Removed rpms
============

 - NetworkManager-openconnect-gnome
 - NetworkManager-pptp-gnome
 - flatpak-remote-flathub
 - libappstream4

Added rpms
==========

 - libzxcvbn0

Package Source Changes
======================

MozillaFirefox
+- Firefox Extended Support Release 115.9.1esr ESR
+  * Fixed: Security fix.
+  MFSA 2024-16 (bsc#1221850)
+  * CVE-2024-29944 (bmo#1886852)
+    Privileged JavaScript Execution via Event Handlers
+
+- Firefox Extended Support Release 115.9.0 ESR
+  * Fixed: Various security fixes and other quality improvements.
+  MFSA 2024-13 (bsc#1221327)
+  * CVE-2024-0743 (bmo#1867408)
+    Crash in NSS TLS method
+  * CVE-2024-2605 (bmo#1872920)
+    Windows Error Reporter could be used as a Sandbox escape
+    vector
+  * CVE-2024-2607 (bmo#1879939)
+    JIT code failed to save return registers on Armv7-A
+  * CVE-2024-2608 (bmo#1880692)
+    Integer overflow could have led to out of bounds write
+  * CVE-2024-2616 (bmo#1846197)
+    Improve handling of out-of-memory conditions in ICU
+  * CVE-2023-5388 (bmo#1780432)
+    NSS susceptible to timing attack against RSA decryption
+  * CVE-2024-2610 (bmo#1871112)
+    Improper handling of html and body tags enabled CSP nonce
+    leakage
+  * CVE-2024-2611 (bmo#1876675)
+    Clickjacking vulnerability could have led to a user
+    accidentally granting permissions
+  * CVE-2024-2612 (bmo#1879444)
+    Self referencing object could have potentially led to a use-
+    after-free
+  * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405,
+    bmo#1881093)
+    Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9,
+    and Thunderbird 115.9
+
-- Mozilla Firefox ESR 115.8
-  MFSA 2024-UNKNOWN (bsc#1220048)
-  * NO CVE-NUMBER ASSIGNED YET (bmo#1843752)
+  MFSA 2024-06 (bsc#1220048)
+  * CVE-2024-1546 (bmo#1843752)
-  * NO CVE-NUMBER ASSIGNED YET (bmo#1877879)
+  * CVE-2024-1547 (bmo#1877879)
-  * NO CVE-NUMBER ASSIGNED YET (bmo#1832627)
+  * CVE-2024-1548 (bmo#1832627)
-  * NO CVE-NUMBER ASSIGNED YET (bmo#1833814)
+  * CVE-2024-1549 (bmo#1833814)
-  * NO CVE-NUMBER ASSIGNED YET (bmo#1860065)
+  * CVE-2024-1550 (bmo#1860065)
-  * NO CVE-NUMBER ASSIGNED YET (bmo#1864385)
+  * CVE-2024-1551 (bmo#1864385)
-  * NO CVE-NUMBER ASSIGNED YET (bmo#1874502)
+  * CVE-2024-1552 (bmo#1874502)
-  * NO CVE-NUMBER ASSIGNED YET (bmo#1855686, bmo#1867982, bmo#1871498,
+  * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498,
apache2
+- Add patches to improve FIPS compatibility (bsc#1220681):
+  * apache2-fips-compatibility-01.patch
+  * apache2-fips-compatibility-02.patch
+  * apache2-fips-compatibility-03.patch
+
+- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
+  apache2ctl, htpasswd2) change, including the relative
+  manpages (bsc#1221880)
+
apache2:manual
+- Add patches to improve FIPS compatibility (bsc#1220681):
+  * apache2-fips-compatibility-01.patch
+  * apache2-fips-compatibility-02.patch
+  * apache2-fips-compatibility-03.patch
+
+- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
+  apache2ctl, htpasswd2) change, including the relative
+  manpages (bsc#1221880)
+
apache2:prefork
+- Add patches to improve FIPS compatibility (bsc#1220681):
+  * apache2-fips-compatibility-01.patch
+  * apache2-fips-compatibility-02.patch
+  * apache2-fips-compatibility-03.patch
+
+- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
+  apache2ctl, htpasswd2) change, including the relative
+  manpages (bsc#1221880)
+
apache2:utils
+- Add patches to improve FIPS compatibility (bsc#1220681):
+  * apache2-fips-compatibility-01.patch
+  * apache2-fips-compatibility-02.patch
+  * apache2-fips-compatibility-03.patch
+
+- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork,
+  apache2ctl, htpasswd2) change, including the relative
+  manpages (bsc#1221880)
+
btrfsprogs
+- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943)
+
flatpak
+- Make flatpak-remote-flathub only supplement flatpak in TW
+  (bsc#1221662).
+
glibc
+- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ
+  [#30945])
+- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in
+  sched_getcpu (BZ #31479)
+
grub2
+- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866)
+  * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch
+
+- Fix memdisk becomes the default boot entry, resolving no graphic display
+  device error in guest vnc console (bsc#1221779)
+  * grub2-xen-pv-firmware.cfg
+
kernel-64kb
+- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic (bsc#1221491)
+- commit 24e3b19
+
+- phy: tegra: xusb: Add API to retrieve the port number of phy (bsc#1221491)
+- commit be854b3
+
+- Update
+  patches.suse/arm64-sme-Always-exit-sme_alloc-early-with-existing-.patch
+  (git-fixes CVE-2024-26618 bsc#1221295).
+- Update
+  patches.suse/btrfs-don-t-abort-filesystem-when-attempting-to-snap.patch
+  (bsc#1221282 CVE-2024-26644 bsc#1222072).
+- Update
+  patches.suse/btrfs-scrub-avoid-use-after-free-when-chunk-length-i.patch
+  (bsc#1220943 CVE-2024-26616).
+- Update
+  patches.suse/drm-amd-display-Fix-late-derefrence-dsc-check-in-lin.patch
+  (git-fixes CVE-2024-26647 bsc#1222066).
+- Update
+  patches.suse/drm-amd-display-Fix-variable-deferencing-before-NULL.patch
+  (git-fixes CVE-2024-26648 bsc#1222067).
+- Update
+  patches.suse/drm-amdgpu-Fix-the-null-pointer-when-load-rlc-firmwa.patch
+  (git-fixes CVE-2024-26649 bsc#1222055).
+- Update
+  patches.suse/net-qualcomm-rmnet-fix-global-oob-in-rmnet_policy.patch
+  (git-fixes CVE-2024-26597 bsc#1220363).
+- Update patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch
+  (bsc#1218968 CVE-2024-26629 bsc#1221379).
+- Update
+  patches.suse/pwm-Fix-out-of-bounds-access-in-of_pwm_single_xlate.patch
+  (git-fixes CVE-2024-26599 bsc#1220365).
+- Update
+  patches.suse/scsi-core-Move-scsi_host_busy-out-of-host-lock-for-waking-up-EH-handler.patch
+  (git-fixes CVE-2024-26627 bsc#1221090).
+- Update
+  patches.suse/thermal-intel-hfi-Add-syscore-callbacks-for-system-w.patch
+  (git-fixes CVE-2024-26646 bsc#1222070).
+- Update
+  patches.suse/tracing-Ensure-visibility-when-inserting-an-element-into-tracing_map.patch
+  (git-fixes CVE-2024-26645 bsc#1222056).
+- Update patches.suse/wifi-iwlwifi-fix-a-memory-corruption.patch
+  (git-fixes CVE-2024-26610 bsc#1221299).
+- Update
+  patches.suse/x86-fpu-Stop-relying-on-userspace-for-info-to-fault-in-xsa.patch
+  (bsc#1220335 CVE-2024-26603).
+- commit 29c1925
+
+- Update
+  patches.suse/0002-ravb-Fix-use-after-free-issue-in-ravb_tx_timeout_wor.patch
+  (bsc#1212514 CVE-2023-35827 CVE-2023-52509 bsc#1220836).
+- Update
+  patches.suse/Bluetooth-hci_codec-Fix-leaking-content-of-local_cod.patch
+  (git-fixes CVE-2023-52518 bsc#1221056).
+- Update
+  patches.suse/EDAC-thunderx-Fix-possible-out-of-bounds-string-acce.patch
+  (git-fixes CVE-2023-52464 bsc#1220330).
+- Update
+  patches.suse/FS-JFS-UBSAN-array-index-out-of-bounds-in-dbAdjTree.patch
+  (git-fixes CVE-2023-52604 bsc#1221067).
+- Update
+  patches.suse/HID-intel-ish-hid-ipc-Disable-and-reenable-ACPI-GPE-.patch
+  (git-fixes CVE-2023-52519 bsc#1220920).
+- Update
+  patches.suse/HID-sony-Fix-a-potential-memory-leak-in-sony_probe.patch
+  (git-fixes CVE-2023-52529 bsc#1220929).
+- Update patches.suse/IB-ipoib-Fix-mcast-list-locking.patch
+  (jsc#PED-6864 CVE-2023-52587 bsc#1221082).
+- Update
+  patches.suse/PCI-switchtec-Fix-stdev_release-crash-after-surprise.patch
+  (git-fixes CVE-2023-52617 bsc#1221613).
+- Update
+  patches.suse/PM-devfreq-Fix-buffer-overflow-in-trans_stat_show.patch
+  (git-fixes CVE-2023-52614 bsc#1221617).
+- Update
+  patches.suse/PM-sleep-Fix-possible-deadlocks-in-core-system-wide-.patch
+  (git-fixes CVE-2023-52498 bsc#1221269).
