - net/mlx5: Bridge, verify LAG state when adding bond to bridge (jsc#SLE-19253). - net/mlx5: Collect command failures data only for known commands (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#PED-1549). - net/mlx5: DR, Check force-loopback RC QP capability independently from RoCE (jsc#SLE-19253). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#PED-1549). - net/mlx5: DR, Fix crc32 calculation to work on big-endian (BE) CPUs (jsc#SLE-19253). - net/mlx5: DR, Fix missing flow_source when creating multi-destination FW table (jsc#SLE-19253). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#PED-1549). - net/mlx5: Devcom, fix error flow in mlx5_devcom_register_device (jsc#SLE-19253). - net/mlx5: Devcom, serialize devcom registration (jsc#PED-1549). - net/mlx5: Disable eswitch before waiting for VF pages (jsc#PED-1549). - net/mlx5: Do not advertise IPsec netdev support for non-IPsec device (jsc#SLE-19253). - net/mlx5: Do not use already freed action pointer (jsc#SLE-19253). - net/mlx5: Dynamically resize flow counters query buffer (bsc#1195175). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#PED-1549). - net/mlx5: E-Switch, Fix an Oops in error handling code (jsc#SLE-19253). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#PED-1549). - net/mlx5: E-Switch, properly handle ingress tagged packets on VST (jsc#SLE-19253). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#PED-1549). - net/mlx5: E-switch, Create per vport table based on devlink encap mode (jsc#SLE-19253). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#PED-1549). - net/mlx5: E-switch, Do not destroy indirect table in split rule (jsc#SLE-19253). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#PED-1549). - net/mlx5: E-switch, Fix missing set of split_count when forward to ovs internal port (jsc#SLE-19253). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5: E-switch, Fix setting of reserved fields on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5: E-switch, Fix switchdev mode after devlink reload (jsc#PED-1549). - net/mlx5: E-switch, Fix wrong usage of source port rewrite in split rules (jsc#PED-1549). - net/mlx5: ECPF, wait for VF pages only after disabling host PFs (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#PED-1549). - net/mlx5: Enhance debug print in page allocation failure (jsc#SLE-19253). - net/mlx5: Expose SF firmware pages counter (jsc#PED-1549). - net/mlx5: Fix FW tracer timestamp calculation (jsc#SLE-19253). - net/mlx5: Fix RoCE setting at HCA level (jsc#PED-1549). - net/mlx5: Fix RoCE setting at HCA level (jsc#SLE-19253). - net/mlx5: Fix command stats access after free (jsc#PED-1549). - net/mlx5: Fix crash during sync firmware reset (jsc#SLE-19253). - net/mlx5: Fix error message when failing to allocate device memory (jsc#PED-1549). - net/mlx5: Fix error message when failing to allocate device memory (jsc#SLE-19253). - net/mlx5: Fix handling of entry refcount when command is not issued to FW (jsc#SLE-19253). - net/mlx5: Fix io_eq_size and event_eq_size params validation (jsc#PED-1549). - net/mlx5: Fix possible use-after-free in async command interface (jsc#SLE-19253). - net/mlx5: Fix ptp max frequency adjustment range (jsc#PED-1549). - net/mlx5: Fix ptp max frequency adjustment range (jsc#SLE-19253). - net/mlx5: Fix setting ec_function bit in MANAGE_PAGES (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#PED-1549). - net/mlx5: Fix steering rules cleanup (jsc#SLE-19253). - net/mlx5: Fix uninitialized variable bug in outlen_write() (jsc#SLE-19253). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#PED-1549). - net/mlx5: Geneve, Fix handling of Geneve object id as error code (jsc#SLE-19253). - net/mlx5: Handle pairing of E-switch via uplink un/load APIs (jsc#PED-1549). - net/mlx5: Initialize flow steering during driver probe (jsc#SLE-19253). - net/mlx5: Lag, fix failure to cancel delayed bond work (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#PED-1549). - net/mlx5: Read embedded cpu after init bit cleared (jsc#SLE-19253). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#PED-1549). - net/mlx5: Read the TC mapping of all priorities on ETS query (jsc#SLE-19253). - net/mlx5: Rearm the FW tracer after each tracer event (jsc#SLE-19253). - net/mlx5: SF, Drain health before removing device (jsc#PED-1549). - net/mlx5: SF, Drain health before removing device (jsc#SLE-19253). - net/mlx5: SF: Fix probing active SFs during driver probe phase (jsc#SLE-19253). - net/mlx5: Serialize module cleanup with reload and remove (jsc#PED-1549). - net/mlx5: Serialize module cleanup with reload and remove (jsc#SLE-19253). - net/mlx5: Set BREAK_FW_WAIT flag first when removing driver (jsc#PED-1549). - net/mlx5: Store page counters in a single array (jsc#PED-1549). - net/mlx5: Wait for firmware to enable CRS before pci_restore_state (jsc#SLE-19253). - net/mlx5: add IFC bits for bypassing port select flow table (git-fixes) - net/mlx5: check attr pointer validity before dereferencing it (jsc#PED-1549). - net/mlx5: check attr pointer validity before dereferencing it (jsc#SLE-19253). - net/mlx5: correct ECE offset in query qp output (jsc#SLE-19253). - net/mlx5: fix missing mutex_unlock in mlx5_fw_fatal_reporter_err_work() (jsc#SLE-19253). - net/mlx5: fs, fail conflicting actions (jsc#SLE-19253). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#PED-1549). - net/mlx5: fw_tracer, Clear load bit when freeing string DBs buffers (jsc#SLE-19253). - net/mlx5: fw_tracer, Fix event handling (jsc#PED-1549). - net/mlx5: fw_tracer, Fix event handling (jsc#SLE-19253). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#PED-1549). - net/mlx5: fw_tracer, Zero consumer index when reloading the tracer (jsc#SLE-19253). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#PED-1549). - net/mlx5e: Always clear dest encap in neigh-update-del (jsc#SLE-19253). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#PED-1549). - net/mlx5e: Avoid false lock dependency warning on tc_ht even more (jsc#SLE-19253). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#PED-1549). - net/mlx5e: Block entering switchdev mode with ns inconsistency (jsc#SLE-19253). - net/mlx5e: CT: Fix ct debugfs folder name (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#PED-1549). - net/mlx5e: Do not attach netdev profile while handling internal error (jsc#SLE-19253). - net/mlx5e: Do not cache tunnel offloads capability (jsc#PED-1549). - net/mlx5e: Do not clone flow post action attributes second time (jsc#PED-1549). - net/mlx5e: Do not increment ESN when updating IPsec ESN state (jsc#SLE-19253). - net/mlx5e: Do not support encap rules with gbp option (jsc#PED-1549). - net/mlx5e: Do not support encap rules with gbp option (jsc#SLE-19253). - net/mlx5e: E-Switch, Fix comparing termination table instance (jsc#SLE-19253). - net/mlx5e: Extend SKB room check to include PTP-SQ (jsc#SLE-19253). - net/mlx5e: Fix MPLSoUDP encap to use MPLS action information (jsc#SLE-19253). - net/mlx5e: Fix RX reporter for XSK RQs (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#PED-1549). - net/mlx5e: Fix SQ wake logic in ptp napi_poll context (jsc#SLE-19253). - net/mlx5e: Fix capability check for updating vnic env counters (jsc#SLE-19253). - net/mlx5e: Fix cleanup null-ptr deref on encap lock (jsc#PED-1549). - net/mlx5e: Fix crash unsetting rx-vlan-filter in switchdev mode (jsc#PED-1549). - net/mlx5e: Fix deadlock in tc route query code (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#PED-1549). - net/mlx5e: Fix error handling in mlx5e_refresh_tirs (jsc#SLE-19253). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#PED-1549). - net/mlx5e: Fix hw mtu initializing at XDP SQ allocation (jsc#SLE-19253). - net/mlx5e: Fix macsec ASO context alignment (jsc#PED-1549). - net/mlx5e: Fix macsec possible null dereference when updating MAC security entity (SecY) (jsc#PED-1549). - net/mlx5e: Fix macsec ssci attribute handling in offload path (jsc#PED-1549). - net/mlx5e: Fix the value of MLX5E_MAX_RQ_NUM_MTTS (jsc#SLE-19253). - net/mlx5e: Fix use-after-free when reverting termination table (jsc#SLE-19253). - net/mlx5e: Fix wrong application of the LRO state (jsc#SLE-19253). - net/mlx5e: Fix wrong tc flag used when set hw-tc-offload off (jsc#SLE-19253). - net/mlx5e: IPoIB, Block PKEY interfaces with less rx queues than parent (jsc#PED-1549). - net/mlx5e: IPoIB, Block queue count configuration when sub interfaces are present (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#PED-1549). - net/mlx5e: IPoIB, Do not allow CQE compression to be turned on by default (jsc#SLE-19253). - net/mlx5e: IPoIB, Fix child PKEY interface stats on rx path (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#PED-1549). - net/mlx5e: IPoIB, Show unknown speed instead of error (jsc#SLE-19253). - net/mlx5e: Initialize link speed to zero (jsc#PED-1549). - net/mlx5e: Modify slow path rules to go to slow fdb (jsc#SLE-19253). - net/mlx5e: Nullify table pointer when failing to create (jsc#PED-1549). - net/mlx5e: Overcome slow response for first macsec ASO WQE (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#PED-1549). - net/mlx5e: QoS, Fix wrongfully setting parent_element_id on MODIFY_SCHEDULING_ELEMENT (jsc#SLE-19253). - net/mlx5e: Remove redundant xsk pointer check in mlx5e_mpwrq_validate_xsk (jsc#PED-1549). - net/mlx5e: Set decap action based on attr for sample (jsc#PED-1549). - net/mlx5e: Set geneve_tlv_option_0_exist when matching on geneve option (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#PED-1549). - net/mlx5e: Set uplink rep as NETNS_LOCAL (jsc#SLE-19253). - net/mlx5e: TC, Fix ct_clear overwriting ct action metadata (jsc#SLE-19253). - net/mlx5e: TC, Keep mod hdr actions after mod hdr alloc (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#PED-1549). - net/mlx5e: Update rx ring hw mtu upon each rx-fcs flag change (jsc#SLE-19253). - net/mlx5e: Use correct encap attribute during invalidation (jsc#PED-1549). - net/mlx5e: Verify dev is present for fix features ndo (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#PED-1549). - net/mlx5e: Verify flow_source cap before using it (jsc#SLE-19253). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#PED-1549). - net/mlx5e: do as little as possible in napi poll when budget is 0 (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in RX (jsc#SLE-19253). - net/mlx5e: kTLS, Fix build time constant test in TX (jsc#SLE-19253). - net/net_failover: fix txq exceeding warning (git-fixes). - net/rose: Fix to not accept on connected socket (git-fixes). - net/sched: fix initialization order when updating chain 0 head (git-fixes). - net/sched: flower: fix possible OOB write in fl_set_geneve_opt() (git-fixes). - net/sched: sch_netem: Fix arithmetic in netem_dump() for 32-bit platforms (git-fixes). - net/sunrpc: fix reference count leaks in rpc_sysfs_xprt_state_change (git-fixes). - net/tg3: resolve deadlock in tg3_reset_task() during EEH (bsc#1207842). - net/usb: kalmia: Do not pass act_len in usb_bulk_msg error path (git-fixes). - net/x25: Fix to not accept on connected socket (git-fixes). - net: USB: Fix wrong-direction WARNING in plusb.c (git-fixes). - net: accept UFOv6 packages in virtio_net_hdr_to_skb (git-fixes). - net: add missing include in include/net/gro.h (git-fixes). - net: asix: fix modprobe 'sysfs: cannot create duplicate filename' (git-fixes). - net: cdc_ncm: Deal with too low values of dwNtbOutMaxSize (git-fixes). - net: devlink: Fix missing mutex_unlock() call (git-fixes). - net: ena: Account for the number of processed bytes in XDP (git-fixes). - net: ena: Do not register memory info on XDP exchange (git-fixes). - net: ena: Fix rx_copybreak value update (git-fixes). - net: ena: Fix toeplitz initial hash value (git-fixes). - net: ena: Set default value for RX interrupt moderation (git-fixes). - net: ena: Update NUMA TPH hint register upon NUMA node update (git-fixes). - net: ena: Use bitmask to indicate packet redirection (git-fixes). - net: hns3: add interrupts re-initialization while doing VF FLR (git-fixes). - net: hns3: fix output information incomplete for dumping tx queue info with debugfs (git-fixes). - net: hns3: fix reset delay time to avoid configuration timeout (git-fixes). - net: hns3: fix sending pfc frames after reset issue (git-fixes). - net: hns3: fix tm port shapping of fibre port is incorrect after driver initialization (git-fixes). - net: linkwatch: be more careful about dev->linkwatch_dev_tracker (git-fixes). - net: mana: Add new MANA VF performance counters for easier troubleshooting (bsc#1209982). - net: mana: Add support for auxiliary device (bsc#1210741 jsc#PED-4022). - net: mana: Add support for jumbo frame (bsc#1210551). - net: mana: Assign interrupts to CPUs based on NUMA nodes (bsc#1208153). - net: mana: Check if netdev/napi_alloc_frag returns single page (bsc#1210551). - net: mana: Define and process GDMA response code GDMA_STATUS_MORE_ENTRIES (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for allocating doorbell page from GDMA (bsc#1210741 jsc#PED-4022). - net: mana: Define data structures for protection domain and memory registration (bsc#1210741 jsc#PED-4022). - net: mana: Define max values for SGL entries (bsc#1210741 jsc#PED-4022). - net: mana: Enable RX path to handle various MTU sizes (bsc#1210551). - net: mana: Export Work Queue functions for use by RDMA driver (bsc#1210741 jsc#PED-4022). - net: mana: Fix IRQ name - add PCI and queue number (bsc#1207875). - net: mana: Fix accessing freed irq affinity_hint (bsc#1208153). - net: mana: Fix perf regression: remove rx_cqes, tx_cqes counters (git-fixes). - net: mana: Handle vport sharing between devices (bsc#1210741 jsc#PED-4022). - net: mana: Move header files to a common location (bsc#1210741 jsc#PED-4022). - net: mana: Record port number in netdev (bsc#1210741 jsc#PED-4022). - net: mana: Record the physical address for doorbell page region (bsc#1210741 jsc#PED-4022). - net: mana: Refactor RX buffer allocation code to prepare for various MTU (bsc#1210551). - net: mana: Rename mana_refill_rxoob and remove some empty lines (bsc#1210551). - net: mana: Set the DMA device max segment size (bsc#1210741 jsc#PED-4022). - net: mana: Use napi_build_skb in RX path (bsc#1210551). - net: mdio: mvusb: Fix an error handling path in mvusb_mdio_probe() (git-fixes). - net: mdio: thunder: Add missing fwnode_handle_put() (git-fixes). - net: mellanox: mlxbf_gige: Fix skb_panic splat under memory pressure (bsc#1211564). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#PED-1549). - net: mlx5: eliminate anonymous module_init & module_exit (jsc#SLE-19253). - net: natsemi: fix hw address initialization for jazz and xtensa (git-fixes). - net: of: fix stub of_net helpers for CONFIG_NET=n (git-fixes). - net: openvswitch: fix possible memory leak in ovs_meter_cmd_set() (git-fixes). - net: phy: Ensure state transitions are processed from phy_stop() (git-fixes). - net: phy: dp83822: Fix null pointer access on DP83825/DP83826 devices (git-fixes). - net: phy: dp83867: add w/a for packet errors seen with short cables (git-fixes). - net: phy: dp83869: fix default value for tx-/rx-internal-delay (git-fixes). - net: phy: meson-gxl: Add generic dummy stubs for MMD register access (git-fixes). - net: phy: meson-gxl: use MMD access dummy stubs for GXL, internal PHY (git-fixes). - net: phy: mxl-gpy: add MDINT workaround (git-fixes). - net: phy: nxp-c45-tja11xx: add remove callback (git-fixes). - net: phy: nxp-c45-tja11xx: fix MII_BASIC_CONFIG_REV bit (git-fixes). - net: phy: nxp-c45-tja11xx: fix unsigned long multiplication overflow (git-fixes). - net: phy: smsc: bail out in lan87xx_read_status if genphy_read_status fails (git-fixes). - net: qcom/emac: Fix use after free bug in emac_remove due to race condition (git-fixes). - net: qrtr: correct types of trace event parameters (git-fixes). - net: sched: fix possible refcount leak in tc_chain_tmplt_add() (git-fixes). - net: skip virtio_net_hdr_set_proto if protocol already set (git-fixes). - net: tun: avoid disabling NAPI twice (git-fixes). - net: tun: fix bugs for oversize packet when napi frags enabled (git-fixes). - net: tun: stop NAPI when detaching queues (git-fixes). - net: tun: unlink NAPI from device on destruction (git-fixes). - net: usb: asix: remove redundant assignment to variable reg (git-fixes). - net: usb: cdc_ether: add support for Thales Cinterion PLS62-W modem (git-fixes). - net: usb: cdc_mbim: avoid altsetting toggling for Telit FE990 (git-fixes). - net: usb: lan78xx: Limit packet length to skb->len (git-fixes). - net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818 (git-fixes). - net: usb: qmi_wwan: add Telit 0x1080 composition (git-fixes). - net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes). - net: usb: smsc75xx: Limit packet length to skb->len (git-fixes). - net: usb: smsc75xx: Move packet length check to prevent kernel panic in skb_pull (git-fixes). - net: usb: smsc95xx: Limit packet length to skb->len (git-fixes). - net: usb: use eth_hw_addr_set() (git-fixes). - net: virtio_net_hdr_to_skb: count transport header in UFO (git-fixes). - netrom: Fix use-after-free caused by accept on already connected socket (git-fixes). - netrom: Fix use-after-free of a listening socket (git-fixes). - nfc: change order inside nfc_se_io error path (git-fixes). - nfc: fdp: add null check of devm_kmalloc_array in fdp_nci_i2c_read_device_properties (git-fixes). - nfc: fix memory leak of se_io context in nfc_genl_se_io (git-fixes). - nfc: pn533: initialize struct pn533_out_arg properly (git-fixes). - nfc: st-nci: Fix use after free bug in ndlc_remove due to race condition (git-fixes). - nfcsim.c: Fix error checking for debugfs_create_dir (git-fixes). - nfp: flower-ct: fix error return code in nfp_fl_ct_add_offload() (git-fixes). - nfp: flower: fix ingress police using matchall filter (git-fixes). - nfp: only report pause frame configuration for physical device (git-fixes). - nfs4: Fix kmemleak when allocate slot failed (git-fixes). - nfs4trace: fix state manager flag printing (git-fixes). - nfs: Always initialise fattr->label in nfs_fattr_alloc() (git-fixes). - nfs: Avoid writeback threads getting stuck in mempool_alloc() (git-fixes). - nfs: Cleanup unused rpc_clnt variable (git-fixes). - nfs: Create a new nfs_alloc_fattr_with_label() function (git-fixes). - nfs: Do not allocate nfs_fattr on the stack in __nfs42_ssc_open() (git-fixes). - nfs: Fix an Oops in nfs_d_automount() (git-fixes). - nfs: Further optimisations for 'ls -l' (git-fixes). - nfs: Pass i_size to fscache_unuse_cookie() when a file is released (git-fixes). - nfs: fix disabling of swap (git-fixes). - nfs: nfs4clinet: check the return value of kstrdup() (git-fixes). - nfs: nfsiod should not block forever in mempool_alloc() (git-fixes). - nfsd: Avoid calling OPDESC() with ops->opnum == OP_ILLEGAL (git-fixes). - nfsd: COMMIT operations must not return NFS?ERR_INVAL (git-fixes). - nfsd: De-duplicate net_generic(nf->nf_net, nfsd_net_id) (git-fixes). - nfsd: Finish converting the NFSv2 GETACL result encoder (git-fixes). - nfsd: Finish converting the NFSv3 GETACL result encoder (git-fixes). - nfsd: Fix a memory leak in an error handling path (git-fixes). - nfsd: Fix handling of oversized NFSv4 COMPOUND requests (git-fixes). - nfsd: Fix nfsd_breaker_owns_lease() return values (git-fixes). - nfsd: Have legacy NFSD WRITE decoders use xdr_stream_subsegment() (git-fixes). - nfsd: Protect against filesystem freezing (git-fixes). - nfsd: Return nfserr_serverfault if splice_ok but buf->pages have data (git-fixes). - nfsd: call op_release, even when op_func returns an error (git-fixes). - nfsd: callback request does not use correct credential for AUTH_SYS (git-fixes). - nfsd: do not call nfsd_file_put from client states seqfile display (git-fixes). - nfsd: fix handling of readdir in v4root vs. mount upcall timeout (git-fixes). - nfsd: fix leaked reference count of nfsd4_ssc_umount_item (git-fixes). - nfsd: fix problems with cleanup on errors in nfsd4_copy (git-fixes). - nfsd: fix race to check ls_layouts (git-fixes). - nfsd: fix use-after-free in nfsd4_ssc_setup_dul() (git-fixes). - nfsd: fix use-after-free on source server when doing inter-server copy (git-fixes). - nfsd: pass range end to vfs_fsync_range() instead of count (git-fixes). - nfsd: shut down the NFSv4 state objects before the filecache (git-fixes). - nfsd: under NFSv4.1, fix double svc_xprt_put on rpc_create failure (git-fixes). - nfsd: zero out pointers after putting nfsd_files on COPY setup error (git-fixes). - nfsv3: handle out-of-order write replies (bsc#1205544). - nfsv4 expose nfs_parse_server_name function (git-fixes). - nfsv4 handle port presence in fs_location server string (git-fixes). - nfsv4 only print the label when its queried (git-fixes). - nfsv4 remove zero number of fs_locations entries error check (git-fixes). - nfsv4 store server support for fs_location attribute (git-fixes). - nfsv4.1 provide mount option to toggle trunking discovery (git-fixes). - nfsv4.1 query for fs_location attr on a new file system (git-fixes). - nfsv4.1: Fix uninitialised variable in devicenotify (git-fixes). - nfsv4.1: Handle RECLAIM_COMPLETE trunking errors (git-fixes). - nfsv4.1: We must always send RECLAIM_COMPLETE after a reboot (git-fixes). - nfsv4.2: Clear FATTR4_WORD2_SECURITY_LABEL when done decoding (git-fixes). - nfsv4.2: Fix a memory stomp in decode_attr_security_label (git-fixes). - nfsv4.2: Fix initialisation of struct nfs4_label (git-fixes). - nfsv4.2: Fixup CLONE dest file size for zero-length count (git-fixes). - nfsv4.2: fix reference count leaks in _nfs42_proc_copy_notify() (git-fixes). - nfsv4.x: Fail client initialisation if state manager thread can't run (git-fixes). - nfsv4/pNFS: Always return layout stats on layout return for flexfiles (git-fixes). - nfsv4/pnfs: Fix a use-after-free bug in open (git-fixes). - nfsv4: Add an fattr allocation to _nfs4_discover_trunking() (git-fixes). - nfsv4: Do not hold the layoutget locks across multiple RPC calls (git-fixes). - nfsv4: Fix a credential leak in _nfs4_discover_trunking() (git-fixes). - nfsv4: Fix a deadlock between nfs4_open_recover_helper() and delegreturn (git-fixes). - nfsv4: Fix a potential state reclaim deadlock (git-fixes). - nfsv4: Fix free of uninitialized nfs4_label on referral lookup (git-fixes). - nfsv4: Fix hangs when recovering open state after a server reboot (git-fixes). - nfsv4: Protect the state recovery thread against direct reclaim (git-fixes). - nfsv4: Retry LOCK on OLD_STATEID during delegation return (git-fixes). - nfsv4: keep state manager thread active if swap is enabled (git-fixes). - nilfs2: do not write dirty data after degenerating to read-only (git-fixes). - nilfs2: fix buffer corruption due to concurrent device reads (git-fixes). - nilfs2: fix general protection fault in nilfs_btree_insert() (git-fixes). - nilfs2: fix incomplete buffer cleanup in nilfs_btnode_abort_change_key() (git-fixes). - nilfs2: fix infinite loop in nilfs_mdt_get_block() (git-fixes). - nilfs2: fix kernel-infoleak in nilfs_ioctl_wrap_copy() (git-fixes). - nilfs2: fix possible out-of-bounds segment allocation in resize ioctl (git-fixes). - nilfs2: fix potential UAF of struct nilfs_sc_info in nilfs_segctor_thread() (git-fixes). - nilfs2: fix sysfs interface lifetime (git-fixes). - nilfs2: fix underflow in second superblock position calculations (git-fixes). - nilfs2: fix use-after-free bug of nilfs_root in nilfs_evict_inode() (git-fixes). - nilfs2: initialize unused bytes in segment summary blocks (git-fixes). - nouveau: fix client work fence deletion race (git-fixes). - ntb: amd: Fix error handling in amd_ntb_pci_driver_init() (git-fixes). - ntb: idt: Fix error handling in idt_pci_driver_init() (git-fixes). - ntb: intel: Fix error handling in intel_ntb_pci_driver_init() (git-fixes). - ntb: ntb_tool: Add check for devm_kcalloc (git-fixes). - ntb: ntb_transport: fix possible memory leak while device_register() fails (git-fixes). - null_blk: fix ida error handling in null_add_dev() (git-fixes). - nvdimm: disable namespace on error (bsc#1166486). - nvme initialize core quirks before calling nvme_init_subsystem (git-fixes). - nvme-auth: check chap ctrl_key once constructed (bsc#1202633). - nvme-auth: clear sensitive info right after authentication completes (bsc#1202633). - nvme-auth: convert dhchap_auth_list to an array (bsc#1202633). - nvme-auth: do not ignore key generation failures when initializing ctrl keys (bsc#1202633). - nvme-auth: do not keep long lived 4k dhchap buffer (bsc#1202633). - nvme-auth: do not override ctrl keys before validation (bsc#1202633). - nvme-auth: do not re-authenticate if the controller is not LIVE (bsc#1202633). - nvme-auth: do not use NVMe status codes (bsc#1202633). - nvme-auth: fix an error code in nvme_auth_process_dhchap_challenge() (bsc#1202633). - nvme-auth: fix smatch warning complaints (bsc#1202633). - nvme-auth: guarantee dhchap buffers under memory pressure (bsc#1202633). - nvme-auth: have dhchap_auth_work wait for queues auth to complete (bsc#1202633). - nvme-auth: mark nvme_auth_wq static (bsc#1202633). - nvme-auth: no need to reset chap contexts on re-authentication (bsc#1202633). - nvme-auth: remove redundant auth_work flush (bsc#1202633). - nvme-auth: remove redundant buffer deallocations (bsc#1202633). - nvme-auth: remove redundant deallocations (bsc#1202633). - nvme-auth: remove redundant if statement (bsc#1202633). - nvme-auth: remove symbol export from nvme_auth_reset (bsc#1202633). - nvme-auth: rename __nvme_auth_[reset|free] to nvme_auth[reset|free]_dhchap (bsc#1202633). - nvme-auth: rename authentication work elements (bsc#1202633). - nvme-auth: uninitialized variable in nvme_auth_transform_key() (git-fixes). - nvme-auth: use workqueue dedicated to authentication (bsc#1202633). - nvme-core: fix dev_pm_qos memleak (git-fixes). - nvme-core: fix memory leak in dhchap_ctrl_secret (git-fixes). - nvme-core: fix memory leak in dhchap_secret_store (git-fixes). - nvme-fabrics: show well known discovery name (bsc#1200054). - nvme-fc: fix a missing queue put in nvmet_fc_ls_create_association (git-fixes). - nvme-fcloop: fix 'inconsistent {IN-HARDIRQ-W} -> {HARDIRQ-ON-W} usage' (git-fixes). - nvme-hwmon: consistently ignore errors from nvme_hwmon_init (git-fixes). - nvme-hwmon: kmalloc the NVME SMART log buffer (git-fixes). - nvme-multipath: fix hang when disk goes live over reconnect (git-fixes). - nvme-multipath: fix possible hang in live ns resize with ANA access (git-fixes). - nvme-multipath: support io stats on the mpath device (bsc#1210565). - nvme-pci: add bogus ID quirk for ADATA SX6000PNP (bsc#1207827). - nvme-pci: add quirk for missing secondary temperature thresholds (git-fixes). - nvme-pci: add quirks for Samsung X5 SSDs (git-fixes). - nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro5000 SSDs (git-fixes). - nvme-pci: avoid the deepest sleep state on ZHITAI TiPro7000 SSDs (git-fixes). - nvme-pci: clear the prp2 field when not used (git-fixes). - nvme-pci: disable write zeroes on various Kingston SSD (git-fixes). - nvme-pci: fix a NULL pointer dereference in nvme_alloc_admin_tags (git-fixes). - nvme-pci: fix doorbell buffer value endianness (git-fixes). - nvme-pci: fix mempool alloc size (git-fixes). - nvme-pci: fix page size checks (git-fixes). - nvme-pci: fix timeout request state check (git-fixes). - nvme-pci: mark Lexar NM760 as IGNORE_DEV_SUBNQN (git-fixes). - nvme-pci: set min_align_mask before calculating max_hw_sectors (git-fixes). - nvme-rdma: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: always fail a request when sending it failed (bsc#1208902). - nvme-tcp: fix a possible UAF when failing to allocate an io queue (git-fixes). - nvme-tcp: fix bogus request completion when failing to send AER (git-fixes). - nvme-tcp: fix possible circular locking when deleting a controller under memory pressure (git-fixes). - nvme-tcp: fix possible hang caused during ctrl deletion (git-fixes). - nvme-tcp: fix regression that causes sporadic requests to time out (git-fixes). - nvme-tcp: lockdep: annotate in-kernel sockets (git-fixes). - nvme: Fix IOC_PR_CLEAR and IOC_PR_RELEASE ioctls for nvme devices (git-fixes). - nvme: add a bogus subsystem NQN quirk for Micron MTFDKBA2T0TFH (git-fixes). - nvme: add device name to warning in uuid_show() (git-fixes). - nvme: also return I/O command effects from nvme_command_effects (git-fixes). - nvme: bring back auto-removal of deleted namespaces during sequential scan (git-fixes). - nvme: catch -ENODEV from nvme_revalidate_zones again (git-fixes). - nvme: check for duplicate identifiers earlier (git-fixes). - nvme: cleanup __nvme_check_ids (git-fixes). - nvme: copy firmware_rev on each init (git-fixes). - nvme: define compat_ioctl again to unbreak 32-bit userspace (git-fixes). - nvme: double KA polling frequency to avoid KATO with TBKAS on (git-fixes). - nvme: fix async event trace event (git-fixes). - nvme: fix discard support without oncs (git-fixes). - nvme: fix handling single range discard request (git-fixes). - nvme: fix interpretation of DMRSL (git-fixes). - nvme: fix multipath crash caused by flush request when blktrace is enabled (git-fixes). - nvme: fix passthrough csi check (git-fixes). - nvme: fix per-namespace chardev deletion (git-fixes). - nvme: fix the CRIMS and CRWMS definitions to match the spec (git-fixes). - nvme: fix the NVME_CMD_EFFECTS_CSE_MASK definition (git-fixes). - nvme: fix the name of Zone Append for verbose logging (git-fixes). - nvme: fix the read-only state for zoned namespaces with unsupposed features (git-fixes). - nvme: generalize the nvme_multi_css check in nvme_scan_ns (git-fixes). - nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes). - nvme: introduce nvme_start_request (bsc#1210565). - nvme: move nvme_multi_css into nvme.h (git-fixes). - nvme: move the Samsung X5 quirk entry to the core quirks (git-fixes). - nvme: rename nvme_validate_or_alloc_ns to nvme_scan_ns (git-fixes). - nvme: return err on nvme_init_non_mdts_limits fail (git-fixes). - nvme: send Identify with CNS 06h only to I/O controllers (bsc#1209693). - nvme: set dma alignment to dword (git-fixes). - nvme: set non-mdts limits in nvme_scan_work (git-fixes). - nvme: use command_id instead of req->tag in trace_nvme_complete_rq() (git-fixes). - nvmet-auth: do not try to cancel a non-initialized work_struct (git-fixes). - nvmet-tcp: add bounds check on Transfer Tag (git-fixes). - nvmet-tcp: fix incomplete data digest send (git-fixes). - nvmet-tcp: fix lockdep complaint on nvmet_tcp_wq flush during queue teardown (git-fixes). - nvmet-tcp: fix regression in data_digest calculation (git-fixes). - nvmet-tcp: fix unhandled tcp states in nvmet_tcp_state_change() (git-fixes). - nvmet: add helpers to set the result field for connect commands (git-fixes). - nvmet: avoid potential UAF in nvmet_req_complete() (git-fixes). - nvmet: do not defer passthrough commands with trivial effects to the workqueue (git-fixes). - nvmet: fix I/O Command Set specific Identify Controller (git-fixes). - nvmet: fix Identify Active Namespace ID list handling (git-fixes). - nvmet: fix Identify Controller handling (git-fixes). - nvmet: fix Identify Namespace handling (git-fixes). - nvmet: fix a memory leak (git-fixes). - nvmet: fix a memory leak in nvmet_auth_set_key (git-fixes). - nvmet: fix a use-after-free (git-fixes). - nvmet: fix invalid memory reference in nvmet_subsys_attr_qid_max_show (git-fixes). - nvmet: fix mar and mor off-by-one errors (git-fixes). - nvmet: fix memory leak in nvmet_subsys_attr_model_store_locked (git-fixes). - nvmet: fix workqueue MEM_RECLAIM flushing dependency (git-fixes). - nvmet: force reconnect when number of queue changes (git-fixes). - nvmet: looks at the passthrough controller when initializing CAP (git-fixes). - nvmet: move the call to nvmet_ns_changed out of nvmet_ns_revalidate (git-fixes). - nvmet: only allocate a single slab for bvecs (git-fixes). - nvmet: use IOCB_NOWAIT only if the filesystem supports it (git-fixes). - nvmet: use NVME_CMD_EFFECTS_CSUPP instead of open coding it (git-fixes). - objtool: Add a missing comma to avoid string concatenation (bsc#1207328). - ocfs2: Fix data corruption after failed write (bsc#1208542). - ocfs2: clear dinode links count in case of error (bsc#1207650). - ocfs2: fix BUG when iput after ocfs2_mknod fails (bsc#1207649). - ocfs2: fix crash when mount with quota enabled (bsc#1207640). - ocfs2: fix defrag path triggering jbd2 ASSERT (bsc#1199304). - ocfs2: fix defrag path triggering jbd2 ASSERT (git-fixes). - ocfs2: fix freeing uninitialized resource on ocfs2_dlm_shutdown (git-fixes). - ocfs2: fix memory leak in ocfs2_mount_volume() (bsc#1207652). - ocfs2: fix memory leak in ocfs2_stack_glue_init() (bsc#1207651). - ocfs2: fix non-auto defrag path not working issue (bsc#1199304). - ocfs2: fix non-auto defrag path not working issue (git-fixes). - ocfs2: ocfs2_mount_volume does cleanup job before return error (bsc#1207770). - ocfs2: quota_local: fix possible uninitialized-variable access in ocfs2_local_read_info() (bsc#1207768). - ocfs2: rewrite error handling of ocfs2_fill_super (bsc#1207771). - octeon: constify netdev->dev_addr (git-fixes). - octeontx2-pf: Avoid use of GFP_KERNEL in atomic context (git-fixes). - octeontx2-pf: Fix resource leakage in VF driver unbind (git-fixes). - octeontx2-pf: Fix the use of GFP_KERNEL in atomic context on rt (git-fixes). - octeontx2-pf: Recalculate UDP checksum for ptp 1-step sync packet (git-fixes). - of/address: Return an error when no valid dma-ranges are found (git-fixes). - opp: Fix use-after-free in lazy_opp_tables after probe deferral (git-fixes). - pNFS/filelayout: Fix coalescing test for single DS (git-fixes). - panic: Consolidate open-coded panic_on_warn checks (bsc#1207328). - panic: Introduce warn_limit (bsc#1207328). - panic: unset panic_on_warn inside panic() (bsc#1207328). - pci/aspm: Disable ASPM on MFD function removal to avoid use-after-free (git-fixes). - pci/aspm: Remove pcie_aspm_pm_state_change() (git-fixes). - pci/dpc: Await readiness of secondary bus after reset (git-fixes). - pci/edr: Clear Device Status after EDR error recovery (git-fixes). - pci/iov: Enlarge virtfn sysfs name buffer (git-fixes). - pci/pm: Always disable PTM for all devices during suspend (git-fixes). - pci/pm: Avoid putting Elo i2 PCIe Ports in D3cold (git-fixes). - pci/pm: Fix bridge_d3_blacklist Elo i2 overwrite of Gigabyte X299 (git-fixes). - pci/pm: Observe reset delay irrespective of bridge_d3 (git-fixes). - pci/ptm: Add pci_suspend_ptm() and pci_resume_ptm() (git-fixes). - pci: Add ACS quirk for Wangxun NICs (git-fixes). - pci: Add SolidRun vendor ID (git-fixes). - pci: Add pci_clear_master() stub for non-CONFIG_PCI (git-fixes). - pci: Align extra resources for hotplug bridges properly (git-fixes). - pci: Avoid FLR for AMD FCH AHCI adapters (git-fixes). - pci: Avoid pci_dev_lock() AB/BA deadlock with sriov_numvfs_store() (git-fixes). - pci: Fix dropping valid root bus resources with .end = zero (git-fixes). - pci: Reduce warnings on possible RW1C corruption (git-fixes). - pci: Release resource invalidated by coalescing (git-fixes). - pci: Take other bus devices into account when distributing resources (git-fixes). - pci: Unify delay handling for reset and resume (git-fixes). - pci: aardvark: Check return value of generic_handle_domain_irq() when processing INTx IRQ (git-fixes). - pci: aardvark: Fix link training (git-fixes). - pci: cadence: Fix Gen2 Link Retraining process (git-fixes). - pci: dwc: Add dw_pcie_ops.host_deinit() callback (git-fixes). - pci: dwc: Fix PORT_LINK_CONTROL update when CDM check enabled (git-fixes). - pci: endpoint: Add missing documentation about the MSI/MSI-X range (git-fixes). - pci: ftpci100: Release the clock resources (git-fixes). - pci: hotplug: Allow marking devices as disconnected during bind/unbind (git-fixes). - pci: hv: Add a per-bus mutex state_lock (bsc#1207185). - pci: hv: Fix a race condition in hv_irq_unmask() that can cause panic (bsc#1207185). - pci: hv: Remove the useless hv_pcichild_state from struct hv_pci_dev (bsc#1207185). - pci: hv: Use async probing to reduce boot time (bsc#1207185). - pci: hv: fix a race condition bug in hv_pci_query_relations() (bsc#1207185). - pci: hv: update comment in x86 specific hv_arch_irq_unmask (git-fixes). - pci: imx6: Install the fault handler only on compatible match (git-fixes). - pci: loongson: Add more devices that need MRRS quirk (git-fixes). - pci: loongson: Prevent LS7A MRRS increases (git-fixes). - pci: mediatek-gen3: Assert resets to ensure expected init state (git-fixes). - pci: mediatek-gen3: Fix refcount leak in mtk_pcie_init_irq_domains() (git-fixes). - pci: pciehp: Cancel bringup sequence if card is not present (git-fixes). - pci: pciehp: Fix AB-BA deadlock between reset_lock and device_lock (git-fixes). - pci: qcom: Disable write access to read only registers for IP v2.3.3 (git-fixes). - pci: qcom: Fix host-init error handling (git-fixes). - pci: qcom: Fix pipe clock imbalance (git-fixes). - pci: qcom: Fix the incorrect register usage in v2.7.0 config (git-fixes). - pci: rockchip: Add poll and timeout to wait for PHY PLLs to be locked (git-fixes). - pci: rockchip: Assert PCI Configuration Enable bit after probe (git-fixes). - pci: rockchip: Fix legacy IRQ generation for RK3399 PCIe endpoint core (git-fixes). - pci: rockchip: Set address alignment for endpoint mode (git-fixes). - pci: rockchip: Use u32 variable to access 32-bit registers (git-fixes). - pci: rockchip: Write PCI Device ID to correct register (git-fixes). - pci: switchtec: Return -EFAULT for copy_to_user() errors (git-fixes). - pci: vmd: Fix secondary bus reset for Intel bridges (git-fixes). - pci: vmd: Reset VMD config register between soft reboots (git-fixes). - pci: xgene: Revert 'PCI: xgene: Use inbound resources for setup' (git-fixes). - perf/amd/ibs: Use interrupt regs ip for stack unwinding (git fixes). - perf/core: Call LSM hook after copying perf_event_attr (git fixes). - perf/core: Fix data race between perf_event_set_output() and perf_mmap_close() (git fixes). - perf/core: Fix perf_output_begin parameter is incorrectly invoked in perf_event_bpf_output (git fixes). - perf/core: Fix the same task check in perf_event_set_output (git fixes). - perf/core: Inherit event_caps (git fixes). - perf/x86/amd: fix potential integer overflow on shift of a int (git fixes). - perf/x86/intel/cstate: Add Emerald Rapids (PED-4396). - perf/x86/intel/ds: Fix precise store latency handling (git fixes). - perf/x86/intel/lbr: Use setup_clear_cpu_cap() instead of clear_cpu_cap() (git fixes). - perf/x86/intel/pt: Fix sampling using single range output (git fixes). - perf/x86/intel/pt: Relax address filter validation (git fixes). - perf/x86/intel/uncore: Add Emerald Rapids (git fixes). - perf/x86/intel/uncore: Clear attr_update properly (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Disable I/O stacks to PMU mapping on ICX-D (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Icelake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Sapphire Rapids (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Enable UPI topology discovery for Skylake Server (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Fix broken read_counter() for SNB IMC PMU (git fixes). - perf/x86/intel/uncore: Fix reference count leak in __uncore_imc_init_box() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in hswep_has_limit_sbox() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in sad_cfg_iio_topology() (git fixes). - perf/x86/intel/uncore: Fix reference count leak in snr_uncore_mmio_map() (git fixes). - perf/x86/intel/uncore: Generalize IIO topology support (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Generalize get_topology() for SKX PMUs (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Get UPI NodeID and GroupID (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Introduce UPI topology type (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Make set_mapping() procedure void (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel/uncore: Update sysfs-devices-mapping file (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/intel: Add Cooper Lake stepping to isolation_ucodes (git fixes). - perf/x86/intel: Add Emerald Rapids (git fixes). - perf/x86/intel: Do not extend the pseudo-encoding to GP counters (git fixes). - perf/x86/intel: Fix PEBS data source encoding for ADL (git fixes). - perf/x86/intel: Fix PEBS memory access info encoding for ADL (git fixes). - perf/x86/intel: Fix event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for ADL (git fixes). - perf/x86/intel: Fix pebs event constraints for ICL (git fixes). - perf/x86/intel: Fix pebs event constraints for SPR (git fixes). - perf/x86/lbr: Enable the branch type for the Arch LBR by default (git fixes). - perf/x86/msr: Add Emerald Rapids (git fixes). - perf/x86/rapl: Add support for Intel AlderLake-N (git fixes). - perf/x86/rapl: Add support for Intel Emerald Rapids (PED-4394). - perf/x86/rapl: Treat Tigerlake like Icelake (git fixes). - perf/x86/rapl: Use standard Energy Unit for SPR Dram RAPL domain (git fixes). - perf/x86/rapl: fix AMD event handling (git fixes). - perf/x86/uncore: Add Raptor Lake uncore support (git fixes). - perf/x86/uncore: Add a quirk for UPI on SPR (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Add new Alder Lake and Raptor Lake support (git fixes). - perf/x86/uncore: Add new Raptor Lake S support (git fixes). - perf/x86/uncore: Clean up uncore_pci_ids (git fixes). - perf/x86/uncore: Do not WARN_ON_ONCE() for a broken discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Factor out uncore_device_to_die() (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Fix potential NULL pointer in uncore_get_alias_name (bsc#1206824, bsc#1206493, bsc#1206492). - perf/x86/uncore: Ignore broken units in discovery table (bsc#1206824, bsc#1206493, bsc#1206492). - perf: Always wake the parent event (git fixes). - perf: Fix check before add_event_to_groups() in perf_group_detach() (git fixes). - perf: Fix possible memleak in pmu_dev_alloc() (git fixes). - perf: fix perf_event_context->time (git fixes). - phy: Revert 'phy: Remove SOC_EXYNOS4212 dep. from PHY_EXYNOS4X12_USB' (git-fixes). - phy: rockchip-typec: Fix unsigned comparison with less than zero (git-fixes). - phy: rockchip-typec: fix tcphy_get_mode error case (git-fixes). - phy: st: miphy28lp: use _poll_timeout functions for waits (git-fixes). - phy: tegra: xusb: Add missing tegra_xusb_port_unregister for usb2_port and ulpi_port (git-fixes). - phy: tegra: xusb: Clear the driver reference in usb-phy dev (git-fixes). - phy: tegra: xusb: check return value of devm_kzalloc() (git-fixes). - pinctrl: amd: Disable and mask interrupts on resume (git-fixes). - pinctrl: aspeed: Fix confusing types in return value (git-fixes). - pinctrl: at91-pio4: check return value of devm_kasprintf() (git-fixes). - pinctrl: at91-pio4: fix domain name assignment (git-fixes). - pinctrl: at91: use devm_kasprintf() to avoid potential leaks (git-fixes). - pinctrl: cherryview: Return correct value if pin in push-pull mode (git-fixes). - pinctrl: intel: Restore the pins that used to be in Direct IRQ mode (git-fixes). - pinctrl: mediatek: Fix the drive register definition of some Pins (git-fixes). - pinctrl: mediatek: Initialize variable *buf to zero (git-fixes). - pinctrl: mediatek: fix coding style (git-fixes). - pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes). - pinctrl: microchip-sgpio: check return value of devm_kasprintf() (git-fixes). - pinctrl: ocelot: Fix alt mode for ocelot (git-fixes). - pinctrl: qcom: lpass-lpi: set output value before enabling output (git-fixes). - pinctrl: qcom: pinctrl-msm8976: Correct function names for wcss pins (git-fixes). - pinctrl: renesas: r8a779a0: Remove incorrect AVB[01] pinmux configuration (git-fixes). - pinctrl: rockchip: Fix refcount leak in rockchip_pinctrl_parse_groups (git-fixes). - pinctrl: single: fix potential NULL dereference (git-fixes). - pinctrl: stm32: Fix refcount leak in stm32_pctrl_get_irq_domain (git-fixes). - platform/chrome: cros_ec_chardev: fix kernel data leak from ioctl (git-fixes). - platform/surface: aggregator: Allow completion work-items to be executed in parallel (git-fixes). - platform/x86 (gigabyte-wmi): Add support for A320M-S2H V2 (git-fixes). - platform/x86/amd/pmc: Add new acpi id for PMC controller (bsc#1210644). - platform/x86/amd/pmc: Add new platform support (bsc#1210644). - platform/x86/amd: Fix refcount leak in amd_pmc_probe (bsc#1210644). - platform/x86/amd: pmc: Add a module parameter to disable workarounds (bsc#1210644). - platform/x86/amd: pmc: Add a workaround for an s0i3 issue on Cezanne (bsc#1210644). - platform/x86/amd: pmc: Add defines for STB events (bsc#1210644). - platform/x86/amd: pmc: Add line break for readability (bsc#1210644). - platform/x86/amd: pmc: Add new ACPI ID AMDI0009 (bsc#1210644). - platform/x86/amd: pmc: Add num_samples message id support to STB (bsc#1210644). - platform/x86/amd: pmc: Add sysfs files for SMU (bsc#1210644). - platform/x86/amd: pmc: Always write to the STB (bsc#1210644). - platform/x86/amd: pmc: Disable IRQ1 wakeup for RN/CZN (bsc#1210644). - platform/x86/amd: pmc: Do not dump data after resume from s0i3 on picasso (git-fixes). - platform/x86/amd: pmc: Do not try to read SMU version on Picasso (git-fixes). - platform/x86/amd: pmc: Fix build without debugfs (bsc#1210644). - platform/x86/amd: pmc: Fix memory leak in amd_pmc_stb_debugfs_open_v2() (bsc#1210644). - platform/x86/amd: pmc: Hide SMU version and program attributes for Picasso (git-fixes). - platform/x86/amd: pmc: Move idlemask check into `amd_pmc_idlemask_read` (git-fixes). - platform/x86/amd: pmc: Move out of BIOS SMN pair for STB init (git-fixes). - platform/x86/amd: pmc: Read SMU version during suspend on Cezanne systems (bsc#1210644). - platform/x86/amd: pmc: Remove more CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: Utilize SMN index 0 for driver probe (git-fixes). - platform/x86/amd: pmc: Write dummy postcode into the STB DRAM (bsc#1210644). - platform/x86/amd: pmc: add CONFIG_SERIO dependency (git-fixes). - platform/x86/amd: pmc: differentiate STB/SMU messaging prints (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_DEBUG_FS checks (bsc#1210644). - platform/x86/amd: pmc: remove CONFIG_SUSPEND checks (bsc#1210644). - platform/x86/intel/pmc: Alder Lake PCH slp_s0_residency fix (git-fixes). - platform/x86: ISST: PUNIT device mapping with Sub-NUMA clustering (bsc#1208420). - platform/x86: ISST: Remove 8 socket limit (bsc#1211836). - platform/x86: Move AMD platform drivers to separate directory (bsc#1210644). - platform/x86: amd-pmc: Add a message to print resume time info (bsc#1210644). - platform/x86: amd-pmc: Add special handling for timer based S0i3 wakeup (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Smart Trace Buffer (bsc#1210644). - platform/x86: amd-pmc: Add support for AMD Spill to DRAM STB feature (bsc#1210644). - platform/x86: amd-pmc: Avoid reading SMU version at probe time (bsc#1210644). - platform/x86: amd-pmc: Check s0i3 cycle status (bsc#1210644). - platform/x86: amd-pmc: Correct usage of SMU version (git-fixes). - platform/x86: amd-pmc: Downgrade dev_info message to dev_dbg (bsc#1210644). - platform/x86: amd-pmc: Drop CPU QoS workaround (bsc#1210644). - platform/x86: amd-pmc: Drop check for valid alarm time (bsc#1210644). - platform/x86: amd-pmc: Export Idlemask values based on the APU (git-fixes). - platform/x86: amd-pmc: Fix build error unused-function (bsc#1210644). - platform/x86: amd-pmc: Fix compilation when CONFIG_DEBUGFS is disabled (git-fixes). - platform/x86: amd-pmc: Fix compilation without CONFIG_SUSPEND (bsc#1210644). - platform/x86: amd-pmc: Make amd_pmc_stb_debugfs_fops static (bsc#1210644). - platform/x86: amd-pmc: Move FCH init to first use (bsc#1210644). - platform/x86: amd-pmc: Move SMU logging setup out of init (bsc#1210644). - platform/x86: amd-pmc: Move to later in the suspend process (bsc#1210644). - platform/x86: amd-pmc: Only report STB errors when STB enabled (bsc#1210644). - platform/x86: amd-pmc: Output error codes in messages (bsc#1210644). - platform/x86: amd-pmc: Send command to dump data after clearing OS_HINT (bsc#1210644). - platform/x86: amd-pmc: Set QOS during suspend on CZN w/ timer wakeup (bsc#1210644). - platform/x86: amd-pmc: Shuffle location of amd_pmc_get_smu_version() (bsc#1210644). - platform/x86: amd-pmc: Simplify error handling and store the pci_dev in amd_pmc_dev structure (bsc#1210644). - platform/x86: amd-pmc: Validate entry into the deepest state on resume (bsc#1210644). - platform/x86: amd-pmc: adjust arguments for `amd_pmc_send_cmd` (bsc#1210644). - platform/x86: amd-pmc: fix compilation without CONFIG_RTC_SYSTOHC_DEVICE (bsc#1210644). - platform/x86: amd-pmc: uninitialized variable in amd_pmc_s2d_init() (bsc#1210644). - platform/x86: amd: pmc: Remove __maybe_unused from amd_pmc_suspend_handler() (bsc#1210644). - platform/x86: amd: pmc: provide user message where s0ix is not supported (bsc#1210644). - platform/x86: asus-nb-wmi: Add alternate mapping for KEY_SCREENLOCK (git-fixes). - platform/x86: asus-wmi: Ignore WMI events with codes 0x7B, 0xC0 (git-fixes). - platform/x86: dell-wmi: Add a keymap for KEY_MUTE in type 0x0010 table (git-fixes). - platform/x86: gigabyte-wmi: add support for B450M DS3H WIFI-CF (git-fixes). - platform/x86: gigabyte-wmi: add support for X570S AORUS ELITE (git-fixes). - platform/x86: hp-wmi: Support touchpad on/off (git-fixes). - platform/x86: intel-uncore-freq: add Emerald Rapids support (PED-4390). - platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield (git-fixes). - platform/x86: think-lmi: Add possible_values for ThinkStation (git-fixes). - platform/x86: think-lmi: Certificate authentication support (bsc#1210050). - platform/x86: think-lmi: Clean up display of current_value on Thinkstation (git-fixes). - platform/x86: think-lmi: Correct NVME password handling (git-fixes). - platform/x86: think-lmi: Correct System password interface (git-fixes). - platform/x86: think-lmi: Fix memory leak when showing current settings (git-fixes). - platform/x86: think-lmi: Fix memory leaks when parsing ThinkStation WMI strings (git-fixes). - platform/x86: think-lmi: Move kobject_init() call into tlmi_create_auth() (bsc#1210050). - platform/x86: think-lmi: Opcode support (bsc#1210050). - platform/x86: think-lmi: Prevent underflow in index_store() (bsc#1210050). - platform/x86: think-lmi: Simplify tlmi_analyze() error handling a bit (bsc#1210050). - platform/x86: think-lmi: Use min_t() for comparison and assignment (bsc#1210050). - platform/x86: think-lmi: add debug_cmd (bsc#1210050). - platform/x86: think-lmi: add missing type attribute (git-fixes). - platform/x86: think-lmi: certificate support clean ups (bsc#1210050). - platform/x86: think-lmi: mutex protection around multiple WMI calls (git-fixes). - platform/x86: think-lmi: only display possible_values if available (git-fixes). - platform/x86: think-lmi: use correct possible_values delimiters (git-fixes). - platform/x86: thinkpad-acpi: Add support for automatic mode transitions (bsc#1210050). - platform/x86: thinkpad-acpi: Enable AMT by default on supported systems (bsc#1210050). - platform/x86: thinkpad-acpi: profile capabilities as integer (bsc#1210050). - platform/x86: thinkpad_acpi: Accept ibm_init_struct.init() returning -ENODEV (bsc#1210050). - platform/x86: thinkpad_acpi: Add LED_RETAIN_AT_SHUTDOWN to led_class_devs (bsc#1210050). - platform/x86: thinkpad_acpi: Add PSC mode support (bsc#1210050). - platform/x86: thinkpad_acpi: Add a s2idle resume quirk for a number of laptops (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Add dual-fan quirk for T15g (2nd gen) (bsc#1210050). - platform/x86: thinkpad_acpi: Add hotkey_notify_extended_hotkey() helper (bsc#1210050). - platform/x86: thinkpad_acpi: Add lid_logo_dot to the list of safe LEDs (bsc#1210050). - platform/x86: thinkpad_acpi: Add quirk for ThinkPads without a fan (bsc#1210050). - platform/x86: thinkpad_acpi: Cleanup dytc_profile_available (bsc#1210050). - platform/x86: thinkpad_acpi: Convert btusb DMI list to quirks (bsc#1210050). - platform/x86: thinkpad_acpi: Convert platform driver to use dev_groups (bsc#1210050). - platform/x86: thinkpad_acpi: Correct dual fan probe (bsc#1210050). - platform/x86: thinkpad_acpi: Do not use test_bit on an integer (bsc#1210050). - platform/x86: thinkpad_acpi: Enable s2idle quirk for 21A1 machine type (bsc#1210050). - platform/x86: thinkpad_acpi: Explicitly set to balanced mode on startup (bsc#1210050). - platform/x86: thinkpad_acpi: Fix a memory leak of EFCH MMIO resource (bsc#1210050). - platform/x86: thinkpad_acpi: Fix coccinelle warnings (bsc#1210050). - platform/x86: thinkpad_acpi: Fix compiler warning about uninitialized err variable (bsc#1210050). - platform/x86: thinkpad_acpi: Fix incorrect use of platform profile on AMD platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix lkp-tests warnings for platform profiles (git-fixes). - platform/x86: thinkpad_acpi: Fix max_brightness of thinklight (bsc#1210050). - platform/x86: thinkpad_acpi: Fix platform profiles on T490 (git-fixes). - platform/x86: thinkpad_acpi: Fix profile mode display in AMT mode (bsc#1210050). - platform/x86: thinkpad_acpi: Fix profile modes on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: Fix reporting a non present second fan on some models (bsc#1210050). - platform/x86: thinkpad_acpi: Fix the hwmon sysfs-attr showing up in the wrong place (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thermal_temp_input_attr sorting (bsc#1210050). - platform/x86: thinkpad_acpi: Fix thinklight LED brightness returning 255 (bsc#1210050). - platform/x86: thinkpad_acpi: Get privacy-screen / lcdshadow ACPI handles only once (bsc#1210050). - platform/x86: thinkpad_acpi: Make *_init() functions return -ENODEV instead of 1 (bsc#1210050). - platform/x86: thinkpad_acpi: Properly indent code in tpacpi_dytc_profile_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Register tpacpi_pdriver after subdriver init (bsc#1210050). - platform/x86: thinkpad_acpi: Remove 'goto err_exit' from hotkey_init() (bsc#1210050). - platform/x86: thinkpad_acpi: Remove unused sensors_pdev_attrs_registered flag (bsc#1210050). - platform/x86: thinkpad_acpi: Restore missing hotkey_tablet_mode and hotkey_radio_sw sysfs-attr (bsc#1210050). - platform/x86: thinkpad_acpi: Simplify dytc_version handling (bsc#1210050). - platform/x86: thinkpad_acpi: Switch to common use of attributes (bsc#1210050). - platform/x86: thinkpad_acpi: Use backlight helper (bsc#1210050). - platform/x86: thinkpad_acpi: clean up dytc profile convert (bsc#1210050). - platform/x86: thinkpad_acpi: consistently check fan_get_status return (bsc#1210050). - platform/x86: thinkpad_acpi: do not use PSC mode on Intel platforms (bsc#1210050). - platform/x86: thinkpad_acpi: tpacpi_attr_group contains driver attributes not device attrs (bsc#1210050). - platform/x86: thinkpad_acpi: use strstarts() (bsc#1210050). - platform/x86: touchscreen_dmi: Add Chuwi Vi8 (CWI501) DMI match (git-fixes). - platform/x86: touchscreen_dmi: Add info for the CSL Panther Tab HD (git-fixes). - platform/x86: touchscreen_dmi: Add info for the Dexp Ursus KX210i (git-fixes). - platform/x86: touchscreen_dmi: Add upside-down quirk for GDIX1002 ts on the Juno Tablet (git-fixes). - platform: x86: MLX_PLATFORM: select REGMAP instead of depending on it (git-fixes). - pm: domains: fix integer overflow issues in genpd_parse_state() (git-fixes). - pm: hibernate: Do not get block device exclusively in test_resume mode (git-fixes). - pm: hibernate: Turn snapshot_test into global variable (git-fixes). - pm: hibernate: fix load_image_and_restore() error path (git-fixes). - power: supply: Fix logic checking if system is running from battery (git-fixes). - power: supply: Ratelimit no data debug output (git-fixes). - power: supply: ab8500: Fix external_power_changed race (git-fixes). - power: supply: bq24190_charger: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - power: supply: bq27xxx: Add cache parameter to bq27xxx_battery_current_and_status() (git-fixes). - power: supply: bq27xxx: After charger plug in/out wait 0.5s for things to stabilize (git-fixes). - power: supply: bq27xxx: Ensure power_supply_changed() is called on current sign changes (git-fixes). - power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes). - power: supply: bq27xxx: Fix bq27xxx_battery_update() race condition (git-fixes). - power: supply: bq27xxx: Fix poll_interval handling and races on remove (git-fixes). - power: supply: bq27xxx: Move bq27xxx_battery_update() down (git-fixes). - power: supply: bq27xxx: Use mod_delayed_work() instead of cancel() + schedule() (git-fixes). - power: supply: bq27xxx: expose battery data when CI=1 (git-fixes). - power: supply: cros_usbpd: reclassify 'default case!' as debug (git-fixes). - power: supply: da9150: Fix use after free bug in da9150_charger_remove due to race condition (git-fixes). - power: supply: generic-adc-battery: fix unit scaling (git-fixes). - power: supply: leds: Fix blink to LED on transition (git-fixes). - power: supply: sbs-charger: Fix INHIBITED bit for Status reg (git-fixes). - power: supply: sc27xx: Fix external_power_changed race (git-fixes). - powercap: fix possible name leak in powercap_register_zone() (git-fixes). - powercap: intel_rapl: add support for Emerald Rapids (PED-4398). - powerpc/64: Always build with 128-bit long double (bsc#1194869). - powerpc/64e: Fix amdgpu build on Book3E w/o AltiVec (bsc#1194869). - powerpc/64s/interrupt: Fix interrupt exit race with security mitigation switch (bsc#1194869). - powerpc/64s/radix: Fix RWX mapping with relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix crash with unaligned relocated kernel (bsc#1194869). - powerpc/64s/radix: Fix exit lazy tlb mm switch with irqs enabled (bsc#1194869). - powerpc/64s/radix: Fix soft dirty tracking (bsc#1065729). - powerpc/64s: Fix local irq disable when PMIs are disabled (bsc#1195655 ltc#1195655 git-fixes). - powerpc/64s: Make POWER10 and later use pause_short in cpu_relax loops (bsc#1209367 ltc#195662). - powerpc/btext: add missing of_node_put (bsc#1065729). - powerpc/eeh: Set channel state after notifying the drivers (bsc#1208784 ltc#201612). - powerpc/hv-gpci: Fix hv_gpci event list (bsc#1207935). - powerpc/hv-gpci: Fix hv_gpci event list (git fixes). - powerpc/ioda/iommu/debugfs: Generate unique debugfs entries (bsc#1194869). - powerpc/iommu: Add missing of_node_put in iommu_init_early_dart (bsc#1194869). - powerpc/iommu: DMA address offset is incorrectly calculated with 2MB TCEs (jsc#SLE-19556 git-fixes). - powerpc/iommu: Limit number of TCEs to 512 for H_STUFF_TCE hcall (bsc#1194869 bsc#1212701). - powerpc/iommu: fix memory leak with using debugfs_lookup() (bsc#1194869). - powerpc/kcsan: Exclude udelay to prevent recursive instrumentation (bsc#1194869). - powerpc/kexec_file: Count hot-pluggable memory in FDT estimate (bsc#1194869). - powerpc/kexec_file: Fix division by zero in extra size estimation (bsc#1194869). - powerpc/kexec_file: fix implicit decl error (bsc#1194869). - powerpc/mm: Fix false detection of read faults (bsc#1208864). - powerpc/papr_scm: Update the NUMA distance table for the target node (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/perf/hv-24x7: add missing RTAS retry status handling (git fixes). - powerpc/powernv/ioda: Skip unallocated resources when mapping to PE (bsc#1065729). - powerpc/powernv: fix missing of_node_put in uv_init() (bsc#1194869). - powerpc/pseries/lpar: add missing RTAS retry status handling (bsc#1109158 ltc#169177 git-fixes). - powerpc/pseries/lparcfg: add missing RTAS retry status handling (bsc#1065729). - powerpc/pseries/vas: Ignore VAS update for DLPAR if copy/paste is not enabled (bsc#1210216 ltc#202189). - powerpc/pseries: Consolidate different NUMA distance update code paths (bsc#1209999 ltc#202140 bsc#1142685 ltc#179509 git-fixes). - powerpc/purgatory: remove PGO flags (bsc#1194869). - powerpc/rtas: ensure 4KB alignment for rtas_data_buf (bsc#1065729). - powerpc/rtas: use memmove for potentially overlapping buffer copy (bsc#1065729). - powerpc/set_memory: Avoid spinlock recursion in change_page_attr() (bsc#1194869). - powerpc/vmlinux.lds: Add an explicit symbol for the SRWX boundary (bsc#1194869). - powerpc/vmlinux.lds: Define RUNTIME_DISCARD_EXIT (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .comment (bsc#1194869). - powerpc/vmlinux.lds: Do not discard .rela* for relocatable builds (bsc#1194869). - powerpc/vmlinux.lds: Ensure STRICT_ALIGN_SIZE is at least page aligned (bsc#1194869). - powerpc/xmon: Fix -Wswitch-unreachable warning in bpt_cmds (bsc#1194869). - powerpc: Do not try to copy PPR for task with NULL pt_regs (bsc#1065729). - powerpc: Redefine HMT_xxx macros as empty on PPC32 (bsc#1209367 ltc#195662). - powerpc: Remove linker flag from KBUILD_AFLAGS (bsc#1194869). - powerpc: add ISA v3.0 / v3.1 wait opcode macro (bsc#1209367 ltc#195662). - powerpc: declare unmodified attribute_group usages const (bsc#1207935). - powerpc: declare unmodified attribute_group usages const (git-fixes). - powerpc: move __end_rodata to cover arch read-only sections (bsc#1194869). - printf: fix errname.c list (git-fixes). - prlimit: do_prlimit needs to have a speculation check (bsc#1209256). - pstore/ram: Add check for kstrdup (git-fixes). - pstore: Revert pmsg_lock back to a normal mutex (git-fixes). - purgatory: fix disabling debug info (git-fixes). - pwm: ab8500: Fix error code in probe() (git-fixes). - pwm: cros-ec: Explicitly set .polarity in .get_state() (git-fixes). - pwm: imx-tpm: force 'real_period' to be zero in suspend (git-fixes). - pwm: meson: Fix axg ao mux parents (git-fixes). - pwm: meson: Fix g12a ao clk81 name (git-fixes). - pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes). - pwm: stm32-lp: fix the check on arr and cmp registers update (git-fixes). - pwm: sysfs: Do not apply state to already disabled PWMs (git-fixes). - qed/qed_dev: guard against a possible division by zero (jsc#SLE-19001). - qed/qed_mng_tlv: correctly zero out ->min instead of ->hour (jsc#SLE-19001). - qed/qed_sriov: guard against NULL derefs from qed_iov_get_vf_info (jsc#SLE-19001). - qed/qede: Fix scheduling while atomic (git-fixes). - qed: allow sleep in qed_mcp_trace_dump() (jsc#SLE-19001). - qede: avoid uninitialized entries in coal_entry array (bsc#1205846). - qede: execute xdp_do_flush() before napi_complete_done() (jsc#SLE-19001). - qede: fix interrupt coalescing configuration (bsc#1205846). - quota: Check next/prev free block number after reading from quota file (bsc#1206640). - quota: Prevent memory allocation recursion while holding dq_lock (bsc#1207639). - r8152: add vendor/device ID pair for Microsoft Devkit (git-fixes). - r8152: fix flow control issue of RTL8156A (git-fixes). - r8152: fix the poor throughput for 2.5G devices (git-fixes). - r8152: move setting r8153b_rx_agg_chg_indicate() (git-fixes). - r8169: fix RTL8168H and RTL8107E rx crc error (git-fixes). - r8169: move rtl_wol_enable_rx() and rtl_prepare_power_down() (git-fixes). - radeon: avoid double free in ci_dpm_init() (git-fixes). - rcu: Fix missing TICK_DEP_MASK_RCU_EXP dependency check (git-fixes). - rcu: Fix rcu_torture_read ftrace event (git-fixes). - rcu: Tighten rcu_advance_cbs_nowake() checks (bsc#1209159). - rdma/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes) - rdma/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes) - rdma/bnxt_re: Fix a possible memory leak (git-fixes) - rdma/bnxt_re: Fix return value of bnxt_re_process_raw_qp_pkt_rx (git-fixes) - rdma/bnxt_re: Fix the page_size used during the MR creation (git-fixes) - rdma/bnxt_re: Fix to remove an unnecessary log (git-fixes) - rdma/bnxt_re: Fix to remove unnecessary return labels (git-fixes) - rdma/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes) - rdma/bnxt_re: Remove unnecessary checks (git-fixes) - rdma/bnxt_re: Return directly without goto jumps (git-fixes) - rdma/bnxt_re: Use unique names while registering interrupts (git-fixes) - rdma/bnxt_re: wraparound mbox producer index (git-fixes) - rdma/cm: Trace icm_send_rej event before the cm state is reset (git-fixes) - rdma/cma: Allow UD qp_type to join multicast only (git-fixes) - rdma/cma: Always set static rate to 0 for RoCE (git-fixes) - rdma/core: Fix GID entry ref leak when create_ah fails (git-fixes) - rdma/core: Fix ib block iterator counter overflow (bsc#1207878). - rdma/core: Fix ib block iterator counter overflow (git-fixes) - rdma/core: Fix multiple -Warray-bounds warnings (git-fixes) - rdma/cxgb4: Fix potential null-ptr-deref in pass_establish() (git-fixes) - rdma/cxgb4: add null-ptr-check after ip_dev_find() (git-fixes) - rdma/cxgb4: remove unnecessary NULL check in __c4iw_poll_cq_one() (git-fixes) - rdma/efa: Fix unsupported page sizes in device (git-fixes) - rdma/hns: Fix base address table allocation (git-fixes) - rdma/hns: Fix hns_roce_table_get return value (git-fixes) - rdma/hns: Fix timeout attr in query qp for HIP08 (git-fixes) - rdma/hns: Modify the value of long message loopback slice (git-fixes) - rdma/irdma: Add SW mechanism to generate completions on error (jsc#SLE-18383). - rdma/irdma: Add ipv4 check to irdma_find_listener() (git-fixes) - rdma/irdma: Cap MSIX used to online CPUs + 1 (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (git-fixes) - rdma/irdma: Do not generate SW completions for NOPs (jsc#SLE-18383). - rdma/irdma: Fix Local Invalidate fencing (git-fixes) - rdma/irdma: Fix RQ completion opcode (jsc#SLE-18383). - rdma/irdma: Fix drain SQ hang with no completion (jsc#SLE-18383). - rdma/irdma: Fix inline for multiple SGE's (jsc#SLE-18383). - rdma/irdma: Fix memory leak of PBLE objects (git-fixes) - rdma/irdma: Fix potential NULL-ptr-dereference (git-fixes) - rdma/irdma: Increase iWARP CM default rexmit count (git-fixes) - rdma/irdma: Prevent QP use after free (git-fixes) - rdma/irdma: Remove enum irdma_status_code (jsc#SLE-18383). - rdma/irdma: Remove excess error variables (jsc#SLE-18383). - rdma/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes) - rdma/mana: Remove redefinition of basic u64 type (bsc#1210741 jsc#PED-4022). - rdma/mana: hide new rdma_driver_ids (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Add a driver for Microsoft Azure Network Adapter (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Fix a bug when the PF indicates more entries for registering memory on first packet (bsc#1210741 jsc#PED-4022). - rdma/mana_ib: Prevent array underflow in mana_ib_create_qp_raw() (bsc#1210741 jsc#PED-4022). - rdma/mlx4: Prevent shift wrapping in set_user_sq_size() (jsc#SLE-19255). - rdma/mlx5: Create an indirect flow table for steering anchor (git-fixes) - rdma/mlx5: Do not set tx affinity when lag is in hash mode (git-fixes) - rdma/mlx5: Fix affinity assignment (git-fixes) - rdma/mlx5: Fix flow counter query via DEVX (git-fixes) - rdma/mlx5: Fix mlx5_ib_get_hw_stats when used for device (git-fixes) - rdma/mlx5: Fix validation of max_rd_atomic caps for DC (git-fixes) - rdma/mlx5: Initiate dropless RQ for RAW Ethernet functions (git-fixes) - rdma/mlx5: Rely on RoCE fw cap instead of devlink when setting profile (jsc#SLE-19253). - rdma/mlx5: Use correct device num_ports when modify DC (git-fixes) - rdma/mlx5: Use rdma_umem_for_each_dma_block() (git-fixes) - rdma/rdmavt: Delete unnecessary NULL check (git-fixes) - rdma/rtrs-clt: Replace list_next_or_null_rr_rcu with an inline function (git-fixes) - rdma/rtrs-srv: Pass the correct number of entries for dma mapped SGL (git-fixes) - rdma/rtrs: Fix rxe_dealloc_pd warning (git-fixes) - rdma/rtrs: Fix the last iu->buf leak in err path (git-fixes) - rdma/rxe: Fix access checks in rxe_check_bind_mw (git-fixes) - rdma/rxe: Fix inaccurate constants in rxe_type_info (git-fixes) - rdma/rxe: Fix missing memory barriers in rxe_queue.h (git-fixes) - rdma/rxe: Fix mr->map double free (git-fixes) - rdma/rxe: Fix oops with zero length reads (git-fixes) - rdma/rxe: Fix packet length checks (git-fixes) - rdma/rxe: Fix ref count error in check_rkey() (git-fixes) - rdma/rxe: Fix rxe_cq_post (git-fixes) - rdma/rxe: Fix the error 'trying to register non-static key in rxe_cleanup_task' (git-fixes) - rdma/rxe: Fix the use-before-initialization error of resp_pkts (git-fixes) - rdma/rxe: Make responder handle RDMA Read failures (git-fixes) - rdma/rxe: Prevent faulty rkey generation (git-fixes) - rdma/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes) - rdma/rxe: Remove tasklet call from rxe_cq.c (git-fixes) - rdma/rxe: Remove the unused variable obj (git-fixes) - rdma/rxe: Removed unused name from rxe_task struct (git-fixes) - rdma/siw: Fix potential page_array out of range access (git-fixes) - rdma/siw: Fix user page pinning accounting (git-fixes) - rdma/siw: Remove namespace check from siw_netdev_event() (git-fixes) - rdma/srp: Move large values to a new enum for gcc13 (git-fixes) - rdma/srpt: Add a check for valid 'mad_agent' pointer (git-fixes) - rdma/usnic: use iommu_map_atomic() under spin_lock() (git-fixes) - rdma/uverbs: Restrict usage of privileged QKEYs (git-fixes) - rdma/vmw_pvrdma: Remove unnecessary check on wr->opcode (git-fixes) - rdma: Handle the return code from dma_resv_wait_timeout() properly (git-fixes) - ref_tracker: use __GFP_NOFAIL more carefully (git-fixes). - regmap: Account for register length when chunking (git-fixes). - regmap: cache: Return error in cache sync operations for REGCACHE_NONE (git-fixes). - regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes). - regulator: Fix error checking for debugfs_create_dir (git-fixes). - regulator: Flag uncontrollable regulators as always_on (git-fixes). - regulator: Handle deferred clk (git-fixes). - regulator: core: Avoid lockdep reports when resolving supplies (git-fixes). - regulator: core: Consistently set mutex_owner when using ww_mutex_lock_slow() (git-fixes). - regulator: core: Fix more error checking for debugfs_create_dir() (git-fixes). - regulator: core: Fix off-on-delay-us for always-on/boot-on regulators (git-fixes). - regulator: core: Shorten off-on-delay-us for always-on/boot-on by time since booted (git-fixes). - regulator: core: Streamline debugfs operations (git-fixes). - regulator: core: Use ktime_get_boottime() to determine how long a regulator was off (git-fixes). - regulator: fan53555: Explicitly include bits header (git-fixes). - regulator: fan53555: Fix wrong TCS_SLEW_MASK (git-fixes). - regulator: helper: Document ramp_delay parameter of regulator_set_ramp_delay_regmap() (git-fixes). - regulator: max77802: Bounds check regulator id against opmode (git-fixes). - regulator: mt6359: add read check for PMIC MT6359 (git-fixes). - regulator: pca9450: Fix BUCK2 enable_mask (git-fixes). - regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes). - regulator: s5m8767: Bounds check id indexing into arrays (git-fixes). - regulator: stm32-pwr: fix of_iomap leak (git-fixes). - reiserfs: Add missing calls to reiserfs_security_free() (git-fixes). - reiserfs: Add security prefix to xattr name in reiserfs_security_write() (git-fixes). - remoteproc/mtk_scp: Move clk ops outside send_lock (git-fixes). - remoteproc: Harden rproc_handle_vdev() against integer overflow (git-fixes). - remoteproc: imx_rproc: Call of_node_put() on iteration error (git-fixes). - remoteproc: qcom_q6v5_mss: Use a carveout to authenticate modem headers (git-fixes). - remoteproc: st: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32: Call of_node_put() on iteration error (git-fixes). - remoteproc: stm32_rproc: Add mutex protection for workqueue (git-fixes). - remove 'PCI: hv: Use async probing to reduce boot time' (bsc#1207185). - rethook: Reject getting a rethook if RCU is not watching (git-fixes). - rethook: fix a potential memleak in rethook_alloc() (git-fixes). - rethook: use preempt_{disable, enable}_notrace in rethook_trampoline_handler (git-fixes). - revert 'squashfs: harden sanity check in squashfs_read_xattr_id_table' (git-fixes). - ring-buffer: Ensure proper resetting of atomic variables in ring_buffer_reset_online_cpus (git-fixes). - ring-buffer: Fix kernel-doc (git-fixes). - ring-buffer: Fix race while reader and writer are on the same page (git-fixes). - ring-buffer: Handle race between rb_move_tail and rb_check_pages (git-fixes). - ring-buffer: Sync IRQ works before buffer destruction (git-fixes). - ring-buffer: remove obsolete comment for free_buffer_page() (git-fixes). - rpm/check-for-config-changes: ignore also PAHOLE_HAS_* We now also have options like CONFIG_PAHOLE_HAS_LANG_EXCLUDE. - rpm/constraints.in: Increase disk size constraint for riscv64 to 52GB - rpm/kernel-binary.spec.in: Fix compatibility wth newer rpm - rpm/kernel-docs.spec.in: pass PYTHON=python3 to fix build error (bsc#1160435) - rpm/kernel-obs-build.spec.in: Remove SLE11 cruft - rpm/kernel-source.spec.in: Add patches.drm for moved DRM patches - rtc: allow rtc_read_alarm without read_alarm callback (git-fixes). - rtc: efi: Add wakeup support (bsc#1213116). - rtc: efi: Enable SET/GET WAKEUP services as optional (bsc#1213116). - rtc: efi: switch to devm_rtc_allocate_device (bsc#1213116). - rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current time (git-fixes). - rtc: omap: include header for omap_rtc_power_off_program prototype (git-fixes). - rtc: pm8xxx: fix set-alarm race (git-fixes). - rtc: st-lpc: Release some resources in st_rtc_probe() in case of error (git-fixes). - rtc: sun6i: Always export the internal oscillator (git-fixes). - rtmutex: Ensure that the top waiter is always woken up (git-fixes). - s390/ap: fix memory leak in ap_init_qci_info() (git-fixes). - s390/boot: simplify and fix kernel memory layout setup (bsc#1209600). - s390/ctcm: Fix return type of ctc{mp,}m_tx() (git-fixes bsc#1211686). - s390/dasd: Fix potential memleak in dasd_eckd_init() (git-fixes). - s390/dasd: Use correct lock while counting channel queue length (git-fixes bsc#1212592). - s390/dasd: fix hanging blockdevice after request requeue (git-fixes bsc#1211687). - s390/dasd: fix no record found for raw_track_access (bsc#1207574). - s390/extmem: return correct segment type in __segment_load() (bsc#1210450 git-fixes). - s390/gmap: voluntarily schedule during key setting (git-fixes bsc#1212892). - s390/kprobes: fix current_kprobe never cleared after kprobes reenter (git-fixes bsc#1211688). - s390/kprobes: fix irq mask clobbering on kprobe reenter from post_handler (git-fixes bsc#1211689). - s390/lcs: Fix return type of lcs_start_xmit() (git-fixes bsc#1211690). - s390/mem_detect: fix detect_memory() error handling (git-fixes bsc#1211691). - s390/netiucv: Fix return type of netiucv_tx() (git-fixes bsc#1211692). - s390/pkey: zeroize key blobs (git-fixes bsc#1212619). - s390/qdio: fix do_sqbs() inline assembly constraint (git-fixes bsc#1211693). - s390/qeth: fix use-after-free in hsci (bsc#1210449 git-fixes). - s390/uaccess: add missing earlyclobber annotations to __clear_user() (bsc#1209856 git-fixes). - s390/vdso: remove -nostdlib compiler flag (git-fixes bsc#1211714). - s390/vfio-ap: fix an error handling path in vfio_ap_mdev_probe_queue() (git-fixes). - s390/vfio-ap: fix memory leak in vfio_ap device driver (git-fixes). - sched, cpuset: Fix dl_cpu_busy() panic due to empty (git-fixes) - sched/core: Avoid obvious double update_rq_clock warning (git-fixes) - sched/core: Fix arch_scale_freq_tick() on tickless systems (git-fixes) - sched/core: Introduce sched_asym_cpucap_active() (git-fixes) - sched/deadline: Merge dl_task_can_attach() and dl_cpu_busy() (git-fixes) - sched/debug: fix dentry leak in update_sched_domain_debugfs (git-fixes) - sched/fair: Fix imbalance overflow (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Limit sched slice duration (bsc#1189999 (Scheduler functional and performance backports)). - sched/fair: Move calculate of avg_load to a better location (bsc#1155798 (CPU scheduler functional and performance backports)). - sched/fair: Sanitize vruntime of entity being migrated (bsc#1203325). - sched/fair: sanitize vruntime of entity being placed (bsc#1203325). - sched/numa: Stop an exhastive search if an idle core is found (bsc#1189999 (Scheduler functional and performance backports)). - sched/psi: Fix use-after-free in ep_remove_wait_queue() (bsc#1209799). - sched/tracing: Report TASK_RTLOCK_WAIT tasks as (git-fixes) - sched/uclamp: Make asym_fits_capacity() use util_fits_cpu() (git-fixes) - sched: Avoid double preemption in __cond_resched_*lock*() (git-fixes) - sched: Fix DEBUG && !SCHEDSTATS warn (git-fixes) - sched_getaffinity: do not assume 'cpumask_size()' is fully initialized (bsc#1155798 (CPU scheduler functional and performance backports)). - scsi: Revert 'scsi: core: map PQ=1, PDT=other values to SCSI_SCAN_TARGET_PRESENT' (git-fixes). - scsi: aacraid: Allocate cmd_priv with scsicmd (git-fixes). - scsi: aic94xx: Add missing check for dma_map_single() (git-fixes). - scsi: core: Add BLIST_NO_VPD_SIZE for some VDASD (git-fixes bsc#1203039) (renamed now that it's upstgream) - scsi: core: Add BLIST_SKIP_VPD_PAGES for SKhynix H28U74301AMR (git-fixes). - scsi: core: Decrease scsi_device's iorequest_cnt if dispatch failed (git-fixes). - scsi: core: Fix a procfs host directory removal regression (git-fixes). - scsi: core: Fix a source code comment (git-fixes). - scsi: core: Improve scsi_vpd_inquiry() checks (git-fixes). - scsi: core: Remove the /proc/scsi/${proc_name} directory earlier (git-fixes). - scsi: hisi_sas: Check devm_add_action() return value (git-fixes). - scsi: hisi_sas: Handle NCQ error when IPTT is valid (git-fixes). - scsi: hisi_sas: Revert change to limit max hw sectors for v3 HW (bsc#1210230). - scsi: hisi_sas: Set a port invalid only if there are no devices attached when refreshing port id (git-fixes). - scsi: hpsa: Fix allocation size for scsi_host_alloc() (git-fixes). - scsi: ipr: Work around fortify-string warning (git-fixes). - scsi: iscsi_tcp: Check that sock is valid before iscsi_set_param() (git-fixes). - scsi: iscsi_tcp: Fix UAF during login when accessing the shost ipaddress (git-fixes). - scsi: iscsi_tcp: Fix UAF during logout when accessing the shost ipaddress (git-fixes). - scsi: kABI workaround for fc_host_fpin_rcv (git-fixes). - scsi: libsas: Add sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Grab the ATA port lock in sas_ata_device_link_abort() (git-fixes). - scsi: libsas: Remove useless dev_list delete in sas_ex_discover_end_dev() (git-fixes). - scsi: lpfc: Add new RCQE status for handling DMA failures (bsc#1211847). - scsi: lpfc: Avoid usage of list iterator variable after loop (git-fixes). - scsi: lpfc: Check kzalloc() in lpfc_sli4_cgn_params_read() (git-fixes). - scsi: lpfc: Copyright updates for 14.2.0.10 patches (bsc#1208607). - scsi: lpfc: Copyright updates for 14.2.0.11 patches (bsc#1210943). - scsi: lpfc: Correct used_rpi count when devloss tmo fires with no recovery (bsc#1210943). - scsi: lpfc: Defer issuing new PLOGI if received RSCN before completing REG_LOGIN (bsc#1210943). - scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting() (bsc#1210943). - scsi: lpfc: Exit PRLI completion handling early if ndlp not in PRLI_ISSUE state (bsc#1208607). - scsi: lpfc: Fix double free in lpfc_cmpl_els_logo_acc() caused by lpfc_nlp_not_used() (bsc#1211847). - scsi: lpfc: Fix double word in comments (bsc#1210943). - scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup() (bsc#1210943). - scsi: lpfc: Fix lockdep warning for rx_monitor lock when unloading driver (bsc#1210943). - scsi: lpfc: Fix space indentation in lpfc_xcvr_data_show() (bsc#1208607). - scsi: lpfc: Fix use-after-free KFENCE violation during sysfs firmware write (bsc#1208607). - scsi: lpfc: Fix verbose logging for SCSI commands issued to SES devices (bsc#1211847). - scsi: lpfc: Introduce new attention types for lpfc_sli4_async_fc_evt() handler (bsc#1208607). - scsi: lpfc: Match lock ordering of lpfc_cmd->buf_lock and hbalock for abort paths (bsc#1211847). - scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer overflow (bsc#1210943). - scsi: lpfc: Record LOGO state with discovery engine even if aborted (bsc#1210943). - scsi: lpfc: Reinitialize internal VMID data structures after FLOGI completion (bsc#1208607). - scsi: lpfc: Remove duplicate ndlp kref decrement in lpfc_cleanup_rpis() (bsc#1208607 bsc#1208534). - scsi: lpfc: Remove redundant clean up code in disable_vport() (bsc#1208607). - scsi: lpfc: Reorder freeing of various DMA buffers and their list removal (bsc#1210943). - scsi: lpfc: Replace blk_irq_poll