+- Update
+  patches.suse/RDMA-siw-Fix-connection-failure-handling.patch
+  (git-fixes CVE-2023-52513 bsc#1221022).
+- Update
+  patches.suse/RDMA-srp-Do-not-call-scsi_done-from-srp_abort.patch
+  (git-fixes CVE-2023-52515 bsc#1221048).
+- Update
+  patches.suse/Revert-tty-n_gsm-fix-UAF-in-gsm_cleanup_mux.patch
+  (git-fixes CVE-2023-52564 bsc#1220938).
+- Update
+  patches.suse/SUNRPC-Fix-a-suspicious-RCU-usage-warning.patch
+  (git-fixes CVE-2023-52623 bsc#1222060).
+- Update
+  patches.suse/UBSAN-array-index-out-of-bounds-in-dtSplitRoot.patch
+  (git-fixes CVE-2023-52603 bsc#1221066).
+- Update
+  patches.suse/apparmor-avoid-crash-when-parsed-profile-name-is-emp.patch
+  (git-fixes CVE-2023-52443 bsc#1220240).
+- Update
+  patches.suse/arm64-dts-qcom-sdm845-db845c-Mark-cont-splash-memory.patch
+  (git-fixes CVE-2023-52561 bsc#1220935).
+- Update
+  patches.suse/bpf-Check-rcu_read_lock_trace_held-before-calling-bp.patch
+  (bsc#1220251 CVE-2023-52447 CVE-2023-52621 bsc#1222073).
+- Update
+  patches.suse/bus-mhi-host-Add-alignment-check-for-event-ring-read.patch
+  (git-fixes CVE-2023-52494 bsc#1221273).
+- Update
+  patches.suse/bus-mhi-host-Drop-chan-lock-before-queuing-buffers.patch
+  (git-fixes CVE-2023-52493 bsc#1221274).
+- Update
+  patches.suse/cifs-Fix-UAF-in-cifs_demultiplex_thread.patch
+  (bsc#1208995 CVE-2023-1192 CVE-2023-52572 bsc#1220946).
+- Update
+  patches.suse/class-fix-use-after-free-in-class_register.patch
+  (git-fixes CVE-2023-52468 bsc#1220431).
+- Update
+  patches.suse/crypto-scomp-fix-req-dst-buffer-overflow.patch
+  (git-fixes CVE-2023-52612 bsc#1221616).
+- Update patches.suse/dccp-fix-dccp_v4_err-dccp_v6_err-again.patch
+  (bsc#1220419 CVE-2023-52577 bsc#1220873).
+- Update
+  patches.suse/dmaengine-fix-NULL-pointer-in-channel-unregistration.patch
+  (git-fixes CVE-2023-52492 bsc#1221276).
+- Update
+  patches.suse/drivers-amd-pm-fix-a-use-after-free-in-kv_parse_powe.patch
+  (git-fixes CVE-2023-52469 bsc#1220411).
+- Update
+  patches.suse/drm-Don-t-unref-the-same-fb-many-times-by-mistake-du.patch
+  (git-fixes CVE-2023-52486 bsc#1221277).
+- Update
+  patches.suse/drm-amd-display-Fix-NULL-pointer-dereference-at-hibe.patch
+  (git-fixes CVE-2023-52460 bsc#1220319).
+- Update
+  patches.suse/drm-amdgpu-Fix-possible-NULL-dereference-in-amdgpu_r.patch
+  (git-fixes CVE-2023-52585 bsc#1221080).
+- Update
+  patches.suse/drm-meson-fix-memory-leak-on-hpd_notify-callback.patch
+  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
+  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
+  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-52563
+  bsc#1220937).
+- Update
+  patches.suse/drm-msm-dpu-Add-mutex-lock-in-control-vblank-irq.patch
+  (git-fixes CVE-2023-52586 bsc#1221081).
+- Update
+  patches.suse/drm-radeon-check-the-alloc_workqueue-return-value-in.patch
+  (git-fixes CVE-2023-52470 bsc#1220413).
+- Update
+  patches.suse/drm-sched-Fix-bounds-limiting-when-given-a-malformed.patch
+  (git-fixes CVE-2023-52461 bsc#1220322).
+- Update
+  patches.suse/firmware-arm_scmi-Check-mailbox-SMT-channel-for-cons.patch
+  (git-fixes CVE-2023-52608 bsc#1221375).
+- Update
+  patches.suse/gfs2-Fix-kernel-NULL-pointer-dereference-in-gfs2_rgrp_dump.patch
+  (git-fixes CVE-2023-52448 bsc#1220253).
+- Update
+  patches.suse/hwrng-core-Fix-page-fault-dead-lock-on-mmap-ed-hwrng.patch
+  (git-fixes CVE-2023-52615 bsc#1221614).
+- Update
+  patches.suse/ieee802154-ca8210-Fix-a-potential-UAF-in-ca8210_prob.patch
+  (git-fixes CVE-2023-52510 bsc#1220898).
+- Update
+  patches.suse/iio-adc-ad7091r-Allow-users-to-configure-device-even.patch
+  (git-fixes CVE-2023-52627 bsc#1222051).
+- Update
+  patches.suse/iommu-Don-t-reserve-0-length-IOVA-region.patch
+  (git-fixes CVE-2023-52455 bsc#1220332).
+- Update
+  patches.suse/iommu-arm-smmu-v3-Fix-soft-lockup-triggered-by-arm_smmu_mm_invalidate_range.patch
+  (bsc#1215921 CVE-2023-52484 bsc#1220797).
+- Update
+  patches.suse/iommu-vt-d-Avoid-memory-allocation-in-iommu_suspend
+  (jsc#PED-7779 jsc#PED-7780 CVE-2023-52559 bsc#1220933).
+- Update
+  patches.suse/ipv4-ipv6-Fix-handling-of-transhdrlen-in-__ip-6-_app.patch
+  (bsc#1220419 CVE-2023-52527 bsc#1220928).
+- Update
+  patches.suse/jfs-fix-array-index-out-of-bounds-in-dbAdjTree.patch
+  (git-fixes CVE-2023-52601 bsc#1221068).
+- Update
+  patches.suse/jfs-fix-array-index-out-of-bounds-in-diNewExt.patch
+  (git-fixes CVE-2023-52599 bsc#1221062).
+- Update
+  patches.suse/jfs-fix-slab-out-of-bounds-Read-in-dtSearch.patch
+  (git-fixes CVE-2023-52602 bsc#1221070).
+- Update patches.suse/jfs-fix-uaf-in-jfs_evict_inode.patch
+  (git-fixes CVE-2023-52600 bsc#1221071).
+- Update
+  patches.suse/ksmbd-fix-slub-overflow-in-ksmbd_decode_ntlmss.patch
+  (bsc#1012628 CVE-2023-52440 bsc#1220182).
+- Update
+  patches.suse/media-mtk-jpeg-Fix-use-after-free-bug-due-to-error-p.patch
+  (git-fixes CVE-2023-52491 bsc#1221281).
+- Update
+  patches.suse/media-rkisp1-Fix-IRQ-disable-race-issue.patch
+  (git-fixes CVE-2023-52589 bsc#1221084).
+- Update patches.suse/media-uvcvideo-Fix-OOB-read.patch (git-fixes
+  CVE-2023-52565 bsc#1220939).
+- Update
+  patches.suse/mfd-syscon-Fix-null-pointer-dereference-in-of_syscon.patch
+  (git-fixes CVE-2023-52467 bsc#1220433).
+- Update
+  patches.suse/mm-migrate-fix-getting-incorrect-page-mapping-during-page-migration.patch
+  (git-fixes CVE-2023-52490 bsc#1221325).
+- Update
+  patches.suse/mm-slab_common-fix-slab_caches-list-corruption-after-kmem_cache_destroy.patch
+  (git-fixes CVE-2023-52562 bsc#1220936).
+- Update
+  patches.suse/mtd-Fix-gluebi-NULL-pointer-dereference-caused-by-ft.patch
+  (git-fixes CVE-2023-52449 bsc#1220238).
+- Update patches.suse/net-bridge-use-DEV_STATS_INC.patch
+  (bsc#1220419 CVE-2023-52578 bsc#1220874).
+- Update patches.suse/net-core-Fix-ETH_P_1588-flow-dissector.patch
+  (bsc#1220419 CVE-2023-52580 bsc#1220876).
+- Update
+  patches.suse/net-fix-possible-store-tearing-in-neigh_periodic_wor.patch
+  (bsc#1220419 CVE-2023-52522 bsc#1220924).
+- Update
+  patches.suse/net-mlx5e-Fix-operation-precedence-bug-in-port-times.patch
+  (jsc#PED-3311 CVE-2023-52626 bsc#1222054).
+- Update patches.suse/net-mlx5e-Fix-peer-flow-lists-handling.patch
+  (jsc#PED-3311 CVE-2023-52487 bsc#1221341).
+- Update
+  patches.suse/net-nfc-fix-races-in-nfc_llcp_sock_get-and-nfc_llcp_.patch
+  (git-fixes CVE-2023-52502 bsc#1220831).
+- Update
+  patches.suse/net-nfc-llcp-Add-lock-when-modifying-device-list.patch
+  (git-fixes CVE-2023-52524 bsc#1220927).
+- Update
+  patches.suse/net-rds-Fix-possible-NULL-pointer-dereference.patch
+  (bsc#1220419 CVE-2023-52573 bsc#1220869).
+- Update
+  patches.suse/net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch
+  (git-fixes CVE-2023-52528 bsc#1220843).
+- Update
+  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elemen.patch
+  (git-fixes CVE-2023-52433 bsc#1220137).
+- Update
+  patches.suse/nfc-nci-assert-requested-protocol-is-valid.patch
+  (git-fixes CVE-2023-52507 bsc#1220833).
+- Update
+  patches.suse/nilfs2-fix-potential-use-after-free-in-nilfs_gccache.patch
+  (git-fixes CVE-2023-52566 bsc#1220940).
+- Update
+  patches.suse/nvme-fc-Prevent-null-pointer-dereference-in-nvme_fc_.patch
+  (bsc#1214842 CVE-2023-52508 bsc#1221015).
+- Update
+  patches.suse/nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva.patch
+  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
+  CVE-2023-6356 CVE-2023-52454 bsc#1220320).
+- Update
+  patches.suse/ocfs2-Avoid-touching-renamed-directory-if-parent-doe.patch
+  (bsc#1221044 CVE-2023-52591 CVE-2023-52590 bsc#1221088).
+- Update
+  patches.suse/perf-x86-intel-uncore-Fix-NULL-pointer-dereference-issue-in-upi_fill_topology.patch
+  (bsc#1218958 CVE-2023-52450 bsc#1220237).
+- Update patches.suse/perf-x86-lbr-Filter-vsyscall-addresses.patch
+  (git-fixes CVE-2023-52476 bsc#1220703).
+- Update
+  patches.suse/phy-lynx-28g-serialize-concurrent-phy_set_mode_ext-c.patch
+  (git-fixes CVE-2023-52505 bsc#1220830).
+- Update
+  patches.suse/pinctrl-nuvoton-wpcm450-fix-out-of-bounds-write.patch
+  (git-fixes CVE-2023-52512 bsc#1221021).
+- Update
+  patches.suse/platform-x86-think-lmi-Fix-reference-leak.patch
+  (git-fixes CVE-2023-52520 bsc#1220921).
+- Update
+  patches.suse/power-supply-rk817-Fix-node-refcount-leak.patch
+  (git-fixes CVE-2023-52571 bsc#1220945).
+- Update
+  patches.suse/powerpc-lib-Validate-size-for-vector-operations.patch
+  (bsc#1215199 CVE-2023-52606 bsc#1221069).
+- Update
+  patches.suse/powerpc-mm-Fix-null-pointer-dereference-in-pgtable_c.patch
+  (bsc#1215199 CVE-2023-52607 bsc#1221061).
+- Update
+  patches.suse/pstore-ram-Fix-crash-when-setting-number-of-cpus-to-.patch
+  (git-fixes CVE-2023-52619 bsc#1221618).
+- Update
+  patches.suse/ring-buffer-Do-not-attempt-to-read-past-commit.patch
+  (git-fixes CVE-2023-52501 bsc#1220885).
+- Update
+  patches.suse/scsi-pm80xx-Avoid-leaking-tags-when-processing-OPC_INB_SET_CONTROLLER_CONFIG-command.patch
+  (jsc#PED-6874 CVE-2023-52500 bsc#1220883).
+- Update
+  patches.suse/serial-8250_port-Check-IRQ-data-before-use.patch
+  (git-fixes CVE-2023-52567 bsc#1220839).
+- Update
+  patches.suse/serial-sc16is7xx-convert-from-_raw_-to-_noinc_-regma.patch
+  (git-fixes CVE-2023-52488 bsc#1221162).
+- Update
+  patches.suse/soc-qcom-pmic_glink_altmode-fix-port-sanity-check.patch
+  (git-fixes CVE-2023-52495 bsc#1221271).
+- Update
+  patches.suse/spi-sun6i-fix-race-between-DMA-RX-transfer-completio.patch
+  (git-fixes CVE-2023-52517 bsc#1221055).
+- Update
+  patches.suse/spi-sun6i-reduce-DMA-RX-transfer-width-to-single-byt.patch
+  (git-fixes CVE-2023-52511 bsc#1221012).
+- Update patches.suse/spmi-mediatek-Fix-UAF-on-device-remove.patch
+  (git-fixes CVE-2023-52584 bsc#1221079).
+- Update
+  patches.suse/thermal-core-Fix-NULL-pointer-dereference-in-zone-re.patch
+  (git-fixes CVE-2023-52473 bsc#1220430).
+- Update patches.suse/uio-Fix-use-after-free-in-uio_open.patch
+  (git-fixes CVE-2023-52439 bsc#1220140).
+- Update
+  patches.suse/wifi-ath9k-Fix-potential-array-index-out-of-bounds-r.patch
+  (git-fixes CVE-2023-52594 bsc#1221045).
+- Update
+  patches.suse/wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_proc.patch
+  (git-fixes CVE-2023-52525 bsc#1220840).
+- Update
+  patches.suse/wifi-rt2x00-restart-beacon-queue-when-hardware-reset.patch
+  (git-fixes CVE-2023-52595 bsc#1221046).
+- Update
+  patches.suse/wifi-rtw88-sdio-Honor-the-host-max_req_size-in-the-R.patch
+  (git-fixes CVE-2023-52611 bsc#1221611).
+- Update
+  patches.suse/wifi-wfx-fix-possible-NULL-pointer-dereference-in-wf.patch
+  (git-fixes CVE-2023-52593 bsc#1221042).
+- Update
+  patches.suse/x86-alternatives-disable-kasan-in-apply_alternatives.patch
+  (git-fixes CVE-2023-52504 bsc#1221553).
+- Update
+  patches.suse/x86-srso-fix-sbpb-enablement-for-spec_rstack_overflow-off.patch
+  (git-fixes CVE-2023-52575 bsc#1220871).
+- commit 6296dca
+
+- Refresh patches.suse/kdump-add-crashkernel-cma-suffix.patch.
+  (fix unused variable warning)
+- commit c953180
+
+- Move upstreamed patches into sorted section
+- commit 70b2e3d
+
+- Move upstreamed uio patches into sorted section
+- commit bd64fed
+
+- Move out-of-tree kexec patches into the right section
+- commit 06266e2
+
+- kdump: wait for DMA to time out when using CMA (jsc#PED-7249).
+- Refresh
+  patches.suse/add-product-identifying-information-to-vmcoreinfo.patch.
+- kdump: describe crashkernel ,cma in Documentaion (jsc#PED-7249).
+- kdump, x86: implement crashkernel cma reservation
+  (jsc#PED-7249).
+- commit 99814c5
+
+- kdump: implement reserve_crashkernel_cma (jsc#PED-7249).
+- Refresh
+  patches.suse/add-product-identifying-information-to-vmcoreinfo.patch.
+- commit fc59052
+
+- kdump: add crashkernel= ,cma suffix (jsc#PED-7249).
+- commit 41f0c07
+
+- kdump: defer the insertion of crashkernel resources
+  (jsc#PED-7249).
+- crash_core: fix the check for whether crashkernel is from high
+  memory (jsc#PED-7249).
+- crash_core.c: remove unneeded functions (jsc#PED-7249).
+- riscv: kdump: use generic interface to simplify crashkernel
+  reservation (jsc#PED-7249).
+- commit 8326859
+
+- arm64: kdump: use generic interface to simplify crashkernel
+  reservation (jsc#PED-7249).
+- Update config files.
+- commit 7ae6d47
+
+- x86: kdump: use generic interface to simplify crashkernel
+  reservation code (jsc#PED-7249).
+- Update config files.
+- commit c141552
+
+- crash_core: move crashk_*res definition into crash_core.c
+  (jsc#PED-7249).
+- commit 0e37e20
+
+- crash_core: add generic function to do reservation
+  (jsc#PED-7249).
+- Refresh
+  patches.suse/add-product-identifying-information-to-vmcoreinfo.patch.
+- commit a0ccf1b
+
+- crash_core: change parse_crashkernel() to support
+  crashkernel=,high|low parsing (jsc#PED-7249).
+- crash_core: change the prototype of function parse_crashkernel()
+  (jsc#PED-7249).
+- crash_core.c: remove unnecessary parameter of function
+  (jsc#PED-7249).
+- riscv: kdump: Implement crashkernel=X,[high,low] (jsc#PED-7249).
+- arm64: kdump: simplify the reservation behaviour of
+  crashkernel=,high (jsc#PED-7249).
+- commit 9191c97
+
+- soc: fsl: dpio: fix kcalloc() argument order (git-fixes).
+- cpufreq: dt: always allocate zeroed cpumask (git-fixes).
+- thermal/drivers/mediatek: Fix control buffer enablement on
+  MT7896 (git-fixes).
+- thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in
+  an error handling path (git-fixes).
+- commit 353a58d
+
+- Refresh
+  patches.suse/net-sched-Add-module-alias-for-sch_fq_pie.patch.
+- commit 4c6eb4e
+
+- RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store() (git-fixes)
+- commit 4586f58
+
+- RDMA/device: Fix a race between mad_client and cm_client init (git-fixes)
+- commit 0f4890f
+
+- RDMA/hns: Fix mis-modifying default congestion control algorithm (git-fixes)
+- commit a44fff2
+
+- RDMA/srpt: Do not register event handler until srpt device is fully setup (git-fixes)
+- commit faac2cb
+
+- RDMA/irdma: Remove duplicate assignment (git-fixes)
+- commit 5dbeef5
+
+- drm/amd/display: Fix && vs || typos (git-fixes).