intr handler with threaded IRQ (bsc#1211847). - scsi: lpfc: Replace outdated strncpy() with strscpy() (bsc#1208607). - scsi: lpfc: Resolve miscellaneous variable set but not used compiler warnings (bsc#1208607). - scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation logic (bsc#1210943). - scsi: lpfc: Set max DMA segment size to HBA supported SGE length (bsc#1208607). - scsi: lpfc: Silence an incorrect device output (bsc#1210943). - scsi: lpfc: Skip waiting for register ready bits when in unrecoverable state (bsc#1210943). - scsi: lpfc: Update congestion warning notification period (bsc#1211847). - scsi: lpfc: Update lpfc version to 14.2.0.10 (bsc#1208607). - scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943). - scsi: lpfc: Update lpfc version to 14.2.0.12 (bsc#1211847). - scsi: megaraid: Fix mega_cmd_done() CMDID_INT_CMDS (git-fixes). - scsi: megaraid_sas: Fix crash after a double completion (git-fixes). - scsi: megaraid_sas: Fix fw_crash_buffer_show() (git-fixes). - scsi: megaraid_sas: Update max supported LD IDs to 240 (git-fixes). - scsi: mpi3mr: Fix issues in mpi3mr_get_all_tgt_info() (git-fixes). - scsi: mpi3mr: Fix missing mrioc->evtack_cmds initialization (git-fixes). - scsi: mpi3mr: Fix throttle_groups memory leak (git-fixes). - scsi: mpi3mr: Remove unnecessary memcpy() to alltgt_info->dmi (git-fixes). - scsi: mpi3mr: Suppress command reply debug prints (bsc#1211820). - scsi: mpt3sas: Do not print sense pool info twice (git-fixes). - scsi: mpt3sas: Fix NULL pointer access in mpt3sas_transport_port_add() (git-fixes). - scsi: mpt3sas: Fix a memory leak (git-fixes). - scsi: mpt3sas: Remove scsi_dma_map() error messages (git-fixes). - scsi: qedi: Fix use after free bug in qedi_remove() (git-fixes). - scsi: qla2xxx: Add option to disable FC2 Target support (bsc#1198438 bsc#1206103). - scsi: qla2xxx: Check if port is online before sending ELS (bsc#1208570). - scsi: qla2xxx: Drop redundant pci_enable_pcie_error_reporting() (bsc#1211960). - scsi: qla2xxx: Fix DMA-API call trace on NVMe LS requests (bsc#1208570). - scsi: qla2xxx: Fix IOCB resource check warning (bsc#1208570). - scsi: qla2xxx: Fix erroneous link down (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription (bsc#1208570). - scsi: qla2xxx: Fix exchange oversubscription for management commands (bsc#1208570). - scsi: qla2xxx: Fix hang in task management (bsc#1211960). - scsi: qla2xxx: Fix link failure in NPIV environment (bsc#1208570). - scsi: qla2xxx: Fix mem access after free (bsc#1211960). - scsi: qla2xxx: Fix memory leak in qla2x00_probe_one() (git-fixes). - scsi: qla2xxx: Fix printk() format string (bsc#1208570). - scsi: qla2xxx: Fix stalled login (bsc#1208570). - scsi: qla2xxx: Fix task management cmd fail due to unavailable resource (bsc#1211960). - scsi: qla2xxx: Fix task management cmd failure (bsc#1211960). - scsi: qla2xxx: Make qla_trim_buf() and __qla_adjust_buf() static (bsc#1208570). - scsi: qla2xxx: Multi-que support for TMF (bsc#1211960). - scsi: qla2xxx: Perform lockless command completion in abort path (git-fixes). - scsi: qla2xxx: Refer directly to the qla2xxx_driver_template (bsc#1211960). - scsi: qla2xxx: Relocate/rename vp map (bsc#1208570). - scsi: qla2xxx: Remove dead code (GNN ID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (GPNID) (bsc#1208570). - scsi: qla2xxx: Remove dead code (bsc#1208570). - scsi: qla2xxx: Remove default fabric ops callouts (bsc#1211960). - scsi: qla2xxx: Remove increment of interface err cnt (bsc#1208570). - scsi: qla2xxx: Remove the unused variable wwn (bsc#1208570). - scsi: qla2xxx: Remove unintended flag clearing (bsc#1208570). - scsi: qla2xxx: Replace all non-returning strlcpy() with strscpy() (bsc#1211960). - scsi: qla2xxx: Select qpair depending on which CPU post_cmd() gets called (bsc#1208570). - scsi: qla2xxx: Simplify if condition evaluation (bsc#1208570). - scsi: qla2xxx: Synchronize the IOCB count to be in order (bsc#1209292 bsc#1209684 bsc#1209556). - scsi: qla2xxx: Update version to 10.02.08.100-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.200-k (bsc#1208570). - scsi: qla2xxx: Update version to 10.02.08.300-k (bsc#1211960). - scsi: qla2xxx: Use a variable for repeated mem_size computation (bsc#1208570). - scsi: qla2xxx: Wait for io return on terminate rport (bsc#1211960). - scsi: qla2xxx: edif: Fix clang warning (bsc#1208570). - scsi: qla2xxx: edif: Fix performance dip due to lock contention (bsc#1208570). - scsi: qla2xxx: edif: Fix stall session after app start (bsc#1208570). - scsi: qla2xxx: edif: Reduce memory usage during low I/O (bsc#1208570). - scsi: scsi_dh_alua: Fix memleak for 'qdata' in alua_activate() (git-fixes). - scsi: scsi_ioctl: Validate command size (git-fixes). - scsi: scsi_transport_fc: Add an additional flag to fc_host_fpin_rcv() (bsc#1210943). - scsi: sd: Fix wrong zone_write_granularity value during revalidate (git-fixes). - scsi: sd: Revert 'Rework asynchronous resume support' (bsc#1209092). - scsi: ses: Do not attach if enclosure has no components (git-fixes). - scsi: ses: Fix possible addl_desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix possible desc_ptr out-of-bounds accesses (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_enclosure_data_process() (git-fixes). - scsi: ses: Fix slab-out-of-bounds in ses_intf_remove() (git-fixes). - scsi: ses: Handle enclosure with just a primary component gracefully (git-fixes). - scsi: smartpqi: Add controller cache flush during rmmod (bsc#1207315). - scsi: smartpqi: Add new controller PCI IDs (bsc#1207315). - scsi: smartpqi: Change sysfs raid_level attribute to N/A for controllers (bsc#1207315). - scsi: smartpqi: Change version to 2.1.20-035 (bsc#1207315). - scsi: smartpqi: Convert to host_tagset (bsc#1207315). - scsi: smartpqi: Correct device removal for multi-actuator devices (bsc#1207315). - scsi: smartpqi: Correct max LUN number (bsc#1207315). - scsi: smartpqi: Initialize feature section info (bsc#1207315). - scsi: smartpqi: Replace one-element array with flexible-array member (bsc#1207315). - scsi: snic: Fix memory leak with using debugfs_lookup() (git-fixes). - scsi: stex: Fix gcc 13 warnings (git-fixes). - scsi: storvsc: Correct reporting of Hyper-V I/O size limits (git-fixes). - scsi: storvsc: Do not pass unused PFNs to Hyper-V host (git-fixes). - scsi: storvsc: Handle BlockSize change in Hyper-V VHD/VHDX file (git-fixes). - scsi: tracing: Fix compile error in trace_array calls when TRACING is disabled (git-fixes). - scsi: ufs: Stop using the clock scaling lock in the error handler (git-fixes). - scsi: ufs: core: Enable link lost interrupt (git-fixes). - scsi_disk kABI: add back members (bsc#1209092). - sctp: fail if no bound addresses can be used for a given scope (bsc#1206677). - sctp: sctp_sock_filter(): avoid list_entry() on possibly empty list (bsc#1208602, git-fixes). - seccomp: Move copy_seccomp() to no failure path (bsc#1210817). - sefltests: netdevsim: wait for devlink instance after netns removal (git-fixes). - selftest/lkdtm: Skip stack-entropy test if lkdtm is not available (git-fixes). - selftests mount: Fix mount_setattr_test builds failed (git-fixes). - selftests/ftrace: Add check for ping command for trigger tests (bsc#1204993 ltc#200103). - selftests/ftrace: Convert tracer tests to use 'requires' to specify program dependency (bsc#1204993 ltc#200103). - selftests/kselftest/runner/run_one(): allow running non-executable files (git-fixes). - selftests/powerpc: Account for offline cpus in perf-hwbreak test (bsc#1206232). - selftests/powerpc: Bump up rlimit for perf-hwbreak test (bsc#1206232). - selftests/powerpc: Move perror closer to its use (bsc#1206232). - selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET (git-fixes). - selftests/resctrl: Allow ->setup() to return errors (git-fixes). - selftests/resctrl: Check for return value after write_schemata() (git-fixes). - selftests/resctrl: Extend CPU vendor detection (git-fixes). - selftests/resctrl: Move ->setup() call outside of test specific branches (git-fixes). - selftests/resctrl: Return NULL if malloc_and_init_memory() did not alloc mem (git-fixes). - selftests/sgx: Add 'test_encl.elf' to TEST_FILES (git-fixes). - selftests/vm: remove ARRAY_SIZE define from individual tests (git-fixes). - selftests: Provide local define of __cpuid_count() (git-fixes). - selftests: forwarding: lib: quote the sysctl values (git-fixes). - selftests: mptcp: connect: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: depend on SYN_COOKIES (git-fixes). - selftests: mptcp: pm nl: skip if MPTCP is not supported (git-fixes). - selftests: mptcp: sockopt: return error if wrong mark (git-fixes). - selftests: mptcp: sockopt: skip if MPTCP is not supported (git-fixes). - selftests: net: udpgso_bench: Fix racing bug between the rx/tx programs (git-fixes). - selftests: net: udpgso_bench_rx/tx: Stop when wrong CLI args are provided (git-fixes). - selftests: net: udpgso_bench_rx: Fix 'used uninitialized' compiler warning (git-fixes). - selftests: net: udpgso_bench_tx: Cater for pending datagrams zerocopy benchmarking (git-fixes). - selftests: seg6: disable DAD on IPv6 router cfg for srv6_end_dt4_l3vpn_test (git-fixes). - selftests: sigaltstack: fix -Wuninitialized (git-fixes). - selftests: srv6: make srv6_end_dt46_l3vpn_test more robust (git-fixes). - selftests: xsk: Disable IPv6 on VETH1 (git-fixes). - selftets: seg6: disable rp_filter by default in srv6_end_dt4_l3vpn_test (git-fixes). - selinux: do not use make's grouped targets feature yet (git-fixes). - selinux: ensure av_permissions.h is built when needed (git-fixes). - selinux: fix Makefile dependencies of flask.h (git-fixes). - serial: 8250: ASPEED_VUART: select REGMAP instead of depending on it (git-fixes). - serial: 8250: Add missing wakeup event reporting (git-fixes). - serial: 8250: Reinit port->pm on port specific driver unbind (git-fixes). - serial: 8250: SERIAL_8250_ASPEED_VUART should depend on ARCH_ASPEED (git-fixes). - serial: 8250: lock port for UART_IER access in omap8250_irq() (git-fixes). - serial: 8250: lock port for stop_rx() in omap8250_irq() (git-fixes). - serial: 8250: omap: Fix freeing of resources on failed register (git-fixes). - serial: 8250_bcm7271: Fix arbitration handling (git-fixes). - serial: 8250_bcm7271: balance clk_enable calls (git-fixes). - serial: 8250_bcm7271: fix leak in `brcmuart_probe` (git-fixes). - serial: 8250_dma: Fix DMA Rx rearm race (git-fixes). - serial: 8250_em: Fix UART port type (git-fixes). - serial: 8250_exar: Add support for USR298x PCI Modems (git-fixes). - serial: 8250_exar: derive nr_ports from PCI ID for Acces I/O cards (git-fixes). - serial: 8250_fsl: fix handle_irq locking (git-fixes). - serial: 8250_omap: Use force_suspend and resume for system suspend (git-fixes). - serial: 8250_tegra: Fix an error handling path in tegra_uart_probe() (git-fixes). - serial: Add support for Advantech PCI-1611U card (git-fixes). - serial: arc_uart: fix of_iomap leak in `arc_serial_probe` (git-fixes). - serial: atmel: do not enable IRQs prematurely (git-fixes). - serial: exar: Add support for Sealevel 7xxxC serial cards (git-fixes). - serial: fsl_lpuart: Fix comment typo (git-fixes). - serial: fsl_lpuart: fix RS485 RTS polariy inverse issue (git-fixes). - serial: lantiq: add missing interrupt ack (git-fixes). - serial: qcom-geni: fix console shutdown hang (git-fixes). - serial: qcom-geni: fix enabling deactivated interrupt (git-fixes). - serial: sc16is7xx: setup GPIO controller later in probe (git-fixes). - serial: stm32: re-introduce an irq flag condition in usart_receive_chars (git-fixes). - serial: tegra: Add missing clk_disable_unprepare() in tegra_uart_hw_init() (git-fixes). - sfc: Change VF mac via PF as first preference if available (git-fixes). - sfc: Fix module EEPROM reporting for QSFP modules (git-fixes). - sfc: Fix use-after-free due to selftest_work (git-fixes). - sfc: correctly advertise tunneled IPv6 segmentation (git-fixes). - sfc: disable RXFCS and RXALL features by default (git-fixes). - sfc: ef10: do not overwrite offload features at NIC reset (git-fixes). - sfc: fix TX channel offset when using legacy interrupts (git-fixes). - sfc: fix considering that all channels have TX queues (git-fixes). - sfc: fix null pointer dereference in efx_hard_start_xmit (git-fixes). - sfc: fix wrong tx channel offset with efx_separate_tx_channels (git-fixes). - sfc: include vport_id in filter spec hash and equal() (git-fixes). - signal handling: do not use BUG_ON() for debugging (bsc#1210439). - signal/s390: Use force_sigsegv in default_trap_handler (git-fixes bsc#1212861). - signal/seccomp: Refactor seccomp signal and coredump generation (git-fixes). - signal/vm86_32: Properly send SIGSEGV when the vm86 state cannot be saved (git-fixes). - signal/x86: In emulate_vsyscall force a signal instead of calling do_exit (git-fixes). - signal: Add SA_IMMUTABLE to ensure forced siganls do not get changed (bsc#1210816). - signal: Do not always set SA_IMMUTABLE for forced signals (bsc#1210816). - signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE (bsc#1210816). - signal: Implement force_fatal_sig (git-fixes). - smb3.1.1: add new tree connect ShareFlags (bsc#1193629). - smb3: Add missing locks to protect deferred close file list (git-fixes). - smb3: Close all deferred handles of inode in case of handle lease break (bsc#1193629). - smb3: Close deferred file handles in case of handle lease break (bsc#1193629). - smb3: Replace smb2pdu 1-element arrays with flex-arrays (bsc#1193629). - smb3: display debug information better for encryption (bsc#1193629). - smb3: drop reference to cfile before sending oplock break (bsc#1193629). - smb3: fix problem remounting a share after shutdown (bsc#1193629). - smb3: fix unusable share after force unmount failure (bsc#1193629). - smb3: force unmount was failing to close deferred close files (bsc#1193629). - smb3: improve parallel reads of large files (bsc#1193629). - smb3: lower default deferred close timeout to address perf regression (bsc#1193629). - smb3: make query_on_disk_id open context consistent and move to common code (bsc#1193629). - smb3: move some common open context structs to smbfs_common (bsc#1193629). - soc/fsl/qe: fix usb.c build errors (git-fixes). - soc/tegra: cbb: Use correct master_id mask for CBB NOC in Tegra194 (git-fixes). - soc: samsung: exynos-pmu: Re-introduce Exynos4212 support (git-fixes). - soc: ti: pm33xx: Fix refcount leak in am33xx_pm_probe (git-fixes). - soundwire: cadence: Do not overflow the command FIFOs (git-fixes). - soundwire: dmi-quirks: add new mapping for HP Spectre x360 (git-fixes). - soundwire: qcom: correct setting ignore bit on v1.5.1 (git-fixes). - soundwire: qcom: fix storing port config out-of-bounds (git-fixes). - soundwire: qcom: gracefully handle too many ports in DT (git-fixes). - spi: bcm-qspi: return error if neither hif_mspi nor mspi is available (git-fixes). - spi: bcm63xx-hsspi: Endianness fix for ARM based SoC (git-fixes). - spi: cadence-quadspi: fix suspend-resume implementations (git-fixes). - spi: dw: Fix wrong FIFO level setting for long xfers (git-fixes). - spi: dw: Round of n_bytes to power of 2 (git-fixes). - spi: dw_bt1: fix MUX_MMIO dependencies (git-fixes). - spi: fsl-dspi: avoid SCK glitches with continuous transfers (git-fixes). - spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes). - spi: lpspi: disable lpspi module irq in DMA mode (git-fixes). - spi: qup: Do not skip cleanup in remove's error path (git-fixes). - spi: qup: Request DMA before enabling clocks (git-fixes). - spi: spi-geni-qcom: Correct CS_TOGGLE bit in SPI_TRANS_CFG (git-fixes). - spi: spi-imx: fix MX51_ECSPI_* macros when cs > 3 (git-fixes). - spi: spi-imx: using pm_runtime_resume_and_get instead of pm_runtime_get_sync (git-fixes). - spi: spidev: remove debug messages that access spidev->spi without locking (git-fixes). - spi: synquacer: Fix timeout handling in synquacer_spi_transfer_one() (git-fixes). - spi: tegra210-quad: Fix combined sequence (bsc#1212584) - spi: tegra210-quad: Fix iterator outside loop (git-fixes). - spi: tegra210-quad: Fix validate combined sequence (git-fixes). - spi: tegra210-quad: Multi-cs support (bsc#1212584) - squashfs: harden sanity check in squashfs_read_xattr_id_table (git-fixes). - staging: emxx_udc: Add checks for dma_alloc_coherent() (git-fixes). - staging: iio: resolver: ads1210: fix config mode (git-fixes). - staging: mt7621-dts: change palmbus address to lower case (git-fixes). - staging: mt7621-dts: change some node hex addresses to lower case (git-fixes). - staging: octeon: delete my name from TODO contact (git-fixes). - staging: rtl8192e: Fix W_DISABLE# does not work after stop/start (git-fixes). - staging: rtl8192e: Remove call_usermodehelper starting RadioPower.sh (git-fixes). - staging: rtl8192e: Remove function ..dm_check_ac_dc_power calling a script (git-fixes). - staging: rtl8192e: Replace macro RTL_PCI_DEVICE with PCI_DEVICE (git-fixes). - stat: fix inconsistency between struct stat and struct compat_stat (git-fixes). - struct ci_hdrc: hide new member at end (git-fixes). - struct dwc3: mask new member (git-fixes). - struct uvc_device move flush_status new member to end (git-fixes). - sunrpc allow for unspecified transport time in rpc_clnt_add_xprt (git-fixes). - sunrpc: Clean up svc_deferred_class trace events (git-fixes). - sunrpc: Do not dereference xprt->snd_task if it's a cookie (git-fixes). - sunrpc: Do not leak netobj memory when gss_read_proxy_verf() fails (git-fixes). - sunrpc: Fix a server shutdown leak (git-fixes). - sunrpc: Fix missing release socket in rpc_sockname() (git-fixes). - sunrpc: Fix null-ptr-deref when xps sysfs alloc failed (git-fixes). - sunrpc: Fix potential race conditions in rpc_sysfs_xprt_state_change() (git-fixes). - sunrpc: Fix socket waits for write buffer space (git-fixes). - sunrpc: Return true/false (not 1/0) from bool functions (git-fixes). - sunrpc: Update trace flags (git-fixes). - sunrpc: Use BIT() macro in rpc_show_xprt_state() (git-fixes). - sunrpc: ensure the matching upcall is in-flight upon downcall (git-fixes). - sunrpc: fix breakage caused by introduction of rq_xprt_ctxt (bsc#1210775). - sunrpc: only free unix grouplist after RCU settles (git-fixes). - swim3: add missing major.h include (git-fixes). - swiotlb: Free tbl memory in swiotlb_exit() (jsc#PED-3259). - swiotlb: add a SWIOTLB_ANY flag to lift the low memory restriction (PED-3259). - swiotlb: avoid potential left shift overflow (PED-3259). - swiotlb: clean up some coding style and minor issues (PED-3259). - swiotlb: consolidate rounding up default_nslabs (PED-3259). - swiotlb: do not panic when the swiotlb buffer can't be allocated (PED-3259). - swiotlb: ensure a segment does not cross the area boundary (PED-3259). - swiotlb: fail map correctly with failed io_tlb_default_mem (PED-3259). - swiotlb: fix a typo (PED-3259). - swiotlb: fix passing local variable to debugfs_create_ulong() (PED-3259). - swiotlb: fix setting ->force_bounce (PED-3259). - swiotlb: fix use after free on error handling path (PED-3259). - swiotlb: make swiotlb_exit a no-op if SWIOTLB_FORCE is set (PED-3259). - swiotlb: make the swiotlb_init interface more useful (PED-3259). - swiotlb: merge swiotlb-xen initialization into swiotlb (jsc#PED-3259). - swiotlb: panic if nslabs is too small (PED-3259). - swiotlb: pass a gfp_mask argument to swiotlb_init_late (PED-3259). - swiotlb: provide swiotlb_init variants that remap the buffer (PED-3259). - swiotlb: relocate PageHighMem test away from rmem_swiotlb_setup (git-fixes). - swiotlb: remove a useless return in swiotlb_init (PED-3259). - swiotlb: remove swiotlb_init_with_tbl and swiotlb_init_late_with_tbl (PED-3259). - swiotlb: remove unused fields in io_tlb_mem (PED-3259). - swiotlb: rename swiotlb_late_init_with_default_size (PED-3259). - swiotlb: simplify debugfs setup (jsc#PED-3259). - swiotlb: simplify swiotlb_max_segment (PED-3259). - swiotlb: split up the global swiotlb lock (PED-3259). - swiotlb: use the right nslabs value in swiotlb_init_remap (PED-3259). - swiotlb: use the right nslabs-derived sizes in swiotlb_init_late (PED-3259). - sysctl: add a new register_sysctl_init() interface (bsc#1207328). - task_work: Decouple TIF_NOTIFY_SIGNAL and task_work (git-fixes). - task_work: Introduce task_work_pending (git-fixes). - test_firmware: Use kstrtobool() instead of strtobool() (git-fixes). - test_firmware: fix the memory leak of the allocated firmware buffer (git-fixes). - test_firmware: prevent race conditions by a correct implementation of locking (git-fixes). - test_firmware: return ENOMEM instead of ENOSPC on failed memory allocation (git-fixes). - thermal/core: Remove duplicate information when an error occurs (git-fixes). - thermal/drivers/hisi: Drop second sensor hi3660 (git-fixes). - thermal/drivers/sun8i: Fix some error handling paths in sun8i_ths_probe() (git-fixes). - thermal/drivers/tsens: Add compat string for the qcom,msm8960 (git-fixes). - thermal/drivers/tsens: Drop msm8976-specific defines (git-fixes). - thermal/drivers/tsens: Sort out msm8976 vs msm8956 data (git-fixes). - thermal/drivers/tsens: fix slope values for msm8939 (git-fixes). - thermal/drivers/tsens: limit num_sensors to 9 for msm8939 (git-fixes). - thermal: intel: BXT_PMIC: select REGMAP instead of depending on it (git-fixes). - thermal: intel: Fix unsigned comparison with less than zero (git-fixes). - thermal: intel: intel_pch: Add support for Wellsburg PCH (git-fixes). - thermal: intel: powerclamp: Fix cur_state for multi package system (git-fixes). - thermal: intel: quark_dts: fix error pointer dereference (git-fixes). - thunderbolt: Add missing UNSET_INBOUND_SBTX for retimer access (git-fixes). - thunderbolt: Call tb_check_quirks() after initializing adapters (git-fixes). - thunderbolt: Clear registers properly when auto clear isn't in use (bsc#1210165). - thunderbolt: Disable interrupt auto clear for rings (git-fixes). - thunderbolt: Mask ring interrupt on Intel hardware as well (bsc#1210165). - thunderbolt: Rename shadowed variables bit to interrupt_bit and auto_clear_bit (git-fixes). - thunderbolt: Use const qualifier for `ring_interrupt_index` (git-fixes). - thunderbolt: Use scale field when allocating USB3 bandwidth (git-fixes). - thunderbolt: dma_test: Use correct value for absent rings when creating paths (git-fixes). - timers: Prevent union confusion from unexpected (git-fixes) - tls: Skip tls_append_frag on zero copy size (git-fixes). - tools/iio/iio_utils:fix memory leak (git-fixes). - tools/virtio: compile with -pthread (git-fixes). - tools/virtio: fix the vringh test for virtio ring changes (git-fixes). - tools/virtio: fix virtio_test execution (git-fixes). - tools/virtio: initialize spinlocks in vring_test.c (git-fixes). - tools: bpftool: Remove invalid \' json escape (git-fixes). - tools: fix ARRAY_SIZE defines in tools and selftests hdrs (git-fixes). - tpm, tpm_tis: Claim locality before writing TPM_INT_ENABLE register (git-fixes). - tpm, tpm_tis: Disable interrupts if tpm_tis_probe_irq() failed (git-fixes). - tpm, tpm_tis: Request threaded interrupt handler (git-fixes). - tpm/eventlog: Do not abort tpm_read_log on faulty ACPI address (git-fixes). - tpm/tpm_tis: Disable interrupts for more Lenovo devices (git-fixes). - trace/hwlat: Do not start per-cpu thread if it is already running (git-fixes). - trace/hwlat: Do not wipe the contents of per-cpu thread data (git-fixes). - trace/hwlat: make use of the helper function kthread_run_on_cpu() (git-fixes). - trace_events_hist: add check for return value of 'create_hist_field' (git-fixes). - tracing/fprobe: Fix to check whether fprobe is registered correctly (git-fixes). - tracing/hist: Fix issue of losting command info in error_log (git-fixes). - tracing/hist: Fix out-of-bound write on 'action_data.var_ref_idx' (git-fixes). - tracing/hist: Fix wrong return value in parse_action_params() (git-fixes). - tracing/histograms: Allow variables to have some modifiers (git-fixes). - tracing/hwlat: Replace sched_setaffinity with set_cpus_allowed_ptr (git-fixes). - tracing/osnoise: Make osnoise_main to sleep for microseconds (git-fixes). - tracing/perf: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing/probe: trace_probe_primary_from_call(): checked list_first_entry (git-fixes). - tracing/probes: Handle system names with hyphens (git-fixes). - tracing/timer: Add missing hrtimer modes to decode_hrtimer_mode() (git-fixes). - tracing: Add '__rel_loc' using trace event macros (git-fixes). - tracing: Add DYNAMIC flag for dynamic events (git-fixes). - tracing: Add NULL checks for buffer in ring_buffer_free_read_page() (git-fixes). - tracing: Add trace_array_puts() to write into instance (git-fixes). - tracing: Add trace_event helper macros __string_len() and __assign_str_len() (git-fixes). - tracing: Avoid -Warray-bounds warning for __rel_loc macro (git-fixes). - tracing: Avoid adding tracer option before update_tracer_options (git-fixes). - tracing: Check field value in hist_field_name() (git-fixes). - tracing: Do not let histogram values have some modifiers (git-fixes). - tracing: Do not use out-of-sync va_list in event printing (git-fixes). - tracing: Ensure trace buffer is at least 4096 bytes large (git-fixes). - tracing: Fix a kmemleak false positive in tracing_map (git-fixes). - tracing: Fix complicated dependency of CONFIG_TRACER_MAX_TRACE (git-fixes). - tracing: Fix infinite loop in tracing_read_pipe on overflowed print_trace_line (git-fixes). - tracing: Fix issue of missing one synthetic field (git-fixes). - tracing: Fix mismatched comment in __string_len (git-fixes). - tracing: Fix permissions for the buffer_percent file (git-fixes). - tracing: Fix poll() and select() do not work on per_cpu trace_pipe and trace_pipe_raw (git-fixes). - tracing: Fix possible memory leak in __create_synth_event() error path (git-fixes). - tracing: Fix race where histograms can be called before the event (git-fixes). - tracing: Fix sleeping function called from invalid context on RT kernel (git-fixes). - tracing: Fix tp_printk option related with tp_printk_stop_on_boot (git-fixes). - tracing: Fix warning on variable 'struct trace_array' (git-fixes). - tracing: Fix wrong return in kprobe_event_gen_test.c (git-fixes). - tracing: Free error logs of tracing instances (git-fixes). - tracing: Have TRACE_DEFINE_ENUM affect trace event types as well (git-fixes). - tracing: Have event format check not flag %p* on __get_dynamic_array() (git-fixes, bsc#1212350). - tracing: Have syscall trace events use trace_event_buffer_lock_reserve() (git-fixes). - tracing: Have tracing_snapshot_instance_cond() write errors to the appropriate instance (git-fixes). - tracing: Have type enum modifications copy the strings (git-fixes). - tracing: Introduce helpers to safely handle dynamic-sized sockaddrs (git-fixes). - tracing: Make splice_read available again (git-fixes). - tracing: Make sure trace_printk() can output as soon as it can be used (git-fixes). - tracing: Make tp_printk work on syscall tracepoints (git-fixes). - tracing: Make tracepoint lockdep check actually test something (git-fixes). - tracing: Update print fmt check to handle new __get_sockaddr() macro (git-fixes, bsc#1212350). - tracing: Use alignof__(struct {type b;}) instead of offsetof() (git-fixes). - tracing: incorrect isolate_mote_t cast in mm_vmscan_lru_isolate (git-fixes). - tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH (git-fixes). - tty: fix out-of-bounds access in tty_driver_lookup_tty() (git-fixes). - tty: serial: fsl_lpuart: Fix the wrong RXWATER setting for rx dma case (git-fixes). - tty: serial: fsl_lpuart: adjust buffer length to the intended size (git-fixes). - tty: serial: fsl_lpuart: clear LPUART Status Register in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable Rx/Tx DMA in lpuart32_shutdown() (git-fixes). - tty: serial: fsl_lpuart: disable the CTS when send break signal (git-fixes). - tty: serial: fsl_lpuart: skip waiting for transmission complete when UARTCTRL_SBK is asserted (git-fixes). - tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break instead of UARTCTRL_SBK (git-fixes). - tty: serial: imx: Handle RS485 DE signal active high (git-fixes). - tty: serial: imx: disable Ageing Timer interrupt request irq (git-fixes). - tty: serial: imx: fix rs485 rx after tx (git-fixes). - tty: serial: qcom-geni-serial: stop operations in progress at shutdown (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() in case of error (git-fixes). - tty: serial: samsung_tty: Fix a memory leak in s3c24xx_serial_getclk() when iterating clk (git-fixes). - tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes). - tty: serial: sh-sci: Fix transmit end interrupt handler (git-fixes). - tun: annotate access to queue->trans_start (jsc#PED-370). - uas: Add US_FL_NO_REPORT_OPCODES for JMicron JMS583Gen 2 (git-fixes). - ubi: Fix failure attaching when vid_hdr offset equals to (sub)page size (bsc#1210584). - ubi: ensure that VID header offset + VID header size &lt;= alloc, size (bsc#1210584). - ubsan: no need to unset panic_on_warn in ubsan_epilogue() (bsc#1207328). - udf: Avoid double brelse() in udf_rename() (bsc#1213032). - udf: Check consistency of Space Bitmap Descriptor (bsc#1210771). - udf: Define EFSCORRUPTED error code (bsc#1213038). - udf: Detect system inodes linked into directory hierarchy (bsc#1213114). - udf: Discard preallocation before extending file with a hole (bsc#1213036). - udf: Do not bother looking for prealloc extents if i_lenExtents matches i_size (bsc#1213035). - udf: Do not bother merging very long extents (bsc#1213040). - udf: Do not update file length for failed writes to inline files (bsc#1213041). - udf: Fix a slab-out-of-bounds write bug in udf_find_entry() (bsc#1206649). - udf: Fix error handling in udf_new_inode() (bsc#1213112). - udf: Fix extending file within last block (bsc#1213037). - udf: Fix preallocation discarding at indirect extent boundary (bsc#1213034). - udf: Preserve link count of system files (bsc#1213113). - udf: Support splicing to file (bsc#1210770). - udf: Truncate added extents on failed expansion (bsc#1213039). - update internal module version number for cifs.ko (bsc#1193629). - usb-storage: fix deadlock when a scsi command timeouts more than once (git-fixes). - usb: acpi: add helper to check port lpm capability using acpi _DSM (git-fixes). - usb: cdns3: Fix issue with using incorrect PCI device function (git-fixes). - usb: cdns3: fix NCM gadget RX speed 20x slow than expection at iMX8QM (git-fixes). - usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes). - usb: cdnsp: Fixes issue with redundant Status Stage (git-fixes). - usb: cdnsp: changes PCI Device ID to fix conflict with CNDS3 driver (git-fixes). - usb: chipdea: core: fix return -EINVAL if request role is the same with current role (git-fixes). - usb: chipidea: core: fix possible concurrent when switch role (git-fixes). - usb: chipidea: fix memory leak with using debugfs_lookup() (git-fixes). - usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes). - usb: chipidea: imx: avoid unnecessary probe defer (git-fixes). - usb: core: Add routines for endpoint checks in old drivers (git-fixes). - usb: core: Do not hold device lock while reading the 'descriptors' sysfs file (git-fixes). - usb: core: add quirk for Alcor Link AK9563 smartcard reader (git-fixes). - usb: core: hub: disable autosuspend for TI TUSB8041 (git-fixes). - usb: dwc2: fix a devres leak in hw_enable upon suspend resume (git-fixes). - usb: dwc3-meson-g12a: Fix an error handling path in dwc3_meson_g12a_probe() (git-fixes). - usb: dwc3: Align DWC3_EP_* flag macros (git-fixes). - usb: dwc3: Fix a repeated word checkpatch warning (git-fixes). - usb: dwc3: Fix a typo in field name (git-fixes). - usb: dwc3: Fix ep0 handling when getting reset while doing control transfer (git-fixes). - usb: dwc3: core: Host wake up support from system suspend (git-fixes). - usb: dwc3: debugfs: Resume dwc3 before accessing registers (git-fixes). - usb: dwc3: drd: use helper to get role-switch-default-mode (git-fixes). - usb: dwc3: ep0: Do not prepare beyond Setup stage (git-fixes). - usb: dwc3: fix memory leak with using debugfs_lookup() (git-fixes). - usb: dwc3: fix runtime pm imbalance on probe errors (git-fixes). - usb: dwc3: fix runtime pm imbalance on unbind (git-fixes). - usb: dwc3: fix use-after-free on core driver unbind (git-fixes). - usb: dwc3: gadget: Add 1ms delay after end transfer command without IOC (git-fixes). - usb: dwc3: gadget: Change condition for processing suspend event (git-fixes). - usb: dwc3: gadget: Delay issuing End Transfer (git-fixes). - usb: dwc3: gadget: Execute gadget stop after halting the controller (git-fixes). - usb: dwc3: gadget: Improve dwc3_gadget_suspend() and dwc3_gadget_resume() (git-fixes). - usb: dwc3: gadget: Only End Transfer for ep0 data phase (git-fixes). - usb: dwc3: gadget: Propagate core init errors to UDC during pullup (git-fixes). - usb: dwc3: gadget: Reset num TRBs before giving back the request (git-fixes). - usb: dwc3: gadget: Stall and restart EP0 if host is unresponsive (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-M (git-fixes). - usb: dwc3: pci: add support for the Intel Meteor Lake-S (git-fixes). - usb: dwc3: qcom: Configure wakeup interrupts during suspend (git-fixes). - usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe() (git-fixes). - usb: dwc3: qcom: Fix memory leak in dwc3_qcom_interconnect_init (git-fixes). - usb: dwc3: qcom: Fix potential memory leak (git-fixes). - usb: dwc3: qcom: Keep power domain on to retain controller status (git-fixes). - usb: dwc3: qcom: Release the correct resources in dwc3_qcom_remove() (git-fixes). - usb: dwc3: qcom: clean up icc init (git-fixes). - usb: dwc3: qcom: clean up suspend callbacks (git-fixes). - usb: dwc3: qcom: enable vbus override when in OTG dr-mode (git-fixes). - usb: dwc3: qcom: fix NULL-deref on suspend (git-fixes). - usb: dwc3: qcom: fix gadget-only builds (git-fixes). - usb: dwc3: qcom: fix peripheral and OTG suspend (git-fixes). - usb: dwc3: qcom: fix wakeup implementation (git-fixes). - usb: dwc3: qcom: only parse 'maximum-speed' once (git-fixes). - usb: dwc3: qcom: suppress unused-variable warning (git-fixes). - usb: dwc3: remove a possible unnecessary 'out of memory' message (git-fixes). - usb: early: xhci-dbc: Fix a potential out-of-bound memory access (git-fixes). - usb: ene_usb6250: Allocate enough memory for full object (git-fixes). - usb: fix memory leak with using debugfs_lookup() (git-fixes). - usb: fotg210: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: bcm63xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: configfs: Restrict symlink creation is UDC already binded (git-fixes). - usb: gadget: configfs: remove using list iterator after loop body as a ptr (git-fixes). - usb: gadget: configfs: use to_config_usb_cfg() in os_desc_link() (git-fixes). - usb: gadget: configfs: use to_usb_function_instance() in cfg (un)link func (git-fixes). - usb: gadget: f_fs: Add unbind event before functionfs_unbind (git-fixes). - usb: gadget: f_fs: Fix unbalanced spinlock in __ffs_ep0_queue_wait (git-fixes). - usb: gadget: f_hid: fix f_hidg lifetime vs cdev (git-fixes). - usb: gadget: f_hid: fix refcount leak on error path (git-fixes). - usb: gadget: f_ncm: fix potential NULL ptr deref in ncm_bitrate() (git-fixes). - usb: gadget: f_uac2: Fix incorrect increment of bNumEndpoints (git-fixes). - usb: gadget: fusb300_udc: free irq on the error path in fusb300_probe() (git-fixes). - usb: gadget: gr_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: lpc32xx_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa25x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: pxa27x_udc: fix memory leak with using debugfs_lookup() (git-fixes). - usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes). - usb: gadget: u_audio: do not let userspace block driver unbind (git-fixes). - usb: gadget: u_ether: Fix host MAC address case (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_resume (git-fixes). - usb: gadget: u_serial: Add null pointer check in gserial_suspend (git-fixes). - usb: gadget: udc: do not clear gadget driver.bus (git-fixes). - usb: gadget: udc: fix NULL dereference in remove() (git-fixes). - usb: hide unused usbfs_notify_suspend/resume functions (git-fixes). - usb: host: xhci-rcar: remove leftover quirk handling (git-fixes). - usb: host: xhci: mvebu: Iterate over array indexes instead of using pointer math (git-fixes). - usb: isp116x: fix memory leak with using debugfs_lookup() (git-fixes). - usb: isp1362: fix memory leak with using debugfs_lookup() (git-fixes). - usb: max-3421: Fix setting of I/O pins (git-fixes). - usb: mtu3: fix kernel panic at qmu transfer done irq handler (git-fixes). - usb: musb: Add and use inline function musb_otg_state_string (git-fixes). - usb: musb: Add and use inline functions musb_{get,set}_state (git-fixes). - usb: musb: mediatek: do not unregister something that wasn't registered (git-fixes). - usb: musb: remove schedule work called after flush (git-fixes). - usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe() (git-fixes). - usb: serial: cp210x: add SCALANCE LPE-9000 device id (git-fixes). - usb: serial: cp210x: add Silicon Labs IFS-USB-DATACABLE IDs (git-fixes). - usb: serial: option: add Quectel EC200U modem (git-fixes). - usb: serial: option: add Quectel EM05-G (CS) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (GR) modem (git-fixes). - usb: serial: option: add Quectel EM05-G (RS) modem (git-fixes). - usb: serial: option: add Quectel EM05CN (SG) modem (git-fixes). - usb: serial: option: add Quectel EM05CN modem (git-fixes). - usb: serial: option: add Quectel EM061KGL series (git-fixes). - usb: serial: option: add Quectel RM500U-CN modem (git-fixes). - usb: serial: option: add Telit FE990 compositions (git-fixes). - usb: serial: option: add UNISOC vendor and TOZED LT70C product (git-fixes). - usb: serial: option: add support for VW/Skoda 'Carstick LTE' (git-fixes). - usb: sisusbvga: Add endpoint checks (git-fixes). - usb: sl811: fix memory leak with using debugfs_lookup() (git-fixes). - usb: typec: altmodes/displayport: Fix configure initial pin assignment (git-fixes). - usb: typec: altmodes/displayport: Fix probe pin assign check (git-fixes). - usb: typec: altmodes/displayport: fix pin_assignment_show (git-fixes). - usb: typec: intel_pmc_mux: Do not leak the ACPI device reference count (git-fixes). - usb: typec: intel_pmc_mux: Use the helper acpi_dev_get_memory_resources() (git-fixes). - usb: typec: pd: Remove usb_suspend_supported sysfs from sink PDO (git-fixes). - usb: typec: tcpm: fix create duplicate source-capabilities file (git-fixes). - usb: typec: tcpm: fix multiple times discover svids error (git-fixes). - usb: typec: tcpm: fix warning when handle discover_identity message (git-fixes). - usb: typec: ucsi: Do not attempt to resume the ports before they exist (git-fixes). - usb: typec: ucsi: Do not warn on probe deferral (git-fixes). - usb: typec: ucsi: Fix command cancellation (git-fixes). - usb: ucsi: Fix NULL pointer deref in ucsi_connector_change() (git-fixes). - usb: ucsi: Fix ucsi->connector race (git-fixes). - usb: ucsi_acpi: Increase the command completion timeout (git-fixes). - usb: uhci: adjust zhaoxin UHCI controllers OverCurrent bit value (git-fixes). - usb: uhci: fix memory leak with using debugfs_lookup() (git-fixes). - usb: usbfs: Enforce page requirements for mmap (git-fixes). - usb: usbfs: Use consistent mmap functions (git-fixes). - usb: usbtmc: Fix direction for 0-length ioctl control messages (git-fixes). - usb: uvc: Enumerate valid values for color matching (git-fixes). - usb: xhci: Remove unused udev from xhci_log_ctx trace event (git-fixes). - usb: xhci: tegra: fix sleep in atomic call (git-fixes). - usrmerge: Adjust module path in the kernel sources (bsc#1212835). With the module path adjustment applied as source patch only ALP/Tumbleweed kernel built on SLE/Leap needs the path changed back to non-usrmerged. - usrmerge: Compatibility with earlier rpm (boo#1211796) - vDPA: check VIRTIO_NET_F_RSS for max_virtqueue_paris's presence (jsc#PED-1549). - vDPA: check virtio device features to detect MQ (jsc#PED-1549). - vDPA: fix 'cast to restricted le16' warnings in vdpa.c (jsc#PED-1549). - vc_screen: do not clobber return value in vcs_read (git-fixes). - vc_screen: modify vcs_size() handling in vcs_read() (git-fixes). - vc_screen: move load of struct vc_data pointer in vcs_read() to avoid UAF (git-fixes). - vc_screen: reload load of struct vc_data pointer in vcs_write() to avoid UAF (git-fixes). - vdpa/ifcvf: fix the calculation of queuepair (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#PED-1549). - vdpa/mlx5: Directly assign memory key (jsc#SLE-19253). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#PED-1549). - vdpa/mlx5: Do not clear mr struct on destroy MR (jsc#SLE-19253). - vdpa/mlx5: Fix rule forwarding VLAN to TIR (jsc#PED-1549). - vdpa/mlx5: Fix wrong configuration of virtio_version_1_0 (jsc#SLE-19253). - vdpa/mlx5: Fix wrong mac address deletion (jsc#PED-1549). - vdpa/mlx5: Initialize CVQ iotlb spinlock (jsc#PED-1549). - vdpa/mlx5: should not activate virtq object when suspended (jsc#PED-1549). - vdpa/vp_vdpa: fix kfree a wrong pointer in vp_vdpa_remove (git-fixes). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#PED-1549). - vdpa: Fix error logic in vdpa_nl_cmd_dev_get_doit (jsc#SLE-19253). - vdpa: Use BIT_ULL for bit operations (jsc#PED-1549). - vdpa: conditionally fill max max queue pair for stats (jsc#PED-1549). - vdpa: fix use-after-free on vp_vdpa_remove (git-fixes). - vdpa_sim: not reset state in vdpasim_queue_ready (git-fixes). - vdpa_sim: set last_used_idx as last_avail_idx in vdpasim_queue_ready (git-fixes). - vduse: Fix NULL pointer dereference on sysfs access (jsc#PED-1549). - vduse: Fix returning wrong type in vduse_domain_alloc_iova() (jsc#PED-1549). - vduse: avoid empty string for dev name (jsc#PED-1549). - vduse: check that offset is within bounds in get_config() (jsc#PED-1549). - vduse: fix memory corruption in vduse_dev_ioctl() (jsc#PED-1549). - vduse: prevent uninitialized memory accesses (jsc#PED-1549). - vfio/type1: prevent underflow of locked_vm via exec() (git-fixes). - vfio/type1: restore locked_vm (git-fixes). - vfio/type1: track locked_vm per dma (git-fixes). - vfs: Check the truncate maximum size in inode_newsize_ok() (bsc#1207642). - vfs: filename_create(): fix incorrect intent (bsc#1197534). - vfs: make sync_filesystem return errors from ->sync_fs (git-fixes). - vhost-vdpa: fix an iotlb memory leak (jsc#PED-1549). - vhost-vdpa: free iommu domain after last use during cleanup (jsc#PED-1549). - vhost/net: Clear the pending messages when the backend is removed (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (jsc#PED-1549). - vhost_vdpa: fix unmap process in no-batch mode (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#PED-1549). - vhost_vdpa: support PACKED when setting-getting vring_base (jsc#SLE-19253). - virt/coco/sev-guest: Add throttling awareness (bsc#1209927). - virt/coco/sev-guest: Carve out the request issuing logic into a helper (bsc#1209927). - virt/coco/sev-guest: Check SEV_SNP attribute at probe time (bsc#1209927). - virt/coco/sev-guest: Convert the sw_exit_info_2 checking to a switch-case (bsc#1209927). - virt/coco/sev-guest: Do some code style cleanups (bsc#1209927). - virt/coco/sev-guest: Remove the disable_vmpck label in handle_guest_request() (bsc#1209927). - virt/coco/sev-guest: Simplify extended guest request handling (bsc#1209927). - virt/sev-guest: Add a MODULE_ALIAS (bsc#1208449). - virt/sev-guest: Prevent IV reuse in the SNP guest driver (bsc#1208449). - virt/sev-guest: Remove unnecessary free in init_crypto() (bsc#1208449). - virt/sev-guest: Return -EIO if certificate buffer is not large enough (bsc#1209927). - virt: sev-guest: Pass the appropriate argument type to iounmap() (bsc#1208449). - virt: sevguest: Change driver name to reflect generic SEV support (bsc#1208449). - virt: sevguest: Rename the sevguest dir and files to sev-guest (bsc#1208449). - virtio-blk: modify the value type of num in virtio_queue_rq() (git-fixes). - virtio-net: Keep stop() to follow mirror sequence of open() (git-fixes). - virtio-net: execute xdp_do_flush() before napi_complete_done() (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: bugfix overflow inside xdp_linearize_page() (git-fixes). - virtio_net: split free_unused_bufs() (git-fixes). - virtio_net: suppress cpu stall when free_unused_bufs (git-fixes). - virtio_pci: modify ENOENT to EINVAL (git-fixes). - virtio_ring: do not update event idx on get_buf (git-fixes). - vmci: check context->notify_page after call to get_user_pages_fast() to avoid GPF (git-fixes). - vmci_host: fix a race condition in vmci_host_poll() causing GPF (git-fixes). - vmxnet3: move rss code block under eop descriptor (bsc#1208212). - vmxnet3: use gro callback when UPT is enabled (bsc#1209739). - vp_vdpa: fix the crash in hot unplug with vp_vdpa (git-fixes). - w1: fix loop in w1_fini() (git-fixes). - w1: w1_therm: fix locking behavior in convert_t (git-fixes). - wait: Fix __wait_event_hrtimeout for RT/DL tasks (git-fixes) - watch_queue: fix IOC_WATCH_QUEUE_SET_SIZE alloc error paths (bsc#1197617). - watchdog: Fix kmemleak in watchdog_cdev_register (git-fixes). - watchdog: allow building BCM7038_WDT for BCM4908 (bsc#1208619). - watchdog: at91sam9_wdt: use devm_request_irq to avoid missing free_irq() in error path (git-fixes). - watchdog: diag288_wdt: do not use stack buffers for hardware data (bsc#1207497). - watchdog: diag288_wdt: fix __diag288() inline assembly (bsc#1207497). - watchdog: dw_wdt: Fix the error handling path of dw_wdt_drv_probe() (git-fixes). - watchdog: ixp4xx: Implement restart (bsc#1208619). - watchdog: ixp4xx: Rewrite driver to use core (bsc#1208619). - watchdog: ixp4xx_wdt: Fix address space warning (bsc#1208619). - watchdog: menz069_wdt: fix watchdog initialisation (git-fixes). - watchdog: orion_wdt: support pretimeout on Armada-XP (bsc#1208619). - watchdog: pcwd_usb: Fix attempting to access uninitialized memory (git-fixes). - watchdog: sbsa_wdog: Make sure the timeout programming is within the limits (git-fixes). - watchdog: sp5100_tco: Immediately trigger upon starting (git-fixes). - wifi: ath11k: Fix SKB corruption in REO destination ring (git-fixes). - wifi: ath11k: Fix memory leak in ath11k_peer_rx_frag_setup (git-fixes). - wifi: ath11k: allow system suspend to survive ath11k (git-fixes). - wifi: ath11k: fix SAC bug on peer addition with sta band migration (git-fixes). - wifi: ath11k: fix deinitialization of firmware resources (git-fixes). - wifi: ath11k: fix writing to unintended memory region (git-fixes). - wifi: ath11k: reduce the MHI timeout to 20s (bsc#1207948). - wifi: ath5k: fix an off by one check in ath5k_eeprom_read_freq_list() (git-fixes). - wifi: ath6kl: minor fix for allocation size (git-fixes). - wifi: ath6kl: reduce WARN to dev_dbg() in callback (git-fixes). - wifi: ath9k: Fix possible stall on ath9k_txq_list_has_key() (git-fixes). - wifi: ath9k: Fix potential stack-out-of-bounds write in ath9k_wmi_rsp_callback() (git-fixes). - wifi: ath9k: Fix use-after-free in ath9k_hif_usb_disconnect() (git-fixes). - wifi: ath9k: avoid referencing uninit memory in ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: convert msecs to jiffies where needed (git-fixes). - wifi: ath9k: do not allow to overwrite ENDPOINT0 attributes (git-fixes). - wifi: ath9k: fix AR9003 mac hardware hang check register offset calculation (git-fixes). - wifi: ath9k: hif_usb: clean up skbs if ath9k_hif_usb_rx_stream() fails (git-fixes). - wifi: ath9k: hif_usb: fix memory leak of remain_skbs (git-fixes). - wifi: ath9k: htc_hst: free skb in ath9k_htc_rx_msg() if there is no callback function (git-fixes). - wifi: ath9k: use proper statements in conditionals (git-fixes). - wifi: ath: Silence memcpy run-time false positive warning (git-fixes). - wifi: atmel: Fix an error handling path in atmel_probe() (git-fixes). - wifi: b43: fix incorrect __packed annotation (git-fixes). - wifi: brcmfmac: Fix potential stack-out-of-bounds in brcmf_c_preinit_dcmds() (git-fixes). - wifi: brcmfmac: cfg80211: Pass the PMK in binary instead of hex (git-fixes). - wifi: brcmfmac: ensure CLM version is null-terminated to prevent stack-out-of-bounds (git-fixes). - wifi: brcmfmac: fix potential memory leak in brcmf_netdev_start_xmit() (git-fixes). - wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies() (git-fixes). - wifi: brcmfmac: support CQM RSSI notification with older firmware (git-fixes). - wifi: brcmfmac: unmap dma buffer in brcmf_msgbuf_alloc_pktid() (git-fixes). - wifi: cfg80211: Fix extended KCK key length check in nl80211_set_rekey_data() (git-fixes). - wifi: cfg80211: Fix use after free for wext (git-fixes). - wifi: cfg80211: Partial revert 'wifi: cfg80211: Fix use after free for wext' (git-fixes). - wifi: cfg80211: fix locking in regulatory disconnect (git-fixes). - wifi: cfg80211: fix locking in sched scan stop work (git-fixes). - wifi: cfg80211: rewrite merging of inherited elements (git-fixes). - wifi: ipw2200: fix memory leak in ipw_wdev_init() (git-fixes). - wifi: ipw2x00: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwl3945: Add missing check for create_singlethread_workqueue (git-fixes). - wifi: iwl4965: Add missing check for create_singlethread_workqueue() (git-fixes). - wifi: iwlegacy: common: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: iwlwifi: debug: fix crash in __iwl_err() (git-fixes). - wifi: iwlwifi: dvm: Fix memcpy: detected field-spanning write backtrace (git-fixes). - wifi: iwlwifi: fix OEM's name in the ppag approved list (git-fixes). - wifi: iwlwifi: fix duplicate entry in iwl_dev_info_table (git-fixes). - wifi: iwlwifi: fw: fix DBGI dump (git-fixes). - wifi: iwlwifi: fw: fix memory leak in debugfs (git-fixes). - wifi: iwlwifi: fw: move memset before early return (git-fixes). - wifi: iwlwifi: make the loop for card preparation effective (git-fixes). - wifi: iwlwifi: mvm: check firmware response size (git-fixes). - wifi: iwlwifi: mvm: do not set CHECKSUM_COMPLETE for unsupported protocols (git-fixes). - wifi: iwlwifi: mvm: do not trust firmware n_channels (git-fixes). - wifi: iwlwifi: mvm: fix OEM's name in the tas approved list (git-fixes). - wifi: iwlwifi: mvm: fix cancel_delayed_work_sync() deadlock (git-fixes). - wifi: iwlwifi: mvm: fix mvmtxq->stopped handling (git-fixes). - wifi: iwlwifi: mvm: indicate HW decrypt for beacon protection (git-fixes). - wifi: iwlwifi: mvm: initialize seq variable (git-fixes). - wifi: iwlwifi: pcie: Fix integer overflow in iwl_write_to_user_buf (git-fixes). - wifi: iwlwifi: pcie: fix NULL pointer dereference in iwl_pcie_irq_rx_msix_handler() (git-fixes). - wifi: iwlwifi: pcie: fix possible NULL pointer dereference (git-fixes). - wifi: iwlwifi: pull from TXQs with softirqs disabled (git-fixes). - wifi: iwlwifi: trans: do not trigger d3 interrupt twice (git-fixes). - wifi: iwlwifi: yoyo: Fix possible division by zero (git-fixes). - wifi: iwlwifi: yoyo: skip dump correctly on hw error (git-fixes). - wifi: libertas: cmdresp: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: fix memory leak in lbs_init_adapter() (git-fixes). - wifi: libertas: if_usb: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas: main: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: libertas_tf: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: mac80211: Set TWT Information Frame Disabled bit as 1 (bsc#1209980). - wifi: mac80211: adjust scan cancel comment/check (git-fixes). - wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for non-uploaded sta (git-fixes). - wifi: mac80211: fix min center freq offset tracing (git-fixes). - wifi: mac80211: fix qos on mesh interfaces (git-fixes). - wifi: mac80211: make rate u32 in sta_set_rate_info_rx() (git-fixes). - wifi: mac80211: sdata can be NULL during AMPDU start (git-fixes). - wifi: mac80211: simplify chanctx allocation (git-fixes). - wifi: mt7601u: fix an integer underflow (git-fixes). - wifi: mt76: add flexible polling wait-interval support (git-fixes). - wifi: mt76: add memory barrier to SDIO queue kick (bsc#1209980). - wifi: mt76: add missing locking to protect against concurrent rx/status calls (git-fixes). - wifi: mt76: connac: fix possible unaligned access in mt76_connac_mcu_add_nested_tlv (bsc#1209980). - wifi: mt76: dma: free rx_head in mt76_dma_rx_cleanup (git-fixes). - wifi: mt76: do not run mt76_unregister_device() on unregistered hw (bsc#1209980). - wifi: mt76: fix 6GHz high channel not be scanned (git-fixes). - wifi: mt76: fix receiving LLC packets on mt7615/mt7915 (bsc#1209980). - wifi: mt76: handle failure of vzalloc in mt7615_coredump_work (git-fixes). - wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll (git-fixes). - wifi: mt76: mt7915: add missing of_node_put() (bsc#1209980). - wifi: mt76: mt7915: call mt7915_mcu_set_thermal_throttling() only after init_work (bsc#1209980). - wifi: mt76: mt7915: check return value before accessing free_block_num (bsc#1209980). - wifi: mt76: mt7915: drop always true condition of __mt7915_reg_addr() (bsc#1209980). - wifi: mt76: mt7915: expose device tree match table (git-fixes). - wifi: mt76: mt7915: fix mcs value in ht mode (bsc#1209980). - wifi: mt76: mt7915: fix memory leak in mt7915_mcu_exit (git-fixes). - wifi: mt76: mt7915: fix mt7915_mac_set_timing() (bsc#1209980). - wifi: mt76: mt7915: fix possible unaligned access in mt7915_mac_add_twt_setup (bsc#1209980). - wifi: mt76: mt7915: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7915: fix unintended sign extension of mt7915_hw_queue_read() (bsc#1209980). - wifi: mt76: mt7921: fix missing unwind goto in `mt7921u_probe` (git-fixes). - wifi: mt76: mt7921: fix reporting of TX AGGR histogram (git-fixes). - wifi: mt76: mt7921e: Set memory space enable in PCI_COMMAND if unset (git-fixes). - wifi: mt76: mt7921e: fix crash in chip reset fail (bsc#1209980). - wifi: mt76: mt7921e: fix probe timeout after reboot (git-fixes). - wifi: mt76: mt7921e: fix random fw download fail (git-fixes). - wifi: mt76: mt7921e: fix rmmod crash in driver reload test (bsc#1209980). - wifi: mt76: mt7921e: improve reliability of dma reset (git-fixes). - wifi: mt76: mt7921e: stop chip reset worker in unregister hook (git-fixes). - wifi: mt76: mt7921s: fix race issue between reset and suspend/resume (bsc#1209980). - wifi: mt76: mt7921s: fix slab-out-of-bounds access in sdio host (bsc#1209980). - wifi: mwifiex: Add missing compatible string for SD8787 (git-fixes). - wifi: mwifiex: Fix the size of a memory allocation in mwifiex_ret_802_11_scan() (git-fixes). - wifi: mwifiex: fix loop iterator in mwifiex_update_ampdu_txwinsize() (git-fixes). - wifi: mwifiex: mark OF related data as maybe unused (git-fixes). - wifi: orinoco: Fix an error handling path in orinoco_cs_probe() (git-fixes). - wifi: orinoco: Fix an error handling path in spectrum_cs_probe() (git-fixes). - wifi: orinoco: check return value of hermes_write_wordrec() (git-fixes). - wifi: rsi: Do not configure WoWlan in shutdown hook if not enabled (git-fixes). - wifi: rsi: Do not set MMC_PM_KEEP_POWER in shutdown (git-fixes). - wifi: rsi: Fix memory leak in rsi_coex_attach() (git-fixes). - wifi: rt2x00: Fix memory leak when handling surveys (git-fixes). - wifi: rtl8xxxu: Fix memory leaks with RTL8723BU, RTL8192EU (git-fixes). - wifi: rtl8xxxu: RTL8192EU always needs full init (git-fixes). - wifi: rtl8xxxu: Use a longer retry limit of 48 (git-fixes). - wifi: rtl8xxxu: do not call dev_kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtl8xxxu: fix authentication timeout due to incorrect RCR value (git-fixes). - wifi: rtl8xxxu: fixing transmisison failure for rtl8192eu (git-fixes). - wifi: rtlwifi: Fix global-out-of-bounds bug in _rtl8812ae_phy_set_txpower_limit() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_reg() (git-fixes). - wifi: rtlwifi: fix incorrect error codes in rtl_debugfs_set_write_rfreg() (git-fixes). - wifi: rtlwifi: rtl8188ee: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8723be: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtlwifi: rtl8821ae: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_mac_power_switch() (git-fixes). - wifi: rtw88: mac: Return the original error from rtw_pwr_seq_parser() (git-fixes). - wifi: rtw89: Add missing check for alloc_workqueue (git-fixes). - wifi: rtw89: fix potential race condition between napi_init and napi_enable (git-fixes). - wifi: wilc1000: fix for absent RSN capabilities WFA testcase (git-fixes). - wifi: wilc1000: fix potential memory leak in wilc_mac_xmit() (git-fixes). - wifi: wl3501_cs: do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - wireguard: ratelimiter: use hrtimer in selftest (git-fixes) - workqueue: Fix hung time report of worker pools (bsc#1211044). - workqueue: Interrupted create_worker() is not a repeated event (bsc#1211044). - workqueue: Print backtraces from CPUs with hung CPU bound workqueues (bsc#1211044). - workqueue: Warn when a new worker could not be created (bsc#1211044). - workqueue: Warn when a rescuer could not be created (bsc#1211044). - writeback, cgroup: fix null-ptr-deref write in bdi_split_work_to_wbs (bsc#1210769). - writeback: avoid use-after-free after removing device (bsc#1207638). - writeback: fix call of incorrect macro (bsc#1213024). - writeback: fix dereferencing NULL mapping->host on writeback_page_template (git-fixes). - x86, sched: Fix undefined reference to init_freq_invariance_cppc() build error (git-fixes). - x86/64/mm: Map all kernel memory into trampoline_pgd (git-fixes). - x86/ACPI/boot: Use FADT version to check support for online capable (git-fixes). - x86/MCE/AMD: Clear DFR errors found in THR handler (git-fixes). - x86/MCE/AMD: Fix memory leak when threshold_create_bank() fails (git-fixes). - x86/MCE/AMD: Use an u64 for bank_map (git-fixes). - x86/PAT: Have pat_enabled() properly reflect state when running on Xen (git-fixes). - x86/PCI: Add quirk for AMD XHCI controller that loses MSI-X state in D3hot (git-fixes). - x86/acpi/boot: Correct acpi_is_processor_usable() check (git-fixes). - x86/acpi/boot: Do not register processors that cannot be onlined for x2APIC (git-fixes). - x86/alternative: Make debug-alternative selective (bsc#1206578). - x86/alternative: Report missing return thunk details (git-fixes). - x86/alternative: Support relocations in alternatives (bsc#1206578). - x86/amd: Use IBPB for firmware calls (git-fixes). - x86/amd_nb: Add AMD PCI IDs for SMN communication (bsc#1208848). - x86/asm: Fix an assembler warning with current binutils (git-fixes). - x86/boot: Avoid using Intel mnemonics in AT&T syntax asm (git-fixes). - x86/boot: Skip realmode init code when running as Xen PV guest (git-fixes). - x86/bug: Merge annotate_reachable() into _BUG_FLAGS() asm (git-fixes). - x86/bug: Prevent shadowing in __WARN_FLAGS (git-fixes). - x86/bugs: Add 'unknown' reporting for MMIO Stale Data (git-fixes). - x86/bugs: Do not enable IBPB at firmware entry when IBPB is not available (git-fixes). - x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes). - x86/bugs: Warn when 'ibrs' mitigation is selected on Enhanced IBRS parts (git-fixes). - x86/build: Avoid relocation information in final vmlinux (bsc#1187829). - x86/cpu: Add CPU model numbers for Meteor Lake (git fixes). - x86/cpu: Add Raptor Lake to Intel family (git fixes). - x86/cpu: Add new Alderlake and Raptorlake CPU model numbers (git fixes). - x86/cpu: Add new Raptor Lake CPU model number (git fixes). - x86/cpu: Add several Intel server CPU model numbers (git fixes). - x86/cpu: Drop spurious underscore from RAPTOR_LAKE #define (git fixes). - x86/cpu: Switch to arch_cpu_finalize_init() (bsc#1212448). - x86/cpufeatures: Introduce x2AVIC CPUID bit (bsc#1208619). - x86/crash: Disable virt in core NMI crash handler to avoid double shootdown (git-fixes). - x86/delay: Fix the wrong asm constraint in delay_loop() (git-fixes). - x86/entry: Avoid very early RET (git-fixes). - x86/entry: Build thunk_$(BITS) only if CONFIG_PREEMPTION=y (git-fixes). - x86/entry: Do not call error_entry() for XENPV (git-fixes). - x86/entry: Move CLD to the start of the idtentry macro (git-fixes). - x86/entry: Move PUSH_AND_CLEAR_REGS out of error_entry() (git-fixes). - x86/entry: Switch the stack after error_entry() returns (git-fixes). - x86/fault: Cast an argument to the proper address space in prefetch() (git-fixes). - x86/fpu/xsave: Handle compacted offsets correctly with supervisor states (git-fixes). - x86/fpu/xsave: Initialize offset/size cache early (bsc#1211205). - x86/fpu/xstate: Fix the ARCH_REQ_XCOMP_PERM implementation (git-fixes). - x86/fpu: Cache xfeature flags from CPUID (git-fixes). - x86/fpu: Fix copy_xstate_to_uabi() to copy init states correctly (git-fixes). - x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes). - x86/fpu: Mark init functions __init (bsc#1212448). - x86/fpu: Move FPU initialization into arch_cpu_finalize_init() (bsc#1212448). - x86/fpu: Prevent FPU state corruption (git-fixes). - x86/fpu: Remove cpuinfo argument from init functions (bsc#1212448). - x86/fpu: Remove unused supervisor only offsets (git-fixes). - x86/fpu: Use _Alignof to avoid undefined behavior in TYPE_ALIGN (git-fixes). - x86/hyperv: Block root partition functionality in a Confidential VM (git-fixes). - x86/hyperv: Introduce HV_MAX_SPARSE_VCPU_BANKS/HV_VCPUS_PER_SPARSE_BANK constants (git-fixes). - x86/hyperv: Remove unregister syscore call from Hyper-V cleanup (git-fixes). - x86/hyperv: Restore VP assist page after cpu offlining/onlining (git-fixes). - x86/init: Initialize signal frame size late (bsc#1212448). - x86/kprobes: Fix __recover_optprobed_insn check optimizing logic (git-fixes). - x86/kprobes: Fix arch_check_optimized_kprobe check within optimized_kprobe range (git-fixes). - x86/kprobes: Fix kprobes instruction boudary check with CONFIG_RETHUNK (git-fixes). - x86/kprobes: Fix optprobe optimization check with CONFIG_RETHUNK (git-fixes). - x86/kvm: Do not use pv tlb/ipi/sched_yield if on 1 vCPU (git-fixes). - x86/kvm: Preserve BSP MSR_KVM_POLL_CONTROL across suspend/resume (git-fixes). - x86/kvm: Remove unused virt to phys translation in kvm_guest_cpu_init() (git-fixes). - x86/lib/memmove: Decouple ERMS from FSRM (bsc#1206578). - x86/mce/inject: Avoid out-of-bounds write when setting flags (git-fixes). - x86/mce: Allow instrumentation during task work queueing (git-fixes). - x86/mce: Mark mce_end() noinstr (git-fixes). - x86/mce: Mark mce_panic() noinstr (git-fixes). - x86/mce: Mark mce_read_aux() noinstr (git-fixes). - x86/mce: relocate set{clear}_mce_nospec() functions (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/microcode/AMD: Add a @cpu parameter to the reloading functions (git-fixes). - x86/microcode/AMD: Fix mixed steppings support (git-fixes). - x86/microcode/AMD: Track patch allocation size explicitly (git-fixes). - x86/microcode/amd: Remove load_microcode_amd()'s bsp parameter (git-fixes). - x86/microcode/intel: Do not retry microcode reloading on the APs (git-fixes). - x86/microcode: Add a parameter to microcode_check() to store CPU capabilities (git-fixes). - x86/microcode: Add explicit CPU vendor dependency (git-fixes). - x86/microcode: Adjust late loading result reporting message (git-fixes). - x86/microcode: Check CPU capabilities after late microcode update correctly (git-fixes). - x86/microcode: Print previous version of microcode after reload (git-fixes). - x86/microcode: Rip out the OLD_INTERFACE (git-fixes). - x86/mm: Cleanup the control_va_addr_alignment() __setup handler (git-fixes). - x86/mm: Fix RESERVE_BRK() for older binutils (git-fixes). - x86/mm: Fix use of uninitialized buffer in sme_enable() (git-fixes). - x86/mm: Flush global TLB when switching to trampoline page-table (git-fixes). - x86/mm: Initialize text poking earlier (bsc#1212448). - x86/mm: Use mm_alloc() in poking_init() (bsc#1212448). - x86/mm: Use proper mask when setting PUD mapping (git-fixes). - x86/mm: fix poking_init() for Xen PV guests (git-fixes). - x86/msi: Fix msi message data shadow struct (git-fixes). - x86/msr: Add AMD CPPC MSR definitions (bsc#1212445). - x86/msr: Remove .fixup usage (git-fixes). - x86/nospec: Unwreck the RSB stuffing (git-fixes). - x86/numa: Use cpumask_available instead of hardcoded NULL check (git-fixes). - x86/pat: Fix x86_has_pat_wp() (git-fixes). - x86/pci/xen: Disable PCI/MSI masking for XEN_HVM guests (git-fixes). - x86/perf/zhaoxin: Add stepping check for ZXC (git fixes). - x86/perf: Avoid warning for Arch LBR without XSAVE (git fixes). - x86/perf: Default set FREEZE_ON_SMI for all (git fixes). - x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes). - x86/reboot: Disable SVM, not just VMX, when stopping CPUs (git-fixes). - x86/resctrl: Fix min_cbm_bits for AMD (git-fixes). - x86/sev: Add SEV-SNP guest feature negotiation support (git-fixes). - x86/sgx: Fix free page accounting (git-fixes). - x86/sgx: Fix race between reclaimer and page fault handler (git-fixes). - x86/sgx: Free backing memory after faulting the enclave page (git-fixes). - x86/sgx: Mark PCMD page as dirty when modifying contents (git-fixes). - x86/sgx: Silence softlockup detection when releasing large enclaves (git-fixes). - x86/signal: Fix the value returned by strict_sas_size() (git-fixes). - x86/speculation/mmio: Print SMT warning (git-fixes). - x86/speculation: Identify processors vulnerable to SMT RSB predictions (git-fixes). - x86/static_call: Serialize __static_call_fixup() properly (git-fixes). - x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes). - x86/topology: Fix duplicated core ID within a package (git-fixes). - x86/topology: Fix multiple packages shown on a single-package system (git-fixes). - x86/traps: Use pt_regs directly in fixup_bad_iret() (git-fixes). - x86/tsx: Add a feature bit for TSX control MSR support (git-fixes). - x86/tsx: Disable TSX development mode at boot (git-fixes). - x86/uaccess: Move variable into switch case statement (git-fixes). - x86/xen: Fix memory leak in xen_init_lock_cpu() (git-fixes). - x86/xen: Fix memory leak in xen_smp_intr_init{_pv}() (git-fixes). - x86/xen: fix secondary processor fpu initialization (bsc#1212869). - x86: ACPI: cstate: Optimize C3 entry on AMD CPUs (git-fixes). - x86: Annotate call_on_stack() (git-fixes). - x86: Fix return value of __setup handlers (git-fixes). - x86: Handle idle=nomwait cmdline properly for x86_idle (bsc#1208619). - x86: Remove vendor checks from prefer_mwait_c1_over_halt (bsc#1208619). - x86: __memcpy_flushcache: fix wrong alignment if size > 2^32 (git-fixes). - x86: centralize setting SWIOTLB_FORCE when guest memory encryption is enabled (jsc#PED-3259). - x86: drop bogus 'cc' clobber from __try_cmpxchg_user_asm() (git-fixes). - x86: link vdso and boot with -z noexecstack --no-warn-rwx-segments (bsc#1203200). - x86: remove cruft from &lt;asm/dma-mapping.h> (PED-3259). - xen-netfront: Fix NULL sring after live migration (git-fixes). - xen-pciback: Allow setting PCI_MSIX_FLAGS_MASKALL too (git-fixes). - xen/arm: Fix race in RB-tree based P2M accounting (git-fixes) - xen/netback: do not do grant copy across page boundary (git-fixes). - xen/netback: do some code cleanup (git-fixes). - xen/netback: fix build warning (git-fixes). - xen/netback: use same error messages for same errors (git-fixes). - xen/netfront: destroy queues before real_num_tx_queues is zeroed (git-fixes). - xen/platform-pci: add missing free_irq() in error path (git-fixes). - xen/privcmd: Fix a possible warning in privcmd_ioctl_mmap_resource() (git-fixes). - xfs: Fix unreferenced object reported by kmemleak in xfs_sysfs_init() (git-fixes). - xfs: convert ptag flags to unsigned (git-fixes). - xfs: do not assert fail on perag references on teardown (git-fixes). - xfs: do not leak btree cursor when insrec fails after a split (git-fixes). - xfs: estimate post-merge refcounts correctly (bsc#1208183). - xfs: fix incorrect error-out in xfs_remove (git-fixes). - xfs: fix incorrect i_nlink caused by inode racing (git-fixes). - xfs: fix maxlevels comparisons in the btree staging code (git-fixes). - xfs: fix memory leak in xfs_errortag_init (git-fixes). - xfs: fix rm_offset flag handling in rmap keys (git-fixes). - xfs: get rid of assert from xfs_btree_islastblock (git-fixes). - xfs: get root inode correctly at bulkstat (git-fixes). - xfs: hoist refcount record merge predicates (bsc#1208183). - xfs: initialize the check_owner object fully (git-fixes). - xfs: pass the correct cursor to xfs_iomap_prealloc_size (git-fixes). - xfs: prevent a WARN_ONCE() in xfs_ioc_attr_list() (git-fixes). - xfs: reject crazy array sizes being fed to XFS_IOC_GETBMAP* (git-fixes). - xfs: remove xfs_setattr_time() declaration (git-fixes). - xfs: return errors in xfs_fs_sync_fs (git-fixes). - xfs: set bnobt/cntbt numrecs correctly when formatting new AGs (git-fixes). - xfs: zero inode fork buffer at allocation (git-fixes). - xhci-pci: Only run d3cold avoidance quirk for s2idle (git-fixes). - xhci-pci: set the dma max_seg_size (git-fixes). - xhci: Fix incorrect tracking of free space on transfer rings (git-fixes). - xhci: Fix null pointer dereference when host dies (git-fixes). - xhci: Free the command allocated for setting LPM if we return early (git-fixes). - xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough iommu (git-fixes). - xhci: fix debugfs register accesses while suspended (git-fixes). - xirc2ps_cs: Fix use after free bug in xirc2ps_detach (git-fixes). - xprtrdma: Fix regbuf data not freed in rpcrdma_req_create() (git-fixes). - xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes). - zram: do not lookup algorithm in backends table (git-fixes). Important SUSE bug 1065729 SUSE bug 1109158 SUSE bug 1142685 SUSE bug 1152472 SUSE bug 1152489 SUSE bug 1155798 SUSE bug 1160435 SUSE bug 1166486 SUSE bug 1172073 SUSE bug 1174777 SUSE bug 1177529 SUSE bug 1186449 SUSE bug 1187829 SUSE bug 1189998 SUSE bug 1189999 SUSE bug 1191731 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1195175 SUSE bug 1195655 SUSE bug 1195921 SUSE bug 1196058 SUSE bug 1197534 SUSE bug 1197617 SUSE bug 1198101 SUSE bug 1198400 SUSE bug 1198438 SUSE bug 1198835 SUSE bug 1199304 SUSE bug 1199701 SUSE bug 1200054 SUSE bug 1202353 SUSE bug 1202633 SUSE bug 1203039 SUSE bug 1203200 SUSE bug 1203325 SUSE bug 1203331 SUSE bug 1203332 SUSE bug 1203693 SUSE bug 1203906 SUSE bug 1204356 SUSE bug 1204363 SUSE bug 1204662 SUSE bug 1204993 SUSE bug 1205153 SUSE bug 1205191 SUSE bug 1205205 SUSE bug 1205544 SUSE bug 1205650 SUSE bug 1205756 SUSE bug 1205758 SUSE bug 1205760 SUSE bug 1205762 SUSE bug 1205803 SUSE bug 1205846 SUSE bug 1206024 SUSE bug 1206036 SUSE bug 1206056 SUSE bug 1206057 SUSE bug 1206103 SUSE bug 1206224 SUSE bug 1206232 SUSE bug 1206340 SUSE bug 1206459 SUSE bug 1206492 SUSE bug 1206493 SUSE bug 1206552 SUSE bug 1206578 SUSE bug 1206640 SUSE bug 1206649 SUSE bug 1206677 SUSE bug 1206824 SUSE bug 1206843 SUSE bug 1206876 SUSE bug 1206877 SUSE bug 1206878 SUSE bug 1206880 SUSE bug 1206881 SUSE bug 1206882 SUSE bug 1206883 SUSE bug 1206884 SUSE bug 1206885 SUSE bug 1206886 SUSE bug 1206887 SUSE bug 1206888 SUSE bug 1206889 SUSE bug 1206890 SUSE bug 1206891 SUSE bug 1206893 SUSE bug 1206894 SUSE bug 1206935 SUSE bug 1206992 SUSE bug 1207034 SUSE bug 1207036 SUSE bug 1207050 SUSE bug 1207051 SUSE bug 1207088 SUSE bug 1207125 SUSE bug 1207149 SUSE bug 1207158 SUSE bug 1207168 SUSE bug 1207185 SUSE bug 1207270 SUSE bug 1207315 SUSE bug 1207328 SUSE bug 1207497 SUSE bug 1207500 SUSE bug 1207501 SUSE bug 1207506 SUSE bug 1207507 SUSE bug 1207521 SUSE bug 1207553 SUSE bug 1207560 SUSE bug 1207574 SUSE bug 1207588 SUSE bug 1207589 SUSE bug 1207590 SUSE bug 1207591 SUSE bug 1207592 SUSE bug 1207593 SUSE bug 1207594 SUSE bug 1207602 SUSE bug 1207603 SUSE bug 1207605 SUSE bug 1207606 SUSE bug 1207607 SUSE bug 1207608 SUSE bug 1207609 SUSE bug 1207610 SUSE bug 1207611 SUSE bug 1207612 SUSE bug 1207613 SUSE bug 1207614 SUSE bug 1207615 SUSE bug 1207616 SUSE bug 1207617 SUSE bug 1207618 SUSE bug 1207619 SUSE bug 1207620 SUSE bug 1207621 SUSE bug 1207622 SUSE bug 1207623 SUSE bug 1207624 SUSE bug 1207625 SUSE bug 1207626 SUSE bug 1207627 SUSE bug 1207628 SUSE bug 1207629 SUSE bug 1207630 SUSE bug 1207631 SUSE bug 1207632 SUSE bug 1207633 SUSE bug 1207634 SUSE bug 1207635 SUSE bug 1207636 SUSE bug 1207637 SUSE bug 1207638 SUSE bug 1207639 SUSE bug 1207640 SUSE bug 1207641 SUSE bug 1207642 SUSE bug 1207643 SUSE bug 1207644 SUSE bug 1207645 SUSE bug 1207646 SUSE bug 1207647 SUSE bug 1207648 SUSE bug 1207649 SUSE bug 1207650 SUSE bug 1207651 SUSE bug 1207652 SUSE bug 1207653 SUSE bug 1207734 SUSE bug 1207768 SUSE bug 1207769 SUSE bug 1207770 SUSE bug 1207771 SUSE bug 1207773 SUSE bug 1207795 SUSE bug 1207827 SUSE bug 1207842 SUSE bug 1207845 SUSE bug 1207875 SUSE bug 1207878 SUSE bug 1207933 SUSE bug 1207935 SUSE bug 1207948 SUSE bug 1208050 SUSE bug 1208076 SUSE bug 1208081 SUSE bug 1208105 SUSE bug 1208107 SUSE bug 1208128 SUSE bug 1208130 SUSE bug 1208149 SUSE bug 1208153 SUSE bug 1208183 SUSE bug 1208212 SUSE bug 1208219 SUSE bug 1208290 SUSE bug 1208368 SUSE bug 1208410 SUSE bug 1208420 SUSE bug 1208428 SUSE bug 1208429 SUSE bug 1208449 SUSE bug 1208534 SUSE bug 1208541 SUSE bug 1208542 SUSE bug 1208570 SUSE bug 1208588 SUSE bug 1208598 SUSE bug 1208599 SUSE bug 1208600 SUSE bug 1208601 SUSE bug 1208602 SUSE bug 1208604 SUSE bug 1208605 SUSE bug 1208607 SUSE bug 1208619 SUSE bug 1208628 SUSE bug 1208700 SUSE bug 1208741 SUSE bug 1208758 SUSE bug 1208759 SUSE bug 1208776 SUSE bug 1208777 SUSE bug 1208784 SUSE bug 1208787 SUSE bug 1208815 SUSE bug 1208816 SUSE bug 1208829 SUSE bug 1208837 SUSE bug 1208843 SUSE bug 1208845 SUSE bug 1208848 SUSE bug 1208864 SUSE bug 1208902 SUSE bug 1208948 SUSE bug 1208976 SUSE bug 1209008 SUSE bug 1209039 SUSE bug 1209052 SUSE bug 1209092 SUSE bug 1209159 SUSE bug 1209256 SUSE bug 1209258 SUSE bug 1209262 SUSE bug 1209287 SUSE bug 1209288 SUSE bug 1209290 SUSE bug 1209291 SUSE bug 1209292 SUSE bug 1209366 SUSE bug 1209367 SUSE bug 1209436 SUSE bug 1209457 SUSE bug 1209504 SUSE bug 1209532 SUSE bug 1209556 SUSE bug 1209600 SUSE bug 1209615 SUSE bug 1209635 SUSE bug 1209636 SUSE bug 1209637 SUSE bug 1209684 SUSE bug 1209687 SUSE bug 1209693 SUSE bug 1209739 SUSE bug 1209779 SUSE bug 1209780 SUSE bug 1209788 SUSE bug 1209798 SUSE bug 1209799 SUSE bug 1209804 SUSE bug 1209805 SUSE bug 1209856 SUSE bug 1209871 SUSE bug 1209927 SUSE bug 1209980 SUSE bug 1209982 SUSE bug 1209999 SUSE bug 1210034 SUSE bug 1210050 SUSE bug 1210158 SUSE bug 1210165 SUSE bug 1210202 SUSE bug 1210203 SUSE bug 1210206 SUSE bug 1210216 SUSE bug 1210230 SUSE bug 1210294 SUSE bug 1210301 SUSE bug 1210329 SUSE bug 1210335 SUSE bug 1210336 SUSE bug 1210337 SUSE bug 1210409 SUSE bug 1210439 SUSE bug 1210449 SUSE bug 1210450 SUSE bug 1210453 SUSE bug 1210454 SUSE bug 1210498 SUSE bug 1210506 SUSE bug 1210533 SUSE bug 1210551 SUSE bug 1210565 SUSE bug 1210584 SUSE bug 1210629 SUSE bug 1210644 SUSE bug 1210647 SUSE bug 1210725 SUSE bug 1210741 SUSE bug 1210762 SUSE bug 1210763 SUSE bug 1210764 SUSE bug 1210765 SUSE bug 1210766 SUSE bug 1210767 SUSE bug 1210768 SUSE bug 1210769 SUSE bug 1210770 SUSE bug 1210771 SUSE bug 1210775 SUSE bug 1210783 SUSE bug 1210791 SUSE bug 1210793 SUSE bug 1210806 SUSE bug 1210816 SUSE bug 1210817 SUSE bug 1210827 SUSE bug 1210853 SUSE bug 1210940 SUSE bug 1210943 SUSE bug 1210947 SUSE bug 1210953 SUSE bug 1210986 SUSE bug 1211014 SUSE bug 1211025 SUSE bug 1211037 SUSE bug 1211043 SUSE bug 1211044 SUSE bug 1211089 SUSE bug 1211105 SUSE bug 1211113 SUSE bug 1211131 SUSE bug 1211205 SUSE bug 1211263 SUSE bug 1211280 SUSE bug 1211281 SUSE bug 1211299 SUSE bug 1211346 SUSE bug 1211387 SUSE bug 1211400 SUSE bug 1211410 SUSE bug 1211414 SUSE bug 1211449 SUSE bug 1211465 SUSE bug 1211519 SUSE bug 1211564 SUSE bug 1211590 SUSE bug 1211592 SUSE bug 1211593 SUSE bug 1211595 SUSE bug 1211654 SUSE bug 1211686 SUSE bug 1211687 SUSE bug 1211688 SUSE bug 1211689 SUSE bug 1211690 SUSE bug 1211691 SUSE bug 1211692 SUSE bug 1211693 SUSE bug 1211714 SUSE bug 1211794 SUSE bug 1211796 SUSE bug 1211804 SUSE bug 1211807 SUSE bug 1211808 SUSE bug 1211820 SUSE bug 1211836 SUSE bug 1211847 SUSE bug 1211852 SUSE bug 1211855 SUSE bug 1211960 SUSE bug 1212051 SUSE bug 1212129 SUSE bug 1212154 SUSE bug 1212155 SUSE bug 1212158 SUSE bug 1212265 SUSE bug 1212350 SUSE bug 1212445 SUSE bug 1212448 SUSE bug 1212456 SUSE bug 1212494 SUSE bug 1212495 SUSE bug 1212504 SUSE bug 1212513 SUSE bug 1212540 SUSE bug 1212556 SUSE bug 1212561 SUSE bug 1212563 SUSE bug 1212564 SUSE bug 1212584 SUSE bug 1212592 SUSE bug 1212603 SUSE bug 1212605 SUSE bug 1212606 SUSE bug 1212619 SUSE bug 1212685 SUSE bug 1212701 SUSE bug 1212741 SUSE bug 1212835 SUSE bug 1212838 SUSE bug 1212842 SUSE bug 1212848 SUSE bug 1212861 SUSE bug 1212869 SUSE bug 1212892 SUSE bug 1212961 SUSE bug 1213010 SUSE bug 1213011 SUSE bug 1213012 SUSE bug 1213013 SUSE bug 1213014 SUSE bug 1213015 SUSE bug 1213016 SUSE bug 1213017 SUSE bug 1213018 SUSE bug 1213019 SUSE bug 1213020 SUSE bug 1213021 SUSE bug 1213024 SUSE bug 1213025 SUSE bug 1213032 SUSE bug 1213034 SUSE bug 1213035 SUSE bug 1213036 SUSE bug 1213037 SUSE bug 1213038 SUSE bug 1213039 SUSE bug 1213040 SUSE bug 1213041 SUSE bug 1213087 SUSE bug 1213088 SUSE bug 1213089 SUSE bug 1213090 SUSE bug 1213092 SUSE bug 1213093 SUSE bug 1213094 SUSE bug 1213095 SUSE bug 1213096 SUSE bug 1213098 SUSE bug 1213099 SUSE bug 1213100 SUSE bug 1213102 SUSE bug 1213103 SUSE bug 1213104 SUSE bug 1213105 SUSE bug 1213106 SUSE bug 1213107 SUSE bug 1213108 SUSE bug 1213109 SUSE bug 1213110 SUSE bug 1213111 SUSE bug 1213112 SUSE bug 1213113 SUSE bug 1213114 SUSE bug 1213116 SUSE bug 1213134 CVE-2022-36280 CVE-2022-38096 CVE-2022-4269 CVE-2022-45884 CVE-2022-45885 CVE-2022-45886 CVE-2022-45887 CVE-2022-45919 CVE-2022-4744 CVE-2023-0045 CVE-2023-0122 CVE-2023-0179 CVE-2023-0394 CVE-2023-0461 CVE-2023-0469 CVE-2023-0590 CVE-2023-0597 CVE-2023-1075 CVE-2023-1076 CVE-2023-1077 CVE-2023-1079 CVE-2023-1095 CVE-2023-1118 CVE-2023-1249 CVE-2023-1382 CVE-2023-1513 CVE-2023-1582 CVE-2023-1583 CVE-2023-1611 CVE-2023-1637 CVE-2023-1652 CVE-2023-1670 CVE-2023-1829 CVE-2023-1838 CVE-2023-1855 CVE-2023-1989 CVE-2023-1998 CVE-2023-2002 CVE-2023-21102 CVE-2023-21106 CVE-2023-2124 CVE-2023-2156 CVE-2023-2162 CVE-2023-2176 CVE-2023-2235 CVE-2023-2269 CVE-2023-22998 CVE-2023-23000 CVE-2023-23001 CVE-2023-23004 CVE-2023-23006 CVE-2023-2430 CVE-2023-2483 CVE-2023-25012 CVE-2023-2513 CVE-2023-26545 CVE-2023-28327 CVE-2023-28410 CVE-2023-28464 CVE-2023-28866 CVE-2023-3006 CVE-2023-30456 CVE-2023-30772 CVE-2023-3090 CVE-2023-31084 CVE-2023-3111 CVE-2023-3141 CVE-2023-31436 CVE-2023-3161 CVE-2023-3212 CVE-2023-3220 CVE-2023-32233 CVE-2023-33288 CVE-2023-3357 CVE-2023-3358 CVE-2023-3389 CVE-2023-33951 CVE-2023-33952 CVE-2023-35788 CVE-2023-35823 CVE-2023-35828 CVE-2023-35829 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaThunderbird (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird was updated to version 115.0.1 (bsc#1212438): - CVE-2023-3600: Fixed use-after-free in workers (bmo#1839703). - CVE-2023-3417: Fixed File Extension Spoofing using the Text Direction Override Character (bmo#1835582). Bugfixes: - changed: Added Thunderbird Supernova branding to about:dialog (bmo#1842102) - fixed: Message list was not updated when message was deleted from server outside of Thunderbird (bmo#1837041) - fixed: Scrolling behaved unexpectedly when moving to next message unread message in another folder (bmo#1841711) - fixed: Scrolling animation was unnecessarily used when switching or toggling the sort column in message list (bmo#1838522) - fixed: Attempting to delete a message and then cancelling the action still marked the message as read (bmo#793353) - fixed: Unified Toolbar could not be customized under certain tabs (bmo#1841480) - fixed: Selecting a folder with one or more subfolders and pressing enter did not expand folder (bmo#1841200) - fixed: Tooltips did not appear when hovering over folders (bmo#1839780) - fixed: Deleting large amounts of messages from Trash folder consumed excessive time and memory (bmo#1833665) - fixed: Message Summary header buttons were not keyboard accessible (bmo#1827199) - fixed: 'New' button in Message Filters dialog was not keyboard accessible (bmo#1841477) - fixed: Backing up secret keys from OpenPGP Key Manager dialog silently failed (bmo#1839415) - fixed: Various visual and UX improvements (bmo#1843172,bmo#1831422,bmo#1838360,bmo#1842319) Important SUSE bug 1212438 CVE-2023-3417 CVE-2023-3600 