+- commit 1a09c42
+
+- memory: tegra: Add BPMP and ICC info for DLA clients (bsc#1221330)
+- commit 7fbb1f9
+
+- memory: tegra: Correct DLA client names (bsc#1221330)
+- commit 09ff68e
+
+- Refresh patches.suse/Revert-drm-amd-pm-resolve-reboot-exception-for-si-ol.patch (git-fixes)
+  Alt-commit
+- commit c5c0b23
+
+- Refresh patches.suse/drm-amdgpu-pm-Fix-the-power1_min_cap-value.patch (git-fixes)
+  Alt-commit
+- commit b9c791c
+
+- Refresh patches.suse/drm-amd-display-Prevent-potential-buffer-overflow-in.patch (git-fixes)
+  Alt-commit
+- commit efd4bf7
+
+- Refresh patches.suse/drm-amdgpu-Fix-the-runtime-resume-failure-issue.patch (git-fixes)
+  Alt-commit
+- commit 6ffd9c2
+
+- Refresh patches.suse/drm-amd-display-fix-null-pointer-dereference-on-edid.patch (git-fixes)
+  Alt-commit
+- commit 3adc50a
+
+- Refresh patches.suse/drm-amd-display-Fix-memory-leak-in-dm_sw_fini.patch (git-fixes)
+  Alt-commit
+- commit 1e0a8c4
+
+- Refresh patches.suse/drm-amd-display-Fix-potential-null-pointer-dereferen.patch (git-fixes)
+  Alt-commit
+- commit e173f6f
+
+- Refresh patches.suse/drm-amdgpu-display-Initialize-gamma-correction-mode-.patch (git-fixes)
+  Alt-commit
+- commit 36a7865
+
+- Refresh patches.suse/drm-amd-display-Fix-possible-NULL-dereference-on-dev.patch (git-fixes)
+  Alt-commit
+- commit c463983
+
+- Refresh patches.suse/Revert-drm-amd-display-increased-min_dcfclk_mhz-and-.patch (git-fixes)
+  Alt-commit
+- commit 04c948e
+
+- Refresh patches.suse/Revert-drm-amd-flush-any-delayed-gfxoff-on-suspend-e.patch (git-fixes)
+  Alt-commit
+- commit 30b9cb6
+
+- Refresh patches.suse/drm-amd-Stop-evicting-resources-on-APUs-in-suspend.patch (git-fixes)
+  Alt-commit
+- commit 84c8d2c
+
+- Refresh patches.suse/drm-amd-display-Fix-possible-buffer-overflow-in-find.patch (git-fixes)
+  Alt-commit
+- commit b40ba61
+
+- Refresh patches.suse/drm-amd-display-Fix-possible-use-of-uninitialized-ma.patch (git-fixes)
+  Alt-commit
+- commit c3f6221
+
+- Refresh patches.suse/drm-amd-display-Initialize-wait_time_microsec-variab.patch (git-fixes)
+  Alt-commit
+- commit e48d42e
+
+- Refresh patches.suse/drm-amdkfd-Fix-L2-cache-size-reporting-in-GFX9.4.3.patch (git-fixes)
+  Alt-commit
+- commit 2eea2ce
+
+- Refresh patches.suse/drm-amd-display-Implement-bounds-check-for-stream-en.patch (git-fixes)
+  Alt-commit
+- commit d676a78
+
+- Refresh patches.suse/drm-amd-display-Add-NULL-test-for-timing-generator-i.patch (git-fixes)
+  Alt-commit
+- commit c8a379e
+
+- Refresh patches.suse/drm-amd-display-Fix-panel_cntl-could-be-null-in-dcn2.patch (git-fixes)
+  Alt-commit
+- commit 31dbfa0
+
+- Refresh patches.suse/drm-amdkfd-reserve-the-BO-before-validating-it.patch (git-fixes)
+  Alt-commit
+- commit 1aea4a9
+
+- Refresh patches.suse/drm-amd-display-Fix-buffer-overflow-in-get_host_rout.patch (git-fixes)
+  Alt-commit
+- commit 8ed7043
+
+- Refresh patches.suse/drm-amd-display-Add-NULL-check-for-kzalloc-in-amdgpu.patch (git-fixes)
+  Alt-commit
+- commit 06e5854
+
+- Refresh patches.suse/drm-amdgpu-Fix-missing-error-code-in-gmc_v6-7-8-9_0_.patch (git-fixes)
+  Alt-commit
+- commit 933ecff
+
+- Refresh patches.suse/drm-amd-Don-t-init-MEC2-firmware-when-it-fails-to-lo.patch (git-fixes)
+  Alt-commit
+- commit 3901f67
+
+- Refresh patches.suse/Revert-drm-amd-pm-fix-the-high-voltage-and-temperatu.patch (git-fixes)
+  Alt-commit
+- commit c410dd8
+
+- Refresh patches.suse/drm-amdgpu-revert-Adjust-removal-control-flow-for-sm.patch (git-fixes)
+  Alt-commit
+- commit e2f8984
+
+- Refresh patches.suse/drm-amd-display-Fix-a-switch-statement-in-populate_d.patch (git-fixes)
+  Alt-commit
+- commit fd4226b
+
+- Refresh patches.suse/drm-bridge-sii902x-Fix-audio-codec-unregistration.patch (git-fixes)
+  Alt-commit
+- commit eb02c03
+
+- Refresh patches.suse/drm-bridge-sii902x-Fix-probing-race-issue.patch (git-fixes)
+  Alt-commit
+- commit c6467b6
+
+- Refresh patches.suse/drm-i915-perf-Update-handling-of-MMIO-triggered-repo.patch (git-fixes)
+  Alt-commit
+- commit c6bd3a5
+
+- Refresh patches.suse/drm-i915-dp-Fix-passing-the-correct-DPCD_REV-for-drm.patch (git-fixes)
+  Alt-commit
+- commit 7fcb6ca
+
+- Refresh patches.suse/drm-amd-display-Fix-sending-VSC-colorimetry-packets-.patch (git-fixes)
+  Alt-commit
+- commit 2a5c3b0
+
+- Refresh patches.suse/drm-amdgpu-re-create-idle-bo-s-PTE-during-VM-state-m.patch (git-fixes)
+  Alt-commit
+- commit cce0614
+
+- Refresh patches.suse/drm-amd-display-Restore-guard-against-default-backli.patch (git-fixes)
+  Alt-commit
+- commit f6c0702
+
+- Refresh patches.suse/1958-drm-amd-display-fix-hw-rotated-modes-when-PSR-SU-is-.patch (git-fixes)
+  Alt-commit
+- commit e213d83
+
+- Refresh patches.suse/1936-drm-amdgpu-Restrict-extended-wait-to-PSP-v13.0.6.patch (git-fixes)
+  Alt-commit
+- commit ef2737c
+
+- Refresh patches.suse/drm-amd-display-Increase-frame-warning-limit-with-KA.patch (git-fixes)
+  Alt-commit
+- commit ad4332b
+
+- Refresh patches.suse/drm-amdgpu-disable-MCBP-by-default.patch (git-fixes)
+  Alt-commit
+- commit 2c67e58
+
+- Refresh patches.suse/drm-amd-pm-fix-a-memleak-in-aldebaran_tables_init.patch (git-fixes)
+  Alt-commit
+- commit c8de278
+
+- Move upstreamed patches into sorted section
+- commit 8b684d5
+
+- Move out-of-tree patches into the right sections
+- commit 2aa9e6c
+
+- Move upstreamed patches into sorted section
+- commit cdb27f5
+
+- drm/i915: Add missing ; to __assign_str() macros in tracepoint
+  code (git-fixes).
+- ALSA: hda/realtek: add in quirk for Acer Swift Go 16 - SFG16-71
+  (git-fixes).
+- Revert "ALSA: usb-audio: Name feature ctl using output if
+  input is PCM" (git-fixes).
+- ALSA: hda/realtek: Add quirk for Lenovo Yoga 9 14IMH9
+  (git-fixes).
+- commit fbc9b5f
+
+- fs: don't assume arguments are non-NULL (bsc#1221044
+  CVE-2023-52591).
+- commit ec8f09d
+
+- fs: Restrict lock_two_nondirectories() to non-directory inodes
+  (bsc#1221044 CVE-2023-52591).
+- commit b103012
+
+- fs: ocfs2: check status values (bsc#1221044 CVE-2023-52591).
+- commit a281985
+
+- rename(): avoid a deadlock in the case of parents having no
+  common ancestor (bsc#1221044 CVE-2023-52591).
+- commit ea7137b
+
+- kill lock_two_inodes() (bsc#1221044 CVE-2023-52591).
+- commit 005222f
+
+- rename(): fix the locking of subdirectories (bsc#1221044
+  CVE-2023-52591).
+- commit a6484cb
+
+- f2fs: Avoid reading renamed directory if parent does not change
+  (bsc#1221044 CVE-2023-52591).
+- commit 3fb2dd8
+
+- ext4: don't access the source subdirectory content on
+  same-directory rename (bsc#1221044 CVE-2023-52591).
+- commit ba7d1aa
+
+- ext2: Avoid reading renamed directory if parent does not change
+  (bsc#1221044 CVE-2023-52591).
+- commit 65af3c2
+
+- udf_rename(): only access the child content on cross-directory
+  rename (bsc#1221044 CVE-2023-52591).
+- commit a29fcb6
+
+- ocfs2: Avoid touching renamed directory if parent does not
+  change (bsc#1221044 CVE-2023-52591).
+- Update references in
+  patches.suse/reiserfs-Avoid-touching-renamed-directory-if-parent-.patch
+  (git-fixes bsc#1221044 CVE-2023-52591).
+- commit 0477c34
+
+- dcssblk: handle alloc_dax() -EOPNOTSUPP failure (git-fixes
+  bsc#1221626).
+- commit eaf806c
+
+- s390/cache: prevent rebuild of shared_cpu_list (git-fixes
+  bsc#1221625).