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for poppler (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for poppler fixes the following issues: - CVE-2022-27337: Fixed a logic error in the Hints::Hints function which can cause denial of service (bsc#1199272). Moderate SUSE bug 1199272 CVE-2022-27337 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-2985: Fixed an use-after-free vulnerability in hfsplus_put_super in fs/hfsplus/super.c that could allow a local user to cause a denial of service (bsc#1211867). - CVE-2023-3117: Fixed an use-after-free vulnerability in the netfilter subsystem when processing named and anonymous sets in batch requests that could allow a local user with CAP_NET_ADMIN capability to crash or potentially escalate their privileges on the system (bsc#1213245). - CVE-2023-3390: Fixed an use-after-free vulnerability in the netfilter subsystem in net/netfilter/nf_tables_api.c that could allow a local attacker with user access to cause a privilege escalation issue (bsc#1212846). - CVE-2023-3812: Fixed an out-of-bounds memory access flaw in the TUN/TAP device driver functionality that could allow a local user to crash or potentially escalate their privileges on the system (bsc#1213543). - CVE-2023-20593: Fixed a ZenBleed issue in 'Zen 2' CPUs that could allow an attacker to potentially access sensitive information (bsc#1213286). - CVE-2023-31248: Fixed an use-after-free vulnerability in nft_chain_lookup_byid that could allow a local attacker to escalate their privilege (bsc#1213061). - CVE-2023-35001: Fixed an out-of-bounds memory access flaw in nft_byteorder that could allow a local attacker to escalate their privilege (bsc#1213059). The following non-security bugs were fixed: - Dropped patch that caused issues with k3s (bsc#1213705). - ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake devices (git-fixes). - ASoC: SOF: topology: Fix logic for copying tuples (git-fixes). - Bluetooth: ISO: Fix CIG auto-allocation to select configurable CIG (git-fixes). - Bluetooth: ISO: consider right CIS when removing CIG at cleanup (git-fixes). - Bluetooth: ISO: fix iso_conn related locking and validity issues (git-fixes). - Bluetooth: ISO: use hci_sync for setting CIG parameters (git-fixes). - Bluetooth: fix invalid-bdaddr quirk for non-persistent setup (git-fixes). - Bluetooth: fix use-bdaddr-property quirk (git-fixes). - Bluetooth: hci_bcm: do not mark valid bd_addr as invalid (git-fixes). - Bluetooth: hci_event: call disconnect callback before deleting conn (git-fixes). - Bluetooth: hci_sync: Avoid use-after-free in dbg for hci_remove_adv_monitor() (git-fixes). - Bluetooth: use RCU for hci_conn_params and iterate safely in hci_sync (git-fixes). - Enable NXP SNVS RTC driver for i.MX 8MQ/8MP (jsc#PED-4758) - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (bsc#1212525). - PCI: vmd: Fix uninitialized variable usage in vmd_enable_domain() (git-fixes). - Revert 'arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes) - Revert 'drm/i915: Disable DSB usage for now' (git-fixes). - USB: dwc2: Fix some error handling paths (git-fixes). - USB: gadget: udc: core: Offload usb_udc_vbus_handler processing (git-fixes). - USB: gadget: udc: core: Prevent soft_connect_store() race (git-fixes). - USB: typec: Fix fast_role_swap_current show function (git-fixes). - Update config and supported.conf files due to renaming. - acpi: Fix suspend with Xen PV (git-fixes). - adreno: Shutdown the GPU properly (git-fixes). - arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes) - arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes) - arm64: vdso: Pass (void *) to virt_to_page() (git-fixes) - arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes) - can: bcm: Fix UAF in bcm_proc_show() (git-fixes). - ceph: add a dedicated private data for netfs rreq (bsc#1213205). - ceph: fix blindly expanding the readahead windows (bsc#1213206). - cifs: add a warning when the in-flight count goes negative (bsc#1193629). - cifs: address unused variable warning (bsc#1193629). - cifs: do all necessary checks for credits within or before locking (bsc#1193629). - cifs: fix lease break oops in xfstest generic/098 (bsc#1193629). - cifs: fix max_credits implementation (bsc#1193629). - cifs: fix session state check in reconnect to avoid use-after-free issue (bsc#1193629). - cifs: fix session state check in smb2_find_smb_ses (bsc#1193629). - cifs: fix session state transition to avoid use-after-free issue (bsc#1193629). - cifs: fix sockaddr comparison in iface_cmp (bsc#1193629). - cifs: fix status checks in cifs_tree_connect (bsc#1193629). - cifs: log session id when a matching ses is not found (bsc#1193629). - cifs: new dynamic tracepoint to track ses not found errors (bsc#1193629). - cifs: prevent use-after-free by freeing the cfile later (bsc#1193629). - cifs: print all credit counters in DebugData (bsc#1193629). - cifs: print client_guid in DebugData (bsc#1193629). - cifs: print more detail when invalidate_inode_mapping fails (bsc#1193629). - cifs: print nosharesock value while dumping mount options (bsc#1193629). - codel: fix kernel-doc notation warnings (git-fixes). - cpufreq: tegra194: Fix module loading (git-fixes). - devlink: fix kernel-doc notation warnings (git-fixes). - dma-buf/dma-resv: Stop leaking on krealloc() failure (git-fixes). - drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes). - drm/amd/amdgpu: limit one queue per gang (git-fixes). - drm/amd/amdgpu: update mes11 api def (git-fixes). - drm/amd/display (gcc13): fix enum mismatch (git-fixes). - drm/amd/display: Add Z8 allow states to z-state support list (git-fixes). - drm/amd/display: Add debug option to skip PSR CRTC disable (git-fixes). - drm/amd/display: Add minimum Z8 residency debug option (git-fixes). - drm/amd/display: Add missing WA and MCLK validation (git-fixes). - drm/amd/display: Change default Z8 watermark values (git-fixes). - drm/amd/display: Correct DML calculation to align HW formula (git-fixes). - drm/amd/display: Correct DML calculation to follow HW SPEC (git-fixes). - drm/amd/display: Do not update DRR while BW optimizations pending (git-fixes). - drm/amd/display: Enable HostVM based on rIOMMU active (git-fixes). - drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes (git-fixes). - drm/amd/display: Ensure vmin and vmax adjust for DCE (git-fixes). - drm/amd/display: Fix 4to1 MPC black screen with DPP RCO (git-fixes). - drm/amd/display: Fix Z8 support configurations (git-fixes). - drm/amd/display: Fix a test CalculatePrefetchSchedule() (git-fixes). - drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg() (git-fixes). - drm/amd/display: Have Payload Properly Created After Resume (git-fixes). - drm/amd/display: Lowering min Z8 residency time (git-fixes). - drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes). - drm/amd/display: Refactor eDP PSR codes (git-fixes). - drm/amd/display: Remove FPU guards from the DML folder (git-fixes). - drm/amd/display: Remove optimization for VRR updates (git-fixes). - drm/amd/display: Remove stutter only configurations (git-fixes). - drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes). - drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes). - drm/amd/display: Update minimum stutter residency for DCN314 Z8 (git-fixes). - drm/amd/display: filter out invalid bits in pipe_fuses (git-fixes). - drm/amd/display: fix PSR-SU/DSC interoperability support (git-fixes). - drm/amd/display: fix a divided-by-zero error (git-fixes). - drm/amd/display: fixed dcn30+ underflow issue (git-fixes). - drm/amd/display: limit timing for single dimm memory (git-fixes). - drm/amd/display: populate subvp cmd info only for the top pipe (git-fixes). - drm/amd/display: set dcn315 lb bpp to 48 (git-fixes). - drm/amd/pm: add missing NotifyPowerSource message mapping for SMU13.0.7 (git-fixes). - drm/amd/pm: avoid potential UBSAN issue on legacy asics (git-fixes). - drm/amd/pm: conditionally disable pcie lane switching for some sienna_cichlid SKUs (git-fixes). - drm/amd/pm: fix possible power mode mismatch between driver and PMFW (git-fixes). - drm/amd/pm: resolve reboot exception for si oland (git-fixes). - drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4 (git-fixes). - drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5 (git-fixes). - drm/amd/pm: workaround for compute workload type on some skus (git-fixes). - drm/amd: Add a new helper for loading/validating microcode (git-fixes). - drm/amd: Do not allow s0ix on APUs older than Raven (git-fixes). - drm/amd: Load MES microcode during early_init (git-fixes). - drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes). - drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11 as well (git-fixes). - drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes). - drm/amdgpu/gfx: set cg flags to enter/exit safe mode (git-fixes). - drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes). - drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes). - drm/amdgpu/mes11: enable reg active poll (git-fixes). - drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes (git-fixes). - drm/amdgpu/vkms: relax timer deactivation by hrtimer_try_to_cancel (git-fixes). - drm/amdgpu: Do not set struct drm_driver.output_poll_changed (git-fixes). - drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes). - drm/amdgpu: Fix memcpy() in sienna_cichlid_append_powerplay_table function (git-fixes). - drm/amdgpu: Fix sdma v4 sw fini error (git-fixes). - drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes). - drm/amdgpu: Force signal hw_fences that are embedded in non-sched jobs (git-fixes). - drm/amdgpu: add mes resume when do gfx post soft reset (git-fixes). - drm/amdgpu: change reserved vram info print (git-fixes). - drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes). - drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini (git-fixes). - drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini (git-fixes). - drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini() (git-fixes). - drm/amdgpu: refine get gpu clock counter method (git-fixes). - drm/amdgpu: remove deprecated MES version vars (git-fixes). - drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes). - drm/amdgpu: set gfx9 onwards APU atomics support to be true (git-fixes). - drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1 (git-fixes). - drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes). - drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt() (git-fixes). - drm/bridge: anx7625: Prevent endless probe loop (git-fixes). - drm/bridge: it6505: Move a variable assignment behind a null pointer check in receive_timing_debugfs_show() (git-fixes). - drm/bridge: tc358767: Switch to devm MIPI-DSI helpers (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes). - drm/client: Fix memory leak in drm_client_target_cloned (git-fixes). - drm/display/dp_mst: Fix payload addition on a disconnected sink (git-fixes). - drm/display: Do not block HDR_OUTPUT_METADATA on unknown EOTF (git-fixes). - drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes). - drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes). - drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage (git-fixes). - drm/etnaviv: move idle mapping reaping into separate function (git-fixes). - drm/etnaviv: reap idle mapping if it does not match the softpin address (git-fixes). - drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs (bsc#1213493). - drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes). - drm/i915/gt: Cleanup partial engine discovery failures (git-fixes). - drm/i915/guc: Add error-capture init warnings when needed (git-fixes). - drm/i915/guc: Fix missing ecodes (git-fixes). - drm/i915/guc: Limit scheduling properties to avoid overflow (git-fixes). - drm/i915/guc: Rename GuC register state capture node to be more obvious (git-fixes). - drm/i915/mtl: update scaler source and destination limits for MTL (git-fixes). - drm/i915/sdvo: Grab mode_config.mutex during LVDS init to avoid WARNs (git-fixes). - drm/i915/sseu: fix max_subslices array-index-out-of-bounds access (git-fixes). - drm/i915/tc: Fix TC port link ref init for DP MST during HW readout (git-fixes). - drm/i915: Allow panel fixed modes to have differing sync polarities (git-fixes). - drm/i915: Check pipe source size when using skl+ scalers (git-fixes). - drm/i915: Do panel VBT init early if the VBT declares an explicit panel type (git-fixes). - drm/i915: Fix TypeC mode initialization during system resume (git-fixes). - drm/i915: Fix a memory leak with reused mmap_offset (git-fixes). - drm/i915: Fix negative value passed as remaining time (git-fixes). - drm/i915: Fix one wrong caching mode enum usage (git-fixes). - drm/i915: Introduce intel_panel_init_alloc() (git-fixes). - drm/i915: Never return 0 if not all requests retired (git-fixes). - drm/i915: Populate encoder->devdata for DSI on icl+ (git-fixes). - drm/i915: Print return value on error (git-fixes). - drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes). - drm/meson: Fix return type of meson_encoder_cvbs_mode_valid() (git-fixes). - drm/msm/a5xx: really check for A510 in a5xx_gpu_init (git-fixes). - drm/msm/adreno: Simplify read64/write64 helpers (git-fixes). - drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: Add DSC hardware blocks to register snapshot (git-fixes). - drm/msm/dpu: Assign missing writeback log_mask (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns (git-fixes). - drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush register (git-fixes). - drm/msm/hdmi: use devres helper for runtime PM management (git-fixes). - drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during disable (git-fixes). - drm/panel: simple: Add Powertip PH800480T013 drm_display_mode flags (git-fixes). - drm/panel: simple: Add connector_type for innolux_at043tn24 (git-fixes). - drm/rockchip: dw_hdmi: cleanup drm encoder during unbind (git-fixes). - drm/ttm: Do not leak a resource on swapout move error (git-fixes). - drm/virtio: Fix memory leak in virtio_gpu_object_create() (git-fixes). - drm/virtio: Simplify error handling of virtio_gpu_object_create() (git-fixes). - drm/vmwgfx: Refactor resource manager's hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor resource validation hashtable to use linux/hashtable implementation (git-fixes). - drm/vmwgfx: Refactor ttm reference object hashtable to use linux/hashtable (git-fixes). - drm/vmwgfx: Remove ttm object hashtable (git-fixes). - drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes). - drm/vmwgfx: Write the driver id registers (git-fixes). - drm: Add fixed-point helper to get rounded integer values (git-fixes). - drm: Add missing DP DSC extended capability definitions (git-fixes). - drm: Optimize drm buddy top-down allocation method (git-fixes). - drm: buddy_allocator: Fix buddy allocator init on 32-bit systems (git-fixes). - drm: panel-orientation-quirks: Add quirk for DynaBook K50 (git-fixes). - drm: rcar-du: Add quirk for H3 ES1.x pclk workaround (git-fixes). - drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes). - drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2 (git-fixes). - fuse: ioctl: translate ENOSYS in outarg (bsc#1213524). - fuse: revalidate: do not invalidate if interrupted (bsc#1213523). - i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226). - irqchip/gic-v3: Claim iomem resources (bsc#1213533) - irqchip/gicv3: Handle resource request failure consistently (bsc#1213533) - irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533) - kABI: do not check external trampolines for signature (kabi bsc#1207894 bsc#1211243). - kabi/severities: Add VAS symbols changed due to recent fix VAS accelerators are directly tied to the architecture, there is no reason to have out-of-tree production drivers - kabi/severities: ignore kABI of i915 module It's exported only for its sub-module, not really used by externals - kabi/severities: ignore kABI of vmwgfx The driver exports a function unnecessarily without used by anyone else. Ignore the kABI changes. - memcg: drop kmem.limit_in_bytes (bsc#1208788, bsc#1212905). - net: mana: Add support for vlan tagging (bsc#1212301). - net: phy: prevent stale pointer dereference in phy_init() (git-fixes). - net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume() (git-fixes). - net: qrtr: start MHI channel after endpoit creation (git-fixes). - nilfs2: reject devices with insufficient block count (git-fixes). - ocfs2: Switch to security_inode_init_security() (git-fixes). - ocfs2: check new file size on fallocate call (git-fixes). - ocfs2: fix use-after-free when unmounting read-only filesystem (git-fixes). - perf/x86/amd/core: Always clear status for idx (bsc#1213233). - pie: fix kernel-doc notation warning (git-fixes). - powerpc/64: Only WARN if __pa()/__va() called with bad addresses (bsc#1194869). - powerpc/64s: Fix VAS mm use after free (bsc#1194869). - powerpc/book3s64/mm: Fix DirectMap stats in /proc/meminfo (bsc#1194869). - powerpc/bpf: Fix use of user_pt_regs in uapi (bsc#1194869). - powerpc/ftrace: Remove ftrace init tramp once kernel init is complete (bsc#1194869). - powerpc/interrupt: Do not read MSR from interrupt_exit_kernel_prepare() (bsc#1194869). - powerpc/mm/dax: Fix the condition when checking if altmap vmemap can cross-boundary (bsc#1150305 ltc#176097 git-fixes). - powerpc/mm: Switch obsolete dssall to .long (bsc#1194869). - powerpc/powernv/sriov: perform null check on iov before dereferencing iov (bsc#1194869). - powerpc/powernv/vas: Assign real address to rx_fifo in vas_rx_win_attr (bsc#1194869). - powerpc/prom_init: Fix kernel config grep (bsc#1194869). - powerpc/pseries/vas: Hold mmap_mutex after mmap lock during window close (jsc#PED-542 git-fixes). - powerpc/secvar: fix refcount leak in format_show() (bsc#1194869). - powerpc/xics: fix refcount leak in icp_opal_init() (bsc#1194869). - powerpc: clean vdso32 and vdso64 directories (bsc#1194869). - powerpc: define get_cycles macro for arch-override (bsc#1194869). - powerpc: update ppc_save_regs to save current r1 in pt_regs (bsc#1194869). - rpm/check-for-config-changes: ignore also RISCV_ISA_* and DYNAMIC_SIGFRAME They depend on CONFIG_TOOLCHAIN_HAS_*. - rsi: remove kernel-doc comment marker (git-fixes). - s390/ap: fix status returned by ap_aqic() (git-fixes bsc#1213259). - s390/ap: fix status returned by ap_qact() (git-fixes bsc#1213258). - s390/debug: add _ASM_S390_ prefix to header guard (git-fixes bsc#1213263). - s390/pci: clean up left over special treatment for function zero (bsc#1212525). - s390/pci: only add specific device in zpci_bus_scan_device() (bsc#1212525). - s390/pci: remove redundant pci_bus_add_devices() on new bus (bsc#1212525). - s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple() (git-fixes bsc#1213252). - s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU ld &lt; 2.36 (git-fixes bsc#1213264). - s390: discard .interp section (git-fixes bsc#1213247). - security: keys: Modify mismatched function name (git-fixes). - selftests/ir: fix build with ancient kernel headers (git-fixes). - selftests: cgroup: fix unsigned comparison with less than zero (git-fixes). - selftests: forwarding: Fix packet matching in mirroring selftests (git-fixes). - selftests: tc: add 'ct' action kconfig dep (git-fixes). - selftests: tc: add ConnTrack procfs kconfig (git-fixes). - selftests: tc: set timeout to 15 minutes (git-fixes). - signal/powerpc: On swapcontext failure force SIGSEGV (bsc#1194869). - signal: Replace force_sigsegv(SIGSEGV) with force_fatal_sig(SIGSEGV) (bsc#1194869). - smb3: do not reserve too many oplock credits (bsc#1193629). - smb3: missing null check in SMB2_change_notify (bsc#1193629). - smb: client: fix broken file attrs with nodfs mounts (bsc#1193629). - smb: client: fix missed ses refcounting (git-fixes). - smb: client: fix parsing of source mount option (bsc#1193629). - smb: client: fix shared DFS root mounts with different prefixes (bsc#1193629). - smb: client: fix warning in CIFSFindFirst() (bsc#1193629). - smb: client: fix warning in CIFSFindNext() (bsc#1193629). - smb: client: fix warning in cifs_match_super() (bsc#1193629). - smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629). - smb: client: fix warning in generic_ip_connect() (bsc#1193629). - smb: client: improve DFS mount check (bsc#1193629). - smb: client: remove redundant pointer 'server' (bsc#1193629). - smb: delete an unnecessary statement (bsc#1193629). - smb: move client and server files to common directory fs/smb (bsc#1193629). - smb: remove obsolete comment (bsc#1193629). - soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe() (git-fixes). - soundwire: cadence: Drain the RX FIFO after an IO timeout (git-fixes). - soundwire: stream: Add missing clear of alloc_slave_rt (git-fixes). - spi: bcm63xx: fix max prepend length (git-fixes). - swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes). - tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation (git-fixes). - wifi: airo: avoid uninitialized warning in airo_get_rate() (git-fixes). - wifi: ath10k: Trigger STA disconnect after reconfig complete on hardware restart (git-fixes). - wifi: ath11k: Add missing check for ioremap (git-fixes). - wifi: rtw89: debug: fix error code in rtw89_debug_priv_send_h2c_set() (git-fixes). - x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes). - x86/platform/uv: Add platform resolving #defines for misc GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Fix printed information in calc_mmioh_map (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Helper functions for allocating and freeing conversion tables (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Introduce helper function uv_pnode_to_socket (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Remove remaining BUG_ON() and BUG() calls (bsc#1212256 jsc#PED-4718). - x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256 jsc#PED-4718). - x86/platform/uv: Update UV platform code for SNC (bsc#1212256 jsc#PED-4718). - x86/platform/uv: When searching for minimums, start at INT_MAX not 99999 (bsc#1212256 jsc#PED-4718). - x86: Fix .brk attribute in linker script (git-fixes). - xfs: clean up the rtbitmap fsmap backend (git-fixes). - xfs: do not deplete the reserve pool when trying to shrink the fs (git-fixes). - xfs: do not reverse order of items in bulk AIL insertion (git-fixes). - xfs: fix getfsmap reporting past the last rt extent (git-fixes). - xfs: fix integer overflows in the fsmap rtbitmap and logdev backends (git-fixes). - xfs: fix interval filtering in multi-step fsmap queries (git-fixes). - xfs: fix logdev fsmap query result filtering (git-fixes). - xfs: fix off-by-one error when the last rt extent is in use (git-fixes). - xfs: fix uninitialized variable access (git-fixes). - xfs: make fsmap backend function key parameters const (git-fixes). - xfs: make the record pointer passed to query_range functions const (git-fixes). - xfs: pass explicit mount pointer to rtalloc query functions (git-fixes). Important SUSE bug 1150305 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1207894 SUSE bug 1208788 SUSE bug 1211243 SUSE bug 1211867 SUSE bug 1212256 SUSE bug 1212301 SUSE bug 1212525 SUSE bug 1212846 SUSE bug 1212905 SUSE bug 1213059 SUSE bug 1213061 SUSE bug 1213205 SUSE bug 1213206 SUSE bug 1213226 SUSE bug 1213233 SUSE bug 1213245 SUSE bug 1213247 SUSE bug 1213252 SUSE bug 1213258 SUSE bug 1213259 SUSE bug 1213263 SUSE bug 1213264 SUSE bug 1213286 SUSE bug 1213493 SUSE bug 1213523 SUSE bug 1213524 SUSE bug 1213533 SUSE bug 1213543 SUSE bug 1213705 CVE-2023-20593 CVE-2023-2985 CVE-2023-3117 CVE-2023-31248 CVE-2023-3390 CVE-2023-35001 CVE-2023-3812 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaThunderbird (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for MozillaThunderbird fixes the following issues: Update Mozilla Thunderbird 115.1.0 (bsc#1213746): - CVE-2023-4045: Fixed cross-origin restrictions bypass with Offscreen Canvas (bmo#1833876). - CVE-2023-4046: Fixed incorrect value used during WASM compilation (bmo#1837686). - CVE-2023-4047: Fixed potential permissions request bypass via clickjacking (bmo#1839073). - CVE-2023-4048: Fixed crash in DOMParser due to out-of-memory conditions (bmo#1841368). - CVE-2023-4049: Fixed potential race conditions when releasing platform objects (bmo#1842658). - CVE-2023-4050: Fixed stack buffer overflow in StorageManager (bmo#1843038). - CVE-2023-4052: Fixed file deletion and privilege escalation through Firefox uninstaller (bmo#1824420). - CVE-2023-4054: Fixed lack of warning when opening appref-ms files (bmo#1840777). - CVE-2023-4055: Fixed cookie jar overflow caused unexpected cookie jar state (bmo#1782561). - CVE-2023-4056: Fixed memory safety bugs (bmo#1820587, bmo#1824634, bmo#1839235, bmo#1842325, bmo#1843847). - CVE-2023-4057: Fixed memory safety bugs (bmo#1841682). Bugfixes: - Remove bashisms from startup-script (bsc#1213657). Important SUSE bug 1213657 SUSE bug 1213746 CVE-2023-4045 CVE-2023-4046 CVE-2023-4047 CVE-2023-4048 CVE-2023-4049 CVE-2023-4050 CVE-2023-4052 CVE-2023-4054 CVE-2023-4055 CVE-2023-4056 CVE-2023-4057 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gstreamer-plugins-ugly (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for gstreamer-plugins-ugly fixes the following issues: - CVE-2023-38103: Fixed an integer overflows when calculating the size of SIPR audio buffers. (bsc#1213751) - CVE-2023-38104: Fixed an integer overflow when calculation audio packet size . (bsc#1213750) Important SUSE bug 1213750 SUSE bug 1213751 CVE-2023-38103 CVE-2023-38104 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-40982: Fixed transient execution attack called 'Gather Data Sampling' (bsc#1206418). - CVE-2023-0459: Fixed information leak in __uaccess_begin_nospec (bsc#1211738). - CVE-2023-20569: Fixed side channel attack ‘Inception’ or ‘RAS Poisoning’ (bsc#1213287). - CVE-2023-21400: Fixed several memory corruptions due to improper locking in io_uring (bsc#1213272). - CVE-2023-2156: Fixed a flaw in the networking subsystem within the handling of the RPL protocol (bsc#1211131). - CVE-2023-2166: Fixed NULL pointer dereference in can_rcv_filter (bsc#1210627). - CVE-2023-31083: Fixed race condition in hci_uart_tty_ioctl (bsc#1210780). - CVE-2023-3268: Fixed an out of bounds memory access flaw in relay_file_read_start_pos in the relayfs (bsc#1212502). - CVE-2023-3567: Fixed a use-after-free in vcs_read in drivers/tty/vt/vc_screen.c (bsc#1213167). - CVE-2023-3609: Fixed reference counter leak leading to overflow in net/sched (bsc#1213586). - CVE-2023-3611: Fixed an out-of-bounds write in net/sched sch_qfq(bsc#1213585). - CVE-2023-3776: Fixed improper refcount update in cls_fw leads to use-after-free (bsc#1213588). - CVE-2023-38409: Fixed an issue in set_con2fb_map in drivers/video/fbdev/core/fbcon.c. Because an assignment occurs only for the first vc, the fbcon_registered_fb and fbcon_display arrays can be desynchronized in fbcon_mode_deleted (the con2fb_map points at the old fb_info) (bsc#1213417). - CVE-2023-3863: Fixed a use-after-free flaw in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC. This flaw allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-4004: Fixed improper element removal netfilter nft_set_pipapo (bsc#1213812). The following non-security bugs were fixed: - ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid() (bsc#1212445). - ACPI: CPPC: Add definition for undefined FADT preferred PM profile value (bsc#1212445). - ACPI/IORT: Remove erroneous id_count check in iort_node_get_rmr_info() (git-fixes). - ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error (git-fixes). - afs: Adjust ACK interpretation to try and cope with NAT (git-fixes). - afs: Fix access after dec in put functions (git-fixes). - afs: Fix afs_getattr() to refetch file status if callback break occurred (git-fixes). - afs: Fix dynamic root getattr (git-fixes). - afs: Fix fileserver probe RTT handling (git-fixes). - afs: Fix infinite loop found by xfstest generic/676 (git-fixes). - afs: Fix lost servers_outstanding count (git-fixes). - afs: Fix server->active leak in afs_put_server (git-fixes). - afs: Fix setting of mtime when creating a file/dir/symlink (git-fixes). - afs: Fix updating of i_size with dv jump from server (git-fixes). - afs: Fix vlserver probe RTT handling (git-fixes). - afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked (git-fixes). - afs: Use refcount_t rather than atomic_t (git-fixes). - afs: Use the operation issue time instead of the reply time for callbacks (git-fixes). - ALSA: emu10k1: roll up loops in DSP setup code for Audigy (git-fixes). - ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes). - ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops (git-fixes). - ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx (git-fixes). - ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp (git-fixes). - ALSA: hda/realtek - remove 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes). - ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes). - ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610 Wireless (git-fixes). - ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810 Wireless (git-fixes). - ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset (bsc#1207129). - ALSA: usb-audio: Always initialize fixed_rate in snd_usb_find_implicit_fb_sync_format() (git-fixes). - ALSA: usb-audio: Apply mutex around snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes). - ALSA: usb-audio: Avoid unnecessary interface change at EP close (git-fixes). - ALSA: usb-audio: Clear fixed clock rate at closing EP (git-fixes). - ALSA: usb-audio: Correct the return code from snd_usb_endpoint_set_params() (git-fixes). - ALSA: usb-audio: Drop superfluous interface setup at parsing (git-fixes). - ALSA: usb-audio: Fix possible NULL pointer dereference in snd_usb_pcm_has_fixed_rate() (git-fixes). - ALSA: usb-audio: Fix wrong kfree issue in snd_usb_endpoint_free_all (git-fixes). - ALSA: usb-audio: More refactoring of hw constraint rules (git-fixes). - ALSA: usb-audio: Properly refcounting clock rate (git-fixes). - ALSA: usb-audio: Rate limit usb_set_interface error reporting (git-fixes). - ALSA: usb-audio: Refcount multiple accesses on the single clock (git-fixes). - ALSA: usb-audio: Split endpoint setups for hw_params and prepare (take#2) (git-fixes). - ALSA: usb-audio: Update for native DSD support quirks (git-fixes). - ALSA: usb-audio: Use atomic_try_cmpxchg in ep_state_update (git-fixes). - ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes). - amd-pstate: Fix amd_pstate mode switch (git-fixes). - ASoC: amd: acp: fix for invalid dai id handling in acp_get_byte_count() (git-fixes). - ASoC: atmel: Fix the 8K sample parameter in I2SC master (git-fixes). - ASoc: codecs: ES8316: Fix DMIC config (git-fixes). - ASoC: codecs: wcd934x: fix resource leaks on component remove (git-fixes). - ASoC: codecs: wcd938x: fix codec initialisation race (git-fixes). - ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR (git-fixes). - ASoC: codecs: wcd938x: fix missing clsh ctrl error handling (git-fixes). - ASoC: codecs: wcd938x: fix soundwire initialisation race (git-fixes). - ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component remove (git-fixes). - ASoC: da7219: Check for failure reading AAD IRQ events (git-fixes). - ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes). - ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes). - ASoC: fsl_spdif: Silence output on stop (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0 (git-fixes). - ASoC: SOF: ipc3-dtrace: uninitialized data in dfsentry_trace_filter_write() (git-fixes). - ASoC: tegra: Fix ADX byte map (git-fixes). - ASoC: tegra: Fix AMX byte map (git-fixes). - ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register (git-fixes). - ata: pata_ns87415: mark ns87560_tf_read static (git-fixes). - block, bfq: Fix division by zero error on zero wsum (bsc#1213653). - block: Fix a source code comment in include/uapi/linux/blkzoned.h (git-fixes). - bus: mhi: add new interfaces to handle MHI channels directly (bsc#1207948). - bus: mhi: host: add destroy_device argument to mhi_power_down() (bsc#1207948). - can: gs_usb: gs_can_close(): add missing set of CAN state to CAN_STATE_STOPPED (git-fixes). - ceph: do not let check_caps skip sending responses for revoke msgs (bsc#1213856). - coda: Avoid partial allocation of sig_inputArgs (git-fixes). - cpufreq: amd-pstate: add amd-pstate driver parameter for mode selection (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State frequencies attributes (bsc#1212445). - cpufreq: amd-pstate: Add AMD P-State performance attributes (bsc#1212445). - cpufreq: amd-pstate: Add boost mode support for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: add driver working mode switch support (bsc#1212445). - cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445). - cpufreq: amd-pstate: Add fast switch function for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: Add guided autonomous mode (bsc#1212445). - cpufreq: amd-pstate: Add guided mode control support via sysfs (bsc#1212445). - cpufreq: amd-pstate: Add more tracepoint for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: Add resume and suspend callbacks (bsc#1212445). - cpufreq: amd-pstate: Add trace for AMD P-State module (bsc#1212445). - cpufreq: amd-pstate: avoid uninitialized variable use (bsc#1212445). - cpufreq: amd-pstate: change amd-pstate driver to be built-in type (bsc#1212445). - cpufreq: amd-pstate: convert sprintf with sysfs_emit() (bsc#1212445). - cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL register at init (bsc#1212445). - cpufreq: amd-pstate: Expose struct amd_cpudata (bsc#1212445). - cpufreq: amd-pstate: Fix initial highest_perf value (bsc#1212445). - cpufreq: amd-pstate: Fix invalid write to MSR_AMD_CPPC_REQ (bsc#1212445). - cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State (bsc#1212445). - cpufreq: amd-pstate: fix kernel hang issue while amd-pstate unregistering (bsc#1212445). - cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment (bsc#1212445). - cpufreq: amd-pstate: fix white-space (bsc#1212445). - cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445). - cpufreq: amd-pstate: implement amd pstate cpu online and offline callback (bsc#1212445). - cpufreq: amd-pstate: implement Pstate EPP support for the AMD processors (bsc#1212445). - cpufreq: amd-pstate: implement suspend and resume callbacks (bsc#1212445). - cpufreq: amd-pstate: Introduce a new AMD P-State driver to support future processors (bsc#1212445). - cpufreq: amd-pstate: Introduce the support for the processors with shared memory solution (bsc#1212445). - cpufreq: amd-pstate: Let user know amd-pstate is disabled (bsc#1212445). - cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated (bsc#1212445). - cpufreq: amd-pstate: Make varaiable mode_state_machine static (bsc#1212445). - cpufreq: amd_pstate: map desired perf into pstate scope for powersave governor (bsc#1212445). - cpufreq: amd-pstate: optimize driver working mode selection in amd_pstate_param() (bsc#1212445). - cpufreq: amd-pstate: Remove fast_switch_possible flag from active driver (bsc#1212445). - cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules (bsc#1212445). - cpufreq: amd-pstate: Set a fallback policy based on preferred_profile (bsc#1212445). - cpufreq: amd-pstate: simplify cpudata pointer assignment (bsc#1212445). - cpufreq: amd-pstate: Update policy->cur in amd_pstate_adjust_perf() (bsc#1212445). - cpufreq: amd-pstate: update pstate frequency transition delay time (bsc#1212445). - cpufreq: amd-pstate: Write CPPC enable bit per-socket (bsc#1212445). - crypto: kpp - Add helper to set reqsize (git-fixes). - crypto: qat - Use helper to set reqsize (git-fixes). - dlm: fix missing lkb refcount handling (git-fixes). - dlm: fix plock invalid read (git-fixes). - Documentation: cpufreq: amd-pstate: Move amd_pstate param to alphabetical order (bsc#1212445). - Documentation: devices.txt: reconcile serial/ucc_uart minor numers (git-fixes). - drm/amd/display: Add monitor specific edid quirk (git-fixes). - drm/amd/display: Add polling method to handle MST reply packet (bsc#1213578). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes). - drm/amd/display: Disable MPC split by default on special asic (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix seamless odm transitions (git-fixes). - drm/amd/display: Keep PHY active for DP displays on DCN31 (git-fixes). - drm/amd/display: only accept async flips for fast updates (git-fixes). - drm/amd/display: Only update link settings after successful MST link train (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: Remove Phantom Pipe Check When Calculating K1 and K2 (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: Unlock on error path in dm_handle_mst_sideband_msg_ready_event() (git-fixes). - drm/amd: Fix an error handling mistake in psp_sw_init() (git-fixes). - drm/amdgpu: add the fan abnormal detection feature (git-fixes). - drm/amdgpu: avoid restore process run into dead loop (git-fixes). - drm/amdgpu: fix clearing mappings for BOs that are always valid in VM (git-fixes). - drm/amdgpu: Fix minmax warning (git-fixes). - drm/amd/pm: add abnormal fan detection for smu 13.0.0 (git-fixes). - drm/amd/pm: conditionally disable pcie lane/speed switching for SMU13 (git-fixes). - drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes). - drm/amd/pm: share the code around SMU13 pcie parameters update (git-fixes). - drm/atomic: Allow vblank-enabled + self-refresh 'disable' (git-fixes). - drm/atomic: Fix potential use-after-free in nonblocking commits (git-fixes). - drm/bridge: tc358768: Add atomic_get_input_bus_fmts() implementation (git-fixes). - drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes). - drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes). - drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime (git-fixes). - drm/client: Fix memory leak in drm_client_modeset_probe (git-fixes). - drm/dp_mst: Clear MSG_RDY flag before sending new message (bsc#1213578). - drm: Fix null pointer dereference in drm_dp_atomic_find_time_slots() (bsc#1213578). - drm/i915: Do not preserve dpll_hw_state for slave crtc in Bigjoiner (git-fixes). - drm/i915/dpt: Use shmem for dpt objects (git-fixes). - drm/i915: Fix an error handling path in igt_write_huge() (git-fixes). - drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks (git-fixes). - drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes). - drm/msm/disp/dpu: get timing engine status from intf status register (git-fixes). - drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes). - drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK (git-fixes). - drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in a5xx_submit_in_rb() (git-fixes). - drm/radeon: Fix integer overflow in radeon_cs_parser_init (git-fixes). - drm/ttm: fix bulk_move corruption when adding a entry (git-fixes). - drm/ttm: fix warning that we shouldn't mix && and || (git-fixes). - drm/vmwgfx: Fix Legacy Display Unit atomic drm support (bsc#1213632). - drm/vmwgfx: Remove explicit and broken vblank handling (bsc#1213632). - drm/vmwgfx: Remove rcu locks from user resources (bsc#1213632). - fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe (git-fixes). - fbdev: imxfb: Removed unneeded release_mem_region (git-fixes). - fbdev: imxfb: warn about invalid left/right margin (git-fixes). - file: always lock position for FMODE_ATOMIC_POS (bsc#1213759). - fs: dlm: add midcomms init/start functions (git-fixes). - fs: dlm: do not set stop rx flag after node reset (git-fixes). - fs: dlm: filter user dlm messages for kernel locks (git-fixes). - fs: dlm: fix log of lowcomms vs midcomms (git-fixes). - fs: dlm: fix race between test_bit() and queue_work() (git-fixes). - fs: dlm: fix race in lowcomms (git-fixes). - fs: dlm: handle -EBUSY first in lock arg validation (git-fixes). - fs: dlm: move sending fin message into state change handling (git-fixes). - fs: dlm: retry accept() until -EAGAIN or error returns (git-fixes). - fs: dlm: return positive pid value for F_GETLK (git-fixes). - fs: dlm: start midcomms before scand (git-fixes). - fs: hfsplus: remove WARN_ON() from hfsplus_cat_{read,write}_inode() (git-fixes). - FS: JFS: Check for read-only mounted filesystem in txBegin (git-fixes). - FS: JFS: Fix null-ptr-deref Read in txBegin (git-fixes). - fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev (git-fixes). - gve: Set default duplex configuration to full (git-fixes). - gve: unify driver name usage (git-fixes). - hwmon: (adm1275) Allow setting sample averaging (git-fixes). - hwmon: (k10temp) Enable AMD3255 Proc to show negative temperature (git-fixes). - hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1 disabled (git-fixes). - hwmon: (pmbus/adm1275) Fix problems with temperature monitoring on ADM1272 (git-fixes). - i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in xiic_process() (git-fixes). - i2c: xiic: Do not try to handle more interrupt events after error (git-fixes). - iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED (git-fixes). - iavf: fix a deadlock caused by rtnl and driver's lock circular dependencies (git-fixes). - iavf: Fix out-of-bounds when setting channels on remove (git-fixes). - iavf: fix potential deadlock on allocation failure (git-fixes). - iavf: fix reset task race with iavf_remove() (git-fixes). - iavf: Fix use-after-free in free_netdev (git-fixes). - iavf: Move netdev_update_features() into watchdog task (git-fixes). - iavf: use internal state to free traffic IRQs (git-fixes). - iavf: Wait for reset in callbacks which trigger it (git-fixes). - IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes) - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - ice: handle extts in the miscellaneous interrupt thread (git-fixes). - igc: Check if hardware TX timestamping is enabled earlier (git-fixes). - igc: Enable and fix RX hash usage by netstack (git-fixes). - igc: Fix inserting of empty frame for launchtime (git-fixes). - igc: Fix Kernel Panic during ndo_tx_timeout callback (git-fixes). - igc: Fix launchtime before start of cycle (git-fixes). - igc: Fix race condition in PTP tx code (git-fixes). - igc: Handle PPS start time programming for past time values (git-fixes). - igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes). - igc: Remove delay during TX ring configuration (git-fixes). - igc: set TP bit in 'supported' and 'advertising' fields of ethtool_link_ksettings (git-fixes). - igc: Work around HW bug causing missing timestamps (git-fixes). - Input: i8042 - add Clevo PCX0DX to i8042 quirk table (git-fixes). - Input: iqs269a - do not poll during ATI (git-fixes). - Input: iqs269a - do not poll during suspend or resume (git-fixes). - jffs2: fix memory leak in jffs2_do_fill_super (git-fixes). - jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes). - jffs2: fix memory leak in jffs2_scan_medium (git-fixes). - jffs2: fix use-after-free in jffs2_clear_xattr_subsystem (git-fixes). - jffs2: GC deadlock reading a page that is used in jffs2_write_begin() (git-fixes). - jffs2: reduce stack usage in jffs2_build_xattr_subsystem() (git-fixes). - jfs: jfs_dmap: Validate db_l2nbperpage while mounting (git-fixes). - kABI fix after Restore kABI for NVidia vGPU driver (bsc#1210825). - kabi/severities: relax kABI for ath11k local symbols (bsc#1207948) - kselftest: vDSO: Fix accumulation of uninitialized ret when CLOCK_REALTIME is undefined (git-fixes). - KVM: arm64: Do not read a HW interrupt pending state in user context (git-fixes) - KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620) - KVM: Do not null dereference ops->destroy (git-fixes) - KVM: downgrade two BUG_ONs to WARN_ON_ONCE (git-fixes) - KVM: Initialize debugfs_dentry when a VM is created to avoid NULL (git-fixes) - KVM: s390: pv: fix index value of replaced ASCE (git-fixes bsc#1213867). - KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are unsupported (git-fixes). - KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled (CR0.PG==0) (git-fixes). - KVM: VMX: restore vmx_vmexit alignment (git-fixes). - KVM: x86: Account fastpath-only VM-Exits in vCPU stats (git-fixes). - leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev rename (git-fixes). - libceph: harden msgr2.1 frame segment length checks (bsc#1213857). - MAINTAINERS: Add AMD P-State driver maintainer entry (bsc#1212445). - m ALSA: usb-audio: Add quirk for Tascam Model 12 (git-fixes). - md: add error_handlers for raid0 and linear (bsc#1212766). - media: staging: atomisp: select V4L2_FWNODE (git-fixes). - mhi_power_down() kABI workaround (bsc#1207948). - mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes). - mmc: sdhci: fix DMA configure compatibility issue when 64bit DMA mode is used (git-fixes). - net: ena: fix shift-out-of-bounds in exponential backoff (git-fixes). - net: mana: Batch ringing RX queue doorbell on receiving packets (bsc#1212901). - net: mana: Use the correct WQE count for ringing RQ doorbell (bsc#1212901). - net/mlx5: DR, Support SW created encap actions for FW table (git-fixes). - net/mlx5e: Check for NOT_READY flag state after locking (git-fixes). - net/mlx5e: fix double free in mlx5e_destroy_flow_table (git-fixes). - net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create (git-fixes). - net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes). - net/mlx5e: XDP, Allow growing tail for XDP multi buffer (git-fixes). - net/mlx5e: xsk: Set napi_id to support busy polling on XSK RQ (git-fixes). - net: phy: marvell10g: fix 88x3310 power up (git-fixes). - net/sched: sch_qfq: refactor parsing of netlink parameters (bsc#1213585). - net/sched: sch_qfq: reintroduce lmax bound check for MTU (bsc#1213585). - nfsd: add encoding of op_recall flag for write delegation (git-fixes). - nfsd: fix double fget() bug in __write_ports_addfd() (git-fixes). - nfsd: Fix sparse warning (git-fixes). - nfsd: Remove open coding of string copy (git-fixes). - nfsv4.1: Always send a RECLAIM_COMPLETE after establishing lease (git-fixes). - nfsv4.1: freeze the session table upon receiving NFS4ERR_BADSESSION (git-fixes). - nvme: do not reject probe due to duplicate IDs for single-ported PCIe devices (git-fixes). - nvme: fix the NVME_ID_NS_NVM_STS_MASK definition (git-fixes). - nvme-pci: fix DMA direction of unmapping integrity data (git-fixes). - nvme-pci: remove nvme_queue from nvme_iod (git-fixes). - octeontx2-af: Move validation of ptp pointer before its usage (git-fixes). - octeontx2-pf: Add additional check for MCAM rules (git-fixes). - octeontx-af: fix hardware timestamp configuration (git-fixes). - PCI: Add function 1 DMA alias quirk for Marvell 88SE9235 (git-fixes). - PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold (git-fixes). - phy: hisilicon: Fix an out of bounds check in hisi_inno_phy_probe() (git-fixes). - pinctrl: amd: Detect internal GPIO0 debounce handling (git-fixes). - pinctrl: amd: Do not show `Invalid config param` errors (git-fixes). - pinctrl: amd: Fix mistake in handling clearing pins at startup (git-fixes). - pinctrl: amd: Only use special debounce behavior for GPIO 0 (git-fixes). - pinctrl: amd: Use amd_pinconf_set() for all config options (git-fixes). - platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind U100 (git-fixes). - RDMA/bnxt_re: Fix hang during driver unload (git-fixes) - RDMA/bnxt_re: Prevent handling any completions after qp destroy (git-fixes) - RDMA/core: Update CMA destination address on rdma_resolve_addr (git-fixes) - RDMA/irdma: Add missing read barriers (git-fixes) - RDMA/irdma: Fix data race on CQP completion stats (git-fixes) - RDMA/irdma: Fix data race on CQP request done (git-fixes) - RDMA/irdma: Fix op_type reporting in CQEs (git-fixes) - RDMA/irdma: Report correct WC error (git-fixes) - RDMA/mlx4: Make check for invalid flags stricter (git-fixes) - RDMA/mthca: Fix crash when polling CQ for shared QPs (git-fixes) - regmap: Account for register length in SMBus I/O limits (git-fixes). - regmap: Drop initial version of maximum transfer length fixes (git-fixes). - Restore kABI for NVidia vGPU driver (bsc#1210825). - Revert 'ALSA: usb-audio: Drop superfluous interface setup at parsing' (git-fixes). - Revert 'debugfs, coccinelle: check for obsolete DEFINE_SIMPLE_ATTRIBUTE() usage' (git-fixes). - Revert 'Drop AMDGPU patches for fixing regression (bsc#1213304,bsc#1213777)' - Revert 'iavf: Detach device during reset task' (git-fixes). - Revert 'iavf: Do not restart Tx queues after reset task failure' (git-fixes). - Revert 'NFSv4: Retry LOCK on OLD_STATEID during delegation return' (git-fixes). - Revert 'usb: dwc3: core: Enable AutoRetry feature in the controller' (git-fixes). - Revert 'usb: gadget: tegra-xudc: Fix error check in tegra_xudc_powerdomain_init()' (git-fixes). - Revert 'usb: xhci: tegra: Fix error check' (git-fixes). - Revert 'xhci: add quirk for host controllers that do not update endpoint DCS' (git-fixes). - Revive drm_dp_mst_hpd_irq() function (bsc#1213578). - rxrpc, afs: Fix selection of abort codes (git-fixes). - s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870). - s390/dasd: fix hanging device after quiesce/resume (git-fixes bsc#1213810). - s390/dasd: print copy pair message only for the correct error (git-fixes bsc#1213872). - s390/decompressor: specify __decompress() buf len to avoid overflow (git-fixes bsc#1213863). - s390: introduce nospec_uses_trampoline() (git-fixes bsc#1213870). - s390/ipl: add missing intersection check to ipl_report handling (git-fixes bsc#1213871). - s390/qeth: Fix vipa deletion (git-fixes bsc#1213713). - s390/vmem: fix empty page tables cleanup under KASAN (git-fixes bsc#1213715). - scftorture: Count reschedule IPIs (git-fixes). - scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout error is detected (bsc#1213756). - scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756). - scsi: lpfc: Clean up SLI-4 sysfs resource reporting (bsc#1213756). - scsi: lpfc: Copyright updates for 14.2.0.14 patches (bsc#1213756). - scsi: lpfc: Fix a possible data race in lpfc_unregister_fcf_rescan() (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignment in bsg loopback path (bsc#1213756). - scsi: lpfc: Fix incorrect big endian type assignments in FDMI and VMID paths (bsc#1213756). - scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756). - scsi: lpfc: Make fabric zone discovery more robust when handling unsolicited LOGO (bsc#1213756). - scsi: lpfc: Pull out fw diagnostic dump log message from driver's trace buffer (bsc#1213756). - scsi: lpfc: Qualify ndlp discovery state when processing RSCN (bsc#1213756). - scsi: lpfc: Refactor cpu affinity assignment paths (bsc#1213756). - scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl for loop topology (bsc#1213756). - scsi: lpfc: Replace all non-returning strlcpy() with strscpy() (bsc#1213756). - scsi: lpfc: Replace one-element array with flexible-array member (bsc#1213756). - scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk and lpfc_drop_node (bsc#1213756). - scsi: lpfc: Set Establish Image Pair service parameter only for Target Functions (bsc#1213756). - scsi: lpfc: Simplify fcp_abort transport callback log message (bsc#1213756). - scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756). - scsi: lpfc: Use struct_size() helper (bsc#1213756). - scsi: qla2xxx: Adjust IOCB resource on qpair create (bsc#1213747). - scsi: qla2xxx: Array index may go out of bound (bsc#1213747). - scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747). - scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport() (bsc#1213747). - scsi: qla2xxx: Correct the index of array (bsc#1213747). - scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747). - scsi: qla2xxx: Fix buffer overrun (bsc#1213747). - scsi: qla2xxx: Fix command flush during TMF (bsc#1213747). - scsi: qla2xxx: Fix deletion race condition (bsc#1213747). - scsi: qla2xxx: Fix end of loop test (bsc#1213747). - scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747). - scsi: qla2xxx: Fix error code in qla2x00_start_sp() (bsc#1213747). - scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747). - scsi: qla2xxx: Fix NULL pointer dereference in target mode (bsc#1213747). - scsi: qla2xxx: Fix potential NULL pointer dereference (bsc#1213747). - scsi: qla2xxx: Fix session hang in gnl (bsc#1213747). - scsi: qla2xxx: Fix TMF leak through (bsc#1213747). - scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747). - scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747). - scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue (bsc#1213747). - scsi: qla2xxx: Replace one-element array with DECLARE_FLEX_ARRAY() helper (bsc#1213747). - scsi: qla2xxx: Silence a static checker warning (bsc#1213747). - scsi: qla2xxx: Turn off noisy message log (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747). - scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747). - scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747). - selftests: rtnetlink: remove netdevsim device after ipsec offload test (git-fixes). - serial: qcom-geni: drop bogus runtime pm state update (git-fixes). - serial: sifive: Fix sifive_serial_console_setup() section (git-fixes). - series: udpate metadata Refresh - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - sfc: fix XDP queues mode with legacy IRQ (git-fixes). - sfc: use budget for TX completions (git-fixes). - soundwire: qcom: update status correctly with mask (git-fixes). - staging: ks7010: potential buffer overflow in ks_wlan_set_encode_ext() (git-fixes). - staging: r8712: Fix memory leak in _r8712_init_xmit_priv() (git-fixes). - SUNRPC: always free ctxt when freeing deferred request (git-fixes). - SUNRPC: double free xprt_ctxt while still in use (git-fixes). - SUNRPC: Fix trace_svc_register() call site (git-fixes). - SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (git-fixes). - SUNRPC: Remove dead code in svc_tcp_release_rqst() (git-fixes). - SUNRPC: remove the maximum number of retries in call_bind_status (git-fixes). - svcrdma: Prevent page release when nothing was received (git-fixes). - tpm_tis: Explicitly check for error code (git-fixes). - tty: n_gsm: fix UAF in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: add earlycon for imx8ulp platform (git-fixes). - ubifs: Add missing iput if do_tmpfile() failed in rename whiteout (git-fixes). - ubifs: do_rename: Fix wrong space budget when target inode's nlink > 1 (git-fixes). - ubifs: Error path in ubifs_remount_rw() seems to wrongly free write buffers (git-fixes). - ubifs: Fix AA deadlock when setting xattr for encrypted file (git-fixes). - ubifs: Fix build errors as symbol undefined (git-fixes). - ubifs: Fix deadlock in concurrent rename whiteout and inode writeback (git-fixes). - ubifs: Fix memory leak in alloc_wbufs() (git-fixes). - ubifs: Fix memory leak in do_rename (git-fixes). - ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock() (git-fixes). - ubifs: Fix to add refcount once page is set private (git-fixes). - ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback work (git-fixes). - ubifs: Fix wrong dirty space budget for dirty inode (git-fixes). - ubifs: Free memory for tmpfile name (git-fixes). - ubifs: Rectify space amount budget for mkdir/tmpfile operations (git-fixes). - ubifs: Rectify space budget for ubifs_symlink() if symlink is encrypted (git-fixes). - ubifs: Rectify space budget for ubifs_xrename() (git-fixes). - ubifs: Rename whiteout atomically (git-fixes). - ubifs: rename_whiteout: correct old_dir size computing (git-fixes). - ubifs: rename_whiteout: Fix double free for whiteout_ui->data (git-fixes). - ubifs: Reserve one leb for each journal head while doing budget (git-fixes). - ubifs: Re-statistic cleaned znode count if commit failed (git-fixes). - ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (git-fixes). - ubifs: ubifs_writepage: Mark page dirty after writing inode failed (git-fixes). - Update config files: enable CONFIG_X86_AMD_PSTATE (bsc#1212445) - usb: dwc2: platform: Improve error reporting for problems during .remove() (git-fixes). - usb: dwc3: do not reset device side if dwc3 was configured as host-only (git-fixes). - usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy (git-fixes). - usb: gadget: core: remove unbalanced mutex_unlock in usb_gadget_activate (git-fixes). - USB: serial: option: add LARA-R6 01B PIDs (git-fixes). - usb: typec: Iterate pds array when showing the pd list (git-fixes). - usb: typec: Set port->pd before adding device for typec_port (git-fixes). - usb: typec: Use sysfs_emit_at when concatenating the string (git-fixes). - usb: xhci-mtk: set the dma max_seg_size (git-fixes). - vhost_net: revert upend_idx only on retriable error (git-fixes). - vhost: support PACKED when setting-getting vring_base (git-fixes). - virtio_net: Fix error unwinding of XDP initialization (git-fixes). - virtio-net: Maintain reverse cleanup order (git-fixes). - wifi: ath11k: add support for suspend in power down state (bsc#1207948). - wifi: ath11k: handle irq enable/disable in several code path (bsc#1207948). - wifi: ath11k: handle thermal device registeration together with MAC (bsc#1207948). - wifi: ath11k: remove MHI LOOPBACK channels (bsc#1207948). - wifi: ray_cs: Drop useless status variable in parse_addr() (git-fixes). - wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes). - wl3501_cs: use eth_hw_addr_set() (git-fixes). - x86/PVH: obtain VGA console info in Dom0 (git-fixes). - xen/blkfront: Only check REQ_FUA for writes (git-fixes). - xen/pvcalls-back: fix double frees with pvcalls_new_active_socket() (git-fixes). - xfs: AIL needs asynchronous CIL forcing (bsc#1211811). - xfs: async CIL flushes need pending pushes to be made stable (bsc#1211811). - xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state() (bsc#1211811). - xfs: CIL work is serialised, not pipelined (bsc#1211811). - xfs: do not run shutdown callbacks on active iclogs (bsc#1211811). - xfs: drop async cache flushes from CIL commits (bsc#1211811). - xfs: factor out log write ordering from xlog_cil_push_work() (bsc#1211811). - xfs: move the CIL workqueue to the CIL (bsc#1211811). - xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811). - xfs: order CIL checkpoint start records (bsc#1211811). - xfs: pass a CIL context to xlog_write() (bsc#1211811). - xfs: rework xlog_state_do_callback() (bsc#1211811). - xfs: run callbacks before waking waiters in xlog_state_shutdown_callbacks (bsc#1211811). - xfs: separate out log shutdown callback processing (bsc#1211811). - xfs: wait iclog complete before tearing down AIL (bsc#1211811). - xfs: XLOG_STATE_IOERROR must die (bsc#1211811). - xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes). - xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes). - xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes). Important SUSE bug 1206418 SUSE bug 1207129 SUSE bug 1207948 SUSE bug 1210627 SUSE bug 1210780 SUSE bug 1210825 SUSE bug 1211131 SUSE bug 1211738 SUSE bug 1211811 SUSE bug 1212445 SUSE bug 1212502 SUSE bug 1212604 SUSE bug 1212766 SUSE bug 1212901 SUSE bug 1213167 SUSE bug 1213272 SUSE bug 1213287 SUSE bug 1213304 SUSE bug 1213417 SUSE bug 1213578 SUSE bug 1213585 SUSE bug 1213586 SUSE bug 1213588 SUSE bug 1213601 SUSE bug 1213620 SUSE bug 1213632 SUSE bug 1213653 SUSE bug 1213713 SUSE bug 1213715 SUSE bug 1213747 SUSE bug 1213756 SUSE bug 1213759 SUSE bug 1213777 SUSE bug 1213810 SUSE bug 1213812 SUSE bug 1213856 SUSE bug 1213857 SUSE bug 1213863 SUSE bug 1213867 SUSE bug 1213870 SUSE bug 1213871 SUSE bug 1213872 CVE-2022-40982 CVE-2023-0459 CVE-2023-20569 CVE-2023-21400 CVE-2023-2156 CVE-2023-2166 CVE-2023-31083 CVE-2023-3268 CVE-2023-3567 CVE-2023-3609 CVE-2023-3611 CVE-2023-3776 CVE-2023-38409 CVE-2023-3863 CVE-2023-4004 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for gsl (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for gsl fixes the following issues: - CVE-2020-35357: Fixed a stack out of bounds read in gsl_stats_quantile_from_sorted_data(). (bsc#1214681) Moderate SUSE bug 1214681 CVE-2020-35357 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaThunderbird (Critical) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for MozillaThunderbird fixes the following issues: Security fixes: - Mozilla Thunderbird 115.2.2 (MFSA 2023-40, bsc#1215245) - CVE-2023-4863: Fixed heap buffer overflow in libwebp (bmo#1852649). - Mozilla Thunderbird 115.2 (MFSA 2023-38, bsc#1214606) - CVE-2023-4573: Memory corruption in IPC CanvasTranslator (bmo#1846687) - CVE-2023-4574: Memory corruption in IPC ColorPickerShownCallback (bmo#1846688) - CVE-2023-4575: Memory corruption in IPC FilePickerShownCallback (bmo#1846689) - CVE-2023-4576: Integer Overflow in RecordedSourceSurfaceCreation (bmo#1846694) - CVE-2023-4577: Memory corruption in JIT UpdateRegExpStatics (bmo#1847397) - CVE-2023-4051: Full screen notification obscured by file open dialog (bmo#1821884) - CVE-2023-4578: Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception (bmo#1839007) - CVE-2023-4053: Full screen notification obscured by external program (bmo#1839079) - CVE-2023-4580: Push notifications saved to disk unencrypted (bmo#1843046) - CVE-2023-4581: XLL file extensions were downloadable without warnings (bmo#1843758) - CVE-2023-4582: Buffer Overflow in WebGL glGetProgramiv (bmo#1773874) - CVE-2023-4583: Browsing Context potentially not cleared when closing Private Window (bmo#1842030) - CVE-2023-4584: Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 (bmo#1843968, bmo#1845205, bmo#1846080, bmo#1846526, bmo#1847529) - CVE-2023-4585: Memory safety bugs fixed in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2 (bmo#1751583, bmo#1833504, bmo#1841082, bmo#1847904, bmo#1848999) Other fixes: Mozilla Thunderbird 115.2.1 * new: Column separators are now shown between all columns in tree view (bmo#1847441) * fixed: Crash reporter did not work in Thunderbird Flatpak (bmo#1843102) * fixed: New mail notification always opened message in message pane, even if pane was disabled (bmo#1840092) * fixed: After moving an IMAP message to another folder, the incorrect message was selected in the message list (bmo#1845376) * fixed: Adding a tag to an IMAP message opened in a tab failed (bmo#1844452) * fixed: Junk/Spam folders were not always shown in Unified Folders mode (bmo#1838672) * fixed: Middle-clicking a folder or message did not open it in a background tab, as in previous versions (bmo#1842482) * fixed: Settings tab visual improvements: Advanced Fonts dialog, Section headers hidden behind search box (bmo#1717382,bmo#1846751) * fixed: Various visual and style fixes (bmo#1843707,bmo#1849823) Mozilla Thunderbird 115.2 * new: Thunderbird MSIX packages are now published on archive.mozilla.org (bmo#1817657) * changed: Size, Unread, and Total columns are now right- aligned (bmo#1848604) * changed: Newsgroup names in message list header are now abbreviated (bmo#1833298) * fixed: Message compose window did not apply theme colors to menus (bmo#1845699) * fixed: Reading the second new message in a folder cleared the unread indicator of all other new messages (bmo#1839805) * fixed: Displayed counts of unread or flagged messages could become out-of-sync (bmo#1846860) * fixed: Deleting a message from the context menu with messages sorted in chronological order and smooth scroll enabled caused message list to scroll to top (bmo#1843462) * fixed: Repeatedly switching accounts in Subscribe dialog caused tree view to stop updating (bmo#1845593) * fixed: 'Ignore thread' caused message cards to display incorrectly in message list (bmo#1847966) * fixed: Creating tags from unified toolbar failed (bmo#1846336) * fixed: Cross-folder navigation using F and N did not work (bmo#1845011) * fixed: Account Manager did not resize to fit content, causing 'Close' button to become hidden outside bounds of dialog when too many accounts were listed (bmo#1847555) * fixed: Remote content exceptions could not be added in Settings (bmo#1847576) * fixed: Newsgroup list file did not get updated after adding a new NNTP server (bmo#1845464) * fixed: 'Download all headers' option in NNTP 'Download Headers' dialog was incorrectly selected by default (bmo#1845457) * fixed: 'Convert to event/task' was missing from mail context menu (bmo#1817705) * fixed: Events and tasks were not shown in some cases despite being present on remote server (bmo#1827100) * fixed: Various visual and UX improvements (bmo#1844244,bmo#1845645) - Mozilla Thunderbird 115.1.1 * fixed: Some HTML emails printed headers on first page and message on subsequent pages (bmo#1843628) * fixed: Deleting messages from message list sometimes scrolled list to bottom, selecting bottommost message (bmo#1835173) * fixed: Width of icon columns (like Junk or Starred) in message list did not adjust when UI density was changed (bmo#1843014) * fixed: Old OpenPGP secret keys could not be used to decrypt messages under certain circumstances (bmo#1835786) * fixed: When multiple folder modes were active, tab focus navigated through all folder mode options before reaching message list (bmo#1842060) * fixed: Unread message count badge was not displayed on parent folders of subfolder containing unread messages (bmo#1844534) * fixed: 'Undo archive' (via Ctrl-Z) did not un-archive previously archived messages (bmo#1829340) * fixed: 'New' button dropdown menu in 'Message Filters' dialog could not be opened via keyboard navigation (bmo#1843511) * fixed: 'Show New Mail Alert for' input field in 'Customize New Mail Alert' dialog had zero width when using certain language packs (bmo#1845832) * fixed: 'Account Wizard' dialog was too narrow when adding a news server, partially hiding confirmation buttons (bmo#1846588) * fixed: Link Properties and Image Properties dialogs in the composer were too wide (bmo#1816850) * fixed: Thunderbird version number and details in 'About' dialog were not automatically read by screen readers when first opening dialog (bmo#1847078) * fixed: Flatpak improvements and bug fixes (bmo#1825399,bmo#1843094,bmo#1843097) * fixed: Various visual and UX improvements (bmo#1846262) Critical SUSE bug 1214606 SUSE bug 1215231 SUSE bug 1215245 CVE-2023-4051 CVE-2023-4053 CVE-2023-4573 CVE-2023-4574 CVE-2023-4575 CVE-2023-4576 CVE-2023-4577 CVE-2023-4578 CVE-2023-4580 CVE-2023-4581 CVE-2023-4582 CVE-2023-4583 CVE-2023-4584 CVE-2023-4585 CVE-2023-4863 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for ffmpeg (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for ffmpeg fixes the following issues: - CVE-2021-28429: Fixed Integer overflow vulnerability in av_timecode_make_string in libavutil/timecode.c (bsc#1214246). Moderate SUSE bug 1214246 CVE-2021-28429 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libwebp (Critical) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libwebp fixes the following issues: - CVE-2023-4863: Fixed heap buffer overflow (bsc#1215231). Critical SUSE bug 1215231 CVE-2023-4863 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for poppler (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for poppler fixes the following issues: - CVE-2022-37050: Fixed denial-of-service via savePageAs in PDFDoc.c (bsc#1214622). - CVE-2022-37051: Fixed abort in main() in pdfunite.cc (bsc#1214621). - CVE-2022-38349: Fixed reachable assertion in Object.h that will lead to denial of service (bsc#1214618). Moderate SUSE bug 1214618 SUSE bug 1214621 SUSE bug 1214622 CVE-2022-37050 CVE-2022-37051 CVE-2022-38349 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libXpm (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libXpm fixes the following issues: - CVE-2023-43788: Fixed an out of bounds read when creating an image (bsc#1215686). - CVE-2023-43789: Fixed an out of bounds read when parsing an XPM file with a corrupted colormap (bsc#1215687). Moderate SUSE bug 1215686 SUSE bug 1215687 CVE-2023-43788 CVE-2023-43789 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libraw (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. (bsc#1215308) Moderate SUSE bug 1215308 CVE-2020-22628 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libraw (Moderate) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libraw fixes the following issues: - CVE-2020-22628: Fixed buffer overflow vulnerability in LibRaw::stretch() function in libraw\src\postprocessing\aspect_ratio.cpp. (bsc#1215308) Moderate SUSE bug 1215308 CVE-2020-22628 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-38457: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203330). - CVE-2022-40133: Fixed a use-after-free vulnerability in vmwgfx driver that allowed a local attacker to cause a denial of service (bsc#1203329). - CVE-2023-2007: Fixed a flaw in the DPT I2O Controller driver that could allow an attacker to escalate privileges and execute arbitrary code in the context of the kernel (bsc#1210448). - CVE-2023-20588: Fixed a division-by-zero error on some AMD processors that can potentially return speculative data resulting in loss of confidentiality (bsc#1213927). - CVE-2023-34319: Fixed buffer overrun triggered by unusual packet in xen/netback (XSA-432) (bsc#1213546). - CVE-2023-3610: Fixed use-after-free vulnerability in nf_tables can be exploited to achieve local privilege escalation (bsc#1213580). - CVE-2023-37453: Fixed oversight in SuperSpeed initialization (bsc#1213123). - CVE-2023-3772: Fixed a flaw in XFRM subsystem that may have allowed a malicious user with CAP_NET_ADMIN privileges to directly dereference a NULL pointer leading to a possible kernel crash and denial of service (bsc#1213666). - CVE-2023-3863: Fixed a use-after-free flaw was found in nfc_llcp_find_local that allowed a local user with special privileges to impact a kernel information leak issue (bsc#1213601). - CVE-2023-40283: Fixed use-after-free in l2cap_sock_ready_cb (bsc#1214233). - CVE-2023-4128: Fixed a use-after-free flaw in net/sched/cls_fw.c that allowed a local attacker to perform a local privilege escalation due to incorrect handling of the existing filter, leading to a kernel information leak issue (bsc#1214149). - CVE-2023-4133: Fixed use after free bugs caused by circular dependency problem in cxgb4 (bsc#1213970). - CVE-2023-4134: Fixed use-after-free in cyttsp4_watchdog_work() (bsc#1213971). - CVE-2023-4147: Fixed use-after-free in nf_tables_newrule (bsc#1213968). - CVE-2023-4194: Fixed a type confusion in net tun_chr_open() (bsc#1214019). - CVE-2023-4273: Fixed a flaw in the exFAT driver of the Linux kernel that alloawed a local privileged attacker to overflow the kernel stack (bsc#1214120). - CVE-2023-4387: Fixed use-after-free flaw in vmxnet3_rq_alloc_rx_buf that could allow a local attacker to crash the system due to a double-free (bsc#1214350). - CVE-2023-4459: Fixed a NULL pointer dereference flaw in vmxnet3_rq_cleanup that may have allowed a local attacker with normal user privilege to cause a denial of service (bsc#1214451). - CVE-2023-4563: Fixed use-after-free in nft_verdict_dump due to a race between set GC and transaction (bsc#1214727). - CVE-2023-4569: Fixed information leak in nft_set_catchall_flush in net/netfilter/nf_tables_api.c (bsc#1214729). The following non-security bugs were fixed: - ACPI/IORT: Update SMMUv3 DeviceID support (bsc#1214305). - ACPI: processor: perflib: Avoid updating frequency QoS unnecessarily (git-fixes). - ACPI: processor: perflib: Use the 'no limit' frequency QoS (git-fixes). - ACPI: x86: s2idle: Fix a logic error parsing AMD constraints table (git-fixes). - ALSA: ac97: Fix possible error value of *rac97 (git-fixes). - ALSA: hda/cs8409: Support new Dell Dolphin Variants (git-fixes). - ALSA: hda/realtek - Remodified 3k pull low procedure (git-fixes). - ALSA: hda/realtek: Add quirk for HP Victus 16-d1xxx to enable mute LED (git-fixes). - ALSA: hda/realtek: Add quirk for mute LEDs on HP ENVY x360 15-eu0xxx (git-fixes). - ALSA: hda/realtek: Add quirks for HP G11 Laptops (git-fixes). - ALSA: hda/realtek: Switch Dell Oasis models to use SPI (git-fixes). - ALSA: pcm: Fix missing fixup call in compat hw_refine ioctl (git-fixes). - ALSA: usb-audio: Add support for Mythware XA001AU capture and playback interfaces (git-fixes). - ALSA: usb-audio: Fix init call orders for UAC1 (git-fixes). - ALSA: ymfpci: Fix the missing snd_card_free() call at probe error (git-fixes). - ARM: dts: imx6dl: prtrvt, prtvt7, prti6q, prtwd2: fix USB related warnings (git-fixes). - ARM: dts: imx6sll: fixup of operating points (git-fixes). - ARM: spear: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - ASoC: SOF: Intel: fix SoundWire/HDaudio mutual exclusion (git-fixes). - ASoC: amd: yc: Fix a non-functional mic on Lenovo 82SJ (git-fixes). - ASoC: lower 'no backend DAIs enabled for ... Port' log severity (git-fixes). - ASoC: meson: axg-tdm-formatter: fix channel slot allocation (git-fixes). - ASoC: rt5665: add missed regulator_bulk_disable (git-fixes). - ASoC: stac9766: fix build errors with REGMAP_AC97 (git-fixes). - ASoC: tegra: Fix SFC conversion for few rates (git-fixes). - Bluetooth: Fix potential use-after-free when clear keys (git-fixes). - Bluetooth: L2CAP: Fix use-after-free (git-fixes). - Bluetooth: L2CAP: Fix use-after-free in l2cap_sock_ready_cb (git-fixes). - Bluetooth: Remove unused declaration amp_read_loc_info() (git-fixes). - Bluetooth: btusb: Add MT7922 bluetooth ID for the Asus Ally (git-fixes). - Bluetooth: btusb: Do not call kfree_skb() under spin_lock_irqsave() (git-fixes). - Bluetooth: nokia: fix value check in nokia_bluetooth_serdev_probe() (git-fixes). - CONFIG_NVME_VERBOSE_ERRORS=y gone with a82baa8083b - CONFIG_PRINTK_SAFE_LOG_BUF_SHIFT=13 gone with 7e152d55123 - Created new preempt kernel flavor Configs are cloned from the respective $arch/default configs. All changed configs appart from CONFIG_PREEMPT->y are a result of dependencies, namely many lock/unlock primitives are no longer inlined in the preempt kernel. TREE_RCU has been also changed to PREEMPT_RCU which is the default implementation for PREEMPT kernel. - Documentation: devices.txt: Fix minors for ttyCPM* (git-fixes). - Documentation: devices.txt: Remove ttyIOC* (git-fixes). - Documentation: devices.txt: Remove ttySIOC* (git-fixes). - Drivers: hv: Do not remap addresses that are above shared_gpa_boundary (bsc#1206453). - Drivers: hv: Enable vmbus driver for nested root partition (bsc#1206453). - Drivers: hv: Explicitly request decrypted in vmap_pfn() calls (bsc#1206453). - Drivers: hv: Setup synic registers in case of nested root partition (bsc#1206453). - Drivers: hv: vmbus: Call hv_synic_free() if hv_synic_alloc() fails (bsc#1206453). - Drivers: hv: vmbus: Remove second mapping of VMBus monitor pages (bsc#1206453). - Drivers: hv: vmbus: Remove second way of mapping ring buffers (bsc#1206453). - Drivers: hv: vmbus: Remove the per-CPU post_msg_page (bsc#1206453). - Drop amdgpu patch causing spamming (bsc#1215523) - Drop cfg80211 lock fix patches that caused a regression (bsc#1213757) - Drop rtsx patch that caused a regression (bsc#1214397,bsc#1214428) - Enable Analog Devices Industrial Ethernet PHY driver (jsc#PED-4759) - HID: add quirk for 03f0:464a HP Elite Presenter Mouse (git-fixes). - HID: logitech-dj: Fix error handling in logi_dj_recv_switch_to_dj_mode() (git-fixes). - HID: logitech-hidpp: Add USB and Bluetooth IDs for the Logitech G915 TKL Keyboard (git-fixes). - HID: multitouch: Correct devm device reference for hidinput input_dev name (git-fixes). - HID: wacom: remove the battery when the EKR is off (git-fixes). - HWPOISON: offline support: fix spelling in Documentation/ABI/ (git-fixes). - IB/hfi1: Fix possible panic during hotplug remove (git-fixes) - IB/uverbs: Fix an potential error pointer dereference (git-fixes) - Input: exc3000 - properly stop timer on shutdown (git-fixes). - KVM: s390: fix sthyi error handling (git-fixes bsc#1214370). - Kbuild: add -Wno-shift-negative-value where -Wextra is used (bsc#1214756). - Kbuild: move to -std=gnu11 (bsc#1214756). - PCI/ASPM: Avoid link retraining race (git-fixes). - PCI/ASPM: Factor out pcie_wait_for_retrain() (git-fixes). - PCI/ASPM: Return 0 or -ETIMEDOUT from pcie_retrain_link() (git-fixes). - PCI: Mark NVIDIA T4 GPUs to avoid bus reset (git-fixes). - PCI: acpiphp: Reassign resources on bridge if necessary (git-fixes). - PCI: acpiphp: Use pci_assign_unassigned_bridge_resources() only for non-root bus (git-fixes). - PCI: hv: Enable PCI pass-thru devices in Confidential VMs (bsc#1206453). - PCI: hv: Replace retarget_msi_interrupt_params with (bsc#1206453). - PCI: meson: Remove cast between incompatible function type (git-fixes). - PCI: microchip: Correct the DED and SEC interrupt bit offsets (git-fixes). - PCI: microchip: Remove cast between incompatible function type (git-fixes). - PCI: pciehp: Use RMW accessors for changing LNKCTL (git-fixes). - PCI: rockchip: Remove writes to unused registers (git-fixes). - PCI: s390: Fix use-after-free of PCI resources with per-function hotplug (git-fixes). - PCI: tegra194: Fix possible array out of bounds access (git-fixes). - PM / devfreq: Fix leak in devfreq_dev_release() (git-fixes). - RDMA/bnxt_re: Fix error handling in probe failure path (git-fixes) - RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes) - RDMA/efa: Fix wrong resources deallocation order (git-fixes) - RDMA/hns: Fix CQ and QP cache affinity (git-fixes) - RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes) - RDMA/hns: Fix port active speed (git-fixes) - RDMA/irdma: Prevent zero-length STAG registration (git-fixes) - RDMA/irdma: Replace one-element array with flexible-array member (git-fixes) - RDMA/mlx5: Return the firmware result upon destroying QP/RQ (git-fixes) - RDMA/qedr: Remove a duplicate assignment in irdma_query_ah() (git-fixes) - RDMA/siw: Balance the reference of cep->kref in the error path (git-fixes) - RDMA/siw: Correct wrong debug message (git-fixes) - RDMA/umem: Set iova in ODP flow (git-fixes) - README.BRANCH: Add Miroslav Franc as a SLE15-SP4 co-maintainer. - Revert 'IB/isert: Fix incorrect release of isert connection' (git-fixes) - Revert 'tracing: Add '(fault)' name injection to kernel probes' (git-fixes). - SMB3: Do not send lease break acknowledgment if all file handles have been closed (git-fixes). - Update patches.suse/cpufreq-intel_pstate-Fix-cpu-pstate.turbo_freq-initi.patch (git-fixes bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - amba: bus: fix refcount leak (git-fixes). - arm64: dts: imx8mn-var-som: add missing pull-up for onboard PHY reset pinmux (git-fixes). - arm64: dts: qcom: qrb5165-rb5: fix thermal zone conflict (git-fixes). - arm64: dts: rockchip: Disable HS400 for eMMC on ROCK Pi 4 (git-fixes). - audit: fix possible soft lockup in __audit_inode_child() (git-fixes). - backlight/bd6107: Compare against struct fb_info.device (git-fixes). - backlight/gpio_backlight: Compare against struct fb_info.device (git-fixes). - backlight/lv5207lp: Compare against struct fb_info.device (git-fixes). - batman-adv: Do not get eth header before batadv_check_management_packet (git-fixes). - batman-adv: Do not increase MTU when set by user (git-fixes). - batman-adv: Fix TT global entry leak when client roamed back (git-fixes). - batman-adv: Fix batadv_v_ogm_aggr_send memory leak (git-fixes). - batman-adv: Hold rtnl lock during MTU update via netlink (git-fixes). - batman-adv: Trigger events for auto adjusted MTU (git-fixes). - bnx2x: fix page fault following EEH recovery (bsc#1214299). - bpf: Disable preemption in bpf_event_output (git-fixes). - bpftool: Print newline before '}' for struct with padding only fields (bsc#1211220 jsc#PED-3924). - bus: mhi: host: Skip MHI reset if device is in RDDM (git-fixes). - bus: ti-sysc: Fix build warning for 64-bit build (git-fixes). - bus: ti-sysc: Fix cast to enum warning (git-fixes). - bus: ti-sysc: Flush posted write on enable before reset (git-fixes). - can: gs_usb: gs_usb_receive_bulk_callback(): count RX overflow errors also in case of OOM (git-fixes). - ceph: defer stopping mdsc delayed_work (bsc#1214392). - ceph: do not check for quotas on MDS stray dirs (bsc#1214238). - ceph: never send metrics if disable_send_metrics is set (bsc#1214180). - check-for-config-changes: ignore BUILTIN_RETURN_ADDRESS_STRIPS_PAC (bsc#1214380). gcc7 on SLE 15 does not support this while later gcc does. - cifs: add missing return value check for cifs_sb_tlink (bsc#1193629). - cifs: allow dumping keys for directories too (bsc#1193629). - cifs: fix mid leak during reconnection after timeout threshold (git-fixes). - cifs: if deferred close is disabled then close files immediately (git-fixes). - cifs: is_network_name_deleted should return a bool (bsc#1193629). - cifs: update internal module version number for cifs.ko (bsc#1193629). - clk: Fix slab-out-of-bounds error in devm_clk_release() (git-fixes). - clk: Fix undefined reference to `clk_rate_exclusive_{get,put}' (git-fixes). - clk: imx8mp: fix sai4 clock (git-fixes). - clk: imx: composite-8m: fix clock pauses when set_rate would be a no-op (git-fixes). - clk: imx: pll14xx: dynamically configure PLL for 393216000/361267200Hz (git-fixes). - clk: qcom: camcc-sc7180: fix async resume during probe (git-fixes). - clk: qcom: gcc-mdm9615: use proper parent for pll0_vote clock (git-fixes). - clk: qcom: gcc-sc7180: Fix up gcc_sdcc2_apps_clk_src (git-fixes). - clk: qcom: gcc-sm8250: Fix gcc_sdcc2_apps_clk_src (git-fixes). - clk: sunxi-ng: Modify mismatched function name (git-fixes). - clocksource/drivers/arm_arch_timer: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource/drivers/hyper-v: Rework clocksource and sched clock setup (bsc#1206453). - clocksource/drivers/sp804: Do not use timer namespace for timer_shutdown() function (bsc#1213970). - clocksource: hyper-v: Add TSC page support for root partition (bsc#1206453). - clocksource: hyper-v: Introduce TSC PFN getter (bsc#1206453). - clocksource: hyper-v: Introduce a pointer to TSC page (bsc#1206453). - clocksource: hyper-v: Use TSC PFN getter to map vvar page (bsc#1206453). - clocksource: hyper-v: make sure Invariant-TSC is used if it is (bsc#1206453). - cpu/SMT: Allow enabling partial SMT states via sysfs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Create topology_smt_thread_allowed() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move SMT prototypes into cpu_smt.h (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Move smt/control simple exit cases earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Remove topology_smt_supported() (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpu/SMT: Store the current/max number of threads (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - cpufreq: Fix the race condition while updating the transition_task of policy (git-fixes). - cpufreq: intel_pstate: Adjust balance_performance EPP for Sapphire Rapids (bsc#1214659). - cpufreq: intel_pstate: Enable HWP IO boost for all servers (bsc#1208949 jsc#PED-6003 jsc#PED-6004). - cpufreq: intel_pstate: Fix scaling for hybrid-capable systems with disabled E-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: Read all MSRs on the target CPU (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Rework HWP calibration (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - cpufreq: intel_pstate: hybrid: Use known scaling factor for P-cores (bsc#1212526 bsc#1214368 jsc#PED-4927 jsc#PED-4929). - crypto: caam - fix unchecked return value error (git-fixes). - crypto: stm32 - Properly handle pm_runtime_get failing (git-fixes). - define more Hyper-V related constants (bsc#1206453). - dma-buf/sw_sync: Avoid recursive lock during fence signal (git-fixes). - dma-buf/sync_file: Fix docs syntax (git-fixes). - dmaengine: idxd: Modify the dependence of attribute pasid_enabled (git-fixes). - dmaengine: mcf-edma: Fix a potential un-allocated memory access (git-fixes). - dmaengine: pl330: Return DMA_PAUSED when transaction is paused (git-fixes). - dmaengine: ste_dma40: Add missing IRQ check in d40_probe (git-fixes). - docs/process/howto: Replace C89 with C11 (bsc#1214756). - docs: kernel-parameters: Refer to the correct bitmap function (git-fixes). - docs: networking: replace skb_hwtstamp_tx with skb_tstamp_tx (git-fixes). - docs: printk-formats: Fix hex printing of signed values (git-fixes). - driver core: test_async: fix an error code (git-fixes). - drivers: clk: keystone: Fix parameter judgment in _of_pll_clk_init() (git-fixes). - drivers: usb: smsusb: fix error handling code in smsusb_init_device (git-fixes). - drm/amd/display: Apply 60us prefetch for DCFCLK &lt;= 300Mhz (git-fixes). - drm/amd/display: Disable phantom OTG after enable for plane disable (git-fixes). - drm/amd/display: Do not set drr on pipe commit (git-fixes). - drm/amd/display: Enable dcn314 DPP RCO (git-fixes). - drm/amd/display: Ensure that planes are in the same order (git-fixes). - drm/amd/display: Implement workaround for writing to OTG_PIXEL_RATE_DIV register (git-fixes). - drm/amd/display: Retain phantom plane/stream if validation fails (git-fixes). - drm/amd/display: Skip DPP DTO update if root clock is gated (git-fixes). - drm/amd/display: Use update plane and stream routine for DCN32x (git-fixes). - drm/amd/display: check TG is non-null before checking if enabled (git-fixes). - drm/amd/display: check attr flag before set cursor degamma on DCN3+ (git-fixes). - drm/amd/display: disable RCO for DCN314 (git-fixes). - drm/amd/display: do not wait for mpc idle if tg is disabled (git-fixes). - drm/amd/display: fix access hdcp_workqueue assert (git-fixes). - drm/amd/display: fix the build when DRM_AMD_DC_DCN is not set (git-fixes). - drm/amd/display: limit DPIA link rate to HBR3 (git-fixes). - drm/amd/display: phase3 mst hdcp for multiple displays (git-fixes). - drm/amd/display: save restore hdcp state when display is unplugged from mst hub (git-fixes). - drm/amd/display: trigger timing sync only if TG is running (git-fixes). - drm/amd/pm/smu7: move variables to where they are used (git-fixes). - drm/amd/pm: avoid unintentional shutdown due to temperature momentary fluctuation (git-fixes). - drm/amd/pm: expose swctf threshold setting for legacy powerplay (git-fixes). - drm/amd/pm: fix variable dereferenced issue in amdgpu_device_attr_create() (git-fixes). - drm/amd/pm: fulfill powerplay peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: fulfill swsmu peak profiling mode shader/memory clock settings (git-fixes). - drm/amd/pm: skip the RLC stop when S0i3 suspend for SMU v13.0.4/11 (git-fixes). - drm/amd: Disable S/G for APUs when 64GB or more host memory (git-fixes). - drm/amd: flush any delayed gfxoff on suspend entry (git-fixes). - drm/amdgpu/pm: fix throttle_status for other than MP1 11.0.7 (git-fixes). - drm/amdgpu: Fix integer overflow in amdgpu_cs_pass1 (git-fixes). - drm/amdgpu: Fix potential fence use-after-free v2 (git-fixes). - drm/amdgpu: Remove unnecessary domain argument (git-fixes). - drm/amdgpu: Use RMW accessors for changing LNKCTL (git-fixes). - drm/amdgpu: add S/G display parameter (git-fixes). - drm/amdgpu: add vram reservation based on vram_usagebyfirmware_v2_2 (git-fixes). - drm/amdgpu: avoid integer overflow warning in amdgpu_device_resize_fb_bar() (git-fixes). - drm/amdgpu: fix calltrace warning in amddrm_buddy_fini (git-fixes). - drm/amdgpu: fix memory leak in mes self test (git-fixes). - drm/amdgpu: fix possible UAF in amdgpu_cs_pass1() (git-fixes). - drm/amdgpu: install stub fence into potential unused fence pointers (git-fixes). - drm/amdgpu: keep irq count in amdgpu_irq_disable_all (git-fixes). - drm/amdgpu: skip fence GFX interrupts disable/enable for S0ix (git-fixes). - drm/armada: Fix off-by-one error in armada_overlay_get_property() (git-fixes). - drm/ast: Fix DRAM init on AST2200 (git-fixes). - drm/atomic-helper: Update reference to drm_crtc_force_disable_all() (git-fixes). - drm/bridge: anx7625: Drop device lock before drm_helper_hpd_irq_event() (git-fixes). - drm/bridge: anx7625: Use common macros for DP power sequencing commands (git-fixes). - drm/bridge: anx7625: Use common macros for HDCP capabilities (git-fixes). - drm/bridge: fix -Wunused-const-variable= warning (git-fixes). - drm/bridge: tc358764: Fix debug print parameter order (git-fixes). - drm/etnaviv: fix dumping of active MMU context (git-fixes). - drm/gma500: Use drm_aperture_remove_conflicting_pci_framebuffers (git-fixes). - drm/i915/sdvo: fix panel_type initialization (git-fixes). - drm/i915: Fix premature release of request's reusable memory (git-fixes). - drm/mediatek: Fix dereference before null check (git-fixes). - drm/mediatek: Fix potential memory leak if vmap() fail (git-fixes). - drm/mediatek: Remove freeing not dynamic allocated memory (git-fixes). - drm/msm/a2xx: Call adreno_gpu_init() earlier (git-fixes). - drm/msm/dpu: fix the irq index in dpu_encoder_phys_wb_wait_for_commit_done (git-fixes). - drm/msm/mdp5: Do not leak some plane state (git-fixes). - drm/msm: Update dev core dump to not print backwards (git-fixes). - drm/mxsfb: Disable overlay plane in mxsfb_plane_overlay_atomic_disable() (git-fixes). - drm/nouveau/disp: Revert a NULL check inside nouveau_connector_get_modes (git-fixes). - drm/nouveau/disp: fix use-after-free in error handling of nouveau_connector_create (bsc#1214073). - drm/nouveau/gr: enable memory loads on helper invocation on all channels (git-fixes). - drm/nouveau/nvkm/dp: Add workaround to fix DP 1.3+ DPCD issues (git-fixes). - drm/panel: simple: Add missing connector type and pixel format for AUO T215HVN01 (git-fixes). - drm/panel: simple: Fix AUO G121EAN01 panel timings according to the docs (git-fixes). - drm/qxl: fix UAF on handle creation (git-fixes). - drm/radeon: Use RMW accessors for changing LNKCTL (git-fixes). - drm/repaper: Reduce temporary buffer size in repaper_fb_dirty() (git-fixes). - drm/rockchip: Do not spam logs in atomic check (git-fixes). - drm/shmem-helper: Reset vma->vm_ops before calling dma_buf_mmap() (git-fixes). - drm/stm: ltdc: fix late dereference check (git-fixes). - drm/tegra: dpaux: Fix incorrect return value of platform_get_irq (git-fixes). - drm/ttm: check null pointer before accessing when swapping (git-fixes). - drm/ttm: never consider pinned BOs for eviction&swap (git-fixes). - drm/vmwgfx: Fix shader stage validation (git-fixes). - drm: adv7511: Fix low refresh rate register for ADV7533/5 (git-fixes). - drm: rcar-du: remove R-Car H3 ES1.* workarounds (git-fixes). - drm: xlnx: zynqmp_dpsub: Add missing check for dma_set_mask (git-fixes). - dt-bindings: clock: xlnx,versal-clk: drop select:false (git-fixes). - dt-bindings: clocks: imx8mp: make sai4 a dummy clock (git-fixes). - dt-bindings: crypto: ti,sa2ul: make power-domains conditional (git-fixes). - e1000: Fix typos in comments (jsc#PED-5738). - e1000: Remove unnecessary use of kmap_atomic() (jsc#PED-5738). - e1000: switch to napi_build_skb() (jsc#PED-5738). - e1000: switch to napi_consume_skb() (jsc#PED-5738). - exfat: fix unexpected EOF while reading dir (bsc#1214000). - exfat: release s_lock before calling dir_emit() (bsc#1214000). - exfat_iterate(): do not open-code file_inode(file) (bsc#1214000). - fbdev/ep93xx-fb: Do not assign to struct fb_info.dev (git-fixes). - fbdev: Fix sys_imageblit() for arbitrary image widths (git-fixes). - fbdev: Improve performance of sys_imageblit() (git-fixes). - fbdev: Update fbdev source file paths (git-fixes). - fbdev: fix potential OOB read in fast_imageblit() (git-fixes). - fbdev: mmp: fix value check in mmphw_probe() (git-fixes). - file: reinstate f_pos locking optimization for regular files (bsc#1213759). - firmware: arm_scmi: Drop OF node reference in the transport channel setup (git-fixes). - firmware: cs_dsp: Fix new control name check (git-fixes). - firmware: meson_sm: fix to avoid potential NULL pointer dereference (git-fixes). - firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe (git-fixes). - fprobe: Release rethook after the ftrace_ops is unregistered (git-fixes). - fprobe: add unlock to match a succeeded ftrace_test_recursion_trylock (git-fixes). - fs/sysv: Null check to prevent null-ptr-deref bug (git-fixes). - fsi: aspeed: Reset master errors after CFAM reset (git-fixes). - fsi: master-ast-cf: Add MODULE_FIRMWARE macro (git-fixes). - ftrace: Fix possible warning on checking all pages used in ftrace_process_locs() (git-fixes). - gpio: mvebu: Make use of devm_pwmchip_add (git-fixes). - gpio: mvebu: fix irq domain leak (git-fixes). - gpio: tps68470: Make tps68470_gpio_output() always set the initial value (git-fixes). - hv_netvsc: Remove second mapping of send and recv buffers (bsc#1206453). - hwmon: (pmbus/bel-pfe) Enable PMBUS_SKIP_STATUS_CHECK for pfe1100 (git-fixes). - hwmon: (tmp513) Fix the channel number in tmp51x_is_visible() (git-fixes). - hwrng: iproc-rng200 - Implement suspend and resume calls (git-fixes). - hwrng: nomadik - keep clock enabled while hwrng is registered (git-fixes). - hwrng: pic32 - use devm_clk_get_enabled (git-fixes). - i2c: Delete error messages for failed memory allocations (git-fixes). - i2c: Improve size determinations (git-fixes). - i2c: bcm-iproc: Fix bcm_iproc_i2c_isr deadlock issue (git-fixes). - i2c: designware: Correct length byte validation logic (git-fixes). - i2c: designware: Handle invalid SMBus block data response length value (git-fixes). - i2c: hisi: Only handle the interrupt of the driver's transfer (git-fixes). - i2c: nomadik: Remove a useless call in the remove function (git-fixes). - i2c: nomadik: Remove unnecessary goto label (git-fixes). - i2c: nomadik: Use devm_clk_get_enabled() (git-fixes). - i40e: Fix an NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - iavf: fix potential races for FDIR filters (git-fixes). - ice: Fix RDMA VSI removal during queue rebuild (git-fixes). - ice: Fix crash by keep old cfg when update TCs more than queues (git-fixes). - ice: Fix max_rate check while configuring TX rate limits (git-fixes). - ice: Fix memory management in ice_ethtool_fdir.c (git-fixes). - iio: adc: ina2xx: avoid NULL pointer dereference on OF device match (git-fixes). - iio: adc: stx104: Implement and utilize register structures (git-fixes). - iio: adc: stx104: Utilize iomap interface (git-fixes). - iio: cros_ec: Fix the allocation size for cros_ec_command (git-fixes). - intel/e1000:fix repeated words in comments (jsc#PED-5738). - intel: remove unused macros (jsc#PED-5738). - iommu/amd/io-pgtable: Implement map_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd/io-pgtable: Implement unmap_pages io_pgtable_ops callback (bsc#1212423). - iommu/amd: Add PCI segment support for ivrs_ commands (git-fixes). - iommu/amd: Add map/unmap_pages() iommu_domain_ops callback support (bsc#1212423). - iommu/amd: Do not identity map v2 capable device when snp is enabled (git-fixes). - iommu/amd: Fix compile warning in init code (git-fixes). - iommu/amd: Fix ill-formed ivrs_ioapic, ivrs_hpet and ivrs_acpihid options (git-fixes). - iommu/amd: Fix ivrs_acpihid cmdline parsing code (git-fixes). - iommu/amd: Fix pci device refcount leak in ppr_notifier() (git-fixes). - iommu/amd: use full 64-bit value in build_completion_wait() (git-fixes). - iommu/arm-smmu-v3: Make default domain type of HiSilicon PTT device to identity (git-fixes). - iommu/arm-smmu-v3: check return value after calling platform_get_resource() (git-fixes). - iommu/arm-smmu-v3: fix event handling soft lockup (git-fixes). - iommu/arm-smmu: fix possible null-ptr-deref in arm_smmu_device_probe() (git-fixes). - iommu/dart: Initialize DART_STREAMS_ENABLE (git-fixes). - iommu/dma: Fix incorrect error return on iommu deferred attach (git-fixes). - iommu/dma: Fix iova map result check bug (git-fixes). - iommu/dma: return error code from iommu_dma_map_sg() (git-fixes). - iommu/fsl_pamu: Fix resource leak in fsl_pamu_probe() (git-fixes). - iommu/io-pgtable-arm-v7s: Add a quirk to allow pgtable PA up to 35bit (git-fixes). - iommu/iova: Fix module config properly (git-fixes). - iommu/mediatek: Add error path for loop of mm_dts_parse (git-fixes). - iommu/mediatek: Add platform_device_put for recovering the device refcnt (git-fixes). - iommu/mediatek: Check return value after calling platform_get_resource() (git-fixes). - iommu/mediatek: Set dma_mask for PGTABLE_PA_35_EN (git-fixes). - iommu/mediatek: Use component_match_add (git-fixes). - iommu/mediatek: Validate number of phandles associated with 'mediatek,larbs' (git-fixes). - iommu/omap: Fix buffer overflow in debugfs (git-fixes). - iommu/rockchip: fix permission bits in page table entries v2 (git-fixes). - iommu/s390: Fix duplicate domain attachments (git-fixes). - iommu/sun50i: Consider all fault sources for reset (git-fixes). - iommu/sun50i: Fix R/W permission check (git-fixes). - iommu/sun50i: Fix flush size (git-fixes). - iommu/sun50i: Fix reset release (git-fixes). - iommu/sun50i: Implement .iotlb_sync_map (git-fixes). - iommu/sun50i: Remove IOMMU_DOMAIN_IDENTITY (git-fixes). - iommu/vt-d: Add RPLS to quirk list to skip TE disabling (git-fixes). - iommu/vt-d: Check correct capability for sagaw determination (git-fixes). - iommu/vt-d: Clean up si_domain in the init_dmars() error path (git-fixes). - iommu/vt-d: Correctly calculate sagaw value of IOMMU (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in dmar_dev_scope_init() (git-fixes). - iommu/vt-d: Fix PCI device refcount leak in has_external_pci() (git-fixes). - iommu/vt-d: Fix kdump kernels boot failure with scalable mode (git-fixes). - iommu/vt-d: Preset Access bit for IOVA in FL non-leaf paging entries (git-fixes). - iommu/vt-d: Set SRE bit only when hardware has SRS cap (git-fixes). - ipmi:ssif: Add check for kstrdup (git-fixes). - ipmi:ssif: Fix a memory leak when scanning for an adapter (git-fixes). - ipmi_si: fix a memleak in try_smi_init() (git-fixes). - jffs2: correct logic when creating a hole in jffs2_write_begin (git-fixes). - kabi/severities: Ignore newly added SRSO mitigation functions - kabi: Allow extra bugsints (bsc#1213927). - kernel-binary: Common dependencies cleanup Common dependencies are copied to a subpackage, there is no need for copying defines or build dependencies there. - kernel-binary: Drop code for kerntypes support Kerntypes was a SUSE-specific feature dropped before SLE 12. - kunit: make kunit_test_timeout compatible with comment (git-fixes). - leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always false (git-fixes). - leds: multicolor: Use rounded division when calculating color components (git-fixes). - leds: pwm: Fix error code in led_pwm_create_fwnode() (git-fixes). - leds: trigger: tty: Do not use LED_ON/OFF constants, use led_blink_set_oneshot instead (git-fixes). - leds: turris-omnia: Drop unnecessary mutex locking (git-fixes). - lib/test_meminit: allocate pages up to order MAX_ORDER (git-fixes). - lib/test_meminit: destroy cache in kmem_cache_alloc_bulk() test (git-fixes). - libbpf: Fix BTF-to-C converter's padding logic (bsc#1211220 jsc#PED-3924). - libbpf: Fix btf_dump's packed struct determination (bsc#1211220 jsc#PED-3924). - libbpf: Fix single-line struct definition output in btf_dump (bsc#1211220 jsc#PED-3924). - libceph: fix potential hang in ceph_osdc_notify() (bsc#1214393). - md/raid0: Factor out helper for mapping and submitting a bio (bsc#1213916). - md/raid0: Fix performance regression for large sequential writes (bsc#1213916). - media: ad5820: Drop unsupported ad5823 from i2c_ and of_device_id tables (git-fixes). - media: cx24120: Add retval check for cx24120_message_send() (git-fixes). - media: dib7000p: Fix potential division by zero (git-fixes). - media: dvb-usb: m920x: Fix a potential memory leak in m920x_i2c_xfer() (git-fixes). - media: go7007: Remove redundant if statement (git-fixes). - media: i2c: ccs: Check rules is non-NULL (git-fixes). - media: i2c: rdacm21: Fix uninitialized value (git-fixes). - media: i2c: tvp5150: check return value of devm_kasprintf() (git-fixes). - media: ov2680: Add ov2680_fill_format() helper function (git-fixes). - media: ov2680: Do not take the lock for try_fmt calls (git-fixes). - media: ov2680: Fix ov2680_bayer_order() (git-fixes). - media: ov2680: Fix ov2680_set_fmt() which == V4L2_SUBDEV_FORMAT_TRY not working (git-fixes). - media: ov2680: Fix regulators being left enabled on ov2680_power_on() errors (git-fixes). - media: ov2680: Fix vflip / hflip set functions (git-fixes). - media: ov2680: Remove VIDEO_V4L2_SUBDEV_API ifdef-s (git-fixes). - media: ov5640: Enable MIPI interface in ov5640_set_power_mipi() (git-fixes). - media: rkvdec: increase max supported height for H.264 (git-fixes). - media: v4l2-core: Fix a potential resource leak in v4l2_fwnode_parse_link() (git-fixes). - media: v4l2-mem2mem: add lock to protect parameter num_rdy (git-fixes). - media: venus: hfi_venus: Only consider sys_idle_indicator on V1 (git-fixes). - media: venus: hfi_venus: Write to VIDC_CTRL_INIT after unmasking interrupts (git-fixes). - misc: rtsx: judge ASPM Mode to set PETXCFG Reg (git-fixes). - mkspec: Allow unsupported KMPs (bsc#1214386) - mlxsw: pci: Add shutdown method in PCI driver (git-fixes). - mmc: block: Fix in_flight[issue_type] value error (git-fixes). - mmc: moxart: read scr register without changing byte order (git-fixes). - mmc: wbsd: fix double mmc_free_host() in wbsd_init() (git-fixes). - module: avoid allocation if module is already present and ready (bsc#1213921). - module: extract patient module check into helper (bsc#1213921). - module: move check_modinfo() early to early_mod_check() (bsc#1213921). - module: move early sanity checks into a helper (bsc#1213921). - mtd: rawnand: brcmnand: Fix crash during the panic_write (git-fixes). - mtd: rawnand: brcmnand: Fix mtd oobsize (git-fixes). - mtd: rawnand: brcmnand: Fix potential false time out warning (git-fixes). - mtd: rawnand: brcmnand: Fix potential out-of-bounds access in oob write (git-fixes). - mtd: rawnand: fsl_upm: Fix an off-by one test in fun_exec_op() (git-fixes). - mtd: rawnand: fsmc: handle clk prepare error in fsmc_nand_resume() (git-fixes). - mtd: rawnand: omap_elm: Fix incorrect type in assignment (git-fixes). - mtd: rawnand: rockchip: Align hwecc vs. raw page helper layouts (git-fixes). - mtd: rawnand: rockchip: fix oobfree offset and description (git-fixes). - mtd: spi-nor: Check bus width while setting QE bit (git-fixes). - mtd: spinand: toshiba: Fix ecc_get_status (git-fixes). - n_tty: Rename tail to old_tail in n_tty_read() (git-fixes). - net: hns3: fix wrong bw weight of disabled tc issue (git-fixes). - net: ieee802154: at86rf230: Stop leaking skb's (git-fixes). - net: mana: Fix MANA VF unload when hardware is unresponsive (git-fixes). - net: phy: at803x: remove set/get wol callbacks for AR8032 (git-fixes). - net: phy: broadcom: stub c45 read/write for 54810 (git-fixes). - net: phy: fix IRQ-based wake-on-lan over hibernate / power off (git-fixes). - net: stmmac: tegra: Properly allocate clock bulk data (bsc#1213733) - net: usb: lan78xx: reorder cleanup operations to avoid UAF bugs (git-fixes). - net: usbnet: Fix WARNING in usbnet_start_xmit/usb_submit_urb (git-fixes). - netfs: Fix lockdep warning from taking sb_writers whilst holding mmap_lock (bsc#1214742). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946 bsc#1214404). - netfs: Fix missing xas_retry() calls in xarray iteration (bsc#1213946). - netfs: fix parameter of cleanup() (bsc#1214743). - nfsd: Remove incorrect check in nfsd4_validate_stateid (git-fixes). - nilfs2: fix WARNING in mark_buffer_dirty due to discarded buffer reuse (git-fixes). - nilfs2: fix use-after-free of nilfs_root in dirtying inodes via iput (git-fixes). - nvme-rdma: fix potential unbalanced freeze & unfreeze (bsc#1208902). - nvme-tcp: fix potential unbalanced freeze & unfreeze (bsc#1208902). - objtool/x86: Fix SRSO mess (git-fixes). - objtool/x86: Fixup frame-pointer vs rethunk (git-fixes). - objtool: Union instruction::{call_dest,jump_table} (git-fixes). - old-flavors: Drop 2.6 kernels. 2.6 based kernels are EOL, upgrading from them is no longer suported. - pcmcia: rsrc_nonstatic: Fix memory leak in nonstatic_release_resource_db() (git-fixes). - phy/rockchip: inno-hdmi: do not power on rk3328 post pll on reg write (git-fixes). - phy/rockchip: inno-hdmi: round fractal pixclock in rk3328 recalc_rate (git-fixes). - phy/rockchip: inno-hdmi: use correct vco_div_5 macro on rk3328 (git-fixes). - phy: qcom-snps-femto-v2: keep cfg_ahb_clk enabled during runtime suspend (git-fixes). - phy: qcom-snps-femto-v2: properly enable ref clock (git-fixes). - phy: qcom-snps: Use dev_err_probe() to simplify code (git-fixes). - phy: qcom-snps: correct struct qcom_snps_hsphy kerneldoc (git-fixes). - pinctrl: amd: Mask wake bits on probe again (git-fixes). - pinctrl: amd: Revert 'pinctrl: amd: disable and mask interrupts on probe' (git-fixes). - pinctrl: cherryview: fix address_space_handler() argument (git-fixes). - pinctrl: mcp23s08: check return value of devm_kasprintf() (git-fixes). - pinctrl: renesas: rza2: Add lock around pinctrl_generic{{add,remove}_group,{add,remove}_function} (git-fixes). - platform/x86: dell-sysman: Fix reference leak (git-fixes). - powerpc/64e: Fix kexec build error (bsc#1212091 ltc#199106). - powerpc/iommu: Fix iommu_table_in_use for a small default DMA window case (bsc#1212091 ltc#199106). - powerpc/iommu: Incorrect DDW Table is referenced for SR-IOV device (bsc#1212091 ltc#199106). - powerpc/iommu: TCEs are incorrectly manipulated with DLPAR add/remove of memory (bsc#1212091 ltc#199106). - powerpc/iommu: do not set failed sg dma_address to DMA_MAPPING_ERROR (bsc#1212091 ltc#199106). - powerpc/iommu: return error code from .map_sg() ops (bsc#1212091 ltc#199106). - powerpc/kernel/iommu: Add new iommu_table_in_use() helper (bsc#1212091 ltc#199106). - powerpc/kexec: Fix build failure from uninitialised variable (bsc#1212091 ltc#199106). - powerpc/mm/altmap: Fix altmap boundary check (bsc#1120059 git-fixes). - powerpc/pseries/ddw: Do not try direct mapping with persistent memory and one window (bsc#1212091 ltc#199106). - powerpc/pseries/ddw: simplify enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_list_new_entry() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add ddw_property_create() and refactor enable_ddw() (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add iommu_pseries_alloc_table() helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Add of_node_put() before break (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Allow DDW windows starting at 0x00 (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Check if the default window in use before removing it (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Create huge DMA window if no MMIO32 is present (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Find existing DDW with given property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Make use of DDW for indirect mapping (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Print ibm,query-pe-dma-windows parameters (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Rename 'direct window' to 'dma window' (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Reorganize iommu_table_setparms*() with new helper (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Replace hard-coded page shift (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Update remove_dma_window() to accept property name (bsc#1212091 ltc#199106). - powerpc/pseries/iommu: Use correct vfree for it_map (bsc#1212091 ltc#199106). - powerpc/pseries: Add __init attribute to eligible functions (bsc#1212091 ltc#199106). - powerpc/pseries: Honour current SMT state when DLPAR onlining CPUs (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/pseries: Initialise CPU hotplug callbacks earlier (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). - powerpc/rtas: block error injection when locked down (bsc#1023051). - powerpc/rtas: enture rtas_call is called with MMU enabled (bsc#1023051). - powerpc/rtas: mandate RTAS syscall filtering (bsc#1023051). - powerpc/rtas_flash: allow user copy to flash block cache objects (bsc#1194869). - powerpc/security: Fix Speculation_Store_Bypass reporting on Power10 (bsc#1188885 ltc#193722 git-fixes). - powerpc: Add HOTPLUG_SMT support (bsc#1214285 bsc#1205462 ltc#200161 ltc#200588). Update config files. - powerpc: Move DMA64_PROPNAME define to a header (bsc#1214297 ltc#197503). - powerpc: fix typos in comments (bsc#1212091 ltc#199106). - pseries/iommu/ddw: Fix kdump to work in absence of ibm,dma-window (bsc#1214297 ltc#197503). - pstore/ram: Check start of empty przs during init (git-fixes). - pwm: Add a stub for devm_pwmchip_add() (git-fixes). - pwm: meson: Simplify duplicated per-channel tracking (git-fixes). - pwm: meson: fix handling of period/duty if greater than UINT_MAX (git-fixes). - qed: Fix scheduling in a tasklet while getting stats (git-fixes). - regmap: rbtree: Use alloc_flags for memory allocations (git-fixes). - ring-buffer: Do not swap cpu_buffer during resize process (git-fixes). - ring-buffer: Fix deadloop issue on reading trace_pipe (git-fixes). - ring-buffer: Fix wrong stat of cpu_buffer->read (git-fixes). - rpm/mkspec-dtb: support for nested subdirs - rpmsg: glink: Add check for kstrdup (git-fixes). - s390/ipl: add missing secure/has_secure file to ipl type 'unknown' (bsc#1214976). - s390/purgatory: disable branch profiling (git-fixes bsc#1214372). - s390/zcrypt: fix reply buffer calculations for CCA replies (bsc#1213949). - sched/fair: Fix inaccurate tally of ttwu_move_affine (git fixes). - sched/fair: Use recent_used_cpu to test p->cpus_ptr (git fixes). - sched/psi: use kernfs polling functions for PSI trigger polling (bsc#1209799). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: RDMA/srp: Fix residual handling (git-fixes) - scsi: bsg: Increase number of devices (bsc#1210048). - scsi: core: Do not wait for quiesce in scsi_device_block() (bsc#1209284). - scsi: core: Do not wait for quiesce in scsi_stop_queue() (bsc#1209284). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: core: Improve warning message in scsi_device_block() (bsc#1209284). - scsi: core: Merge scsi_internal_device_block() and device_block() (bsc#1209284). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: sg: Increase number of devices (bsc#1210048). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Always set no_report_opcodes (git-fixes). - scsi: storvsc: Fix handling of virtual Fibre Channel timeouts (git-fixes). - scsi: storvsc: Handle SRB status value 0x30 (git-fixes). - scsi: storvsc: Limit max_sectors for virtual Fibre Channel devices (git-fixes). - scsi: zfcp: Defer fc_rport blocking until after ADISC response (git-fixes bsc#1214371). - selftests/bpf: Test btf dump for struct with padding only fields (bsc#1211220 jsc#PED-3924). - selftests/futex: Order calls to futex_lock_pi (git-fixes). - selftests/harness: Actually report SKIP for signal tests (git-fixes). - selftests/resctrl: Close perf value read fd on errors (git-fixes). - selftests/resctrl: Do not leak buffer in fill_cache() (git-fixes). - selftests/resctrl: Unmount resctrl FS if child fails to run benchmark (git-fixes). - selftests/rseq: check if libc rseq support is registered (git-fixes). - selftests: forwarding: Add a helper to skip test when using veth pairs (git-fixes). - selftests: forwarding: Skip test when no interfaces are specified (git-fixes). - selftests: forwarding: Switch off timeout (git-fixes). - selftests: forwarding: ethtool: Skip when using veth pairs (git-fixes). - selftests: forwarding: ethtool_extended_state: Skip when using veth pairs (git-fixes). - selftests: forwarding: tc_actions: Use ncat instead of nc (git-fixes). - selftests: forwarding: tc_actions: cleanup temporary files when test is aborted (git-fixes). - selftests: forwarding: tc_flower: Relax success criterion (git-fixes). - selftests: mirror_gre_changes: Tighten up the TTL test match (git-fixes). - serial: sc16is7xx: fix broken port 0 uart init (git-fixes). - serial: sc16is7xx: fix bug when first setting GPIO direction (git-fixes). - serial: sprd: Assign sprd_port after initialized to avoid wrong access (git-fixes). - serial: sprd: Fix DMA buffer leak issue (git-fixes). - serial: tegra: handle clk prepare error in tegra_uart_hw_init() (git-fixes). - sfc: fix crash when reading stats while NIC is resetting (git-fixes). - smb3: do not set NTLMSSP_VERSION flag for negotiate not auth request (bsc#1193629). - smb: client: Fix -Wstringop-overflow issues (bsc#1193629). - smb: client: fix dfs link mount against w2k8 (bsc#1212142). - smb: client: fix null auth (git-fixes). - soc: aspeed: socinfo: Add kfree for kstrdup (git-fixes). - soundwire: bus: pm_runtime_request_resume on peripheral attachment (git-fixes). - soundwire: fix enumeration completion (git-fixes). - spi: tegra20-sflash: fix to check return value of platform_get_irq() in tegra_sflash_probe() (git-fixes). - supported.conf: fix typos for -!optional markers - swiotlb: Remove bounce buffer remapping for Hyper-V (bsc#1206453). - target: compare and write backend driver sense handling (bsc#1177719 bsc#1213026). - target_core_rbd: fix leak and reduce kmalloc calls (bsc#1212873). - target_core_rbd: fix rbd_img_request.snap_id assignment (bsc#1212857). - target_core_rbd: remove snapshot existence validation code (bsc#1212857). - thunderbolt: Read retimer NVM authentication status prior tb_retimer_set_inbound_sbtx() (git-fixes). - timers: Add shutdown mechanism to the internal functions (bsc#1213970). - timers: Provide timer_shutdown[_sync]() (bsc#1213970). - timers: Rename del_timer() to timer_delete() (bsc#1213970). - timers: Rename del_timer_sync() to timer_delete_sync() (bsc#1213970). - timers: Replace BUG_ON()s (bsc#1213970). - timers: Silently ignore timers with a NULL function (bsc#1213970). - timers: Split [try_to_]del_timer[_sync]() to prepare for shutdown mode (bsc#1213970). - timers: Update kernel-doc for various functions (bsc#1213970). - timers: Use del_timer_sync() even on UP (bsc#1213970). - tracing/histograms: Add histograms to hist_vars if they have referenced variables (git-fixes). - tracing/histograms: Return an error if we fail to add histogram to hist_vars list (git-fixes). - tracing/probes: Fix not to count error code to total length (git-fixes). - tracing/probes: Fix to avoid double count of the string length on the array (git-fixes). - tracing/probes: Fix to record 0-length data_loc in fetch_store_string*() if fails (git-fixes). - tracing/probes: Fix to update dynamic data counter if fetcharg uses it (git-fixes). - tracing: Fix cpu buffers unavailable due to 'record_disabled' missed (git-fixes). - tracing: Fix memleak due to race between current_tracer and trace (git-fixes). - tracing: Fix memory leak of iter->temp when reading trace_pipe (git-fixes). - tracing: Fix null pointer dereference in tracing_err_log_open() (git-fixes). - tracing: Fix warning in trace_buffered_event_disable() (git-fixes). - tty: fix hang on tty device with no_room set (git-fixes). - tty: n_gsm: fix the UAF caused by race condition in gsm_cleanup_mux (git-fixes). - tty: serial: fsl_lpuart: Add i.MXRT1050 support (git-fixes). - tty: serial: fsl_lpuart: Clear the error flags by writing 1 for lpuart32 platforms (git-fixes). - tty: serial: fsl_lpuart: make rx_watermark configurable for different platforms (git-fixes). - tty: serial: fsl_lpuart: reduce RX watermark to 0 on LS1028A (git-fixes). - ubifs: Fix memleak when insert_old_idx() failed (git-fixes). - usb-storage: alauda: Fix uninit-value in alauda_check_media() (git-fixes). - usb: chipidea: imx: add missing USB PHY DPDM wakeup setting (git-fixes). - usb: chipidea: imx: do not request QoS for imx8ulp (git-fixes). - usb: chipidea: imx: improve logic if samsung,picophy-* parameter is 0 (git-fixes). - usb: common: usb-conn-gpio: Prevent bailing out if initial role is none (git-fixes). - usb: dwc3: Fix typos in gadget.c (git-fixes). - usb: dwc3: Properly handle processing of pending events (git-fixes). - usb: dwc3: meson-g12a: do post init to fix broken usb after resumption (git-fixes). - usb: gadget: Fix the memory leak in raw_gadget driver (git-fixes). - usb: gadget: f_mass_storage: Fix unused variable warning (git-fixes). - usb: gadget: u_serial: Avoid spinlock recursion in __gs_console_push (git-fixes). - usb: ohci-at91: Fix the unhandle interrupt when resume (git-fixes). - usb: phy: mxs: fix getting wrong state with mxs_phy_is_otg_host() (git-fixes). - usb: quirks: add quirk for Focusrite Scarlett (git-fixes). - usb: serial: option: add Quectel EC200A module support (git-fixes). - usb: serial: option: support Quectel EM060K_128 (git-fixes). - usb: serial: simple: add Kaufmann RKS+CAN VCP (git-fixes). - usb: serial: simple: sort driver entries (git-fixes). - usb: typec: altmodes/displayport: Signal hpd when configuring pin assignment (git-fixes). - usb: typec: tcpm: Fix response to vsafe0V event (git-fixes). - usb: typec: tcpm: set initial svdm version based on pd revision (git-fixes). - usb: zaurus: Add ID for A-300/B-500/C-700 (git-fixes). - watchdog: sp5100_tco: support Hygon FCH/SCH (Server Controller Hub) (git-fixes). - wifi: ath10k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath11k: Use RMW accessors for changing LNKCTL (git-fixes). - wifi: ath9k: fix races between ath9k_wmi_cmd and ath9k_wmi_ctrl_rx (git-fixes). - wifi: ath9k: protect WMI command response buffer replacement with a lock (git-fixes). - wifi: ath9k: use IS_ERR() with debugfs_create_dir() (git-fixes). - wifi: cfg80211: Fix return value in scan logic (git-fixes). - wifi: cfg80211: fix sband iftype data lookup for AP_VLAN (git-fixes). - wifi: mt76: mt7615: do not advertise 5 GHz on first phy of MT7615D (DBDC) (git-fixes). - wifi: mt76: mt7915: fix power-limits while chan_switch (git-fixes). - wifi: mt76: mt7921: do not support one stream on secondary antenna only (git-fixes). - wifi: mt76: mt7921: fix non-PSC channel scan fail (git-fixes). - wifi: mt76: testmode: add nla_policy for MT76_TM_ATTR_TX_LENGTH (git-fixes). - wifi: mwifiex: Fix OOB and integer underflow when rx packets (git-fixes). - wifi: mwifiex: Fix missed return in oob checks failed path (git-fixes). - wifi: mwifiex: avoid possible NULL skb pointer dereference (git-fixes). - wifi: mwifiex: fix error recovery in PCIE buffer descriptor management (git-fixes). - wifi: mwifiex: fix memory leak in mwifiex_histogram_read() (git-fixes). - wifi: nl80211/cfg80211: add forgotten nla_policy for BSS color attribute (git-fixes). - wifi: radiotap: fix kernel-doc notation warnings (git-fixes). - wifi: rtw89: debug: Fix error handling in rtw89_debug_priv_btc_manual_set() (git-fixes). - x86/CPU/AMD: Disable XSAVES on AMD family 0x17 (git-fixes). - x86/alternative: Make custom return thunk unconditional (git-fixes). - x86/cpu/kvm: Provide UNTRAIN_RET_VM (git-fixes). - x86/cpu: Clean up SRSO return thunk mess (git-fixes). - x86/cpu: Cleanup the untrain mess (git-fixes). - x86/cpu: Fix __x86_return_thunk symbol type (git-fixes). - x86/cpu: Fix up srso_safe_ret() and __x86_return_thunk() (git-fixes). - x86/cpu: Rename original retbleed methods (git-fixes). - x86/cpu: Rename srso_(.*)_alias to srso_alias_\1 (git-fixes). - x86/hyperv: Add an interface to do nested hypercalls (bsc#1206453). - x86/hyperv: Add support for detecting nested hypervisor (bsc#1206453). - x86/hyperv: Change vTOM handling to use standard coco mechanisms (bsc#1206453). - x86/hyperv: Remove BUG_ON() for kmap_local_page() (bsc#1206453). - x86/hyperv: Reorder code to facilitate future work (bsc#1206453). - x86/hyperv: Replace kmap() with kmap_local_page() (bsc#1206453). - x86/ioremap: Add hypervisor callback for private MMIO mapping in coco (bsc#1206453). - x86/mce: Make sure logged MCEs are processed after sysfs update (git-fixes). - x86/mm: Handle decryption/re-encryption of bss_decrypted consistently (bsc#1206453). - x86/retpoline,kprobes: Fix position of thunk sections with CONFIG_LTO_CLANG (git-fixes). - x86/retpoline,kprobes: Skip optprobe check for indirect jumps with retpolines and IBT (git-fixes). - x86/retpoline: Do not clobber RFLAGS during srso_safe_ret() (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/speculation: Add cpu_show_gds() prototype (git-fixes). - x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes). - x86/srso: Correct the mitigation status when SMT is disabled (git-fixes). - x86/srso: Disable the mitigation on unaffected configurations (git-fixes). - x86/srso: Explain the untraining sequences a bit more (git-fixes). - x86/srso: Fix build breakage with the LLVM linker (git-fixes). - x86/srso: Fix return thunks in generated code (git-fixes). - x86/static_call: Fix __static_call_fixup() (git-fixes). - x86/tdx: Add more registers to struct tdx_hypercall_args (bsc#1206453). - x86/tdx: Do not corrupt frame-pointer in __tdx_hypercall() (bsc#1206453). - x86/tdx: Expand __tdx_hypercall() to handle more arguments (bsc#1206453). - x86/tdx: Fix typo in comment in __tdx_hypercall() (bsc#1206453). - x86/tdx: Refactor __tdx_hypercall() to allow pass down more arguments (bsc#1206453). - xfs: fix sb write verify for lazysbcount (bsc#1214661). Important SUSE bug 1023051 SUSE bug 1120059 SUSE bug 1177719 SUSE bug 1188885 SUSE bug 1193629 SUSE bug 1194869 SUSE bug 1203329 SUSE bug 1203330 SUSE bug 1205462 SUSE bug 1206453 SUSE bug 1208902 SUSE bug 1208949 SUSE bug 1209284 SUSE bug 1209799 SUSE bug 1210048 SUSE bug 1210448 SUSE bug 1211220 SUSE bug 1212091 SUSE bug 1212142 SUSE bug 1212423 SUSE bug 1212526 SUSE bug 1212857 SUSE bug 1212873 SUSE bug 1213026 SUSE bug 1213123 SUSE bug 1213546 SUSE bug 1213580 SUSE bug 1213601 SUSE bug 1213666 SUSE bug 1213733 SUSE bug 1213757 SUSE bug 1213759 SUSE bug 1213916 SUSE bug 1213921 SUSE bug 1213927 SUSE bug 1213946 SUSE bug 1213949 SUSE bug 1213968 SUSE bug 1213970 SUSE bug 1213971 SUSE bug 1214000 SUSE bug 1214019 SUSE bug 1214073 SUSE bug 1214120 SUSE bug 1214149 SUSE bug 1214180 SUSE bug 1214233 SUSE bug 1214238 SUSE bug 1214285 SUSE bug 1214297 SUSE bug 1214299 SUSE bug 1214305 SUSE bug 1214350 SUSE bug 1214368 SUSE bug 1214370 SUSE bug 1214371 SUSE bug 1214372 SUSE bug 1214380 SUSE bug 1214386 SUSE bug 1214392 SUSE bug 1214393 SUSE bug 1214397 SUSE bug 1214404 SUSE bug 1214428 SUSE bug 1214451 SUSE bug 1214635 SUSE bug 1214659 SUSE bug 1214661 SUSE bug 1214727 SUSE bug 1214729 SUSE bug 1214742 SUSE bug 1214743 SUSE bug 1214756 SUSE bug 1214976 SUSE bug 1215522 SUSE bug 1215523 SUSE bug 1215552 SUSE bug 1215553 CVE-2022-38457 CVE-2022-40133 CVE-2023-2007 CVE-2023-20588 CVE-2023-34319 CVE-2023-3610 CVE-2023-37453 CVE-2023-3772 CVE-2023-3863 CVE-2023-40283 CVE-2023-4128 CVE-2023-4133 CVE-2023-4134 CVE-2023-4147 CVE-2023-4194 CVE-2023-4273 CVE-2023-4387 CVE-2023-4459 CVE-2023-4563 CVE-2023-4569 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for MozillaThunderbird (Critical) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for MozillaThunderbird fixes the following issues: Security fixes: - CVE-2023-5217: Fixed a heap buffer overflow in libvpx. (bsc#1215814) - CVE-2023-5168: Out-of-bounds write in FilterNodeD2D1. (bsc#1215575) - CVE-2023-5169: Out-of-bounds write in PathOps. (bsc#1215575) - CVE-2023-5171: Use-after-free in Ion Compiler. (bsc#1215575) - CVE-2023-5174: Double-free in process spawning on Windows. (bsc#1215575) - CVE-2023-5176: Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. (bsc#1215575) Other fixes: - Mozilla Thunderbird 115.3.1 * fixed: In Unified Folders view, some folders had incorrect unified folder parent (bmo#1852525) * fixed: 'Edit message as new' did not restore encrypted subject from selected message (bmo#1788534) * fixed: Importing some CalDAV calendars with yearly recurrence events caused Thunderbird to freeze (bmo#1850732) * fixed: Security fixes MFSA 2023-44 (bsc#1215814) * CVE-2023-5217 (bmo#1855550) Heap buffer overflow in libvpx - Mozilla Thunderbird 115.3 * fixed: Thunderbird could not import profiles with hostname ending in dot ('.') (bmo#1825374) * fixed: Message header was occasionally missing in message preview (bmo#1840943) * fixed: Setting an existing folder's type flag did not add descendant folders to the Unified Folders view (bmo#1848904) * fixed: Thunderbird did not always delete all temporary mail files, sometimes preventing messages from being sent (bmo#673703) * fixed: Status bar in Message Compose window could not be hidden (bmo#1806860) * fixed: Message header was intermittently missing from message preview (bmo#1840943) * fixed: OAuth2 did not work on some profiles created in Thunderbird 102.6.1 or earlier (bmo#1814823) * fixed: In Vertical View, decrypted subject lines were displayed as ellipsis ('...') in message list (bmo#1831764) * fixed: Condensed address preference (mail.showCondensedAddresses) did not show condensed addresses in message list (bmo#1831280) * fixed: Spam folder could not be assigned non-ASCII names with IMAP UTF-8 enabled (bmo#1816332) * fixed: Message header was not displayed until images finished loading, causing noticeable delay for messages containing large images (bmo#1851871) * fixed: Large SVG favicons did not display on RSS feeds (bmo#1853895) * fixed: Context menu items did not display a hover background color (bmo#1852732) * fixed: Security fixes MFSA 2023-43 (bsc#1215575) * CVE-2023-5168 (bmo#1846683) Out-of-bounds write in FilterNodeD2D1 * CVE-2023-5169 (bmo#1846685) Out-of-bounds write in PathOps * CVE-2023-5171 (bmo#1851599) Use-after-free in Ion Compiler * CVE-2023-5174 (bmo#1848454) Double-free in process spawning on Windows * CVE-2023-5176 (bmo#1836353, bmo#1842674, bmo#1843824, bmo#1843962, bmo#1848890, bmo#1850180, bmo#1850983, bmo#1851195) Memory safety bugs fixed in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3 - Add patch mozilla-fix-broken-ffmpeg.patch to fix broken build with newer binutils (bsc#1215309) - Fix i586 build by reducing debug info to -g1. (bsc#1210168) - Mozilla Thunderbird 115.2.3 * changed: Card view and vertical layout are now default for new profiles (bmo#1849000) * fixed: Go - Folder menu was disabled (bmo#1849919) * fixed: 'Tools' menu was blank when opened from compose window on macOS (bmo#1848155) * fixed: Deleting an attachment from a message on an IMAP server corrupted the local copy when configured with 'mark as deleted' (bmo#1135434) * fixed: Manually entered passwords were not remembered for OAuth-authenticated accounts such as Yahoo mail (bmo#1673446) * fixed: Quick Filter's 'Keep filters applied' did not persist after restarting Thunderbird (bmo#1846880,bmo#1849221) * fixed: Top-level Quick Filter settings did not persist after restart (bmo#1849249) * fixed: Notifications for new messages with non-ASCII characters in the subject were garbled (bmo#1842384) * fixed: 'Mark Thread As Read' did not work when some messages in thread were already read (bmo#1850850) * fixed: New Groups tab in NNTP subscribe dialog id not work as expected (bmo#1848366) * fixed: Negative values were allowed in 'Share for files larger than' field (bmo#1850281) * fixed: Thunderbird sometimes crashed when deleting a parent folder with subfolders (bmo#1851293) * fixed: 'Send Message Error' appeared intermittently while Thunderbird was idle (bmo#1801668) * fixed: Focused but not selected messages were missing visual indication of focus in card view (bmo#1844263) * fixed: Notification dot did not disappear from taskbar icon on Windows after messages had already been read (bmo#1824889) * fixed: Multiple selected messages could not be opened simultaneously if selection included more than 19 messages (bmo#1851563) * fixed: Email replies received via BCC incorrectly populated From field with default identity (bmo#1851512) * fixed: User was not always notified of message send failures in outbox (bmo#1851542) * fixed: Tag dialog did not close properly after editing tag (bmo#1852414) * fixed: Newsgroup field in compose window did not autocomplete with suggested newsgroup names (bmo#1670457) * fixed: Canceling newsgroup messages did not check if sender matched user's own identity (bmo#1823274) * fixed: Event dialog with several invitees expanded beyond screen height (bmo#1848261) * fixed: Message check boxes were partially obstructed in message list (bmo#1850760) * unresolved: Some folders missing from Unified Folders () Critical SUSE bug 1210168 SUSE bug 1215309 SUSE bug 1215575 SUSE bug 1215814 CVE-2023-5168 CVE-2023-5169 CVE-2023-5171 CVE-2023-5174 CVE-2023-5176 CVE-2023-5217 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for the Linux Kernel (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-39194: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215861) - CVE-2023-39193: Fixed a flaw in the processing of state filters which could allow a local attackers to disclose sensitive information. (bsc#1215860) - CVE-2023-39192: Fixed a flaw in the u32_match_it function which could allow a local attackers to disclose sensitive information. (bsc#1215858) - CVE-2023-42754: Fixed a null pointer dereference in ipv4_link_failure which could lead an authenticated attacker to trigger a DoS. (bsc#1215467) - CVE-2023-5345: fixed an use-after-free vulnerability in the fs/smb/client component which could be exploited to achieve local privilege escalation. (bsc#1215899) - CVE-2023-4155: Fixed a flaw in KVM AMD Secure Encrypted Virtualization (SEV). An attacker can trigger a stack overflow and cause a denial of service or potentially guest-to-host escape in kernel configurations without stack guard pages. (bsc#1214022) - CVE-2023-4389: Fixed a reference counting issue in the Btrfs filesystem that could be exploited in order to leak internal kernel information or crash the system (bsc#1214351). - CVE-2023-42753: Fixed an array indexing vulnerability in the netfilter subsystem. This issue may have allowed a local user to crash the system or potentially escalate their privileges (bsc#1215150). - CVE-2023-1206: Fixed a hash collision flaw in the IPv6 connection lookup table. A user located in the local network or with a high bandwidth connection can increase the CPU usage of the server that accepts IPV6 connections up to 95% (bsc#1212703). - CVE-2023-4921: Fixed a use-after-free vulnerability in the QFQ network scheduler which could be exploited to achieve local privilege escalatio (bsc#1215275). - CVE-2023-4622: Fixed a use-after-free vulnerability in the Unix domain sockets component which could be exploited to achieve local privilege escalation (bsc#1215117). - CVE-2023-4623: Fixed a use-after-free issue in the HFSC network scheduler which could be exploited to achieve local privilege escalation (bsc#1215115). - CVE-2023-1859: Fixed a use-after-free flaw in Xen transport for 9pfs which could be exploited to crash the system (bsc#1210169). - CVE-2023-4881: Fixed a out-of-bounds write flaw in the netfilter subsystem that could lead to potential information disclosure or a denial of service (bsc#1215221). - CVE-2023-2177: Fixed a null pointer dereference issue in the sctp network protocol which could allow a user to crash the system (bsc#1210643). - CVE-2023-1192: Fixed use-after-free in cifs_demultiplex_thread() (bsc#1208995). The following non-security bugs were fixed: - ALSA: hda/cirrus: Fix broken audio on hardware with two CS42L42 codecs (git-fixes). - ALSA: hda/realtek: Splitting the UX3402 into two separate models (git-fixes). - ARM: pxa: remove use of symbol_get() (git-fixes). - arm64: csum: Fix OoB access in IP checksum code for negative lengths (git-fixes). - arm64: module-plts: inline linux/moduleloader.h (git-fixes) - arm64: module: Use module_init_layout_section() to spot init sections (git-fixes) - arm64: sdei: abort running SDEI handlers during crash (git-fixes) - arm64: tegra: Update AHUB clock parent and rate (git-fixes) - arm64/fpsimd: Only provide the length to cpufeature for xCR registers (git-fixes) - arm64/hyperv: Use CPUHP_AP_HYPERV_ONLINE state to fix CPU online sequencing (bsc#1206453). - ASoC: amd: yc: Fix non-functional mic on Lenovo 82QF and 82UG (git-fixes). - ASoC: hdaudio.c: Add missing check for devm_kstrdup (git-fixes). - ASoC: imx-audmix: Fix return error with devm_clk_get() (git-fixes). - ASoC: meson: spdifin: start hw on dai probe (git-fixes). - ASoC: rt5640: Fix IRQ not being free-ed for HDA jack detect mode (git-fixes). - ASoC: rt5640: Fix sleep in atomic context (git-fixes). - ASoC: rt5640: Revert 'Fix sleep in atomic context' (git-fixes). - ASoC: soc-utils: Export snd_soc_dai_is_dummy() symbol (git-fixes). - ASoC: SOF: core: Only call sof_ops_free() on remove if the probe was successful (git-fixes). - ASoC: tegra: Fix redundant PLLA and PLLA_OUT0 updates (git-fixes). - ata: libata: disallow dev-initiated LPM transitions to unsupported states (git-fixes). - ata: pata_falcon: fix IO base selection for Q40 (git-fixes). - ata: pata_ftide010: Add missing MODULE_DESCRIPTION (git-fixes). - ata: sata_gemini: Add missing MODULE_DESCRIPTION (git-fixes). - backlight: gpio_backlight: Drop output GPIO direction check for initial power state (git-fixes). - blk-iocost: fix divide by 0 error in calc_lcoefs() (bsc#1214986). - blk-iocost: use spin_lock_irqsave in adjust_inuse_and_calc_cost (bsc#1214992). - block/mq-deadline: use correct way to throttling write requests (bsc#1214993). - Bluetooth: btsdio: fix use after free bug in btsdio_remove due to race condition (git-fixes). - bnx2x: new flag for track HW resource allocation (bsc#1202845 bsc#1215322). - bpf: Clear the probe_addr for uprobe (git-fixes). - btrfs: do not hold CPU for too long when defragging a file (bsc#1214988). - clocksource: hyper-v: Mark hyperv tsc page unencrypted in sev-snp enlightened guest (bsc#1206453). - drivers: hv: Mark percpu hvcall input arg page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - Drivers: hv: vmbus: Bring the post_msg_page back for TDX VMs with the paravisor (bsc#1206453). - Drivers: hv: vmbus: Support >64 VPs for a fully enlightened TDX/SNP VM (bsc#1206453). - Drivers: hv: vmbus: Support fully enlightened TDX guests (bsc#1206453). - drm: gm12u320: Fix the timeout usage for usb_bulk_msg() (git-fixes). - drm/amd/display: Add smu write msg id fail retry process (git-fixes). - drm/amd/display: enable cursor degamma for DCN3+ DRM legacy gamma (git-fixes). - drm/amd/display: fix the white screen issue when >= 64GB DRAM (git-fixes). - drm/amd/display: prevent potential division by zero errors (git-fixes). - drm/amd/display: register edp_backlight_control() for DCN301 (git-fixes). - drm/amd/display: Remove wait while locked (git-fixes). - drm/ast: Add BMC virtual connector (bsc#1152472) Backporting changes: * rename ast_device to ast_private - drm/ast: report connection status on Display Port. (bsc#1152472) Backporting changes: * rename ast_device to ast_private * context changes - drm/display: Do not assume dual mode adaptors support i2c sub-addressing (bsc#1213808). - drm/i915: mark requests for GuC virtual engines to avoid use-after-free (git-fixes). - drm/i915/gvt: Drop unused helper intel_vgpu_reset_gtt() (git-fixes). - drm/i915/gvt: Put the page reference obtained by KVM's gfn_to_pfn() (git-fixes). - drm/i915/gvt: Verify pfn is 'valid' before dereferencing 'struct page' (git-fixes). - drm/meson: fix memory leak on ->hpd_notify callback (git-fixes). - drm/virtio: Correct drm_gem_shmem_get_sg_table() error handling (git-fixes). - drm/virtio: Use appropriate atomic state in virtio_gpu_plane_cleanup_fb() (git-fixes). - ext4: avoid potential data overflow in next_linear_group (bsc#1214951). - ext4: correct inline offset when handling xattrs in inode body (bsc#1214950). - ext4: fix memory leaks in ext4_fname_{setup_filename,prepare_lookup} (bsc#1214954). - ext4: fix wrong unit use in ext4_mb_clear_bb (bsc#1214943). - ext4: fix wrong unit use in ext4_mb_new_blocks (bsc#1214944). - ext4: get block from bh in ext4_free_blocks for fast commit replay (bsc#1214942). - ext4: reflect error codes from ext4_multi_mount_protect() to its callers (bsc#1214941). - ext4: Remove ext4 locking of moved directory (bsc#1214957). - ext4: set goal start correctly in ext4_mb_normalize_request (bsc#1214940). - fs: do not update freeing inode i_io_list (bsc#1214813). - fs: Establish locking order for unrelated directories (bsc#1214958). - fs: Lock moved directories (bsc#1214959). - fs: lockd: avoid possible wrong NULL parameter (git-fixes). - fs: no need to check source (bsc#1215752). - fs: record I_DIRTY_TIME even if inode already has I_DIRTY_INODE (bsc#1214813). - fuse: nlookup missing decrement in fuse_direntplus_link (bsc#1215581). - gve: Add AF_XDP zero-copy support for GQI-QPL format (bsc#1214479). - gve: Add XDP DROP and TX support for GQI-QPL format (bsc#1214479). - gve: Add XDP REDIRECT support for GQI-QPL format (bsc#1214479). - gve: Changes to add new TX queues (bsc#1214479). - gve: Control path for DQO-QPL (bsc#1214479). - gve: fix frag_list chaining (bsc#1214479). - gve: Fix gve interrupt names (bsc#1214479). - gve: RX path for DQO-QPL (bsc#1214479). - gve: trivial spell fix Recive to Receive (bsc#1214479). - gve: Tx path for DQO-QPL (bsc#1214479). - gve: Unify duplicate GQ min pkt desc size constants (bsc#1214479). - gve: use vmalloc_array and vcalloc (bsc#1214479). - gve: XDP support GQI-QPL: helper function changes (bsc#1214479). - hwrng: virtio - add an internal buffer (git-fixes). - hwrng: virtio - always add a pending request (git-fixes). - hwrng: virtio - do not wait on cleanup (git-fixes). - hwrng: virtio - do not waste entropy (git-fixes). - hwrng: virtio - Fix race on data_avail and actual data (git-fixes). - i2c: aspeed: Reset the i2c controller when timeout occurs (git-fixes). - i3c: master: svc: fix probe failure when no i3c device exist (git-fixes). - i915/pmu: Move execlist stats initialization to execlist specific setup (git-fixes). - idr: fix param name in idr_alloc_cyclic() doc (git-fixes). - Input: tca6416-keypad - fix interrupt enable disbalance (git-fixes). - iommu/virtio: Detach domain on endpoint release (git-fixes). - iommu/virtio: Return size mapped for a detached domain (git-fixes). - jbd2: check 'jh->b_transaction' before removing it from checkpoint (bsc#1214953). - jbd2: correct the end of the journal recovery scan range (bsc#1214955). - jbd2: fix a race when checking checkpoint buffer busy (bsc#1214949). - jbd2: fix checkpoint cleanup performance regression (bsc#1214952). - jbd2: Fix wrongly judgement for buffer head removing while doing checkpoint (bsc#1214948). - jbd2: recheck chechpointing non-dirty buffer (bsc#1214945). - jbd2: remove journal_clean_one_cp_list() (bsc#1214947). - jbd2: remove t_checkpoint_io_list (bsc#1214946). - jbd2: restore t_checkpoint_io_list to maintain kABI (bsc#1214946). - kabi: hide changes in enum ipl_type and struct sclp_info (jsc#PED-2023 jsc#PED-2025). - kabi/severities: ignore mlx4 internal symbols - kconfig: fix possible buffer overflow (git-fixes). - kernel-binary: Move build-time definitions together Move source list and build architecture to buildrequires to aid in future reorganization of the spec template. - kernel-binary: python3 is needed for build At least scripts/bpf_helpers_doc.py requires python3 since Linux 4.18 Other simimlar scripts may exist. - kselftest/runner.sh: Propagate SIGTERM to runner child (git-fixes). - KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes (git-fixes bsc#1215915). - KVM: s390: interrupt: use READ_ONCE() before cmpxchg() (git-fixes bsc#1215896). - KVM: s390: pv: fix external interruption loop not always detected (git-fixes bsc#1215916). - KVM: s390: vsie: Fix the initialization of the epoch extension (epdx) field (git-fixes bsc#1215894). - KVM: s390: vsie: fix the length of APCB bitmap (git-fixes bsc#1215895). - KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler (git-fixes bsc#1215911). - KVM: SVM: Remove a duplicate definition of VMCB_AVIC_APIC_BAR_MASK (git-fixes). - KVM: VMX: Fix header file dependency of asm/vmx.h (git-fixes). - KVM: x86: Fix KVM_CAP_SYNC_REGS's sync_regs() TOCTOU issues (git-fixes). - KVM: x86/mmu: Include mmu.h in spte.h (git-fixes). - loop: Fix use-after-free issues (bsc#1214991). - loop: loop_set_status_from_info() check before assignment (bsc#1214990). - mlx4: Avoid resetting MLX4_INTFF_BONDING per driver (bsc#1187236). - mlx4: Connect the ethernet part to the auxiliary bus (bsc#1187236). - mlx4: Connect the infiniband part to the auxiliary bus (bsc#1187236). - mlx4: Delete custom device management logic (bsc#1187236). - mlx4: Get rid of the mlx4_interface.activate callback (bsc#1187236). - mlx4: Get rid of the mlx4_interface.get_dev callback (bsc#1187236). - mlx4: Move the bond work to the core driver (bsc#1187236). - mlx4: Register mlx4 devices to an auxiliary virtual bus (bsc#1187236). - mlx4: Rename member mlx4_en_dev.nb to netdev_nb (bsc#1187236). - mlx4: Replace the mlx4_interface.event callback with a notifier (bsc#1187236). - mlx4: Use 'void *' as the event param of mlx4_dispatch_event() (bsc#1187236). - module: Expose module_init_layout_section() (git-fixes) - net: do not allow gso_size to be set to GSO_BY_FRAGS (git-fixes). - net: mana: Add page pool for RX buffers (bsc#1214040). - net: mana: Configure hwc timeout from hardware (bsc#1214037). - net: phy: micrel: Correct bit assignments for phy_device flags (git-fixes). - net: usb: qmi_wwan: add Quectel EM05GV2 (git-fixes). - net/mlx4: Remove many unnecessary NULL values (bsc#1187236). - NFS: Guard against READDIR loop when entry names exceed MAXNAMELEN (git-fixes). - NFS/blocklayout: Use the passed in gfp flags (git-fixes). - NFS/pNFS: Report EINVAL errors from connect() to the server (git-fixes). - NFSD: da_addr_body field missing in some GETDEVICEINFO replies (git-fixes). - NFSD: fix change_info in NFSv4 RENAME replies (git-fixes). - NFSD: Fix race to FREE_STATEID and cl_revoked (git-fixes). - NFSv4: Fix dropped lock for racing OPEN and delegation return (git-fixes). - NFSv4: fix out path in __nfs4_get_acl_uncached (git-fixes). - NFSv4.2: fix error handling in nfs42_proc_getxattr (git-fixes). - NFSv4.2: fix handling of COPY ERR_OFFLOAD_NO_REQ (git-fixes). - NFSv4/pnfs: minor fix for cleanup path in nfs4_get_device_info (git-fixes). - ntb: Clean up tx tail index on link down (git-fixes). - ntb: Drop packets when qp link is down (git-fixes). - ntb: Fix calculation ntb_transport_tx_free_entry() (git-fixes). - nvme-auth: use chap->s2 to indicate bidirectional authentication (bsc#1214543). - nvme-tcp: add recovery_delay to sysfs (bsc#1201284). - nvme-tcp: delay error recovery until the next KATO interval (bsc#1201284). - nvme-tcp: Do not terminate commands when in RESETTING (bsc#1201284). - nvme-tcp: make 'err_work' a delayed work (bsc#1201284). - PCI: Free released resource after coalescing (git-fixes). - platform/mellanox: mlxbf-pmc: Fix potential buffer overflows (git-fixes). - platform/mellanox: mlxbf-pmc: Fix reading of unprogrammed events (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop jumbo frames (git-fixes). - platform/mellanox: mlxbf-tmfifo: Drop the Rx packet if no more descriptors (git-fixes). - platform/x86: intel_scu_ipc: Check status after timeout in busy_loop() (git-fixes). - platform/x86: intel_scu_ipc: Check status upon timeout in ipc_wait_for_interrupt() (git-fixes). - platform/x86: intel_scu_ipc: Do not override scu in intel_scu_ipc_dev_simple_command() (git-fixes). - platform/x86: intel_scu_ipc: Fail IPC send if still busy (git-fixes). - pNFS: Fix assignment of xprtdata.cred (git-fixes). - powerpc/fadump: make is_kdump_kernel() return false when fadump is active (bsc#1212639 ltc#202582). - powerpc/iommu: Fix notifiers being shared by PCI and VIO buses (bsc#1065729). - powerpc/xics: Remove unnecessary endian conversion (bsc#1065729). - printk: ringbuffer: Fix truncating buffer size min_t cast (bsc#1215875). - pwm: lpc32xx: Remove handling of PWM channels (git-fixes). - quota: add new helper dquot_active() (bsc#1214998). - quota: factor out dquot_write_dquot() (bsc#1214995). - quota: fix dqput() to follow the guarantees dquot_srcu should provide (bsc#1214963). - quota: fix warning in dqgrab() (bsc#1214962). - quota: Properly disable quotas when add_dquot_ref() fails (bsc#1214961). - quota: rename dquot_active() to inode_quota_active() (bsc#1214997). - RDMA/siw: Fabricate a GID on tun and loopback devices (git-fixes) - s390/dasd: fix command reject error on ESE devices (LTC#203630 bsc#1215123 git-fixes). - s390/dasd: fix hanging device after request requeue (git-fixes LTC#203629 bsc#1215124). - s390/ipl: add DEFINE_GENERIC_LOADPARM() (jsc#PED-2023). - s390/ipl: add eckd dump support (jsc#PED-2025). - s390/ipl: add eckd support (jsc#PED-2023). - s390/ipl: add loadparm parameter to eckd ipl/reipl data (jsc#PED-2023). - s390/ipl: use octal values instead of S_* macros (jsc#PED-2023). - s390/qeth: Do not call dev_close/dev_open (DOWN/UP) (bsc#1214873 git-fixes). - s390/zcrypt: do not leak memory if dev_set_name() fails (git-fixes bsc#1215148). - scsi: 3w-xxxx: Add error handling for initialization failure in tw_probe() (git-fixes). - scsi: 53c700: Check that command slot is not NULL (git-fixes). - scsi: core: Fix legacy /proc parsing buffer overflow (git-fixes). - scsi: core: Fix possible memory leak if device_add() fails (git-fixes). - scsi: fnic: Replace return codes in fnic_clean_pending_aborts() (git-fixes). - scsi: lpfc: Do not abuse UUID APIs and LPFC_COMPRESS_VMID_SIZE (git-fixes). - scsi: lpfc: Early return after marking final NLP_DROPPED flag in dev_loss_tmo (git-fixes). - scsi: lpfc: Fix the NULL vs IS_ERR() bug for debugfs_create_file() (git-fixes). - scsi: lpfc: Modify when a node should be put in device recovery mode during RSCN (git-fixes). - scsi: lpfc: Prevent use-after-free during rmmod with mapped NVMe rports (git-fixes). - scsi: lpfc: Remove reftag check in DIF paths (git-fixes). - scsi: qedf: Add synchronization between I/O completions and abort (bsc#1210658). - scsi: qedf: Fix firmware halt over suspend and resume (git-fixes). - scsi: qedf: Fix NULL dereference in error handling (git-fixes). - scsi: qedi: Fix firmware halt over suspend and resume (git-fixes). - scsi: qla2xxx: Add logs for SFP temperature monitoring (bsc#1214928). - scsi: qla2xxx: Allow 32-byte CDBs (bsc#1214928). - scsi: qla2xxx: Error code did not return to upper layer (bsc#1214928). - scsi: qla2xxx: Fix firmware resource tracking (bsc#1214928). - scsi: qla2xxx: Fix NULL vs IS_ERR() bug for debugfs_create_dir() (git-fixes). - scsi: qla2xxx: Fix smatch warn for qla_init_iocb_limit() (bsc#1214928). - scsi: qla2xxx: Flush mailbox commands on chip reset (bsc#1214928). - scsi: qla2xxx: Move resource to allow code reuse (bsc#1214928). - scsi: qla2xxx: Remove unsupported ql2xenabledif option (bsc#1214928). - scsi: qla2xxx: Remove unused declarations (bsc#1214928). - scsi: qla2xxx: Remove unused variables in qla24xx_build_scsi_type_6_iocbs() (bsc#1214928). - scsi: qla2xxx: Update version to 10.02.09.100-k (bsc#1214928). - scsi: qla2xxx: Use raw_smp_processor_id() instead of smp_processor_id() (git-fixes). - scsi: scsi_debug: Remove dead code (git-fixes). - scsi: snic: Fix double free in snic_tgt_create() (git-fixes). - scsi: snic: Fix possible memory leak if device_add() fails (git-fixes). - scsi: storvsc: Handle additional SRB status values (git-fixes). - scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes bsc#1215941). - selftests: mlxsw: Fix test failure on Spectrum-4 (jsc#PED-1549). - selftests: tracing: Fix to unmount tracefs for recovering environment (git-fixes). - spi: Add TPM HW flow flag (bsc#1213534) - spi: tegra210-quad: Enable TPM wait polling (bsc#1213534) - spi: tegra210-quad: set half duplex flag (bsc#1213534) - SUNRPC: Mark the cred for revalidation if the server rejects it (git-fixes). - tcpm: Avoid soft reset when partner does not support get_status (git-fixes). - tpm_tis_spi: Add hardware wait polling (bsc#1213534) - tracing: Fix race issue between cpu buffer write and swap (git-fixes). - tracing: Remove extra space at the end of hwlat_detector/mode (git-fixes). - tracing: Remove unnecessary copying of tr->current_trace (git-fixes). - uapi: stddef.h: Fix __DECLARE_FLEX_ARRAY for C++ (git-fixes). - udf: Fix extension of the last extent in the file (bsc#1214964). - udf: Fix file corruption when appending just after end of preallocated extent (bsc#1214965). - udf: Fix off-by-one error when discarding preallocation (bsc#1214966). - udf: Fix uninitialized array access for some pathnames (bsc#1214967). - Update metadata - uprobes/x86: Allow to probe a NOP instruction with 0x66 prefix (git-fixes). - usb: ehci: add workaround for chipidea PORTSC.PEC bug (git-fixes). - usb: ehci: move new member has_ci_pec_bug into hole (git-fixes). - usb: serial: option: add FOXCONN T99W368/T99W373 product (git-fixes). - usb: serial: option: add Quectel EM05G variant (0x030e) (git-fixes). - usb: typec: tcpci: clear the fault status bit (git-fixes). - usb: typec: tcpci: move tcpci.h to include/linux/usb/ (git-fixes). - vhost_vdpa: fix the crash in unmap a large memory (git-fixes). - vhost-scsi: unbreak any layout for response (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: allow batching hint without size (git-fixes). - vhost: fix hung thread due to erroneous iotlb entries (git-fixes). - vhost: handle error while adding split ranges to iotlb (git-fixes). - virtio_net: add checking sq is full inside xdp xmit (git-fixes). - virtio_net: Fix probe failed when modprobe virtio_net (git-fixes). - virtio_net: reorder some funcs (git-fixes). - virtio_net: separate the logic of checking whether sq is full (git-fixes). - virtio_ring: fix avail_wrap_counter in virtqueue_add_packed (git-fixes). - virtio-blk: set req->state to MQ_RQ_COMPLETE after polling I/O is finished (git-fixes). - virtio-mmio: do not break lifecycle of vm_dev (git-fixes). - virtio-net: fix race between set queues and probe (git-fixes). - virtio-net: set queues after driver_ok (git-fixes). - virtio-rng: make device ready before making request (git-fixes). - virtio: acknowledge all features before access (git-fixes). - vmcore: remove dependency with is_kdump_kernel() for exporting vmcore (bsc#1212639 ltc#202582). - watchdog: intel-mid_wdt: add MODULE_ALIAS() to allow auto-load (git-fixes). - word-at-a-time: use the same return type for has_zero regardless of endianness (bsc#1065729). - x86/alternative: Fix race in try_get_desc() (git-fixes). - x86/boot/e820: Fix typo in e820.c comment (git-fixes). - x86/bugs: Reset speculation control settings on init (git-fixes). - x86/coco: Allow CPU online/offline for a TDX VM with the paravisor on Hyper-V (bsc#1206453). - x86/coco: Export cc_vendor (bsc#1206453). - x86/cpu: Add Lunar Lake M (git-fixes). - x86/cpu: Add model number for Intel Arrow Lake processor (git-fixes). - x86/fpu: Take task_struct* in copy_sigframe_from_user_to_xstate() (git-fixes). - x86/head/64: Switch to KERNEL_CS as soon as new GDT is installed (git-fixes). - x86/hyperv: Add hv_isolation_type_tdx() to detect TDX guests (bsc#1206453). - x86/hyperv: Add hv_write_efer() for a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Add hyperv-specific handling for VMMCALL under SEV-ES (bsc#1206453). - x86/hyperv: Add missing 'inline' to hv_snp_boot_ap() stub (bsc#1206453). - x86/hyperv: Add sev-snp enlightened guest static key (bsc#1206453) - x86/hyperv: Add smp support for SEV-SNP guest (bsc#1206453). - x86/hyperv: Add VTL specific structs and hypercalls (bsc#1206453). - x86/hyperv: Fix hyperv_pcpu_input_arg handling when CPUs go online/offline (bsc#1206453). - x86/hyperv: Fix serial console interrupts for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Fix undefined reference to isolation_type_en_snp without CONFIG_HYPERV (bsc#1206453). - x86/hyperv: Introduce a global variable hyperv_paravisor_present (bsc#1206453). - x86/hyperv: Mark hv_ghcb_terminate() as noreturn (bsc#1206453). - x86/hyperv: Mark Hyper-V vp assist page unencrypted in SEV-SNP enlightened guest (bsc#1206453). - x86/hyperv: Move the code in ivm.c around to avoid unnecessary ifdef's (bsc#1206453). - x86/hyperv: Remove hv_isolation_type_en_snp (bsc#1206453). - x86/hyperv: Set Virtual Trust Level in VMBus init message (bsc#1206453). - x86/hyperv: Support hypercalls for fully enlightened TDX guests (bsc#1206453). - x86/hyperv: Use TDX GHCI to access some MSRs in a TDX VM with the paravisor (bsc#1206453). - x86/hyperv: Use vmmcall to implement Hyper-V hypercall in sev-snp enlightened guest (bsc#1206453). - x86/i8259: Mark legacy PIC interrupts with IRQ_LEVEL (git-fixes). - x86/ioapic: Do not return 0 from arch_dynirq_lower_bound() (git-fixes). - x86/ioremap: Fix page aligned size calculation in __ioremap_caller() (git-fixes). - x86/mce: Retrieve poison range from hardware (git-fixes). - x86/mem_encrypt: Unbreak the AMD_MEM_ENCRYPT=n build (git-fixes). - x86/mm: Avoid incomplete Global INVLPG flushes (git-fixes). - x86/mm: Do not shuffle CPU entry areas without KASLR (git-fixes). - x86/purgatory: remove PGO flags (git-fixes). - x86/PVH: avoid 32-bit build warning when obtaining VGA console info (git-fixes). - x86/reboot: Disable virtualization in an emergency if SVM is supported (git-fixes). - x86/resctl: fix scheduler confusion with 'current' (git-fixes). - x86/resctrl: Fix task CLOSID/RMID update race (git-fixes). - x86/resctrl: Fix to restore to original value when re-enabling hardware prefetch register (git-fixes). - x86/rtc: Remove __init for runtime functions (git-fixes). - x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635). - x86/sgx: Reduce delay and interference of enclave release (git-fixes). - x86/srso: Do not probe microcode in a guest (git-fixes). - x86/srso: Fix SBPB enablement for spec_rstack_overflow=off (git-fixes). - x86/srso: Fix srso_show_state() side effect (git-fixes). - x86/srso: Set CPUID feature bits independently of bug or mitigation status (git-fixes). - x86/virt: Force GIF=1 prior to disabling SVM (for reboot flows) (git-fixes). - xen: remove a confusing comment on auto-translated guest I/O (git-fixes). - xprtrdma: Remap Receive buffers after a reconnect (git-fixes). Important SUSE bug 1152472 SUSE bug 1202845 SUSE bug 1206453 SUSE bug 1213808 SUSE bug 1214928 SUSE bug 1214942 SUSE bug 1214943 SUSE bug 1214944 SUSE bug 1214950 SUSE bug 1214951 SUSE bug 1214954 SUSE bug 1214957 SUSE bug 1214986 SUSE bug 1214988 SUSE bug 1214992 SUSE bug 1214993 SUSE bug 1215322 SUSE bug 1215877 SUSE bug 1215894 SUSE bug 1215895 SUSE bug 1215896 SUSE bug 1215911 SUSE bug 1215915 SUSE bug 1215916 CVE-2023-1192 CVE-2023-1206 CVE-2023-1859 CVE-2023-2177 CVE-2023-39192 CVE-2023-39193 CVE-2023-39194 CVE-2023-4155 CVE-2023-42753 CVE-2023-42754 CVE-2023-4389 CVE-2023-4622 CVE-2023-4623 CVE-2023-4881 CVE-2023-4921 CVE-2023-5345 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 Security update for libcue (Important) SUSE Linux Enterprise Desktop 15 SP5 SUSE Linux Enterprise Server 15 SP5 SUSE Linux Enterprise Server for SAP Applications 15 SP5 SUSE Linux Enterprise Workstation Extension 15 SP5 This update for libcue fixes the following issues: - CVE-2023-43641: Fixed a buffer overflow while parsing a malicious file (bsc#1215728). Important SUSE bug 1215728 CVE-2023-43641 cpe:/o:suse:sle-we:15:sp5 cpe:/o:suse:sled:15:sp5 cpe:/o:suse:sles:15:sp5 cpe:/o:suse:sles_sap:15:sp5 haproxy sle-ha-release prometheus-ha_cluster_exporter ruby2.5-rubygem-actionpack-5_1 ruby2.5-rubygem-actionview-5_1 ruby2.5-rubygem-activejob-5_1 ruby2.5-rubygem-activerecord-5_1 ruby2.5-rubygem-activesupport-5_1 ruby2.5-rubygem-globalid ruby2.5-rubygem-kramdown ruby2.5-rubygem-loofah ruby2.5-rubygem-puma ruby2.5-rubygem-rack ruby2.5-rubygem-rails-html-sanitizer ruby2.5-rubygem-sprockets ruby2.5-rubygem-tzinfo ruby2.5-rubygem-websocket-extensions openssl-1_1-livepatches sle-module-live-patching-release Mesa Mesa-32bit Mesa-KHR-devel Mesa-devel Mesa-dri Mesa-dri-32bit Mesa-dri-devel Mesa-gallium Mesa-gallium-32bit Mesa-libEGL-devel Mesa-libEGL1 Mesa-libEGL1-32bit Mesa-libGL-devel Mesa-libGL1 Mesa-libGL1-32bit Mesa-libGLESv1_CM-devel Mesa-libGLESv2-devel Mesa-libGLESv3-devel Mesa-libVulkan-devel Mesa-libd3d Mesa-libd3d-devel Mesa-libglapi-devel Mesa-libglapi0 Mesa-libglapi0-32bit Mesa-libva Mesa-vulkan-device-select Mesa-vulkan-overlay libOSMesa-devel libOSMesa8 libgbm-devel libgbm1 libgbm1-32bit libvdpau_r300 libvdpau_r600 libvdpau_radeonsi libvdpau_virtio_gpu libvulkan_intel libvulkan_lvp libvulkan_radeon libxatracker-devel libxatracker2 sled-release SLE_HPC-release sle-module-basesystem-release sles-release SLES_SAP-release amavisd-new amavisd-new-docs perl-ExtUtils-MakeMaker perl-MIME-Charset system-user-vscan apache-commons-httpclient apache-commons-io apache2 apache2-prefork apache2-utils apparmor-abstractions apparmor-docs apparmor-parser apparmor-parser-lang apparmor-profiles apparmor-utils apparmor-utils-lang libapparmor-devel libapparmor1 libapparmor1-32bit pam_apparmor pam_apparmor-32bit python3-apparmor apr-util-devel libapr-util1 arm-trusted-firmware arm-trusted-firmware-imx8mm arm-trusted-firmware-imx8mq arm-trusted-firmware-poplar arm-trusted-firmware-qemu arm-trusted-firmware-qemu_sbsa arm-trusted-firmware-rk3328 arm-trusted-firmware-rk3368 arm-trusted-firmware-rpi3 arm-trusted-firmware-rpi4 arm-trusted-firmware-sun50i_a64 arm-trusted-firmware-sun50i_h6 arm-trusted-firmware-tegra186 arm-trusted-firmware-tegra210 arm-trusted-firmware-tools arm-trusted-firmware-zynqmp aspell aspell-devel libaspell15 libpspell15 audit-devel libaudit1 libaudit1-32bit libauparse0 autoyast2 autoyast2-installation avahi avahi-compat-howl-devel avahi-compat-mDNSResponder-devel avahi-lang avahi-utils libavahi-client3 libavahi-client3-32bit libavahi-common3 libavahi-common3-32bit libavahi-core7 libavahi-devel libavahi-glib-devel libavahi-glib1 libavahi-gobject0 libavahi-libevent1 libavahi-ui-gtk3-0 libdns_sd libhowl0 typelib-1_0-Avahi-0_6 bash bash-devel bash-doc bash-lang bash-sh libreadline7 libreadline7-32bit readline-devel readline-doc bcel bcm43xx-firmware bind-devel libbind9-1600 libdns1605 libirs-devel libirs1601 libisc1606 libisccc1600 libisccfg1600 libns1604 bind-utils python3-bind binutils binutils-devel libctf-nobfd0 libctf0 blas-devel lapack-devel libblas3 liblapack3 libopenblas_openmp-devel libopenblas_openmp0 libopenblas_pthreads-devel libopenblas_pthreads0 openblas-common-devel bluez bluez-zsh-completion libbluetooth3 libbrotli-devel libbrotlicommon1 libbrotlicommon1-32bit libbrotlidec1 libbrotlidec1-32bit libbrotlienc1 bubblewrap bubblewrap-zsh-completion busybox busybox-static bzip2 libbz2-1 libbz2-1-32bit libbz2-devel c-ares-devel libcares2 ca-certificates-mozilla cairo-devel libcairo-gobject2 libcairo-script-interpreter2 libcairo2 ceph-common libcephfs-devel libcephfs2 librados-devel librados2 libradospp-devel librbd-devel librbd1 librgw-devel librgw2 python3-ceph-argparse python3-ceph-common python3-cephfs python3-rados python3-rbd python3-rgw rados-objclass-devel rbd-nbd chrony chrony-pool-empty chrony-pool-suse cifs-utils cifs-utils-devel clamav clamav-devel libclamav9 libfreshclam2 libcolord2 conntrack-tools conntrackd coreutils coreutils-doc coreutils-lang cosign cpio cpio-lang cpio-mt cpp7 gcc7 gcc7-c++ gcc7-fortran libasan4 libcilkrts5 libgfortran4 libgfortran4-32bit libstdc++6-devel-gcc7 libubsan0 cron cronie cryptctl cryptsetup cryptsetup-lang cryptsetup-ssh libcryptsetup-devel libcryptsetup12 libcryptsetup12-32bit libcryptsetup12-hmac libcryptsetup12-hmac-32bit curl libcurl-devel libcurl4 libcurl4-32bit cyrus-sasl cyrus-sasl-32bit cyrus-sasl-crammd5 cyrus-sasl-crammd5-32bit cyrus-sasl-devel cyrus-sasl-digestmd5 cyrus-sasl-digestmd5-32bit cyrus-sasl-gssapi cyrus-sasl-gssapi-32bit cyrus-sasl-otp cyrus-sasl-plain cyrus-sasl-plain-32bit cyrus-sasl-saslauthd libsasl2-3 libsasl2-3-32bit db48-utils libdb-4_8 libdb-4_8-32bit libdb-4_8-devel dbus-1 dbus-1-devel dbus-1-x11 libdbus-1-3 libdbus-1-3-32bit dbus-1-glib dbus-1-glib-32bit dbus-1-glib-devel dbus-1-glib-tool dhcp dhcp-client dhcp-devel dirmngr gpg2 gpg2-lang dmidecode dnsmasq dracut dracut-fips dracut-ima dracut-mkinitrd-deprecated dstat e2fsprogs e2fsprogs-devel libcom_err-devel libcom_err-devel-static libcom_err2 libcom_err2-32bit libext2fs-devel libext2fs-devel-static libext2fs2 ecryptfs-utils ecryptfs-utils-devel libecryptfs1 emacs emacs-el emacs-info emacs-nox etags enscript expat libexpat-devel libexpat1 libexpat1-32bit file file-devel file-magic libmagic1 libmagic1-32bit flac-devel libFLAC++6 libFLAC8 freetype2-devel libfreetype6 libfreetype6-32bit fribidi fribidi-devel libfribidi0 fuse fuse-devel fuse-doc libfuse2 libulockmgr1 fwupdate fwupdate-devel fwupdate-efi libfwup1 g3utils mgetty gc-devel libgc1 gd-devel libgd3 gdk-pixbuf-devel gdk-pixbuf-lang gdk-pixbuf-query-loaders gdk-pixbuf-query-loaders-32bit gdk-pixbuf-thumbnailer libgdk_pixbuf-2_0-0 libgdk_pixbuf-2_0-0-32bit typelib-1_0-GdkPixbuf-2_0 typelib-1_0-GdkPixdata-2_0 gdk-pixbuf-loader-rsvg librsvg-2-2 ghostscript ghostscript-devel ghostscript-x11 giflib-devel libgif7 git-core glib-networking glib-networking-lang glib2-devel glib2-lang glib2-tools libgio-2_0-0 libgio-2_0-0-32bit libglib-2_0-0 libglib-2_0-0-32bit libgmodule-2_0-0 libgmodule-2_0-0-32bit libgobject-2_0-0 libgobject-2_0-0-32bit libgthread-2_0-0 gmp-devel libgmp10 libgmp10-32bit libgmpxx4 golang-github-prometheus-node_exporter