+- commit d9bc980
+
+- s390/pai: fix attr_event_free upper limit for pai device drivers
+  (git-fixes bsc#1221623).
+- commit eac0e1f
+
+- KVM: s390: only deliver the set service event bits (git-fixes
+  bsc#1221620).
+- commit 55838c8
+
+- dm: treat alloc_dax() -EOPNOTSUPP failure as non-fatal
+  (git-fixes).
+- dm: call the resume method on internal suspend (git-fixes).
+- dm raid: fix false positive for requeue needed during reshape
+  (git-fixes).
+- dm ioctl: update DM_DRIVER_EMAIL to new dm-devel mailing list
+  (git-fixes).
+- dm-raid: fix lockdep waring in "pers->hot_add_disk"
+  (jsc#PED-7542).
+- md/raid5: fix atomicity violation in raid5_cache_count
+  (bsc#1219169, CVE-2024-23307).
+- dm: dm-zoned: guard blkdev_zone_mgmt with noio scope
+  (jsc#PED-7542).
+- dm-integrity, dm-verity: reduce stack usage for recheck
+  (jsc#PED-7542).
+- dm-crypt, dm-integrity, dm-verity: bump target version
+  (jsc#PED-7542).
+- dm-verity, dm-crypt: align "struct bvec_iter" correctly
+  (jsc#PED-7542).
+- dm-crypt: recheck the integrity tag after a failure (git-fixes).
+- dm-crypt: don't modify the data when using authenticated
+  encryption (git-fixes).
+- dm-verity: recheck the hash after a failure (git-fixes).
+- dm-integrity: recheck the integrity tag after a failure
+  (git-fixes).
+- md: Fix missing release of 'active_io' for flush (jsc#PED-7542).
+- dm-crypt, dm-verity: disable tasklets (git-fixes).
+- dm writecache: allow allocations larger than 2GiB
+  (jsc#PED-7542).
+- dm stats: limit the number of entries (jsc#PED-7542).
+- md/raid1: Use blk_opf_t for read and write operations
+  (git-fixes).
+- md: Fix md_seq_ops() regressions (git-fixes).
+- md: Whenassemble the array, consult the superblock of the
+  freshest device (git-fixes).
+- md/raid1: remove unnecessary null checking (jsc#PED-7542).
+- md: synchronize flush io with array reconfiguration (git-fixes).
+- commit 7042e1b
+
+- md/raid5: remove rcu protection to access rdev from conf
+  (jsc#PED-7542).
+- md/raid1: remove rcu protection to access rdev from conf
+  (jsc#PED-7542).
+- md/raid10: remove rcu protection to access rdev from conf
+  (jsc#PED-7542).
+- md: remove flag RemoveSynchronized (jsc#PED-7542).
+- dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM
+  (git-fixes).
+- dm-integrity: don't modify bio's immutable bio_vec in
+  integrity_metadata() (git-fixes).
+- commit 1587009
+
+- raid1: fix use-after-free for original bio in
+  raid1_write_request() (bsc#1221097).
+- commit 296098e
+
+- Update
+  patches.suse/s390-ptrace-handle-setting-of-fpc-register-correctly.patch
+  (git-fixes bsc#1219812 CVE-2023-52598 bsc#1221060).
+- commit 0d496e7
+
+- Update
+  patches.suse/s390-vfio-ap-always-filter-entire-AP-matrix.patch
+  (git-fixes bsc#1218988 CVE-2024-26620 bsc#1221298).
+- commit b046ad1
+
+- selftests/bpf: Add testcases for tailcall infinite loop fixing
+  (git-fixes).
+- bpf, x64: Fix tailcall infinite loop (git-fixes).
+- selftests/bpf: Correct map_fd to data_fd in tailcalls
+  (git-fixes).
+- commit 1302854
+
+- btrfs: preallocate temporary extent buffer for inode logging when needed (bsc#1217362).
+- commit c7ccbf0
+
+- i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling
+  (git-fixes).
+- watchdog: stm32_iwdg: initialize default timeout (git-fixes).
+- watchdog: starfive: Check pm_runtime_enabled() before
+  decrementing usage counter (git-fixes).
+- commit 357d510
+
+- of: make for_each_property_of_node() available to to !OF
+  (git-fixes).
+- mtd: rawnand: Constrain even more when continuous reads are
+  enabled (git-fixes).
+- mtd: rawnand: Fix and simplify again the continuous read
+  derivations (git-fixes).
+- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
+  (git-fixes).
+- mtd: rawnand: meson: fix scrambling mode value in command macro
+  (git-fixes).
+- mtd: maps: physmap-core: fix flash size larger than 32-bit
+  (git-fixes).
+- media: usbtv: Remove useless locks in usbtv_video_free()
+  (git-fixes).
+- media: ttpci: fix two memleaks in budget_av_attach (git-fixes).
+- media: go7007: fix a memleak in go7007_load_encoder (git-fixes).
+- media: dvb-frontends: avoid stack overflow warnings with clang
+  (git-fixes).
+- media: pvrusb2: fix uaf in pvr2_context_set_notify (git-fixes).
+- media: i2c: imx290: Fix IMX920 typo (git-fixes).
+- media: pvrusb2: fix pvr2_stream_callback casts (git-fixes).
+- media: pvrusb2: remove redundant NULL check (git-fixes).
+- media: go7007: add check of return value of go7007_read_addr()
+  (git-fixes).
+- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
+  (git-fixes).
+- media: sun8i-di: Fix chroma difference threshold (git-fixes).
+- media: sun8i-di: Fix power on/off sequences (git-fixes).
+- media: sun8i-di: Fix coefficient writes (git-fixes).
+- media: cedrus: h265: Fix configuring bitstream size (git-fixes).
+- media: edia: dvbdev: fix a use-after-free (git-fixes).
+- media: nxp: imx8-isi: Check whether crossbar pad is non-NULL
+  before access (git-fixes).
+- media: mc: Add local pad to pipeline regardless of the link
+  state (git-fixes).
+- net: lan78xx: fix runtime PM count underflow on link stop
+  (git-fixes).
+- commit 9b93c7d
+
+- clk: renesas: r8a779g0: Correct PFC/GPIO parent clocks
+  (git-fixes).
+- commit 0b0c529
+
+- crypto: jitter - fix CRYPTO_JITTERENTROPY help text (git-fixes).
+- crypto: qat - remove double initialization of value (git-fixes).
+- crypto: qat - avoid division by zero (git-fixes).
+- crypto: qat - removed unused macro in adf_cnv_dbgfs.c
+  (git-fixes).
+- crypto: qat - remove unused macros in qat_comp_alg.c
+  (git-fixes).
+- crypto: ccp - Avoid discarding errors in
+  psp_send_platform_access_msg() (git-fixes).
+- crypto: arm/sha - fix function cast warnings (git-fixes).
+- crypto: qat - resolve race condition during AER recovery
+  (git-fixes).
+- crypto: qat - change SLAs cleanup flow at shutdown (git-fixes).
+- crypto: xilinx - call finalize with bh disabled (git-fixes).
+- clk: imx: imx8mp: Fix SAI_MCLK_SEL definition (git-fixes).
+- clk: samsung: exynos850: Propagate SPI IPCLK rate change
+  (git-fixes).
+- clk: Fix clk_core_get NULL dereference (git-fixes).
+- clk: qcom: mmcc-msm8974: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: mmcc-apq8084: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: gcc-ipq9574: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: gcc-ipq8074: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: gcc-ipq6018: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
+  (git-fixes).
+- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
+  (git-fixes).
+- clk: meson: Add missing clocks to axg_clk_regmaps (git-fixes).
+- clk: keystone: sci-clk: Adding support for non contiguous clocks
+  (git-fixes).
+- clk: mediatek: mt7981-topckgen: flag SGM_REG_SEL as critical
+  (git-fixes).
+- clk: mediatek: mt8183: Correct parent of CLK_INFRA_SSPM_32K_SELF
+  (git-fixes).
+- clk: mediatek: mt8135: Fix an error handling path in
+  clk_mt8135_apmixed_probe() (git-fixes).
+- clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
+  (git-fixes).
+- clk: hisilicon: hi3519: Release the correct number of gates
+  in hi3519_clk_unregister() (git-fixes).
+- clk: zynq: Prevent null pointer dereference caused by kmalloc
+  failure (git-fixes).
+- clk: renesas: r8a779f0: Correct PFC/GPIO parent clock
+  (git-fixes).
+- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
+  (git-fixes).
+- media: v4l2-tpg: fix some memleaks in tpg_alloc (git-fixes).
+- media: em28xx: annotate unchecked call to
+  media_device_register() (git-fixes).
+- media: videobuf2: Fix doc comment (git-fixes).
+- media: xc4000: Fix atomicity violation in xc4000_get_frequency
+  (git-fixes).
+- media: staging: ipu3-imgu: Set fields before
+  media_entity_pads_init() (git-fixes).
+- commit df2e5ae
+
+- xfs: shrink failure needs to hold AGI buffer (git-fixes).
+- commit e670f77
+
+- xfs: fix imprecise logic in xchk_btree_check_block_owner
+  (git-fixes).
+- commit 24972c0
+
+- xfs: fix SEEK_HOLE/DATA for regions with active COW extents
+  (git-fixes).
+- commit 4197ae0
+
+- xfs: ensure submit buffers on LSN boundaries in error handlers
+  (git-fixes).
+- commit c23fb7a
+
+- afs: Fix endless loop in directory parsing (git-fixes).
+- commit d1332b9
+
+- afs: Increase buffer size in afs_update_volume_status()
+  (git-fixes).