gptfdisk graphite2-devel libgraphite2-3 libgraphite2-3-32bit graphviz graphviz-devel graphviz-plugins-core libgraphviz6 groff groff-full gxditview grub2 grub2-arm64-efi grub2-i386-pc grub2-powerpc-ieee1275 grub2-s390x-emu grub2-snapper-plugin grub2-systemd-sleep-plugin grub2-x86_64-efi gstreamer gstreamer-devel gstreamer-lang gstreamer-utils libgstreamer-1_0-0 typelib-1_0-Gst-1_0 gstreamer-plugins-base gstreamer-plugins-base-devel gstreamer-plugins-base-lang libgstallocators-1_0-0 libgstapp-1_0-0 libgstaudio-1_0-0 libgstfft-1_0-0 libgstgl-1_0-0 libgstpbutils-1_0-0 libgstriff-1_0-0 libgstrtp-1_0-0 libgstrtsp-1_0-0 libgstsdp-1_0-0 libgsttag-1_0-0 libgstvideo-1_0-0 typelib-1_0-GstAllocators-1_0 typelib-1_0-GstApp-1_0 typelib-1_0-GstAudio-1_0 typelib-1_0-GstGL-1_0 typelib-1_0-GstGLEGL-1_0 typelib-1_0-GstGLWayland-1_0 typelib-1_0-GstGLX11-1_0 typelib-1_0-GstPbutils-1_0 typelib-1_0-GstRtp-1_0 typelib-1_0-GstRtsp-1_0 typelib-1_0-GstSdp-1_0 typelib-1_0-GstTag-1_0 typelib-1_0-GstVideo-1_0 gstreamer-plugins-good gstreamer-plugins-good-lang gtk2-devel gtk2-lang gtk2-tools libgtk-2_0-0 typelib-1_0-Gtk-2_0 harfbuzz-devel libharfbuzz-gobject0 libharfbuzz-icu0 libharfbuzz-subset0 libharfbuzz0 libharfbuzz0-32bit typelib-1_0-HarfBuzz-0_0 hivex-devel libhivex0 perl-Win-Hivex hplip-devel hplip-hpijs hplip-sane icu.691-devel libicu69 libicu69-bedata libicu69-ledata ipmitool ipsec-tools ipvsadm iscsiuio libopeniscsiusr0 open-iscsi open-iscsi-devel jackson-annotations jackson-core jackson-databind libjasper4 java-11-openjdk java-11-openjdk-demo java-11-openjdk-devel java-11-openjdk-headless java-17-openjdk java-17-openjdk-demo java-17-openjdk-devel java-17-openjdk-headless libjson-c-devel libjson-c3 libjson-c3-32bit kdump kernel-64kb kernel-64kb-devel kernel-default kernel-default-devel kernel-devel kernel-macros kernel-zfcpdump kernel-default-base kernel-firmware-all kernel-firmware-amdgpu kernel-firmware-ath10k kernel-firmware-ath11k kernel-firmware-atheros kernel-firmware-bluetooth kernel-firmware-bnx2 kernel-firmware-brcm kernel-firmware-chelsio kernel-firmware-dpaa2 kernel-firmware-i915 kernel-firmware-intel kernel-firmware-iwlwifi kernel-firmware-liquidio kernel-firmware-marvell kernel-firmware-media kernel-firmware-mediatek kernel-firmware-mellanox kernel-firmware-mwifiex kernel-firmware-network kernel-firmware-nfp kernel-firmware-nvidia kernel-firmware-platform kernel-firmware-prestera kernel-firmware-qcom kernel-firmware-qlogic kernel-firmware-radeon kernel-firmware-realtek kernel-firmware-serial kernel-firmware-sound kernel-firmware-ti kernel-firmware-ueagle kernel-firmware-usb-network ucode-amd keylime-agent keylime-config keylime-firewalld keylime-logrotate keylime-registrar keylime-tpm_cert_store keylime-verifier python3-keylime kpartx libdmmp-devel libdmmp0_2_0 libmpath0 multipath-tools multipath-tools-devel krb5 krb5-32bit krb5-client krb5-devel krb5-plugin-preauth-otp krb5-plugin-preauth-pkinit ldb-tools libldb-devel libldb2 libldb2-32bit python3-ldb python3-ldb-devel ldns-devel libldns2 less lftp libFS-devel libFS6 libHX-devel libHX28 libHX28-32bit libICE-devel libICE6 libQt5Concurrent-devel libQt5Concurrent5 libQt5Core-devel libQt5Core-private-headers-devel libQt5Core5 libQt5DBus-devel libQt5DBus-private-headers-devel libQt5DBus5 libQt5Gui-devel libQt5Gui-private-headers-devel libQt5Gui5 libQt5KmsSupport-devel-static libQt5KmsSupport-private-headers-devel libQt5Network-devel libQt5Network-private-headers-devel libQt5Network5 libQt5OpenGL-devel libQt5OpenGL-private-headers-devel libQt5OpenGL5 libQt5PlatformHeaders-devel libQt5PlatformSupport-devel-static libQt5PlatformSupport-private-headers-devel libQt5PrintSupport-devel libQt5PrintSupport-private-headers-devel libQt5PrintSupport5 libQt5Sql-devel libQt5Sql-private-headers-devel libQt5Sql5 libQt5Sql5-sqlite libQt5Test-devel libQt5Test-private-headers-devel libQt5Test5 libQt5Widgets-devel libQt5Widgets-private-headers-devel libQt5Widgets5 libQt5Xml-devel libQt5Xml5 libqt5-qtbase-common-devel libqt5-qtbase-devel libqt5-qtbase-private-headers-devel libQt5Svg5 libqt5-qtsvg-devel libX11-6 libX11-6-32bit libX11-data libX11-devel libX11-xcb1 libX11-xcb1-32bit libXRes1 libXres-devel libXcursor-devel libXcursor1 libXdmcp-devel libXdmcp6 libXext-devel libXext6 libXext6-32bit libXfixes-devel libXfixes3 libXfixes3-32bit libXfont-devel libXfont1 libXfont2-2 libXfont2-devel libXi-devel libXi6 libXi6-32bit libXinerama-devel libXinerama1 libXp-devel libXp6 libXpm-devel libXpm4 libXrandr-devel libXrandr2 libXrender-devel libXrender1 libXrender1-32bit libXt-devel libXt6 libXtst-devel libXtst6 libXtst6-32bit libXv-devel libXv1 libXvMC-devel libXvMC1 libXvnc1 tigervnc xorg-x11-Xvnc xorg-x11-Xvnc-module xorg-x11-Xvnc-novnc libXxf86dga-devel libXxf86dga1 libXxf86vm-devel libXxf86vm1 libXxf86vm1-32bit libaom3 libarchive-devel libarchive13 libblkid-devel libblkid-devel-static libblkid1 libblkid1-32bit libfdisk-devel libfdisk1 libmount-devel libmount1 libmount1-32bit libsmartcols-devel libsmartcols1 libuuid-devel libuuid-devel-static libuuid1 libuuid1-32bit util-linux util-linux-lang util-linux-systemd libbpf0 libbpf1 libbsd-devel libbsd0 libcaca-devel libcaca0 libcaca0-plugins libcacard0 libcontainers-common libcroco libcroco-0_6-3 libcroco-devel libcryptopp-devel libcryptopp8_6_0 libdmx-devel libdmx1 libekmfweb1 libekmfweb1-devel libkmipclient1 osasnmpd s390-tools s390-tools-chreipl-fcp-mpath s390-tools-hmcdrvfs s390-tools-zdsfs libesmtp libesmtp-devel libevent-2_1-8 libevent-devel libfastjson-devel libfastjson4 libfreebl3 libfreebl3-32bit libfreebl3-hmac libfreebl3-hmac-32bit libsoftokn3 libsoftokn3-32bit libsoftokn3-hmac libsoftokn3-hmac-32bit mozilla-nss mozilla-nss-32bit mozilla-nss-certs mozilla-nss-certs-32bit mozilla-nss-devel mozilla-nss-sysinit mozilla-nss-tools libgcrypt-devel libgcrypt20 libgcrypt20-32bit libgcrypt20-hmac libgcrypt20-hmac-32bit libgstphotography-1_0-0 libgstplay-1_0-0 libgstplayer-1_0-0 libgtk-vnc-2_0-0 libgvnc-1_0-0 libhogweed6 libhogweed6-32bit libnettle-devel libnettle8 libnettle8-32bit libicu-devel libicu-suse65_1 libicu65_1-bedata libicu65_1-ledata libidn-devel libidn-tools libidn11 libidn11-32bit libidn2-0 libidn2-0-32bit libidn2-devel libidn2-tools libinput-devel libinput-tools libinput-udev libinput10 libipa_hbac-devel libipa_hbac0 libsss_certmap-devel libsss_certmap0 libsss_idmap-devel libsss_idmap0 libsss_nss_idmap-devel libsss_nss_idmap0 libsss_simpleifp-devel libsss_simpleifp0 python3-sssd-config sssd sssd-ad sssd-common sssd-common-32bit sssd-dbus sssd-ipa sssd-kcm sssd-krb5 sssd-krb5-common sssd-ldap sssd-proxy sssd-tools sssd-winbind-idmap libjansson-devel libjansson4 libjavascriptcoregtk-4_0-18 libwebkit2gtk-4_0-37 typelib-1_0-JavaScriptCore-4_0 typelib-1_0-WebKit2-4_0 typelib-1_0-WebKit2WebExtension-4_0 webkit2gtk-4_0-injected-bundles webkit2gtk3-soup2-devel libjbig-devel libjbig2 libjbig2-32bit libjpeg62 libjpeg62-devel libjpeg8 libjpeg8-32bit libjpeg8-devel libturbojpeg0 libksba-devel libksba8 liblcms2-2 liblcms2-devel libldap-2_4-2 libldap-2_4-2-32bit libldap-data openldap2-client openldap2-devel openldap2-devel-static liblua5_3-5 liblua5_3-5-32bit lua53 lua53-devel liblz4-1 liblz4-1-32bit liblz4-devel lz4 liblzo2-2 lzo-devel lzo-devel-static libmariadb3 libmariadbprivate libmarkdown2 libmicrohttpd12 libmilter1_0 libminizip1 libz1 libz1-32bit minizip-devel zlib-devel zlib-devel-static libmp3lame0 libmpfr6 mpfr-devel libmpg123-0 libmspack-devel libmspack0 libncurses6 libncurses6-32bit ncurses-devel ncurses-utils tack terminfo terminfo-base terminfo-iterm terminfo-screen libnetpbm11 netpbm libnghttp2-14 libnghttp2-14-32bit libnghttp2-devel libnghttp2_asio-devel libnghttp2_asio1 libnm0 typelib-1_0-NM-1_0 liboath-devel liboath0 oath-toolkit-xml libodbc2 unixODBC unixODBC-devel libonig4 oniguruma-devel libopenjp2-7 openjpeg2 openjpeg2-devel libopenssl-1_1-devel libopenssl1_1 libopenssl1_1-32bit libopenssl1_1-hmac libopenssl1_1-hmac-32bit openssl-1_1 libopenssl-3-devel libopenssl3 openssl-3 libopenssl-devel openssl libopus-devel libopus0 libosinfo libosinfo-1_0-0 libosinfo-lang libostree-1-1 libp11-kit0 libp11-kit0-32bit p11-kit p11-kit-devel p11-kit-nss-trust p11-kit-server p11-kit-tools libpainter0 librfxencode0 xrdp xrdp-devel libpango-1_0-0 pango-devel typelib-1_0-Pango-1_0 libpcap-devel libpcap1 libpcre1 libpcre1-32bit libpcre16-0 libpcrecpp0 libpcrecpp0-32bit libpcreposix0 pcre-devel pcre-tools libpcre2-16-0 libpcre2-32-0 libpcre2-8-0 libpcre2-posix2 pcre2-devel libpcsclite1 libpcscspy0 pcsc-lite pcsc-lite-devel libpixman-1-0 libpixman-1-0-devel libpng12-0 libpng12-devel libpng16-16 libpng16-16-32bit libpng16-compat-devel libpng16-devel libpolkit-agent-1-0 libpolkit-gobject-1-0 pkexec polkit polkit-devel typelib-1_0-Polkit-1_0 libpoppler-cpp0 libpoppler-devel libpoppler-glib-devel libpoppler-glib8 libpoppler126 poppler-tools typelib-1_0-Poppler-0_18 libpoppler89 libpq5 postgresql15 libprocps7 procps procps-devel libprotobuf-c-devel libprotobuf-c1 libprotobuf-lite20 libprotobuf20 libproxy-devel libproxy1 libpython3_6m1_0 python3 python3-base python3-curses python3-dbm python3-devel python3-idle python3-tk libqb-devel libqb100 libqpdf26 libqpdf28 qpdf qpdf-devel librrd8 perl-rrdtool rrdtool rrdtool-devel librsync-devel librsync2 libruby2_5-2_5 ruby2.5 ruby2.5-devel ruby2.5-devel-extra ruby2.5-stdlib libsamba-errors-devel libsamba-errors0 libsamba-policy-devel libsamba-policy-python3-devel libsamba-policy0-python3 samba samba-ceph samba-client samba-client-libs samba-client-libs-32bit samba-devel samba-gpupdate samba-ldb-ldap samba-libs samba-libs-32bit samba-libs-python3 samba-python3 samba-winbind samba-winbind-libs samba-winbind-libs-32bit libseccomp-devel libseccomp2 libserf-1-1 libserf-devel libsha1detectcoll-devel libsha1detectcoll1 libslirp-devel libslirp0 libsmi libsmi2 libsndfile-devel libsndfile1 libsnmp30 libsnmp40 net-snmp net-snmp-devel perl-SNMP snmp-mibs libsolv-devel libsolv-tools python3-solv ruby-solv libsoup-2_4-1 libsoup-3_0-0 libsoup-devel libsoup-lang libsoup2-devel libsoup2-lang typelib-1_0-Soup-2_4 typelib-1_0-Soup-3_0 libspeex1 speex-devel libspice-client-glib-2_0-8 libspice-client-glib-helper libspice-client-gtk-3_0-5 libsqlite3-0 libsqlite3-0-32bit sqlite3 sqlite3-devel sqlite3-tcl libssh-config libssh-devel libssh4 libssh4-32bit libssh2-1 libssh2-devel libsystemd0 libsystemd0-32bit libudev1 libudev1-32bit systemd systemd-32bit systemd-container systemd-coredump systemd-devel systemd-doc systemd-lang systemd-sysvinit udev libtag1 libtasn1 libtasn1-6 libtasn1-6-32bit libtasn1-devel libtidy5 libtiff-devel libtiff5 libtiff5-32bit libtirpc-devel libtirpc-netconfig libtirpc3 libtirpc3-32bit libtspi1 trousers trousers-devel libtss2-esys0 libtss2-fapi1 libtss2-mu0 libtss2-rc0 libtss2-sys1 libtss2-tcti-cmd0 libtss2-tcti-device0 libtss2-tcti-mssim0 libtss2-tcti-pcap0 libtss2-tcti-swtpm0 libtss2-tctildr0 tpm2-0-tss tpm2-0-tss-devel libu2f-host-devel libu2f-host0 libudisks2-0 libudisks2-0-devel typelib-1_0-UDisks-2_0 udisks2 udisks2-lang libunbound2 unbound-anchor unbound-devel libusbguard1 usbguard usbguard-devel usbguard-tools libuv-devel libuv1 libvirt-libs libvmtools-devel libvmtools0 open-vm-tools open-vm-tools-salt-minion open-vm-tools-sdmp libvorbis-devel libvorbis0 libvorbisenc2 libvorbisfile3 libvpx-devel libvpx7 libwavpack1 libwebp-devel libwebp7 libwebpdecoder3 libwebpdemux2 libwebpmux3 libwireshark15 libwiretap12 libwsutil13 wireshark libwscodecs1 libwsutil8 libxerces-c-3_2 libxerces-c-devel libxkbcommon-devel libxkbcommon-x11-0 libxkbcommon-x11-devel libxkbcommon0 libxml2-2 libxml2-2-32bit libxml2-devel libxml2-tools python3-libxml2 libxslt-devel libxslt-tools libxslt1 libyajl-devel libyajl2 libyaml-0-2 libyaml-devel libyaml-cpp0_6 libykcs11-1 libykcs11-devel libykpiv-devel libykpiv1 yubico-piv-tool libzip-devel libzip5 libzmq5 zeromq-devel libzstd-devel libzstd1 libzstd1-32bit zstd libzzip-0-13 zziplib-devel log4j12 login_defs shadow logrotate mercurial minicom minicom-lang mokutil mozilla-nspr mozilla-nspr-32bit mozilla-nspr-devel mutt mutt-doc mutt-lang nfs-client nfs-doc nfs-kernel-server nmap opensc openssh openssh-clients openssh-common openssh-fips openssh-helpers openssh-server opie-32bit pam_krb5 pam_krb5-32bit pam_ssh pam_ssh-32bit pam_u2f pam_yubico patch perl-Archive-Zip perl-Convert-ASN1 perl-DBI perl-File-Path perl-HTML-Parser perl-HTTP-Daemon perl-Mail-SpamAssassin spamassassin perl-Net-Server perl-XML-Twig perl-biber permissions permissions-zypp-plugin policycoreutils policycoreutils-lang policycoreutils-newrole policycoreutils-python-utils python3-policycoreutils postgresql powerpc-utils ppc64-diag procmail python3-Babel python3-Flask-Security-Too python3-Jinja2 python3-M2Crypto python3-Mako python3-PyJWT python3-Pygments python3-Werkzeug python3-asn1crypto python3-certifi python3-cffi python3-cryptography python3-distro python3-future python3-httplib2 python3-numpy python3-numpy-devel python3-py python3-pyasn1 python3-pycparser python3-rsa python-rtslib-fb-common python3-rtslib-fb python3-scripttest python3-sqlparse python3-urllib3 python3-waitress python3-CherryPy python3-PyYAML python3-SQLAlchemy python3-dulwich python3-ecdsa python3-lxml python3-lxml-devel python3-paramiko python3-python-gnupg python3-python3-saml python3-requests python3-salt salt salt-bash-completion salt-doc salt-minion salt-zsh-completion python3-targetcli-fb targetcli-fb-common python3-wheel qemu-tools rage-encryption rage-encryption-bash-completion rekor rpm rpm-32bit rpm-devel ruby2.5-rubygem-bundler ruby2.5-rubygem-nokogiri libsbc1 screen sharutils sharutils-lang shim skopeo socat libspandsp2 spectre-meltdown-checker squashfs strongswan strongswan-doc strongswan-hmac strongswan-ipsec strongswan-libs0 subversion subversion-devel sudo sudo-devel sudo-plugin-python supportutils supportutils-plugin-salt system-user-root tar tar-lang tar-rmt tboot tcpdump tpm2.0-tools u-boot-rpiarm64 u-boot-rpiarm64-doc u-boot-tools ucode-intel umoci unzip vim vim-data vim-data-common vim-small w3m wicked wicked-nbft wicked-service wireguard-tools wpa_supplicant xdg-utils xen-libs xen-tools-domU xorg-x11 xorg-x11-essentials xrdb xorg-x11-devel xorg-x11-libs xorg-x11-server xorg-x11-server-Xvfb xorg-x11-server-extra xterm xterm-bin yast2-buildtools yast2-devtools yast2-multipath yast2-security yast2-users yubikey-manager zram-generator zsh buildah sle-module-containers-release cni cni-plugins conmon container-suseconnect containerd containerd-ctr containerd-devel containerized-data-importer-manifests distribution-registry docker docker-bash-completion docker-libnetwork fuse-overlayfs helm helm-bash-completion helm-zsh-completion helm-mirror kubernetes1.23-client kubernetes1.23-client-common kubernetes1.24-client kubernetes1.24-client-common kubevirt-manifests kubevirt-virtctl podman podman-cni-config podman-docker podman-remote python3-kubernetes python3-seccomp runc slirp4netns ImageMagick ImageMagick-config-7-SUSE ImageMagick-config-7-upstream ImageMagick-devel libMagick++-7_Q16HDRI5 libMagick++-devel libMagickCore-7_Q16HDRI10 libMagickWand-7_Q16HDRI10 sle-module-desktop-applications-release MozillaFirefox MozillaFirefox-devel MozillaFirefox-translations-common MozillaFirefox-translations-other MozillaFirefox-branding-SLE NetworkManager libSDL-1_2-0 libSDL-devel libSDL2-2_0-0 libSDL2-devel accountsservice accountsservice-devel accountsservice-lang libaccountsservice0 typelib-1_0-AccountsService-1_0 audiofile-devel libaudiofile1 avahi-autoipd avahi-utils-gtk libavahi-gobject-devel bluez-devel libcapnp-0_9 caribou caribou-common caribou-devel caribou-gtk-module-common caribou-gtk2-module caribou-gtk3-module caribou-lang libcaribou0 typelib-1_0-Caribou-1_0 colord-color-profiles libcolord-devel libcolorhug2 typelib-1_0-Colord-1_0 typelib-1_0-Colorhug-1_0 conky conky-doc vim-plugin-conky cups-pk-helper cups-pk-helper-lang libdjvulibre-devel libdjvulibre21 emacs-x11 libexempi-devel libexempi3 libexiv2-27 libexiv2-devel libexiv2-xmp-static fetchmailconf libavcodec57 libavutil-devel libavutil55 libpostproc-devel libpostproc54 libswresample-devel libswresample2 libswscale-devel libswscale4 file-roller file-roller-lang firewall-applet firewall-config flatpak flatpak-devel flatpak-remote-flathub flatpak-zsh-completion libflatpak0 system-user-flatpak typelib-1_0-Flatpak-1_0 libfribidi0-32bit ftdump fwupdtpmevlog libfwupdplugin1 typelib-1_0-FwupdPlugin-1_0 fwupd fwupd-bash-completion fwupd-devel fwupd-lang libfwupd2 typelib-1_0-Fwupd-2_0 jcat-tool libjcat-devel libjcat1 gcab gcab-devel gcab-lang libgcab-1_0-0 typelib-1_0-GCab-1_0 gd gnome-autoar-devel libgnome-autoar-0-0 libgnome-autoar-gtk-0-0 typelib-1_0-GnomeAutoar-0_1 typelib-1_0-GnomeAutoarGtk-0_1 gnome-desktop-lang gnome-version libgnome-desktop-3-19 libgnome-desktop-3-devel libgnome-desktop-3_0-common typelib-1_0-GnomeDesktop-3_0 gnome-extensions gnome-shell gnome-shell-devel gnome-shell-lang gnome-settings-daemon gnome-settings-daemon-devel gnome-settings-daemon-lang gnome-shell-search-provider-nautilus libnautilus-extension1 nautilus nautilus-devel nautilus-lang typelib-1_0-Nautilus-3_0 grilo-devel libgrilo-0_3-0 libgrlnet-0_3-0 libgrlpls-0_3-0 typelib-1_0-Grl-0_3 typelib-1_0-GrlNet-0_3 typelib-1_0-GrlPls-0_3 gstreamer-plugins-bad gstreamer-plugins-bad-chromaprint gstreamer-plugins-bad-devel gstreamer-plugins-bad-lang libgstadaptivedemux-1_0-0 libgstbadaudio-1_0-0 libgstbasecamerabinsrc-1_0-0 libgstcodecparsers-1_0-0 libgstcodecs-1_0-0 libgstcuda-1_0-0 libgstinsertbin-1_0-0 libgstisoff-1_0-0 libgstmpegts-1_0-0 libgstsctp-1_0-0 libgsttranscoder-1_0-0 libgsturidownloader-1_0-0 libgstva-1_0-0 libgstvulkan-1_0-0 libgstwayland-1_0-0 libgstwebrtc-1_0-0 libgstwebrtcnice-1_0-0 typelib-1_0-CudaGst-1_0 typelib-1_0-GstBadAudio-1_0 typelib-1_0-GstCodecs-1_0 typelib-1_0-GstCuda-1_0 typelib-1_0-GstInsertBin-1_0 typelib-1_0-GstMpegts-1_0 typelib-1_0-GstPlay-1_0 typelib-1_0-GstPlayer-1_0 typelib-1_0-GstVa-1_0 typelib-1_0-GstWebRTC-1_0 gtk2-data gtk2-tools-32bit libgtk-2_0-0-32bit gvim ibus ibus-devel ibus-dict-emoji ibus-gtk ibus-gtk3 ibus-lang libibus-1_0-5 typelib-1_0-IBus-1_0 ibus-chewing ibus-pinyin imlib2-loaders libImlib2-1 libjasper-devel libICE6-32bit libIlmImf-2_2-23 libIlmImfUtil-2_2-23 openexr-devel libQt5OpenGLExtensions-devel-static libQt5Sql5-mysql libQt5Sql5-postgresql libQt5Sql5-unixODBC libqt5-qtbase-platformtheme-gtk3 libQt6Core6 libQt6DBus6 libQt6Gui6 libQt6Network6 libQt6OpenGL6 libQt6Widgets6 qt6-network-tls libSoundTouch0 soundtouch-devel libXcursor1-32bit libXinerama1-32bit libXp6-32bit libXrandr2-32bit libXt6-32bit libXvnc-devel libass-devel libass9 libcairo2-32bit libcdio++0 libcdio-devel libcdio19 libiso9660-11 libudf0 libcdio16 libcups2-32bit libexif-devel libexif12 libgme-devel libgme0 libgupnp-1_2-1 libgupnp-devel typelib-1_0-GUPnP-1_0 libgxps-devel libgxps2 typelib-1_0-GXPS-0_1 libgypsy-devel libgypsy0 libheif1 libical-devel libical3 libid3tag0 libimobiledevice-1_0-6 libimobiledevice-devel libusbmuxd-2_0-6 libusbmuxd-devel libjavascriptcoregtk-4_1-0 libwebkit2gtk-4_1-0 typelib-1_0-JavaScriptCore-4_1 typelib-1_0-WebKit2-4_1 typelib-1_0-WebKit2WebExtension-4_1 webkit2gtk-4_1-injected-bundles webkit2gtk3-devel libkpathsea6 libptexenc1 libsynctex2 libtexlua53-5 libtexluajit2 texlive texlive-a2ping-bin texlive-accfonts-bin texlive-adhocfilelist-bin texlive-afm2pl-bin texlive-albatross-bin texlive-aleph-bin texlive-amstex-bin texlive-arara-bin texlive-asymptote-bin texlive-attachfile2-bin texlive-authorindex-bin texlive-autosp-bin texlive-axodraw2-bin texlive-bib2gls-bin texlive-biber-bin texlive-bibexport-bin texlive-bibtex-bin texlive-bibtex8-bin texlive-bibtexu-bin texlive-bin-devel texlive-bundledoc-bin texlive-cachepic-bin texlive-checkcites-bin texlive-checklistings-bin texlive-chklref-bin texlive-chktex-bin texlive-cjk-gs-integrate-bin texlive-cjkutils-bin texlive-clojure-pamphlet-bin texlive-cluttex-bin texlive-context-bin texlive-convbkmk-bin texlive-crossrefware-bin texlive-cslatex-bin texlive-csplain-bin texlive-ctan-o-mat-bin texlive-ctanbib-bin texlive-ctanify-bin texlive-ctanupload-bin texlive-ctie-bin texlive-cweb-bin texlive-cyrillic-bin-bin texlive-de-macro-bin texlive-detex-bin texlive-diadia-bin texlive-dosepsbin-bin texlive-dtl-bin texlive-dtxgen-bin texlive-dviasm-bin texlive-dvicopy-bin texlive-dvidvi-bin texlive-dviinfox-bin texlive-dviljk-bin texlive-dviout-util-bin texlive-dvipdfmx-bin texlive-dvipng-bin texlive-dvipos-bin texlive-dvips-bin texlive-dvisvgm-bin texlive-eplain-bin texlive-epspdf-bin texlive-epstopdf-bin texlive-exceltex-bin texlive-fig4latex-bin texlive-findhyph-bin texlive-fontinst-bin texlive-fontools-bin texlive-fontware-bin texlive-fragmaster-bin texlive-getmap-bin texlive-git-latexdiff-bin texlive-glossaries-bin texlive-gregoriotex-bin texlive-gsftopk-bin texlive-hyperxmp-bin texlive-jadetex-bin texlive-jfmutil-bin texlive-ketcindy-bin texlive-kotex-utils-bin texlive-kpathsea-bin texlive-kpathsea-devel texlive-l3build-bin texlive-lacheck-bin texlive-latex-bin-bin texlive-latex-bin-dev-bin texlive-latex-git-log-bin texlive-latex-papersize-bin texlive-latex2man-bin texlive-latex2nemeth-bin texlive-latexdiff-bin texlive-latexfileversion-bin texlive-latexindent-bin texlive-latexmk-bin texlive-latexpand-bin texlive-lcdftypetools-bin texlive-light-latex-make-bin texlive-lilyglyphs-bin texlive-listbib-bin texlive-listings-ext-bin texlive-lollipop-bin texlive-ltxfileinfo-bin texlive-ltximg-bin texlive-luahbtex-bin texlive-luajittex-bin texlive-luaotfload-bin texlive-luatex-bin texlive-lwarp-bin texlive-m-tx-bin texlive-make4ht-bin texlive-makedtx-bin texlive-makeindex-bin texlive-match_parens-bin texlive-mathspic-bin texlive-metafont-bin texlive-metapost-bin texlive-mex-bin texlive-mf2pt1-bin texlive-mflua-bin texlive-mfware-bin texlive-mkgrkindex-bin texlive-mkjobtexmf-bin texlive-mkpic-bin texlive-mltex-bin texlive-mptopdf-bin texlive-multibibliography-bin texlive-musixtex-bin texlive-musixtnt-bin texlive-omegaware-bin texlive-optex-bin texlive-patgen-bin texlive-pax-bin texlive-pdfbook2-bin texlive-pdfcrop-bin texlive-pdfjam-bin texlive-pdflatexpicscale-bin texlive-pdftex-bin texlive-pdftex-quiet-bin texlive-pdftosrc-bin texlive-pdfxup-bin texlive-pedigree-perl-bin texlive-perltex-bin texlive-petri-nets-bin texlive-pfarrei-bin texlive-pkfix-bin texlive-pkfix-helper-bin texlive-platex-bin texlive-pmx-bin texlive-pmxchords-bin texlive-ps2eps-bin texlive-ps2pk-bin texlive-pst-pdf-bin texlive-pst2pdf-bin texlive-ptex-bin texlive-ptex-fontmaps-bin texlive-ptex2pdf-bin texlive-ptexenc-devel texlive-purifyeps-bin texlive-pygmentex-bin texlive-pythontex-bin texlive-rubik-bin texlive-scripts-bin texlive-scripts-extra-bin texlive-seetexk-bin texlive-spix-bin texlive-splitindex-bin texlive-srcredact-bin texlive-sty2dtx-bin texlive-svn-multi-bin texlive-synctex-bin texlive-synctex-devel texlive-tex-bin texlive-tex4ebook-bin texlive-tex4ht-bin texlive-texcount-bin texlive-texdef-bin texlive-texdiff-bin texlive-texdirflatten-bin texlive-texdoc-bin texlive-texdoctk-bin texlive-texfot-bin texlive-texliveonfly-bin texlive-texloganalyser-bin texlive-texlua-devel texlive-texluajit-devel texlive-texosquery-bin texlive-texplate-bin texlive-texsis-bin texlive-texware-bin texlive-thumbpdf-bin texlive-tie-bin texlive-tikztosvg-bin texlive-tpic2pdftex-bin texlive-ttfutils-bin texlive-typeoutfileinfo-bin texlive-ulqda-bin texlive-uplatex-bin texlive-uptex-bin texlive-urlbst-bin texlive-velthuis-bin texlive-vlna-bin texlive-vpe-bin texlive-web-bin texlive-webquiz-bin texlive-wordcount-bin texlive-xdvi-bin texlive-xelatex-dev-bin texlive-xetex-bin texlive-xindex-bin texlive-xml2pmx-bin texlive-xmltex-bin texlive-xpdfopen-bin texlive-yplan-bin liblouis-data liblouis-devel liblouis20 python3-louis libmad-devel libmad0 libmicrohttpd-devel libmms-devel libmms0 libmodplug-devel libmodplug1 libopenmpt-devel libopenmpt0 libopenmpt_modplug1 libmozjs-78-0 mozjs78-devel libmp3lame-devel libndp-devel libndp0 libnetpbm-devel libopenjpeg1 openjpeg-devel libostree libostree-devel typelib-1_0-OSTree-1_0 libout123-0 libsyn123-0 mpg123 mpg123-devel mpg123-pulse libpango-1_0-0-32bit libpixman-1-0-32bit libplist++-devel libplist++3 libplist-2_0-3 libplist-2_0-devel libplist-devel libplist3 libqt5-qtsvg-private-headers-devel libquicktime libquicktime-devel libquicktime0 libraptor-devel libraptor2-0 raptor libraw20 librsvg-devel typelib-1_0-Rsvg-2_0 libsmi-devel libsrt1 libsrtp-devel libsrtp1 libsrtp2-1 libtag-devel libtag_c0 libvdpau-devel libvdpau1 libvpx4 libxkbregistry-devel libxkbregistry0 libzypp-plugin-appdata open-vm-tools-desktop openssh-askpass-gnome ppp ppp-devel python3-bottle rtkit sbc-devel spandsp-devel spice-vdagent texlive-12many texlive-2up texlive-Asana-Math texlive-Asana-Math-fonts texlive-ESIEEcv texlive-GS1 texlive-HA-prosper texlive-IEEEconf texlive-IEEEtran texlive-MemoirChapStyles texlive-SIstyle texlive-SIunits texlive-Tabbing texlive-Type1fonts texlive-a0poster texlive-a2ping texlive-a4wide texlive-a5comb texlive-aaai-named texlive-aalok texlive-aastex texlive-abbr texlive-abc texlive-abnt texlive-abntex2 texlive-abraces texlive-abstract texlive-abstyles texlive-academicons texlive-academicons-fonts texlive-accanthis texlive-accanthis-fonts texlive-accents texlive-accessibility texlive-accfonts texlive-accsupp texlive-achemso texlive-acmart texlive-acmconf texlive-acro texlive-acronym texlive-acroterm texlive-active-conf texlive-actuarialangle texlive-actuarialsymbol texlive-addfont texlive-addliga texlive-addlines texlive-adfathesis texlive-adforn texlive-adforn-fonts texlive-adfsymbols texlive-adfsymbols-fonts texlive-adhocfilelist texlive-adigraph texlive-adjmulticol texlive-adjustbox texlive-adobemapping texlive-adrconv texlive-adtrees texlive-advdate texlive-ae texlive-aeguill texlive-aesupp texlive-aesupp-fonts texlive-afm2pl texlive-afparticle texlive-afthesis texlive-aguplus texlive-aiaa texlive-aichej texlive-ajl texlive-akktex texlive-akletter texlive-akshar texlive-albatross texlive-alegreya texlive-alegreya-fonts texlive-aleph texlive-alertmessage texlive-alfaslabone texlive-alfaslabone-fonts texlive-alg texlive-algobox texlive-algolrevived texlive-algolrevived-fonts texlive-algorithm2e texlive-algorithmicx texlive-algorithms texlive-algpseudocodex texlive-algxpar texlive-aligned-overset texlive-alkalami texlive-alkalami-fonts texlive-allrunes texlive-allrunes-fonts texlive-almendra texlive-almendra-fonts texlive-almfixed texlive-almfixed-fonts texlive-alnumsec texlive-alpha-persian texlive-alphalph texlive-altfont texlive-ametsoc texlive-amiri texlive-amiri-fonts texlive-amiweb2c-guide texlive-amsaddr texlive-amscdx texlive-amscls texlive-amscls-doc texlive-amsfonts texlive-amsfonts-fonts texlive-amslatex-primer texlive-amsldoc-it texlive-amsldoc-vn texlive-amsmath texlive-amsmath-it texlive-amsrefs texlive-amstex texlive-amsthdoc-it texlive-animate texlive-annee-scolaire texlive-annotate texlive-anonchap texlive-anonymous-acm texlive-anonymouspro texlive-anonymouspro-fonts texlive-answers texlive-antanilipsum texlive-antiqua texlive-antiqua-fonts texlive-antomega texlive-antt texlive-antt-fonts texlive-anufinalexam texlive-anyfontsize texlive-anysize texlive-aobs-tikz texlive-aomart texlive-apa texlive-apa6 texlive-apa6e texlive-apa7 texlive-apacite texlive-apalike-german texlive-apalike2 texlive-apnum texlive-appendix texlive-appendixnumberbeamer texlive-apprendre-a-programmer-en-tex texlive-apprends-latex texlive-apptools texlive-apxproof texlive-arabi texlive-arabi-add texlive-arabi-fonts texlive-arabicfront texlive-arabluatex texlive-arabtex texlive-arabtex-fonts texlive-arabxetex texlive-aramaic-serto texlive-aramaic-serto-fonts texlive-arara texlive-archaeologie texlive-archaic texlive-archaic-fonts texlive-archivo texlive-archivo-fonts texlive-arcs texlive-arev texlive-arev-fonts texlive-arimo texlive-arimo-fonts texlive-armtex texlive-armtex-fonts texlive-around-the-bend texlive-arphic texlive-arphic-fonts texlive-arphic-ttf texlive-arphic-ttf-fonts texlive-arraycols texlive-arrayjobx texlive-arraysort texlive-arsclassica texlive-articleingud texlive-arvo texlive-arvo-fonts texlive-arydshln texlive-asaetr texlive-asapsym texlive-asapsym-fonts texlive-ascelike texlive-ascii-chart texlive-ascii-font texlive-ascii-font-fonts texlive-asciilist texlive-ascmac texlive-ascmac-fonts texlive-askinclude texlive-askmaps texlive-asmeconf texlive-asmejour texlive-aspectratio texlive-aspectratio-fonts texlive-assignment texlive-assoccnt texlive-association-matrix texlive-astro texlive-asyfig texlive-asymptote texlive-asymptote-by-example-zh-cn texlive-asymptote-faq-zh-cn texlive-asymptote-manual-zh-cn texlive-asypictureb texlive-atbegshi texlive-atenddvi texlive-atkinson texlive-atkinson-fonts texlive-attachfile texlive-attachfile2 texlive-atveryend texlive-aucklandthesis texlive-augie texlive-augie-fonts texlive-auncial-new texlive-auncial-new-fonts texlive-aurical texlive-aurical-fonts texlive-aurl texlive-authoraftertitle texlive-authorarchive texlive-authordate texlive-authorindex texlive-auto-pst-pdf texlive-auto-pst-pdf-lua texlive-autoaligne texlive-autoarea texlive-autobreak texlive-autofancyhdr texlive-automata texlive-autonum texlive-autopdf texlive-autosp texlive-auxhook texlive-avantgar texlive-avantgar-fonts texlive-avremu texlive-awesomebox texlive-axessibility texlive-axodraw2 texlive-b1encoding texlive-babel texlive-babel-albanian texlive-babel-azerbaijani texlive-babel-basque texlive-babel-belarusian texlive-babel-bosnian texlive-babel-breton texlive-babel-bulgarian texlive-babel-catalan texlive-babel-croatian texlive-babel-czech texlive-babel-danish texlive-babel-dutch texlive-babel-english texlive-babel-esperanto texlive-babel-estonian texlive-babel-finnish texlive-babel-french texlive-babel-friulan texlive-babel-galician texlive-babel-georgian texlive-babel-german texlive-babel-greek texlive-babel-hebrew texlive-babel-hungarian texlive-babel-icelandic texlive-babel-indonesian texlive-babel-interlingua texlive-babel-irish texlive-babel-italian texlive-babel-japanese texlive-babel-kurmanji texlive-babel-latin texlive-babel-latvian texlive-babel-macedonian texlive-babel-malay texlive-babel-norsk texlive-babel-occitan texlive-babel-piedmontese texlive-babel-polish texlive-babel-portuges texlive-babel-romanian texlive-babel-romansh texlive-babel-russian texlive-babel-samin texlive-babel-scottish texlive-babel-serbian texlive-babel-serbianc texlive-babel-slovak texlive-babel-slovenian texlive-babel-sorbian texlive-babel-spanish texlive-babel-swedish texlive-babel-thai texlive-babel-turkish texlive-babel-ukrainian texlive-babel-vietnamese texlive-babel-welsh texlive-babelbib texlive-background texlive-backnaur texlive-baekmuk texlive-baekmuk-fonts texlive-bagpipe texlive-bangorcsthesis texlive-bangorexam texlive-bangtex texlive-bankstatement texlive-barcodes texlive-bardiag texlive-barr texlive-barracuda texlive-bartel-chess-fonts texlive-bashful texlive-basicarith texlive-baskervald texlive-baskervald-fonts texlive-baskervaldx texlive-baskervaldx-fonts texlive-baskervillef texlive-baskervillef-fonts texlive-basque-book texlive-basque-date texlive-bath-bst texlive-bbcard texlive-bbding texlive-bbm texlive-bbm-macros texlive-bbold texlive-bbold-type1 texlive-bbold-type1-fonts texlive-bchart texlive-bclogo texlive-beamer texlive-beamer-FUBerlin texlive-beamer-rl texlive-beamer-tut-pt texlive-beamer-verona texlive-beamer2thesis texlive-beamerappendixnote texlive-beameraudience texlive-beamerauxtheme texlive-beamercolorthemeowl texlive-beamerdarkthemes texlive-beamerposter texlive-beamersubframe texlive-beamerswitch texlive-beamertheme-cuerna texlive-beamertheme-detlevcm texlive-beamertheme-epyt texlive-beamertheme-focus texlive-beamertheme-light texlive-beamertheme-metropolis texlive-beamertheme-npbt texlive-beamertheme-phnompenh texlive-beamertheme-pure-minimalistic texlive-beamertheme-saintpetersburg texlive-beamertheme-upenn-bc texlive-beamerthemejltree texlive-beamerthemenirma texlive-beamerthemenord texlive-bearwear texlive-beaulivre texlive-beebe texlive-begingreek texlive-begriff texlive-beilstein texlive-belleek texlive-belleek-fonts texlive-bengali texlive-bera texlive-bera-fonts texlive-berenisadf texlive-berenisadf-fonts texlive-besjournals texlive-bestpapers texlive-betababel texlive-beton texlive-beuron texlive-beuron-fonts texlive-bewerbung texlive-bez123 texlive-bezierplot texlive-bezos texlive-bgteubner texlive-bguq texlive-bguq-fonts texlive-bhcexam texlive-bib-fr texlive-bib2gls texlive-bibarts texlive-biber texlive-bibexport texlive-bibhtml texlive-biblatex texlive-biblatex-abnt texlive-biblatex-ajc2020unofficial texlive-biblatex-anonymous texlive-biblatex-apa texlive-biblatex-apa6 texlive-biblatex-archaeology texlive-biblatex-arthistory-bonn texlive-biblatex-bath texlive-biblatex-bookinarticle texlive-biblatex-bookinother texlive-biblatex-bwl texlive-biblatex-caspervector texlive-biblatex-cheatsheet texlive-biblatex-chem texlive-biblatex-chicago texlive-biblatex-claves texlive-biblatex-dw texlive-biblatex-enc texlive-biblatex-ext texlive-biblatex-fiwi texlive-biblatex-gb7714-2015 texlive-biblatex-german-legal texlive-biblatex-gost texlive-biblatex-historian texlive-biblatex-ieee texlive-biblatex-ijsra texlive-biblatex-iso690 texlive-biblatex-jura2 texlive-biblatex-juradiss texlive-biblatex-license texlive-biblatex-lni texlive-biblatex-luh-ipw texlive-biblatex-manuscripts-philology texlive-biblatex-mla texlive-biblatex-morenames texlive-biblatex-multiple-dm texlive-biblatex-musuos texlive-biblatex-nature texlive-biblatex-nejm texlive-biblatex-nottsclassic texlive-biblatex-opcit-booktitle texlive-biblatex-oxref texlive-biblatex-philosophy texlive-biblatex-phys texlive-biblatex-publist texlive-biblatex-realauthor texlive-biblatex-sbl texlive-biblatex-science texlive-biblatex-shortfields texlive-biblatex-socialscienceshuberlin texlive-biblatex-software texlive-biblatex-source-division texlive-biblatex-subseries texlive-biblatex-swiss-legal texlive-biblatex-trad texlive-biblatex-true-citepages-omit texlive-biblatex-unified texlive-biblatex-vancouver texlive-biblatex2bibitem texlive-bibleref texlive-bibleref-french texlive-bibleref-german texlive-bibleref-lds texlive-bibleref-mouth texlive-bibleref-parse texlive-bibletext texlive-biblist texlive-bibtex texlive-bibtex8 texlive-bibtexperllibs texlive-bibtexu texlive-bibtopic texlive-bibtopicprefix texlive-bibunits texlive-bidi texlive-bidi-atbegshi texlive-bidicontour texlive-bidihl texlive-bidipagegrid texlive-bidipresentation texlive-bidishadowtext texlive-bigfoot texlive-bigintcalc texlive-bigints texlive-binarytree texlive-binomexp texlive-biochemistry-colors texlive-biocon texlive-biolett-bst texlive-bitelist texlive-bithesis texlive-bitpattern texlive-bitset texlive-bitter texlive-bitter-fonts texlive-bizcard texlive-blacklettert1 texlive-blindtext texlive-blkarray texlive-blochsphere texlive-block texlive-blockdraw_mp texlive-bloques texlive-blowup texlive-blox texlive-bnumexpr texlive-bodegraph texlive-bohr texlive-boisik texlive-boites texlive-bold-extra texlive-boldtensors texlive-bondgraph texlive-bondgraphs texlive-bookcover texlive-bookdb texlive-bookest texlive-bookhands texlive-bookhands-fonts texlive-booklet texlive-bookman texlive-bookman-fonts texlive-bookmark texlive-bookshelf texlive-booktabs texlive-booktabs-de texlive-booktabs-fr texlive-boolexpr texlive-boondox texlive-boondox-fonts texlive-bophook texlive-borceux texlive-bosisio texlive-boxedminipage texlive-boxhandler texlive-bpchem texlive-bpolynomial texlive-br-lex texlive-bracketkey texlive-braids texlive-braille texlive-braket texlive-brandeis-dissertation texlive-brandeis-problemset texlive-brandeis-thesis texlive-breakcites texlive-breakurl texlive-bredzenie texlive-breqn texlive-bropd texlive-brushscr texlive-brushscr-fonts texlive-bubblesort texlive-bullcntr texlive-bundledoc texlive-burmese texlive-burmese-fonts texlive-businesscard-qrcode texlive-bussproofs texlive-bussproofs-extra texlive-bxbase texlive-bxcalc texlive-bxcjkjatype texlive-bxdpx-beamer texlive-bxdvidriver texlive-bxeepic texlive-bxenclose texlive-bxghost texlive-bxjaholiday texlive-bxjalipsum texlive-bxjaprnind texlive-bxjatoucs texlive-bxjscls texlive-bxnewfont texlive-bxorigcapt texlive-bxpapersize texlive-bxpdfver texlive-bxtexlogo texlive-bxwareki texlive-bytefield texlive-c-pascal texlive-c90 texlive-cabin texlive-cabin-fonts texlive-cachepic texlive-caladea texlive-caladea-fonts texlive-calcage texlive-calctab texlive-calculation texlive-calculator texlive-calligra texlive-calligra-type1 texlive-calligra-type1-fonts texlive-callouts texlive-calrsfs texlive-cals texlive-calxxxx-yyyy texlive-cancel texlive-canoniclayout texlive-cantarell texlive-cantarell-fonts texlive-capt-of texlive-captcont texlive-captdef texlive-caption texlive-carbohydrates texlive-carlisle texlive-carlito texlive-carlito-fonts texlive-carolmin-ps texlive-carolmin-ps-fonts texlive-cascade texlive-cascadia-code texlive-cascadia-code-fonts texlive-cascadilla texlive-cases texlive-casyl texlive-catchfile texlive-catchfilebetweentags texlive-catcodes texlive-catechis texlive-catoptions texlive-causets texlive-cbcoptic texlive-cbcoptic-fonts texlive-cbfonts texlive-cbfonts-fd texlive-cbfonts-fonts texlive-cc-pl texlive-cc-pl-fonts texlive-ccaption texlive-ccfonts texlive-ccicons texlive-ccicons-fonts texlive-cclicenses texlive-ccool texlive-cd texlive-cd-cover texlive-cdpbundl texlive-cell texlive-cellprops texlive-cellspace texlive-celtic texlive-censor texlive-centeredline texlive-centerlastline texlive-cesenaexam texlive-cfr-initials texlive-cfr-lm texlive-changebar texlive-changelayout texlive-changelog texlive-changepage texlive-changes texlive-chappg texlive-chapterfolder texlive-charissil texlive-charissil-fonts texlive-charter texlive-charter-fonts texlive-chbibref texlive-cheatsheet texlive-checkcites texlive-checkend texlive-checklistings texlive-chem-journal texlive-chemarrow texlive-chemarrow-fonts texlive-chembst texlive-chemcompounds texlive-chemcono texlive-chemexec texlive-chemfig texlive-chemformula texlive-chemgreek texlive-chemmacros texlive-chemnum texlive-chemplants texlive-chemschemex texlive-chemsec texlive-chemstyle texlive-cherokee texlive-chess texlive-chess-problem-diagrams texlive-chessboard texlive-chessfss texlive-chet texlive-chextras texlive-chhaya texlive-chicago texlive-chicago-annote texlive-chicagoa texlive-chickenize texlive-chifoot texlive-childdoc texlive-chinese-jfm texlive-chivo texlive-chivo-fonts texlive-chkfloat texlive-chklref texlive-chktex texlive-chletter texlive-chngcntr texlive-chordbars texlive-chordbox texlive-chronology texlive-chronosys texlive-chs-physics-report texlive-chscite texlive-churchslavonic texlive-cinzel texlive-cinzel-fonts texlive-circ texlive-circledsteps texlive-circuit-macros texlive-circuitikz texlive-cite texlive-citeall texlive-citeref texlive-cje texlive-cjhebrew texlive-cjhebrew-fonts texlive-cjk texlive-cjk-gs-integrate texlive-cjk-ko texlive-cjkpunct texlive-cjkutils texlive-clara texlive-clara-fonts texlive-classics texlive-classicthesis texlive-classpack texlive-cleanthesis texlive-clearsans texlive-clearsans-fonts texlive-clefval texlive-cleveref texlive-clipboard texlive-clock texlive-clojure-pamphlet texlive-cloze texlive-clrdblpg texlive-clrscode texlive-clrscode3e texlive-clrstrip texlive-cluttex texlive-cm texlive-cm-lgc texlive-cm-lgc-fonts texlive-cm-mf-extra-bold texlive-cm-super texlive-cm-super-fonts texlive-cm-unicode texlive-cm-unicode-fonts texlive-cmap texlive-cmarrows texlive-cmathbb texlive-cmathbb-fonts texlive-cmbright texlive-cmcyr texlive-cmcyr-fonts texlive-cmdstring texlive-cmdtrack texlive-cmexb texlive-cmexb-fonts texlive-cmextra texlive-cmll texlive-cmll-fonts texlive-cmpica texlive-cmpj texlive-cmsd texlive-cmsrb texlive-cmsrb-fonts texlive-cmtiup texlive-cmupint texlive-cmupint-fonts texlive-cnbwp texlive-cnltx texlive-cns texlive-cntformats texlive-cntperchap texlive-cochineal texlive-cochineal-fonts texlive-codeanatomy texlive-codedoc texlive-codepage texlive-codesection texlive-codicefiscaleitaliano texlive-coelacanth texlive-coelacanth-fonts texlive-collcell texlive-collectbox texlive-collref texlive-colophon texlive-color-edits texlive-colordoc texlive-colorinfo texlive-coloring texlive-colorist texlive-colorprofiles texlive-colorsep texlive-colorspace texlive-colortab texlive-colortbl texlive-colorwav texlive-colorweb texlive-colourchange texlive-combelow texlive-combine texlive-combinedgraphics texlive-combofont texlive-comfortaa texlive-comfortaa-fonts texlive-comicneue texlive-comicneue-fonts texlive-comma texlive-commado texlive-commath texlive-commedit texlive-comment texlive-commutative-diagrams texlive-compactbib texlive-compare texlive-competences texlive-complexity texlive-components-of-TeX texlive-comprehensive texlive-computational-complexity texlive-concepts texlive-concmath texlive-concmath-fonts texlive-concprog texlive-concrete texlive-conditext texlive-confproc texlive-constants texlive-conteq texlive-context texlive-context-account texlive-context-algorithmic texlive-context-animation texlive-context-annotation texlive-context-bnf texlive-context-chromato texlive-context-cmscbf texlive-context-cmttbf texlive-context-construction-plan texlive-context-cyrillicnumbers texlive-context-degrade texlive-context-fancybreak texlive-context-filter texlive-context-fonts texlive-context-french texlive-context-fullpage texlive-context-gantt texlive-context-gnuplot texlive-context-handlecsv texlive-context-inifile texlive-context-layout texlive-context-letter texlive-context-lettrine texlive-context-mathsets texlive-context-notes-zh-cn texlive-context-rst texlive-context-ruby texlive-context-simplefonts texlive-context-simpleslides texlive-context-title texlive-context-transliterator texlive-context-typearea texlive-context-typescripts texlive-context-vim texlive-context-visualcounter texlive-continue texlive-contour texlive-contracard texlive-conv-xkv texlive-convbkmk texlive-cooking texlive-cooking-units texlive-cookingsymbols texlive-cool texlive-coollist texlive-coolstr texlive-coolthms texlive-cooltooltips texlive-coordsys texlive-copyedit texlive-copyrightbox texlive-cormorantgaramond texlive-cormorantgaramond-fonts texlive-correctmathalign texlive-coseoul texlive-countriesofeurope texlive-countriesofeurope-fonts texlive-counttexruns texlive-courier texlive-courier-fonts texlive-courier-scaled texlive-courierten texlive-courierten-fonts texlive-courseoutline texlive-coursepaper texlive-coverpage texlive-covington texlive-cprotect texlive-cqubeamer texlive-cquthesis texlive-crbox texlive-crimson texlive-crimson-fonts texlive-crimsonpro texlive-crimsonpro-fonts texlive-crop texlive-crossreference texlive-crossreftools texlive-crossrefware texlive-crossword texlive-crosswrd texlive-cryptocode texlive-cryst texlive-cryst-fonts texlive-cs texlive-cs-fonts texlive-csbulletin texlive-cslatex texlive-csplain texlive-csquotes texlive-csquotes-de texlive-css-colors texlive-cstex texlive-cstypo texlive-csvmerge texlive-csvsimple texlive-ctable texlive-ctablestack texlive-ctan-o-mat texlive-ctan_chk texlive-ctanbib texlive-ctanify texlive-ctanupload texlive-ctex texlive-ctex-faq texlive-ctib texlive-ctie texlive-cuisine texlive-cuprum texlive-cuprum-fonts texlive-currency texlive-currfile texlive-currvita texlive-cursolatex texlive-curve texlive-curve2e texlive-curves texlive-custom-bib texlive-cutwin texlive-cv texlive-cv4tw texlive-cweb texlive-cweb-latex texlive-cweb-old texlive-cyber texlive-cybercic texlive-cyklop texlive-cyklop-fonts texlive-cyrillic texlive-cyrillic-bin texlive-cyrplain texlive-dad texlive-dad-fonts texlive-dancers texlive-dantelogo texlive-dantelogo-fonts texlive-dashbox texlive-dashrule texlive-dashundergaps texlive-dataref texlive-datatool texlive-datax texlive-dateiliste texlive-datenumber texlive-datetime texlive-datetime2 texlive-datetime2-bahasai texlive-datetime2-basque texlive-datetime2-breton texlive-datetime2-bulgarian texlive-datetime2-catalan texlive-datetime2-croatian texlive-datetime2-czech texlive-datetime2-danish texlive-datetime2-dutch texlive-datetime2-en-fulltext texlive-datetime2-english texlive-datetime2-esperanto texlive-datetime2-estonian texlive-datetime2-finnish texlive-datetime2-french texlive-datetime2-galician texlive-datetime2-german texlive-datetime2-greek texlive-datetime2-hebrew texlive-datetime2-icelandic texlive-datetime2-irish texlive-datetime2-it-fulltext texlive-datetime2-italian texlive-datetime2-latin texlive-datetime2-lsorbian texlive-datetime2-magyar texlive-datetime2-norsk texlive-datetime2-polish texlive-datetime2-portuges texlive-datetime2-romanian texlive-datetime2-russian texlive-datetime2-samin texlive-datetime2-scottish texlive-datetime2-serbian texlive-datetime2-slovak texlive-datetime2-slovene texlive-datetime2-spanish texlive-datetime2-swedish texlive-datetime2-turkish texlive-datetime2-ukrainian texlive-datetime2-usorbian texlive-datetime2-welsh texlive-dblfloatfix texlive-dccpaper texlive-dcpic texlive-ddphonism texlive-de-macro texlive-decimal texlive-decision-table texlive-decorule texlive-dehyph texlive-dehyph-exptl texlive-dejavu texlive-dejavu-fonts texlive-dejavu-otf texlive-delim texlive-delimseasy texlive-delimset texlive-delimtxt texlive-denisbdoc texlive-derivative texlive-detex texlive-dhua texlive-diabetes-logbook texlive-diadia texlive-diagbox texlive-diagmac2 texlive-diagnose texlive-dialogl texlive-dice texlive-dichokey texlive-dickimaw texlive-dictsym texlive-dictsym-fonts texlive-diffcoeff texlive-digiconfigs texlive-dijkstra texlive-din1505 texlive-dinat texlive-dinbrief texlive-dingbat texlive-directory texlive-dirtree texlive-dirtytalk texlive-disser texlive-ditaa texlive-dithesis texlive-dk-bib texlive-dlfltxb texlive-dnaseq texlive-dnp texlive-doc-pictex texlive-docbytex texlive-doclicense texlive-docmfp texlive-docmute texlive-docsurvey texlive-doctools texlive-documentation texlive-docutils texlive-doi texlive-doipubmed texlive-domitian texlive-domitian-fonts texlive-dosepsbin texlive-dot2texi texlive-dotarrow texlive-dotlessi texlive-dotseqn texlive-dottex texlive-doublestroke texlive-doublestroke-fonts texlive-doulossil texlive-doulossil-fonts texlive-dowith texlive-download texlive-dox texlive-dozenal texlive-dozenal-fonts texlive-dpcircling texlive-dpfloat texlive-dprogress texlive-drac texlive-draftcopy texlive-draftfigure texlive-draftwatermark texlive-dramatist texlive-dratex texlive-drawmatrix texlive-drawstack texlive-drm texlive-drm-fonts texlive-droid texlive-droid-fonts texlive-droit-fr texlive-drs texlive-drv texlive-dsptricks texlive-dsserif texlive-dsserif-fonts texlive-dtk texlive-dtk-bibliography texlive-dtl texlive-dtxdescribe texlive-dtxgallery texlive-dtxgen texlive-dtxtut texlive-ducksay texlive-duckuments texlive-duerer texlive-duerer-latex texlive-duotenzor texlive-dutchcal texlive-dutchcal-fonts texlive-dvdcoll texlive-dvgloss texlive-dviasm texlive-dvicopy texlive-dvidvi texlive-dviincl texlive-dviinfox texlive-dviljk texlive-dviout-util texlive-dvipdfmx texlive-dvipng texlive-dvipos texlive-dvips texlive-dvipsconfig texlive-dvisvgm texlive-dynamicnumber texlive-dynblocks texlive-dynkin-diagrams texlive-dyntree texlive-e-french texlive-ean texlive-ean13isbn texlive-easy texlive-easy-todo texlive-easybook texlive-easyfig texlive-easyfloats texlive-easyformat texlive-easylist texlive-easyreview texlive-ebezier texlive-ebgaramond texlive-ebgaramond-fonts texlive-ebgaramond-maths texlive-ebook texlive-ebproof texlive-ebsthesis texlive-ec texlive-ecc texlive-ecclesiastic texlive-ecgdraw texlive-ecltree texlive-eco texlive-ecobiblatex texlive-econ-bst texlive-econlipsum texlive-econometrics texlive-economic texlive-ecothesis texlive-ecv texlive-eczar texlive-eczar-fonts texlive-ed texlive-edfnotes texlive-edichokey texlive-edmac texlive-edmargin texlive-ednotes texlive-eemeir texlive-eepic texlive-efbox texlive-egameps texlive-egplot texlive-ehhline texlive-eiad texlive-eiad-ltx texlive-eijkhout texlive-einfart texlive-ejpecp texlive-ekaia texlive-ekdosis texlive-ektype-tanka texlive-ektype-tanka-fonts texlive-elbioimp texlive-electrum texlive-electrum-fonts texlive-eledform texlive-eledmac texlive-elegantbook texlive-elegantnote texlive-elegantpaper texlive-elements texlive-ellipse texlive-ellipsis texlive-elmath texlive-elocalloc texlive-elpres texlive-els-cas-templates texlive-elsarticle texlive-elteikthesis texlive-eltex texlive-elvish texlive-elzcards texlive-emarks texlive-embedall texlive-embedfile texlive-embrac texlive-emf texlive-emisa texlive-emoji texlive-emojicite texlive-emp texlive-emptypage texlive-emulateapj texlive-enctex texlive-encxvlna texlive-endfloat texlive-endheads texlive-endiagram texlive-endnotes texlive-endnotes-hy texlive-endnotesj texlive-endofproofwd texlive-engpron texlive-engrec texlive-engtlc texlive-enigma texlive-enotez texlive-enumitem texlive-enumitem-zref texlive-envbig texlive-environ texlive-envlab texlive-epigrafica texlive-epigrafica-fonts texlive-epigram texlive-epigraph texlive-epigraph-keys texlive-epiolmec texlive-epiolmec-fonts texlive-eplain texlive-epsdice texlive-epsf texlive-epsf-dvipdfmx texlive-epsincl texlive-epslatex-fr texlive-epspdf texlive-epspdfconversion texlive-epstopdf texlive-epstopdf-pkg texlive-eq-pin2corr texlive-eqell texlive-eqexpl texlive-eqlist texlive-eqnalign texlive-eqname texlive-eqnarray texlive-eqnnumwarn texlive-eqparbox texlive-erdc texlive-erewhon texlive-erewhon-fonts texlive-erewhon-math texlive-erewhon-math-fonts texlive-errata texlive-erw-l3 texlive-es-tex-faq texlive-esami texlive-esdiff texlive-esindex texlive-esint texlive-esint-type1 texlive-esint-type1-fonts texlive-esk texlive-eskd texlive-eskdx texlive-eso-pic texlive-esrelation texlive-esrelation-fonts texlive-esstix texlive-esstix-fonts texlive-estcpmm texlive-esvect texlive-esvect-fonts texlive-etaremune texlive-etbb texlive-etbb-fonts texlive-etdipa texlive-etex texlive-etex-pkg texlive-etexcmds texlive-etextools texlive-ethiop texlive-ethiop-t1 texlive-ethiop-t1-fonts texlive-etoc texlive-etoolbox texlive-etoolbox-de texlive-etsvthor texlive-euclideangeometry texlive-euenc texlive-euflag texlive-eukdate texlive-euler texlive-eulerpx texlive-eulervm texlive-euro texlive-euro-ce texlive-europasscv texlive-europecv texlive-eurosym texlive-eurosym-fonts texlive-euxm texlive-everyhook texlive-everypage texlive-everysel texlive-everyshi texlive-exam texlive-exam-n texlive-exam-randomizechoices texlive-examdesign texlive-example texlive-examplep texlive-exceltex texlive-excludeonly texlive-exercise texlive-exercisebank texlive-exercisepoints texlive-exercises texlive-exesheet texlive-exframe texlive-exp-testopt texlive-expdlist texlive-expex texlive-expkv texlive-expkv-cs texlive-expkv-def texlive-expkv-opt texlive-export texlive-expose-expl3-dunkerque-2019 texlive-expressg texlive-exsheets texlive-exsol texlive-extarrows texlive-exteps texlive-extpfeil texlive-extract texlive-extsizes texlive-facsimile texlive-factura texlive-facture texlive-facture-belge-simple-sans-tva texlive-faktor texlive-fancybox texlive-fancyhandout texlive-fancyhdr texlive-fancyhdr-it texlive-fancylabel texlive-fancynum texlive-fancypar texlive-fancyref texlive-fancyslides texlive-fancytabs texlive-fancytooltips texlive-fancyvrb texlive-fandol texlive-fandol-fonts texlive-fascicules texlive-fast-diagram texlive-fbb texlive-fbb-fonts texlive-fbithesis texlive-fbox texlive-fbs texlive-fc texlive-fcavtex texlive-fcltxdoc texlive-fcolumn texlive-fdsymbol texlive-fdsymbol-fonts texlive-fduthesis texlive-featpost texlive-fei texlive-fenixpar texlive-fetamont texlive-fetamont-fonts texlive-fetchcls texlive-feupphdteses texlive-fewerfloatpages texlive-feyn texlive-feynmf texlive-feynmp-auto texlive-ffslides texlive-fge texlive-fge-fonts texlive-fgruler texlive-fibeamer texlive-fifinddo-info texlive-fifo-stack texlive-fig4latex texlive-figbas texlive-figbas-fonts texlive-figbib texlive-figchild texlive-figflow texlive-figsize texlive-filecontents texlive-filecontentsdef texlive-filedate texlive-filehook texlive-fileinfo texlive-filemod texlive-finbib texlive-findhyph texlive-fink texlive-finstrut texlive-fira texlive-fira-fonts texlive-firamath texlive-firamath-fonts texlive-firamath-otf texlive-first-latex-doc texlive-firstaid texlive-fitbox texlive-fithesis texlive-fix2col texlive-fixcmex texlive-fixfoot texlive-fixjfm texlive-fixlatvian texlive-fixltxhyph texlive-fixme texlive-fixmetodonotes texlive-fixpdfmag texlive-fiziko texlive-fjodor texlive-flabels texlive-flacards texlive-flagderiv texlive-flashcards texlive-flashmovie texlive-flipbook texlive-flippdf texlive-float texlive-floatrow texlive-flowchart texlive-flowfram texlive-fltpoint texlive-fmp texlive-fmtcount texlive-fn2end texlive-fnbreak texlive-fncychap texlive-fncylab texlive-fnpara texlive-fnpct texlive-fnspe texlive-fntproof texlive-fnumprint texlive-foekfont texlive-foekfont-fonts texlive-foilhtml texlive-fonetika texlive-fonetika-fonts texlive-font-change texlive-font-change-xetex texlive-fontawesome texlive-fontawesome-fonts texlive-fontawesome5 texlive-fontawesome5-fonts texlive-fontaxes texlive-fontbook texlive-fontch texlive-fontinst texlive-fontmfizz texlive-fontmfizz-fonts texlive-fontname texlive-fontools texlive-fonts-churchslavonic texlive-fonts-churchslavonic-fonts texlive-fonts-tlwg texlive-fonts-tlwg-fonts texlive-fontsetup texlive-fontsize texlive-fontspec texlive-fonttable texlive-fontware texlive-fontwrap texlive-footbib texlive-footmisc texlive-footmisx texlive-footnotebackref texlive-footnotehyper texlive-footnoterange texlive-footnpag texlive-forarray texlive-foreign texlive-forest texlive-forest-quickstart texlive-forloop texlive-formation-latex-ul texlive-formlett texlive-forms16be texlive-formular texlive-forum texlive-forum-fonts texlive-fouridx texlive-fourier texlive-fourier-fonts texlive-fouriernc texlive-fp texlive-fpl texlive-fpl-fonts texlive-fragmaster texlive-fragments texlive-frame texlive-framed texlive-francais-bst texlive-frankenstein texlive-frcursive texlive-frcursive-fonts texlive-frederika2016 texlive-frederika2016-fonts texlive-frege texlive-frenchmath texlive-frimurer texlive-frimurer-fonts texlive-frletter texlive-frontespizio texlive-froufrou texlive-frpseudocode texlive-ftc-notebook texlive-ftcap texlive-ftnxtra texlive-fullblck texlive-fullminipage texlive-fullwidth texlive-functan texlive-fundus-calligra texlive-fundus-cyr texlive-fundus-sueterlin texlive-fvextra texlive-fwlw texlive-g-brief texlive-gaceta texlive-galois texlive-gamebook texlive-gammas texlive-garamond-libre texlive-garamond-libre-fonts texlive-garamond-math texlive-garamond-math-fonts texlive-garrigues texlive-garuda-c90 texlive-gastex texlive-gatech-thesis texlive-gates texlive-gatherenum texlive-gauss texlive-gb4e texlive-gbt7714 texlive-gcard texlive-gchords texlive-gcite texlive-gckanbun texlive-gender texlive-gene-logic texlive-genealogy texlive-genealogytree texlive-genmpage texlive-gentium-tug texlive-gentium-tug-fonts texlive-gentle texlive-gentombow texlive-geometry texlive-german texlive-germbib texlive-germkorr texlive-geschichtsfrkl texlive-getfiledate texlive-getitems texlive-getmap texlive-getoptk texlive-gettitlestring texlive-gfnotation texlive-gfsartemisia texlive-gfsartemisia-fonts texlive-gfsbaskerville texlive-gfsbaskerville-fonts texlive-gfsbodoni texlive-gfsbodoni-fonts texlive-gfscomplutum texlive-gfscomplutum-fonts texlive-gfsdidot texlive-gfsdidot-fonts texlive-gfsdidotclassic texlive-gfsdidotclassic-fonts texlive-gfsneohellenic texlive-gfsneohellenic-fonts texlive-gfsneohellenicmath texlive-gfsneohellenicmath-fonts texlive-gfsporson texlive-gfsporson-fonts texlive-gfssolomos texlive-gfssolomos-fonts texlive-ghab texlive-ghsystem texlive-gillcm texlive-gillius texlive-gillius-fonts texlive-gincltex texlive-gindex texlive-ginpenc texlive-git-latexdiff texlive-gitfile-info texlive-gitinfo texlive-gitinfo2 texlive-gitlog texlive-gitver texlive-globalvals texlive-glosmathtools texlive-gloss texlive-gloss-occitan texlive-glossaries texlive-glossaries-danish texlive-glossaries-dutch texlive-glossaries-english texlive-glossaries-estonian texlive-glossaries-extra texlive-glossaries-finnish texlive-glossaries-french texlive-glossaries-german texlive-glossaries-irish texlive-glossaries-italian texlive-glossaries-magyar texlive-glossaries-nynorsk texlive-glossaries-polish texlive-glossaries-portuges texlive-glossaries-serbian texlive-glossaries-slovene texlive-glossaries-spanish texlive-glyphlist texlive-gmdoc texlive-gmdoc-enhance texlive-gmiflink texlive-gmp texlive-gmutils texlive-gmverb texlive-gmverse texlive-gnu-freefont texlive-gnu-freefont-fonts texlive-gnuplottex texlive-go texlive-gobble texlive-gofonts texlive-gofonts-fonts texlive-gost texlive-gothic texlive-gotoh texlive-grabbox texlive-gradientframe texlive-gradstudentresume texlive-grafcet texlive-grant texlive-graph35 texlive-graphbox texlive-graphics texlive-graphics-cfg texlive-graphics-def texlive-graphics-pln texlive-graphicx-psmin texlive-graphicxbox texlive-graphicxpsd texlive-graphpaper texlive-graphviz texlive-grayhints texlive-greek-fontenc texlive-greek-inputenc texlive-greekdates texlive-greektex texlive-greektonoi texlive-greenpoint texlive-gregoriotex texlive-gregoriotex-fonts texlive-grfext texlive-grffile texlive-grfpaste texlive-grid texlive-grid-system texlive-gridpapers texlive-gridset texlive-gridslides texlive-grotesq texlive-grotesq-fonts texlive-grundgesetze texlive-gsemthesis texlive-gsftopk texlive-gtl texlive-gtrcrd texlive-gtrlib-largetrees texlive-gu texlive-gudea texlive-gudea-fonts texlive-guide-to-latex texlive-guitar texlive-guitarchordschemes texlive-guitartabs texlive-guitlogo texlive-gustlib texlive-gustprog texlive-gzt texlive-h2020proposal texlive-hackthefootline texlive-hacm texlive-hacm-fonts texlive-hagenberg-thesis texlive-halloweenmath texlive-handin texlive-handout texlive-hands texlive-hang texlive-hanging texlive-hanoi texlive-happy4th texlive-har2nat texlive-haranoaji texlive-haranoaji-extra texlive-haranoaji-extra-fonts texlive-haranoaji-fonts texlive-hardwrap texlive-harmony texlive-harnon-cv texlive-harpoon texlive-harvard texlive-harveyballs texlive-harvmac texlive-hatching texlive-hausarbeit-jura texlive-havannah texlive-hc texlive-he-she texlive-hecthese texlive-helmholtz-ellis-ji-notation texlive-helmholtz-ellis-ji-notation-fonts texlive-helvetic texlive-helvetic-fonts texlive-hep texlive-hep-paper texlive-hepnames texlive-hepparticles texlive-hepthesis texlive-hepunits texlive-here texlive-heuristica texlive-heuristica-fonts texlive-hexgame texlive-hf-tikz texlive-hfbright texlive-hfbright-fonts texlive-hfoldsty texlive-hhtensor texlive-highlightlatex texlive-hindawi-latex-template texlive-hindmadurai texlive-hindmadurai-fonts texlive-histogr texlive-historische-zeitschrift texlive-hitec texlive-hithesis texlive-hitreport texlive-hitszbeamer texlive-hitszthesis texlive-hletter texlive-hlist texlive-hmtrump texlive-hmtrump-fonts texlive-hobby texlive-hobete texlive-hobsub texlive-hologo texlive-hook-pre-commit-pkg texlive-hopatch texlive-horoscop texlive-hpsdiss texlive-hrefhide texlive-hrlatex texlive-hu-berlin-bundle texlive-hulipsum texlive-hustthesis texlive-hvarabic texlive-hvfloat texlive-hvindex texlive-hvqrurl texlive-hycolor texlive-hypdestopt texlive-hypdvips texlive-hyper texlive-hyperbar texlive-hypernat texlive-hyperref texlive-hyperxmp texlive-hyph-utf8 texlive-hyphen-afrikaans texlive-hyphen-ancientgreek texlive-hyphen-arabic texlive-hyphen-armenian texlive-hyphen-base texlive-hyphen-basque texlive-hyphen-belarusian texlive-hyphen-bulgarian texlive-hyphen-catalan texlive-hyphen-chinese texlive-hyphen-churchslavonic texlive-hyphen-coptic texlive-hyphen-croatian texlive-hyphen-czech texlive-hyphen-danish texlive-hyphen-dutch texlive-hyphen-english texlive-hyphen-esperanto texlive-hyphen-estonian texlive-hyphen-ethiopic texlive-hyphen-farsi texlive-hyphen-finnish texlive-hyphen-french texlive-hyphen-friulan texlive-hyphen-galician texlive-hyphen-georgian texlive-hyphen-german texlive-hyphen-greek texlive-hyphen-hungarian texlive-hyphen-icelandic texlive-hyphen-indic texlive-hyphen-indonesian texlive-hyphen-interlingua texlive-hyphen-irish texlive-hyphen-italian texlive-hyphen-kurmanji texlive-hyphen-latin texlive-hyphen-latvian texlive-hyphen-lithuanian texlive-hyphen-macedonian texlive-hyphen-mongolian texlive-hyphen-norwegian texlive-hyphen-occitan texlive-hyphen-piedmontese texlive-hyphen-polish texlive-hyphen-portuguese texlive-hyphen-romanian texlive-hyphen-romansh texlive-hyphen-russian texlive-hyphen-sanskrit texlive-hyphen-serbian texlive-hyphen-slovak texlive-hyphen-slovenian texlive-hyphen-spanish texlive-hyphen-swedish texlive-hyphen-thai texlive-hyphen-turkish texlive-hyphen-turkmen texlive-hyphen-ukrainian texlive-hyphen-uppersorbian texlive-hyphen-welsh texlive-hyphenat texlive-hyphenex texlive-hyplain texlive-ibarra texlive-ibarra-fonts texlive-ibycus-babel texlive-ibygrk texlive-ibygrk-fonts texlive-icite texlive-icsv texlive-identkey texlive-idxcmds texlive-idxlayout texlive-ieeepes texlive-ietfbibs texlive-iffont texlive-ifmslide texlive-ifmtarg texlive-ifnextok texlive-ifoddpage texlive-ifplatform texlive-ifptex texlive-ifsym texlive-iftex texlive-ifthenx texlive-ifxptex texlive-iitem texlive-ijmart texlive-ijqc texlive-ijsra texlive-imac texlive-image-gallery texlive-imakeidx texlive-imfellenglish texlive-imfellenglish-fonts texlive-impatient texlive-impatient-cn texlive-impatient-fr texlive-impnattypo texlive-import texlive-imsproc texlive-imtekda texlive-incgraph texlive-includernw texlive-inconsolata texlive-inconsolata-fonts texlive-index texlive-indextools texlive-infwarerr texlive-initials texlive-initials-fonts texlive-inkpaper texlive-inline-images texlive-inlinebib texlive-inlinedef texlive-innerscript texlive-inputenx texlive-inputtrc texlive-inriafonts texlive-inriafonts-fonts texlive-insbox texlive-install-latex-guide-zh-cn texlive-intcalc texlive-inter texlive-inter-fonts texlive-interactiveworkbook texlive-interchar texlive-interfaces texlive-interpreter texlive-interval texlive-intopdf texlive-intro-scientific texlive-inversepath texlive-invoice texlive-invoice-class texlive-invoice2 texlive-iodhbwm texlive-ionumbers texlive-iopart-num texlive-ipaex texlive-ipaex-fonts texlive-ipaex-type1 texlive-ipaex-type1-fonts texlive-is-bst texlive-iscram texlive-iso texlive-iso10303 texlive-isodate texlive-isodoc texlive-isomath texlive-isonums texlive-isopt texlive-isorot texlive-isotope texlive-issuulinks texlive-istgame texlive-itnumpar texlive-iwhdp texlive-iwona texlive-iwona-fonts texlive-jablantile texlive-jacow texlive-jadetex texlive-jamtimes texlive-japanese-otf texlive-japanese-otf-uptex texlive-jbact texlive-jfmutil texlive-jigsaw texlive-jkmath texlive-jknapltx texlive-jlabels texlive-jlreq texlive-jlreq-deluxe texlive-jmb texlive-jmlr texlive-jmn texlive-jmn-fonts texlive-jneurosci texlive-jnuexam texlive-josefin texlive-josefin-fonts texlive-jpsj texlive-js-misc texlive-jsclasses texlive-jslectureplanner texlive-jumplines texlive-junicode texlive-junicode-fonts texlive-jupynotex texlive-jura texlive-juraabbrev texlive-jurabib texlive-juramisc texlive-jurarsp texlive-jvlisting texlive-kalendarium texlive-kanaparser texlive-kantlipsum texlive-karnaugh texlive-karnaugh-map texlive-karnaughmap texlive-kastrup texlive-kblocks texlive-kdgdocs texlive-kerkis texlive-kerkis-fonts texlive-kerntest texlive-ketcindy texlive-keycommand texlive-keyfloat texlive-keyindex texlive-keyreader texlive-keystroke texlive-keyval2e texlive-keyvaltable texlive-kix texlive-kixfont texlive-kluwer texlive-knitting texlive-knitting-fonts texlive-knittingpattern texlive-knowledge texlive-knuth-errata texlive-knuth-lib texlive-knuth-local texlive-knuth-pdf texlive-koma-moderncvclassic texlive-koma-script texlive-koma-script-examples texlive-koma-script-sfs texlive-komacv texlive-komacv-rg texlive-kotex-oblivoir texlive-kotex-plain texlive-kotex-utf texlive-kotex-utils texlive-kpathsea texlive-kpfonts texlive-kpfonts-fonts texlive-kpfonts-otf texlive-kpfonts-otf-fonts texlive-ksfh_nat texlive-ksp-thesis texlive-ktv-texdata texlive-ku-template texlive-kurdishlipsum texlive-kurier texlive-kurier-fonts texlive-kvdefinekeys texlive-kvmap texlive-kvoptions texlive-kvsetkeys texlive-l2picfaq texlive-l2tabu texlive-l2tabu-english texlive-l2tabu-french texlive-l2tabu-italian texlive-l2tabu-spanish texlive-l3backend texlive-l3build texlive-l3experimental texlive-l3kernel texlive-l3packages texlive-labbook texlive-labels texlive-labels4easylist texlive-labelschanged texlive-labyrinth texlive-lacheck texlive-ladder texlive-lambda texlive-lambda-lists texlive-langcode texlive-langsci texlive-langsci-avm texlive-lapdf texlive-lastpackage texlive-lastpage texlive-latex texlive-latex-amsmath-dev texlive-latex-base-dev texlive-latex-bin texlive-latex-bin-dev texlive-latex-brochure texlive-latex-course texlive-latex-doc-ptr texlive-latex-firstaid-dev texlive-latex-fonts texlive-latex-git-log texlive-latex-graphics-companion texlive-latex-graphics-dev texlive-latex-make texlive-latex-mr texlive-latex-notes-zh-cn texlive-latex-papersize texlive-latex-refsheet texlive-latex-tools-dev texlive-latex-uni8 texlive-latex-veryshortguide texlive-latex-via-exemplos texlive-latex-web-companion texlive-latex2e-help-texinfo texlive-latex2e-help-texinfo-fr texlive-latex2e-help-texinfo-spanish texlive-latex2man texlive-latex2nemeth texlive-latex4musicians texlive-latex4wp texlive-latex4wp-it texlive-latexbangla texlive-latexbug texlive-latexcheat texlive-latexcheat-de texlive-latexcheat-esmx texlive-latexcheat-ptbr texlive-latexcolors texlive-latexconfig texlive-latexcourse-rug texlive-latexdemo texlive-latexdiff texlive-latexfileinfo-pkgs texlive-latexfileversion texlive-latexgit texlive-latexindent texlive-latexmk texlive-latexmp texlive-latexpand texlive-latino-sine-flexione texlive-lato texlive-lato-fonts texlive-layaureo texlive-layouts texlive-lazylist texlive-lccaps texlive-lcd texlive-lcdftypetools texlive-lcg texlive-lcyw texlive-leading texlive-leadsheets texlive-leaflet texlive-lebhart texlive-lecturer texlive-lectures texlive-lectureslides texlive-ledmac texlive-leftidx texlive-leftindex texlive-leipzig texlive-lengthconvert texlive-letltxmacro texlive-letterspacing texlive-letterswitharrows texlive-lettre texlive-lettrine texlive-levy texlive-lewis texlive-lexend texlive-lexend-fonts texlive-lexikon texlive-lexref texlive-lfb texlive-lgreek texlive-lh texlive-lhcyr texlive-lhelp texlive-libertine texlive-libertine-fonts texlive-libertinegc texlive-libertinus texlive-libertinus-fonts texlive-libertinus-fonts-fonts texlive-libertinus-otf texlive-libertinus-type1 texlive-libertinus-type1-fonts texlive-libertinust1math texlive-libertinust1math-fonts texlive-libgreek texlive-librarian texlive-librebaskerville texlive-librebaskerville-fonts texlive-librebodoni texlive-librebodoni-fonts texlive-librecaslon texlive-librecaslon-fonts texlive-librefranklin texlive-librefranklin-fonts texlive-libris texlive-libris-fonts texlive-lie-hasse texlive-light-latex-make texlive-lilyglyphs texlive-lilyglyphs-fonts texlive-limap texlive-limecv texlive-linearA texlive-linearA-fonts texlive-linegoal texlive-lineno texlive-ling-macros texlive-linguex texlive-linguisticspro texlive-linguisticspro-fonts texlive-linop texlive-lion-msc texlive-lipsum texlive-lisp-on-tex texlive-listbib texlive-listing texlive-listings texlive-listings-ext texlive-listingsutf8 texlive-listlbls texlive-listliketab texlive-listofitems texlive-listofsymbols texlive-lithuanian texlive-liturg texlive-lkproof texlive-llncsconf texlive-lm texlive-lm-fonts texlive-lm-math texlive-lm-math-fonts texlive-lmake texlive-lni texlive-lobster2 texlive-lobster2-fonts texlive-locality texlive-localloc texlive-logbox texlive-logical-markup-utils texlive-logicproof texlive-logicpuzzle texlive-logix texlive-logix-fonts texlive-logpap texlive-logreq texlive-lollipop texlive-longdivision texlive-longfbox texlive-longfigure texlive-longnamefilelist texlive-loops texlive-lpform texlive-lpic texlive-lplfitch texlive-lps texlive-lroundrect texlive-lsc texlive-lshort-bulgarian texlive-lshort-chinese texlive-lshort-czech texlive-lshort-dutch texlive-lshort-english texlive-lshort-estonian texlive-lshort-finnish texlive-lshort-french texlive-lshort-german texlive-lshort-italian texlive-lshort-japanese texlive-lshort-korean texlive-lshort-mongol texlive-lshort-persian texlive-lshort-polish texlive-lshort-portuguese texlive-lshort-russian texlive-lshort-slovak texlive-lshort-slovenian texlive-lshort-spanish texlive-lshort-thai texlive-lshort-turkish texlive-lshort-ukr texlive-lshort-vietnamese texlive-lstaddons texlive-lstbayes texlive-lstfiracode texlive-lt3graph texlive-ltablex texlive-ltabptch texlive-ltb2bib texlive-ltxcmds texlive-ltxdockit texlive-ltxfileinfo texlive-ltxguidex texlive-ltximg texlive-ltxkeys texlive-ltxmisc texlive-ltxnew texlive-ltxtools texlive-lua-alt-getopt texlive-lua-check-hyphen texlive-lua-physical texlive-lua-typo texlive-lua-uca texlive-lua-ul texlive-lua-uni-algos texlive-lua-visual-debug texlive-luabibentry texlive-luabidi texlive-luacode texlive-luacolor texlive-luahbtex texlive-luahyphenrules texlive-luaimageembed texlive-luaindex texlive-luainputenc texlive-luaintro texlive-luajittex texlive-luakeys texlive-lualatex-doc texlive-lualatex-doc-de texlive-lualatex-math texlive-lualatex-truncate texlive-lualibs texlive-luamesh texlive-luamplib texlive-luaotfload texlive-luapackageloader texlive-luaprogtable texlive-luarandom texlive-luasseq texlive-luatex texlive-luatex-doc texlive-luatex85 texlive-luatexbase texlive-luatexja texlive-luatexko texlive-luatextra texlive-luatodonotes texlive-luavlna texlive-luaxml texlive-lwarp texlive-lxfonts texlive-lxfonts-fonts texlive-ly1 texlive-lyluatex texlive-m-tx texlive-macros2e texlive-macroswap texlive-mafr texlive-magaz texlive-magicnum texlive-magra texlive-magra-fonts texlive-mailing texlive-mailmerge texlive-make4ht texlive-makebarcode texlive-makebase texlive-makebox texlive-makecell texlive-makecirc texlive-makecmds texlive-makecookbook texlive-makedtx texlive-makeglos texlive-makeindex texlive-makeplot texlive-maker texlive-makerobust texlive-makeshape texlive-mandi texlive-manfnt texlive-manfnt-font texlive-manfnt-font-fonts texlive-manuscript texlive-manyind texlive-marathi texlive-marcellus texlive-marcellus-fonts texlive-margbib texlive-marginfit texlive-marginfix texlive-marginnote texlive-markdown texlive-marvosym texlive-marvosym-fonts texlive-matapli texlive-matc3 texlive-matc3mem texlive-match_parens texlive-math-into-latex-4 texlive-mathabx texlive-mathabx-type1 texlive-mathabx-type1-fonts texlive-mathalpha texlive-mathastext texlive-mathcommand texlive-mathcomp texlive-mathdesign texlive-mathdesign-fonts texlive-mathdots texlive-mathexam texlive-mathfam256 texlive-mathfixs texlive-mathfont texlive-mathlig texlive-mathpartir texlive-mathpazo texlive-mathpazo-fonts texlive-mathpunctspace texlive-maths-symbols texlive-mathspec texlive-mathspic texlive-mathtools texlive-matlab-prettifier texlive-matrix-skeleton texlive-mattens texlive-maybemath texlive-mcaption texlive-mceinleger texlive-mcexam texlive-mcf2graph texlive-mcite texlive-mciteplus texlive-mcmthesis texlive-mdframed texlive-mdputu texlive-mdsymbol texlive-mdsymbol-fonts texlive-mdwtools texlive-media4svg texlive-media9 texlive-medstarbeamer texlive-meetingmins texlive-membranecomputing texlive-memdesign texlive-memexsupp texlive-memoir texlive-memory texlive-memorygraphs texlive-mendex-doc texlive-mensa-tex texlive-mentis texlive-menu texlive-menucard texlive-menukeys texlive-mercatormap texlive-merriweather texlive-merriweather-fonts texlive-metafont texlive-metafont-beginners texlive-metago texlive-metalogo texlive-metalogox texlive-metanorma texlive-metaobj texlive-metaplot texlive-metapost texlive-metapost-colorbrewer texlive-metapost-examples texlive-metapost-fonts texlive-metastr texlive-metatex texlive-metatype1 texlive-metauml texlive-method texlive-metre texlive-metrix texlive-mex texlive-mf2pt1 texlive-mfirstuc texlive-mflogo texlive-mflogo-font texlive-mflogo-font-fonts texlive-mflua texlive-mfnfss texlive-mfpic texlive-mfpic4ode texlive-mftinc texlive-mfware texlive-mgltex texlive-mhchem texlive-mhequ texlive-mi-solns texlive-miama texlive-miama-fonts texlive-microtype texlive-microtype-de texlive-midnight texlive-midpage texlive-miller texlive-milog texlive-milsymb texlive-mindflow texlive-minibox texlive-minidocument texlive-minifp texlive-minimalist texlive-minipage-marginpar texlive-miniplot texlive-minitoc texlive-minorrevision texlive-minted texlive-mintspirit texlive-mintspirit-fonts texlive-minutes texlive-mismath texlive-missaali texlive-missaali-fonts texlive-mkgrkindex texlive-mkjobtexmf texlive-mkpattern texlive-mkpic texlive-mla-paper texlive-mlacls texlive-mleftright texlive-mlist texlive-mlmodern texlive-mlmodern-fonts texlive-mltex texlive-mluexercise texlive-mmap texlive-mnotes texlive-mnras texlive-mnsymbol texlive-mnsymbol-fonts texlive-modeles-factures-belges-assocs texlive-moderncv texlive-modernposter texlive-moderntimeline texlive-modes texlive-modiagram texlive-modref texlive-modroman texlive-modular texlive-modulus texlive-mongolian-babel texlive-monofill texlive-montex texlive-montex-fonts texlive-montserrat texlive-montserrat-fonts texlive-moodle texlive-moreenum texlive-morefloats texlive-morehype texlive-moresize texlive-moreverb texlive-morewrites texlive-morisawa texlive-movie15 texlive-mp3d texlive-mparhack texlive-mparrows texlive-mpattern texlive-mpcolornames texlive-mpfonts texlive-mpgraphics texlive-mpman-ru texlive-mpostinl texlive-mptopdf texlive-mptrees texlive-ms texlive-msc texlive-msg texlive-mslapa texlive-msu-thesis texlive-mtgreek texlive-mucproc texlive-mugsthesis texlive-muling texlive-multenum texlive-multiaudience texlive-multibbl texlive-multibib texlive-multibibliography texlive-multicap texlive-multicolrule texlive-multidef texlive-multido texlive-multienv texlive-multiexpand texlive-multilang texlive-multiobjective texlive-multirow texlive-munich texlive-musical texlive-musicography texlive-musikui texlive-musixguit texlive-musixtex texlive-musixtex-fonts texlive-musixtex-fonts-fonts texlive-musixtnt texlive-musuos texlive-muthesis texlive-mversion texlive-mwcls texlive-mwe texlive-mweights texlive-mxedruli texlive-mxedruli-fonts texlive-mycv texlive-mylatex texlive-mylatexformat texlive-mynsfc texlive-na-box texlive-na-position texlive-nag texlive-nameauth texlive-namedef texlive-namespc texlive-nanicolle texlive-nanumtype1 texlive-nanumtype1-fonts texlive-nar texlive-natbib texlive-natded texlive-nath texlive-nature texlive-navigator texlive-navydocs texlive-ncclatex texlive-ncctools texlive-ncntrsbk texlive-ncntrsbk-fonts texlive-nddiss texlive-ndsu-thesis texlive-needspace texlive-nestquot texlive-neuralnetwork texlive-nevelok texlive-newcommand texlive-newcomputermodern texlive-newcomputermodern-fonts texlive-newenviron texlive-newfile texlive-newfloat texlive-newlfm texlive-newpax texlive-newpx texlive-newpx-fonts texlive-newsletr texlive-newspaper texlive-newtx texlive-newtx-fonts texlive-newtxsf texlive-newtxsf-fonts texlive-newtxtt texlive-newtxtt-fonts texlive-newunicodechar texlive-newvbtm texlive-newverbs texlive-nextpage texlive-nfssext-cfr texlive-nicefilelist texlive-niceframe texlive-niceframe-type1 texlive-niceframe-type1-fonts texlive-nicematrix texlive-nicetext texlive-nidanfloat texlive-nih texlive-nihbiosketch texlive-nimbus15 texlive-nimbus15-fonts texlive-nimsticks texlive-njurepo texlive-nkarta texlive-nl-interval texlive-nlctdoc texlive-nmbib texlive-nnext texlive-noconflict texlive-nodetree texlive-noindentafter texlive-noitcrul texlive-nolbreaks texlive-nomencl texlive-nomentbl texlive-nonfloat texlive-nonumonpart texlive-nopageno texlive-norasi-c90 texlive-normalcolor texlive-nostarch texlive-notes texlive-notes2bib texlive-notespages texlive-notestex texlive-notex-bst texlive-noto texlive-noto-emoji texlive-noto-emoji-fonts texlive-noto-fonts texlive-notoccite texlive-notomath texlive-notomath-fonts texlive-novel texlive-novel-fonts texlive-nowidow texlive-nox texlive-npp-for-context texlive-nrc texlive-ntgclass texlive-nth texlive-ntheorem texlive-ntheorem-vn texlive-nuc texlive-nucleardata texlive-numberedblock texlive-numberpt texlive-numerica texlive-numericplots texlive-numname texlive-numnameru texlive-numprint texlive-numspell texlive-nunito texlive-nunito-fonts texlive-nwejm texlive-oberdiek texlive-objectz texlive-obnov texlive-ocg-p texlive-ocgx texlive-ocgx2 texlive-ocherokee texlive-ocherokee-fonts texlive-ocr-b texlive-ocr-b-outline texlive-ocr-b-outline-fonts texlive-ocr-latex texlive-octave texlive-octavo texlive-odsfile texlive-ofs texlive-ogham texlive-oinuit texlive-oinuit-fonts texlive-old-arrows texlive-old-arrows-fonts texlive-oldlatin texlive-oldstandard texlive-oldstandard-fonts texlive-oldstyle texlive-olsak-misc texlive-omega texlive-omega-fonts texlive-omegaware texlive-onedown texlive-onlyamsmath texlive-onrannual texlive-opcit texlive-opensans texlive-opensans-fonts texlive-oplotsymbl texlive-opteng texlive-optex texlive-optidef texlive-optional texlive-options texlive-orcidlink texlive-ordinalpt texlive-orientation texlive-orkhun texlive-oscola texlive-oswald texlive-oswald-fonts texlive-ot-tableau texlive-othello texlive-othelloboard texlive-otibet texlive-oubraces texlive-oup-authoring-template texlive-outerhbox texlive-outline texlive-outliner texlive-outlines texlive-outlining texlive-overlays texlive-overlock texlive-overlock-fonts texlive-overpic texlive-pacioli texlive-padauk texlive-padauk-fonts texlive-padcount texlive-pagecolor texlive-pagecont texlive-pagenote texlive-pagerange texlive-pagesel texlive-pageslts texlive-palatino texlive-palatino-fonts texlive-paper texlive-papercdcase texlive-papermas texlive-papertex texlive-paracol texlive-parades texlive-paralist texlive-parallel texlive-paratype texlive-paratype-fonts texlive-paresse texlive-parnotes texlive-parrun texlive-parsa texlive-parselines texlive-parskip texlive-pas-cours texlive-pas-crosswords texlive-pas-cv texlive-pas-tableur texlive-passivetex texlive-patch texlive-patchcmd texlive-patgen texlive-patgen2-tutorial texlive-path texlive-pauldoc texlive-pawpict texlive-pax texlive-pb-diagram texlive-pbalance texlive-pbibtex-base texlive-pbox texlive-pbsheet texlive-pdf-trans texlive-pdf14 texlive-pdfarticle texlive-pdfbook2 texlive-pdfcolmk texlive-pdfcomment texlive-pdfcprot texlive-pdfcrop texlive-pdfescape texlive-pdfjam texlive-pdflatexpicscale texlive-pdflscape texlive-pdfmanagement-testphase texlive-pdfmarginpar texlive-pdfoverlay texlive-pdfpagediff texlive-pdfpages texlive-pdfpc texlive-pdfpc-movie texlive-pdfprivacy texlive-pdfreview texlive-pdfscreen texlive-pdfslide texlive-pdfsync texlive-pdftex texlive-pdftex-doc texlive-pdftex-fonts texlive-pdftex-quiet texlive-pdftexcmds texlive-pdftosrc texlive-pdftricks texlive-pdftricks2 texlive-pdfwin texlive-pdfx texlive-pdfxup texlive-pecha texlive-pedigree-perl texlive-penrose texlive-perception texlive-perfectcut texlive-perltex texlive-permute texlive-persian-bib texlive-petiteannonce texlive-petri-nets texlive-pfarrei texlive-pgf texlive-pgf-blur texlive-pgf-cmykshadings texlive-pgf-pie texlive-pgf-soroban texlive-pgf-spectra texlive-pgf-umlcd texlive-pgf-umlsd texlive-pgfgantt texlive-pgfkeyx texlive-pgfmolbio texlive-pgfmorepages texlive-pgfopts texlive-pgfornament texlive-pgfornament-han texlive-pgfplots texlive-phaistos texlive-phaistos-fonts texlive-phffullpagefigure texlive-phfnote texlive-phfparen texlive-phfqit texlive-phfquotetext texlive-phfsvnwatermark texlive-phfthm texlive-philex texlive-philokalia texlive-philokalia-fonts texlive-philosophersimprint texlive-phonenumbers texlive-phonetic texlive-phonrule texlive-photo texlive-physconst texlive-physics texlive-physunits texlive-piano texlive-picinpar texlive-pict2e texlive-pictex texlive-pictex2 texlive-pictexsum texlive-picture texlive-piechartmp texlive-piff texlive-pigpen texlive-pigpen-fonts texlive-pinlabel texlive-pinoutikz texlive-pitex texlive-pittetd texlive-pixelart texlive-pkfix texlive-pkfix-helper texlive-pkgloader texlive-pkuthss texlive-pl texlive-pl-fonts texlive-placeat texlive-placeins texlive-placeins-plain texlive-plain texlive-plain-doc texlive-plainpkg texlive-plainyr texlive-plantslabels texlive-plantuml texlive-plari texlive-plates texlive-platex texlive-platex-tools texlive-platexcheat texlive-plautopatch texlive-play texlive-playfair texlive-playfair-fonts texlive-plex texlive-plex-fonts texlive-plex-otf texlive-plimsoll texlive-plimsoll-fonts texlive-plipsum texlive-plnfss texlive-plstmary texlive-plweb texlive-pm-isomath texlive-pmboxdraw texlive-pmgraph texlive-pmhanguljamo texlive-pmx texlive-pmxchords texlive-pnas2009 texlive-poemscol texlive-poetry texlive-poetrytex texlive-poiretone texlive-poiretone-fonts texlive-polexpr texlive-polski texlive-poltawski texlive-poltawski-fonts texlive-polyglossia texlive-polynom texlive-polynomial texlive-polytable texlive-poormanlog texlive-postage texlive-postcards texlive-poster-mac texlive-powerdot texlive-powerdot-fuberlin texlive-powerdot-tuliplab texlive-ppr-prv texlive-pracjourn texlive-practicalreports texlive-prelim2e texlive-preprint texlive-prerex texlive-present texlive-pressrelease texlive-prettyref texlive-preview texlive-prftree texlive-principia texlive-printlen texlive-proba texlive-probsoln texlive-procIAGssymp texlive-prodint texlive-prodint-fonts texlive-productbox texlive-profcollege texlive-program texlive-progress texlive-progressbar texlive-proof-at-the-end texlive-proofread texlive-prooftrees texlive-properties texlive-proposal texlive-prosper texlive-protex texlive-protocol texlive-prtec texlive-przechlewski-book texlive-ps2eps texlive-ps2pk texlive-psbao texlive-pseudo texlive-pseudocode texlive-psfrag texlive-psfrag-italian texlive-psfragx texlive-psgo texlive-psizzl texlive-pslatex texlive-psnfss texlive-pspicture texlive-pst-2dplot texlive-pst-3d texlive-pst-3dplot texlive-pst-abspos texlive-pst-am texlive-pst-antiprism texlive-pst-arrow texlive-pst-asr texlive-pst-bar texlive-pst-barcode texlive-pst-bezier texlive-pst-blur texlive-pst-bspline texlive-pst-calculate texlive-pst-calendar texlive-pst-cie texlive-pst-circ texlive-pst-coil texlive-pst-contourplot texlive-pst-cox texlive-pst-dart texlive-pst-dbicons texlive-pst-diffraction texlive-pst-electricfield texlive-pst-eps texlive-pst-eucl texlive-pst-eucl-translation-bg texlive-pst-exa texlive-pst-feyn texlive-pst-fill texlive-pst-fit texlive-pst-fr3d texlive-pst-fractal texlive-pst-fun texlive-pst-func texlive-pst-gantt texlive-pst-geo texlive-pst-geometrictools texlive-pst-ghsb texlive-pst-gr3d texlive-pst-grad texlive-pst-graphicx texlive-pst-infixplot texlive-pst-intersect texlive-pst-jtree texlive-pst-knot texlive-pst-labo texlive-pst-layout texlive-pst-lens texlive-pst-light3d texlive-pst-lsystem texlive-pst-magneticfield texlive-pst-marble texlive-pst-math texlive-pst-mirror texlive-pst-moire texlive-pst-node texlive-pst-ob3d texlive-pst-ode texlive-pst-optexp texlive-pst-optic texlive-pst-osci texlive-pst-ovl texlive-pst-pad texlive-pst-pdf texlive-pst-pdgr texlive-pst-perspective texlive-pst-platon texlive-pst-plot texlive-pst-poker texlive-pst-poly texlive-pst-pulley texlive-pst-qtree texlive-pst-rputover texlive-pst-rubans texlive-pst-shell texlive-pst-sigsys texlive-pst-slpe texlive-pst-solarsystem texlive-pst-solides3d texlive-pst-soroban texlive-pst-spectra texlive-pst-spinner texlive-pst-stru texlive-pst-support texlive-pst-text texlive-pst-thick texlive-pst-tools texlive-pst-tree texlive-pst-turtle texlive-pst-tvz texlive-pst-uml texlive-pst-vectorian texlive-pst-vehicle texlive-pst-venn texlive-pst-vowel texlive-pst2pdf texlive-pstool texlive-pstricks texlive-pstricks-add texlive-pstricks_calcnotes texlive-pstring texlive-ptex texlive-ptex-base texlive-ptex-fontmaps texlive-ptex-fonts texlive-ptex-manual texlive-ptex2pdf texlive-ptext texlive-ptolemaicastronomy texlive-ptptex texlive-punk texlive-punk-latex texlive-punknova texlive-punknova-fonts texlive-purifyeps texlive-puyotikz texlive-pwebmac texlive-pxbase texlive-pxchfon texlive-pxcjkcat texlive-pxfonts texlive-pxfonts-fonts texlive-pxgreeks texlive-pxjahyper texlive-pxjodel texlive-pxpgfmark texlive-pxpic texlive-pxrubrica texlive-pxtatescale texlive-pxtxalfa texlive-pxufont texlive-pygmentex texlive-python texlive-pythonhighlight texlive-pythontex texlive-qcircuit texlive-qcm texlive-qobitree texlive-qpxqtx texlive-qrbill texlive-qrcode texlive-qsharp texlive-qstest texlive-qsymbols texlive-qtree texlive-qualitype texlive-qualitype-fonts texlive-quantikz texlive-quantumarticle texlive-quattrocento texlive-quattrocento-fonts texlive-quicktype texlive-quiz2socrative texlive-quotchap texlive-quoting texlive-quotmark texlive-quran texlive-quran-bn texlive-quran-de texlive-quran-ur texlive-qyxf-book texlive-r_und_s texlive-ragged2e texlive-raleway texlive-raleway-fonts texlive-ran_toks texlive-randbild texlive-random texlive-randomlist texlive-randomwalk texlive-randtext texlive-rank-2-roots texlive-rccol texlive-rcs texlive-rcs-multi texlive-rcsinfo texlive-readablecv texlive-readarray texlive-realboxes texlive-realhats texlive-realscripts texlive-realtranspose texlive-rec-thy texlive-recipe texlive-recipebook texlive-recipecard texlive-rectopma texlive-recycle texlive-recycle-fonts texlive-refcheck texlive-refcount texlive-refenums texlive-reflectgraphics texlive-refman texlive-refstyle texlive-regcount texlive-regexpatch texlive-register texlive-regstats texlive-reledmac texlive-relenc texlive-relsize texlive-reotex texlive-repeatindex texlive-repere texlive-repltext texlive-rerunfilecheck texlive-resphilosophica texlive-rest-api texlive-resumecls texlive-resumemac texlive-returntogrid texlive-reverxii texlive-revquantum texlive-revtex texlive-revtex4 texlive-revtex4-1 texlive-rgltxdoc texlive-ribbonproofs texlive-rjlparshap texlive-rlepsf texlive-rmathbr texlive-rmpage texlive-roboto texlive-roboto-fonts texlive-robustcommand texlive-robustindex texlive-roex texlive-rojud texlive-rojud-fonts texlive-romanbar texlive-romanbarpagenumber texlive-romande texlive-romande-fonts texlive-romanneg texlive-romannum texlive-rosario texlive-rosario-fonts texlive-rotfloat texlive-rotpages texlive-roundbox texlive-roundrect texlive-rrgtrees texlive-rsc texlive-rsfs texlive-rsfs-fonts texlive-rsfso texlive-rterface texlive-rtkinenc texlive-rtklage texlive-rubik texlive-ruhyphen texlive-ruler texlive-rulerbox texlive-rulercompass texlive-runcode texlive-russ texlive-rutitlepage texlive-rviewport texlive-rvwrite texlive-ryersonsgsthesis texlive-ryethesis texlive-sa-tikz texlive-sageep texlive-sanitize-umlaut texlive-sankey texlive-sanskrit texlive-sanskrit-t1 texlive-sanskrit-t1-fonts texlive-sansmath texlive-sansmathaccent texlive-sansmathfonts texlive-sansmathfonts-fonts texlive-sapthesis texlive-sasnrdisplay texlive-sauerj texlive-sauter texlive-sauterfonts texlive-savefnmark texlive-savesym texlive-savetrees texlive-scale texlive-scalebar texlive-scalerel texlive-scanpages texlive-scanpages-fonts texlive-schedule texlive-schemabloc texlive-schemata texlive-scholax texlive-scholax-fonts texlive-schooldocs texlive-schule texlive-schulmathematik texlive-schulschriften texlive-schwalbe-chess texlive-scientific-thesis-cover texlive-sciposter texlive-sclang-prettifier texlive-scontents texlive-scratch texlive-scratch3 texlive-scratchx texlive-screenplay texlive-screenplay-pkg texlive-scripts texlive-scripts-extra texlive-scrjrnl texlive-scrlayer-fancyhdr texlive-scrlttr2copy texlive-scsnowman texlive-sdaps texlive-sdrt texlive-sduthesis texlive-secdot texlive-secnum texlive-section texlive-sectionbox texlive-sectionbreak texlive-sectsty texlive-seealso texlive-seetexk texlive-selectp texlive-selinput texlive-selnolig texlive-semantex texlive-semantic texlive-semantic-markup texlive-semaphor texlive-semaphor-fonts texlive-semesterplanner texlive-seminar texlive-semioneside texlive-semproc texlive-semtex texlive-sepfootnotes texlive-sepnum texlive-seqsplit texlive-serbian-apostrophe texlive-serbian-date-lat texlive-serbian-def-cyr texlive-serbian-lig texlive-sesamanuel texlive-sesstime texlive-setdeck texlive-setspace texlive-seuthesis texlive-seuthesix texlive-sexam texlive-sf298 texlive-sffms texlive-sfg texlive-sfmath texlive-sgame texlive-shade texlive-shadethm texlive-shadow texlive-shadowtext texlive-shapepar texlive-shapes texlive-shdoc texlive-shipunov texlive-shobhika texlive-shobhika-fonts texlive-short-math-guide texlive-shortmathj texlive-shorttoc texlive-show2e texlive-showcharinbox texlive-showdim texlive-showexpl texlive-showhyphens texlive-showlabels texlive-showtags texlive-shtthesis texlive-shuffle texlive-sidecap texlive-sidenotes texlive-sides texlive-signchart texlive-silence texlive-simple-resume-cv texlive-simple-thesis-dissertation texlive-simplebnf texlive-simplecd texlive-simplecv texlive-simpleinvoice texlive-simplekv texlive-simpleoptics texlive-simpler-wick texlive-simplewick texlive-simplified-latex texlive-simplivre texlive-simurgh texlive-sitem texlive-siunitx texlive-skak texlive-skaknew texlive-skaknew-fonts texlive-skb texlive-skdoc texlive-skeldoc texlive-skeycommand texlive-skeyval texlive-skills texlive-skmath texlive-skrapport texlive-skull texlive-slantsc texlive-slideshow texlive-smalltableof texlive-smartdiagram texlive-smartref texlive-smartunits texlive-snapshot texlive-snotez texlive-songbook texlive-songs texlive-sort-by-letters texlive-soton texlive-soul texlive-soulpos texlive-soulutf8 texlive-soup texlive-sourcecodepro texlive-sourcecodepro-fonts texlive-sourcesanspro texlive-sourcesanspro-fonts texlive-sourceserifpro texlive-sourceserifpro-fonts texlive-spacingtricks texlive-spalign texlive-spark-otf texlive-sparklines texlive-spath3 texlive-spectral texlive-spectral-fonts texlive-spectralsequences texlive-spelling texlive-sphdthesis texlive-spie texlive-spix texlive-splines texlive-splitbib texlive-splitindex texlive-spot texlive-spotcolor texlive-spreadtab texlive-spverbatim texlive-sr-vorl texlive-srbook-mem texlive-srcltx texlive-srcredact texlive-srdp-mathematik texlive-sseq texlive-sslides texlive-stack texlive-stackengine texlive-stage texlive-standalone texlive-stanli texlive-starfont texlive-starfont-fonts texlive-startex texlive-startlatex2e texlive-statex texlive-statex2 texlive-statistics texlive-statistik texlive-statmath texlive-staves texlive-staves-fonts texlive-stdclsdv texlive-stdpage texlive-stealcaps texlive-steinmetz texlive-stellenbosch texlive-step texlive-step-fonts texlive-stepgreek texlive-stepgreek-fonts texlive-stex texlive-stickstoo texlive-stickstoo-fonts texlive-stix texlive-stix-fonts texlive-stix2-otf texlive-stix2-otf-fonts texlive-stix2-type1 texlive-stix2-type1-fonts texlive-stmaryrd texlive-stmaryrd-fonts texlive-storebox texlive-storecmd texlive-stricttex texlive-stringenc texlive-stringstrings texlive-structmech texlive-struktex texlive-sttools texlive-stubs texlive-studenthandouts texlive-sty2dtx texlive-suanpan texlive-subdepth texlive-subdocs texlive-subeqn texlive-subeqnarray texlive-subfig texlive-subfigmat texlive-subfigure texlive-subfiles texlive-subfloat texlive-substances texlive-substitutefont texlive-substr texlive-subsupscripts texlive-subtext texlive-sudoku texlive-sudokubundle texlive-suftesi texlive-sugconf texlive-superiors texlive-superiors-fonts texlive-supertabular texlive-suppose texlive-susy texlive-svg texlive-svg-inkscape texlive-svgcolor texlive-svn texlive-svn-multi texlive-svn-prov texlive-svninfo texlive-svrsymbols texlive-svrsymbols-fonts texlive-swebib texlive-swfigure texlive-swimgraf texlive-swrule texlive-syllogism texlive-symbol texlive-symbol-fonts texlive-synctex texlive-synproof texlive-syntax texlive-syntaxdi texlive-syntrace texlive-synttree texlive-systeme texlive-t-angles texlive-t2 texlive-tabfigures texlive-table-fct texlive-tableaux texlive-tablefootnote texlive-tableof texlive-tablestyles texlive-tablists texlive-tablor texlive-tabls texlive-tablvar texlive-tabriz-thesis texlive-tabstackengine texlive-tabto-generic texlive-tabto-ltx texlive-tabu texlive-tabularborder texlive-tabularcalc texlive-tabularew texlive-tabulary texlive-tabvar texlive-tabvar-fonts texlive-tagging texlive-tagpair texlive-tagpdf texlive-talk texlive-tamefloats texlive-tamethebeast texlive-tap texlive-tapir texlive-tapir-fonts texlive-tasks texlive-tcldoc texlive-tcolorbox texlive-tdclock texlive-tds texlive-tdsfrmath texlive-technics texlive-technion-thesis-template texlive-ted texlive-templates-fenn texlive-templates-sommer texlive-templatetools texlive-tempora texlive-tempora-fonts texlive-tengwarscript texlive-tensind texlive-tensor texlive-termcal texlive-termcal-de texlive-termlist texlive-termmenu texlive-testhyphens texlive-testidx texlive-tetragonos texlive-teubner texlive-tex texlive-tex-ewd texlive-tex-font-errors-cheatsheet texlive-tex-gyre texlive-tex-gyre-fonts texlive-tex-gyre-math texlive-tex-gyre-math-fonts texlive-tex-ini-files texlive-tex-label texlive-tex-locale texlive-tex-nutshell texlive-tex-overview texlive-tex-ps texlive-tex-refs texlive-tex-virtual-academy-pl texlive-tex4ebook texlive-tex4ht texlive-texapi texlive-texbytopic texlive-texcount texlive-texdate texlive-texdef texlive-texdiff texlive-texdirflatten texlive-texdoc texlive-texdoctk texlive-texdraw texlive-texfot texlive-texilikechaps texlive-texilikecover texlive-texinfo texlive-texlive-common texlive-texlive-cz texlive-texlive-de texlive-texlive-en texlive-texlive-es texlive-texlive-fr texlive-texlive-it texlive-texlive-ja texlive-texlive-pl texlive-texlive-ru texlive-texlive-sr texlive-texlive-zh-cn texlive-texlive.infra texlive-texlive.infra-doc texlive-texliveonfly texlive-texloganalyser texlive-texlogos texlive-texmate texlive-texments texlive-texnegar texlive-texonly texlive-texosquery texlive-texplate texlive-texpower texlive-texproposal texlive-texshade texlive-texsis texlive-textcase texlive-textfit texlive-textglos texlive-textgreek texlive-textmerg texlive-textopo texlive-textpath texlive-textpos texlive-textualicomma texlive-texvc texlive-texware texlive-tfrupee texlive-tfrupee-fonts texlive-thaienum texlive-thaispec texlive-thalie texlive-theanodidot texlive-theanodidot-fonts texlive-theanomodern texlive-theanomodern-fonts texlive-theanooldstyle texlive-theanooldstyle-fonts texlive-theatre texlive-theoremref texlive-thesis-ekf texlive-thesis-gwu texlive-thesis-qom texlive-thesis-titlepage-fhac texlive-thinsp texlive-thmbox texlive-thmtools texlive-threadcol texlive-threeddice texlive-threeparttable texlive-threeparttablex texlive-thuaslogos texlive-thucoursework texlive-thumb texlive-thumbpdf texlive-thumbs texlive-thumby texlive-thuthesis texlive-ticket texlive-ticollege texlive-tie texlive-tikz-3dplot texlive-tikz-among-us texlive-tikz-bayesnet texlive-tikz-bbox texlive-tikz-cd texlive-tikz-dependency texlive-tikz-dimline texlive-tikz-feynhand texlive-tikz-feynman texlive-tikz-imagelabels texlive-tikz-inet texlive-tikz-kalender texlive-tikz-karnaugh texlive-tikz-ladder texlive-tikz-lake-fig texlive-tikz-layers texlive-tikz-nef texlive-tikz-network texlive-tikz-opm texlive-tikz-optics texlive-tikz-page texlive-tikz-palattice texlive-tikz-planets texlive-tikz-qtree texlive-tikz-relay texlive-tikz-sfc texlive-tikz-timing texlive-tikz-trackschematic texlive-tikz-truchet texlive-tikzcodeblocks texlive-tikzducks texlive-tikzinclude texlive-tikzlings texlive-tikzmark texlive-tikzmarmots texlive-tikzorbital texlive-tikzpackets texlive-tikzpagenodes texlive-tikzpeople texlive-tikzpfeile texlive-tikzposter texlive-tikzscale texlive-tikzsymbols texlive-tikztosvg texlive-tile-graphic texlive-timbreicmc texlive-times texlive-times-fonts texlive-timetable texlive-timing-diagrams texlive-tinos texlive-tinos-fonts texlive-tipa texlive-tipa-de texlive-tipa-fonts texlive-tipfr texlive-titlecaps texlive-titlefoot texlive-titlepages texlive-titlepic texlive-titleref texlive-titlesec texlive-titling texlive-tkz-base texlive-tkz-berge texlive-tkz-doc texlive-tkz-euclide texlive-tkz-fct texlive-tkz-graph texlive-tkz-orm texlive-tkz-tab texlive-tlc-article texlive-tlc2 texlive-tlmgrbasics texlive-tocbibind texlive-tocdata texlive-tocloft texlive-tocvsec2 texlive-todo texlive-todonotes texlive-tokcycle texlive-tokenizer texlive-toolbox texlive-tools texlive-topfloat texlive-topiclongtable texlive-topletter texlive-toptesi texlive-totalcount texlive-totcount texlive-totpages texlive-tpic2pdftex texlive-tpslifonts texlive-tqft texlive-tracklang texlive-trajan texlive-trajan-fonts texlive-tram texlive-translation-array-fr texlive-translation-arsclassica-de texlive-translation-biblatex-de texlive-translation-chemsym-de texlive-translation-dcolumn-fr texlive-translation-ecv-de texlive-translation-enumitem-de texlive-translation-europecv-de texlive-translation-filecontents-de texlive-translation-moreverb-de texlive-translation-natbib-fr texlive-translation-tabbing-fr texlive-translations texlive-translator texlive-transparent texlive-tree-dvips texlive-treetex texlive-trfsigns texlive-trigonometry texlive-trimspaces texlive-trivfloat texlive-trsym texlive-truncate texlive-tsemlines texlive-ttfutils texlive-tucv texlive-tuda-ci texlive-tudscr texlive-tufte-latex texlive-tugboat texlive-tugboat-plain texlive-tui texlive-turabian texlive-turabian-formatting texlive-turkmen texlive-turnstile texlive-turnthepage texlive-twemoji-colr texlive-twemoji-colr-fonts texlive-twoinone texlive-twoup texlive-txfonts texlive-txfonts-fonts texlive-txfontsb texlive-txfontsb-fonts texlive-txgreeks texlive-txuprcal texlive-txuprcal-fonts texlive-type1cm texlive-typed-checklist texlive-typeface texlive-typehtml texlive-typeoutfileinfo texlive-typewriter texlive-typicons texlive-typicons-fonts texlive-typoaid texlive-typogrid texlive-tzplot texlive-uaclasses texlive-uafthesis texlive-uantwerpendocs texlive-uassign texlive-ucalgmthesis texlive-ucbthesis texlive-ucdavisthesis texlive-ucharcat texlive-ucharclasses texlive-ucs texlive-ucsmonograph texlive-ucthesis texlive-udesoftec texlive-uebungsblatt texlive-uestcthesis texlive-uhc texlive-uhc-fonts texlive-uhhassignment texlive-uhrzeit texlive-uiucredborder texlive-uiucthesis texlive-ukrhyph texlive-ulem texlive-ulqda texlive-ulthese texlive-umbclegislation texlive-umich-thesis texlive-uml texlive-umlaute texlive-umoline texlive-umthesis texlive-umtypewriter texlive-umtypewriter-fonts texlive-unam-thesis texlive-unamth-template texlive-unamthesis texlive-undergradmath texlive-underlin texlive-underoverlap texlive-underscore texlive-undolabl texlive-unfonts-core texlive-unfonts-core-fonts texlive-unfonts-extra texlive-unfonts-extra-fonts texlive-uni-wtal-ger texlive-uni-wtal-lin texlive-unicode-alphabets texlive-unicode-bidi texlive-unicode-data texlive-unicode-math texlive-unifith texlive-uninormalize texlive-uniquecounter texlive-unisugar texlive-unitconv texlive-unitipa texlive-unitn-bimrep texlive-units texlive-unitsdef texlive-universa texlive-universalis texlive-universalis-fonts texlive-univie-ling texlive-unizgklasa texlive-unravel texlive-unswcover texlive-uothesis texlive-uowthesis texlive-uowthesistitlepage texlive-upca texlive-uplatex texlive-upmethodology texlive-uppunctlm texlive-upquote texlive-uptex texlive-uptex-base texlive-uptex-fonts texlive-upzhkinsoku texlive-urcls texlive-uri texlive-url texlive-urlbst texlive-urwchancal texlive-usebib texlive-ushort texlive-uspace texlive-uspatent texlive-ut-thesis texlive-utexasthesis texlive-utf8add texlive-utf8mex texlive-utfsym texlive-utopia texlive-utopia-fonts texlive-uwmslide texlive-uwthesis texlive-vak texlive-vancouver texlive-variablelm texlive-variations texlive-varindex texlive-varisize texlive-varsfromjobname texlive-varwidth texlive-vaucanson-g texlive-vcell texlive-vdmlisting texlive-velthuis texlive-velthuis-fonts texlive-venn texlive-venndiagram texlive-venturisadf texlive-venturisadf-fonts texlive-verbasef texlive-verbatimbox texlive-verbatimcopy texlive-verbdef texlive-verbments texlive-verifica texlive-verifiche texlive-verse texlive-version texlive-versions texlive-versonotes texlive-vertbars texlive-vgrid texlive-vhistory texlive-visualfaq texlive-visualpstricks texlive-visualtikz texlive-vlna texlive-vmargin texlive-vntex texlive-vntex-fonts texlive-vocaltract texlive-volumes texlive-voss-mathcol texlive-vpe texlive-vruler texlive-vtable texlive-vwcol texlive-wadalab texlive-wadalab-fonts texlive-wallcalendar texlive-wallpaper texlive-warning texlive-warpcol texlive-was texlive-wasy texlive-wasy-type1 texlive-wasy-type1-fonts texlive-wasysym texlive-web texlive-webguide texlive-webquiz texlive-widetable texlive-widows-and-orphans texlive-williams texlive-willowtreebook texlive-windycity texlive-withargs texlive-witharrows texlive-wnri texlive-wnri-latex texlive-wordcount texlive-wordlike texlive-worksheet texlive-wrapfig texlive-wsemclassic texlive-wsuipa texlive-wtref texlive-xargs texlive-xassoccnt texlive-xbmks texlive-xcharter texlive-xcharter-fonts texlive-xcite texlive-xcjk2uni texlive-xcntperchap texlive-xcolor texlive-xcolor-material texlive-xcolor-solarized texlive-xcomment texlive-xcookybooky texlive-xcpdftips texlive-xdoc texlive-xduthesis texlive-xdvi texlive-xebaposter texlive-xechangebar texlive-xecjk texlive-xecolor texlive-xecyr texlive-xecyrmongolian texlive-xeindex texlive-xelatex-dev texlive-xellipsis texlive-xepersian texlive-xepersian-hm texlive-xesearch texlive-xespotcolor texlive-xetex texlive-xetex-devanagari texlive-xetex-itrans texlive-xetex-pstricks texlive-xetex-tibetan texlive-xetexconfig texlive-xetexfontinfo texlive-xetexko texlive-xetexref texlive-xevlna texlive-xfakebold texlive-xfor texlive-xgreek texlive-xhfill texlive-xifthen texlive-xii texlive-xii-lat texlive-xindex texlive-xint texlive-xits texlive-xits-fonts texlive-xkcdcolors texlive-xkeyval texlive-xlop texlive-xltabular texlive-xltxtra texlive-xml2pmx texlive-xmltex texlive-xmltexconfig texlive-xmpincl texlive-xmuthesis texlive-xnewcommand texlive-xoptarg texlive-xpatch texlive-xpdfopen texlive-xpeek texlive-xpiano texlive-xpicture texlive-xpinyin texlive-xprintlen texlive-xpunctuate texlive-xq texlive-xsavebox texlive-xsim texlive-xskak texlive-xstring texlive-xtab texlive-xtuthesis texlive-xunicode texlive-xurl texlive-xwatermark texlive-xyling texlive-xymtex texlive-xypic texlive-xypic-fonts texlive-xypic-tut-pt texlive-xytree texlive-yafoot texlive-yagusylo texlive-yaletter texlive-yannisgr texlive-yathesis texlive-yax texlive-yazd-thesis texlive-ycbook texlive-ydoc texlive-yfonts texlive-yfonts-t1 texlive-yfonts-t1-fonts texlive-yhmath texlive-yhmath-fonts texlive-yinit-otf texlive-yinit-otf-fonts texlive-york-thesis texlive-youngtab texlive-yplan texlive-yquant texlive-ytableau texlive-zapfchan texlive-zapfchan-fonts texlive-zapfding texlive-zapfding-fonts texlive-zbmath-review-template texlive-zebra-goodies texlive-zed-csp texlive-zhlineskip texlive-zhlipsum texlive-zhmetrics texlive-zhmetrics-uptex texlive-zhnumber texlive-zhspacing texlive-ziffer texlive-zlmtt texlive-zootaxa-bst texlive-zref texlive-zwgetfdate texlive-zwpagelayout texlive-zxjafbfont texlive-zxjafont texlive-zxjatype texlive-zztex texlive-collection-basic texlive-collection-bibtexextra texlive-collection-binextra texlive-collection-context texlive-collection-fontsextra texlive-collection-fontsrecommended texlive-collection-fontutils texlive-collection-formatsextra texlive-collection-games texlive-collection-humanities texlive-collection-langarabic texlive-collection-langchinese texlive-collection-langcjk texlive-collection-langcyrillic texlive-collection-langczechslovak texlive-collection-langenglish texlive-collection-langeuropean texlive-collection-langfrench texlive-collection-langgerman texlive-collection-langgreek texlive-collection-langitalian texlive-collection-langjapanese texlive-collection-langkorean texlive-collection-langother texlive-collection-langpolish texlive-collection-langportuguese texlive-collection-langspanish texlive-collection-latex texlive-collection-latexextra texlive-collection-latexrecommended texlive-collection-luatex texlive-collection-mathscience texlive-collection-metapost texlive-collection-music texlive-collection-pictures texlive-collection-plaingeneric texlive-collection-pstricks texlive-collection-publishers texlive-collection-xetex texlive-devel texlive-extratools texlive-filesystem texlive-scheme-basic texlive-scheme-context texlive-scheme-full texlive-scheme-gust texlive-scheme-infraonly texlive-scheme-medium texlive-scheme-minimal texlive-scheme-small texlive-scheme-tetex texlive-updmap-map vino vino-lang vorbis-tools vorbis-tools-lang wavpack wavpack-devel wireshark-devel wireshark-ui-qt yaml-cpp-devel FastCGI FastCGI-devel libfcgi0 perl-FastCGI sle-module-development-tools-release perl-PerlMagick ant ant-antlr ant-apache-bcel ant-apache-bsf ant-apache-log4j ant-apache-oro ant-apache-regexp ant-apache-resolver ant-commons-logging ant-javamail ant-jdepend ant-jmf ant-junit ant-manual ant-scripts ant-swing apache-commons-compress binutils-devel-32bit bsdtar ca-certificates-mozilla-prebuilt cargo cargo1.43 cargo1.43-doc rls1.43 rust rust1.43 rust1.43-analysis rust1.43-doc rust1.43-gdb rust1.43-src cblas-devel lapacke-devel libcblas3 liblapacke3 libcmark0_30_2 crash crash-devel crash-kmp-64kb crash-kmp-default crash-trace ctags cups-ddk cvs dash dpkg dpkg-devel firewall-macros flatpak-builder git git-arch git-cvs git-daemon git-doc git-email git-gui git-svn git-web gitk perl-Git glibc-devel-32bit glibc-devel-static glibc-utils gmp-devel-32bit libgmpxx4-32bit go go1.19 go1.19-doc go1.19-race go1.20 go1.20-doc go1.20-race google-gson gradle graphviz-perl groovy-lib httpcomponents-client indent jackson-dataformat-cbor jaxen jdom jdom2 xom jcl-over-slf4j jul-to-slf4j log4j-over-slf4j jetty-http jetty-io jetty-security jetty-server jetty-servlet jetty-util jetty-util-ajax jsr-305 jython kernel-docs kernel-obs-build kernel-source kernel-syms perl-DNS-LDNS libebl-plugins libgit2-1_3 libgit2-devel libjavascriptcoregtk-5_0-0 libwebkit2gtk-5_0-0 typelib-1_0-JavaScriptCore-5_0 typelib-1_0-WebKit2-5_0 webkit2gtk-5_0-injected-bundles libpcp-devel libpcp3 libpcp_gui2 libpcp_import1 libpcp_mmv1 libpcp_trace2 libpcp_web1 pcp pcp-conf pcp-devel pcp-doc pcp-import-iostat2pcp pcp-import-mrtg2pcp pcp-import-sar2pcp pcp-pmda-perfevent pcp-system-tools perl-PCP-LogImport perl-PCP-LogSummary perl-PCP-MMV perl-PCP-PMDA python3-pcp libprotoc20 protobuf-devel libtdsodbc0 libtidy-devel tidy log4j12-javadoc log4j12-manual maven maven-lib minlog nasm ncurses-devel-32bit netty-tcnative nvptx-tools ocaml ocaml-compiler-libs ocaml-compiler-libs-devel ocaml-ocamldoc ocaml-runtime ocaml-hivex ocaml-hivex-devel openldap2-devel-32bit pam-devel-32bit perl-Archive-Extract perl-Module-Load-Conditional perl-Authen-SASL perl-Config-IniFiles perl-Mail-SpamAssassin-Plugin-iXhash2 perl-Net-Libproxy perl-Net-SMTP-SSL perl-Switch perl-YAML-LibYAML perl-apparmor perl-doc perl-solv policycoreutils-devel python3-coverage python3-magic python3-ujson python3-tools rpm-build sccache subversion-bash-completion subversion-perl subversion-python subversion-tools testng valgrind valgrind-client-headers valgrind-devel velocity xmvn xmvn-minimal xmvn-connector xmvn-mojo xmvn-api xmvn-core xmvn-install xmvn-resolve xmvn-subst xorg-x11-server-sdk xstream zlib-devel-32bit python3-numpy-gnu-hpc python3-numpy-gnu-hpc-devel python3-numpy_1_17_3-gnu-hpc python3-numpy_1_17_3-gnu-hpc-devel sle-module-hpc-release apache2-mod_php7 php7 php7-bcmath php7-bz2 php7-calendar php7-cli php7-ctype php7-curl php7-dba php7-devel php7-dom php7-enchant php7-exif php7-fastcgi php7-fileinfo php7-fpm php7-ftp php7-gd php7-gettext php7-gmp php7-iconv php7-intl php7-json php7-ldap php7-mbstring php7-mysql php7-odbc php7-opcache php7-openssl php7-pcntl php7-pdo php7-pgsql php7-phar php7-posix php7-readline php7-shmop php7-snmp php7-soap php7-sockets php7-sodium php7-sqlite php7-sysvmsg php7-sysvsem php7-sysvshm php7-tidy php7-tokenizer php7-xmlreader php7-xmlrpc php7-xmlwriter php7-xsl php7-zip php7-zlib sle-module-legacy-release cyrus-sasl-bdb cyrus-sasl-bdb-crammd5 cyrus-sasl-bdb-digestmd5 cyrus-sasl-bdb-gs2 cyrus-sasl-bdb-gssapi cyrus-sasl-bdb-ntlm cyrus-sasl-bdb-otp cyrus-sasl-bdb-plain cyrus-sasl-bdb-scram cyrus-sasl-saslauthd-bdb cyrus-sasl-sqlauxprop-bdb dpdk dpdk-devel dpdk-kmp-default dpdk-thunderx dpdk-thunderx-devel dpdk-thunderx-kmp-default dpdk-tools libdpdk-20_0 gv libicu60_2 libicu60_2-bedata libicu60_2-ledata java-1_8_0-ibm java-1_8_0-ibm-alsa java-1_8_0-ibm-devel java-1_8_0-ibm-plugin java-1_8_0-openjdk java-1_8_0-openjdk-demo java-1_8_0-openjdk-devel java-1_8_0-openjdk-headless libcgroup-devel libcgroup-tools libcgroup1 libcgroup1-32bit libncurses5 libncurses5-32bit ncurses5-devel libopenssl-1_0_0-devel libopenssl10 libopenssl1_0_0 libopenssl1_0_0-hmac openssl-1_0_0 libopenvswitch-2_14-0 libovn-20_06-0 openvswitch openvswitch-devel openvswitch-ipsec openvswitch-pki openvswitch-test openvswitch-vtep ovn ovn-central ovn-devel ovn-docker ovn-host ovn-vtep python3-ovs php7-pear php7-pecl postgresql-llvmjit postgresql-llvmjit-devel postgresql14 postgresql14-contrib postgresql14-devel postgresql14-docs postgresql14-llvmjit postgresql14-llvmjit-devel postgresql14-plperl postgresql14-plpython postgresql14-pltcl postgresql14-server postgresql14-server-devel reiserfs-kmp-default telnet-server GraphicsMagick GraphicsMagick-devel libGraphicsMagick++-Q16-12 libGraphicsMagick++-devel libGraphicsMagick-Q16-3 libGraphicsMagick3-config libGraphicsMagickWand-Q16-2 perl-GraphicsMagick sle-module-packagehub-subpackages-release LibVNCServer-devel libvncclient1 libvncserver1 MozillaThunderbird MozillaThunderbird-translations-common MozillaThunderbird-translations-other libSDL2-2_0-0-32bit apache2-event python3-avahi binutils-gold capnproto libcapnp-devel cmark cmark-devel cmis-client libcmis-0_5-5 libcmis-c-0_5-5 libcmis-c-devel libcmis-devel dcraw dia dia-lang djvulibre eclipse-contributor-tools eclipse-equinox-osgi eclipse-pde eclipse-platform eclipse-swt eclipse-tests eclipse-equinox-osgi-bootstrap eclipse-pde-bootstrap eclipse-platform-bootstrap eclipse-swt-bootstrap eclipse-contributor-tools-bootstrap eclipse-tests-bootstrap libcamel-1_2-62 libedataserver-1_2-24 libedataserverui-1_2-2 ffmpeg libavdevice57 libavfilter6 ffmpeg-4 ffmpeg-4-libavcodec-devel ffmpeg-4-libavdevice-devel ffmpeg-4-libavfilter-devel ffmpeg-4-libavformat-devel ffmpeg-4-libavresample-devel ffmpeg-4-libavutil-devel ffmpeg-4-libpostproc-devel ffmpeg-4-libswresample-devel ffmpeg-4-libswscale-devel ffmpeg-4-private-devel libavcodec58_134 libavdevice58_13 libavfilter7_110 libavformat58_76 libavresample4_0 libavutil56_70 libpostproc55_9 libswresample3_9 libswscale5_9 flac libFLAC8-32bit freerdp freerdp-devel freerdp-proxy freerdp-server freerdp-wayland libfreerdp2 libuwac0-0 libwinpr2 uwac0-0-devel winpr2-devel libgd3-32bit go1.10 go1.10-doc go1.11 go1.11-doc go1.12 go1.12-doc go1.13 go1.13-doc golang-github-prometheus-alertmanager golang-github-prometheus-promu grafana grafana-status-panel helm-fish-completion icedtea-web icedtea-web-javadoc java-11-openjdk-javadoc java-1_8_0-openj9 java-1_8_0-openj9-accessibility java-1_8_0-openj9-demo java-1_8_0-openj9-devel java-1_8_0-openj9-headless java-1_8_0-openj9-src ldns libXpm4-32bit libconfuse-devel libconfuse0 libconfuse0-lang libdwarf-devel libdwarf-devel-static libdwarf-doc libdwarf-tools libdwarf1 libepubgen-0_1-1 libepubgen-devel libepubgen-devel-doc libexif12-32bit gdk-pixbuf-loader-libheif libheif-devel libixion-0_14-0 liblangtag-devel liblangtag-doc liblangtag1 liborcus-0_14-0 libraw-devel libraw-devel-static libraw-tools rsvg-view libsndfile1-32bit libtomcrypt-devel libtomcrypt-examples libtomcrypt0 libvorbis0-32bit libvorbisenc2-32bit libwebp6-32bit libwmf-0_2-7 libwmf-devel libwmf-gnome libwmf-tools libwpd-0_10-10 libwpd-devel libwpd-devel-doc libwpd-tools libxslt1-32bit nbd libsnmp30-32bit netty-javadoc netty-poms netty openconnect openconnect-devel openconnect-doc openconnect-lang python2-opencv libopenvswitch-2_11-0 python2-ovs php7-embed finch finch-devel libpurple libpurple-branding-upstream libpurple-devel libpurple-lang libpurple-plugin-sametime libpurple-tcl pidgin pidgin-devel libpkgconf-devel libpkgconf3 pkgconf libpodofo-devel libpodofo0_9_6 podofo postgresql14-test python2-Mako python2-PyJWT python2-Pygments python2-Werkzeug python2-ansi2html python3-ansi2html python2-atomicwrites python2-botocore python2-coverage python2-httplib2 python3-pycodestyle python3-pyflakes python3-pytest-html python2-pytest-metadata python3-pytest-metadata python3-pytest-rerunfailures python3-reportlab python2-rsa python2-ujson python2-waitress rust-cbindgen sbt sbt-bootstrap libspeex1-32bit nss-resolve terraform-provider-aws terraform-provider-azurerm terraform-provider-external terraform-provider-google terraform-provider-helm terraform-provider-kubernetes terraform-provider-local terraform-provider-null terraform-provider-random terraform-provider-tls tiff libtinyxml0 tinyxml-devel tinyxml-docs tmux transfig liburiparser1 uriparser uriparser-devel libZXing1 zxing-cpp-devel amazon-ssm-agent sle-module-public-cloud-release apache2-mod_wsgi aws-efs-utils aws-iam-authenticator aws-nitro-enclaves-binaryblobs-upstream aws-nitro-enclaves-cli system-group-ne google-compute-engine-oslogin google-guest-agent google-osconfig-agent kernel-azure kernel-azure-devel kernel-devel-azure kernel-source-azure kernel-syms-azure python3-aliyun-python-sdk-actiontrail python3-aliyun-python-sdk-airec python3-aliyun-python-sdk-alidns python3-aliyun-python-sdk-alimt python3-aliyun-python-sdk-arms python3-aliyun-python-sdk-bssopenapi python3-aliyun-python-sdk-cams python3-aliyun-python-sdk-cassandra python3-aliyun-python-sdk-cbn python3-aliyun-python-sdk-ccc python3-aliyun-python-sdk-cdn python3-aliyun-python-sdk-cdrs python3-aliyun-python-sdk-clickhouse python3-aliyun-python-sdk-cloudauth python3-aliyun-python-sdk-cloudesl python3-aliyun-python-sdk-cms python3-aliyun-python-sdk-codeup python3-aliyun-python-sdk-config python3-aliyun-python-sdk-core python3-aliyun-python-sdk-cr python3-aliyun-python-sdk-cs python3-aliyun-python-sdk-das python3-aliyun-python-sdk-dataworks-public python3-aliyun-python-sdk-dbfs python3-aliyun-python-sdk-dbs python3-aliyun-python-sdk-dcdn python3-aliyun-python-sdk-ddoscoo python3-aliyun-python-sdk-dds python3-aliyun-python-sdk-devops-rdc python3-aliyun-python-sdk-dg python3-aliyun-python-sdk-domain python3-aliyun-python-sdk-dts python3-aliyun-python-sdk-dybaseapi python3-aliyun-python-sdk-eais python3-aliyun-python-sdk-eci python3-aliyun-python-sdk-ecs python3-aliyun-python-sdk-ehpc python3-aliyun-python-sdk-elasticsearch python3-aliyun-python-sdk-emap python3-aliyun-python-sdk-emas-appmonitor python3-aliyun-python-sdk-emr python3-aliyun-python-sdk-ens python3-aliyun-python-sdk-ess python3-aliyun-python-sdk-et-industry-openapi python3-aliyun-python-sdk-facebody python3-aliyun-python-sdk-fnf python3-aliyun-python-sdk-ft python3-aliyun-python-sdk-gdb python3-aliyun-python-sdk-goodstech python3-aliyun-python-sdk-gpdb python3-aliyun-python-sdk-green python3-aliyun-python-sdk-hbase python3-aliyun-python-sdk-hbr python3-aliyun-python-sdk-hitsdb python3-aliyun-python-sdk-httpdns python3-aliyun-python-sdk-idrsservice python3-aliyun-python-sdk-idsp python3-aliyun-python-sdk-imageaudit python3-aliyun-python-sdk-imageenhan python3-aliyun-python-sdk-imageprocess python3-aliyun-python-sdk-imageseg python3-aliyun-python-sdk-imgsearch python3-aliyun-python-sdk-imm python3-aliyun-python-sdk-industry-brain python3-aliyun-python-sdk-iot python3-aliyun-python-sdk-ivpd python3-aliyun-python-sdk-kms python3-aliyun-python-sdk-live python3-aliyun-python-sdk-metering python3-aliyun-python-sdk-mpaas python3-aliyun-python-sdk-mts python3-aliyun-python-sdk-multimediaai python3-aliyun-python-sdk-nlp-automl python3-aliyun-python-sdk-ocr python3-aliyun-python-sdk-ons python3-aliyun-python-sdk-onsmqtt python3-aliyun-python-sdk-oos python3-aliyun-python-sdk-openanalytics-open python3-aliyun-python-sdk-opensearch python3-aliyun-python-sdk-outboundbot python3-aliyun-python-sdk-polardb python3-aliyun-python-sdk-polardbx python3-aliyun-python-sdk-privatelink python3-aliyun-python-sdk-push python3-aliyun-python-sdk-pvtz python3-aliyun-python-sdk-qualitycheck python3-aliyun-python-sdk-quickbi-public python3-aliyun-python-sdk-rds python3-aliyun-python-sdk-reid python3-aliyun-python-sdk-ros python3-aliyun-python-sdk-rtc python3-aliyun-python-sdk-sae python3-aliyun-python-sdk-safconsole python3-aliyun-python-sdk-sas python3-aliyun-python-sdk-scdn python3-aliyun-python-sdk-servicemesh python3-aliyun-python-sdk-sgw python3-aliyun-python-sdk-slb python3-aliyun-python-sdk-sls python3-aliyun-python-sdk-smartag python3-aliyun-python-sdk-smarthosting python3-aliyun-python-sdk-smc python3-aliyun-python-sdk-tdsr python3-aliyun-python-sdk-teambition-aliyun python3-aliyun-python-sdk-vcs python3-aliyun-python-sdk-videoenhan python3-aliyun-python-sdk-videorecog python3-aliyun-python-sdk-videoseg python3-aliyun-python-sdk-vod python3-aliyun-python-sdk-voicenavigator python3-aliyun-python-sdk-vpc python3-aliyun-python-sdk-vs python3-aliyun-python-sdk-waf-openapi python3-aliyun-python-sdk-xtrace python3-atomicwrites python3-aiohttp python3-keystoneclient python3-protobuf python3-yarl rmt-server-pubcloud terraform apache2-devel apache2-doc apache2-worker sle-module-server-applications-release apache2-mod_auth_openidc apache2-mod_security2 clone-master-clean-up dhcp-relay dhcp-server dovecot23 dovecot23-backend-mysql dovecot23-backend-pgsql dovecot23-backend-sqlite dovecot23-devel dovecot23-fts dovecot23-fts-lucene dovecot23-fts-solr dovecot23-fts-squat erlang erlang-epmd freeradius-server freeradius-server-devel freeradius-server-krb5 freeradius-server-ldap freeradius-server-libs freeradius-server-mysql freeradius-server-perl freeradius-server-postgresql freeradius-server-python3 freeradius-server-sqlite freeradius-server-utils libtpms-devel libtpms0 libvirt-bash-completion libmariadb-devel libmariadb_plugins nginx nginx-source pam_radius pgadmin4 pgadmin4-doc pgadmin4-web postgresql-jdbc libecpg6 postgresql15-contrib postgresql15-devel postgresql15-docs postgresql15-plperl postgresql15-plpython postgresql15-pltcl postgresql15-server postgresql15-server-devel python3-Twisted erlang-rabbitmq-client rabbitmq-server rabbitmq-server-plugins redis libshibsp-lite8 libshibsp9 shibboleth-sp shibboleth-sp-devel squid stunnel libvirglrenderer0 libvirglrenderer1 virglrenderer-devel virt-v2v virt-v2v-bash-completion virt-v2v-man-pages-ja virt-v2v-man-pages-uk vsftpd yast2-samba-provision salt-transactional-update sle-module-transactional-server-release nodejs18 nodejs18-devel nodejs18-docs npm18 sle-module-web-scripting-release php-composer2 php8-pear php8-pecl tomcat tomcat-admin-webapps tomcat-el-3_0-api tomcat-jsp-2_3-api tomcat-lib tomcat-servlet-4_0-api tomcat-webapps sle-we-release colord colord-lang libavcodec-devel libavformat-devel libavformat57 libavresample-devel libavresample3 gegl-0_3 libgegl-0_3-0 typelib-1_0-Gegl-0_3 libXpm-tools libraw16 libwebp6 libntfs-3g-devel libntfs-3g87 ntfs-3g ntfsprogs libpurple-client0 libpurple0 libpoppler117 libstdc++6 cups-filters cups-filters-devel python3-Flask geoipupdate geoipupdate-legacy cups cups-client cups-config cups-devel libcups2 libcupscgi1 libcupsimage2 libcupsmime1 libcupsppdc1 python3-jmespath python3-ply python3-simplejson python3-pyzmq libcap-devel libcap-progs libcap2 libcap2-32bit libpsx2 python3-websocket-client perl perl-base perl-base-32bit perl-core-DB_File samba-tool libasan8 libasan8-32bit libatomic1 libatomic1-32bit libgcc_s1 libgcc_s1-32bit libgfortran5 libgfortran5-32bit libgomp1 libgomp1-32bit libhwasan0 libitm1 libitm1-32bit liblsan0 libobjc4 libobjc4-32bit libquadmath0 libquadmath0-32bit libstdc++6-32bit libstdc++6-locale libstdc++6-pp libstdc++6-pp-32bit libtsan2 libubsan1 libubsan1-32bit suse-module-tools python3-tornado xtrans re2c python3-configobj postfix postfix-devel postfix-doc postfix-ldap gawk open-vm-tools-containerinfo libicu73_2 libicu73_2-bedata libicu73_2-devel libicu73_2-doc libicu73_2-ledata libstdc++6-devel-gcc12 libeconf0 python3-gevent glibc glibc-32bit glibc-devel glibc-extra glibc-i18ndata glibc-info glibc-lang glibc-locale glibc-locale-base glibc-locale-base-32bit glibc-profile nscd dav1d-devel libdav1d6 gstreamer-plugin-pipewire libpipewire-0_3-0 pipewire pipewire-lang pipewire-modules-0_3 pipewire-spa-plugins-0_2 pipewire-spa-tools pipewire-tools gsl-devel libgsl25 libgslcblas0 libcue2 rustup bouncycastle bouncycastle-pg bouncycastle-pkix bouncycastle-util go1.20-openssl go1.20-openssl-doc go1.20-openssl-race cpp13 cross-nvptx-gcc13 cross-nvptx-newlib13-devel gcc13 gcc13-32bit gcc13-PIE gcc13-c++ gcc13-c++-32bit gcc13-fortran gcc13-fortran-32bit gcc13-info gcc13-locale libstdc++6-devel-gcc13 libstdc++6-devel-gcc13-32bit jsch guava jtidy cargo1.71 rust1.71 libjavascriptcoregtk-6_0-1 libwebkitgtk-6_0-4 webkitgtk-6_0-injected-bundles cpp12 cross-nvptx-gcc12 cross-nvptx-newlib12-devel gcc12 gcc12-32bit gcc12-PIE gcc12-c++ gcc12-c++-32bit gcc12-fortran gcc12-fortran-32bit gcc12-info gcc12-locale libstdc++6-devel-gcc12-32bit cross-nvptx-gcc7 cross-nvptx-newlib7-devel gcc7-32bit gcc7-ada gcc7-c++-32bit gcc7-fortran-32bit gcc7-info gcc7-locale gcc7-objc libada7 libasan4-32bit libcilkrts5-32bit libstdc++6-devel-gcc7-32bit libubsan0-32bit go1.21 go1.21-doc go1.21-race cargo1.72 rust1.72 go1.19-openssl go1.19-openssl-doc go1.19-openssl-race python3-scipy-gnu-hpc python3-scipy_1_3_3-gnu-hpc libmca_common_dstore1 libpmix2 pmix pmix-devel pmix-headers pmix-mca-params pmix-plugin-munge pmix-plugins pmix-test ntp postfix-bdb postfix-bdb-lmdb kernel-livepatch-5_14_21-150500_13_5-rt kernel-default-livepatch kernel-default-livepatch-devel kernel-livepatch-5_14_21-150500_55_7-default kernel-livepatch-5_14_21-150500_53-default kernel-livepatch-5_14_21-150500_11-rt kernel-livepatch-5_14_21-150500_55_12-default kernel-livepatch-5_14_21-150500_13_11-rt kernel-livepatch-5_14_21-150500_55_19-default kernel-livepatch-5_14_21-150500_13_14-rt kernel-livepatch-5_14_21-150500_55_28-default kernel-livepatch-5_14_21-150500_13_18-rt kernel-livepatch-5_14_21-150500_13_21-rt kernel-livepatch-5_14_21-150500_55_31-default python2-Flask golang-github-vpenso-prometheus_slurm_exporter python2-sqlparse mariadb-galera python2-jmespath python3-pyzmq-devel golang-github-prometheus-prometheus dav1d libluajit-5_1-2 luajit libQt6Concurrent6 libQt6OpenGLWidgets6 libQt6PrintSupport6 libQt6Sql6 libQt6Test6 libQt6Xml6 qt6-base-common-devel qt6-base-devel qt6-concurrent-devel qt6-core-devel qt6-core-private-devel qt6-dbus-devel qt6-gui-devel qt6-gui-private-devel qt6-kmssupport-devel-static qt6-kmssupport-private-devel qt6-network-devel qt6-opengl-devel qt6-opengl-private-devel qt6-openglwidgets-devel qt6-platformsupport-devel-static qt6-printsupport-devel qt6-sql-devel qt6-sql-sqlite qt6-test-devel qt6-widgets-devel qt6-widgets-private-devel qt6-xml-devel python2-humanfriendly perl-32bit iperf iperf-devel libiperf0 gcc13-ada gcc13-ada-32bit gcc13-d gcc13-d-32bit gcc13-go gcc13-go-32bit gcc13-m2 gcc13-m2-32bit gcc13-obj-c++ gcc13-obj-c++-32bit gcc13-objc gcc13-objc-32bit libada13 libada13-32bit libgdruntime4 libgdruntime4-32bit libgo22 libgo22-32bit libgphobos4 libgphobos4-32bit libm2cor18 libm2cor18-32bit libm2iso18 libm2iso18-32bit libm2log18 libm2log18-32bit libm2min18 libm2min18-32bit libm2pim18 libm2pim18-32bit pipewire-libpulse-0_3 libgstaudio-1_0-0-32bit libgsttag-1_0-0-32bit libgstvideo-1_0-0-32bit pipewire-alsa pipewire-doc pipewire-libjack-0_3 pipewire-libjack-0_3-devel pipewire-pulseaudio python3-scipy libwebp7-32bit gcc12-ada gcc12-go libada12 libgo21 libpython2_7-1_0 python python-base python-curses python-devel python-gdbm python-xml vpx-tools yq google-cloud-sap-agent cloud-init cloud-init-config-suse amazon-ecs-init azure-cli-core python3-humanfriendly python3-jsondiff python3-knack python3-azure-core python3-azure-storage-blob python3-brotlipy libpython3_11-1_0 python311 python311-base python311-curses python311-dbm python311-devel python311-doc python311-doc-devhelp python311-idle python311-tk python311-tools sle-module-python3-release python311-pip python311-libxml2 prometheus-sap_host_exporter sle-module-sap-applications-release libmariadbd-devel libmariadbd19 mariadb mariadb-client mariadb-errormessages mariadb-tools frr frr-devel libfrr0 libfrr_pb0 libfrrcares0 libfrrfpm_pb0 libfrrospfapiclient0 libfrrsnmp0 libfrrzmq0 libmlag_pb0 xen xen-devel xen-tools xen-tools-xendomains-wait-disk libopenvswitch-3_1-0 libovn-23_03-0 openvswitch3 openvswitch3-devel openvswitch3-ipsec openvswitch3-pki openvswitch3-test openvswitch3-vtep ovn3 ovn3-central ovn3-devel ovn3-docker ovn3-host ovn3-vtep python3-ovs3 libvirt libvirt-client libvirt-client-qemu libvirt-daemon libvirt-daemon-config-network libvirt-daemon-config-nwfilter libvirt-daemon-driver-interface libvirt-daemon-driver-libxl libvirt-daemon-driver-network libvirt-daemon-driver-nodedev libvirt-daemon-driver-nwfilter libvirt-daemon-driver-qemu libvirt-daemon-driver-secret libvirt-daemon-driver-storage libvirt-daemon-driver-storage-core libvirt-daemon-driver-storage-disk libvirt-daemon-driver-storage-iscsi libvirt-daemon-driver-storage-iscsi-direct libvirt-daemon-driver-storage-logical libvirt-daemon-driver-storage-mpath libvirt-daemon-driver-storage-rbd libvirt-daemon-driver-storage-scsi libvirt-daemon-hooks libvirt-daemon-qemu libvirt-daemon-xen libvirt-devel libvirt-doc libvirt-lock-sanlock libvirt-nss libiniparser1 rmt-server rmt-server-config python3-constantly python3-hyperlink python3-zope.interface librabbitmq-devel librabbitmq4 bind bind-doc redis7 grub2-x86_64-xen qemu qemu-SLOF qemu-accel-tcg-x86 qemu-arm qemu-audio-alsa qemu-audio-dbus qemu-audio-pa qemu-audio-spice qemu-block-curl qemu-block-iscsi qemu-block-rbd qemu-block-ssh qemu-chardev-baum qemu-chardev-spice qemu-guest-agent qemu-hw-display-qxl qemu-hw-display-virtio-gpu qemu-hw-display-virtio-gpu-pci qemu-hw-display-virtio-vga qemu-hw-s390x-virtio-gpu-ccw qemu-hw-usb-host qemu-hw-usb-redirect qemu-ipxe qemu-ksm qemu-kvm qemu-lang qemu-ppc qemu-s390x qemu-seabios qemu-sgabios qemu-skiboot qemu-ui-curses qemu-ui-dbus qemu-ui-gtk qemu-ui-opengl qemu-ui-spice-app qemu-ui-spice-core qemu-vgabios qemu-x86 libxmltooling-devel libxmltooling-lite9 libxmltooling9 xmltooling-schemas salt-api salt-cloud salt-fish-completion salt-master salt-proxy salt-ssh salt-standalone-formulas-configuration salt-syndic libcjose-devel libcjose0 krb5-plugin-kdb-ldap krb5-server postfix-mysql libfpm_pb0 libospf0 libospfapiclient0 libquagga_pb0 libzebra1 quagga quagga-devel apache-commons-fileupload apache2-mod_php8 php8 php8-bcmath php8-bz2 php8-calendar php8-cli php8-ctype php8-curl php8-dba php8-devel php8-dom php8-embed php8-enchant php8-exif php8-fastcgi php8-fileinfo php8-fpm php8-ftp php8-gd php8-gettext php8-gmp php8-iconv php8-intl php8-ldap php8-mbstring php8-mysql php8-odbc php8-opcache php8-openssl php8-pcntl php8-pdo php8-pgsql php8-phar php8-posix php8-readline php8-shmop php8-snmp php8-soap php8-sockets php8-sodium php8-sqlite php8-sysvmsg php8-sysvsem php8-sysvshm php8-test php8-tidy php8-tokenizer php8-xmlreader php8-xmlwriter php8-xsl php8-zip php8-zlib cluster-md-kmp-default dlm-kmp-default gfs2-kmp-default ocfs2-kmp-default ctdb doxygen2man libqb-tests libqb-tools bluez-cups kernel-default-extra gstreamer-plugins-ugly gstreamer-plugins-ugly-lang libgsl23 libcue-devel (aarch64|i586|ppc64le|s390x|x86_64) 0:2.4.8+git0.d1f8d41e0-150400.3.6.1 15.5 (aarch64|ppc64le|s390x|x86_64) 0:1.3.1+git.1676027782.ad3c0e9-150200.3.21.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.1.4-3.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.1.4-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.1.4-5.3.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.4.1-150000.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.15.0-150000.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.2.2-4.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.3.5-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.0.8-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.0.4-150000.4.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.7.2-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.2.4-150000.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.1.3-150000.3.4.1 (x86_64) 0:0.1-150400.3.3.1 0:22.3.5-150500.75.2 0:21.2.4-150400.68.12.1 0:1.0.0-150500.75.2 0:2.12.1-150400.1.4 0:7.62-150400.1.5 0:1.012.2-1.24 (noarch) 0:3.1-11.3.2 (noarch) 0:2.6-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.4.51-150400.6.6.1 0:3.0.4-150500.9.3 0:3.0.4-150500.9.1 0:1.6.1-150300.18.5.1 0:2.6-150400.4.7 0:2.6-150400.4.5 0:2.6-150400.4.6 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.60.8-3.3.1 0:3.0.6-150400.2.13 0:4.5.13-150500.1.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.8-150400.7.3.1 (noarch) 0:0.8-150400.7.3.1 (x86_64) 0:0.8-150400.7.3.1 0:0.8-150400.7.3.1 0:4.4-150400.25.22 0:7.0-150400.25.22 (noarch) 0:5.2-150200.11.3.1 0:20180314-150400.28.5 (aarch64|i586|ppc64le|s390x|x86_64) 0:9.16.6-22.7.1 0:9.16.6-150300.22.27.1 0:9.16.38-150400.5.20.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.39-150100.7.40.1 0:3.9.0-150000.4.13.2 0:0.3.21-150500.2.6 0:5.65-150500.1.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.0.7-3.3.1 (x86_64) 0:1.0.7-3.3.1 0:0.7.0-150500.1.1 0:1.35.0-150500.8.2 0:1.0.8-150400.1.122 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.19.0-150000.3.20.1 0:1.19.0-150000.3.20.1 (noarch) 0:2.60-150200.27.1 0:1.16.0-150400.9.6 (aarch64|ppc64le|s390x|x86_64) 0:16.2.9.536+g41a9f9a5573-150400.3.3.1 0:16.2.11.58+g38d6afd3b78-150400.3.6.1 0:4.1-150400.19.4 (aarch64|i586|ppc64le|s390x|x86_64) 0:6.15-150400.3.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.103.8-150000.3.44.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.4.5-150400.4.3.1 0:1.4.5-1.46 0:8.32-150400.7.5 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.12.0-150400.3.6.1 0:2.13-150400.1.98 0:7.5.0+r278197-4.30.1 0:4.2-150400.84.3.1 0:1.5.7-150400.84.3.1 (ppc64le|x86_64) 0:2.4-4.5.1 0:2.4.3-150400.1.110 (aarch64|i586|ppc64le|s390x|x86_64) 0:8.0.1-150400.5.23.1 (x86_64) 0:8.0.1-150400.5.23.1 0:2.1.28-150500.1.1 0:2.1.28-150500.1.2 0:4.8.30-150000.7.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.12.2-150400.18.5.1 0:1.12.2-150400.18.5.1 (x86_64) 0:1.12.2-150400.18.5.1 0:0.108-1.29 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.3.6.P1-6.11.1 0:2.2.27-150300.3.5.1 (aarch64|i586|x86_64) 0:3.4-150400.16.8.1 0:2.86-150400.14.3 0:055+suse.360.g076f1113-150500.1.4 0:0.7.3-2.16 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.46.4-150400.3.3.1 (x86_64) 0:1.46.4-150400.3.3.1 0:111-2.31 (aarch64|i586|ppc64le|s390x|x86_64) 0:27.2-150400.3.6.1 (noarch) 0:27.2-150400.3.6.1 0:1.6.6-1.17 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.4.4-150400.3.9.1 (x86_64) 0:2.4.4-150400.3.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.32-7.8.1 (noarch) 0:5.32-7.8.1 (x86_64) 0:5.32-7.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.3.2-3.9.1 0:1.3.2-150000.3.11.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.10.4-150000.4.12.1 (x86_64) 0:2.10.4-150000.4.12.1 0:2.10.4-150000.4.12.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.0.10-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.9.7-3.3.1 (aarch64|i586|x86_64) 0:12-150100.11.10.1 0:1.1.37-3.11.2 0:7.6.4-1.16 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.2.5-11.3.1 0:2.2.5-11.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.42.9-150400.5.6.1 (noarch) 0:2.42.9-150400.5.6.1 (x86_64) 0:2.42.9-150400.5.6.1 0:2.42.9-150400.5.6.1 0:2.52.9-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:9.52-3.32.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.2.1-150000.4.8.1 0:5.2.1-150000.4.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.35.3-150300.10.27.1 0:2.35.3-150300.10.27.1 0:2.70.1-150400.1.6 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.70.5-150400.3.8.1 (noarch) 0:2.70.5-150400.3.8.1 (x86_64) 0:2.70.5-150400.3.8.1 0:2.70.5-150400.3.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:6.1.2-4.9.1 (x86_64) 0:6.1.2-4.9.1 0:6.1.2-4.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.5.0-150100.3.23.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.2.27-150300.3.5.1 (noarch) 0:2.2.27-150300.3.5.1 0:1.0.8-150400.1.7 0:1.3.11-150000.4.3.1 0:2.48.0-150400.1.165 0:1.22.4-150400.3.4 0:1.22.4-150400.3.41 0:2.06-150500.27.4 0:1.22.0-150500.1.1 0:1.22.0-150500.1.2 0:1.22.0-150500.2.1 0:2.24.33-150400.2.11 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.4.0-150400.3.6.1 (x86_64) 0:3.4.0-150400.3.6.1 0:3.4.0-150400.3.6.1 0:1.3.21-150400.2.10 0:3.21.10-150400.3.5.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:69.1-7.3.2 (noarch) 0:69.1-7.3.2 0:1.8.18.238.gb7adc1d-150400.1.14 0:0.8.2-5.35 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.29-4.3.1 0:0.7.8.6-150500.44.1 0:0.2.0-150500.44.1 0:2.1.8-150500.44.1 (noarch) 0:2.13.0-150200.3.6.1 0:2.13.0-150200.3.6.1 (noarch) 0:2.13.4.2-150200.3.12.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.0.14-3.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:11.0.9.0-3.48.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:17.0.7.0-150400.3.18.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.13-3.3.1 (x86_64) 0:0.13-3.3.1 0:1.0.2+git42.ge1e25ed-150500.1.2 0:5.14.21-150500.53.2 (aarch64|ppc64le|s390x|x86_64) 0:5.14.21-150400.24.60.1.150400.24.24.3 0:20230320-150500.1.1 (noarch) 0:6.3.2-150400.4.14.1 0:6.3.2-150400.4.14.1 0:0.9.4+71+suse.c648a77-150500.1.2 0:1.20.1-150500.1.2 0:2.6.2-150500.1.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.7.0-4.6.1 0:1.7.0-150000.4.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:590-150400.3.3.1 0:4.9.2-150400.1.8 0:1.0.7-1.22 0:3.22-1.26 0:1.0.9-1.25 0:5.15.8+kde185-150500.2.1 0:5.15.8+kde8-150500.1.4 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.6.5-3.9.1 (x86_64) 0:1.6.5-3.9.1 (noarch) 0:1.6.5-3.9.1 0:1.6.5-150000.3.27.1 0:1.2.0-1.18 0:1.1.15-1.18 0:1.1.2-1.23 0:1.3.3-1.30 0:6.0.0-150400.1.4 0:1.5.4-1.17 0:2.0.3-1.17 0:1.7.9-3.2.1 0:1.1.3-1.22 0:1.0.3-1.24 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.5.12-150000.3.7.2 0:3.5.12-150000.3.7.2 0:1.5.1-2.17 0:0.9.10-1.30 0:1.1.5-2.24 0:1.2.3-1.24 0:1.0.11-1.23 0:1.0.10-1.23 0:1.12.0-150500.2.6 0:1.1.4-1.24 0:1.1.4-1.23 0:3.2.0-150400.1.8 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.5.1-150400.3.9.1 0:3.5.1-150400.3.12.1 0:2.37.4-150500.7.16 0:2.37.4-150500.7.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.5.0-150400.3.3.1 0:0.5.0-150400.3.3.1 0:1.1.0-150500.1.1 0:1.0.7-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.8.7-3.3.17 0:0.8.7-3.3.17 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.99.beta19.git20171003-150200.11.9.1 0:0.99.beta19.git20171003-150200.11.9.1 0:2.5.3-1.27 0:1.4.5-150400.4.3.1 0:20230214-150500.2.1 0:0.6.13-150400.9.5 0:8.6.0-150400.1.6 0:1.1.3-1.23 0:2.25.0-150500.7.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.0.6-150.4.1 0:2.1.8-2.23 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.99.9-150400.3.3.1 0:0.99.9-150400.3.3.1 0:3.79.4-150400.3.29.1 0:1.9.4-150500.10.19 0:1.22.0-150500.1.3 0:1.3.1-150400.3.3.1 0:3.8.1-150500.2.25 0:65.1-150200.4.5.1 0:1.34-3.2.2 0:2.2.0-3.6.1 0:1.21.0-150500.1.2 0:2.5.2-150500.8.3 0:2.9-1.24 0:2.0.14-150000.3.28.1 0:2.38.6-150400.4.39.1 0:2.1-3.2.1 0:62.3.0-150400.15.7 0:8.2.2-150400.15.9 0:0.13-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.3.5-150000.4.6.1 0:1.3.5-150000.4.6.1 0:2.12-150400.1.10 0:2.4.46-150200.14.11.2 0:5.3.6-3.6.1 0:1.9.3-150400.1.7 0:2.10-2.22 0:3.1.13-3.30.1 0:2.2.4-1.41 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.9.57-150000.3.3.1 0:0.9.57-150000.3.3.1 0:8.15.2-150000.8.9.1 0:1.2.13-150500.2.3 0:3.100-150000.3.2.1 0:4.0.2-3.3.1 0:1.26.4-1.15 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.6-3.8.19 0:0.6-3.14.1 0:6.1-150000.5.15.1 0:10.80.1-3.11.1 0:1.40.0-6.1 0:1.38.6-150500.1.2 0:2.6.2-150000.3.3.1 0:2.3.9-150400.14.5 0:6.7.0-150000.3.3.1 0:2.3.0-150000.3.8.1 0:1.1.1l-150500.15.4 0:3.0.8-150500.3.1 0:1.1.1l-150400.1.5 0:1.3.1-150000.3.8.1 0:1.10.0-150500.1.3 0:2022.7-150500.1.3 0:0.23.22-150500.6.1 0:0.9.13.1-150200.4.18.1 0:1.50.4-150400.1.5 0:1.10.1-150400.1.7 0:8.45-150000.20.13.1 0:10.39-150400.4.6.1 0:1.9.4-150400.1.9 0:0.40.0-150400.3.3.1 0:1.2.57-2.18 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.6.34-3.9.1 (x86_64) 0:1.6.34-3.9.1 0:1.6.34-3.9.1 0:121-150500.1.6 0:23.01.0-150500.1.2 0:0.79.0-150200.3.8.1 0:15.3-150200.5.9.1 0:3.3.15-150000.7.31.1 0:1.3.2-150200.3.3.1 0:3.9.2-150200.4.19.2 0:0.4.17-150400.1.8 0:3.6.15-150300.10.45.1 0:2.0.6+20220323.758044b-150500.1.2 0:9.0.2-150200.3.3.1 0:10.3.1-1.1 0:1.7.0-6.3.1 0:1.0.0-1.27 0:2.5.9-150000.4.26.1 0:4.13.13+git.539.fdbc44a8598-3.20.2 0:4.17.7+git.330.4057cd7a27a-150500.1.2 0:2.5.3-150400.2.4 0:1.3.9-2.31 0:1.0.3-2.18 0:4.7.0+44-150500.2.1 0:0.4.8-1.29 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.0.28-5.5.1 0:1.0.28-150000.5.17.1 0:5.7.3-10.12.1 0:5.9.3-150300.15.8.1 0:0.7.23-150400.3.3.1 0:2.74.2-150400.1.6 0:3.0.4-150400.1.6 0:1.2-150000.3.5.2 0:0.41-150500.1.4 0:3.39.3-150000.3.20.1 0:0.9.6-150400.1.5 0:1.9.0-4.13.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.9.0-4.13.1 0:249.16-150400.8.25.7 0:1.11.1-4.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.13-4.5.1 (x86_64) 0:4.13-4.5.1 0:5.4.0-3.2.1 0:4.0.9-150000.45.25.1 0:1.2.6-150300.3.17.1 0:0.3.15-150400.1.10 0:3.1.0-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.1.6-3.6.1 0:1.1.10-3.9.1 0:2.9.2-150400.3.3.1 0:1.6.8-150100.10.8.1 0:1.1.2-150400.3.3.1 0:1.44.2-150500.1.1 0:9.0.0-150500.4.3 0:12.2.0-150300.26.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.3.6-4.3.1 0:1.3.6-150000.4.5.2 0:1.11.0-150400.1.5 0:5.4.0-150000.4.15.1 0:1.0.3-3.2.1 0:3.6.13-150000.3.89.1 0:2.4.16-3.31.1 0:3.2.3-1.28 0:1.3.0-150400.1.13 0:2.10.3-150500.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.1.34-150400.3.3.1 0:1.1.34-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.1.0-150000.4.3.1 0:2.1.0-150000.4.3.1 0:0.1.7-1.17 0:0.6.3-150400.4.3.1 0:1.6.2-4.30 0:1.8.0-150400.1.7 0:4.2.3-3.15.4 0:1.5.0-150400.3.3.1 0:0.13.69-3.10.1 (noarch) 0:1.2.17-4.9.1 0:4.8.1-150400.10.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.18.1-150400.3.7.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.3.6-3.6.1 (x86_64) 0:5.3.6-3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.1.8-3.18.1 0:5.9.1-150400.1.8 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.1.37-3.8.1 0:2.7.1-1.19 (aarch64|ppc64le|x86_64) 0:0.5.0-150400.3.3.1 0:4.34.1-150000.3.26.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.10.1-3.8.1 (noarch) 0:1.10.1-3.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:6.1-5.9.1 (x86_64) 0:6.1-5.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.7.3-10.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.9.3-150300.15.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:10.80.1-3.8.2 0:2.1.1-150500.20.2 0:7.92-150400.1.8 (aarch64|i586|ppc64le|s390x|x86_64) 0:6.7.0-150000.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.4.46-150200.14.8.1 (x86_64) 0:2.4.46-150200.14.8.1 (noarch) 0:2.4.46-150200.14.8.1 0:0.22.0-150400.1.7 (aarch64|i586|ppc64le|s390x|x86_64) 0:8.4p1-3.9.1 0:2.4-1.96 0:2.4.13-1.36 0:2.1-2.27 0:1.2.0-150400.2.4 0:2.26-1.7 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.7.6-150000.5.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:8.45-20.10.1 (x86_64) 0:8.45-20.10.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:10.39-150400.4.6.1 (noarch) 0:1.60-3.3.1 (noarch) 0:0.27-1.6.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.642-3.9.1 0:2.150000-1.22 0:3.72-1.26 (noarch) 0:6.01-150000.3.5.1 0:3.4.5-12.13.1 (noarch) 0:2.009-150000.3.3.1 (noarch) 0:3.52-3.3.1 0:2021.20210325.svn30357-150400.29.15 (aarch64|i586|ppc64le|s390x|x86_64) 0:20201225-150400.5.8.1 (noarch) 0:20201225-150400.5.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.40.0-150400.3.3.1 0:3.1-150400.1.5 0:15-150500.8.19 (aarch64|i586|ppc64le|s390x|x86_64) 0:15.3-150200.5.9.1 0:1.3.11-150500.1.2 0:2.7.9-150500.1.2 0:3.22-2.34 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.3.15-7.7.26 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.3.2-150200.3.3.1 (noarch) 0:2.8.0-3.3.1 (noarch) 0:3.4.2-150200.3.6.1 (noarch) 0:2.10.1-3.5.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.38.0-150400.3.6.1 (noarch) 0:1.0.7-150000.3.3.1 (noarch) 0:2.4.0-150200.3.6.2 (noarch) 0:2.6.1-4.3.1 (noarch) 0:1.0.1-150300.3.3.1 (noarch) 0:0.24.0-3.2.1 (noarch) 0:2018.1.18-150000.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.13.2-3.2.5 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.3.2-150400.16.6.1 (noarch) 0:1.5.0-3.5.1 (noarch) 0:0.18.2-150300.3.3.1 (noarch) 0:0.19.0-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.17.3-150400.23.3.1 (noarch) 0:1.8.1-5.6.1 (noarch) 0:0.4.2-3.2.1 (noarch) 0:2.17-3.2.1 (noarch) 0:3.4.2-3.4.1 0:2.1.75-150500.1.4 (noarch) 0:1.3-3.3.4 (noarch) 0:0.4.2-3.3.1 (noarch) 0:1.25.10-4.3.1 (noarch) 0:1.4.3-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.6.15-150300.10.45.1 0:2.8.0-3.3.1 0:18.3.0-1.31 0:3.4.2-150200.3.6.1 0:2.10.1-3.10.2 0:0.38.0-150400.3.6.1 0:1.0.7-150000.3.3.1 0:2.4.0-150200.3.6.2 0:5.4.1-1.1 0:2.6.1-4.3.1 0:1.3.22-2.1 0:1.0.1-150300.3.3.1 0:2018.1.18-150000.3.3.1 0:3.3.2-150400.16.6.1 0:0.20.24-150400.1.4 0:0.13.3-3.7.1 0:0.18.2-150300.3.3.1 0:0.19.0-3.3.1 0:4.9.1-150500.1.2 0:1.17.3-150400.23.3.1 0:2.4.3-150100.6.18.1 0:1.10.0-150100.5.12.1 0:0.4.7-150400.1.4 0:1.7.0-150400.8.4 0:2.24.0-1.24 0:3.4.2-150000.3.7.1 0:3005.1-150500.2.13 0:0.4.2-3.3.1 0:2.1.54-150500.6.2 0:1.25.10-4.3.1 0:1.4.3-150000.3.6.1 0:0.32.3-150100.6.5.1 0:7.1.0-150500.47.15 (aarch64|i586|ppc64le|s390x|x86_64) 0:9.0.2-150200.3.3.1 0:0.9.0+0-150500.1.21 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.1.1-150400.4.9.1 0:4.14.3-150300.55.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.5.9-4.20.1 0:1.16.1-3.3.1 0:1.8.5-150400.14.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.16.1-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.8.5-150400.14.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.13.6+git.211.555d60b24ba-3.7.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.3-3.2.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.6.2-5.3.1 (noarch) 0:4.8.1-150400.10.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.8.1-150400.10.6.1 0:4.15.2-2.21 (aarch64|x86_64) 0:15.7-150300.4.16.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.1.41-4.11.1 0:1.7.3.2-4.10 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.0.6-3.2.1 (i586|x86_64) 0:0.44-3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.2-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.39.3-150000.3.20.1 (x86_64) 0:3.39.3-150000.3.20.1 0:4.4-1.1 0:5.9.7-150500.3.4 0:1.14.1-150400.3.8 0:1.9.12p1-150500.5.1 (noarch) 0:3.1.21-150300.7.35.15.1 (noarch) 0:1.2.2-150000.3.13.1 (noarch) 0:20190513-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.34-150000.3.31.1 (noarch) 0:1.34-150000.3.31.1 0:20170711_1.10.2-150400.1.7 0:4.99.1-150400.1.8 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.4.0-3.2.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.0.9-5.9.1 (x86_64) 0:4.0.9-5.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.1.0-150400.3.3.1 0:5.2-150400.4.6 0:2021.10-150400.4.11.1 (aarch64) 0:2021.10-150400.4.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2021.10-150400.4.8.1 (i586|x86_64) 0:20230214-150200.21.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.9.2-150400.3.3.1 (noarch) 0:2.9.2-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.4.7-3.12.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:6.00-4.8.13 0:9.0.1443-150500.18.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.5.3+git20180125-150000.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.4.0-4.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.38.6-150400.4.39.1 0:0.6.72-150500.1.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.0.20200827-5.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.4.9-3.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.6.8-150000.3.74.1 0:2.10-150500.1.3 0:1.1.3+20210805-150500.1.1 0:4.17.0_06-150500.1.10 0:7.6_1-1.22 0:1.1.0-3.4.1 0:7.6.1-1.16 0:21.1.4-150500.5.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:330-150200.11.9.1 0:4.5.5-150500.1.1 0:4.5.0-150500.1.1 0:4.5.6-150500.1.1 0:4.5.4-150500.1.1 0:2.1.0-1.10 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.2.3-3.8.1 0:1.1.1~git5.8612dbb-150400.1.9 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.6-7.5.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.5.0-150400.3.3.1 (x86_64) 0:1.5.0-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.13.69-3.3.1 0:1.29.1-150500.1.13 0:1.1.2-150500.1.20 0:1.1.1-150500.1.19 0:2.1.5-150500.7.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.4.0-150000.4.28.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.6.6-150000.73.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.6.19-150000.87.1 0:1.55.0-150500.4.4 0:2.8.1-150400.9.18.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:20.10.9_ce-156.1 (noarch) 0:20.10.9_ce-156.1 0:0.7.0.1+gitr2908_55e924b8a842-4.31.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.1.2-3.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.9.4-150000.1.10.3 (noarch) 0:3.9.4-150000.1.10.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.3.1-150000.1.13.1 0:1.23.17-150500.1.3 0:1.24.13-150500.1.3 0:0.58.0-150500.6.3 0:4.4.4-150500.1.4 0:8.0.1-150100.3.7.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.1.5-150000.41.1 0:1.2.0-150500.1.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:7.1.0.9-150400.6.9.1 (aarch64|i686|ppc64le|s390x|x86_64) 0:91.9.1-150200.152.40.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:91-9.5.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.2.15-3.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.0.8-150200.11.9.1 0:0.6.55-150400.12.8 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.3.6-3.7.10 0:0.3.6-3.7.10 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.9.1-150400.3.4.1 0:0.4.21-150400.19.6 0:1.11.5-1.20 0:0.2.6-150400.12.12 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.5.27-11.6.1 0:27.2-150400.3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.4.5-3.3.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.27.5-150400.15.4.1 0:6.4.22-20.26.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.4.2-150200.11.28.1 0:3.40.0-150400.3.13 0:0.9.3-150400.8.9.1 0:1.14.4-150500.1.3 (x86_64) 0:1.0.10-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.5.8-150300.3.7.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.7.3-150400.3.5.1 0:1.8.6-150500.2.2 0:1.5.8-150300.3.7.1 0:0.1.12-150500.1.1 0:1.7.3-150400.3.5.1 0:1.1-1.15 0:0.4.1-150400.1.10 0:41.8-150400.3.3.1 0:41.9-150400.3.8.1 0:41.0-150500.2.1 0:41.5-150400.3.6.1 0:0.3.14-150400.1.11 0:1.5.25-150400.1.13 0:1.6.1-1.53 0:1.5.0-4.37 0:1.4.10-1.28 0:2.2.1-3.41.1 0:6.4.2-150500.1.14 0:1.2.15-150000.3.19.1 0:2.0.8-150200.11.9.1 0:1.8.0-3.11.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.14.0-3.9.1 0:0.14.0-150000.3.11.1 0:3.4.2-150200.11.28.1 0:0.9.1-150400.3.4.1 0:2.1.0-1.27 0:0.94-150000.6.11.1 0:2.2.7-150000.3.40.1 0:3.5.27-11.11.1 0:2.4.5-3.3.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.6.22-5.6.1 0:0.6.22-150000.5.9.1 0:0.27.5-150400.15.4.1 0:1.0.10-150400.3.3.1 0:0.6.2-1.17 0:1.4.3-150400.1.6 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.3.0-4.3.29 0:0.3.0-4.3.29 0:0.9-2.30 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.12.0-150400.3.8.1 0:1.12.0-150400.3.11.1 0:3.0.10-150400.1.8 0:0.15.1b-3.14 0:1.3.0+git.20210921-150400.1.15 0:2.0.2-150400.1.6 0:6.3.3-150400.29.15 0:1.3.9-150400.29.15 0:1.21-150400.29.15 0:5.3.6-150400.29.15 0:2.1.0beta3-150400.29.15 0:2021.20210325-150400.29.15 0:2021.20210325.svn27321-150400.29.15 0:2021.20210325.svn12688-150400.29.15 0:2021.20210325.svn28038-150400.29.15 0:2021.20210325.svn57878-150400.29.15 0:2021.20210325.svn57089-150400.29.15 0:2021.20210325.svn58378-150400.29.15 0:2021.20210325.svn3006-150400.29.15 0:2021.20210325.svn29036-150400.29.15 0:2021.20210325.svn57890-150400.29.15 0:2021.20210325.svn52909-150400.29.15 0:2021.20210325.svn18790-150400.29.15 0:2021.20210325.svn45266-150400.29.15 0:2021.20210325.svn57273-150400.29.15 0:2021.20210325.svn16219-150400.29.15 0:2021.20210325.svn17794-150400.29.15 0:2021.20210325.svn15543-150400.29.15 0:2021.20210325.svn25623-150400.29.15 0:2021.20210325.svn38300-150400.29.15 0:2021.20210325.svn52631-150400.29.15 0:2021.20210325.svn37223-150400.29.15 0:2021.20210325.svn51944-150400.29.15 0:2021.20210325.svn48871-150400.29.15 0:2021.20210325.svn34112-150400.29.15 0:2021.20210325.svn30408-150400.29.15 0:2021.20210325.svn45927-150400.29.15 0:2021.20210325.svn50528-150400.29.15 0:2021.20210325.svn46996-150400.29.15 0:2021.20210325.svn48478-150400.29.15 0:2021.20210325.svn24061-150400.29.15 0:2021.20210325.svn23866-150400.29.15 0:2021.20210325.svn58136-150400.29.15 0:2021.20210325.svn53554-150400.29.15 0:2021.20210325.svn17399-150400.29.15 0:2021.20210325.svn37645-150400.29.15 0:2021.20210325.svn24759-150400.29.15 0:2021.20210325.svn29031-150400.29.15 0:2021.20210325.svn8329-150400.29.15 0:2021.20210325.svn44515-150400.29.15 0:2021.20210325.svn58535-150400.29.15 0:2021.20210325.svn29050-150400.29.15 0:2021.20210325.svn18336-150400.29.15 0:2021.20210325.svn25860-150400.29.15 0:2021.20210325.svn14752-150400.29.15 0:2021.20210325.svn14758-150400.29.15 0:2021.20210325.svn25997-150400.29.15 0:2021.20210325.svn13663-150400.29.15 0:2021.20210325.svn34971-150400.29.15 0:2021.20210325.svn54732-150400.29.15 0:2021.20210325.svn37813-150400.29.15 0:2021.20210325.svn56984-150400.29.15 0:2021.20210325.svn44835-150400.29.15 0:2021.20210325.svn49033-150400.29.15 0:2021.20210325.svn32101-150400.29.15 0:2021.20210325.svn46894-150400.29.15 0:2021.20210325.svn53999-150400.29.15 0:2021.20210325.svn54358-150400.29.15 0:2021.20210325.svn30983-150400.29.15 0:2021.20210325.svn42296-150400.29.15 0:2021.20210325.svn42300-150400.29.15 0:2021.20210325.svn16420-150400.29.15 0:2021.20210325.svn25012-150400.29.15 0:2021.20210325.svn32150-150400.29.15 0:2021.20210325.svn10937-150400.29.15 0:2021.20210325.svn27025-150400.29.15 0:2021.20210325.svn56352-150400.29.15 0:2021.20210325.svn31696-150400.29.15 0:2021.20210325.svn26126-150400.29.15 0:2021.20210325.svn15093-150400.29.15 0:2021.20210325.svn41465-150400.29.15 0:2021.20210325.svn29005-150400.29.15 0:2021.20210325.svn32346-150400.29.15 0:2021.20210325.svn34647-150400.29.15 0:2021.20210325.svn43292-150400.29.15 0:2021.20210325.svn50281-150400.29.15 0:2021.20210325.svn37750-150400.29.15 0:2021.20210325.svn38769-150400.29.15 0:2021.20210325.svn23500-150400.29.15 0:2021.20210325.svn23661-150400.29.15 0:2021.20210325.svn23406-150400.29.15 0:2021.20210325.svn14428-150400.29.15 0:2021.20210325.svn8457-150400.29.15 0:2021.20210325.svn33688-150400.29.15 0:2021.20210325.svn18674-150400.29.15 0:2021.20210325.svn30534-150400.29.15 0:2021.20210325.svn37026-150400.29.15 0:2021.20210325.svn53804-150400.29.15 0:2021.20210325.svn10843-150400.29.15 0:2021.20210325.svn37537-150400.29.15 0:2021.20210325.svn14387-150400.29.15 0:2021.20210325.svn52858-150400.29.15 0:2021.20210325.svn41779-150400.29.15 0:2021.20210325.svn49140-150400.29.15 0:2021.20210325.svn40690-150400.29.15 0:2021.20210325.svn25962-150400.29.15 0:2021.20210325.svn16181-150400.29.15 0:2021.20210325.svn39165-150400.29.15 0:2021.20210325.svn29348-150400.29.15 0:2021.20210325.svn13364-150400.29.15 0:2021.20210325.svn52800-150400.29.15 0:2021.20210325.svn32405-150400.29.15 0:2021.20210325.svn7838-150400.29.15 0:2021.20210325.svn29333-150400.29.15 0:2021.20210325.svn44206-150400.29.15 0:2021.20210325.svn29335-150400.29.15 0:2021.20210325.svn34996-150400.29.15 0:2021.20210325.svn31638-150400.29.15 0:2021.20210325.svn32919-150400.29.15 0:2021.20210325.svn55172-150400.29.15 0:2021.20210325.svn53577-150400.29.15 0:2021.20210325.svn55933-150400.29.15 0:2021.20210325.svn29688-150400.29.15 0:2021.20210325.svn38710-150400.29.15 0:2021.20210325.svn21215-150400.29.15 0:2021.20210325.svn37771-150400.29.15 0:2021.20210325.svn13013-150400.29.15 0:2021.20210325.svn45011-150400.29.15 0:2021.20210325.svn15506-150400.29.15 0:2021.20210325.svn12782-150400.29.15 0:2021.20210325.svn47948-150400.29.15 0:2021.20210325.svn29741-150400.29.15 0:2021.20210325.svn33155-150400.29.15 0:2021.20210325.svn24062-150400.29.15 0:2021.20210325.svn43596-150400.29.15 0:2021.20210325.svn53444-150400.29.15 0:2021.20210325.svn6898-150400.29.15 0:2021.20210325.svn55132-150400.29.15 0:2021.20210325.svn25648-150400.29.15 0:2021.20210325.svn23262-150400.29.15 0:2021.20210325.svn6897-150400.29.15 0:2021.20210325.svn50419-150400.29.15 0:2021.20210325.svn46165-150400.29.15 0:2021.20210325.svn49312-150400.29.15 0:2021.20210325.svn52917-150400.29.15 0:2021.20210325.svn34398-150400.29.15 (noarch) 0:3.20.0-150400.3.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.20.0-150400.3.8.1 0:3.20.0-150400.3.13.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.15.1b-150000.5.3.1 0:0.15.1b-150000.5.3.1 0:0.6.4-1.24 0:0.3.28-2.13.1 0:78.15.0-150400.1.10 0:1.6-1.26 0:1.5.2-150000.4.10.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.3.9-3.3.1 0:2.0.0-1.31 0:2.2.0-150400.5.4 0:1.2.4+git20180804.fff99cd-1.19 0:2.0.15-150200.9.12.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.20.2-150400.3.6.1 0:0.20.2-150400.3.6.1 0:1.3.4-1.45 0:1.6.0-2.19 0:2.2.0-1.34 0:1.1.1-150000.3.2.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.6.1-6.6.8 0:1.6.1-150000.6.8.1 0:1.0.1+git.20230117-150500.1.