+- commit a954f43
+
+- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
+  (git-fixes).
+- commit 6c3b10c
+
+- nilfs2: convert nilfs_page_mkwrite() to use a folio (git-fixes).
+- commit 29291de
+
+- erofs: fix handling kern_mount() failure (git-fixes).
+- commit ea16f48
+
+- erofs: Don't use certain unnecessary folio_*() functions
+  (git-fixes).
+- commit 021c910
+
+- erofs: fix refcount on the metabuf used for inode lookup
+  (git-fixes).
+- commit 0bf0150
+
+- erofs: clean up zmap.c (git-fixes).
+- commit 3625a10
+
+- erofs: fix up compacted indexes for block size < 4096
+  (git-fixes).
+- commit 458bf09
+
+- erofs: fix memory leak on short-lived bounced pages (git-fixes).
+- commit 5efbfc4
+
+- iommu/amd: Fix failure return from snp_lookup_rmpentry()
+  (git-fixes).
+- commit 536001e
+
+- erofs: allow empty device tags in flatdev mode (git-fixes).
+- commit c8ff154
+
+- iommu/vt-d: Don't issue ATS Invalidation request when device
+  is disconnected (git-fixes).
+- commit 5d166d5
+
+- net/sched: Add module alias for sch_fq_pie (bsc#1210335).
+- commit 211b413
+
+- net/sched: Remove alias of sch_clsact (bsc#1210335).
+- net/sched: Load modules via their alias (bsc#1210335).
+- net/sched: Add module aliases for cls_,sch_,act_ modules
+  (bsc#1210335).
+- net/sched: Add helper macros with module names (bsc#1210335).
+- commit 2046cfc
+
+- Refresh
+  patches.suse/perf-pmu-events-powerpc-Update-json-mapfile-with-Power11-PVR.patch.
+- commit 42a5ace
+
+- ionic: restore netdev feature bits after reset (git-fixes).
+- commit 898af71
+
+- ionic: check cmd_regs before copying in or out (git-fixes).
+- commit f1dc989
+
+- ionic: check before releasing pci regions (git-fixes).
+- commit 2a1c23c
+
+- net: veth: clear GRO when clearing XDP even when down (git-fixes).
+- commit 553eb02
+
+- tun: Fix xdp_rxq_info's queue_index when detaching (git-fixes).
+- commit b7d1001
+
+- net: dpaa: fman_memac: accept phy-interface-type = "10gbase-r" in the device tree (git-fixes).
+- commit 675b36c
+
+- ice: Fix ASSERT_RTNL() warning during certain scenarios (git-fixes).
+- commit 8b9399e
+
+- ice: fix pin phase adjust updates on PF reset (git-fixes).
+- commit ef21fc4
+
+- ice: fix dpll periodic work data updates on PF reset (git-fixes).
+- commit dc97d19
+
+- ice: fix dpll and dpll_pin data access on PF reset (git-fixes).
+- commit f610e32
+
+- ice: fix dpll input pin phase_adjust value updates (git-fixes).
+- commit cfb9c02
+
+- ice: fix connection state of DPLL and out pin (git-fixes).
+- commit 7176021
+
+- net: sparx5: Add spinlock for frame transmission from CPU (git-fixes).
+- commit 2486a16
+
+- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (git-fixes).
+- commit 86d216d
+
+- net: ipa: don't overrun IPA suspend interrupt registers (git-fixes).
+- commit 7f00d73
+
+- ethernet: cpts: fix function pointer cast warnings (git-fixes).
+- commit d241bc1
+
+- net: ethernet: ti: cpsw_new: enable mac_managed_pm to fix mdio (git-fixes).
+- commit 229f845
+
+- ppp_async: limit MRU to 64K (git-fixes).
+- commit 463471e
+
+- nfp: enable NETDEV_XDP_ACT_REDIRECT feature flag (git-fixes).
+- commit 36e79a9
+
+- ALSA: hda/tas2781: remove unnecessary runtime_pm calls
+  (git-fixes).
+- ALSA: hda/realtek - ALC236 fix volume mute & mic mute LED on
+  some HP models (git-fixes).
+- ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
+  (git-fixes).
+- ALSA: hda: Reuse for_each_pcm_streams() (git-fixes).
+- ALSA: usb-audio: Name feature ctl using output if input is PCM
+  (git-fixes).
+- commit fdd39ea
+
+- ALSA: hda/realtek: Add quirks for various HP ENVY models
+  (git-fixes).
+- commit 62207c4
+
+- ALSA: hda/realtek: Add "Intel Reference board" SSID in the
+  ALC256 (git-fixes).
+- ALSA: hda/realtek: Remove two HP Laptops using CS35L41
+  (git-fixes).
+- ALSA: hda: cs35l41: Support HP models without _DSD using dual
+  Speaker ID (git-fixes).
+- ALSA: hda: cs35l41: Support additional HP Envy Models
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops using CS35L56
+  (git-fixes).
+- ALSA: hda: realtek: Re-work CS35L41 fixups to re-use for other
+  amps (git-fixes).
+- commit c4f7d5a
+
+- Drivers: hv: vmbus: Update indentation in create_gpadl_header()
+  (git-fixes).
+- Drivers: hv: vmbus: Remove duplication and cleanup code in
+  create_gpadl_header() (git-fixes).
+- Drivers: hv: vmbus: Calculate ring buffer size for more
+  efficient use of memory (git-fixes).
+- hv_utils: Allow implicit ICTIMESYNCFLAG_SYNC (git-fixes).
+- minmax: relax check to allow comparison between unsigned
+  arguments (git-fixes).
+- minmax: allow comparisons of 'int' against 'unsigned char/short'
+  (git-fixes).
+- minmax: fix indentation of __cmp_once() and __clamp_once()
+  (git-fixes).
+- minmax: allow min()/max()/clamp() if the arguments have the same
+  (git-fixes).
+- minmax: add umin(a, b) and umax(a, b) (git-fixes).
+- minmax: fix header inclusions (git-fixes).
+- minmax: deduplicate __unconst_integer_typeof() (git-fixes).
+- minmax: Introduce {min,max}_array() (git-fixes).
+- commit 7632d3b
+
+- iommu/amd: Mark interrupt as managed (git-fixes).
+- commit 5ef4be8
+
+- arm64: dts: imx8mm-kontron: Refactor devicetree for OSM-S module and (git-fixes)
+- commit 0049d8d
+
+- Update ppc64le kabi files.
+- commit 5c9702d
+
+- arm64: dts: sprd: Change UMS512 idle-state nodename to match bindings (git-fixes)
+- commit 58013ba
+
+- arm64: dts: rockchip: drop rockchip,trcm-sync-tx-only from rk3588 i2s (git-fixes)
+- commit b287ab6
+
+- arm64: dts: rockchip: fix reset-names for rk356x i2s2 controller (git-fixes)
+- commit bfdd563
+
+- arm64: dts: rockchip: add missing interrupt-names for rk356x vdpu (git-fixes)
+- commit b9c1de2
+
+- arm64: dts: imx8mp: Set SPI NOR to max 40 MHz on Data Modul i.MX8M (git-fixes)
+- commit 5a00002
+
+- arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS (git-fixes)
+- commit a9642be
+
+- arm64: dts: imx8mm-kontron: Fix OSM-S devicetrees to match latest (git-fixes)
+- commit d17e1b2
+
+- arm64: dts: imx8mm-kontron: Fix interrupt for RTC on OSM-S i.MX8MM (git-fixes)
+- commit 63e3e05
+
+- arm64: dts: imx8mm-kontron: Disable pull resistors for SD card (git-fixes)
+- commit 645b123
+
+- arm64: dts: imx8mm-kontron: Disable pull resistors for SD card (git-fixes)
+- commit 63490f6
+
+- arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals (git-fixes)
+- commit 980bc4a
+
+- arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals (git-fixes)
+- commit 3a04f44
+
+- arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL (git-fixes)
+- commit d23e2ff
+
+- arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on OSM-S (git-fixes)
+- commit e658d8c
+
+- arm64: dts: allwinner: h6: Add RX DMA channel for SPDIF (git-fixes)
+- commit 8098072
+
+- arm64: tegra: Fix Tegra234 MGBE power-domains (git-fixes)
+- commit 58db13b
+
+- arm64: dts: imx8mp: Fix LDB clocks property (git-fixes)
+- commit 8815925
+
+- arm64: dts: rockchip: set num-cs property for spi on px30 (git-fixes)
+- commit ac8cd44
+
+- arm64: dts: imx8mp: Disable UART4 by default on Data Modul i.MX8M (git-fixes)
+- commit d39bc86
+
+- arm64: dts: sprd: Add clock reference for pll2 on UMS512 (git-fixes)
+- commit 8ef3da3
+
+- arm64: zynqmp: Fix clock node name in kv260 cards (git-fixes)
+- commit 49dfade
+
+- arm64: zynqmp: Move fixed clock to / for kv260 (git-fixes)
+- commit 8a08b0f
+
+- Make NVIDIA Grace-Hopper TPM related drivers build-ins (bsc#1221156)
+- commit 32745a0
+
+- powerpc/64s: Fix get_hugepd_cache_index() build failure
+  (bsc#1215199).
+- powerpc: Remove cpu-as-y completely (bsc#1215199).
+- powerpc/64s: Use .machine power4 around dcbt (bsc#1215199).
+- powerpc/64s: Move dcbt/dcbtst sequence into a macro
+  (bsc#1215199).
+- powerpc/pseries: Fix potential memleak in papr_get_attr()
+  (bsc#1215199).
+- powerpc/kprobes: Handle error returned by set_memory_rox()
+  (bsc#1215199).
+- powerpc: Implement set_memory_rox() (bsc#1215199).
+- powerpc: Use user_mode() macro when possible (bsc#1215199).
+- powerpc/rtas: use correct function name for resetting TCE tables
+  (bsc#1215199).
+- commit 35dba53
+
+- Update patches.suse/arm64-sme-Always-exit-sme_alloc-early-with-existing-.patch (git-fixes, CVE-2024-26618)
+  Add reference to CVE-2024-26618.
+- commit 50882e3
+
+- powerpc/pseries/iommu: IOMMU table is not initialized for
+  kdump over SR-IOV (bsc#1220492 ltc#205270).
+- commit 2026089
+
+- group-source-files.pl: Quote filenames (boo#1221077).
+  The kernel source now contains a file with a space in the name.
+  Add quotes in group-source-files.pl to avoid splitting the filename.
+  Also use -print0 / -0 when updating timestamps.
+- commit a005e42
+
+- power: reset: pwr-mlxbf: support graceful reboot instead of emergency (jsc#PED-8032)
+- commit 7221104
+
+- platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when Tx (jsc#PED-8032)
+- commit 0fc3eb8
+
+- platform/mellanox: mlxbf-tmfifo: Remove unnecessary bool conversion (jsc#PED-8032)
+- commit 53a0f30
+
+- platform/mellanox: mlxbf-tmfifo: Fix a warning message (jsc#PED-8032)
+- commit 8a9b17e
+
+- platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace (jsc#PED-8032)
+- commit 2307ef6
+
+- platform/mellanox: Check devm_hwmon_device_register_with_groups() (jsc#PED-8032)
+- commit e1cd31d
+
+- platform/mellanox: Add null pointer checks for devm_kasprintf() (jsc#PED-8032)
+- commit bda53cc
+
+- platform/mellanox: mlxbf-pmc: Add support for BlueField-3 (jsc#PED-8032)
+- commit bbdb7cd
+
+- mlxbf-bootctl: correctly identify secure boot with development keys (jsc#PED-8032)
+- commit 7f706aa
+
+- platform/mellanox: mlxbf-bootctl: Convert to platform remove callback (jsc#PED-8032)
+- commit 55906a9
+
+- mlxbf-bootctl: Support sysfs entries for MFG fields (jsc#PED-8032)
+- commit ed7de29
+
+- mlxbf-bootctl: Support setting the ARM boot state to "OS up" (jsc#PED-8032)
+- commit c648b6e
+
+- mlxbf-bootctl: Support the large icmc write/read (jsc#PED-8032)
+- commit 3f27c32
+
+- mlxbf-bootctl: Add sysfs file for BlueField boot log (jsc#PED-8032)
+- commit 2f2dfde
+
+- mmc: sdhci-of-dwcmshc: Add runtime PM operations (jsc#PED-8032)
+- commit 8cc192b
+
+- mmc: sdhci-of-dwcmshc: Add error handling in dwcmshc_resume (jsc#PED-8032)
+- commit 9fc0dca
+
+- mmc: sdhci-of-dwcmshc: Convert to platform remove callback returning (jsc#PED-8032)
+- commit 1b18d2f
+
+- i2c: mlxbf: Use devm_platform_get_and_ioremap_resource() (jsc#PED-8032)
+- commit b7e1af1
+
+- i2c: mlxbf: Use dev_err_probe in probe function (jsc#PED-8032)
+- commit c1c0d6f
+
+- supported.conf: Add few drivers for BF3 (jsc#PED-8032)
+  Add gpio-mlxbf3, sdhci-of-dwcmshc, pinctrl-mlxbf3 and
+  pwr-mlxbf drivers in kernel-default.
+- commit dd06563
+
+- gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (jsc#PED-8032)
+- commit 6e4d90e
+
+- gpio: mlxbf3: use capital "OR" for multiple licenses in SPDX (jsc#PED-8032)
+- commit 62fd912
+
+- gpio: mlxbf3: Support add_pin_ranges() (jsc#PED-8032)
+- commit f0d8a10
+
+- config/arm64: Enable BF3 GPIO driver (jsc#PED-8032)
+  Add config to enable Bluefield3 GPIO driver as module.
+- commit cae28d7
+
+- gpio: mlxbf3: Add gpio driver support (jsc#PED-8032)
+- commit 305cf5b
+
+- memory: tegra: add MC client for Tegra234 GPU (bsc#1221330)
+- commit f5d121c
+
+- memory: tegra: Add clients used by DRM in Tegra234 (bsc#1221330).
+- commit 67c31f5
+
+- supported.conf: Add supported entry for stusb160x (bsc#1221330)
+- commit d3bd091
+
+- mkspec-dtb: add toplevel symlinks also on arm
+- commit ed29cae
+
+- rpm/mkspec-dtb: dtbs have moved to vendor sub-directories in 6.5
+  By commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories").
+  So switch to them.
-- commit 6484eda
+- commit 7aee36a
kernel-default
+- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic (bsc#1221491)
+- commit 24e3b19
+
+- phy: tegra: xusb: Add API to retrieve the port number of phy (bsc#1221491)
+- commit be854b3
+
+- Update
+  patches.suse/arm64-sme-Always-exit-sme_alloc-early-with-existing-.patch
+  (git-fixes CVE-2024-26618 bsc#1221295).
+- Update
+  patches.suse/btrfs-don-t-abort-filesystem-when-attempting-to-snap.patch
+  (bsc#1221282 CVE-2024-26644 bsc#1222072).
+- Update
+  patches.suse/btrfs-scrub-avoid-use-after-free-when-chunk-length-i.patch
+  (bsc#1220943 CVE-2024-26616).
+- Update
+  patches.suse/drm-amd-display-Fix-late-derefrence-dsc-check-in-lin.patch
+  (git-fixes CVE-2024-26647 bsc#1222066).
+- Update
+  patches.suse/drm-amd-display-Fix-variable-deferencing-before-NULL.patch
+  (git-fixes CVE-2024-26648 bsc#1222067).
+- Update
+  patches.suse/drm-amdgpu-Fix-the-null-pointer-when-load-rlc-firmwa.patch
+  (git-fixes CVE-2024-26649 bsc#1222055).
+- Update
+  patches.suse/net-qualcomm-rmnet-fix-global-oob-in-rmnet_policy.patch
+  (git-fixes CVE-2024-26597 bsc#1220363).
+- Update patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch
+  (bsc#1218968 CVE-2024-26629 bsc#1221379).
+- Update
+  patches.suse/pwm-Fix-out-of-bounds-access-in-of_pwm_single_xlate.patch
+  (git-fixes CVE-2024-26599 bsc#1220365).
+- Update
+  patches.suse/scsi-core-Move-scsi_host_busy-out-of-host-lock-for-waking-up-EH-handler.patch
+  (git-fixes CVE-2024-26627 bsc#1221090).
+- Update
+  patches.suse/thermal-intel-hfi-Add-syscore-callbacks-for-system-w.patch
+  (git-fixes CVE-2024-26646 bsc#1222070).
+- Update
+  patches.suse/tracing-Ensure-visibility-when-inserting-an-element-into-tracing_map.patch
+  (git-fixes CVE-2024-26645 bsc#1222056).
+- Update patches.suse/wifi-iwlwifi-fix-a-memory-corruption.patch
+  (git-fixes CVE-2024-26610 bsc#1221299).
+- Update
+  patches.suse/x86-fpu-Stop-relying-on-userspace-for-info-to-fault-in-xsa.patch
+  (bsc#1220335 CVE-2024-26603).
+- commit 29c1925
+
+- Update
+  patches.suse/0002-ravb-Fix-use-after-free-issue-in-ravb_tx_timeout_wor.patch
+  (bsc#1212514 CVE-2023-35827 CVE-2023-52509 bsc#1220836).
+- Update
+  patches.suse/Bluetooth-hci_codec-Fix-leaking-content-of-local_cod.patch
+  (git-fixes CVE-2023-52518 bsc#1221056).
+- Update
+  patches.suse/EDAC-thunderx-Fix-possible-out-of-bounds-string-acce.patch
+  (git-fixes CVE-2023-52464 bsc#1220330).
+- Update
+  patches.suse/FS-JFS-UBSAN-array-index-out-of-bounds-in-dbAdjTree.patch
+  (git-fixes CVE-2023-52604 bsc#1221067).
+- Update
+  patches.suse/HID-intel-ish-hid-ipc-Disable-and-reenable-ACPI-GPE-.patch
+  (git-fixes CVE-2023-52519 bsc#1220920).
+- Update
+  patches.suse/HID-sony-Fix-a-potential-memory-leak-in-sony_probe.patch
+  (git-fixes CVE-2023-52529 bsc#1220929).
+- Update patches.suse/IB-ipoib-Fix-mcast-list-locking.patch
+  (jsc#PED-6864 CVE-2023-52587 bsc#1221082).
+- Update
+  patches.suse/PCI-switchtec-Fix-stdev_release-crash-after-surprise.patch
+  (git-fixes CVE-2023-52617 bsc#1221613).
+- Update
+  patches.suse/PM-devfreq-Fix-buffer-overflow-in-trans_stat_show.patch
+  (git-fixes CVE-2023-52614 bsc#1221617).
+- Update
+  patches.suse/PM-sleep-Fix-possible-deadlocks-in-core-system-wide-.patch
+  (git-fixes CVE-2023-52498 bsc#1221269).