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:41.5-150400.3.6.1 (noarch) 0:41.5-150400.3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.2.1-3.9.2 (x86_64) 0:0.40.0-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.4.7-5.3.1 (noarch) 0:0.12.13-3.3.1 0:0.12.13-150000.3.6.1 0:0.11+git.20130926-1.34 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.8.0-3.6.1 0:0.22.1-150500.2.2 0:2021.189.0.0.3svn15878-150400.18.1 0:2021.189.1.3asvn55076-150400.18.1 0:2021.189.0.000.958svn50999-150400.18.1 0:2021.189.svn15878-150400.18.1 0:2021.189.22svn44822-150400.18.1 0:2021.189.4.21svn15878-150400.18.1 0:2021.189.1.4svn15878-150400.18.1 0:2021.189.1.8bsvn51065-150400.18.1 0:2021.189.1.7esvn25918-150400.18.1 0:2021.189.2.3asvn54080-150400.18.1 0:2021.189.1.36svn15878-150400.18.1 0:2021.189.svn17022-150400.18.1 0:2021.189.2.14svn19603-150400.18.1 0:2021.189.1.22bsvn54071-150400.18.1 0:2021.189.2.84psvn52964-150400.18.1 0:2021.189.svn20943-150400.18.1 0:2021.189.4svn17020-150400.18.1 0:2021.189.svn52470-150400.18.1 0:2021.189.0.0.2svn57728-150400.18.1 0:2021.189.6.3.1svn58057-150400.18.1 0:2021.189.2.0bsvn41157-150400.18.1 0:2021.189.svn55471-150400.18.1 0:2021.189.1.9.7svn49248-150400.18.1 0:2021.189.2.0svn58761-150400.18.1 0:2021.189.1.2asvn15878-150400.18.1 0:2021.189.1.9.0svn56119-150400.18.1 0:2021.189.svn32089-150400.18.1 0:2021.189.1.4svn51497-150400.18.1 0:2021.189.2.0.3svn55777-150400.18.1 0:2021.189.0.0.25svn18835-150400.18.1 0:2021.189.0.0.6svn53052-150400.18.1 0:2021.189.3.13csvn57479-150400.18.1 0:2021.189.1.75svn56946-150400.18.1 0:2021.189.1.3svn15878-150400.18.1 0:2021.189.3.5svn57447-150400.18.1 0:2021.189.1.47svn54758-150400.18.1 0:2021.189.0.0.1svn20498-150400.18.1 0:2021.189.0.0.3asvn15878-150400.18.1 0:2021.189.2.1svn51376-150400.18.1 0:2021.189.1.1svn54080-150400.18.1 0:2021.189.1.1svn58559-150400.18.1 0:2021.189.1.0svn50912-150400.18.1 0:2021.189.0.0.3svn49326-150400.18.1 0:2021.189.2.42svn26048-150400.18.1 0:2021.189.1.1bsvn54512-150400.18.1 0:2021.189.1.2bsvn54512-150400.18.1 0:2021.189.svn29349-150400.18.1 0:2021.189.1.7.1svn49862-150400.18.1 0:2021.189.1.2svn54157-150400.18.1 0:2021.189.1.3svn56291-150400.18.1 0:2021.189.svn51787-150400.18.1 0:2021.189.1.4svn46817-150400.18.1 0:2021.189.1.1svn51618-150400.18.1 0:2021.189.svn20538-150400.18.1 0:2021.189.1svn58253-150400.18.1 0:2021.189.svn54074-150400.18.1 0:2021.189.1.3svn35900-150400.18.1 0:2021.189.2.7svn15878-150400.18.1 0:2021.189.1.6bsvn17156-150400.18.1 0:2021.189.3.6svn15878-150400.18.1 0:2021.189.svn34016-150400.18.1 0:2021.189.0.0.3.2svn26055-150400.18.1 0:2021.189.1.5isvn15878-150400.18.1 0:2021.189.0.0.2svn56277-150400.18.1 0:2021.189.0.0.3.0svn57416-150400.18.1 0:2021.189.svn54512-150400.18.1 0:2021.189.svn57972-150400.18.1 0:2021.189.1.1svn38055-150400.18.1 0:2021.189.0.0.0.1svn57452-150400.18.1 0:2021.189.1.3svn52204-150400.18.1 0:2021.189.1.052svn56864-150400.18.1 0:2021.189.5.2svn44846-150400.18.1 0:2021.189.0.0.1svn42428-150400.18.1 0:2021.189.1.0svn56125-150400.18.1 0:2021.189.0.0.91svn56006-150400.18.1 0:2021.189.0.0.1.0svn47290-150400.18.1 0:2021.189.1.000svn44497-150400.18.1 0:2021.189.2.1.1svn42221-150400.18.1 0:2021.189.svn56035-150400.18.1 0:2021.189.0.0.92svn35065-150400.18.1 0:2021.189.0.0.03svn15878-150400.18.1 0:2021.189.1.3svn50316-150400.18.1 0:2021.189.2.6svn53087-150400.18.1 0:2021.189.1.1svn15878-150400.18.1 0:2021.189.4.3.2svn36030-150400.18.1 0:2021.189.0.0.113svn55403-150400.18.1 0:2021.189.1.0svn56878-150400.18.1 0:2021.189.1.1svn29630-150400.18.1 0:2021.189.2.2xsvn51532-150400.18.1 0:2021.189.2.20.6svn55378-150400.18.1 0:2021.189.svn46110-150400.18.1 0:2021.189.3.04svn29208-150400.18.1 0:2021.189.2.3svn28980-150400.18.1 0:2021.189.svn45662-150400.18.1 0:2021.189.2.0svn21855-150400.18.1 0:2021.189.svn56514-150400.18.1 0:2021.189.svn22930-150400.18.1 0:2021.189.2.14svn30646-150400.18.1 0:2021.189.svn56583-150400.18.1 0:2021.189.1.6svn55988-150400.18.1 0:2021.189.svn52824-150400.18.1 0:2021.189.1.1asvn17049-150400.18.1 0:2021.189.1.0svn55121-150400.18.1 0:2021.189.2.2svn51631-150400.18.1 0:2021.189.2.16svn35032-150400.18.1 0:2021.189.0.0.8.1svn55250-150400.18.1 0:2021.189.001.003svn24266-150400.18.1 0:2021.189.0.0.8svn21933-150400.18.1 0:2021.189.2.08svn18651-150400.18.1 0:2021.189.svn26053-150400.18.1 0:2021.189.svn17050-150400.18.1 0:2021.189.1.0svn32662-150400.18.1 0:2021.189.1.24svn56102-150400.18.1 0:2021.189.1.3.4svn54080-150400.18.1 0:2021.189.2.34svn53406-150400.18.1 0:2021.189.0.0.3svn23350-150400.18.1 0:2021.189.2.10svn58121-150400.18.1 0:2021.189.6.03svn54080-150400.18.1 0:2021.189.svn54080-150400.18.1 0:2021.189.1.7svn47510-150400.18.1 0:2021.189.1.2csvn53718-150400.18.1 0:2021.189.1.2svn46317-150400.18.1 0:2021.189.svn57179-150400.18.1 0:2021.189.4.02svn19306-150400.18.1 0:2021.189.1.0svn28400-150400.18.1 0:2021.189.1.2.1svn56673-150400.18.1 0:2021.189.1.1svn44662-150400.18.1 0:2021.189.1.0svn37709-150400.18.1 0:2021.189.1.1svn51474-150400.18.1 0:2021.189.1.20svn54512-150400.18.1 0:2021.189.3.17svn25711-150400.18.1 0:2021.189.1.2.1svn38299-150400.18.1 0:2021.189.1.0svn30042-150400.18.1 0:2021.189.6.1.0svn58764-150400.18.1 0:2021.189.2.4.5svn57090-150400.18.1 0:2021.189.svn38005-150400.18.1 0:2021.189.0.0.0.2svn57283-150400.18.1 0:2021.189.1svn15878-150400.18.1 0:2021.189.svn42880-150400.18.1 0:2021.189.3.0_beta3svn33894-150400.18.1 0:2021.189.svn42675-150400.18.1 0:2021.189.1.1svn56997-150400.18.1 0:2021.189.1.04svn18125-150400.18.1 0:2021.189.1.0svn31576-150400.18.1 0:2021.189.svn45656-150400.18.1 0:2021.189.0.0.3svn38741-150400.18.1 0:2021.189.svn57213-150400.18.1 0:2021.189.1.76svn50084-150400.18.1 0:2021.189.1.0asvn15878-150400.18.1 0:2021.189.1.0svn40201-150400.18.1 0:2021.189.2.3svn29129-150400.18.1 0:2021.189.svn20536-150400.18.1 0:2021.189.2.0svn29989-150400.18.1 0:2021.189.2.2bsvn49060-150400.18.1 0:2021.189.2.1svn53411-150400.18.1 0:2021.189.2.7svn54725-150400.18.1 0:2021.189.0.0.2svn56730-150400.18.1 0:2021.189.1.26svn57833-150400.18.1 0:2021.189.1.15svn57598-150400.18.1 0:2021.189.2.0svn25243-150400.18.1 0:2021.189.svn20431-150400.18.1 0:2021.189.0.0.8svn38497-150400.18.1 0:2021.189.1.0svn56759-150400.18.1 0:2021.189.2.20svn15878-150400.18.1 0:2021.189.0.0.1csvn17512-150400.18.1 0:2021.189.2.70svn58569-150400.18.1 0:2021.189.0.0.3svn33490-150400.18.1 0:2021.189.1.19svn53051-150400.18.1 0:2021.189.1.5svn56922-150400.18.1 0:2021.189.svn57624-150400.18.1 0:2021.189.1.9svn42099-150400.18.1 0:2021.189.2.11svn57959-150400.18.1 0:2021.189.1.11svn53108-150400.18.1 0:2021.189.svn51323-150400.18.1 0:2021.189.svn18948-150400.18.1 0:2021.189.2.0svn15878-150400.18.1 0:2021.189.1.5svn15878-150400.18.1 0:2021.189.svn41853-150400.18.1 0:2021.189.1.0svn55889-150400.18.1 0:2021.189.1.1.1svn54512-150400.18.1 0:2021.189.svn52564-150400.18.1 0:2021.189.svn51757-150400.18.1 0:2021.189.0.0.7svn56596-150400.18.1 0:2021.189.0.0.03svn54779-150400.18.1 0:2021.189.1.5svn56966-150400.18.1 0:2021.189.0.0.3svn43337-150400.18.1 0:2021.189.0.0.1svn54049-150400.18.1 0:2021.189.0.0.3svn19717-150400.18.1 0:2021.189.0.0.3.11svn36084-150400.18.1 0:2021.189.1.1svn32377-150400.18.1 0:2021.189.svn58211-150400.18.1 0:2021.189.1.6svn53173-150400.18.1 0:2021.189.svn31835-150400.18.1 0:2021.189.0.0.1svn35373-150400.18.1 0:2021.189.0.0.6svn57349-150400.18.1 0:2021.189.3.0svn57105-150400.18.1 0:2021.189.2.1.1csvn58155-150400.18.1 0:2021.189.1.0svn21271-150400.18.1 0:2021.189.3.56svn58684-150400.18.1 0:2021.189.1.0dsvn57005-150400.18.1 0:2021.189.1.0asvn44197-150400.18.1 0:2021.189.1.0fsvn30256-150400.18.1 0:2021.189.1.5svn49022-150400.18.1 0:2021.189.1.1svn38174-150400.18.1 0:2021.189.1.0hsvn30257-150400.18.1 0:2021.189.1.2gsvn31902-150400.18.1 0:2021.189.2.2psvn30259-150400.18.1 0:2021.189.1.3lsvn35198-150400.18.1 0:2021.189.3.1asvn30261-150400.18.1 0:2021.189.1.3ssvn57642-150400.18.1 0:2021.189.3.8jsvn56827-150400.18.1 0:2021.189.3.3rsvn44495-150400.18.1 0:2021.189.1.4tsvn30265-150400.18.1 0:2021.189.1.1asvn38064-150400.18.1 0:2021.189.1.3ssvn57643-150400.18.1 0:2021.189.3.5lsvn56607-150400.18.1 0:2021.189.1.3svn39861-150400.18.1 0:2021.189.4.3csvn30270-150400.18.1 0:2021.189.2.2svn45864-150400.18.1 0:2021.189.2.13svn57978-150400.18.1 0:2021.189.1.10svn56904-150400.18.1 0:2021.189.2.3hsvn30273-150400.18.1 0:2021.189.1.5csvn49701-150400.18.1 0:2021.189.1.3svn51551-150400.18.1 0:2021.189.1.0msvn43235-150400.18.1 0:2021.189.1.6svn30276-150400.18.1 0:2021.189.1.0hsvn30277-150400.18.1 0:2021.189.1.4.04svn55232-150400.18.1 0:2021.189.svn57733-150400.18.1 0:2021.189.1.1svn30279-150400.18.1 0:2021.189.3.5svn38173-150400.18.1 0:2021.189.2.0bsvn46681-150400.18.1 0:2021.189.svn39587-150400.18.1 0:2021.189.1.0msvn43234-150400.18.1 0:2021.189.2.0isvn30281-150400.18.1 0:2021.189.0.0.2svn39608-150400.18.1 0:2021.189.1.0svn30282-150400.18.1 0:2021.189.1.2lsvn30283-150400.18.1 0:2021.189.1.2ssvn57644-150400.18.1 0:2021.189.1.2lsvn30285-150400.18.1 0:2021.189.svn30286-150400.18.1 0:2021.189.1.3msvn57376-150400.18.1 0:2021.189.1.0csvn30288-150400.18.1 0:2021.189.1.0gsvn30289-150400.18.1 0:2021.189.2.0asvn53140-150400.18.1 0:2021.189.3.0asvn53139-150400.18.1 0:2021.189.3.1asvn30292-150400.18.1 0:2021.189.1.2nsvn57666-150400.18.1 0:2021.189.1.0isvn57646-150400.18.1 0:2021.189.5.0psvn54080-150400.18.1 0:2021.189.2.3esvn57647-150400.18.1 0:2021.189.1.0.0svn30564-150400.18.1 0:2021.189.1.4svn51560-150400.18.1 0:2021.189.1.4esvn56674-150400.18.1 0:2021.189.1.4svn39246-150400.18.1 0:2021.189.1.1asvn38372-150400.18.1 0:2021.189.1.34svn57349-150400.18.1 0:2021.189.2.1svn42428-150400.18.1 0:2021.189.3.1svn54080-150400.18.1 0:2021.189.2.2.1svn56915-150400.18.1 0:2021.189.3.02svn34393-150400.18.1 0:2021.189.1.5.3svn48834-150400.18.1 0:2021.189.1.4.0svn46626-150400.18.1 0:2021.189.svn55475-150400.18.1 0:2021.189.0.0.9.2svn38857-150400.18.1 0:2021.189.0.0.4asvn22013-150400.18.1 0:2021.189.svn38479-150400.18.1 0:2021.189.0.0.0.10svn53683-150400.18.1 0:2021.189.svn20619-150400.18.1 0:2021.189.0.0.93svn25597-150400.18.1 0:2021.189.1.1svn35460-150400.18.1 0:2021.189.1.016svn19490-150400.18.1 0:2021.189.1.076svn57080-150400.18.1 0:2021.189.1.051svn55475-150400.18.1 0:2021.189.1.20svn32924-150400.18.1 0:2021.189.1.05svn26477-150400.18.1 0:2021.189.4.0svn57925-150400.18.1 0:2021.189.svn19440-150400.18.1 0:2021.189.1.01svn17186-150400.17.1 0:2021.189.svn15878-150400.17.1 0:2021.189.svn17224-150400.17.1 0:2021.189.1.01svn17187-150400.17.1 0:2021.189.svn33143-150400.17.1 0:2021.189.0.0.1.3svn43928-150400.17.1 0:2021.189.3.1svn39364-150400.17.1 0:2021.189.3.62svn58537-150400.17.1 0:2021.189.0.0.02bsvn38159-150400.17.1 0:2021.189.1.4bsvn58513-150400.17.1 0:2021.189.0.0.2svn39180-150400.17.1 0:2021.189.2.2svn27539-150400.17.1 0:2021.189.1.2.0svn55732-150400.17.1 0:2021.189.0.0.1svn23427-150400.17.1 0:2021.189.1.02asvn56087-150400.17.1 0:2021.189.0.0.1.1svn40105-150400.17.1 0:2021.189.0.0.5.1svn55117-150400.17.1 0:2021.189.1.13svn54512-150400.17.1 0:2021.189.0.0.2svn23510-150400.17.1 0:2021.189.1.7svn55441-150400.17.1 0:2021.189.svn42161-150400.17.1 0:2021.189.1.02svn39048-150400.17.1 0:2021.189.1.0svn41404-150400.17.1 0:2021.189.2.8.1svn56967-150400.17.1 0:2021.189.1.0svn49867-150400.17.1 0:2021.189.1.2svn43031-150400.17.1 0:2021.189.4.1svn54512-150400.17.1 0:2021.189.1.0svn39100-150400.17.1 0:2021.189.2.0.0svn56934-150400.17.1 0:2021.189.svn45877-150400.17.1 0:2021.189.1.0svn29937-150400.17.1 0:2021.189.1.1svn21977-150400.17.1 0:2021.189.0.0.1svn20765-150400.17.1 0:2021.189.0.0.2.0svn56180-150400.17.1 0:2021.189.0.0.2svn54826-150400.17.1 0:2021.189.svn58503-150400.17.1 0:2021.189.svn58697-150400.17.1 0:2021.189.1.5svn36294-150400.17.1 0:2021.189.1.6svn15878-150400.17.1 0:2021.189.2.1svn56193-150400.17.1 0:2021.189.svn18651-150400.17.1 0:2021.189.svn55475-150400.17.1 0:2021.189.svn20031-150400.17.1 0:2021.189.1.004svn32215-150400.17.1 0:2021.189.svn45662-150400.17.1 0:2021.189.1.0svn38708-150400.17.1 0:2021.189.0.0.5svn15878-150400.17.1 0:2021.189.1.3svn46374-150400.17.1 0:2021.189.1.2svn56998-150400.17.1 0:2021.189.1.1bsvn15878-150400.17.1 0:2021.189.1.4svn51398-150400.17.1 0:2017.133.svn25507-5.18 0:2021.189.2.11svn54080-150400.17.1 0:2021.189.0.0.4svn27401-150400.17.1 0:2021.189.0.0.4svn39041-150400.17.1 0:2021.189.1.5svn15878-150400.17.1 0:2021.189.2.7svn55811-150400.17.1 0:2021.189.2.2svn54080-150400.17.1 0:2021.189.2.16svn57273-150400.17.1 0:2021.189.3.03svn50677-150400.17.1 0:2021.189.2.0.2svn31607-150400.17.1 0:2021.189.3.16svn57272-150400.17.1 0:2021.189.3.4svn49179-150400.17.1 0:2021.189.0.0.2.0svn54401-150400.17.1 0:2021.189.2.6.2svn48548-150400.17.1 0:2021.189.9.14svn56208-150400.17.1 0:2021.189.8.5svn56209-150400.17.1 0:2021.189.2.2svn53281-150400.17.1 0:2021.189.1.2svn46637-150400.17.1 0:2021.189.4.0svn57924-150400.17.1 0:2021.189.1.3.1asvn40323-150400.17.1 0:2021.189.2.3.3svn54015-150400.17.1 0:2021.189.0.0.02svn26556-150400.17.1 0:2021.189.0.0.3.5svn56837-150400.17.1 0:2021.189.svn44685-150400.17.1 0:2021.189.1.1zsvn57904-150400.17.1 0:2021.189.2.1svn58715-150400.17.1 0:2021.189.1.2.1svn43723-150400.17.1 0:2021.189.1.7svn42649-150400.17.1 0:2021.189.1.0svn44627-150400.17.1 0:2021.189.0.0.12svn57979-150400.17.1 0:2021.189.1.7svn45876-150400.17.1 0:2021.189.1.0xsvn58753-150400.17.1 0:2021.189.002svn56939-150400.17.1 0:2021.189.1.21svn56790-150400.17.1 0:2021.189.0.0.4svn19787-150400.17.1 0:2021.189.1.3esvn58716-150400.17.1 0:2021.189.0.0.1svn41634-150400.17.1 0:2021.189.0.0.4svn54561-150400.17.1 0:2021.189.0.0.4svn56133-150400.17.1 0:2021.189.0.0.23svn56502-150400.17.1 0:2021.189.0.0.1svn58437-150400.17.1 0:2021.189.0.0.5svn49935-150400.17.1 0:2021.189.0.0.3svn32180-150400.17.1 0:2021.189.2.1.2svn53344-150400.17.1 0:2021.189.1.9svn42445-150400.17.1 0:2021.189.1.3.1svn43049-150400.17.1 0:2021.189.1.0.1svn37081-150400.17.1 0:2021.189.1.0svn24097-150400.17.1 0:2021.189.1.3dsvn57262-150400.17.1 0:2021.189.0.0.5.0svn49839-150400.17.1 0:2021.189.0.0.1svn41596-150400.17.1 0:2021.189.1.9.0svn48983-150400.17.1 0:2021.189.2.2svn57513-150400.17.1 0:2021.189.1.9.8csvn56493-150400.17.1 0:2021.189.1.1bsvn55643-150400.17.1 0:2021.189.1.21svn56392-150400.17.1 0:2021.189.2.7.1asvn45865-150400.17.1 0:2021.189.0.0.12svn56853-150400.17.1 0:2021.189.1.2svn48945-150400.17.1 0:2021.189.1.0.1svn45858-150400.17.1 0:2021.189.0.0.0.1svn47839-150400.17.1 0:2021.189.1.2_3svn57366-150400.17.1 0:2021.189.2.4.2svn45379-150400.17.1 0:2021.189.1.2.0svn43330-150400.17.1 0:2021.189.1.1.2asvn58661-150400.17.1 0:2021.189.0.0.5svn58169-150400.17.1 0:2021.189.2.0.0svn44653-150400.17.1 0:2021.189.1.00svn55290-150400.17.1 0:2021.189.0.0.1svn55339-150400.17.1 0:2021.189.0.0.2.0svn54030-150400.17.1 0:2021.189.1.25svn55626-150400.17.1 0:2021.189.2.3.3svn53138-150400.17.1 0:2021.189.1.0asvn21923-150400.17.1 0:2021.189.1.0svn25526-150400.17.1 0:2021.189.1.0svn25527-150400.17.1 0:2021.189.1.1svn22054-150400.17.1 0:2021.189.0.0.1.2svn45196-150400.17.1 0:2021.189.svn17116-150400.17.1 0:2021.189.0.0.99dsvn57972-150400.17.1 0:2021.189.3.71svn52851-150400.17.1 0:2021.189.1.6svn57137-150400.17.1 0:2021.189.svn52851-150400.17.1 0:2021.189.1.1asvn15878-150400.17.1 0:2021.189.1.10svn15878-150400.17.1 0:2021.189.2.2svn15878-150400.17.1 0:2021.189.36.3svn55193-150400.17.1 0:2021.189.0.0.1svn35154-150400.17.1 0:2021.189.0.0.2svn34631-150400.17.1 0:2021.189.0.0.1csvn37795-150400.17.1 0:2021.189.0.0.2svn34632-150400.17.1 0:2021.189.0.0.3svn35267-150400.17.1 0:2021.189.0.0.1svn34633-150400.17.1 0:2021.189.2.1svn38248-150400.17.1 0:2021.189.1.5svn53172-150400.17.1 0:2021.189.svn29803-150400.17.1 0:2021.189.1.01svn41777-150400.17.1 0:2021.189.1.0svn15878-150400.17.1 0:2021.189.1.00svn54512-150400.17.1 0:2021.189.svn42217-150400.17.1 0:2021.189.0.0.1svn25779-150400.17.1 0:2021.189.1.0.1svn57388-150400.17.1 0:2021.189.svn39073-150400.17.1 0:2021.189.1.3svn53837-150400.17.1 0:2021.189.svn56026-150400.17.1 0:2021.189.1.1svn15878-150400.17.1 0:2021.189.2.0svn25039-150400.17.1 0:2021.189.0.0.07svn36406-150400.17.1 0:2021.189.1.1svn38388-150400.17.1 0:2021.189.svn17209-150400.17.1 0:2021.189.1.0svn22490-150400.17.1 0:2021.189.1.0svn46213-150400.17.1 0:2021.189.2.51svn57949-150400.17.1 0:2021.189.1.2dsvn49643-150400.17.1 0:2021.189.1.4svn20047-150400.17.1 0:2021.189.1.0svn54512-150400.17.1 0:2021.189.1.1svn32235-150400.17.1 0:2021.189.0.0.1svn17076-150400.17.1 0:2021.189.1.0svn21670-150400.17.1 0:2021.189.1.0.1svn36605-150400.17.1 0:2021.189.3.3svn57326-150400.17.1 0:2021.189.0.0.2svn37536-150400.17.1 0:2021.189.svn46480-150400.17.1 0:2021.189.0.0.7bsvn15878-150400.17.1 0:2021.189.svn31835-150400.17.1 0:2021.189.1.29svn56885-150400.17.1 0:2021.189.0.0.5svn55475-150400.17.1 0:2021.189.1.61803398svn53402-150400.17.1 0:2021.189.1.61803svn21907-150400.17.1 0:2021.189.1.00svn21948-150400.17.1 0:2021.189.3.14svn17830-150400.17.1 0:2021.189.1.02dsvn54512-150400.17.1 0:2021.189.0.0.02svn17062-150400.17.1 0:2021.189.svn21047-150400.17.1 0:2021.189.svn16989-150400.17.1 0:2021.189.1.1svn54827-150400.17.1 0:2021.189.1.30svn28031-150400.17.1 0:2021.189.1.1svn45120-150400.17.1 0:2021.189.svn44939-150400.17.1 0:2021.189.1.0svn17129-150400.17.1 0:2021.189.2.0svn54080-150400.17.1 0:2021.189.svn20655-150400.17.1 0:2021.189.svn17127-150400.17.1 0:2021.189.3.11svn54758-150400.17.1 0:2021.189.0.0.5.5svn50991-150400.17.1 0:2021.189.3.1svn54758-150400.17.1 0:2021.189.svn21014-150400.17.1 0:2021.189.1.40svn29901-150400.17.1 0:2021.189.1.0svn44371-150400.17.1 0:2021.189.0.0.98ksvn56422-150400.17.1 0:2021.189.1.2svn35383-150400.17.1 0:2021.189.svn28363-150400.17.1 0:2021.189.1.0svn56070-150400.17.1 0:2021.189.0.0.04svn15878-150400.17.1 0:2021.189.3.4svn55064-150400.17.1 0:2021.189.svn25185-150400.17.1 0:2021.189.1.2svn54080-150400.17.1 0:2021.189.1.1svn54080-150400.17.1 0:2021.189.0.0.4svn51299-150400.17.1 0:2021.189.1.2svn56528-150400.17.1 0:2021.189.1.1svn56431-150400.17.1 0:2021.189.0.0.3svn54080-150400.17.1 0:2021.189.0.0.3svn41813-150400.17.1 0:2021.189.0.0.2asvn43219-150400.17.1 0:2021.189.0.0.2svn30559-150400.17.1 0:2021.189.0.0.2svn40213-150400.17.1 0:2021.189.0.0.3.0svn53606-150400.17.1 0:2021.189.1.1.0svn57025-150400.17.1 0:2021.189.0.0.3asvn43369-150400.17.1 0:2021.189.0.0.3bsvn45291-150400.17.1 0:2021.189.0.0.2svn52509-150400.17.1 0:2021.189.2.5svn57625-150400.17.1 0:2021.189.0.0.2bsvn44173-150400.17.1 0:2021.189.0.0.3svn48606-150400.17.1 0:2021.189.0.0.5svn56491-150400.17.1 0:2021.189.0.0.5asvn57755-150400.17.1 0:2021.189.0.0.4svn47230-150400.17.1 0:2021.189.0.0.6svn51286-150400.17.1 0:2021.189.2.6svn56821-150400.17.1 0:2021.189.1.2svn18337-150400.17.1 0:2021.189.svn54074-150400.17.1 0:2021.189.svn55907-150400.17.1 0:2021.189.1.0svn26313-150400.17.1 0:2021.189.svn34991-150400.17.1 0:2021.189.0.0.90svn27725-150400.17.1 0:2021.189.0.0.6.1svn15878-150400.17.1 0:2021.189.1.0svn35973-150400.17.1 0:2021.189.2.0svn33041-150400.17.1 0:2021.189.001.000svn24302-150400.17.1 0:2021.189.svn44899-150400.17.1 0:2021.189.svn17125-150400.17.1 0:2021.189.2.4.2svn43003-150400.17.1 0:2021.189.20.21asvn57282-150400.17.1 0:2021.189.2.2svn32508-150400.17.1 0:2021.189.0.0.5svn54758-150400.17.1 0:2021.189.3.2svn54512-150400.17.1 0:2021.189.2.0svn15878-150400.17.1 0:2021.189.svn17353-150400.17.1 0:2021.189.svn56771-150400.17.1 0:2021.189.0.0.1svn39000-150400.17.1 0:2021.189.svn56753-150400.17.1 0:2021.189.svn35002-150400.17.1 0:2021.189.1.1svn55759-150400.17.1 0:2021.189.0.0.0.1svn57478-150400.17.1 0:2021.189.1.8.2svn25144-150400.17.1 0:2021.189.3.2svn54682-150400.17.1 0:2021.189.1.8svn53084-150400.17.1 0:2021.189.1.1svn21476-150400.17.1 0:2021.189.r0.2svn38859-150400.17.1 0:2021.189.2.5svn49061-150400.17.1 0:2021.189.0.0.2.7hsvn35069-150400.17.1 0:2021.189.1.1svn57139-150400.17.1 0:2021.189.0.0.2svn16666-150400.17.1 0:2021.189.svn54080-150400.17.1 0:2021.189.1.02.3svn58602-150400.17.1 0:2021.189.3.2csvn23443-150400.17.1 0:2021.189.1.2svn54686-150400.17.1 0:2021.189.1.6svn54512-150400.17.1 0:2021.189.3.1svn56636-150400.17.1 0:2021.189.1.4svn34452-150400.17.1 0:2021.189.1.0svn17121-150400.17.1 0:2021.189.0.0.36dsvn46613-150400.17.1 0:2021.189.svn42428-150400.17.1 0:2021.189.2.0svn57599-150400.17.1 0:2021.189.1.8.1svn50374-150400.17.1 0:2021.189.1.1svn39797-150400.17.1 0:2021.189.3.22svn49168-150400.17.1 0:2021.189.1.1svn50971-150400.17.1 0:2021.189.1.0svn56644-150400.17.1 0:2021.189.0.0.2svn44960-150400.17.1 0:2021.189.1.01svn36728-150400.17.1 0:2021.189.1.5svn36195-150400.17.1 0:2021.189.3.6csvn46919-150400.17.1 0:2021.189.1.0svn16094-150400.17.1 0:2021.189.2.4.0svn56338-150400.17.1 0:2021.189.1.0csvn15878-150400.17.1 0:2021.189.4.0.1svn57756-150400.17.1 0:2021.189.2.1bsvn15878-150400.17.1 0:2021.189.2.0.1svn15878-150400.17.1 0:2021.189.5.0svn55920-150400.17.1 0:2021.189.1.0svn17120-150400.17.1 0:2021.189.0.0.8svn45069-150400.17.1 0:2021.189.2.4svn52022-150400.17.1 0:2021.189.1.0svn51475-150400.17.1 0:2021.189.1.0svn38300-150400.17.1 0:2021.189.0.0.9svn17146-150400.17.1 0:2021.189.0.0.2.5svn15878-150400.17.1 0:2021.189.1.3svn17119-150400.17.1 0:2021.189.1.0svn21632-150400.17.1 0:2021.189.1.6asvn58014-150400.17.1 0:2021.189.4.16svn57206-150400.17.1 0:2021.189.1.1asvn53437-150400.17.1 0:2021.189.5.11asvn56983-150400.17.1 0:2021.189.1.3asvn57490-150400.17.1 0:2021.189.0.0.9.8svn52863-150400.17.1 0:2021.189.1.2svn46723-150400.17.1 0:2021.189.1.12asvn46972-150400.17.1 0:2021.189.2.0msvn31096-150400.17.1 0:2021.189.svn21046-150400.17.1 0:2021.189.1.2svn20582-150400.17.1 0:2021.189.1.15svn53302-150400.17.1 0:2021.189.1.9svn56833-150400.17.1 0:2021.189.1.2asvn19440-150400.17.1 0:2021.189.2.2svn45081-150400.17.1 0:2021.189.1.01svn27118-150400.17.1 0:2021.189.0.0.2svn57508-150400.17.1 0:2021.189.svn52567-150400.17.1 0:2021.189.0.0.3svn57325-150400.17.1 0:2021.189.1.0svn57312-150400.17.1 0:2021.189.2.0svn49543-150400.17.1 0:2021.189.1.1.1svn57758-150400.17.1 0:2021.189.2.1svn54512-150400.17.1 0:2021.189.0.0.1svn27473-150400.17.1 0:2021.189.3.1.2svn52649-150400.17.1 0:2021.189.1.7.6svn52851-150400.17.1 0:2021.189.2.0svn20060-150400.17.1 0:2021.189.1.1asvn47577-150400.17.1 0:2021.189.1.1svn49569-150400.17.1 0:2021.189.1.0svn51000-150400.17.1 0:2021.189.1.1.1svn37934-150400.17.1 0:2021.189.1.2svn26700-150400.17.1 0:2021.189.svn54512-150400.17.1 0:2021.189.2.9999svn28552-150400.17.1 0:2021.189.0.0.2.1svn42751-150400.17.1 0:2021.189.1.3svn53382-150400.17.1 0:2021.189.9.5svn57308-150400.17.1 0:2021.189.1.3.3svn58757-150400.17.1 0:2021.189.5.5svn36428-150400.17.1 0:2021.189.1.4svn45975-150400.17.1 0:2021.189.1.1svn47407-150400.17.1 0:2021.189.1.06svn46721-150400.17.1 0:2021.189.0.0.2asvn43444-150400.17.1 0:2021.189.4.8.4svn36951-150400.17.1 0:2021.189.20201206.0svn57081-150400.17.1 0:2021.189.1.9svn58081-150400.17.1 0:2021.189.4.8.4svn41119-150400.17.1 0:2021.189.4.8.4svn52851-150400.17.1 0:2021.189.0.0.1asvn53671-150400.17.1 0:2021.189.4.6svn48041-150400.17.1 0:2021.189.1.19svn55218-150400.17.1 0:2021.189.0.0.4.0svn51472-150400.17.1 0:2021.189.0.0.1svn55985-150400.17.1 0:2021.189.0.0.21.4svn47525-150400.17.1 0:2021.189.0.0.3svn47747-150400.17.1 0:2021.189.1.3svn52082-150400.17.1 0:2021.189.1.6svn55763-150400.17.1 0:2021.189.1.0svn47511-150400.17.1 0:2021.189.1.7svn51136-150400.17.1 0:2021.189.svn51137-150400.17.1 0:2021.189.svn53537-150400.17.1 0:2021.189.0.0.5svn53698-150400.17.1 0:2021.189.svn57963-150400.17.1 0:2021.189.0.0.5svn28250-150400.17.1 0:2021.189.0.0.7.0svn58661-150400.17.1 0:2021.189.1.0jsvn57640-150400.17.1 0:2021.189.0.0.9svn24378-150400.17.1 0:2021.189.1.0svn56414-150400.17.1 0:2021.189.8.1svn21107-150400.17.1 0:2021.189.svn39273-150400.17.1 0:2021.189.svn28910-150400.17.1 0:2021.189.svn57866-150400.17.1 0:2021.189.svn17964-150400.17.1 0:2021.189.3.03svn58506-150400.17.1 0:2021.189.svn18787-150400.17.1 0:2021.189.4.0svn54706-150400.17.1 0:2021.189.2.1svn39728-150400.17.1 0:2021.189.1.1svn54735-150400.17.1 0:2021.189.svn32550-150400.17.1 0:2021.189.0.0.15svn55265-150400.17.1 0:2021.189.4.2.0svn45677-150400.17.1 0:2021.189.0.0.7svn34668-150400.17.1 0:2021.189.0.0.3svn37572-150400.17.1 0:2021.189.1.066svn58717-150400.17.1 0:2021.189.0.0.4_alphasvn51627-150400.17.1 0:2021.189.0.0.3svn17630-150400.17.1 0:2021.189.svn51502-150400.17.1 0:2021.189.0.0.1svn34481-150400.17.1 0:2021.189.1.2svn29803-150400.17.1 0:2021.189.0.0.005svn54736-150400.17.1 0:2021.189.0.0.5svn56291-150400.17.1 0:2021.189.0.0.4bsvn56291-150400.17.1 0:2021.189.2.0csvn46358-150400.17.1 0:2021.189.1.1svn47913-150400.17.1 0:2021.189.1.1svn56707-150400.17.1 0:2021.189.svn18270-150400.17.1 0:2021.189.0.0.3csvn15878-150400.17.1 0:2021.189.0.0.2svn41042-150400.17.1 0:2021.189.svn58434-150400.17.1 0:2021.189.20181105svn49086-150400.17.1 0:2021.189.svn13293-150400.17.1 0:2021.189.1.3svn50585-150400.17.1 0:2021.189.1.0svn22155-150400.17.1 0:2021.189.1.0esvn53545-150400.17.1 0:2021.189.1.3svn31490-150400.17.1 0:2021.189.1.22svn21741-150400.17.1 0:2021.189.0.0.99fsvn18462-150400.17.1 0:2021.189.0.0.7asvn19361-150400.17.1 0:2021.189.0.0.2.2svn27198-150400.17.1 0:2021.189.0.0.3svn51348-150400.17.1 0:2021.189.1.2svn54891-150400.17.1 0:2021.189.1.2svn18259-150400.17.1 0:2021.189.r0.11asvn38875-150400.17.1 0:2021.189.0.0.3svn15878-150400.17.1 0:2021.189.1.02svn50116-150400.17.1 0:2021.189.3.8svn41927-150400.17.1 0:2021.189.1.0.1svn55526-150400.17.1 0:2021.189.svn54265-150400.17.1 0:2021.189.1.0svn47573-150400.17.1 0:2021.189.0.0.81asvn45322-150400.17.1 0:2021.189.13.0svn55667-150400.17.1 0:2021.189.2.25fsvn44847-150400.17.1 0:2021.189.0.0.0.5_r1svn29020-150400.17.1 0:2021.189.svn17219-150400.17.1 0:2021.189.svn17218-150400.17.1 0:2021.189.svn18791-150400.17.1 0:2021.189.1.5svn55387-150400.17.1 0:2021.189.0.0.8svn29349-150400.17.1 0:2021.189.0.0.1.1svn37868-150400.17.1 0:2021.189.svn58167-150400.17.1 0:2021.189.svn47085-150400.17.1 0:2021.189.svn55718-150400.17.1 0:2021.189.svn54215-150400.17.1 0:2021.189.svn51306-150400.17.1 0:2021.189.svn56073-150400.17.1 0:2021.189.svn23171-150400.17.1 0:2021.189.svn58082-150400.17.1 0:2021.189.0.0.2svn49449-150400.17.1 0:2021.189.2.14svn18950-150400.17.1 0:2021.189.2.0.0svn50217-150400.17.1 0:2021.189.svn43558-150400.17.1 0:2021.189.0.0.30svn49252-150400.17.1 0:2021.189.0.0.9bsvn15878-150400.17.1 0:2021.189.1.46svn53403-150400.17.1 0:2021.189.1.1svn35929-150400.17.1 0:2021.189.1.35svn15878-150400.17.1 0:2021.189.1.4svn15878-150400.17.1 0:2021.189.1.2svn29062-150400.17.1 0:2021.189.1.6svn37928-150400.17.1 0:2021.189.0.0.1svn24829-150400.17.1 0:2021.189.3.601svn54696-150400.17.1 0:2021.189.1.1svn44131-150400.17.1 0:2021.189.1.1svn23862-150400.17.1 0:2021.189.0.0.23svn54512-150400.17.1 0:2021.189.1.00asvn27576-150400.17.1 0:2021.189.svn35058-150400.17.1 0:2021.189.svn24940-150400.17.1 0:2021.189.svn55436-150400.17.1 0:2021.189.1.01svn15878-150400.17.1 0:2021.189.2.5svn58589-150400.17.1 0:2021.189.1.0esvn21209-150400.17.1 0:2021.189.1.50svn55643-150400.17.1 0:2021.189.0.0.1svn29803-150400.17.1 0:2021.189.1.10.2svn55424-150400.17.1 0:2021.189.1.0svn55879-150400.17.1 0:2021.189.svn47861-150400.17.1 0:2021.189.1.10svn55271-150400.17.1 0:2021.189.3.0svn16896-150400.17.1 0:2021.189.0.0.40svn55920-150400.17.1 0:2021.189.svn41553-150400.17.1 0:2021.189.svn54433-150400.17.1 0:2021.189.svn57972-150400.17.1 0:2021.189.mar._2021svn58353-150400.17.1 0:2021.189.5.2lsvn57844-150400.17.1 0:2021.189.1.01svn23371-150400.17.1 0:2021.189.1.02svn54512-150400.17.1 0:2021.189.svn58354-150400.17.1 0:2021.189.0.0.03svn41986-150400.17.1 0:2021.189.1.0svn51857-150400.17.1 0:2021.189.1.21svn51010-150400.17.1 0:2021.189.1.31svn38672-150400.17.1 0:2021.189.1.0svn38514-150400.17.1 0:2021.189.1.2svn51578-150400.17.1 0:2021.189.1.0svn36304-150400.17.1 0:2021.189.0.0.1dsvn52145-150400.17.1 0:2021.189.1.9.1svn44129-150400.17.1 0:2021.189.1.2csvn26313-150400.17.1 0:2021.189.2.5.6svn58583-150400.17.1 0:2021.189.1.1svn57972-150400.17.1 0:2021.189.0.0.7svn34453-150400.17.1 0:2021.189.svn49909-150400.17.1 0:2021.189.0.0.4svn48990-150400.17.1 0:2021.189.0.0.7dsvn56478-150400.17.1 0:2021.189.svn24139-150400.17.1 0:2021.189.1.16svn20745-150400.17.1 0:2021.189.2.2.15svn57402-150400.17.1 0:2021.189.1.55svn45255-150400.17.1 0:2021.189.4.33svn24729-150400.17.1 0:2021.189.0.0.2svn34577-150400.17.1 0:2021.189.svn28878-150400.17.1 0:2021.189.svn49271-150400.17.1 0:2021.189.2.2svn46776-150400.17.1 0:2021.189.2.1svn37659-150400.17.1 0:2021.189.0.0.915svn18651-150400.17.1 0:2021.189.svn47350-150400.17.1 0:2021.189.svn53559-150400.17.1 0:2021.189.svn45692-150400.17.1 0:2021.189.1.2svn54191-150400.17.1 0:2021.189.0.0.03svn38599-150400.17.1 0:2021.189.1.14svn23425-150400.17.1 0:2021.189.1.3svn29579-150400.17.1 0:2021.189.2.0hsvn58150-150400.17.1 0:2021.189.0.0.6svn42883-150400.17.1 0:2021.189.2.32svn52663-150400.17.1 0:2021.189.1.1.1svn57033-150400.17.1 0:2021.189.0.0.6svn27974-150400.17.1 0:2021.189.0.0.02svn18951-150400.17.1 0:2021.189.2.60svn36650-150400.17.1 0:2021.189.1.5.7svn58590-150400.17.1 0:2021.189.1.01svn46287-150400.17.1 0:2021.189.1.2asvn47064-150400.17.1 0:2021.189.1.2svn52647-150400.17.1 0:2021.189.1.1svn47031-150400.17.1 0:2021.189.1.1svn47032-150400.17.1 0:2021.189.1.0svn36682-150400.17.1 0:2021.189.1.1svn47033-150400.17.1 0:2021.189.1.1svn47034-150400.17.1 0:2021.189.1.1svn47355-150400.17.1 0:2021.189.1.0svn36705-150400.17.1 0:2021.189.1.05svn52479-150400.17.1 0:2021.189.1.1svn47356-150400.17.1 0:2021.189.1.1svn47565-150400.17.1 0:2021.189.1.2svn47047-150400.17.1 0:2021.189.1.03svn56393-150400.17.1 0:2021.189.1.0svn47631-150400.17.1 0:2021.189.3.0svn53125-150400.17.1 0:2021.189.1.1svn47533-150400.17.1 0:2021.189.1.1svn47534-150400.17.1 0:2021.189.1.1svn47501-150400.17.1 0:2021.189.1.1svn47632-150400.17.1 0:2021.189.1.6svn54779-150400.17.1 0:2021.189.1.3svn37146-150400.17.1 0:2021.189.1.0svn47748-150400.17.1 0:2021.189.1.1svn47749-150400.17.1 0:2021.189.1.1svn48266-150400.17.1 0:2021.189.1.1svn48267-150400.17.1 0:2021.189.1.1svn48456-150400.17.1 0:2021.189.1.1svn48457-150400.17.1 0:2021.189.1.02svn56394-150400.17.1 0:2021.189.1.1svn49345-150400.17.1 0:2021.189.1.1svn49346-150400.17.1 0:2021.189.1.1svn52101-150400.17.1 0:2021.189.2.1.0svn52893-150400.17.1 0:2021.189.1.1svn52281-150400.17.1 0:2021.189.1.1svn52282-150400.17.1 0:2021.189.1.1svn45785-150400.17.1 0:2021.189.1.0svn36700-150400.17.1 0:2021.189.1.1svn52331-150400.17.1 0:2021.189.1.2asvn47552-150400.17.1 0:2021.189.1.1svn52375-150400.17.1 0:2021.189.1.1svn52553-150400.17.1 0:2021.189.1.0asvn28983-150400.17.1 0:2021.189.2.1svn57522-150400.17.1 0:2021.189.5.0.0svn30206-150400.17.1 0:2021.189.0.0.2svn52009-150400.17.1 0:2021.189.1.4svn57349-150400.17.1 0:2021.189.svn23374-150400.17.1 0:2021.189.0.0.0.3svn57094-150400.17.1 0:2021.189.0.0.7svn55230-150400.17.1 0:2021.189.svn48599-150400.17.1 0:2021.189.0.0.7svn58212-150400.17.1 0:2021.189.2.34svn31771-150400.17.1 0:2021.189.0.0.04svn45991-150400.17.1 0:2021.189.1.0svn23974-150400.17.1 0:2021.189.2.0svn39589-150400.17.1 0:2021.189.1.1svn49544-150400.17.1 0:2021.189.svn16549-150400.17.1 0:2021.189.0.0.9.1svn56664-150400.17.1 0:2021.189.0.0.98svn55890-150400.17.1 0:2021.189.0.0.11svn24035-150400.17.1 0:2021.189.svn54810-150400.17.1 0:2021.189.1.1svn37656-150400.17.1 0:2021.189.2.4svn54080-150400.17.1 0:2021.189.2.1svn15878-150400.17.1 0:2021.189.0.0.2svn19387-150400.17.1 0:2021.189.svn28946-150400.17.1 0:2021.189.svn28501-150400.17.1 0:2021.189.svn17192-150400.17.1 0:2021.189.svn32925-150400.17.1 0:2021.189.3.2svn53244-150400.17.1 0:2021.189.0.0.12svn55661-150400.17.1 0:2021.189.svn19441-150400.17.1 0:2021.189.2.5svn15878-150400.17.1 0:2021.189.1.0svn27918-150400.17.1 0:2021.189.1.20svn15878-150400.17.1 0:2021.189.0.0.32svn42428-150400.17.1 0:2021.189.1.0svn20520-150400.17.1 0:2021.189.1.5.0svn43417-150400.17.1 0:2021.189.0.0.9svn48932-150400.17.1 0:2021.189.0.0.2svn34295-150400.17.1 0:2021.189.0.0.6svn15878-150400.17.1 0:2021.189.svn17337-150400.17.1 0:2021.189.0.0.01svn17194-150400.17.1 0:2021.189.svn24927-150400.17.1 0:2021.189.svn34294-150400.17.1 0:2021.189.2.3.0svn58350-150400.17.1 0:2021.189.1.2dsvn15878-150400.17.1 0:2021.189.1.4svn25741-150400.17.1 0:2021.189.svn57362-150400.17.1 0:2021.189.0.0.1svn34474-150400.17.1 0:2021.189.0.0.1svn34521-150400.17.1 0:2021.189.svn56594-150400.17.1 0:2021.189.svn48634-150400.17.1 0:2021.189.1.0.1svn55286-150400.17.1 0:2021.189.1.2svn29752-150400.17.1 0:2021.189.3.0svn26237-150400.17.1 0:2021.189.0.0.01asvn15878-150400.17.1 0:2021.189.1.1svn51476-150400.17.1 0:2021.189.1.1svn17195-150400.17.1 0:2021.189.1.111svn15878-150400.17.1 0:2021.189.0.0.1svn56407-150400.17.1 0:2021.189.r0.32svn38860-150400.17.1 0:2021.189.1.2svn52257-150400.17.1 0:2021.189.2.4svn46011-150400.17.1 0:2021.189.7.2svn47680-150400.17.1 0:2021.189.1.0svn54994-150400.17.1 0:2021.189.svn17196-150400.17.1 0:2021.189.0.0.1svn15878-150400.17.1 0:2021.189.1svn15878-150400.17.1 0:2021.189.2.16svn15878-150400.17.1 0:2021.189.0.0.2svn44854-150400.17.1 0:2021.189.3.0svn57099-150400.17.1 0:2021.189.1.2esvn35866-150400.17.1 0:2021.189.1.5.0svn44471-150400.17.1 0:2021.189.svn28582-150400.17.1 0:2021.189.4.4svn38157-150400.17.1 0:2021.189.1.2svn39802-150400.17.1 0:2021.189.1.1bsvn19232-150400.17.1 0:2021.189.0.0.97svn29349-150400.17.1 0:2021.189.1.0svn34724-150400.17.1 0:2021.189.1.01svn54512-150400.17.1 0:2021.189.2.08hsvn56696-150400.17.1 0:2021.189.2021_01svn58212-150400.17.1 0:2021.189.0.0.6.1svn52851-150400.17.1 0:2021.189.1.02svn51652-150400.17.1 0:2021.189.1svn49504-150400.17.1 0:2021.189.1.08svn51663-150400.17.1 0:2021.189.2.1svn38375-150400.17.1 0:2021.189.2.5asvn56800-150400.17.1 0:2021.189.0.0.5svn52271-150400.17.1 0:2021.189.svn20741-150400.17.1 0:2021.189.1.00svn18728-150400.17.1 0:2021.189.1.0svn54080-150400.17.1 0:2021.189.0.0.1svn29103-150400.17.1 0:2021.189.svn56373-150400.17.1 0:2021.189.1.5svn57972-150400.17.1 0:2021.189.1.00svn29349-150400.17.1 0:2021.189.1.04svn44515-150400.17.1 0:2021.189.svn58645-150400.17.1 0:2021.189.1.17svn57972-150400.17.1 0:2021.189.1.6svn13293-150400.17.1 0:2021.189.2.11svn57972-150400.17.1 0:2021.189.0.0.1.3svn38726-150400.17.1 0:2021.189.0.0.2bsvn35193-150400.17.1 0:2021.189.3.1415926535897932svn58758-150400.17.1 0:2021.189.6.11svn52027-150400.17.1 0:2021.189.svn20851-150400.17.1 0:2021.189.svn57514-150400.17.1 0:2021.189.0.0.99svn19440-150400.17.1 0:2021.189.svn32677-150400.17.1 0:2021.189.1.24esvn58762-150400.17.1 0:2021.189.1.2asvn56291-150400.17.1 0:2021.189.1.0.0svn57204-150400.17.1 0:2021.189.1.4.0svn44543-150400.17.1 0:2021.189.1.3svn32661-150400.17.1 0:2021.189.1.0svn38352-150400.17.1 0:2021.189.4svn15878-150400.17.1 0:2021.189.svn54721-150400.17.1 0:2021.189.1.2svn52168-150400.17.1 0:2021.189.svn29466-150400.17.1 0:2021.189.2.1.1svn57544-150400.17.1 0:2021.189.1.0svn25033-150400.17.1 0:2021.189.0.0.3svn38172-150400.17.1 0:2021.189.0.0.1svn41617-150400.17.1 0:2021.189.1.3svn29349-150400.17.1 0:2021.189.1.0svn39233-150400.17.1 0:2021.189.2.8svn54191-150400.17.1 0:2021.189.0.0.8.2svn58390-150400.17.1 0:2021.189.1.0svn39396-150400.17.1 0:2021.189.svn32639-150400.17.1 0:2021.189.1.2svn48007-150400.17.1 0:2021.189.0.0.3svn24928-150400.17.1 0:2021.189.0.0.1svn57716-150400.17.1 0:2021.189.1.8svn25231-150400.17.1 0:2021.189.0.0.6bsvn21540-150400.17.1 0:2021.189.2.01ysvn56223-150400.17.1 0:2021.189.3.17svn15878-150400.17.1 0:2021.189.1.2svn27599-150400.17.1 0:2021.189.1.3asvn35829-150400.17.1 0:2021.189.1.1esvn15878-150400.17.1 0:2021.189.1.0svn33236-150400.17.1 0:2021.189.1.02asvn20617-150400.17.1 0:2021.189.1.1svn54676-150400.17.1 0:2021.189.svn58414-150400.17.1 0:2021.189.1.9.0svn56728-150400.17.1 0:2021.189.1.06svn49594-150400.17.1 0:2021.189.1.2svn58721-150400.17.1 0:2021.189.0.0.2svn56070-150400.17.1 0:2021.189.1.2svn21758-150400.17.1 0:2021.189.1.005_bsvn19705-150400.17.1 0:2021.189.1.1asvn38114-150400.17.1 0:2021.189.1.24.12svn45418-150400.17.1 0:2021.189.2.30svn54758-150400.17.1 0:2021.189.0.0.09svn54758-150400.17.1 0:2021.189.0.0.3svn52398-150400.17.1 0:2021.189.1.0svn39025-150400.17.1 0:2021.189.1.8svn55418-150400.17.1 0:2021.189.1.2svn15878-150400.17.1 0:2021.189.0.0.03svn42712-150400.17.1 0:2021.189.0.0.8svn58015-150400.17.1 0:2021.189.2.1svn54317-150400.17.1 0:2021.189.3.3svn56999-150400.17.1 0:2021.189.2.1svn55928-150400.17.1 0:2021.189.1.60svn51894-150400.17.1 0:2021.189.1.0svn24504-150400.17.1 0:2021.189.2.0svn51177-150400.17.1 0:2021.189.2.11svn54865-150400.17.1 0:2021.189.0.0.9asvn57814-150400.17.1 0:2021.189.1svn42023-150400.17.1 0:2021.189.2.3.0svn57013-150400.17.1 0:2021.189.0.0.2.1svn55678-150400.17.1 0:2021.189.0.0.3svn55131-150400.17.1 0:2021.189.svn23483-150400.17.1 0:2021.189.1.2svn18064-150400.17.1 0:2021.189.svn28469-150400.17.1 0:2021.189.svn34957-150400.17.1 0:2021.189.1.1svn34087-150400.17.1 0:2021.189.2.7svn57090-150400.17.1 0:2021.189.1.6svn43750-150400.17.1 0:2021.189.0.0.1dsvn34486-150400.17.1 0:2021.189.svn53319-150400.17.1 0:2021.189.svn54758-150400.17.1 0:2021.189.3.0svn47703-150400.17.1 0:2021.189.svn55643-150400.17.1 0:2021.189.2svn16558-150400.17.1 0:2021.189.3.2svn28571-150400.17.1 0:2021.189.0.0.1svn29802-150400.17.1 0:2021.189.0.0.10csvn57130-150400.17.1 0:2021.189.3.9svn51423-150400.17.1 0:2021.189.1.8svn21472-150400.17.1 0:2021.189.0.0.3svn56615-150400.17.1 0:2021.189.1.01svn17210-150400.17.1 0:2021.189.svn20513-150400.17.1 0:2021.189.1.5esvn54857-150400.17.1 0:2021.189.1.0svn54851-150400.17.1 0:2021.189.3.11svn57186-150400.17.1 0:2021.189.2.7.4svn21461-150400.17.1 0:2021.189.2014svn35575-150400.17.1 0:2021.189.0.0.2svn29349-150400.17.1 0:2021.189.svn19440-150400.17.1 0:2021.189.0.0.6.5svn53472-150400.17.1 0:2021.189.0.0.61svn18703-150400.17.1 0:2021.189.2.28svn48684-150400.17.1 0:2021.189.2.11svn53546-150400.17.1 0:2021.189.1.0svn57815-150400.17.1 0:2021.189.svn22931-150400.17.1 0:2021.189.2.1svn32257-150400.17.1 0:2021.189.1.0asvn43278-150400.17.1 0:2021.189.svn20678-150400.17.1 0:2021.189.1.3svn20641-150400.17.1 0:2021.189.1.0svn45511-150400.17.1 0:2021.189.4.1svn45215-150400.17.1 0:2021.189.1.115svn58722-150400.17.1 0:2021.189.0.0.45svn56703-150400.17.1 0:2021.189.0.0.3svn42428-150400.17.1 0:2021.189.3.1svn55414-150400.17.1 0:2021.189.1.97svn15878-150400.17.1 0:2021.189.2.5svn47639-150400.17.1 0:2021.189.1.2svn21385-150400.17.1 0:2021.189.1.7svn52342-150400.17.1 0:2021.189.1.2dsvn52240-150400.17.1 0:2021.189.1.0svn18115-150400.17.1 0:2021.189.0.0.98svn29235-150400.18.1 0:2021.189.3.0asvn56658-150400.18.1 0:2021.189.svn37236-150400.18.1 0:2021.189.1.0svn22426-150400.18.1 0:2021.189.0.0.4svn17335-150400.18.1 0:2021.189.1.3svn32098-150400.18.1 0:2021.189.1.2svn15878-150400.18.1 0:2021.189.1.051svn56390-150400.18.1 0:2021.189.2.6svn36354-150400.18.1 0:2021.189.svn56291-150400.18.1 0:2021.189.2.7svn41784-150400.18.1 0:2021.189.1.7svn53171-150400.18.1 0:2021.189.3.1415926svn20694-150400.18.1 0:2021.189.0.0.7svn15878-150400.18.1 0:2021.189.1.09csvn55156-150400.18.1 0:2021.189.2.5ksvn56554-150400.18.1 0:2021.189.1svn21906-150400.18.1 0:2021.189.1.0svn48186-150400.18.1 0:2021.189.0.0.1.8svn54897-150400.18.1 0:2021.189.0.0.1hsvn19795-150400.18.1 0:2021.189.0.0.8svn55265-150400.18.1 0:2021.189.1.04svn15878-150400.18.1 0:2021.189.2.5svn42428-150400.18.1 0:2021.189.0.0.2.1svn43735-150400.18.1 0:2021.189.4.0svn15878-150400.18.1 0:2021.189.1.1svn22191-150400.18.1 0:2021.189.3.0bsvn25714-150400.18.1 0:2021.189.svn56829-150400.18.1 0:2021.189.svn57641-150400.18.1 0:2021.189.1.4_subrfixsvn17265-150400.18.1 0:2021.189.1.2svn35675-150400.18.1 0:2021.189.2.0bsvn56694-150400.18.1 0:2021.189.2.1svn57489-150400.18.1 0:2021.189.4.00svn57001-150400.18.1 0:2021.189.2.7svn58023-150400.18.1 0:2021.189.1.1.4svn42755-150400.18.1 0:2021.189.0.0.1svn49662-150400.18.1 0:2021.189.1.101svn15878-150400.18.1 0:2021.189.svn33398-150400.18.1 0:2021.189.0.0.04svn55265-150400.18.1 0:2021.189.0.0.5.1svn26313-150400.18.1 0:2021.189.1.0svn17262-150400.18.1 0:2021.189.1.6svn35417-150400.18.1 0:2021.189.0.0.3.0svn50448-150400.18.1 0:2021.189.1.2.3svn49590-150400.18.1 0:2021.189.1.1svn55188-150400.18.1 0:2021.189.1.0svn55916-150400.18.1 0:2021.189.3.4svn53911-150400.18.1 0:2021.189.2.4svn15878-150400.18.1 0:2021.189.5.1bsvn44499-150400.18.1 0:2021.189.1.6svn57247-150400.18.1 0:2021.189.0.0.6svn56693-150400.18.1 0:2021.189.0.0.7svn57246-150400.18.1 0:2021.189.0.0.1bsvn56633-150400.18.1 0:2021.189.1.8svn27206-150400.18.1 0:2021.189.1.2svn54451-150400.18.1 0:2021.189.1.5svn29349-150400.18.1 0:2021.189.0.0.21ksvn52227-150400.18.1 0:2021.189.1.4svn48977-150400.18.1 0:2021.189.1.2.0svn54400-150400.18.1 0:2021.189.0.0.41svn19859-150400.18.1 0:2021.189.0.0.4svn16243-150400.18.1 0:2021.189.1.9asvn52117-150400.18.1 0:2021.189.1.4asvn17263-150400.18.1 0:2021.189.1.0svn21328-150400.18.1 0:2021.189.4.00svn56948-150400.18.1 0:2021.189.1.2.2svn43865-150400.18.1 0:2021.189.2.1svn49004-150400.18.1 0:2021.189.0.0.1bsvn15878-150400.18.1 0:2021.189.1.4svn18304-150400.18.1 0:2021.189.svn46411-150400.18.1 0:2021.189.4.0.1svn57672-150400.18.1 0:2021.189.svn21912-150400.18.1 0:2021.189.1.1svn46736-150400.18.1 0:2021.189.0.0.92svn15878-150400.18.1 0:2021.189.1.2svn49801-150400.18.1 0:2021.189.0.0.9csvn15878-150400.18.1 0:2021.189.1.0svn36263-150400.18.1 0:2021.189.1.9svn41549-150400.18.1 0:2021.189.1.8svn56291-150400.18.1 0:2021.189.3.7svn57488-150400.18.1 0:2021.189.0.0.3svn37889-150400.18.1 0:2021.189.1svn54080-150400.18.1 0:2021.189.1.1svn29264-150400.18.1 0:2021.189.1.16svn55728-150400.18.1 0:2021.189.1.2msvn21340-150400.18.1 0:2021.189.0.0.05svn55627-150400.18.1 0:2021.189.1.4svn32796-150400.18.1 0:2021.189.1.1svn38074-150400.18.1 0:2021.189.1.0svn24500-150400.18.1 0:2021.189.1.3svn57428-150400.18.1 0:2021.189.0.0.8svn26722-150400.18.1 0:2021.189.0.0.7esvn56216-150400.18.1 0:2021.189.0.0.8.8svn35346-150400.18.1 0:2021.189.4.10.1svn55960-150400.18.1 0:2021.189.0.0.92svn24730-150400.18.1 0:2021.189.svn43812-150400.18.1 0:2021.189.1.0svn45245-150400.18.1 0:2021.189.4.0svn30962-150400.18.1 0:2021.189.1.0bsvn58058-150400.18.1 0:2021.189.0.0.4.1svn55777-150400.18.1 0:2021.189.1.08svn17259-150400.18.1 0:2021.189.1.1svn30223-150400.18.1 0:2021.189.svn38895-150400.18.1 0:2021.189.1.25svn37628-150400.18.1 0:2021.189.1.3svn56854-150400.18.1 0:2021.189.1.1.8svn53146-150400.18.1 0:2021.189.1.1bsvn29349-150400.18.1 0:2021.189.1.0svn33288-150400.18.1 0:2021.189.0.0.2svn26313-150400.18.1 0:2021.189.1.0.3svn28943-150400.18.1 0:2021.189.svn19388-150400.18.1 0:2021.189.1.0.0svn58759-150400.18.1 0:2021.189.svn21462-150400.18.1 0:2021.189.0.0.1svn18784-150400.18.1 0:2021.189.1.5svn52142-150400.18.1 0:2021.189.1.5svn52208-150400.18.1 0:2021.189.svn29529-150400.18.1 0:2021.189.0.0.8asvn56479-150400.18.1 0:2021.189.0.0.81asvn28421-150400.18.1 0:2021.189.1.2svn56291-150400.18.1 0:2021.189.3.4svn47444-150400.18.1 0:2021.189.2.2.1svn24329-150400.18.1 0:2021.189.0.0.5svn21719-150400.18.1 0:2021.189.4.3svn55437-150400.18.1 0:2021.189.0.0.3.4svn56672-150400.18.1 0:2021.189.0.0.02asvn50732-150400.18.1 0:2021.189.1.0jsvn58440-150400.18.1 0:2021.189.1.02svn50088-150400.18.1 0:2021.189.0.0.3.51svn54483-150400.18.1 0:2021.189.0.0.04svn38770-150400.18.1 0:2021.189.1.1svn51825-150400.18.1 0:2021.189.0.0.3asvn17131-150400.18.1 0:2021.189.0.0.8svn47113-150400.18.1 0:2021.189.1asvn21631-150400.18.1 0:2021.189.0.0.4svn25832-150400.18.1 0:2021.189.4.5svn49591-150400.18.1 0:2021.189.0.0.2.2svn30168-150400.18.1 0:2021.189.0.0.1.3svn54512-150400.18.1 0:2021.189.svn53207-150400.18.1 0:2021.189.1.0svn17272-150400.18.1 0:2021.189.0.0.1.1bsvn19440-150400.18.1 0:2021.189.0.0.10svn15878-150400.18.1 0:2021.189.1.0.1svn19667-150400.18.1 0:2021.189.0.0.4svn25768-150400.18.1 0:2021.189.0.0.2svn25584-150400.18.1 0:2021.189.2.0bsvn56782-150400.18.1 0:2021.189.1.3dsvn15878-150400.17.1 0:2021.189.0.0.3bsvn15878-150400.17.1 0:2021.189.3.3svn36572-150400.17.1 0:2021.189.1.17svn35291-150400.17.1 0:2021.189.1.1bsvn56594-150400.17.1 0:2021.189.3.07svn53912-150400.17.1 0:2021.189.1.30svn25003-150400.17.1 0:2021.189.1.34svn20710-150400.17.1 0:2021.189.1.1svn52090-150400.17.1 0:2021.189.svn25607-150400.17.1 0:2021.189.1.0svn57508-150400.17.1 0:2021.189.1.2asvn45360-150400.17.1 0:2021.189.svn20638-150400.17.1 0:2021.189.1.1asvn29173-150400.17.1 0:2021.189.1.2svn21855-150400.17.1 0:2021.189.svn21326-150400.17.1 0:2021.189.2015.2svn40403-150400.17.1 0:2021.189.2016.1svn40404-150400.17.1 0:2021.189.4.6.3.2svn48145-150400.17.1 0:2021.189.5.13.0svn54517-150400.17.1 0:2021.189.1.0esvn55920-150400.17.1 0:2021.189.0.0.2svn23608-150400.17.1 0:2021.189.2.2svn17859-150400.17.1 0:2021.189.1.933svn53562-150400.17.1 0:2021.189.svn43546-150400.17.1 0:2021.189.svn53228-150400.17.1 0:2021.189.svn58747-150400.17.1 0:2021.189.2.2svn56350-150400.17.1 0:2021.189.0.0.7.2svn54994-150400.17.1 0:2021.189.1.009svn57553-150400.17.1 0:2021.189.0.0.8.1svn58508-150400.17.1 0:2021.189.2.7isvn56594-150400.17.1 0:2021.189.1.6csvn44799-150400.17.1 0:2021.189.2.0.7svn17115-150400.17.1 0:2021.189.5.5bsvn23330-150400.17.1 0:2021.189.20161201svn42621-150400.17.1 0:2021.189.1.0svn27034-150400.17.1 0:2021.189.1.1dsvn57618-150400.17.1 0:2021.189.1.0csvn52910-150400.17.1 0:2021.189.2.7svn27819-150400.17.1 0:2021.189.2.1.5svn57398-150400.17.1 0:2021.189.svn55688-150400.17.1 0:2021.189.3.0svn15878-150400.17.1 0:2021.189.2020.10svn56714-150400.17.1 0:2021.189.2.3svn21480-150400.17.1 0:2021.189.1.3svn51305-150400.17.1 0:2021.189.1.0asvn15878-150400.17.1 0:2021.189.svn56025-150400.17.1 0:2021.189.2.00svn32214-150400.17.1 0:2021.189.2.2svn54090-150400.17.1 0:2021.189.svn29646-150400.17.1 0:2021.189.2.1dsvn49719-150400.17.1 0:2021.189.1.003svn54512-150400.17.1 0:2021.189.1.6svn26313-150400.17.1 0:2021.189.1.0svn18312-150400.17.1 0:2021.189.0.0.96svn26789-150400.17.1 0:2021.189.1.1svn38922-150400.17.1 0:2021.189.svn24559-150400.17.1 0:2021.189.1.000_2016_initial_releasesvn42157-150400.17.1 0:2021.189.1.3svn27417-150400.17.1 0:2021.189.1.5svn56847-150400.17.1 0:2021.189.1svn56704-150400.17.1 0:2021.189.1.4asvn24054-150400.17.1 0:2021.189.1.2svn57248-150400.17.1 0:2021.189.0.0.3.0svn56088-150400.17.1 0:2021.189.1.1svn50043-150400.17.1 0:2021.189.1.4svn17275-150400.17.1 0:2021.189.0.0.1svn29652-150400.17.1 0:2021.189.1.03svn25434-150400.17.1 0:2021.189.0.0.1.1svn34545-150400.17.1 0:2021.189.0.0.1svn24684-150400.17.1 0:2021.189.1.2svn26018-150400.17.1 0:2021.189.svn26019-150400.17.1 0:2021.189.1.2svn26030-150400.17.1 0:2021.189.1.4svn49947-150400.17.1 0:2021.189.4.0.3svn50415-150400.17.1 0:2021.189.1.06svn15878-150400.17.1 0:2021.189.1.0svn24714-150400.17.1 0:2021.189.1.1svn56403-150400.17.1 0:2021.189.1.4svn55166-150400.17.1 0:2021.189.svn52820-150400.17.1 0:2021.189.svn37677-150400.17.1 0:2021.189.3.0svn58505-150400.17.1 0:2021.189.1.8svn19886-150400.17.1 0:2021.189.0.0.2svn29803-150400.17.1 0:2021.189.1.8svn52209-150400.17.1 0:2021.189.svn32934-150400.17.1 0:2021.189.svn19216-150400.17.1 0:2021.189.2.1svn57157-150400.17.1 0:2021.189.1.20svn29803-150400.17.1 0:2021.189.1.0.1svn15878-150400.17.1 0:2021.189.1.2svn58754-150400.17.1 0:2021.189.1.0svn36464-150400.17.1 0:2021.189.svn25112-150400.17.1 0:2021.189.2.01svn55978-150400.17.1 0:2021.189.0.0.3.1svn15878-150400.17.1 0:2021.189.1.1.1svn54512-150400.17.1 0:2021.189.svn56665-150400.17.1 0:2021.189.5.9svn54080-150400.17.1 0:2021.189.2.5esvn42428-150400.17.1 0:2021.189.1.4svn42121-150400.17.1 0:2021.189.1.2svn16189-150400.17.1 0:2021.189.1.0svn39365-150400.17.1 0:2021.189.1.11svn50589-150400.17.1 0:2021.189.1.0svn23567-150400.17.1 0:2021.189.1.6svn53170-150400.17.1 0:2021.189.2.9svn37156-150400.17.1 0:2021.189.1.0svn19469-150400.17.1 0:2021.189.1.0svn19440-150400.17.1 0:2021.189.1.01svn28484-150400.17.1 0:2021.189.001.001svn52778-150400.17.1 0:2021.189.1.0.1svn52570-150400.17.1 0:2021.189.1.01svn18651-150400.17.1 0:2021.189.1.0svn18651-150400.17.1 0:2021.189.0.0.5svn29803-150400.17.1 0:2021.189.4.8csvn53822-150400.17.1 0:2021.189.1.1svn19878-150400.17.1 0:2021.189.svn32068-150400.17.1 0:2021.189.0.0.3svn56291-150400.17.1 0:2021.189.0.0.2svn52311-150400.17.1 0:2021.189.1.0svn24980-150400.17.1 0:2021.189.1.6.0svn54732-150400.17.1 0:2021.189.0.0.5svn51928-150400.17.1 0:2021.189.1.0svn34049-150400.17.1 0:2021.189.2.0.7svn38913-150400.17.1 0:2021.189.0.0.0.betasvn38932-150400.17.1 0:2021.189.1.3svn56810-150400.17.1 0:2021.189.1.1svn49962-150400.17.1 0:2021.189.1.0.0svn55920-150400.17.1 0:2021.189.1.5.2svn15878-150400.17.1 0:2021.189.0.0.1svn52593-150400.17.1 0:2021.189.4.46svn54402-150400.17.1 0:2021.189.1.0svn35665-150400.17.1 0:2021.189.1.1svn35685-150400.17.1 0:2021.189.1.0svn49928-150400.17.1 0:2021.189.1.45svn54688-150400.17.1 0:2021.189.1.1svn42873-150400.17.1 0:2021.189.1.0svn55189-150400.17.1 0:2021.189.1.1svn36064-150400.17.1 0:2021.189.1.0svn51211-150400.17.1 0:2021.189.0.0.993svn21292-150400.17.1 0:2021.189.0.0.2svn15878-150400.17.1 0:2021.189.0.0.97svn15878-150400.17.1 0:2021.189.1.0svn21691-150400.17.1 0:2021.189.0.0.996svn24287-150400.17.1 0:2021.189.0.0.98svn24288-150400.17.1 0:2021.189.0.0.73svn29803-150400.17.1 0:2021.189.svn29349-150400.17.1 0:2021.189.0.0.9.5svn54758-150400.17.1 0:2021.189.svn28628-150400.17.1 0:2021.189.0.0.2svn56291-150400.17.1 0:2021.189.1.2lsvn57616-150400.17.1 0:2021.189.svn49869-150400.17.1 0:2021.189.1.1svn44764-150400.17.1 0:2021.189.1.4svn51052-150400.17.1 0:2021.189.0.0.2svn21387-150400.17.1 0:2021.189.svn38832-150400.17.1 0:2021.189.1.3.5svn22509-150400.17.1 0:2021.189.0.0.0.5svn56852-150400.17.1 0:2021.189.0.0.1.1svn47522-150400.17.1 0:2021.189.1.1svn46360-150400.17.1 0:2021.189.svn56514-150400.17.1 0:2021.189.svn41448-150400.17.1 0:2021.189.svn58539-150400.17.1 0:2021.189.svn56823-150400.17.1 0:2021.189.1.2svn56931-150400.17.1 0:2021.189.1.0svn32630-150400.17.1 0:2021.189.1.2svn57341-150400.17.1 0:2021.189.1.0svn58661-150400.17.1 0:2021.189.0.0.94svn31517-150400.17.1 0:2021.189.svn49052-150400.17.1 0:2021.189.2.0svn56851-150400.17.1 0:2021.189.1.7svn51612-150400.17.1 0:2021.189.svn28327-150400.17.1 0:2021.189.svn39419-150400.17.1 0:2021.189.6.0.0svn58331-150400.17.1 0:2021.189.1.3svn53024-150400.17.1 0:2021.189.2.1svn52756-150400.17.1 0:2021.189.0.0.2svn17354-150400.17.1 0:2021.189.0.0.3.0svn32981-150400.17.1 0:2021.189.1.0.2svn58723-150400.17.1 0:2021.189.0.0.3svn53762-150400.17.1 0:2021.189.0.0.1.1svn54512-150400.17.1 0:2021.189.svn35859-150400.17.1 0:2021.189.1.02svn34439-150400.17.1 0:2021.189.0.0.9.4svn56291-150400.17.1 0:2021.189.1.19.2svn52851-150400.17.1 0:2021.189.0.0.5svn49527-150400.17.1 0:2021.189.1.1svn32484-150400.17.1 0:2021.189.1.2bsvn49062-150400.17.1 0:2021.189.0.0.0.1svn57359-150400.17.1 0:2021.189.svn45712-150400.17.1 0:2021.189.1.6svn32258-150400.17.1 0:2021.189.0.0.7svn54512-150400.17.1 0:2021.189.svn48102-150400.17.1 0:2021.189.1.0.0_alpha.4svn55741-150400.17.1 0:2021.189.1.0.1svn57765-150400.17.1 0:2021.189.1.0svn38428-150400.17.1 0:2021.189.svn46494-150400.17.1 0:2021.189.0.0.1svn27671-150400.17.1 0:2021.189.svn56798-150400.17.1 0:2021.189.0.0.11svn52602-150400.17.1 0:2021.189.0.0.1.1svn48255-150400.17.1 0:2021.189.1.6.0svn43962-150400.17.1 0:2021.189.2.1svn43280-150400.17.1 0:2021.189.1.2bsvn15878-150400.17.1 0:2021.189.20120101svn25019-150400.17.1 0:2021.189.20120102svn25020-150400.17.1 0:2021.189.20210130svn57574-150400.17.1 0:2021.189.20210130svn57573-150400.17.1 0:2021.189.0.0.2svn21396-150400.17.1 0:2021.189.1.0svn26543-150400.17.1 0:2021.189.1.0svn21327-150400.17.1 0:2021.189.2.0.5svn15878-150400.17.1 0:2021.189.1.1svn32003-150400.17.1 0:2021.189.0.0.11svn23818-150400.17.1 0:2021.189.2.1.0svn56070-150400.17.1 0:2021.189.svn36348-150400.17.1 0:2021.189.1.3svn41359-150400.17.1 0:2021.189.1.4svn56181-150400.17.1 0:2021.189.1.1svn55213-150400.17.1 0:2021.189.1.6svn57045-150400.17.1 0:2021.189.2.0svn35722-150400.17.1 0:2021.189.2.0svn35723-150400.17.1 0:2021.189.1.5.2svn46054-150400.17.1 0:2021.189.2.0.0svn54758-150400.17.1 0:2021.189.svn16135-150400.17.1 0:2021.189.1.092svn51362-150400.17.1 0:2021.189.0.0.3asvn34733-150400.17.1 0:2021.189.1.15svn29349-150400.17.1 0:2021.189.0.0.61svn54080-150400.17.1 0:2021.189.svn58392-150400.17.1 0:2021.189.1.0svn57757-150400.17.1 0:2021.189.0.0.0.1svn57360-150400.17.1 0:2021.189.1.2svn42635-150400.17.1 0:2021.189.0.0.0betasvn15878-150400.17.1 0:2021.189.2.0.11svn53362-150400.17.1 0:2021.189.1.0.0svn58357-150400.17.1 0:2021.189.1.0.0svn54381-150400.17.1 0:2021.189.3.2svn55643-150400.17.1 0:2021.189.4.2svn30002-150400.17.1 0:2021.189.0.0.11svn44983-150400.17.1 0:2021.189.1.2asvn54512-150400.17.1 0:2021.189.1.8svn44474-150400.17.1 0:2021.189.svn27036-150400.17.1 0:2021.189.svn52810-150400.17.1 0:2021.189.1.14svn53048-150400.17.1 0:2021.189.1.1.2svn41378-150400.17.1 0:2021.189.1.4svn56106-150400.17.1 0:2021.189.1.01svn56021-150400.17.1 0:2021.189.1.0fsvn22255-150400.17.1 0:2021.189.0.0.23svn18020-150400.17.1 0:2021.189.1.1.1svn57580-150400.17.1 0:2021.189.1.1svn56848-150400.17.1 0:2021.189.1.4svn42547-150400.17.1 0:2021.189.0.0.01svn55643-150400.17.1 0:2021.189.2.19svn58411-150400.17.1 0:2021.189.0.0.04svn46051-150400.17.1 0:2021.189.0.0.01asvn52993-150400.17.1 0:2021.189.1.10svn53584-150400.17.1 0:2021.189.2.7svn56253-150400.17.1 0:2021.189.3.03svn53197-150400.17.1 0:2021.189.4.2dsvn17357-150400.17.1 0:2021.189.0.0.1svn48147-150400.17.1 0:2021.189.1.0bsvn17358-150400.17.1 0:2021.189.7.00ksvn58024-150400.17.1 0:2021.189.5.9svn57004-150400.17.1 0:2021.189.svn58619-150400.17.1 0:2021.189.svn58609-150400.17.1 0:2021.189.svn58652-150400.17.1 0:2021.189.svn54568-150400.17.1 0:2021.189.svn58630-150400.17.1 0:2021.189.svn58685-150400.17.1 0:2021.189.1.1svn58609-150400.17.1 0:2021.189.5svn58652-150400.17.1 0:2021.189.4.8gsvn58652-150400.17.1 0:2021.189.3.1svn58652-150400.17.1 0:2021.189.3.0bsvn58609-150400.17.1 0:2021.189.1.0asvn58609-150400.17.1 0:2021.189.5.0svn58652-150400.17.1 0:2021.189.2.3csvn15878-150400.17.1 0:2021.189.svn57387-150400.17.1 0:2021.189.svn55820-150400.17.1 0:2021.189.4.5svn15878-150400.17.1 0:2021.189.1.3asvn54512-150400.17.1 0:2021.189.0.0.1.0svn49018-150400.17.1 0:2021.189.0.0.2csvn54554-150400.17.1 0:2021.189.0.0.4dsvn25821-150400.17.1 0:2021.189.4.0svn17359-150400.17.1 0:2021.189.1.0.0svn41332-150400.17.1 0:2021.189.1.0.0svn38823-150400.17.1 0:2021.189.0.0.47svn20727-150400.17.1 0:2021.189.1.2bsvn47544-150400.17.1 0:2021.189.0.0.3svn23379-150400.17.1 0:2021.189.1.1svn56291-150400.17.1 0:2021.189.0.0.4asvn45533-150400.17.1 0:2021.189.2.0svn52626-150400.17.1 0:2021.189.svn24868-150400.17.1 0:2021.189.1.0dsvn56594-150400.17.1 0:2021.189.0.0.1asvn25819-150400.17.1 0:2021.189.0.0.2svn46153-150400.17.1 0:2021.189.1.0svn29613-150400.17.1 0:2021.189.1.7svn30958-150400.17.1 0:2021.189.1.1svn44886-150400.17.1 0:2021.189.svn17347-150400.17.1 0:2021.189.1.0jsvn15878-150400.17.1 0:2021.189.1.3esvn42287-150400.17.1 0:2021.189.svn38547-150400.17.1 0:2021.189.2020svn54080-150400.17.1 0:2021.189.1.5svn50227-150400.17.1 0:2021.189.6.2svn54683-150400.17.1 0:2021.189.1.7svn17667-150400.17.1 0:2021.189.1.12svn36500-150400.17.1 0:2021.189.0.0.1.0svn47557-150400.17.1 0:2021.189.1.121svn54512-150400.17.1 0:2021.189.4.1betasvn24099-150400.17.1 0:2021.189.1.5.1svn38931-150400.17.1 0:2021.189.1.5svn53023-150400.17.1 0:2021.189.svn22018-150400.17.1 0:2021.189.1.1svn57672-150400.17.1 0:2021.189.1.12svn52986-150400.17.1 0:2021.189.0.0.3svn28019-150400.17.1 0:2021.189.2.2svn34299-150400.17.1 0:2021.189.2021.2.1svn57590-150400.17.1 0:2021.189.1.3svn53168-150400.17.1 0:2021.189.svn57213-150400.17.1 0:2021.189.0.0.2svn36312-150400.17.1 0:2021.189.3.1svn21474-150400.17.1 0:2021.189.1.2svn27232-150400.17.1 0:2021.189.0.0.4svn50265-150400.17.1 0:2021.189.0.0.4.0svn58743-150400.17.1 0:2021.189.5th_editionsvn15878-150400.17.1 0:2021.189.svn48359-150400.17.1 0:2021.189.1.0svn49749-150400.17.1 0:2021.189.svn46364-150400.17.1 0:2021.189.1.2.2svn57773-150400.17.1 0:2021.189.0.0.3.3svn33457-150400.17.1 0:2021.189.svn52032-150400.17.1 0:2021.189.0.0.5svn47700-150400.17.1 0:2021.189.2.03svn52623-150400.17.1 0:2021.189.1.1svn45801-150400.17.1 0:2021.189.2.4svn15878-150400.17.1 0:2021.189.2.28svn16613-150400.17.1 0:2021.189.1.12svn57811-150400.17.1 0:2021.189.0.0.6.1svn27654-150400.17.1 0:2021.189.1.0svn17362-150400.17.1 0:2021.189.0.0.01svn45509-150400.17.1 0:2021.189.0.0.3svn23711-150400.17.1 0:2021.189.1.1svn25742-150400.17.1 0:2021.189.2.0svn49848-150400.17.1 0:2021.189.0.0.50svn37552-150400.17.1 0:2021.189.0.0.995bsvn19611-150400.17.1 0:2021.189.svn16364-150400.17.1 0:2021.189.2.4svn50870-150400.17.1 0:2021.189.3.13svn57186-150400.17.1 0:2021.189.1.12svn20408-150400.17.1 0:2021.189.1.7b8svn57826-150400.17.1 0:2021.189.0.0.26svn56932-150400.17.1 0:2021.189.1.30svn52717-150400.17.1 0:2021.189.1.3.1svn55044-150400.17.1 0:2021.189.0.0.1asvn49111-150400.17.1 0:2021.189.0.0.1svn47109-150400.17.1 0:2021.189.svn24858-150400.17.1 0:2021.189.svn58472-150400.17.1 0:2021.189.0.0.4.0svn58329-150400.17.1 0:2021.189.1.21svn52718-150400.17.1 0:2021.189.1.28svn56395-150400.17.1 0:2021.189.svn45751-150400.17.1 0:2021.189.1.00svn17346-150400.17.1 0:2021.189.1.0svn56867-150400.17.1 0:2021.189.svn57152-150400.17.1 0:2021.189.1.2.2svn15878-150400.17.1 0:2021.189.svn16211-150400.17.1 0:2021.189.svn56608-150400.17.1 0:2021.189.1.12svn57095-150400.17.1 0:2021.189.0.0.2svn37553-150400.17.1 0:2021.189.1.0.2svn53954-150400.17.1 0:2021.189.0.0.1svn56715-150400.17.1 0:2021.189.4.3svn15878-150400.17.1 0:2021.189.0.0.91svn15878-150400.17.1 0:2021.189.0.0.52svn15878-150400.17.1 0:2021.189.0.0.7svn24638-150400.17.1 0:2021.189.1.0svn48744-150400.17.1 0:2021.189.1.0svn48052-150400.17.1 0:2021.189.0.0.8asvn51727-150400.17.1 0:2021.189.svn21338-150400.17.1 0:2021.189.2.0svn36989-150400.17.1 0:2021.189.2.0svn57617-150400.17.1 0:2021.189.1.0svn24498-150400.17.1 0:2021.189.1.11svn56271-150400.17.1 0:2021.189.1.32svn15878-150400.17.1 0:2021.189.20191225.0svn58661-150400.17.1 0:2021.189.3.1415svn18042-150400.17.1 0:2021.189.2.01svn52160-150400.17.1 0:2021.189.1.0svn50828-150400.17.1 0:2021.189.0.0.5bsvn28195-150400.17.1 0:2021.189.1.6svn17992-150400.17.1 0:2021.189.0.0.0.2svn23698-150400.17.1 0:2021.189.2.2svn54677-150400.17.1 0:2021.189.svn21606-150400.17.1 0:2021.189.svn18488-150400.17.1 0:2021.189.3.0svn50782-150400.17.1 0:2021.189.svn17205-150400.17.1 0:2021.189.1.25svn58724-150400.17.1 0:2021.189.svn58682-150400.17.1 0:2021.189.1.1svn58470-150400.17.1 0:2021.189.0.0.5svn25025-150400.17.1 0:2021.189.3.33svn58585-150400.17.1 0:2021.189.svn47523-150400.17.1 0:2021.189.1.0svn26137-150400.17.1 0:2021.189.1.1.2svn57721-150400.17.1 0:2021.189.0.0.9.2svn49064-150400.17.1 0:2021.189.3.0.1svn58436-150400.17.1 0:2021.189.2.1.1asvn38630-150400.17.1 0:2021.189.2.1.2svn38558-150400.17.1 0:2021.189.2.1.0svn38727-150400.17.1 0:2021.189.svn58622-150400.17.1 0:2021.189.3.33svn55643-150400.17.1 0:2021.189.0.0.35svn58435-150400.17.1 0:2021.189.1.1svn24825-150400.17.1 0:2021.189.1.0.2svn39080-150400.17.1 0:2021.189.05.34svn27369-150400.17.1 0:2021.189.0.0.02svn45935-150400.17.1 0:2021.189.1.1svn47518-150400.17.1 0:2021.189.0.0.995bsvn19612-150400.17.1 0:2021.189.1.6svn53193-150400.17.1 0:2021.189.0.0.3.5svn56361-150400.17.1 0:2021.189.3.14svn56609-150400.17.1 0:2021.189.1.18svn53166-150400.17.1 0:2021.189.1.50svn19601-150400.17.1 0:2021.189.2.4svn39597-150400.17.1 0:2021.189.1.8.5.7svn15878-150400.17.1 0:2021.189.2.3svn31315-150400.17.1 0:2021.189.2.3svn25218-150400.17.1 0:2021.189.svn58509-150400.17.1 0:2021.189.svn55426-150400.17.1 0:2021.189.svn57789-150400.17.1 0:2021.189.svn58296-150400.17.1 0:2021.189.0.0.13svn15878-150400.17.1 0:2021.189.1.0svn51124-150400.17.1 0:2021.189.1.0svn46040-150400.17.1 0:2021.189.1.0svn33454-150400.17.1 0:2021.189.svn54070-150400.17.1 0:2021.189.svn44394-150400.17.1 0:2021.189.svn45756-150400.17.1 0:2021.189.svn31402-150400.17.1 0:2021.189.0.0.2svn27764-150400.17.1 0:2021.189.svn58476-150400.17.1 0:2021.189.0.0.2.1svn55846-150400.17.1 0:2021.189.1.1svn23806-150400.17.1 0:2021.189.1.2msvn36680-150400.17.1 0:2021.189.20201001_pl4svn57354-150400.17.1 0:2021.189.20210501_pre_release_0svn56791-150400.17.1 0:2021.189.20210501_pre_release_2svn57982-150400.17.1 0:2021.189.svn57981-150400.17.1 0:2021.189.svn40612-150400.17.1 0:2021.189.2svn25505-150400.17.1 0:2021.189.svn57311-150400.17.1 0:2021.189.1.0ksvn57981-150400.17.1 0:2021.189.svn28888-150400.17.1 0:2021.189.1.0.0svn54010-150400.17.1 0:2021.189.svn29235-150400.17.1 0:2021.189.2.4.2svn57349-150400.17.1 0:2021.189.1.0svn55475-150400.17.1 0:2021.189.1.63svn53131-150400.17.1 0:2021.189.1.2svn45076-150400.17.1 0:2021.189.20210501_pre_release_1svn57982-150400.17.1 0:2021.189.0.0.03svn49729-150400.17.1 0:2021.189.0.0.7svn55228-150400.17.1 0:2021.189.0.0.5.6svn53248-150400.17.1 0:2021.189.svn57275-150400.18.1 0:2021.189.1.29svn49249-150400.18.1 0:2021.189.1.0.2svn54389-150400.18.1 0:2021.189.1.0.1svn49759-150400.18.1 0:2021.189.1.0.10svn35999-150400.18.1 0:2021.189.1.0.10svn36000-150400.18.1 0:2021.189.0.0.2svn55475-150400.18.1 0:2021.189.1.0jsvn58151-150400.18.1 0:2021.189.1.13svn15878-150400.18.1 0:2021.189.svn35702-150400.18.1 0:2021.189.2.00svn36866-150400.18.1 0:2021.189.0.0.1asvn49888-150400.18.1 0:2021.189.svn53525-150400.18.1 0:2021.189.1.1svn39026-150400.18.1 0:2021.189.0.0.1svn55265-150400.18.1 0:2021.189.1.3.1.1svn55540-150400.18.1 0:2021.189.0.0.22svn26760-150400.18.1 0:2021.189.0.0.3svn29349-150400.18.1 0:2021.189.svn54811-150400.18.1 0:2021.189.3.9.1svn58595-150400.18.1 0:2021.189.4.70bsvn57213-150400.18.1 0:2021.189.1.2.1svn55643-150400.18.1 0:2021.189.1.6svn53109-150400.18.1 0:2021.189.1.2svn53485-150400.18.1 0:2021.189.3.3svn54512-150400.18.1 0:2021.189.0.0.2svn19087-150400.18.1 0:2021.189.2.6dsvn42428-150400.18.1 0:2021.189.1.0asvn17691-150400.18.1 0:2021.189.1.0svn46432-150400.18.1 0:2021.189.0.0.3svn16549-150400.18.1 0:2021.189.svn52851-150400.18.1 0:2021.189.1.3svn31474-150400.18.1 0:2021.189.0.0.6svn52275-150400.18.1 0:2021.189.2.1asvn56878-150400.18.1 0:2021.189.svn58503-150400.18.1 0:2021.189.svn23916-150400.18.1 0:2021.189.1.0.5svn53642-150400.18.1 0:2021.189.0.0.1svn58393-150400.18.1 0:2021.189.0.0.19.4svn41811-150400.18.1 0:2021.189.0.0.1betasvn56182-150400.18.1 0:2021.189.2.3svn52450-150400.18.1 0:2021.189.1.0asvn55064-150400.18.1 0:2021.189.1.6svn53022-150400.18.1 0:2021.189.svn54266-150400.18.1 0:2021.189.svn53709-150400.18.1 0:2021.189.3.002svn54722-150400.18.1 0:2021.189.2.23svn54560-150400.18.1 0:2021.189.svn21750-150400.18.1 0:2021.189.0.0.1svn15878-150400.18.1 0:2021.189.1.1.0.70svn57564-150400.18.1 0:2021.189.1.0csvn17364-150400.18.1 0:2021.189.1.1asvn36026-150400.18.1 0:2021.189.1.0svn15878-150400.18.1 0:2021.189.svn21818-150400.18.1 0:2021.189.3.5gsvn15878-150400.18.1 0:2021.189.svn31795-150400.18.1 0:2021.189.2.0svn23638-150400.18.1 0:2021.189.5.3.0svn54583-150400.18.1 0:2021.189.1.01svn44616-150400.18.1 0:2021.189.0.0.02svn55064-150400.18.1 0:2021.189.7.040svn57948-150400.18.1 0:2021.189.0.0.28svn57398-150400.18.1 0:2021.189.svn57754-150400.18.1 0:2021.189.1.2.2svn56861-150400.18.1 0:2021.189.1.0svn27789-150400.18.1 0:2021.189.1.0svn19880-150400.18.1 0:2021.189.svn56018-150400.18.1 0:2021.189.svn39375-150400.18.1 0:2021.189.svn56003-150400.18.1 0:2021.189.1.007svn19409-150400.18.1 0:2021.189.1.0svn53653-150400.18.1 0:2021.189.0.0.2.0svn56513-150400.18.1 0:2021.189.0.0.2.4svn56473-150400.18.1 0:2021.189.2.2svn44863-150400.18.1 0:2021.189.0.0.1.8svn54329-150400.18.1 0:2021.189.2.9svn21523-150400.18.1 0:2021.189.4.41svn57866-150400.18.1 0:2021.189.svn42268-150400.18.1 0:2021.189.4.3svn30815-150400.18.1 0:2021.189.0.0.1svn41304-150400.18.1 0:2021.189.0.0.30svn55415-150400.18.1 0:2021.189.2.3svn58123-150400.18.1 0:2021.189.2.0svn38722-150400.18.1 0:2021.189.2.2svn29349-150400.18.1 0:2021.189.1.2svn17373-150400.18.1 0:2021.189.1.8dsvn55265-150400.18.1 0:2021.189.67svn29349-150400.18.1 0:2021.189.1.5svn53097-150400.18.1 0:2021.189.1.03svn34893-150400.18.1 0:2021.189.1.63svn51923-150400.18.1 0:2021.189.0.0.2svn16134-150400.18.1 0:2021.189.svn46039-150400.18.1 0:2021.189.3.1svn20021-150400.18.1 0:2021.189.1.1.0svn55117-150400.18.1 0:2021.189.2.005svn58637-150400.18.1 0:2021.189.1.959svn36915-150400.18.1 0:2021.189.1.0svn25552-150400.18.1 0:2021.189.1.7svn58061-150400.18.1 0:2021.189.svn56019-150400.18.1 0:2021.189.0.0.2svn20422-150400.18.1 0:2021.189.svn56496-150400.18.1 0:2021.189.1.0svn24499-150400.18.1 0:2021.189.svn33254-150400.18.1 0:2021.189.2.5svn34491-150400.18.1 0:2021.189.1.08svn57457-150400.18.1 0:2021.189.0.0.6svn15878-150400.18.1 0:2021.189.1.0svn53003-150400.18.1 0:2021.189.1.07svn45678-150400.18.1 0:2021.189.1.2.0svn55117-150400.18.1 0:2021.189.1.0svn39028-150400.18.1 0:2021.189.1.0svn34302-150400.18.1 0:2021.189.0.0.2svn27889-150400.18.1 0:2021.189.1.3svn30704-150400.18.1 0:2021.189.svn36918-150400.18.1 0:2021.189.0.0.8svn20843-150400.18.1 0:2021.189.0.0.9svn31077-150400.18.1 0:2021.189.0.0.7svn21322-150400.18.1 0:2021.189.1.0svn39804-150400.18.1 0:2021.189.6.02svn56036-150400.18.1 0:2021.189.4.27svn55643-150400.18.1 0:2021.189.6.4svn58309-150400.18.1 0:2021.189.5.05svn39323-150400.18.1 0:2021.189.5.01fr_0svn23332-150400.18.1 0:2021.189.3.0csvn55643-150400.18.1 0:2021.189.6.2svn57038-150400.18.1 0:2021.189.svn36207-150400.18.1 0:2021.189.svn58468-150400.18.1 0:2021.189.4.26svn15878-150400.18.1 0:2021.189.5.01svn31296-150400.18.1 0:2021.189.svn55643-150400.18.1 0:2021.189.5.01.0svn55643-150400.18.1 0:2021.189.4.20svn55643-150400.17.1 0:2021.189.0.0.5svn35050-150400.17.1 0:2021.189.1.32svn55643-150400.17.1 0:2021.189.4.20svn15878-150400.17.1 0:2021.189.4.00svn55643-150400.17.1 0:2021.189.0.0.1svn56291-150400.17.1 0:2021.189.svn48160-150400.17.1 0:2021.189.0.0.1csvn49503-150400.17.1 0:2021.189.0.0.1.9svn45913-150400.17.1 0:2021.189.1.1svn34923-150400.17.1 0:2021.189.1.74dsvn17533-150400.17.1 0:2021.189.0.0.01svn43746-150400.17.1 0:2021.189.1.25svn56421-150400.17.1 0:2021.189.1.2dsvn21869-150400.17.1 0:2021.189.2.04svn38663-150400.17.1 0:2021.189.0.0.2.0svn50992-150400.17.1 0:2021.189.2.0svn57521-150400.17.1 0:2021.189.0.0.0.3csvn28332-150400.17.1 0:2021.189.svn21927-150400.17.1 0:2021.189.1.3svn21586-150400.17.1 0:2021.189.0.0.0.1asvn24897-150400.17.1 0:2021.189.0.0.7.0svn56414-150400.17.1 0:2021.189.0.0.7asvn47527-150400.17.1 0:2021.189.1.0.3svn56306-150400.17.1 0:2021.189.0.0.32svn58744-150400.17.1 0:2021.189.0.0.1svn56414-150400.17.1 0:2021.189.0.0.1.2svn58745-150400.17.1 0:2021.189.0.0.2svn55206-150400.17.1 0:2021.189.0.0.8svn57349-150400.17.1 0:2021.189.0.0.1asvn55777-150400.17.1 0:2021.189.0.0.5svn54512-150400.17.1 0:2021.189.1.2asvn25193-150400.17.1 0:2021.189.1.17svn57829-150400.17.1 0:2021.189.1.1svn56200-150400.17.1 0:2021.189.0.0.1svn50788-150400.17.1 0:2021.189.0.0.1bsvn25882-150400.17.1 0:2021.189.0.0.973svn20491-150400.17.1 0:2021.189.0.0.03svn35490-150400.17.1 0:2021.189.0.0.1svn57463-150400.17.1 0:2021.189.svn30473-150400.17.1 0:2021.189.1.0svn30474-150400.17.1 0:2021.189.1.9svn56541-150400.17.1 0:2021.189.1.1svn48469-150400.17.1 0:2021.189.2.73svn57277-150400.17.1 0:2021.189.0.0.6svn55475-150400.17.1 0:2021.189.2.20.7svn58279-150400.17.1 0:2021.189.3.17svn57443-150400.17.1 0:2021.189.0.0.2svn54779-150400.17.1 0:2021.189.1.0svn56113-150400.17.1 0:2021.189.0.0.01svn49419-150400.17.1 0:2021.189.svn37877-150400.17.1 0:2021.189.svn58702-150400.17.1 0:2021.189.1.4svn41456-150400.17.1 0:2021.189.1.3svn52663-150400.17.1 0:2021.189.20210319.0svn58542-150400.17.1 0:2021.189.3.0svn58085-150400.17.1 0:2021.189.1.0.1svn20747-150400.17.1 0:2021.189.0.0.5svn53825-150400.17.1 0:2021.189.0.0.1isvn58087-150400.17.1 0:2021.189.0.0.1nsvn57183-150400.17.1 0:2021.189.0.0.895svn57836-150400.17.1 0:2021.189.2.0bsvn32354-150400.17.1 0:2021.189.svn47848-150400.17.1 0:2021.189.1.0fsvn51252-150400.17.1 0:2021.189.0.0.63csvn52851-150400.17.1 0:2021.189.0.0.4asvn56291-150400.17.1 0:2021.189.1.1svn31498-150400.17.1 0:2021.189.0.0.4svn24694-150400.17.1 0:2021.189.1.7svn52983-150400.17.1 0:2021.189.0.0.0.1svn57373-150400.17.1 0:2021.189.0.0.3gsvn58563-150400.17.1 0:2021.189.0.0.2svn41012-150400.17.1 0:2021.189.0.0.1esvn15878-150400.17.1 0:2021.189.0.0.85svn49311-150400.17.1 0:2021.189.1.2svn46702-150400.17.1 0:2021.189.1.0.6svn15878-150400.17.1 0:2021.189.1.0svn44823-150400.17.1 0:2021.189.2.0svn52811-150400.17.1 0:2021.189.2.1svn28973-150400.17.1 0:2021.189.2.7.5svn49720-150400.17.1 0:2021.189.svn54684-150400.17.1 0:2021.189.svn45777-150400.17.1 0:2021.189.1.7svn36110-150400.17.1 0:2021.189.svn49874-150400.17.1 0:2021.189.1.6.2svn58760-150400.17.1 0:2021.189.svn56016-150400.17.1 0:2021.189.1.1svn48281-150400.17.1 0:2021.189.1.2svn55064-150400.17.1 0:2021.189.1.4bsvn48383-150400.17.1 0:2021.189.2.9.0svn56414-150400.17.1 0:2021.189.2.2asvn29349-150400.17.1 0:2021.189.1.1svn58635-150400.17.1 0:2021.189.1.0.1svn29845-150400.17.1 0:2021.189.1.1svn35773-150400.17.1 0:2021.189.1.43svn36270-150400.17.1 0:2021.189.svn44131-150400.17.1 0:2021.189.svn21129-150400.17.1 0:2021.189.1.13svn52305-150400.17.1 0:2021.189.1.3wsvn52840-150400.17.1 0:2021.189.1.03svn53044-150400.17.1 0:2021.189.0.0.1fsvn15878-150400.17.1 0:2021.189.2.31svn31639-150400.17.1 0:2021.189.0.0.9svn34301-150400.17.1 0:2021.189.1.00svn15878-150400.17.1 0:2021.189.0.0.5svn53519-150400.17.1 0:2021.189.1.01svn49547-150400.17.1 0:2021.189.1.6svn53035-150400.17.1 0:2021.189.1.0svn54244-150400.17.1 0:2021.189.1.3.2svn39864-150400.17.1 0:2021.189.1.003svn52663-150400.17.1 0:2021.189.1.1svn46754-150400.17.1 0:2021.189.3.4svn37763-150400.17.1 0:2021.189.0.0.2bsvn42773-150400.17.1 0:2021.189.1.13svn31957-150400.17.1 0:2021.189.1.26svn58725-150400.17.1 0:2021.189.0.0.3svn34323-150400.17.1 0:2021.189.1.3svn17582-150400.17.1 0:2021.189.0.0.4svn46155-150400.17.1 0:2021.189.4.62svn58756-150400.17.1 0:2021.189.1.6svn18173-150400.17.1 0:2021.189.1.2svn31648-150400.17.1 0:2021.189.6.3.1svn57333-150400.17.1 0:2021.189.1.9bsvn31075-150400.17.1 0:2021.189.1.2svn20298-150400.17.1 0:2021.189.0.0.5svn28399-150400.17.1 0:2021.189.1.05.4svn15878-150400.17.1 0:2021.189.0.0.5svn57528-150400.17.1 0:2021.189.1.15svn58025-150400.17.1 0:2021.189.svn38828-150400.17.1 0:2021.189.1.6svn31878-150400.17.1 0:2021.189.0.0.1svn55918-150400.17.1 0:2021.189.svn48664-150400.17.1 0:2021.189.3.7osvn58666-150400.17.1 0:2021.189.1.2svn30452-150400.17.1 0:2021.189.0.0.1.1svn49631-150400.17.1 0:2021.189.svn50268-150400.17.1 0:2021.189.svn45997-150400.17.1 0:2021.189.0.0.994svn15878-150400.17.1 0:2021.189.0.0.1svn55643-150400.17.1 0:2021.189.1.6.1svn57172-150400.17.1 0:2021.189.1.02svn56060-150400.17.1 0:2021.189.svn56365-150400.17.1 0:2021.189.2.71828182svn57972-150400.17.1 0:2021.189.0.0.9svn15878-150400.17.1 0:2021.189.0.0.12svn18611-150400.17.1 0:2021.189.1.00svn49774-150400.17.1 0:2021.189.0.0.5.0svn55010-150400.17.1 0:2021.189.0.0.93svn15878-150400.17.1 0:2021.189.svn48753-150400.17.1 0:2021.189.1.1.2svn56246-150400.17.1 0:2021.189.0.0.56svn37105-150400.17.1 0:2021.189.0.0.2.6svn49923-150400.17.1 0:2021.189.2.0bsvn17485-150400.17.1 0:2021.189.1.0svn18489-150400.17.1 0:2021.189.1.5svn52323-150400.17.1 0:2021.189.1.05asvn58661-150400.17.1 0:2021.189.2.6svn57018-150400.17.1 0:2021.189.2.06svn45803-150400.17.1 0:2021.189.2.0svn42428-150400.17.1 0:2021.189.1.002svn54512-150400.17.1 0:2021.189.svn46036-150400.17.1 0:2021.189.1.10svn28444-150400.17.1 0:2021.189.0.0.4svn17745-150400.17.1 0:2021.189.4.2svn41676-150400.17.1 0:2021.189.svn52662-150400.17.1 0:2021.189.1.7svn38224-150400.17.1 0:2021.189.0.0.6svn49651-150400.17.1 0:2021.189.1.1svn54512-150400.17.1 0:2021.189.2.8csvn58394-150400.17.1 0:2021.189.1.1asvn17484-150400.17.1 0:2021.189.1.2svn18789-150400.17.1 0:2021.189.1.0svn41610-150400.17.1 0:2021.189.1.02svn54361-150400.17.1 0:2021.189.svn58475-150400.17.1 0:2021.189.0.0.2asvn30914-150400.17.1 0:2021.189.1.0svn43752-150400.17.1 0:2021.189.0.0.96svn32559-150400.17.1 0:2021.189.svn58395-150400.17.1 0:2021.189.svn17483-150400.17.1 0:2021.189.62svn48196-150400.17.1 0:2021.189.1.1svn32165-150400.17.1 0:2021.189.2.5svn44855-150400.17.1 0:2021.189.svn32069-150400.17.1 0:2021.189.1.8fsvn42186-150400.17.1 0:2021.189.1.8svn56949-150400.17.1 0:2021.189.1.004svn54512-150400.17.1 0:2021.189.2.0svn26313-150400.17.1 0:2021.189.0.0.8svn29725-150400.17.1 0:2021.189.1.02svn33700-150400.17.1 0:2021.189.0.0.9svn56878-150400.17.1 0:2021.189.1.2svn53021-150400.17.1 0:2021.189.0.0.6asvn15878-150400.17.1 0:2021.189.1.2svn57458-150400.17.1 0:2021.189.2.2svn57186-150400.17.1 0:2021.189.2.0svn56927-150400.17.1 0:2021.189.1.03svn15878-150400.17.1 0:2021.189.0.0.8svn35521-150400.17.1 0:2021.189.3.1svn55729-150400.17.1 0:2021.189.1.4svn18651-150400.17.1 0:2021.189.1.0.1svn50010-150400.17.1 0:2021.189.2.1.0svn57496-150400.17.1 0:2021.189.1.03.1svn47269-150400.17.1 0:2021.189.0.0.11svn55518-150400.17.1 0:2021.189.4.2svn56303-150400.17.1 0:2021.189.0.0.3asvn56886-150400.17.1 0:2021.189.1svn29803-150400.17.1 0:2021.189.svn44142-150400.17.1 0:2021.189.1.0svn47599-150400.17.1 0:2021.189.0.0.2svn28140-150400.17.1 0:2021.189.ivu.04.092svn29349-150400.17.1 0:2021.189.1.03svn54512-150400.17.1 0:2021.189.0.0.9svn57683-150400.17.1 0:2021.189.1.03svn24479-150400.17.1 0:2021.189.1.0hsvn37927-150400.17.1 0:2021.189.r0.83svn38815-150400.17.1 0:2021.189.1.9svn17513-150400.17.1 0:2021.189.2.3asvn22126-150400.17.1 0:2021.189.svn49531-150400.17.1 0:2021.189.svn46946-150400.17.1 0:2021.189.svn26473-150400.17.1 0:2021.189.1.34svn29349-150400.17.1 0:2021.189.0.0.1svn39729-150400.17.1 0:2021.189.0.0.20svn23252-150400.17.1 0:2021.189.0.0.3svn29776-150400.17.1 0:2021.189.1.004svn15878-150400.17.1 0:2021.189.1.5svn49559-150400.17.1 0:2021.189.svn57347-150400.17.1 0:2021.189.17.06svn44453-150400.17.1 0:2021.189.svn57473-150400.17.1 0:2021.189.1.16svn15878-150400.17.1 0:2021.189.0.0.51svn49578-150400.17.1 0:2021.189.2.8svn46106-150400.17.1 0:2021.189.1.1+svn17967-150400.17.1 0:2021.189.1.02svn43445-150400.17.1 0:2021.189.svn34878-150400.17.1 0:2021.189.0.0.2svn56991-150400.17.1 0:2021.189.svn21775-150400.17.1 0:2021.189.1.03svn38035-150400.17.1 0:2021.189.1.03svn30939-150400.17.1 0:2021.189.1.3asvn56366-150400.17.1 0:2021.189.1.10svn40637-150400.17.1 0:2021.189.1.42svn18302-150400.17.1 0:2021.189.1.0svn56291-150400.17.1 0:2021.189.1.5svn45943-150400.17.1 0:2021.189.0.0.9bsvn49065-150400.17.1 0:2021.189.2.8svn58396-150400.17.1 0:2021.189.svn53596-150400.17.1 0:2021.189.1svn47472-150400.17.1 0:2021.189.1.2.2svn21649-150400.17.1 0:2021.189.1.31svn57353-150400.17.1 0:2021.189.svn37762-150400.17.1 0:2021.189.svn40307-150400.17.1 0:2021.189.1.1dsvn24857-150400.17.1 0:2021.189.svn23861-150400.17.1 0:2021.189.1.0.1svn29370-150400.17.1 0:2021.189.0.0.75svn44352-150400.17.1 0:2021.189.svn53520-150400.17.1 0:2021.189.3.3csvn30021-150400.17.1 0:2021.189.1.5.6svn26807-150400.17.1 0:2021.189.svn56751-150400.17.1 0:2021.189.3.4svn21392-150400.17.1 0:2021.189.1.01svn41996-150400.17.1 0:2021.189.1.0svn45130-150400.17.1 0:2021.189.1.2svn55559-150400.17.1 0:2021.189.0.0.7svn24741-150400.17.1 0:2021.189.3.6svn58026-150400.17.1 0:2021.189.1.0svn55881-150400.17.1 0:2021.189.2.03ysvn56224-150400.17.1 0:2021.189.3.0svn29558-150400.17.1 0:2021.189.3.19svn38100-150400.17.1 0:2021.189.8.31bsvn20668-150400.17.1 0:2021.189.0.0.1svn32693-150400.17.1 0:2021.189.1.0svn21819-150400.17.1 0:2021.189.1.1svn41413-150400.17.1 0:2021.189.1.1svn41643-150400.17.1 0:2021.189.3.5.3svn51810-150400.17.1 0:2021.189.3.2017.2svn45107-150400.17.1 0:2021.189.svn46639-150400.17.1 0:2021.189.1.3dsvn29601-150400.17.1 0:2021.189.svn27323-150400.17.1 0:2021.189.1.0svn31500-150400.17.1 0:2021.189.1.03svn39029-150400.17.1 0:2021.189.2.0svn18704-150400.17.1 0:2021.189.3.02svn57801-150400.17.1 0:2021.189.1.0svn29331-150400.17.1 0:2021.189.1.1lsvn52906-150400.17.1 0:2021.189.9.4svn15878-150400.17.1 0:2021.189.0.0.51svn58212-150400.17.1 0:2021.189.1.414svn56845-150400.17.1 0:2021.189.1.642svn58748-150400.17.1 0:2021.189.1.053svn56527-150400.17.1 0:2021.189.1.056svn54512-150400.17.1 0:2021.189.1.2svn47382-150400.17.1 0:2021.189.1.1svn23996-150400.17.1 0:2021.189.1.6svn58256-150400.17.1 0:2021.189.svn43640-150400.17.1 0:2021.189.0.0.7asvn28527-150400.17.1 0:2021.189.1.1csvn36086-150400.17.1 0:2021.189.svn44671-150400.17.1 0:2021.189.5.13svn58667-150400.17.1 0:2021.189.r0.67svn38914-150400.17.1 0:2021.189.svn48295-150400.17.1 0:2021.189.svn54191-150400.17.1 0:2021.189.1.013svn54512-150400.17.1 0:2021.189.1.1svn55877-150400.17.1 0:2021.189.1.1.2svn50492-150400.17.1 0:2021.189.0.0.2svn16437-150400.17.1 0:2021.189.1.0svn58328-150400.17.1 0:2021.189.1.07svn53768-150400.17.1 0:2021.189.1.04svn37984-150400.17.1 0:2021.189.0.0.0svn56575-150400.17.1 0:2021.189.1.0svn30140-150400.17.1 0:2021.189.2.2svn56742-150400.17.1 0:2021.189.0.0.2.2svn35709-150400.17.1 0:2021.189.1.2svn26786-150400.17.1 0:2021.189.5.5svn57263-150400.17.1 0:2021.189.0.0.4svn16549-150400.17.1 0:2021.189.1.0svn17598-150400.17.1 0:2021.189.1svn22114-150400.17.1 0:2021.189.svn18128-150400.17.1 0:2021.189.svn37675-150400.17.1 0:2021.189.r11svn40125-150400.17.1 0:2021.189.1.3svn15878-150400.17.1 0:2021.189.1.0.1svn42428-150400.17.1 0:2021.189.2.0msvn52231-150400.17.1 0:2021.189.0.0.8.1svn41906-150400.17.1 0:2021.189.1.0svn45396-150400.17.1 0:2021.189.svn42361-150400.17.1 0:2021.189.20191119_unicode12svn53968-150400.17.1 0:2021.189.svn18129-150400.17.1 0:2021.189.1.02svn58726-150400.17.1 0:2021.189.1.52svn54512-150400.17.1 0:2021.189.1.0svn24066-150400.17.1 0:2021.189.1.0svn30991-150400.17.1 0:2021.189.0.0.98svn51389-150400.17.1 0:2021.189.2.01asvn29027-150400.17.1 0:2021.189.2.1esvn56959-150400.17.1 0:2021.189.svn54252-150400.17.1 0:2021.189.1.33svn27609-150400.17.1 0:2021.189.1.203svn15878-150400.17.1 0:2021.189.0.0.1svn22256-150400.17.1 0:2021.189.1.1svn47307-150400.17.1 0:2021.189.1.10svn33109-150400.17.1 0:2021.189.1.0svn51640-150400.17.1 0:2021.189.1.0.0svn57759-150400.17.1 0:2021.189.2.0.2svn31729-150400.17.1 0:2021.189.svn18130-150400.17.1 0:2021.189.svn44895-150400.17.1 0:2021.189.1.39svn27498-150400.17.1 0:2021.189.1.4svn56912-150400.17.1 0:2021.189.0.0.0.1svn57429-150400.17.1 0:2021.189.1.0.1svn54392-150400.17.1 0:2021.189.svn56291-150400.17.1 0:2021.189.svn19389-150400.17.1 0:2021.189.0.0.11svn33355-150400.17.1 0:2021.189.0.0.4svn28803-150400.17.1 0:2021.189.0.0.50svn57531-150400.17.1 0:2021.189.svn25689-150400.17.1 0:2021.189.svn20852-150400.17.1 0:2021.189.svn20969-150400.17.1 0:2021.189.svn45674-150400.17.1 0:2021.189.0.0.6svn38449-150400.17.1 0:2021.189.svn16991-150400.17.1 0:2021.189.svn24876-150400.17.1 0:2021.189.svn28668-150400.17.1 0:2021.189.2.0svn42872-150400.17.1 0:2021.189.1.00svn17932-150400.17.1 0:2021.189.2.6svn57213-150400.17.1 0:2021.189.may_2019svn54080-150400.17.1 0:2021.189.svn33046-150400.17.1 0:2021.189.1.4svn52525-150400.17.1 0:2021.189.0.0.20svn42927-150400.17.1 0:2021.189.1.1svn17474-150400.17.1 0:2021.189.2.2svn54512-150400.17.1 0:2021.189.1.4svn44951-150400.17.1 0:2021.189.1.0svn27331-150400.17.1 0:2021.189.1.01svn58515-150400.17.1 0:2021.189.3.1svn50941-150400.17.1 0:2021.189.2.2bsvn18131-150400.17.1 0:2021.189.1.0svn39030-150400.17.1 0:2021.189.1.0.3svn58432-150400.17.1 0:2021.189.1.0svn57390-150400.17.1 0:2021.189.1.7svn54328-150400.17.1 0:2021.189.svn57253-150400.17.1 0:2021.189.svn44889-150400.17.1 0:2021.189.1.2svn23714-150400.17.1 0:2021.189.svn21833-150400.17.1 0:2021.189.1.2svn54254-150400.17.1 0:2021.189.svn18360-150400.17.1 0:2021.189.0.0.94svn21095-150400.17.1 0:2021.189.1.1svn25192-150400.17.1 0:2021.189.0.0.1svn45601-150400.17.1 0:2021.189.2.12svn57866-150400.17.1 0:2021.189.svn56079-150400.17.1 0:2021.189.1.3svn53889-150400.17.1 0:2021.189.svn24947-150400.17.1 0:2021.189.3.002svn42617-150400.17.1 0:2021.189.1.0svn47621-150400.17.1 0:2021.189.1.0isvn44487-150400.17.1 0:2021.189.0.0.5svn16915-150400.17.1 0:2021.189.1.10svn56105-150400.17.1 0:2021.189.1.2fsvn39164-150400.17.1 0:2021.189.1.0lsvn34521-150400.17.1 0:2021.189.1.0hsvn23667-150400.17.1 0:2021.189.1.2bsvn19230-150400.17.1 0:2021.189.1.35svn49560-150400.17.1 0:2021.189.svn40042-150400.17.1 0:2021.189.2.7svn43021-150400.17.1 0:2021.189.svn32859-150400.17.1 0:2021.189.5.0.1svn56621-150400.17.1 0:2021.189.3bsvn51720-150400.17.1 0:2021.189.1.3svn54840-150400.17.1 0:2021.189.1.4svn21475-150400.17.1 0:2021.189.2.0hsvn58358-150400.17.1 0:2021.189.1.9svn55859-150400.17.1 0:2021.189.1.03svn32313-150400.17.1 0:2021.189.2.01svn32263-150400.17.1 0:2021.189.2.01svn39542-150400.17.1 0:2021.189.1.05svn41379-150400.17.1 0:2021.189.2.4svn57972-150400.17.1 0:2021.189.svn16490-150400.17.1 0:2021.189.3.05svn22045-150400.17.1 0:2021.189.0.0.5svn16005-150400.17.1 0:2021.189.1.0svn21629-150400.17.1 0:2021.189.0.0.1lsvn54512-150400.17.1 0:2021.189.5.0svn15878-150400.17.1 0:2021.189.1.0.1svn57161-150400.17.1 0:2021.189.svn40986-150400.17.1 0:2021.189.1.2svn24807-150400.17.1 0:2021.189.0.0.1svn24830-150400.17.1 0:2021.189.2.4svn32809-150400.17.1 0:2021.189.0.0.1svn17583-150400.17.1 0:2021.189.1.0svn51127-150400.17.1 0:2021.189.1.4svn53521-150400.17.1 0:2021.189.2.0svn52912-150400.17.1 0:2021.189.2.4asvn49047-150400.17.1 0:2021.189.1.7asvn18735-150400.17.1 0:2021.189.1.40svn55435-150400.17.1 0:2021.189.1.15svn53082-150400.17.1 0:2021.189.3.03svn56991-150400.17.1 0:2021.189.0.0.32svn46617-150400.17.1 0:2021.189.0.0.12svn53047-150400.17.1 0:2021.189.0.0.95csvn58511-150400.17.1 0:2021.189.0.0.92svn23492-150400.17.1 0:2021.189.1.2asvn57923-150400.17.1 0:2021.189.1.4svn37946-150400.17.1 0:2021.189.0.0.5tsvn58212-150400.17.1 0:2021.189.0.0.6.0svn57735-150400.17.1 0:2021.189.1.0svn48245-150400.17.1 0:2021.189.1.0svn45985-150400.17.1 0:2021.189.1.2svn50100-150400.17.1 0:2021.189.1.5svn42428-150400.17.1 0:2021.189.svn20373-150400.17.1 0:2021.189.svn57973-150400.17.1 0:2021.189.1.1.0svn49169-150400.17.1 0:2021.189.0.0.33svn55777-150400.17.1 0:2021.189.1.01svn31016-150400.17.1 0:2021.189.1.6.3svn50338-150400.17.1 0:2021.189.2.00svn57166-150400.17.1 0:2021.189.1.0svn31990-150400.17.1 0:2021.189.1.4svn57508-150400.17.1 0:2021.189.svn48861-150400.17.1 0:2021.189.2.3svn54080-150400.17.1 0:2021.189.2.2svn52162-150400.17.1 0:2021.189.0.0.9svn37297-150400.17.1 0:2021.189.1.0001svn25915-150400.17.1 0:2021.189.svn39165-150400.17.1 0:2021.189.r36svn31934-150400.17.1 0:2021.189.3.1.8bsvn57240-150400.17.1 0:2021.189.1.2svn52635-150400.17.1 0:2021.189.0.0.3svn55342-150400.17.1 0:2021.189.1.1svn32269-150400.17.1 0:2021.189.2.0.0svn58467-150400.17.1 0:2021.189.0.0.2.1.1svn55342-150400.17.1 0:2021.189.0.0.7svn55342-150400.17.1 0:2021.189.5.0svn52662-150400.17.1 0:2021.189.0.0.0.1svn26093-150400.17.1 0:2021.189.0.0.21svn35152-150400.17.1 0:2021.189.1.20svn54770-150400.17.1 0:2021.189.2.1asvn56615-150400.17.1 0:2021.189.1.2svn55326-150400.17.1 0:2021.189.1.17svn54080-150400.17.1 0:2021.189.1.0svn41857-150400.17.1 0:2021.189.1.0svn41858-150400.17.1 0:2021.189.1.0svn41859-150400.17.1 0:2021.189.2.0svn45084-150400.17.1 0:2021.189.1.0svn41869-150400.17.1 0:2021.189.1.0svn41870-150400.17.1 0:2021.189.1.0svn41871-150400.17.1 0:2021.189.1.3svn36396-150400.17.1 0:2021.189.1.2svn45356-150400.17.1 0:2021.189.1.5svn56954-150400.17.1 0:2021.189.2.2svn51933-150400.17.1 0:2021.189.svn56468-150400.17.1 0:2021.189.1.3.2svn43963-150400.17.1 0:2021.189.svn18739-150400.17.1 0:2021.189.1.1.2svn58727-150400.17.1 0:2021.189.1.3svn28590-150400.17.1 0:2021.189.1.2.0svn58728-150400.17.1 0:2021.189.1.0svn21574-150400.17.1 0:2021.189.1.2asvn57349-150400.17.1 0:2021.189.0.0.4bsvn56504-150400.17.1 0:2021.189.1.1svn21943-150400.17.1 0:2021.189.svn24965-150400.17.1 0:2021.189.1.6svn54867-150400.17.1 0:2021.189.0.0.3.0svn19440-150400.17.1 0:2021.189.svn21894-150400.17.1 0:2021.189.1.2svn24769-150400.17.1 0:2021.189.1.1.2svn55966-150400.17.1 0:2021.189.svn24731-150400.17.1 0:2021.189.1.618svn15878-150400.17.1 0:2021.189.0.0.2.0svn57508-150400.17.1 0:2021.189.1.7svn26032-150400.17.1 0:2021.189.1.6svn56061-150400.17.1 0:2021.189.0.0.7.0svn47486-150400.17.1 0:2021.189.1.9.0svn58729-150400.17.1 0:2021.189.1.09asvn58661-150400.17.1 0:2021.189.0.0.1d1svn45145-150400.17.1 0:2021.189.2.2svn19848-150400.17.1 0:2021.189.3.141592653svn57963-150400.17.1 0:2021.189.svn28424-150400.17.1 0:2021.189.0.0.4asvn27765-150400.17.1 0:2021.189.svn52783-150400.17.1 0:2021.189.1.0svn29803-150400.17.1 0:2021.189.0.0.3.1svn55214-150400.17.1 0:2021.189.svn57729-150400.17.1 0:2021.189.3.1svn49557-150400.17.1 0:2021.189.0.0.9nsvn57731-150400.17.1 0:2021.189.svn56005-150400.17.1 0:2021.189.0.0.07asvn47562-150400.17.1 0:2021.189.1svn56605-150400.17.1 0:2021.189.4.3svn30353-150400.17.1 0:2021.189.0.0.5csvn31088-150400.17.1 0:2021.189.1.0.07svn56868-150400.17.1 0:2021.189.1.4svn53046-150400.17.1 0:2021.189.0.0.3.4svn54378-150400.17.1 0:2021.189.2.94asvn57672-150400.17.1 0:2021.189.2.0.2svn39249-150400.17.1 0:2021.189.1.0svn16287-150400.17.1 0:2021.189.3.1415926svn56082-150400.17.1 0:2021.189.2.2svn53129-150400.17.1 0:2021.189.3.0.1svn39921-150400.17.1 0:2021.189.svn56070-150400.17.1 0:2021.189.0.0.7.5svn53633-150400.17.1 0:2021.189.1.3.4svn44213-150400.17.1 0:2021.189.1.101svn20075-150400.17.1 0:2021.189.1.52svn58444-150400.17.1 0:2021.189.0.0.19svn44832-150400.17.1 0:2021.189.0.0.8.6svn55837-150400.17.1 0:2021.189.0.0.05svn52080-150400.17.1 0:2021.189.1.0svn55920-150400.17.1 0:2021.189.svn21641-150400.17.1 0:2021.189.1.1svn18305-150400.17.1 0:2021.189.1.6svn58730-150400.17.1 0:2021.189.0.0.02asvn52922-150400.17.1 0:2021.189.1.0.0svn47963-150400.17.1 0:2021.189.0.0.13csvn15878-150400.17.1 0:2021.189.0.0.4nsvn15878-150400.17.1 0:2021.189.2.0.3svn52312-150400.17.1 0:2021.189.2.00svn57000-150400.17.1 0:2021.189.2011svn30447-150400.17.1 0:2021.189.2.2.1svn50048-150400.17.1 0:2021.189.1.0svn35147-150400.17.1 0:2021.189.12.3svn56708-150400.17.1 0:2021.189.1.6svn54080-150400.17.1 0:2021.189.1.2svn57902-150400.17.1 0:2021.189.1.1asvn19847-150400.17.1 0:2021.189.3.05svn44783-150400.17.1 0:2021.189.svn51771-150400.17.1 0:2021.189.svn21893-150400.17.1 0:2021.189.1.1svn20886-150400.17.1 0:2021.189.0.0.98svn58710-150400.17.1 0:2021.189.3.3.14svn44214-150400.17.1 0:2021.189.1.10svn19519-150400.17.1 0:2021.189.1.0b_4svn33822-150400.17.1 0:2021.189.svn51194-150400.17.1 0:2021.189.1.04svn50938-150400.17.1 0:2021.189.0.0.7_svn_8641svn52221-150400.17.1 0:2021.189.svn40538-150400.17.1 0:2021.189.1.0hsvn33033-150400.17.1 0:2021.189.svn41633-150400.17.1 0:2021.189.1.13svn25562-150400.17.1 0:2021.189.1.06svn51919-150400.17.1 0:2021.189.svn23552-150400.17.1 0:2021.189.1.68svn53559-150400.17.1 0:2021.189.1.0svn55013-150400.17.1 0:2021.189.1.1.3svn52582-150400.17.1 0:2021.189.3.04svn15878-150400.17.1 0:2021.189.1.1svn26243-150400.17.1 0:2021.189.0.0.17svn15878-150400.17.1 0:2021.189.0.0.35svn15878-150400.17.1 0:2021.189.1.3svn57434-150400.17.1 0:2021.189.9.3svn54694-150400.17.1 0:2021.189.1.10svn17257-150400.17.1 0:2021.189.2.06svn56758-150400.17.1 0:2021.189.1.02svn19591-150400.17.1 0:2021.189.0.0.02svn46643-150400.17.1 0:2021.189.0.0.01svn41980-150400.17.1 0:2021.189.1.3svn22138-150400.17.1 0:2021.189.0.0.92svn18734-150400.17.1 0:2021.189.0.0.18svn45096-150400.17.1 0:2021.189.0.0.03svn41981-150400.17.1 0:2021.189.1.62svn40685-150400.17.1 0:2021.189.0.0.02svn49817-150400.17.1 0:2021.189.0.0.47svn15878-150400.17.1 0:2021.189.1.06asvn49422-150400.17.1 0:2021.189.2.17svn55289-150400.17.1 0:2021.189.1.07svn37377-150400.17.1 0:2021.189.0.0.6svn48230-150400.17.1 0:2021.189.0.0.98_betasvn15878-150400.17.1 0:2021.189.0.0.02svn46579-150400.17.1 0:2021.189.0.0.16svn17556-150400.17.1 0:2021.189.2.03svn15878-150400.17.1 0:2021.189.0.0.14svn29803-150400.17.1 0:2021.189.1.75svn56474-150400.17.1 0:2021.189.1.3.2svn19296-150400.17.1 0:2021.189.0.0.06svn45289-150400.17.1 0:2021.189.0.0.01svn48781-150400.17.1 0:2021.189.0.0.02svn45109-150400.17.1 0:2021.189.0.0.11asvn54376-150400.17.1 0:2021.189.0.0.04svn17909-150400.17.1 0:2021.189.0.0.95svn55439-150400.17.1 0:2021.189.0.0.22asvn35832-150400.17.1 0:2021.189.0.0.06svn46273-150400.17.1 0:2021.189.1.1svn45319-150400.17.1 0:2021.189.1.34svn15878-150400.17.1 0:2021.189.0.0.02svn21717-150400.17.1 0:2021.189.0.0.11svn15878-150400.17.1 0:2021.189.0.0.4svn33210-150400.17.1 0:2021.189.2.6svn20946-150400.17.1 0:2021.189.0.0.2svn16033-150400.17.1 0:2021.189.2.04svn39077-150400.17.1 0:2021.189.0.0.95svn29803-150400.17.1 0:2021.189.1.02svn15878-150400.17.1 0:2021.189.0.0.12svn15878-150400.17.1 0:2021.189.0.0.02svn49556-150400.17.1 0:2021.189.1.16svn49780-150400.17.1 0:2021.189.1.6svn50925-150400.17.1 0:2021.189.0.0.65svn49425-150400.17.1 0:2021.189.1.01svn32997-150400.17.1 0:2021.189.2.1svn49223-150400.17.1 0:2021.189.1.42asvn54687-150400.17.1 0:2021.189.0.0.22svn54514-150400.17.1 0:2021.189.0.0.15svn58293-150400.17.1 0:2021.189.6.0svn57977-150400.17.1 0:2021.189.1.02svn41999-150400.17.1 0:2021.189.2.82svn15878-150400.17.1 0:2021.189.0.0.07bsvn54963-150400.17.1 0:2021.189.1.2fsvn56622-150400.17.1 0:2021.189.0.0.4svn45875-150400.17.1 0:2021.189.1.05svn39585-150400.17.1 0:2021.189.0.0.01svn16538-150400.17.1 0:2021.189.1.92svn54080-150400.17.1 0:2021.189.0.0.03asvn53482-150400.17.1 0:2021.189.1.63svn35062-150400.17.1 0:2021.189.0.0.02svn45316-150400.17.1 0:2021.189.1.0svn44724-150400.17.1 0:2021.189.1.2svn23464-150400.17.1 0:2021.189.0.0.03svn56070-150400.17.1 0:2021.189.1.4svn21667-150400.17.1 0:2021.189.1.31svn24391-150400.17.1 0:2021.189.0.0.13svn45097-150400.17.1 0:2021.189.4.34asvn49520-150400.17.1 0:2021.189.1.02svn54080-150400.17.1 0:2021.189.0.0.13svn38613-150400.17.1 0:2021.189.1.02svn49542-150400.17.1 0:2021.189.1.0svn16369-150400.17.1 0:2021.189.0.0.10svn54518-150400.17.1 0:2021.189.1.13svn43272-150400.17.1 0:2021.189.0.0.02svn52261-150400.17.1 0:2021.189.1.01svn23451-150400.17.1 0:2021.189.0.0.83svn15878-150400.17.1 0:2021.189.0.0.4svn28801-150400.17.1 0:2021.189.1.2svn45320-150400.17.1 0:2021.189.0.0.01svn49316-150400.17.1 0:2021.189.1.0svn25228-150400.17.1 0:2021.189.0.0.20svn56172-150400.17.1 0:2021.189.1.5esvn46393-150400.17.1 0:2021.189.3.01asvn58731-150400.17.1 0:2021.189.3.89asvn53763-150400.17.1 0:2021.189.1.2svn34363-150400.17.1 0:2021.189.svn42857-150400.17.1 0:2021.189.svn56487-150400.17.1 0:2021.189.20201227.0svn57239-150400.17.1 0:2021.189.svn46940-150400.17.1 0:2021.189.svn57128-150400.17.1 0:2021.189.20200520.0svn58632-150400.17.1 0:2021.189.1.1svn30171-150400.17.1 0:2021.189.1.0svn50810-150400.17.1 0:2021.189.0.0.91svn19440-150400.17.1 0:2021.189.svn27388-150400.17.1 0:2021.189.1.1svn27389-150400.17.1 0:2021.189.1.003svn24649-150400.17.1 0:2021.189.1.1svn29725-150400.17.1 0:2021.189.1.0.1svn57254-150400.17.1 0:2021.189.4.6.2svn58478-150400.17.1 0:2021.189.1.1bsvn44756-150400.17.1 0:2021.189.1.7esvn56537-150400.17.1 0:2021.189.1.1svn47266-150400.17.1 0:2021.189.1.0svn21838-150400.17.1 0:2021.189.0.0.7bsvn57950-150400.17.1 0:2021.189.0.0.3svn55006-150400.17.1 0:2021.189.0.0.2svn30212-150400.17.1 0:2021.189.1.2svn57445-150400.17.1 0:2021.189.1.3dsvn58168-150400.17.1 0:2021.189.0.0.4svn43009-150400.17.1 0:2021.189.1svn54080-150400.17.1 0:2021.189.0.0.6svn53733-150400.17.1 0:2021.189.0.0.10svn57190-150400.17.1 0:2021.189.0.0.21svn27064-150400.17.1 0:2021.189.svn43191-150400.17.1 0:2021.189.0.0.17svn52174-150400.17.1 0:2021.189.2.6.0svn48400-150400.17.1 0:2021.189.svn45797-150400.17.1 0:2021.189.1.02svn56190-150400.17.1 0:2021.189.1.51svn36065-150400.17.1 0:2021.189.0.0.3.1901.1401svn49722-150400.17.1 0:2021.189.3.1bsvn15878-150400.17.1 0:2021.189.0.0.9.6svn54911-150400.17.1 0:2021.189.5.1svn56862-150400.17.1 0:2021.189.svn56020-150400.17.1 0:2021.189.0.0.1svn42183-150400.17.1 0:2021.189.1.0svn52276-150400.17.1 0:2021.189.1.3svn56926-150400.17.1 0:2021.189.0.0.1csvn32818-150400.17.1 0:2021.189.1.81svn57601-150400.17.1 0:2021.189.0.0.1svn57602-150400.17.1 0:2021.189.0.0.2svn54191-150400.17.1 0:2021.189.0.0.21svn57597-150400.17.1 0:2021.189.3.1.0svn56319-150400.17.1 0:2021.189.1.3isvn15878-150400.17.1 0:2021.189.3.0svn57638-150400.17.1 0:2021.189.1.4svn42629-150400.17.1 0:2021.189.svn57520-150400.17.1 0:2021.189.0.0.2svn54723-150400.17.1 0:2021.189.1.3svn45281-150400.17.1 0:2021.189.0.0.6svn49513-150400.17.1 0:2021.189.1.0svn48515-150400.17.1 0:2021.189.1.2csvn15878-150400.17.1 0:2021.189.0.0.1asvn56291-150400.17.1 0:2021.189.1.11svn15878-150400.17.1 0:2021.189.3.0svn57433-150400.17.1 0:2021.189.2.0svn42467-150400.17.1 0:2021.189.5.0svn52865-150400.17.1 0:2021.189.0.0.3dsvn56594-150400.17.1 0:2021.189.1.1svn56623-150400.17.1 0:2021.189.3.7svn58732-150400.17.1 0:2021.189.0.0.9svn54080-150400.17.1 0:2021.189.svn37026-150400.17.1 0:2021.189.svn19980-150400.17.1 0:2021.189.1.9.1svn29128-150400.17.1 0:2021.189.3.6svn53164-150400.17.1 0:2021.189.1.1.2svn44131-150400.17.1 0:2021.189.0.0.2csvn40612-150400.17.1 0:2021.189.2.0esvn15878-150400.17.1 0:2021.189.0.0.5svn20318-150400.17.1 0:2021.189.1.0svn19979-150400.17.1 0:2021.189.0.0.2fsvn58668-150400.17.1 0:2021.189.2.0svn54485-150400.17.1 0:2021.189.1.0hsvn25050-150400.17.1 0:2021.189.2.37.2svn58763-150400.17.1 0:2021.189.svn22050-150400.17.1 0:2021.189.4.1svn30707-150400.17.1 0:2021.189.1.1svn34924-150400.17.1 0:2021.189.0.0.01svn24305-150400.17.1 0:2021.189.19.06svn51363-150400.17.1 0:2021.189.1.1svn56433-150400.17.1 0:2021.189.1.9svn54841-150400.17.1 0:2021.189.1.35svn50935-150400.17.1 0:2021.189.1.4svn57068-150400.17.1 0:2021.189.0.0.4.1svn54815-150400.17.1 0:2021.189.0.0.2svn48485-150400.17.1 0:2021.189.svn24976-150400.17.1 0:2021.189.0.0.11svn43505-150400.17.1 0:2021.189.4.2esvn56591-150400.17.1 0:2021.189.4.0asvn56589-150400.17.1 0:2021.189.4.1ssvn56590-150400.17.1 0:2021.189.1.3svn53858-150400.17.1 0:2021.189.1.0svn31137-150400.17.1 0:2021.189.svn19082-150400.17.1 0:2021.189.1.1.1svn57173-150400.17.1 0:2021.189.0.0.92svn54080-150400.17.1 0:2021.189.svn49877-150400.17.1 0:2021.189.svn45818-150400.17.1 0:2021.189.1.2svn56895-150400.17.1 0:2021.189.1.0fsvn25005-150400.17.1 0:2021.189.1.0svn36236-150400.17.1 0:2021.189.1.008_v7_scsvn19537-150400.17.1 0:2021.189.svn20087-150400.17.1 0:2021.189.1.0bsvn15878-150400.17.1 0:2021.189.2.1svn51688-150400.17.1 0:2021.189.1.2svn18292-150400.17.1 0:2021.189.3.0svn18740-150400.17.1 0:2021.189.0.0.2svn29675-150400.17.1 0:2021.189.2.2svn39796-150400.17.1 0:2021.189.1.1svn27322-150400.17.1 0:2021.189.3.1fsvn41923-150400.17.1 0:2021.189.1.02svn37965-150400.17.1 0:2021.189.svn30084-150400.17.1 0:2021.189.1.0svn20003-150400.17.1 0:2021.189.5.0svn46791-150400.17.1 0:2021.189.1.6svn21081-150400.17.1 0:2021.189.1.1svn54251-150400.17.1 0:2021.189.1.01svn50984-150400.17.1 0:2021.189.1svn32392-150400.17.1 0:2021.189.1.0svn56594-150400.17.1 0:2021.189.svn25209-150400.17.1 0:2021.189.2.3svn51073-150400.17.1 0:2021.189.1.0svn23739-150400.17.1 0:2021.189.1.2svn19614-150400.17.1 0:2021.189.1.0.3svn50119-150400.17.1 0:2021.189.1.36svn33945-150400.17.1 0:2021.189.0.0.7asvn32815-150400.17.1 0:2021.189.1.10svn53292-150400.17.1 0:2021.189.3.0svn58661-150400.17.1 0:2021.189.2.2.1svn55475-150400.17.1 0:2021.189.1.1svn17997-150400.17.1 0:2021.189.svn53628-150400.17.1 0:2021.189.svn51356-150400.17.1 0:2021.189.4.1svn48365-150400.17.1 0:2021.189.0.0.95svn45963-150400.17.1 0:2021.189.2.4svn13293-150400.17.1 0:2021.189.1.2svn31565-150400.17.1 0:2021.189.2.4svn40525-150400.17.1 0:2021.189.1.1.2svn15878-150400.17.1 0:2021.189.1.8svn42809-150400.17.1 0:2021.189.1.05asvn42633-150400.17.1 0:2021.189.1.20svn51805-150400.17.1 0:2021.189.1.5svn58212-150400.17.1 0:2021.189.1.4svn58020-150400.17.1 0:2021.189.1.030svn58733-150400.17.1 0:2021.189.1.0svn55838-150400.17.1 0:2021.189.0.0.8.2svn56683-150400.17.1 0:2021.189.1.1svn58359-150400.17.1 0:2021.189.4svn35730-150400.17.1 0:2021.189.2.7svn53305-150400.17.1 0:2021.189.4.0.2svn47923-150400.17.1 0:2021.189.1.18svn15878-150400.17.1 0:2021.189.0.0.1svn35087-150400.17.1 0:2021.189.1.9svn53504-150400.17.1 0:2021.189.0.0.41svn50073-150400.17.1 0:2021.189.0.0.18svn56258-150400.17.1 0:2021.189.1.1svn44906-150400.17.1 0:2021.189.1.6svn27223-150400.17.1 0:2021.189.1.1svn44965-150400.17.1 0:2021.189.svn58742-150400.18.1 0:2021.189.svn54744-150400.18.1 0:2021.189.0.0.1svn27810-150400.17.1 0:2021.189.0.0.2.1svn58746-150400.17.1 0:2021.189.0.0.3asvn56733-150400.17.1 0:2021.189.1.2dsvn54080-150400.17.1 0:2021.189.1.9.8svn54678-150400.17.1 0:2021.189.1.2.1svn41401-150400.17.1 0:2021.189.1.0svn20208-150400.17.1 0:2021.189.svn53657-150400.17.1 0:2021.189.svn20180-150400.17.1 0:2021.189.1.01svn37749-150400.17.1 0:2021.189.0.0.1dsvn50339-150400.17.1 0:2021.189.2.0.2svn15878-150400.17.1 0:2021.189.1.2svn43595-150400.17.1 0:2021.189.1.0svn20185-150400.17.1 0:2021.189.1.6svn53098-150400.17.1 0:2021.189.0.0.302svn38721-150400.17.1 0:2021.189.0.0.463svn56863-150400.17.1 0:2021.189.svn53607-150400.17.1 0:2021.189.1.0svn56841-150400.17.1 0:2021.189.1.62svn34011-150400.17.1 0:2021.189.0.0.41svn15878-150400.17.1 0:2021.189.0.0.1svn37568-150400.17.1 0:2021.189.0.0.45svn56530-150400.17.1 0:2021.189.0.0.3csvn41732-150400.17.1 0:2021.189.2.0svn20186-150400.17.1 0:2021.189.svn23799-150400.17.1 0:2021.189.svn23446-150400.17.1 0:2021.189.svn23734-150400.17.1 0:2021.189.svn53127-150400.17.1 0:2021.189.0.0.6svn36613-150400.17.1 0:2021.189.1.12svn49750-150400.17.1 0:2021.189.0.0.1svn40613-150400.17.1 0:2021.189.6.7asvn24881-150400.17.1 0:2021.189.2.1.2svn33042-150400.17.1 0:2021.189.1.0.1svn40088-150400.17.1 0:2021.189.1svn46628-150400.17.1 0:2021.189.1.3svn41653-150400.17.1 0:2021.189.0.0.91svn20209-150400.17.1 0:2021.189.0.0.8svn15878-150400.17.1 0:2021.189.2.15svn30959-150400.17.1 0:2021.189.1svn22212-150400.17.1 0:2021.189.svn53350-150400.17.1 0:2021.189.svn20312-150400.17.1 0:2021.189.0.0.3svn26522-150400.17.1 0:2021.189.2.2svn30708-150400.17.1 0:2021.189.1.1svn42428-150400.17.1 0:2021.189.2.1bsvn41991-150400.17.1 0:2021.189.1.2svn52334-150400.17.1 0:2021.189.1.05svn50555-150400.17.1 0:2021.189.2.0svn46126-150400.17.1 0:2021.189.0.0.5.0svn54407-150400.17.1 0:2021.189.1.2svn28918-150400.17.1 0:2021.189.0.0.3ssvn57414-150400.17.1 0:2021.189.0.0.5csvn39787-150400.17.1 0:2021.189.1.8svn41322-150400.17.1 0:2021.189.1.05svn20336-150400.17.1 0:2021.189.0.0.3.2svn57740-150400.17.1 0:2021.189.1.6fsvn15878-150400.17.1 0:2021.189.1.00asvn54524-150400.17.1 0:2021.189.1.01svn39707-150400.17.1 0:2021.189.1.5bsvn27028-150400.17.1 0:2021.189.svn43057-150400.17.1 0:2021.189.svn43058-150400.17.1 0:2021.189.0.0.2.0svn56761-150400.17.1 0:2021.189.1.4svn29260-150400.17.1 0:2021.189.1.6asvn35537-150400.17.1 0:2021.189.svn45673-150400.17.1 0:2021.189.0.0.2svn54915-150400.17.1 0:2021.189.1.1.1svn54080-150400.17.1 0:2021.189.1.0.0svn39074-150400.17.1 0:2021.189.1.2asvn15878-150400.17.1 0:2021.189.svn20620-150400.16.1 0:2021.189.svn58414-150400.16.1 0:2021.189.0.0.01bsvn31719-150400.16.1 0:2021.189.1.0svn22136-150400.16.1 0:2021.189.2.8csvn58714-150400.16.1 0:2021.189.1.5.3svn46259-150400.16.1 0:2021.189.svn20031-150400.16.1 0:2021.189.0.0.52svn22781-150400.16.1 0:2021.189.1.5dsvn56950-150400.16.1 0:2021.189.0.0.1.2svn57922-150400.16.1 0:2021.189.0.0.4svn24652-150400.16.1 0:2021.189.1.3svn30560-150400.16.1 0:2021.189.1.0.0svn56734-150400.16.1 0:2021.189.0.0.5asvn52411-150400.16.1 0:2021.189.0.0.12ksvn52412-150400.16.1 0:2021.189.0.0.1svn51907-150400.16.1 0:2021.189.2.11svn25007-150400.16.1 0:2021.189.1.0svn15878-150400.16.1 0:2021.189.svn20333-150400.16.1 0:2021.189.0.0.3bsvn42781-150400.16.1 0:2021.189.1.9svn20311-150400.16.1 0:2021.189.1.2svn39592-150400.16.1 0:2021.189.2.14svn56735-150400.16.1 0:2021.189.0.0.5asvn57147-150400.16.1 0:2021.189.4.5svn18136-150400.16.1 0:2021.189.3.1svn51494-150400.16.1 0:2021.189.svn27128-150400.16.1 0:2021.189.0.0.1svn16215-150400.16.1 0:2021.189.2.4svn56495-150400.16.1 0:2021.189.1.1svn52663-150400.16.1 0:2021.189.1.2svn53163-150400.16.1 0:2021.189.1.0.2svn50815-150400.16.1 0:2021.189.2.7svn54512-150400.16.1 0:2021.189.2.8svn54892-150400.16.1 0:2021.189.1.4svn54512-150400.16.1 0:2021.189.1.3svn56840-150400.16.1 0:2021.189.svn42225-150400.16.1 0:2021.189.0.0.05svn51005-150400.16.1 0:2021.189.1.7svn42821-150400.16.1 0:2021.189.2.4svn57842-150400.16.1 0:2021.189.svn57296-150400.16.1 0:2021.189.1.2.2svn50072-150400.16.1 0:2021.189.0.0.41svn30715-150400.16.1 0:2021.189.1.0svn34374-150400.16.1 0:2021.189.3.25svn15878-150400.16.1 0:2021.189.1.1.0svn55933-150400.16.1 0:2021.189.0.0.2svn15878-150400.16.1 0:2021.189.1.17svn15878-150400.16.1 0:2021.189.1.2csvn39766-150400.16.1 0:2021.189.1.1svn22408-150400.16.1 0:2021.189.1.2svn15878-150400.16.1 0:2021.189.0.0.5svn50147-150400.16.1 0:2021.189.1.1svn39529-150400.16.1 0:2021.189.svn45818-150400.16.1 0:2021.189.1.6svn15878-150400.16.1 0:2021.189.1.0svn38710-150400.16.1 0:2021.189.1.9.0svn58734-150400.16.1 0:2021.189.2.01svn31585-150400.16.1 0:2021.189.svn32293-150400.16.1 0:2021.189.1.00svn15878-150400.16.1 0:2021.189.4.01svn53843-150400.16.1 0:2021.189.1.01svn53915-150400.16.1 0:2021.189.1.3asvn56291-150400.16.1 0:2021.189.3.0svn54512-150400.16.1 0:2021.189.1.2svn19982-150400.16.1 0:2021.189.1.04svn35718-150400.16.1 0:2021.189.svn56809-150400.16.1 0:2021.189.1.6svn20306-150400.16.1 0:2021.189.2.1svn23961-150400.16.1 0:2021.189.2.2svn52212-150400.16.1 0:2021.189.0.0.03svn20334-150400.16.1 0:2021.189.0.0.1svn46925-150400.16.1 0:2021.189.svn15878-150400.16.1 0:2021.189.1.1asvn15878-150400.16.1 0:2021.189.0.0.6svn15878-150400.16.1 0:2021.189.1.0svn46434-150400.16.1 0:2021.189.11asvn36696-150400.16.1 0:2021.189.2.0.5svn57307-150400.16.1 0:2021.189.3.0b1svn57074-150400.16.1 0:2021.189.svn50489-150400.16.1 0:2021.189.1.034svn57193-150400.16.1 0:2021.189.1.1.3svn54512-150400.16.1 0:2021.189.2.12svn58735-150400.16.1 0:2021.189.2.0.2svn57448-150400.16.1 0:2021.189.svn22027-150400.16.1 0:2021.189.0.0.0.2svn24431-150400.16.1 0:2021.189.0.0.2betasvn56320-150400.16.1 0:2021.189.1.12svn52982-150400.16.1 0:2021.189.1.24svn57097-150400.16.1 0:2021.189.1.0svn47859-150400.16.1 0:2021.189.2.3c_0_g7d3fc5bsvn47931-150400.16.1 0:2021.189.2.1svn56774-150400.16.1 0:2021.189.0.0.1.1svn19440-150400.16.1 0:2021.189.1.0svn43516-150400.16.1 0:2021.189.2.3svn56291-150400.16.1 0:2021.189.0.0.1svn15878-150400.16.1 0:2021.189.0.0.1svn51480-150400.16.1 0:2021.189.2.0bsvn15878-150400.16.1 0:2021.189.2.1csvn15878-150400.16.1 0:2021.189.1.3svn15878-150400.16.1 0:2021.189.1.0svn20308-150400.16.1 0:2021.189.2.1.5svn15878-150400.16.1 0:2021.189.2.2svn56977-150400.16.1 0:2021.189.2.14svn29349-150400.16.1 0:2021.189.0.0.2asvn40989-150400.16.1 0:2021.189.0.0.1.4svn32066-150400.16.1 0:2021.189.1.2svn16117-150400.16.1 0:2021.189.1.0svn16080-150400.16.1 0:2021.189.1.1svn51273-150400.16.1 0:2021.189.1.0asvn15878-150400.16.1 0:2021.189.3.0.2svn57650-150400.16.1 0:2021.189.svn58752-150400.16.1 0:2021.189.1.06svn51909-150400.16.1 0:2021.189.4.1gsvn53658-150400.16.1 0:2021.189.1.2svn58736-150400.16.1 0:2021.189.svn19440-150400.16.1 0:2021.189.2.02ksvn57010-150400.16.1 0:2021.189.svn32199-150400.16.1 0:2021.189.43svn15878-150400.16.1 0:2021.189.2.4dsvn56291-150400.16.1 0:2021.189.3.1862svn56291-150400.16.1 0:2021.189.0.0.7.4svn17554-150400.16.1 0:2021.189.2.0bsvn50019-150400.16.1 0:2021.189.0.0.9.18svn57213-150400.16.1 0:2021.189.svn25446-150400.16.1 0:2021.189.svn54267-150400.16.1 0:2021.189.svn31835-150400.16.1 0:2021.189.svn54074-150400.16.1 0:2021.189.0.0.8.2svn56685-150400.16.1 0:2021.189.1.1svn15878-150400.16.1 0:2021.189.1.4.2svn16252-150400.16.1 0:2021.189.0.0.34svn55015-150400.16.1 0:2021.189.svn47870-150400.16.1 0:2021.189.1.1svn25202-150400.16.1 0:2021.189.1.1svn41849-150400.16.1 0:2021.189.svn42413-150400.16.1 0:2021.189.1.1csvn32804-150400.16.1 0:2021.189.1.4bsvn48815-150400.16.1 0:2021.189.0.0.1svn34495-150400.16.1 0:2021.189.0.0.0esvn15878-150400.18.1 0:2021.189.4.07_gsvn31855-150400.18.1 0:2021.189.3.5svn17255-150400.18.1 0:2021.189.1.2svn51543-150400.18.1 0:2021.189.1.1svn51729-150400.18.1 0:2021.189.2.10svn46848-150400.18.1 0:2021.189.1.4svn54080-150400.18.1 0:2021.189.2.9svn56615-150400.18.1 0:2021.189.1.0asvn17885-150400.18.1 0:2021.189.0.0.2svn15878-150400.18.1 0:2021.189.0.0.10svn34368-150400.18.1 0:2021.189.1.7svn28908-150400.18.1 0:2021.189.1.1.0.1svn52064-150400.18.1 0:2021.189.1.1svn42138-150400.18.1 0:2021.189.0.0.80svn57954-150400.18.1 0:2021.189.1.1svn42428-150400.18.1 0:2021.189.0.0.42svn27345-150400.18.1 0:2021.189.0.0.77svn31731-150400.18.1 0:2021.189.0.0.2svn20484-150400.18.1 0:2021.189.1.3asvn57835-150400.18.1 0:2021.189.2.40svn22018-150400.18.1 0:2021.189.4.42svn56610-150400.18.1 0:2021.189.2.5svn33043-150400.18.1 0:2021.189.1.0svn29349-150400.18.1 0:2021.189.1.0svn49889-150400.18.1 0:2021.189.1.06svn15878-150400.18.1 0:2021.189.svn34495-150400.18.1 0:2021.189.1.05svn39596-150400.18.1 0:2021.189.1.3.1svn34594-150400.18.1 0:2021.189.1.1svn51481-150400.18.1 0:2021.189.2.1svn15878-150400.18.1 0:2021.189.1.8svn22514-150400.18.1 0:2021.189.2.0svn47111-150400.18.1 0:2021.189.1.1svn18923-150400.18.1 0:2021.189.svn37700-150400.18.1 0:2021.189.0.0.7svn38928-150400.18.1 0:2021.189.1.2svn52213-150400.18.1 0:2021.189.1svn49732-150400.18.1 0:2021.189.5.4svn57684-150400.18.1 0:2021.189.3.141592653svn57972-150400.18.1 0:2021.189.0.0.1svn18314-150400.18.1 0:2021.189.2.501svn48058-150400.18.1 0:2021.189.svn41264-150400.18.1 0:2021.189.svn40533-150400.18.1 0:2021.189.svn16372-150400.18.1 0:2021.189.1.0svn48500-150400.18.1 0:2021.189.0.0.6svn58471-150400.18.1 0:2021.189.0.0.2svn41403-150400.18.1 0:2021.189.0.0.4.8svn57349-150400.18.1 0:2021.189.svn34177-150400.18.1 0:2021.189.0.0.3csvn56878-150400.18.1 0:2021.189.svn58348-150400.18.1 0:2021.189.1.04svn54080-150400.18.1 0:2021.189.3.1.1svn49013-150400.18.1 0:2021.189.2.0svn49362-150400.18.1 0:2021.189.1.9svn56466-150400.18.1 0:2021.189.0.0.4svn29752-150400.18.1 0:2021.189.1.3svn55064-150400.18.1 0:2021.189.3.3svn58477-150400.18.1 0:2021.189.0.0.6.0svn54557-150400.18.1 0:2021.189.v2r3svn51030-150400.18.1 0:2021.189.1.40svn54246-150400.18.1 0:2021.189.1.0asvn28553-150400.18.1 0:2021.189.5.1svn57911-150400.18.1 0:2021.189.svn58055-150400.18.1 0:2021.189.svn54496-150400.18.1 0:2021.189.svn58648-150400.18.1 0:2021.189.svn58572-150400.18.1 0:2021.189.svn58221-150400.18.1 0:2021.189.svn58579-150400.18.1 0:2021.189.svn58653-150400.18.1 0:2021.189.svn58581-150400.18.1 0:2021.189.svn58649-150400.18.1 0:2021.189.svn58426-150400.18.1 0:2021.189.svn54594-150400.18.1 0:2021.189.svn54490-150400.18.1 0:2021.189.svn58646-150400.18.1 0:2021.189.svn55777-150400.18.1 0:2021.189.0.0.11svn54526-150400.18.1 0:2021.189.1.3.1svn19083-150400.18.1 0:2021.189.2svn15878-150400.18.1 0:2021.189.0.0.2.0svn15878-150400.18.1 0:2021.189.0.0.1esvn57692-150400.18.1 0:2021.189.2svn50985-150400.18.1 0:2021.189.1.7svn53676-150400.18.1 0:2021.189.1.0.3svn56083-150400.18.1 0:2021.189.0.0.2svn29349-150400.18.1 0:2021.189.1.4svn43151-150400.18.1 0:2021.189.1.25svn46559-150400.18.1 0:2021.189.2.18svn45678-150400.18.1 0:2021.189.1.00svn52092-150400.18.1 0:2021.189.5svn20591-150400.18.1 0:2021.189.1.0svn30788-150400.18.1 0:2021.189.0.0.7svn44192-150400.18.1 0:2021.189.2.01svn20677-150400.18.1 0:2021.189.1.5svn23796-150400.18.1 0:2021.189.1.6svn15878-150400.18.1 0:2021.189.1.10svn56441-150400.18.1 0:2021.189.1.1svn48474-150400.18.1 0:2021.189.1.1svn46844-150400.18.1 0:2021.189.1.02svn20770-150400.18.1 0:2021.189.0.0.2svn44140-150400.18.1 0:2021.189.2021.03.01svn58019-150400.18.1 0:2021.189.0.0.10bsvn51789-150400.18.1 0:2021.189.0.0.1svn45363-150400.18.1 0:2021.189.4.1svn57207-150400.18.1 0:2021.189.1.7.0svn54287-150400.18.1 0:2021.189.0.0.42svn49124-150400.18.1 0:2021.189.0.0.2svn39669-150400.18.1 0:2021.189.72svn56070-150400.18.1 0:2021.189.1.0svn28754-150400.18.1 0:2021.189.1.0svn20675-150400.18.1 0:2021.189.svn17383-150400.18.1 0:2021.189.0.0.3svn34206-150400.18.1 0:2021.189.1.2svn51347-150400.18.1 0:2021.189.2.6svn56435-150400.18.1 0:2021.189.1.0svn16549-150400.18.1 0:2021.189.3.17svn48625-150400.18.1 0:2021.189.1.0qsvn33134-150400.18.1 0:2021.189.0.0.1svn16736-150400.18.1 0:2021.189.7.2.2svn58750-150400.18.1 0:2021.189.0.0.4dsvn42280-150400.18.1 0:2021.189.1.0svn36306-150400.18.1 0:2021.189.2.4svn57972-150400.18.1 0:2021.189.svn25087-150400.18.1 0:2021.189.1.1.0svn56820-150400.18.1 0:2021.189.0.0.1svn38295-150400.18.1 0:2021.189.0.0.1svn57444-150400.18.1 0:2021.189.0.0.9fsvn49201-150400.18.1 0:2021.189.1.2svn54512-150400.18.1 0:2021.189.1.0svn35805-150400.17.1 0:2021.189.1.1.0svn51915-150400.17.1 0:2021.189.1.1.0svn56615-150400.17.1 0:2021.189.0.0.2svn51490-150400.17.1 0:2021.189.0.0.4fsvn52890-150400.17.1 0:2021.189.1.2svn47026-150400.17.1 0:2021.189.1.1svn46555-150400.17.1 0:2021.189.1.0svn55288-150400.17.1 0:2021.189.0.0.9svn46660-150400.17.1 0:2021.189.0.0.1svn55920-150400.17.1 0:2021.189.1.1svn51884-150400.17.1 0:2021.189.0.0.1.1svn32769-150400.17.1 0:2021.189.0.0.2.3svn43466-150400.17.1 0:2021.189.1.0svn42039-150400.17.1 0:2021.189.2.3svn43442-150400.17.1 0:2021.189.1.0.2svn55002-150400.17.1 0:2021.189.1.2svn26108-150400.17.1 0:2021.189.1.2svn51355-150400.17.1 0:2021.189.1.0.1svn49424-150400.17.1 0:2021.189.0.0.7fsvn56291-150400.17.1 0:2021.189.0.0.6svn57300-150400.17.1 0:2021.189.svn50020-150400.17.1 0:2021.189.0.0.13svn54758-150400.17.1 0:2021.189.1.5svn55713-150400.17.1 0:2021.189.1.0svn28715-150400.17.1 0:2021.189.0.0.5svn58469-150400.17.1 0:2021.189.1.10svn57843-150400.17.1 0:2021.189.svn36439-150400.17.1 0:2021.189.1.0svn55827-150400.17.1 0:2021.189.0.0.4svn43978-150400.17.1 0:2021.189.1.0svn25777-150400.17.1 0:2021.189.2.0svn32732-150400.17.1 0:2021.189.0.0.2.6svn30637-150400.17.1 0:2021.189.4.10csvn49975-150400.17.1 0:2021.189.0.0.2.0svn58737-150400.17.1 0:2021.189.svn55325-150400.17.1 0:2021.189.2.0svn49740-150400.17.1 0:2021.189.svn31491-150400.17.1 0:2021.189.svn42882-150400.17.1 0:2021.189.1.3svn22005-150400.17.1 0:2021.189.1.5svn38646-150400.17.1 0:2021.189.1.2svn36170-150400.17.1 0:2021.189.svn19457-150400.17.1 0:2021.189.1.2svn43497-150400.17.1 0:2021.189.3.1svn18729-150400.17.1 0:2021.189.2.13svn52413-150400.17.1 0:2021.189.2.1dsvn15878-150400.17.1 0:2021.189.3.06csvn54758-150400.17.1 0:2021.189.2.0svn57485-150400.17.1 0:2021.189.1.43csvn55265-150400.17.1 0:2021.189.1.3csvn55031-150400.17.1 0:2021.189.2.0svn57484-150400.17.1 0:2021.189.0.0.1.4svn54512-150400.17.1 0:2021.189.2.12csvn54940-150400.17.1 0:2021.189.1.0.17svn51431-150400.17.1 0:2021.189.svn26096-150400.17.1 0:2021.189.svn56221-150400.17.1 0:2021.189.1.5ksvn20085-150400.17.1 0:2021.189.2.04svn55852-150400.17.1 0:2021.189.2.3jsvn53364-150400.17.1 0:2021.189.1.3asvn33146-150400.17.1 0:2021.189.2.142svn17746-150400.17.1 0:2021.189.1.1.3svn56166-150400.17.1 0:2021.189.1.3svn58254-150400.17.1 0:2021.189.1.1.0svn15878-150400.17.1 0:2021.189.5.1svn32260-150400.17.1 0:2021.189.svn19084-150400.17.1 0:2021.189.1.3.2svn54758-150400.17.1 0:2021.189.0.0.3.0svn48182-150400.17.1 0:2021.189.6.4.06svn56276-150400.17.1 0:2021.189.1.0asvn56214-150400.17.1 0:2021.189.1.2svn21178-150400.17.1 0:2021.189.2.00svn15878-150400.17.1 0:2021.189.0.0.6svn42428-150400.17.1 0:2021.189.2.1svn44455-150400.17.1 0:2021.189.1.4svn55707-150400.17.1 0:2021.189.svn24344-150400.17.1 0:2021.189.svn23803-150400.17.1 0:2021.189.3.15asvn57508-150400.17.1 0:2021.189.svn23804-150400.17.1 0:2021.189.svn24345-150400.17.1 0:2021.189.svn24754-150400.17.1 0:2021.189.svn24196-150400.17.1 0:2021.189.svn23840-150400.17.1 0:2021.189.svn24010-150400.17.1 0:2021.189.svn23957-150400.17.1 0:2021.189.svn25105-150400.17.1 0:2021.189.svn24228-150400.17.1 0:2021.189.1.10asvn57461-150400.17.1 0:2021.189.1.12csvn56052-150400.17.1 0:2021.189.1.4svn52981-150400.17.1 0:2021.189.0.0.91svn21751-150400.17.1 0:2021.189.svn28176-150400.17.1 0:2021.189.svn43006-150400.17.1 0:2021.189.1.3bsvn15878-150400.17.1 0:2021.189.1.0svn18732-150400.17.1 0:2021.189.3.6svn18921-150400.17.1 0:2021.189.1.0svn23440-150400.17.1 0:2021.189.1.0svn20680-150400.17.1 0:2021.189.3.13asvn58661-150400.17.1 0:2021.189.2.06lsvn58713-150400.17.1 0:2021.189.3.5.2svn37649-150400.17.1 0:2021.189.2.24svn56942-150400.17.1 0:2021.189.1.25svn51373-150400.17.1 0:2021.189.1.9svn27253-150400.17.1 0:2021.189.0.0.1.0svn36298-150400.17.1 0:2021.189.svn58561-150400.17.1 0:2021.189.0.0.2svn17748-150400.17.1 0:2021.189.1.3asvn29803-150400.17.1 0:2021.189.0.0.5.1svn55675-150400.17.1 0:2021.189.svn17024-150400.17.1 0:2021.189.1.0svn21839-150400.17.1 0:2021.189.1.00svn43327-150400.17.1 0:2021.189.svn21820-150400.17.1 0:2021.189.2.0svn49731-150400.17.1 0:2021.189.0.0.1svn27046-150400.17.1 0:2021.189.svn17134-150400.17.1 0:2021.189.0.0.31svn29349-150400.17.1 0:2021.189.1.1svn46641-150400.17.1 0:2021.189.2.0.7svn37623-150400.17.1 0:2021.189.0.0.4.7svn44238-150400.17.1 0:2021.189.0.0.21svn24994-150400.17.1 0:2021.189.1.0.1svn58558-150400.17.1 0:2021.189.12.12svn57349-150400.17.1 0:2021.189.3.2svn58669-150400.17.1 0:2021.189.1.01svn38459-150400.17.1 0:2021.189.svn52527-150400.17.1 0:2021.189.3.6svn51690-150400.17.1 0:2021.189.1.3svn40772-150400.17.1 0:2021.189.0.0.03svn38907-150400.20.1 0:2021.189.2.4svn58029-150400.20.1 0:2021.189.2.2svn35853-150400.20.1 0:2021.189.1.3.0svn52698-150400.20.1 0:2021.189.3.2svn15878-150400.20.1 0:2021.189.1.7.1svn57866-150400.20.1 0:2021.189.1.5.0svn15878-150400.20.1 0:2021.189.1.1.0svn36371-150400.20.1 0:2021.189.svn16791-150400.20.1 0:2021.189.1.0svn44026-150400.20.1 0:2021.189.0.0.2csvn39570-150400.20.1 0:2021.189.1.00svn29974-150400.20.1 0:2021.189.2.25svn15878-150400.20.1 0:2021.189.svn21081-150400.20.1 0:2021.189.svn53365-150400.20.1 0:2021.189.1.1svn26313-150400.20.1 0:2021.189.5.3svn52972-150400.20.1 0:2021.189.2016_6_8svn41348-150400.20.1 0:2021.189.1.20svn15878-150400.20.1 0:2021.189.0.0.11svn17476-150400.20.1 0:2021.189.2.1svn15878-150400.20.1 0:2021.189.svn19085-150400.20.1 0:2021.189.0.0.2svn15878-150400.20.1 0:2021.189.001.002svn18651-150400.20.1 0:2021.189.0.0.5svn51207-150400.20.1 0:2021.189.2.0svn33625-150400.20.1 0:2021.189.2.1svn43639-150400.20.1 0:2021.189.svn57286-150400.20.1 0:2021.189.1.01svn15878-150400.20.1 0:2021.189.0.0.0.1_r1svn29019-150400.20.1 0:2021.189.svn18261-150400.20.1 0:2021.189.1.0lsvn36681-150400.20.1 0:2021.189.svn56291-150400.20.1 0:2021.189.0.0.2svn31541-150400.20.1 0:2021.189.0.0.2svn31409-150400.20.1 0:2021.189.svn54236-150400.20.1 0:2021.189.0.0.01svn42482-150400.20.1 0:2021.189.1.14svn56768-150400.20.1 0:2021.189.0.0.8qsvn56594-150400.20.1 0:2021.189.1.2svn51968-150400.20.1 0:2021.189.0.0.1svn57257-150400.20.1 0:2021.189.1.4svn53162-150400.20.1 0:2021.189.0.0.92svn22357-150400.20.1 0:2021.189.0.0.01svn55060-150400.20.1 0:2021.189.0.0.3svn58749-150400.20.1 0:2021.189.svn45581-150400.20.1 0:2021.189.0.0.9bsvn42428-150400.20.1 0:2021.189.2.1svn51984-150400.20.1 0:2021.189.svn33860-150400.20.1 0:2021.189.1.13svn56913-150400.20.1 0:2021.189.1.0svn51647-150400.20.1 0:2021.189.0.0.2hsvn52822-150400.20.1 0:2021.189.1.0svn29476-150400.20.1 0:2021.189.2.5.6svn25355-150400.20.1 0:2021.189.1.0asvn19700-150400.20.1 0:2021.189.3.0.1svn54512-150400.20.1 0:2021.189.svn22511-150400.20.1 0:2021.189.svn57972-150400.20.1 0:2021.189.20200406svn54758-150400.20.1 0:2021.189.0.0.1svn42334-150400.20.1 0:2021.189.1.3svn26059-150400.20.1 0:2021.189.svn56832-150400.20.1 0:2021.189.svn54045-150400.20.1 0:2021.189.0.0.5svn47354-150400.20.1 0:2021.189.2.1svn49903-150400.20.1 0:2021.189.2.0bsvn48602-150400.20.1 0:2021.189.3.4svn32528-150400.20.1 0:2021.189.0.0.8svn55777-150400.20.1 0:2021.189.1svn21701-150400.20.1 0:2021.189.1.0asvn25969-150400.20.1 0:2021.189.2.2svn32261-150400.20.1 0:2021.189.0.0.04svn42456-150400.20.1 0:2021.189.1.0svn27744-150400.20.1 0:2021.189.3.0.1svn58661-150400.20.1 0:2021.189.1.0svn48648-150400.20.1 0:2021.189.svn55291-150400.20.1 0:2021.189.svn15878-150400.20.1 0:2021.189.0.0.8.3svn56729-150400.20.1 0:2021.189.svn27354-150400.20.1 0:2021.189.6.13svn15878-150400.20.1 0:2021.189.svn23431-150400.20.1 0:2021.189.0.0.8svn55423-150400.20.1 0:2021.189.1.1.2svn46611-150400.20.1 0:2021.189.0.0.3svn15878-150400.20.1 0:2021.189.2.3svn32262-150400.20.1 0:2021.189.1.0svn44154-150400.20.1 0:2021.189.0.0.92svn24104-150400.20.1 0:2021.189.0.0.4svn15878-150400.20.1 0:2021.189.1.0.1svn55191-150400.20.1 0:2021.189.1.1svn56905-150400.20.1 0:2021.189.2.17.1svn55475-150400.20.1 0:2021.189.1.2svn47952-150400.20.1 0:2021.189.1.005svn19444-150400.20.1 0:2021.189.1.1svn21922-150400.20.1 0:2021.189.3.13svn33197-150400.20.1 0:2021.189.0.0.06svn15878-150400.20.1 0:2021.189.0.0.2svn17177-150400.20.1 0:2021.189.1.2svn23670-150400.20.1 0:2021.189.1.3svn56625-150400.20.1 0:2021.189.4.1svn57766-150400.20.1 0:2021.189.2.4bsvn34017-150400.20.1 0:2021.189.2.0svn21920-150400.20.1 0:2021.189.0.0.55svn21921-150400.20.1 0:2021.189.0.0.4svn55777-150400.20.1 0:2021.189.1.0csvn49429-150400.20.1 0:2021.189.0.0.1svn32457-150400.20.1 0:2021.189.1.6.1svn30080-150400.20.1 0:2021.189.svn38647-150400.20.1 0:2021.189.2.3svn39799-150400.20.1 0:2021.189.0.0.65svn54080-150400.20.1 0:2021.189.svn54074-150400.20.1 0:2021.189.2.5svn15878-150400.20.1 0:2021.189.3.2svn30579-150400.20.1 0:2021.189.1svn25629-150400.20.1 0:2021.189.1.0svn15878-150400.20.1 0:2021.189.0.0.1svn32954-150400.20.1 0:2021.189.0.0.2svn26039-150400.20.1 0:2021.189.2.3svn21598-150400.20.1 0:2021.189.1.0svn51126-150400.20.1 0:2021.189.0.0.2svn36254-150400.20.1 0:2021.189.svn42428-150400.20.1 0:2021.189.1.3.1svn45568-150400.20.1 0:2021.189.1.10svn15878-150400.20.1 0:2021.189.0.0.01svn22028-150400.20.1 0:2021.189.1.0csvn15878-150400.20.1 0:2021.189.svn21439-150400.20.1 0:2021.189.2.5svn53533-150400.20.1 0:2021.189.001.002svn53534-150400.20.1 0:2021.189.2.4svn54080-150400.20.1 0:2021.189.4.5svn57972-150400.20.1 0:2021.189.svn25813-150400.20.1 0:2021.189.5.2svn50694-150400.20.1 0:2021.189.2.1svn53409-150400.20.1 0:2021.189.1.0dsvn58172-150400.20.1 0:2021.189.1.01svn54866-150400.20.1 0:2021.189.svn57577-150400.20.1 0:2021.189.0.0.3.1svn52641-150400.20.1 0:2021.189.2.6csvn58120-150400.20.1 0:2021.189.svn22459-150400.20.1 0:2021.189.1.0bsvn22338-150400.20.1 0:2021.189.1.7svn46165-150400.20.1 0:2021.189.1.2bsvn15878-150400.20.1 0:2021.189.1.1svn48423-150400.20.1 0:2021.189.3.6svn22048-150400.17.1 0:2021.189.1.0.1svn31532-150400.17.1 0:2021.189.svn25469-150400.17.1 0:2021.189.0.0.4.0svn55558-150400.17.1 0:2021.189.1.8svn55876-150400.17.1 0:2021.189.svn53448-150400.17.1 0:2021.189.1.216svn58755-150400.17.1 0:2021.189.16383.99998svn53486-150400.17.1 0:2021.189.1.0svn54958-150400.17.1 0:2021.189.0.0.5svn54080-150400.17.1 0:2021.189.2.12svn41044-150400.17.1 0:2021.189.0.0.1svn42289-150400.17.1 0:2021.189.0.0.4svn41809-150400.17.1 0:2021.189.1.3svn20031-150400.17.1 0:2021.189.1.5svn36435-150400.17.1 0:2021.189.1.1svn50449-150400.17.1 0:2021.189.prot2.5svn15878-150400.17.1 0:2021.189.1.00svn39694-150400.17.1 0:2021.189.svn54338-150400.17.1 0:2021.189.2.51svn42046-150400.17.1 0:2021.189.3.8.6svn56711-150400.17.1 0:2021.189.0.0.1svn29660-150400.17.1 0:2021.189.1.2svn54308-150400.17.1 0:2021.189.1.0svn53160-150400.17.1 0:2021.189.0.0.3svn35756-150400.17.1 0:2021.189.svn57186-150400.17.1 0:2021.189.2.0svn47546-150400.17.1 0:2021.189.23.1svn55194-150400.17.1 0:2021.189.1.1asvn56272-150400.17.1 0:2021.189.0.0.2svn51908-150400.17.1 0:2021.189.2.1svn58212-150400.17.1 0:2021.189.0.0.5svn34296-150400.17.1 0:2021.189.4.2svn55475-150400.17.1 0:2021.189.svn17055-150400.17.1 0:2021.189.0.0.1svn28847-150400.17.1 0:2021.189.svn45845-150400.17.1 0:2021.189.3.1svn58633-150400.17.1 0:2021.189.1.1svn43864-150400.17.1 0:2021.189.0.0.08svn55654-150400.17.1 0:2021.189.1.05svn15878-150400.17.1 0:2021.189.3.0.1svn46662-150400.17.1 0:2021.189.1.01svn22575-150400.17.1 0:2021.189.1.4.0svn38929-150400.17.1 0:2021.189.svn45804-150400.17.1 0:2021.189.svn45805-150400.17.1 0:2021.189.0.0.28svn56295-150400.17.1 0:2021.189.1.4dsvn58738-150400.17.1 0:2021.189.1.302svn55730-150400.17.1 0:2021.189.1.0.1svn54512-150400.17.1 0:2021.189.2.8svn57006-150400.17.1 0:2021.189.0.0.28svn56910-150400.17.1 0:2021.189.0.0.2esvn56855-150400.17.1 0:2021.189.0.0.7svn56594-150400.17.1 0:2021.189.0.0.8svn57186-150400.17.1 0:2021.189.0.0.4.1svn56614-150400.17.1 0:2021.189.0.0.3svn54563-150400.17.1 0:2021.189.0.0.86svn53998-150400.17.1 0:2021.189.0.0.2svn27442-150400.17.1 0:2021.189.1.0svn37604-150400.17.1 0:2021.189.1.2asvn28770-150400.17.1 0:2021.189.2.9svn56709-150400.17.1 0:2021.189.1.0svn35928-150400.17.1 0:2021.189.1.0svn26641-150400.17.1 0:2021.189.0.0.4svn35211-150400.17.1 0:2021.189.0.0.16svn54097-150400.17.1 0:2021.189.0.0.20csvn57619-150400.17.1 0:2021.189.1.5svn51432-150400.17.1 0:2021.189.1.83svn49946-150400.17.1 0:2021.189.2.3fsvn23347-150400.17.1 0:2021.189.1.0svn47049-150400.17.1 0:2021.189.0.0.981svn30466-150400.17.1 0:2021.189.0.0.09asvn57265-150400.17.1 0:2021.189.1.5.2dsvn28090-150400.17.1 0:2021.189.5.06svn32182-150400.17.1 0:2021.189.3.8.9svn31859-150400.17.1 0:2021.189.1.1svn48568-150400.17.1 0:2021.189.1.1svn42830-150400.17.1 0:2021.189.svn22613-150400.17.1 0:2021.189.1.0.7svn58683-150400.17.1 0:2021.189.1.03svn54080-150400.17.1 0:2021.189.0.0.3svn51725-150400.17.1 0:2021.189.svn46201-150400.17.1 0:2021.189.0.0.6alphasvn56291-150400.17.1 0:2021.189.1.4svn50755-150400.17.1 0:2021.189.1.0svn36013-150400.17.1 0:2021.189.1.6svn54377-150400.17.1 0:2021.189.1.0svn40207-150400.17.1 0:2021.189.3.6svn23348-150400.17.1 0:2021.189.1.1svn56500-150400.17.1 0:2021.189.svn34398-150400.17.1 0:2021.189.0.0.4svn58712-150400.17.1 0:2021.189.1.3svn27430-150400.17.1 0:2021.189.1.0svn58543-150400.17.1 0:2021.189.0.0.8.0svn51554-150400.17.1 0:2021.189.svn17258-150400.17.1 0:2021.189.1.0esvn51142-150400.17.1 0:2021.189.1.2.0svn54994-150400.17.1 0:2021.189.r206svn22207-150400.17.1 0:2021.189.1.0svn40728-150400.17.1 0:2021.189.2.8svn54960-150400.17.1 0:2021.189.svn41145-150400.17.1 0:2021.189.2.1svn32279-150400.17.1 0:2021.189.1.02svn51368-150400.17.1 0:2021.189.1.0svn50619-150400.17.1 0:2021.189.2.32svn56611-150400.17.1 0:2021.189.1.4dsvn53965-150400.17.1 0:2021.189.0.0.2svn28539-150400.17.1 0:2021.189.1.2svn53884-150400.17.1 0:2021.189.0.0.7svn53500-150400.17.1 0:2021.189.17.7svn55862-150400.17.1 0:2021.185.svn56569-150400.19.4 0:2021.185.svn58437-150400.19.4 0:2021.185.svn56352-150400.19.4 0:2021.185.svn54074-150400.19.4 0:2021.185.svn58253-150400.19.4 0:2021.185.svn57089-150400.19.4 0:2021.185.svn56623-150400.19.4 0:2021.185.svn56575-150400.19.4 0:2021.185.svn56215-150400.19.4 0:2021.185.svn56196-150400.19.4 0:2021.185.svn54191-150400.19.4 0:2021.185.svn58290-150400.19.4 0:2021.185.svn58626-150400.19.4 0:2021.185.svn57491-150400.19.4 0:2021.185.svn55706-150400.19.4 0:2021.185.svn54139-150400.19.4 0:2021.185.svn55129-150400.19.4 0:2021.185.svn58754-150400.19.4 0:2021.185.svn57757-150400.19.4 0:2021.185.svn54141-150400.19.4 0:2021.185.svn57048-150400.19.4 0:2021.185.svn58593-150400.19.4 0:2021.185.svn57862-150400.19.4 0:2021.185.svn58124-150400.19.4 0:2021.185.svn57759-150400.19.4 0:2021.185.svn50293-150400.19.4 0:2021.185.svn57878-150400.19.4 0:2021.185.svn58759-150400.19.4 0:2021.185.svn56496-150400.19.4 0:2021.185.svn54455-150400.19.4 0:2021.185.svn57312-150400.19.4 0:2021.185.svn58543-150400.19.4 0:2021.185-150400.19.4 0:2021.185.svn54495-150400.19.4 0:3.22.0-150400.16.11 0:1.4.0-1.53 0:2.4.0-2.23 (noarch) 0:1.10.7-4.3.1 0:1.10.12-150200.4.12.4 (noarch) 0:1.21-3.3.1 (x86_64) 0:2.39-150100.7.40.1 0:2.39-150100.7.40.1 0:1.69.0-150400.24.15.1 0:1.43.1-7.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.30.2-150400.3.3.1 0:7.3.1-150500.3.4 0:7.3.1_k5.14.21_150500.53-150500.3.4 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.8-150000.3.3.1 0:1.12.13-150400.1.10 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.5.11.2-3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.19.0.4-150000.4.4.1 0:1.2.2-150400.1.9 (noarch) 0:2.35.3-150300.10.27.1 0:2.31-150300.46.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.9.7-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.19.9-150000.1.31.1 (aarch64|ppc64le|s390x|x86_64) 0:1.19.9-150000.1.31.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.20.4-150000.1.11.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.4-150000.1.11.1 (noarch) 0:2.8.9-150200.3.6.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.4.1-150200.3.7.1 0:2.48.0-150400.1.8 (noarch) 0:2.4.21-3.3.2 0:2.4.21-150200.3.7.4 (noarch) 0:4.5.6-3.2.6 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.2.11-150000.3.3.1 0:2.13.0-150200.3.3.3 (noarch) 0:2.13.0-150200.3.3.3 0:1.1.6-150200.12.4.4 0:1.1.3-150200.12.4.4 0:2.0.6.1-150200.3.7.3 0:1.2b1-150200.12.4.4 0:1.7.36-150200.3.4.3 0:9.4.48-150200.3.16.3 (noarch) 0:3.0.2-150200.3.7.5 0:2.2.1-150400.18.8 0:5.14.21-150500.53.1 0:0.30.2-150400.3.3.1 0:0.177-150300.11.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.3.0-150400.3.6.1 0:1.3.0-150400.3.6.1 0:5.2.5-150400.5.3.11 0:1.1.36-150400.12.3 0:1.2.17-4.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.8.6-150200.4.9.8 (noarch) 0:1.3.1-150200.3.7.8 0:2.15.05-150500.1.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.0.59-150200.3.10.1 (aarch64|x86_64) 0:1.0-4.3.2 0:4.05.0-13.5 0:1.3.0-150000.6.61.1 0:0.80-1.24 0:0.68-1.25 (noarch) 0:2.16-1.3.1 0:2.94-1.23 0:2.05-12.13.1 0:0.4.17-150400.1.21 (noarch) 0:1.04-1.3.1 0:7.1.0.9-150400.6.18.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.69-3.3.1 0:5.26.1-150300.17.11.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.5.4-150000.3.3.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.35-150100.3.8.1 0:1.35-150100.3.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.3.0~git5.14a4b8b-150300.7.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.05-12.5.1 (noarch) 0:7.4.0-150200.3.7.1 0:3.20.0-150500.2.1 (noarch) 0:1.7-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.0.0-150200.3.7.1 (noarch) 0:4.0.0-150200.3.7.3 (noarch) 0:4.0.0-150200.3.7.8 (noarch) 0:4.0.0-150200.3.7.1 (noarch) 0:1.4.20-150200.3.25.1 0:7.4.33-150400.4.22.1 0:19.11.10-150500.3.37 0:19.11.10_k5.14.21_150500.53-150500.3.37 0:19.11.10-150500.3.36 0:19.11.10_k5.14.21_150500.53-150500.3.36 0:3.7.4-1.41 (aarch64|i586|ppc64le|s390x|x86_64) 0:60.2-3.9.1 (noarch) 0:60.2-3.9.1 (i586|ppc64le|s390x|x86_64) 0:1.8.0_sr8.0-150000.3.71.1 (i586|x86_64) 0:1.8.0_sr8.0-150000.3.71.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.8.0.362-150000.3.76.1 0:0.41.rc1-1.10.1 0:60.2-150000.3.12.1 0:1.0.2p-150000.3.73.1 0:2.14.2-150400.24.3.1 0:20.06.2-150400.24.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.0.2p-3.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.0.2p-3.49.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.14.2-150400.24.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:20.06.2-150400.24.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:7.4.33-150400.4.22.1 (noarch) 0:1.10.21-3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:14.8-150200.5.26.1 (noarch) 0:14.8-150200.5.26.1 0:1.2-150000.3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.3.35-150300.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.9.13-150400.3.3.1 (aarch64|i686|ppc64le|s390x|x86_64) 0:91.9.0-150200.8.68.2 (x86_64) 0:2.0.8-150200.11.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.5.2-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:9.28.0-150000.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.97.3-4.3.3 (noarch) 0:0.97.3-4.3.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.9.0-4.3.8 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.34.4-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.4-150400.3.8.1 (x86_64) 0:1.3.2-3.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.4.0-150400.3.9.1 (x86_64) 0:2.2.5-11.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.10.8-1.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.11.9-1.12.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.12.9-1.15.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.13.8-1.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.23.0-150100.4.7.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.14.0-150000.3.12.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:8.5.22-150200.3.38.1 (noarch) 0:1.0.9-3.2.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.7.2-150100.7.3.1 (noarch) 0:1.7.2-150100.7.3.1 (noarch) 0:11.0.9.0-3.48.1 (aarch64|ppc64le|s390x|x86_64) 0:1.8.0.362-150200.3.30.1 (x86_64) 0:3.5.12-150000.3.7.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.8-150000.3.3.1 (noarch) 0:2.8-150000.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:20161124-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.1.1-3.3.1 (noarch) 0:0.1.1-3.3.1 (x86_64) 0:0.6.22-5.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.14.1-4.3.8 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.6.2-3.3.1 (noarch) 0:0.6.2-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.14.1-3.3.8 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.42.9-3.6.1 (x86_64) 0:1.0.28-5.5.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.17-3.3.1 (x86_64) 0:1.3.6-4.3.1 (x86_64) 0:0.5.0-3.5.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.2.12-150000.4.4.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.10.2-3.3.1 (noarch) 0:0.10.2-3.3.1 (x86_64) 0:1.1.34-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.24-150000.3.3.1 (x86_64) 0:5.7.3-10.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.1.13-4.3.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.1.90-150200.4.14.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:7.08-6.9.1 (noarch) 0:7.08-6.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.3.1-6.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.11.5-3.15.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.14.8-150400.3.3.1 (noarch) 0:2.14.8-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.8.0-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.9.6-150300.3.6.1 (noarch) 0:1.7.1-150200.3.3.1 (noarch) 0:2.2.0-4.9.1 (noarch) 0:1.5.2-150000.3.3.1 (noarch) 0:1.1.5-150000.3.2.1 (noarch) 0:1.20.9-33.1 (noarch) 0:2.5.0-150000.3.2.2 (noarch) 0:2.1.1-150000.3.2.2 (noarch) 0:3.1.1-150000.3.3.1 (noarch) 0:1.10.0-150000.3.3.1 (noarch) 0:9.1.1-150000.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.4.0-3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.8.7-1.3.6 (noarch) 0:0.13.18-150200.4.7.8 (x86_64) 0:1.2-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:246.16-7.33.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.11.0-6.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.32.0-6.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.0.0-6.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.43.0-6.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2.9.0-150200.6.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.13.2-6.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.0.0-6.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.0.0-5.3.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.6.2-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.1c-150300.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.2.8b-4.15.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.8.5-3.5.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.2.0-9.7.1 (aarch64|x86_64) 0:3.1.1260.0-150000.5.9.2 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.7.1-150400.3.3.1 (noarch) 0:1.34.5-150100.4.11.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.5.3-150000.1.9.1 0:1.2.2~git0.4ccc639-150400.3.3.1 (aarch64|x86_64) 0:1.2.2~git0.4ccc639-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:20190801-4.38.1 0:20190801-4.38.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:20230221.00-150000.1.34.1 0:20230222.00-150000.1.27.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:20230222.00-150000.1.27.1 0:5.14.21-150500.31.4 0:5.14.21-150500.31.1 (noarch) 0:2.0.3-150100.3.7.5 (noarch) 0:2.0.0-150100.3.7.5 (noarch) 0:2.6.20-150100.3.7.5 (noarch) 0:3.0.30-150100.3.7.5 (noarch) 0:2.5.22-150100.3.7.5 (noarch) 0:1.6.2-150100.3.7.5 (noarch) 0:1.0.3-150100.3.7.5 (noarch) 0:1.0.6-150100.3.7.5 (noarch) 0:1.0.7-150100.3.7.5 (noarch) 0:2.0.4-150100.3.7.5 (noarch) 0:3.6.1-150100.3.7.5 (noarch) 0:1.0.9-150100.3.3.5 (noarch) 0:2.0.26-150100.3.7.5 (noarch) 0:7.0.18-150100.3.7.5 (noarch) 0:0.0.8-150100.3.7.5 (noarch) 0:1.0.3-150100.3.3.5 (noarch) 0:2.13.30-150100.3.7.5 (noarch) 0:4.1.2-150100.3.7.5 (noarch) 0:4.8.1-150100.3.7.5 (noarch) 0:1.0.5-150100.3.7.5 (noarch) 0:3.2.6-150100.3.7.5 (noarch) 0:1.0.2-150100.3.7.5 (noarch) 0:1.0.29-150100.3.7.5 (noarch) 0:2.1.2-150100.3.7.5 (noarch) 0:1.0.1-150100.3.3.5 (noarch) 0:3.5.0-150100.3.7.5 (noarch) 0:1.9.0-150100.3.7.5 (noarch) 0:3.14.4-150100.3.7.5 (noarch) 0:5.1.9-150100.3.7.5 (noarch) 0:2.0.0-150100.3.3.5 (noarch) 0:1.1.3-150100.3.7.5 (noarch) 0:4.23.9-150100.3.7.5 (noarch) 0:1.14.1-150100.3.7.5 (noarch) 0:3.0.20-150100.3.7.5 (noarch) 0:1.0-150100.3.3.5 (noarch) 0:1.2.0-150100.3.3.5 (noarch) 0:3.3.2-150100.3.7.5 (noarch) 0:1.3.3-150100.3.7.5 (noarch) 0:2.3.3-150100.3.7.5 (noarch) 0:3.6-150100.3.3.5 (noarch) 0:1.2.15-150100.3.7.5 (noarch) 0:1.8.0-150100.3.7.5 (noarch) 0:5.6.7-150100.3.7.5 (noarch) 0:1.0.0-150100.3.3.5 (noarch) 0:3.6.3-150100.3.7.5 (noarch) 0:2.9.2-150100.3.7.5 (noarch) 0:0.0.2-150100.3.7.5 (noarch) 0:2.1.1-150100.3.7.5 (noarch) 0:3.7.3-150100.3.3.5 (noarch) 0:1.4-150100.3.3.5 (noarch) 0:1.1.2-150100.3.7.5 (noarch) 0:1.0.10-150100.3.7.5 (noarch) 0:1.1.8-150100.3.7.5 (noarch) 0:1.1.6-150100.3.7.5 (noarch) 0:1.23.0-150100.3.7.5 (noarch) 0:5.0.52-150100.3.7.5 (noarch) 0:8.21.1-150100.3.7.5 (noarch) 0:1.0.6.1-150100.3.7.5 (noarch) 0:2.14.0-150100.3.7.5 (noarch) 0:3.9.5-150100.3.7.5 (noarch) 0:2.7.6-150100.3.7.5 (noarch) 0:0.0.9-150100.3.7.5 (noarch) 0:1.0.9-150100.3.7.4 (noarch) 0:3.1.6-150100.3.7.4 (noarch) 0:1.0.5-150100.3.7.4 (noarch) 0:1.4.0-150100.3.7.4 (noarch) 0:2.0.2-150100.3.7.4 (noarch) 0:0.9.0-150100.3.7.4 (noarch) 0:1.8.3-150100.3.7.4 (noarch) 0:20201028-150100.3.3.4 (noarch) 0:1.0.2-150100.3.3.4 (noarch) 0:3.13.6-150100.3.7.4 (noarch) 0:3.0.9-150100.3.7.4 (noarch) 0:2.5.8-150100.3.7.4 (noarch) 0:1.1.8.5-150100.3.7.4 (noarch) 0:3.6.0-150100.3.7.4 (noarch) 0:1.2.5-150100.3.7.4 (noarch) 0:1.5.0.0-150100.3.7.4 (noarch) 0:1.0.1-150100.3.3.4 (noarch) 0:1.1.3-150100.3.7.4 (noarch) 0:2.2.3-150100.3.7.4 (noarch) 0:1.0.5-150100.3.3.4 (noarch) 0:1.0.0-150100.3.3.4 (noarch) 0:3.3.3-150100.3.7.4 (noarch) 0:1.0.8-150100.3.3.4 (noarch) 0:1.5.4-150100.3.7.4 (noarch) 0:1.0.2-150100.3.7.4 (noarch) 0:0.9.2-150100.3.3.4 (noarch) 0:2.0.4-150100.3.7.4 (noarch) 0:1.0.7-150100.3.7.4 (noarch) 0:1.0.3-150100.3.7.4 (noarch) 0:2.15.12-150100.3.7.4 (noarch) 0:1.1.1-150100.3.7.4 (noarch) 0:3.0.12-150100.3.7.4 (noarch) 0:1.10.2-150100.3.7.4 (noarch) 0:1.1.4-150100.3.7.4 (noarch) 0:0.2.2-150100.3.7.4 0:3.6.0-150100.3.9.1 0:4.0.0-9.4.5 0:1.3.0-150200.3.6.1 0:2.9-150500.1.4 (aarch64|ppc64le|s390x|x86_64) 0:0.13.4-6.3.1 (noarch) 0:2.4.51-150400.6.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.3.8-3.7.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.9.4-150400.3.6.1 (noarch) 0:1.8-150100.3.14.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2.3.15-58.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:22.3-150300.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.0.25-150400.4.4.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.8.2-3.3.1 (noarch) 0:7.1.0-6.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.21.5-150400.3.3.1 (noarch) 0:1.21.5-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:1.4.0-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:4.30-150300.3.9.1 (noarch) 0:4.30-150300.3.9.1 (noarch) 0:42.2.25-150400.3.9.2 (noarch) 0:15.3-150200.5.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:22.2.0-150400.5.7.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.8.11-3.3.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:6.2.6-150400.3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.1.0-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.7-150400.3.6.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:5.62-3.14.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.6.0-4.9.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.9.1-150400.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.44.2-150400.3.3.1 (noarch) 0:1.44.2-150400.3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:3.0.5-150400.3.6.1 (noarch) 0:1.0.5-150400.9.3.3 (aarch64|i586|ppc64le|s390x|x86_64) 0:18.14.2-150400.9.6.2 (noarch) 0:18.14.2-150400.9.6.2 (noarch) 0:2.2.3-150400.3.3.1 (noarch) 0:1.10.21-150400.9.3.1 (noarch) 0:9.0.43-150200.38.1 (noarch) 0:1.4.5-150400.4.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.3.34-3.3.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.18.9-3.8.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:0.5.0-3.5.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:2022.5.17-150000.3.16.1 (aarch64|i586|ppc64le|s390x|x86_64) 0:22.01.0-150400.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:13.2.1+git7813-150000.1.3.3 (aarch64|ppc64le|s390x|x86_64) 0:1.25.0-150200.3.6.1 (x86_64) 0:20230512-150200.24.1 (noarch) 0:1.0.4-150400.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:4.2.2-150000.1.10.1 (noarch) 0:2021.20210325.svn30357-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.19.1-150000.3.23.1 (aarch64|ppc64le|s390x|x86_64) 0:3.6.14-150000.3.92.1 (aarch64|ppc64le|s390x|x86_64) 0:4.0.9-150000.45.28.1 (x86_64) 0:4.0.9-150000.45.28.1 (aarch64|ppc64le|s390x|x86_64) 0:2.2.7-150000.3.43.1 (aarch64|ppc64le|s390x|x86_64) 0:1.0.3-150200.3.5.1 (aarch64|ppc64le|s390x|x86_64) 0:2.4.46-150200.14.14.1 (x86_64) 0:2.4.46-150200.14.14.1 (noarch) 0:2.4.46-150200.14.14.1 (aarch64|ppc64le|s390x|x86_64) 0:1.2.1-150400.4.12.1 (aarch64|ppc64le|s390x|x86_64) 0:0.22.0-150400.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:3.6.15-150300.10.48.1 (x86_64) 0:4.17.1_04-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:5.65-150500.3.3.1 (noarch) 0:5.65-150500.3.3.1 (noarch) 0:0.9.3-150000.3.3.4 (noarch) 0:3.10-150000.3.3.4 (aarch64|ppc64le|s390x|x86_64) 0:3.17.2-150300.3.2.3 (aarch64|ppc64le|s390x|x86_64) 0:17.1.2-150000.3.5.2 (x86_64) 0:12.2.0-150300.29.1 (aarch64|x86_64) 0:12.2.0-150300.29.1 (aarch64|ppc64le|s390x|x86_64) 0:1.6.5-150000.3.30.1 (x86_64) 0:1.6.5-150000.3.30.1 (noarch) 0:1.6.5-150000.3.30.1 (aarch64|ppc64le|s390x|x86_64) 0:2.2.7-150000.3.46.1 (noarch) 0:0.4.2-150300.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:3.0.8-150500.5.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2.38.6-150400.4.42.4 (aarch64|ppc64le|s390x|x86_64) 0:9.0.0-150500.6.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2.0.1-150400.3.11.1 (aarch64|ppc64le|s390x|x86_64) 0:1.2.1-150400.4.14.1 (aarch64|ppc64le|s390x|x86_64) 0:2.63-150400.3.3.1 (x86_64) 0:2.63-150400.3.3.1 (noarch) 0:1.3.2-150100.6.7.3 (aarch64|ppc64le|s390x|x86_64) 0:4.2.2-150000.1.12.1 (aarch64|ppc64le|s390x|x86_64) 0:0.1.41-150000.4.18.1 (aarch64|ppc64le|s390x|x86_64) 0:5.15.8+kde185-150500.4.3.1 (noarch) 0:5.15.8+kde185-150500.4.3.1 (aarch64|ppc64le|s390x|x86_64) 0:9.52-150000.167.1 (aarch64|ppc64le|s390x|x86_64) 0:9.16.42-150500.8.3.1 (noarch) 0:9.16.42-150500.8.3.1 (noarch) 0:2.24.0-150300.3.3.1 (aarch64) 0:5.14.21-150500.55.7.1 (aarch64|ppc64le|s390x|x86_64) 0:5.14.21-150500.55.7.1 (aarch64|ppc64le|x86_64) 0:5.14.21-150500.55.7.1.150500.6.2.5 (noarch) 0:5.14.21-150500.55.7.1 (s390x) 0:5.14.21-150500.55.7.1 (aarch64|ppc64le|s390x|x86_64) 0:1.12.2-150400.18.8.1 (x86_64) 0:1.12.2-150400.18.8.1 (aarch64|ppc64le|s390x|x86_64) 0:5.26.1-150300.17.14.1 (x86_64) 0:5.26.1-150300.17.14.1 (aarch64|ppc64le|s390x|x86_64) 0:8.0.1-150400.5.26.1 (x86_64) 0:8.0.1-150400.5.26.1 (aarch64|ppc64le|s390x|x86_64) 0:1.1.1l-150500.17.6.1 (x86_64) 0:1.1.1l-150500.17.6.1 (aarch64|ppc64le|s390x|x86_64) 0:4.17.9+git.367.dae41ffdd1f-150500.3.5.1 (aarch64|x86_64) 0:4.17.9+git.367.dae41ffdd1f-150500.3.5.1 (x86_64) 0:4.17.9+git.367.dae41ffdd1f-150500.3.5.1 (aarch64|ppc64le|s390x|x86_64) 0:0.79.0-150200.3.11.1 (aarch64|ppc64le|s390x|x86_64) 0:8.4p1-150300.3.22.1 (aarch64|ppc64le|s390x|x86_64) 0:9.16.6-150300.22.30.1 (aarch64|ppc64le|s390x|x86_64) 0:1.1.1l-150500.17.9.1 (x86_64) 0:1.1.1l-150500.17.9.1 (aarch64|ppc64le|s390x|x86_64) 0:5.15.8+kde8-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:3.0.8-150500.5.8.1 (aarch64|ppc64le|s390x|x86_64) 0:5.15.8+kde185-150500.4.8.1 (noarch) 0:5.15.8+kde185-150500.4.8.1 (noarch) 0:20230724-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2.52.10-150400.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:17.0.8.0-150400.3.27.1 (aarch64|ppc64le|s390x|x86_64) 0:9.0.0-150500.6.11.1 (x86_64) 0:13.2.1+git7813-150000.1.3.3 (aarch64|x86_64) 0:13.2.1+git7813-150000.1.3.3 (ppc64le|x86_64) 0:13.2.1+git7813-150000.1.3.3 (aarch64|ppc64le|s390x|x86_64) 0:2.06-150500.29.8.1 (noarch) 0:2.06-150500.29.8.1 (s390x) 0:2.06-150500.29.8.1 (aarch64|ppc64le|s390x|x86_64) 0:7.1.0-150500.49.6.1 (aarch64|ppc64le|s390x|x86_64) 0:15.5.3-150500.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:3006.0-150500.4.12.2 (noarch) 0:3006.0-150500.4.12.2 (aarch64|ppc64le|s390x|x86_64) 0:4.5.3-150000.3.6.1 (aarch64) 0:5.14.21-150500.55.12.1 (aarch64|ppc64le|s390x|x86_64) 0:5.14.21-150500.55.12.1 (aarch64|ppc64le|x86_64) 0:5.14.21-150500.55.12.1.150500.6.4.2 (noarch) 0:5.14.21-150500.55.12.1 (s390x) 0:5.14.21-150500.55.12.1 (noarch) 0:1.3.5-150000.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.1.1l-150500.17.15.1 (x86_64) 0:1.1.1l-150500.17.15.1 (aarch64|ppc64le|s390x|x86_64) 0:3.0.8-150500.5.11.1 (noarch) 0:6.3.2-150400.4.17.1 (aarch64|ppc64le|s390x|x86_64) 0:1.22.0-150500.4.3.1 (noarch) 0:1.22.0-150500.4.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.22.0-150500.3.3.1 (noarch) 0:1.22.0-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:3.6.15-150000.3.97.1 (aarch64|ppc64le|s390x|x86_64) 0:11.0.20.0-150000.3.99.1 (aarch64|ppc64le|s390x|x86_64) 0:0.79.0-150200.3.14.1 (noarch) 0:20230724-150500.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:2.1.0-150000.4.6.1 (aarch64) 0:5.14.21-150500.55.19.1 (aarch64|ppc64le|s390x|x86_64) 0:5.14.21-150500.55.19.1 (aarch64|ppc64le|x86_64) 0:5.14.21-150500.55.19.1.150500.6.6.4 (noarch) 0:5.14.21-150500.55.19.1 (s390x) 0:5.14.21-150500.55.19.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.1-150500.3.3.1 (x86_64) 0:1.20.1-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:10.39-150400.4.9.1 (aarch64|ppc64le|s390x|x86_64) 0:15.4-150200.5.12.1 (aarch64|ppc64le|s390x|x86_64) 0:1.0.3-150000.3.3.1 (noarch) 0:5.0.6-150000.3.3.1 (x86_64) 0:20230808-150200.27.1 (aarch64|ppc64le|s390x|x86_64) 0:3.7.3-150500.3.5.1 (noarch) 0:3.7.3-150500.3.5.1 (aarch64|ppc64le|s390x|x86_64) 0:2.40.5-150400.4.45.3 (aarch64|ppc64le|s390x|x86_64) 0:9.52-150000.170.1 (aarch64|ppc64le|s390x|x86_64) 0:4.2.1-150000.3.3.1 (x86_64) 0:4.17.2_02-150500.3.6.1 (noarch) 0:2.62-150200.30.1 (aarch64|ppc64le|s390x|x86_64) 0:0.103.9-150000.3.47.1 (aarch64|ppc64le|s390x|x86_64) 0:2.10.4-150000.4.15.1 (x86_64) 0:2.10.4-150000.4.15.1 (aarch64|ppc64le|s390x|x86_64) 0:3.3.15-150000.7.34.1 (aarch64|ppc64le|s390x|x86_64) 0:9.0.1632-150500.20.3.1 (noarch) 0:9.0.1632-150500.20.3.1 (x86_64) 0:12.2.0-150300.33.1 (aarch64|x86_64) 0:12.2.0-150300.33.1 (noarch) 0:6.3.2-150400.4.20.1 (aarch64|ppc64le|s390x|x86_64) 0:1.9.0-150000.4.16.1 (aarch64|ppc64le|s390x|x86_64) 0:2.40.5-150400.4.48.1 (aarch64|ppc64le|s390x|x86_64) 0:1.2.1-150400.4.16.1 (aarch64|ppc64le|s390x|x86_64) 0:4.2.2-150000.1.14.1 (aarch64|ppc64le|s390x|x86_64) 0:1.12.0-150300.11.5.1 (aarch64|ppc64le|s390x|x86_64) 0:73.2-150000.1.3.1 (noarch) 0:73.2-150000.1.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.0.3-150200.3.10.1 (aarch64|ppc64le|s390x|x86_64) 0:1.3.2-150000.3.14.1 (aarch64|ppc64le|s390x|x86_64) 0:12.3.0+git1204-150000.1.16.1 (x86_64) 0:12.3.0+git1204-150000.1.16.1 (aarch64) 0:12.3.0+git1204-150000.1.16.1 (ppc64le|x86_64) 0:12.3.0+git1204-150000.1.16.1 (aarch64|ppc64le|s390x|x86_64) 0:2.10.3-150500.5.8.1 (x86_64) 0:2.10.3-150500.5.8.1 (aarch64|ppc64le|s390x|x86_64) 0:7.5.0+r278197-150000.4.35.1 (x86_64) 0:7.5.0+r278197-150000.4.35.1 (aarch64|ppc64le|s390x|x86_64) 0:2.2.7-150000.3.51.2 (aarch64|ppc64le|s390x|x86_64) 0:2.40.5-150400.4.51.1 (aarch64|ppc64le|s390x|x86_64) 0:3.6.16-150000.3.100.1 (aarch64|ppc64le|s390x|x86_64) 0:1.35.0-150500.10.3.3 (aarch64|ppc64le|s390x|x86_64) 0:9.16.44-150500.8.12.2 (noarch) 0:9.16.44-150500.8.12.2 (noarch) 0:3.1.26-150300.7.35.21.1 (aarch64|ppc64le|s390x|x86_64) 0:8.0.1-150400.5.29.1 (x86_64) 0:8.0.1-150400.5.29.1 (aarch64|ppc64le|s390x|x86_64) 0:2.41-150100.7.46.1 (aarch64|ppc64le|s390x|x86_64) 0:1.10.1-150000.3.26.1 (noarch) 0:1.10.1-150000.3.26.1 (aarch64|ppc64le|s390x|x86_64) 0:3.6.15-150300.10.51.1 (aarch64|ppc64le|s390x|x86_64) 0:0.9.13.1-150200.4.24.1 (x86_64) 0:4.17.2_04-150500.3.9.1 (x86_64) 0:12.3.0-150300.37.1 (aarch64|x86_64) 0:12.3.0-150300.37.1 (aarch64|ppc64le|s390x|x86_64) 0:3006.0-150500.4.19.1 (noarch) 0:3006.0-150500.4.19.1 (aarch64|ppc64le|s390x|x86_64) 0:1.5.0-150100.3.26.2 (aarch64|ppc64le|s390x|x86_64) 0:2.0.6+20220323.758044b-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.11.0-150400.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:0.5.2-150400.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:1.6.5-150000.3.33.1 (x86_64) 0:1.6.5-150000.3.33.1 (noarch) 0:1.6.5-150000.3.33.1 (aarch64|ppc64le|s390x|x86_64) 0:3.5.12-150000.3.10.1 (aarch64) 0:5.14.21-150500.55.28.1 (aarch64|ppc64le|s390x|x86_64) 0:5.14.21-150500.55.28.1 (aarch64|ppc64le|x86_64) 0:5.14.21-150500.55.28.1.150500.6.11.2 (noarch) 0:5.14.21-150500.55.28.1 (s390x) 0:5.14.21-150500.55.28.1 (aarch64|ppc64le|s390x|x86_64) 0:9.52-150000.173.2 (aarch64|ppc64le|s390x|x86_64) 0:1.40.0-150200.9.1 (x86_64) 0:1.40.0-150200.9.1 (aarch64|ppc64le|s390x|x86_64) 0:0.79.0-150200.3.21.2 (noarch) 0:4.8.1-150400.10.12.1 (aarch64|ppc64le|s390x|x86_64) 0:4.8.1-150400.10.12.1 (aarch64|ppc64le|s390x|x86_64) 0:8.0.1-150400.5.32.1 (x86_64) 0:8.0.1-150400.5.32.1 (aarch64|ppc64le|s390x|x86_64) 0:4.17.9+git.421.abde31ca5c2-150500.3.11.1 (aarch64|x86_64) 0:4.17.9+git.421.abde31ca5c2-150500.3.11.1 (x86_64) 0:4.17.9+git.421.abde31ca5c2-150500.3.11.1 (x86_64) 0:4.17.2_06-150500.3.12.1 (aarch64|x86_64) 0:0.9.2+0-150500.3.3.1 (noarch) 0:0.9.2+0-150500.3.3.1 (aarch64) 0:5.14.21-150500.55.31.1 (aarch64|ppc64le|s390x|x86_64) 0:5.14.21-150500.55.31.1 (aarch64|ppc64le|x86_64) 0:5.14.21-150500.55.31.1.150500.6.13.1 (noarch) 0:5.14.21-150500.55.31.1 (s390x) 0:5.14.21-150500.55.31.1 (aarch64|ppc64le|s390x|x86_64) 0:3.6.17-150000.3.103.1 (aarch64|ppc64le|s390x|x86_64) 0:0.22.0-150400.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:1.2.2-150000.5.3.1 (noarch) 0:1.25.10-150300.4.6.1 (aarch64|ppc64le|s390x|x86_64) 0:2.31-150300.63.1 (x86_64) 0:2.31-150300.63.1 (noarch) 0:2.31-150300.63.1 (aarch64|ppc64le|s390x|x86_64) 0:2.8.2-150400.9.21.1 (aarch64|ppc64le|s390x|x86_64) 0:1.23.17-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.24.13-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2.4.0-150000.4.30.1 (aarch64|ppc64le|s390x|x86_64) 0:1.24.15-150500.3.7.1 (aarch64|ppc64le|s390x|x86_64) 0:1.23.17-150500.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:2.4.0-150000.4.32.1 (aarch64|ppc64le|s390x|x86_64) 0:2.1.7-150500.9.3.1 (aarch64|ppc64le|s390x|x86_64) 0:3.13.1-150000.1.26.1 (noarch) 0:3.13.1-150000.1.26.1 (aarch64|ppc64le|s390x|x86_64) 0:2.4.0-150000.4.40.2 (aarch64|ppc64le|s390x|x86_64) 0:2.4.0-150000.4.34.1 (aarch64|ppc64le|s390x|x86_64) 0:24.0.5_ce-150000.185.1 (noarch) 0:24.0.5_ce-150000.185.1 (aarch64|ppc64le|s390x|x86_64) 0:2.4.0-150000.4.36.1 (aarch64|ppc64le|s390x|x86_64) 0:1.6.21-150000.95.1 (aarch64|ppc64le|s390x|x86_64) 0:2.4.0-150000.4.38.1 (aarch64|ppc64le|s390x|x86_64) 0:1.1.8-150000.49.1 (aarch64|ppc64le|s390x|x86_64) 0:2.1.7-150500.9.6.1 (aarch64|ppc64le|s390x|x86_64) 0:1.1.1-150500.3.2.1 (aarch64|ppc64le|s390x|x86_64) 0:1.1.2-150500.3.2.1 (aarch64|ppc64le|s390x|x86_64) 0:1.29.1-150500.3.2.1 (aarch64|ppc64le|s390x|x86_64) 0:1.12.0-150400.3.11.1 (aarch64|ppc64le|s390x|x86_64) 0:6.3.3-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.3.9-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.21-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:5.3.6-150400.31.3.1 (aarch64|x86_64) 0:2.1.0beta3-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn27321-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn12688-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn28038-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn57878-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn57089-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn58378-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn3006-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn29036-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn57890-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn52909-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn18790-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn45266-150400.31.3.1 (noarch) 0:2021.20210325.svn57273-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn16219-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn17794-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn15543-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn25623-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn38300-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn52631-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn37223-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn51944-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn48871-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn34112-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn30408-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn45927-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn50528-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn46996-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn48478-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn24061-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn23866-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn58136-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn53554-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn17399-150400.31.3.1 (noarch) 0:2021.20210325.svn37645-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn24759-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn29031-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn8329-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn44515-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn58535-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn29050-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn18336-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn25860-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn14752-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn14758-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn25997-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn13663-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn34971-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn54732-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn37813-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn56984-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn44835-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn49033-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn32101-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn46894-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn53999-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn54358-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn30983-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn42296-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn42300-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn16420-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn25012-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn32150-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn10937-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn27025-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn56352-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn31696-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn26126-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn15093-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn41465-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn29005-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn32346-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn34647-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn43292-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn50281-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn37750-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn38769-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn23500-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn23661-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn23406-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn14428-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn8457-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn33688-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn18674-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn30534-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn37026-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn53804-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn10843-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn37537-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn14387-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn52858-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn41779-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn49140-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn40690-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn25962-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn16181-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn39165-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn29348-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn13364-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn52800-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn32405-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn7838-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn29333-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn44206-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn29335-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn34996-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn31638-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn32919-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn55172-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn53577-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn55933-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn29688-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn38710-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn21215-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn37771-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn13013-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn45011-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn15506-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn12782-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn47948-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn29741-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn33155-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn24062-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn43596-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn53444-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn6898-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn55132-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn25648-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn23262-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn6897-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn50419-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn46165-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn49312-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn52917-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2021.20210325.svn34398-150400.31.3.1 (aarch64|ppc64le|s390x|x86_64) 0:7.1.0.9-150400.6.21.1 (x86_64) 0:2.2.7-150000.3.43.1 (aarch64|ppc64le|s390x|x86_64) 0:102.12.0-150200.152.90.1 (aarch64|ppc64le|x86_64) 0:102.12.0-150200.152.90.1 (x86_64) 0:2.2.7-150000.3.46.1 (aarch64|ppc64le|s390x|x86_64) 0:1.0.0-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:6.4.2-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:7.1.0.9-150400.6.24.1 (aarch64|ppc64le|s390x|x86_64) 0:115.0-150200.152.93.1 (aarch64|ppc64le|s390x|x86_64) 0:115-150200.9.13.1 (noarch) 0:115.0-150200.152.93.1 (aarch64|ppc64le|s390x|x86_64) 0:115.0.2-150200.152.96.1 (noarch) 0:115.0.2-150200.152.96.1 (noarch) 0:5.15.8+kde8-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:115.1.0-150200.152.99.1 (noarch) 0:115.1.0-150200.152.99.1 (aarch64|ppc64le|s390x|x86_64) 0:6.4.2-150500.3.7.4 (aarch64|ppc64le|s390x|x86_64) 0:0.3.64-150500.3.3.1 (noarch) 0:0.3.64-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2.4.5-150000.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:115.2.0-150200.152.102.1 (noarch) 0:115.2.0-150200.152.102.1 (aarch64|ppc64le|s390x|x86_64) 0:3.5.27-150200.11.14.1 (aarch64|ppc64le|s390x|x86_64) 0:115.2.1-150200.152.105.1 (noarch) 0:115.2.1-150200.152.105.1 (x86_64) 0:2.2.7-150000.3.51.2 (aarch64|ppc64le|s390x|x86_64) 0:3.4.2-150200.11.31.1 (aarch64|ppc64le|s390x|x86_64) 0:2.4.5-150000.3.9.1 (aarch64|ppc64le|s390x|x86_64) 0:2.6-150200.3.4.3 (aarch64|ppc64le|s390x|x86_64) 0:115.3.0-150200.152.108.1 (noarch) 0:115.3.0-150200.152.108.1 (aarch64|ppc64le|s390x|x86_64) 0:1.6.1-150000.6.11.1 (aarch64|ppc64le|s390x|x86_64) 0:115.3.1-150200.152.111.1 (noarch) 0:115.3.1-150200.152.111.1 (aarch64|ppc64le|s390x|x86_64) 0:0.20.2-150400.3.9.1 (aarch64|ppc64le|s390x|x86_64) 0:7.1.0.9-150400.6.27.1 (aarch64|ppc64le|s390x|x86_64) 0:2.1.0-150000.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:2.0.59-150200.3.10.1 (aarch64|ppc64le|s390x|x86_64) 0:1.19.10-150000.1.34.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.5-150000.1.14.1 (noarch) 0:9.4.51-150200.3.19.2 (aarch64|x86_64) 0:1.26.0~0-150400.3.7.1 (ppc64le|s390x) 0:0.4.1~18-150300.7.12.1 (noarch) 0:1.74-150200.3.21.1 (aarch64|ppc64le|s390x|x86_64) 0:1.19.11-150000.1.37.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.6-150000.1.17.1 (noarch) 0:5.26.1-150300.17.14.1 (aarch64|ppc64le|s390x|x86_64) 0:2.0.61-150200.3.13.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.6.1-150000.1.8.1 (x86_64) 0:13.2.1+git7813-150000.1.3.2 (noarch) 0:13.2.1+git7813-150000.1.3.3 (noarch) 0:0.2.9-150200.11.10.1 (noarch) 0:32.0.1-150200.3.7.1 (noarch) 0:9.4.53-150200.3.22.1 (aarch64|ppc64le|s390x|x86_64) 0:2.0.62-150200.3.16.1 (noarch) 0:8.0-150200.11.7.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.7-150000.1.20.1 (aarch64|ppc64le|s390x|x86_64) 0:1.71.1-150400.9.6.1 (aarch64|ppc64le|s390x|x86_64) 0:1.19.12-150000.1.40.1 (aarch64|ppc64le|s390x|x86_64) 0:2.2.11-150000.3.6.1 (aarch64|x86_64) 0:0.4.2~3-150400.3.3.1 (noarch) 0:12.3.0+git1204-150000.1.16.1 (noarch) 0:7.5.0+r278197-150000.4.35.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.8-150000.1.23.1 (aarch64|ppc64le|s390x|x86_64) 0:1.21.1-150000.1.6.1 (aarch64|ppc64le|s390x|x86_64) 0:1.72.0-150400.24.24.1 (aarch64|ppc64le|s390x|x86_64) 0:1.72.0-150400.9.3.1 (x86_64) 0:2.41-150100.7.46.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.8.1-150000.1.11.1 (aarch64|ppc64le|s390x|x86_64) 0:1.19.13.1-150000.1.8.1 (aarch64|ppc64le|s390x|x86_64) 0:1.21.2-150000.1.9.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.9-150000.1.26.1 (aarch64|ppc64le|s390x|x86_64) 0:1.20.10-150000.1.29.1 (aarch64|ppc64le|s390x|x86_64) 0:1.21.3-150000.1.12.1 (aarch64|x86_64) 0:1.3.3-150200.5.3.1 (aarch64|x86_64) 0:3.2.3-150300.3.8.1 (x86_64) 0:3.2.3-150300.3.8.1 (noarch) 0:3.2.3-150300.3.8.1 (aarch64|ppc64le|s390x|x86_64) 0:1.8.0.372-150000.3.79.1 (aarch64|ppc64le|s390x|x86_64) 0:2.14.2-150400.24.6.1 (aarch64|ppc64le|s390x|x86_64) 0:20.06.2-150400.24.6.1 (aarch64|ppc64le|s390x|x86_64) 0:2.14.2-150400.24.9.1 (aarch64|ppc64le|s390x|x86_64) 0:20.06.2-150400.24.9.1 (aarch64|ppc64le|s390x|x86_64) 0:1.0.2p-150000.3.76.1 (ppc64le|s390x|x86_64) 0:1.8.0_sr8.5-150000.3.74.1 (x86_64) 0:1.8.0_sr8.5-150000.3.74.1 (aarch64|ppc64le|s390x|x86_64) 0:4.2.8p17-150000.4.25.1 (aarch64|ppc64le|s390x|x86_64) 0:1.0.2p-150000.3.79.1 (aarch64|ppc64le|s390x|x86_64) 0:7.4.33-150400.4.25.1 (ppc64le|s390x|x86_64) 0:1.8.0_sr8.6-150000.3.77.1 (x86_64) 0:1.8.0_sr8.6-150000.3.77.1 (aarch64|ppc64le|s390x|x86_64) 0:1.0.2p-150000.3.82.1 (aarch64|ppc64le|s390x|x86_64) 0:1.0.2p-150000.3.85.1 (aarch64|ppc64le|s390x|x86_64) 0:14.9-150200.5.29.1 (noarch) 0:14.9-150200.5.29.1 (ppc64le|s390x|x86_64) 0:1.8.0_sr8.10-150000.3.80.1 (x86_64) 0:1.8.0_sr8.10-150000.3.80.1 (aarch64|ppc64le|s390x|x86_64) 0:1.8.0.382-150000.3.82.1 (aarch64|ppc64le|s390x|x86_64) 0:7.4.33-150400.4.28.1 (x86_64) 0:1-150500.11.5.1 (ppc64le|s390x|x86_64) 0:5.14.21-150500.55.7.1 (ppc64le|s390x|x86_64) 0:1-150500.11.7.1 5.14.21-150500.53-default (ppc64le|s390x|x86_64) 0:2-150500.3.1 5.14.21-150500.11-rt-default (x86_64) 0:2-150500.3.1 (ppc64le|s390x|x86_64) 0:5.14.21-150500.55.12.1 (ppc64le|s390x|x86_64) 0:1-150500.11.3.2 (ppc64le|s390x|x86_64) 0:5.14.21-150500.55.19.1 (ppc64le|s390x|x86_64) 0:1-150500.11.3.4 (x86_64) 0:1-150500.11.3.1 (ppc64le|s390x|x86_64) 0:3-150500.6.2 5.14.21-150500.55.7-default (ppc64le|s390x|x86_64) 0:2-150500.2.1 5.14.21-150500.55.12-default (x86_64) 0:3-150500.6.2 5.14.21-150500.13.5-rt-default (x86_64) 0:2-150500.2.1 (x86_64) 0:4-150500.9.2 (x86_64) 0:3-150500.2.1 5.14.21-150500.13.11-rt-default (ppc64le|s390x|x86_64) 0:4-150500.9.2 (ppc64le|s390x|x86_64) 0:3-150500.2.1 5.14.21-150500.55.19-default (ppc64le|s390x|x86_64) 0:5.14.21-150500.55.28.1 (ppc64le|s390x|x86_64) 0:1-150500.11.5.1 (ppc64le|s390x|x86_64) 0:5.14.21-150500.55.31.1 (ppc64le|s390x|x86_64) 0:1-150500.11.3.1 (aarch64|ppc64le|s390x|x86_64) 0:4.1.90-150200.4.14.1 (noarch) 0:4.1.90-150200.4.14.1 (aarch64|ppc64le|s390x|x86_64) 0:3.11.0-150200.6.5.1 (aarch64|ppc64le|s390x|x86_64) 0:2.11.5-150100.3.21.1 (aarch64|ppc64le|s390x|x86_64) 0:3.0.0-150200.6.5.1 (noarch) 0:1.0.2-150100.6.3.1 (ppc64le|s390x) 0:0.19-150300.3.5.1 (aarch64|ppc64le|s390x|x86_64) 0:2.9.0-150200.6.10.1 (noarch) 0:0.2.4-150100.6.3.1 (aarch64|ppc64le|s390x|x86_64) 0:10.6.13-150400.3.23.1 (x86_64) 0:0.5.0-150000.3.11.1 (aarch64|ppc64le|s390x|x86_64) 0:3.4.0-150000.3.9.1 (aarch64|ppc64le|s390x|x86_64) 0:9.5.1-150200.3.41.3 (aarch64|ppc64le|s390x|x86_64) 0:2.37.6-150100.4.17.1 (aarch64|ppc64le|s390x) 0:102.12.0-150200.8.121.1 (aarch64|ppc64le|s390x|x86_64) 0:3.11.0-150200.6.7.1 (aarch64|ppc64le|s390x|x86_64) 0:2.9.0-150200.6.12.1 (aarch64|ppc64le|s390x|x86_64) 0:3.0.0-150200.6.7.1 (aarch64|ppc64le|s390x) 0:2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 (aarch64|ppc64le|s390x|x86_64) 0:2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 (noarch) 0:6.4.2-150500.3.3.1 (noarch) 0:10.0-150100.6.3.3 (aarch64|ppc64le|s390x|x86_64) 0:20161124-150000.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:9.5.5-150200.3.44.1 (aarch64|ppc64le|s390x|x86_64) 0:4.1.94-150200.4.17.1 (noarch) 0:4.1.94-150200.4.17.1 (aarch64|ppc64le|s390x|x86_64) 0:3.5-150000.3.3.1 (aarch64|ppc64le|s390x) 0:115.0.1-150200.8.124.1 (aarch64|s390x|x86_64) 0:13.2.1+git7813-150000.1.3.3 (aarch64|ppc64le|s390x|x86_64) 0:0.3.6-150200.3.9.1 (aarch64|ppc64le|s390x|x86_64) 0:4.1.100-150200.4.20.1 (noarch) 0:4.1.100-150200.4.20.1 (noarch) 0:6.4.2-150500.3.7.4 (aarch64|ppc64le|s390x) 0:115.1.0-150200.8.127.1 (x86_64) 0:1.22.0-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:1.3.3-150200.5.3.1 (ppc64le) 0:1.3.3-150200.5.3.1 (noarch) 0:11.0.20.0-150000.3.99.1 (ppc64le|s390x) 0:1.8.0.372-150200.3.33.2 (ppc64le|s390x) 0:1.8.0.382-150200.3.36.1 (aarch64|ppc64le|s390x|x86_64) 0:2.9.0-150200.6.14.1 (aarch64|ppc64le|s390x|x86_64) 0:3.0.0-150200.6.9.1 (aarch64|ppc64le|s390x|x86_64) 0:3.11.0-150200.6.9.1 (x86_64) 0:1.0.3-150200.3.10.1 (x86_64) 0:1.3.2-150000.3.14.1 (aarch64|ppc64le|s390x) 0:115.2.2-150200.8.130.1 (x86_64) 0:0.5.0-150000.3.14.1 (aarch64|ppc64le|s390x) 0:2.6-150200.3.4.3 (aarch64|ppc64le|s390x|x86_64) 0:9.5.5-150200.3.47.1 (aarch64|ppc64le|s390x|x86_64) 0:3.15-150000.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:0.23.0-150100.4.16.2 (aarch64|ppc64le|s390x|x86_64) 0:2.7.18-150000.54.1 (x86_64) 0:3.5.12-150000.3.10.1 (aarch64|ppc64le|s390x) 0:0.20.2-150400.3.9.1 (aarch64|ppc64le|s390x|x86_64) 0:3.4.0-150000.3.12.1 (aarch64|ppc64le|s390x|x86_64) 0:4.35.2-150500.3.3.1 (aarch64|ppc64le|s390x) 0:115.3.1-150200.8.133.1 (aarch64|x86_64) 0:3.1.1260.0-150000.5.13.1 (aarch64|ppc64le|s390x|x86_64) 0:1.5.1-150100.3.7.1 (aarch64|ppc64le|s390x|x86_64) 0:1.5.1-150100.3.9.1 (aarch64|ppc64le|s390x|x86_64) 0:23.1-150100.8.63.5 (aarch64|x86_64) 0:5.14.21-150500.33.3.1 (noarch) 0:5.14.21-150500.33.3.1 (aarch64|x86_64) 0:3.1.1260.0-150000.5.15.1 (aarch64|x86_64) 0:1.53.0-150100.4.15.1 (aarch64|ppc64le|s390x|x86_64) 0:2.13-150500.3.3.1 (noarch) 0:2.17.1-150100.6.18.1 (noarch) 0:1.3.0-150100.3.6.3 (noarch) 0:0.9.0-150100.3.7.3 (aarch64|x86_64) 0:5.14.21-150500.33.6.1 (noarch) 0:5.14.21-150500.33.6.1 (noarch) 0:1.23.1-150100.3.13.1 (noarch) 0:12.13.1-150100.3.10.1 (aarch64|x86_64) 0:5.14.21-150500.33.11.1 (noarch) 0:5.14.21-150500.33.11.1 (aarch64|x86_64) 0:5.14.21-150500.33.14.1 (noarch) 0:5.14.21-150500.33.14.1 (aarch64|x86_64) 0:1.53.0-150100.4.17.1 (aarch64|x86_64) 0:3.1.1260.0-150000.5.17.1 (aarch64|x86_64) 0:5.14.21-150500.33.17.1 (noarch) 0:5.14.21-150500.33.17.1 (aarch64|ppc64le|s390x|x86_64) 0:0.7.0-150300.3.3.1 (aarch64|x86_64) 0:5.14.21-150500.33.20.1 (noarch) 0:5.14.21-150500.33.20.1 (aarch64|ppc64le|s390x|x86_64) 0:3.11.3-150400.9.12.1 (noarch) 0:22.3.1-150400.17.6.1 (aarch64|ppc64le|s390x|x86_64) 0:3.11.4-150400.9.15.3 (aarch64|ppc64le|s390x|x86_64) 0:3.11.4-150400.9.15.1 (aarch64|ppc64le|s390x|x86_64) 0:3.11.4-150400.9.15.2 (aarch64|ppc64le|s390x|x86_64) 0:3.11.5-150400.9.20.2 (aarch64|ppc64le|s390x|x86_64) 0:3.11.5-150400.9.20.1 (aarch64|ppc64le|s390x|x86_64) 0:0.6.0+git.1685628435.48c4099-150200.4.8.1 (noarch) 0:10.6.13-150400.3.23.1 (aarch64|ppc64le|s390x|x86_64) 0:8.4-150500.4.3.1 (noarch) 0:4.17.1_04-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:3.1.0-150500.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:23.03.0-150500.3.3.1 (x86_64) 0:9.0.0-150500.6.3.1 (aarch64|x86_64) 0:9.0.0-150500.6.3.1 (noarch) 0:9.0.0-150500.6.3.1 (ppc64le|x86_64) 0:4.1-150500.4.3.1 (noarch) 0:15.1.0-150000.3.4.1 (noarch) 0:17.2.1-150000.3.4.1 (aarch64|ppc64le|s390x|x86_64) 0:4.4.2-150000.3.4.1 (aarch64|ppc64le|s390x|x86_64) 0:0.10.0-150300.5.6.1 (aarch64|ppc64le|s390x|x86_64) 0:6.2.6-150400.3.22.1 (aarch64|ppc64le|s390x|x86_64) 0:7.0.8-150500.3.3.1 (x86_64) 0:9.0.0-150500.6.11.1 (aarch64|x86_64) 0:9.0.0-150500.6.11.1 (noarch) 0:9.0.0-150500.6.11.1 (noarch) 0:7.1.0-150500.49.6.1 (x86_64) 0:7.1.0-150500.49.6.1 (aarch64) 0:7.1.0-150500.49.6.1 (aarch64|ppc64le|x86_64) 0:7.1.0-150500.49.6.1 (s390x|x86_64) 0:7.1.0-150500.49.6.1 (s390x) 0:7.1.0-150500.49.6.1 (noarch) 0:1.0.0+-150500.49.6.1 (ppc64le) 0:7.1.0-150500.49.6.1 (noarch) 0:1.16.0_0_gd239552-150500.49.6.1 (noarch) 0:8-150500.49.6.1 (aarch64|ppc64le|s390x|x86_64) 0:3.1.0-150300.3.3.1 (aarch64|ppc64le|s390x|x86_64) 0:0.6.1-150100.4.6.1 (noarch) 0:15.4-150200.5.12.1 (aarch64|ppc64le|s390x|x86_64) 0:22.3-150300.3.8.1 (noarch) 0:4.17.2_02-150500.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:8.4-150500.4.8.1 (aarch64|ppc64le|s390x|x86_64) 0:3.1.0-150500.3.6.2 (aarch64|ppc64le|s390x|x86_64) 0:23.03.0-150500.3.6.2 (aarch64|ppc64le|s390x|x86_64) 0:7.0.8-150500.3.6.1 (noarch) 0:4.17.2_04-150500.3.9.1 (aarch64|ppc64le|s390x|x86_64) 0:1.1.1-150400.12.5.1 (noarch) 0:4.17.2_06-150500.3.12.1 (aarch64|ppc64le|s390x|x86_64) 0:23.3.4.19-150300.3.11.1 (noarch) 0:1.5-150200.3.9.1 (noarch) 0:9.0.75-150200.41.1 (aarch64|ppc64le|s390x|x86_64) 0:8.0.29-150400.4.34.1 (aarch64|ppc64le|s390x|x86_64) 0:18.16.1-150400.9.9.1 (noarch) 0:18.16.1-150400.9.9.1 (noarch) 0:9.0.82-150200.46.1 (aarch64|ppc64le|s390x|x86_64) 0:18.18.2-150400.9.15.1 (noarch) 0:18.18.2-150400.9.15.1 (aarch64|ppc64le|s390x|x86_64) 0:18.17.1-150400.9.12.1 (noarch) 0:18.17.1-150400.9.12.1 (aarch64|ppc64le|s390x|x86_64) 0:8.0.30-150400.4.37.1 (noarch) 0:2.2.3-150400.3.6.1 (aarch64|ppc64le|s390x|x86_64) 0:1.3.3+git.1683650163.1000ba6-150200.3.26.1 (aarch64|ppc64le|s390x|x86_64) 0:5.1.4-150000.3.18.1 (aarch64|ppc64le|s390x|x86_64) 0:2.4.22+git0.f8e3218e2-150400.3.16.1 (aarch64|ppc64le|s390x|x86_64) 0:1.0.4-150000.4.6.1 (aarch64|ppc64le|s390x|x86_64) 0:5.1.4-150000.3.9.1 (aarch64|ppc64le|s390x|x86_64) 0:4.3.12-150000.3.12.1 (x86_64) 0:5.65-150500.3.3.1 (x86_64) 0:102.12.0-150200.8.121.1 (x86_64) 0:2.1.0~beta3+git.1624618403.e9577376-150400.4.2.1 (x86_64) 0:5.14.21-150500.55.7.1 (x86_64) 0:115.0.1-150200.8.124.1 (x86_64) 0:22.01.0-150400.3.6.1 (x86_64) 0:5.14.21-150500.55.12.1 (x86_64) 0:115.1.0-150200.8.127.1 (x86_64) 0:5.14.21-150500.55.19.1 (x86_64) 0:2.4-150100.9.4.1 (x86_64) 0:115.2.2-150200.8.130.1 (x86_64) 0:3.4.2-150200.11.31.1 (x86_64) 0:22.01.0-150400.3.11.2 (x86_64) 0:0.18.9-150000.3.23.1 (x86_64) 0:0.20.2-150400.3.9.1 (x86_64) 0:5.14.21-150500.55.28.1 (x86_64) 0:115.3.1-150200.8.133.1 (x86_64) 0:5.14.21-150500.55.31.1 (x86_64) 0:2.1.0-150000.3.3.1