+- Update
+  patches.suse/RDMA-siw-Fix-connection-failure-handling.patch
+  (git-fixes CVE-2023-52513 bsc#1221022).
+- Update
+  patches.suse/RDMA-srp-Do-not-call-scsi_done-from-srp_abort.patch
+  (git-fixes CVE-2023-52515 bsc#1221048).
+- Update
+  patches.suse/Revert-tty-n_gsm-fix-UAF-in-gsm_cleanup_mux.patch
+  (git-fixes CVE-2023-52564 bsc#1220938).
+- Update
+  patches.suse/SUNRPC-Fix-a-suspicious-RCU-usage-warning.patch
+  (git-fixes CVE-2023-52623 bsc#1222060).
+- Update
+  patches.suse/UBSAN-array-index-out-of-bounds-in-dtSplitRoot.patch
+  (git-fixes CVE-2023-52603 bsc#1221066).
+- Update
+  patches.suse/apparmor-avoid-crash-when-parsed-profile-name-is-emp.patch
+  (git-fixes CVE-2023-52443 bsc#1220240).
+- Update
+  patches.suse/arm64-dts-qcom-sdm845-db845c-Mark-cont-splash-memory.patch
+  (git-fixes CVE-2023-52561 bsc#1220935).
+- Update
+  patches.suse/bpf-Check-rcu_read_lock_trace_held-before-calling-bp.patch
+  (bsc#1220251 CVE-2023-52447 CVE-2023-52621 bsc#1222073).
+- Update
+  patches.suse/bus-mhi-host-Add-alignment-check-for-event-ring-read.patch
+  (git-fixes CVE-2023-52494 bsc#1221273).
+- Update
+  patches.suse/bus-mhi-host-Drop-chan-lock-before-queuing-buffers.patch
+  (git-fixes CVE-2023-52493 bsc#1221274).
+- Update
+  patches.suse/cifs-Fix-UAF-in-cifs_demultiplex_thread.patch
+  (bsc#1208995 CVE-2023-1192 CVE-2023-52572 bsc#1220946).
+- Update
+  patches.suse/class-fix-use-after-free-in-class_register.patch
+  (git-fixes CVE-2023-52468 bsc#1220431).
+- Update
+  patches.suse/crypto-scomp-fix-req-dst-buffer-overflow.patch
+  (git-fixes CVE-2023-52612 bsc#1221616).
+- Update patches.suse/dccp-fix-dccp_v4_err-dccp_v6_err-again.patch
+  (bsc#1220419 CVE-2023-52577 bsc#1220873).
+- Update
+  patches.suse/dmaengine-fix-NULL-pointer-in-channel-unregistration.patch
+  (git-fixes CVE-2023-52492 bsc#1221276).
+- Update
+  patches.suse/drivers-amd-pm-fix-a-use-after-free-in-kv_parse_powe.patch
+  (git-fixes CVE-2023-52469 bsc#1220411).
+- Update
+  patches.suse/drm-Don-t-unref-the-same-fb-many-times-by-mistake-du.patch
+  (git-fixes CVE-2023-52486 bsc#1221277).
+- Update
+  patches.suse/drm-amd-display-Fix-NULL-pointer-dereference-at-hibe.patch
+  (git-fixes CVE-2023-52460 bsc#1220319).
+- Update
+  patches.suse/drm-amdgpu-Fix-possible-NULL-dereference-in-amdgpu_r.patch
+  (git-fixes CVE-2023-52585 bsc#1221080).
+- Update
+  patches.suse/drm-meson-fix-memory-leak-on-hpd_notify-callback.patch
+  (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070
+  jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511
+  jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-52563
+  bsc#1220937).
+- Update
+  patches.suse/drm-msm-dpu-Add-mutex-lock-in-control-vblank-irq.patch
+  (git-fixes CVE-2023-52586 bsc#1221081).
+- Update
+  patches.suse/drm-radeon-check-the-alloc_workqueue-return-value-in.patch
+  (git-fixes CVE-2023-52470 bsc#1220413).
+- Update
+  patches.suse/drm-sched-Fix-bounds-limiting-when-given-a-malformed.patch
+  (git-fixes CVE-2023-52461 bsc#1220322).
+- Update
+  patches.suse/firmware-arm_scmi-Check-mailbox-SMT-channel-for-cons.patch
+  (git-fixes CVE-2023-52608 bsc#1221375).
+- Update
+  patches.suse/gfs2-Fix-kernel-NULL-pointer-dereference-in-gfs2_rgrp_dump.patch
+  (git-fixes CVE-2023-52448 bsc#1220253).
+- Update
+  patches.suse/hwrng-core-Fix-page-fault-dead-lock-on-mmap-ed-hwrng.patch
+  (git-fixes CVE-2023-52615 bsc#1221614).
+- Update
+  patches.suse/ieee802154-ca8210-Fix-a-potential-UAF-in-ca8210_prob.patch
+  (git-fixes CVE-2023-52510 bsc#1220898).
+- Update
+  patches.suse/iio-adc-ad7091r-Allow-users-to-configure-device-even.patch
+  (git-fixes CVE-2023-52627 bsc#1222051).
+- Update
+  patches.suse/iommu-Don-t-reserve-0-length-IOVA-region.patch
+  (git-fixes CVE-2023-52455 bsc#1220332).
+- Update
+  patches.suse/iommu-arm-smmu-v3-Fix-soft-lockup-triggered-by-arm_smmu_mm_invalidate_range.patch
+  (bsc#1215921 CVE-2023-52484 bsc#1220797).
+- Update
+  patches.suse/iommu-vt-d-Avoid-memory-allocation-in-iommu_suspend
+  (jsc#PED-7779 jsc#PED-7780 CVE-2023-52559 bsc#1220933).
+- Update
+  patches.suse/ipv4-ipv6-Fix-handling-of-transhdrlen-in-__ip-6-_app.patch
+  (bsc#1220419 CVE-2023-52527 bsc#1220928).
+- Update
+  patches.suse/jfs-fix-array-index-out-of-bounds-in-dbAdjTree.patch
+  (git-fixes CVE-2023-52601 bsc#1221068).
+- Update
+  patches.suse/jfs-fix-array-index-out-of-bounds-in-diNewExt.patch
+  (git-fixes CVE-2023-52599 bsc#1221062).
+- Update
+  patches.suse/jfs-fix-slab-out-of-bounds-Read-in-dtSearch.patch
+  (git-fixes CVE-2023-52602 bsc#1221070).
+- Update patches.suse/jfs-fix-uaf-in-jfs_evict_inode.patch
+  (git-fixes CVE-2023-52600 bsc#1221071).
+- Update
+  patches.suse/ksmbd-fix-slub-overflow-in-ksmbd_decode_ntlmss.patch
+  (bsc#1012628 CVE-2023-52440 bsc#1220182).
+- Update
+  patches.suse/media-mtk-jpeg-Fix-use-after-free-bug-due-to-error-p.patch
+  (git-fixes CVE-2023-52491 bsc#1221281).
+- Update
+  patches.suse/media-rkisp1-Fix-IRQ-disable-race-issue.patch
+  (git-fixes CVE-2023-52589 bsc#1221084).
+- Update patches.suse/media-uvcvideo-Fix-OOB-read.patch (git-fixes
+  CVE-2023-52565 bsc#1220939).
+- Update
+  patches.suse/mfd-syscon-Fix-null-pointer-dereference-in-of_syscon.patch
+  (git-fixes CVE-2023-52467 bsc#1220433).
+- Update
+  patches.suse/mm-migrate-fix-getting-incorrect-page-mapping-during-page-migration.patch
+  (git-fixes CVE-2023-52490 bsc#1221325).
+- Update
+  patches.suse/mm-slab_common-fix-slab_caches-list-corruption-after-kmem_cache_destroy.patch
+  (git-fixes CVE-2023-52562 bsc#1220936).
+- Update
+  patches.suse/mtd-Fix-gluebi-NULL-pointer-dereference-caused-by-ft.patch
+  (git-fixes CVE-2023-52449 bsc#1220238).
+- Update patches.suse/net-bridge-use-DEV_STATS_INC.patch
+  (bsc#1220419 CVE-2023-52578 bsc#1220874).
+- Update patches.suse/net-core-Fix-ETH_P_1588-flow-dissector.patch
+  (bsc#1220419 CVE-2023-52580 bsc#1220876).
+- Update
+  patches.suse/net-fix-possible-store-tearing-in-neigh_periodic_wor.patch
+  (bsc#1220419 CVE-2023-52522 bsc#1220924).
+- Update
+  patches.suse/net-mlx5e-Fix-operation-precedence-bug-in-port-times.patch
+  (jsc#PED-3311 CVE-2023-52626 bsc#1222054).
+- Update patches.suse/net-mlx5e-Fix-peer-flow-lists-handling.patch
+  (jsc#PED-3311 CVE-2023-52487 bsc#1221341).
+- Update
+  patches.suse/net-nfc-fix-races-in-nfc_llcp_sock_get-and-nfc_llcp_.patch
+  (git-fixes CVE-2023-52502 bsc#1220831).
+- Update
+  patches.suse/net-nfc-llcp-Add-lock-when-modifying-device-list.patch
+  (git-fixes CVE-2023-52524 bsc#1220927).
+- Update
+  patches.suse/net-rds-Fix-possible-NULL-pointer-dereference.patch
+  (bsc#1220419 CVE-2023-52573 bsc#1220869).
+- Update
+  patches.suse/net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch
+  (git-fixes CVE-2023-52528 bsc#1220843).
+- Update
+  patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elemen.patch
+  (git-fixes CVE-2023-52433 bsc#1220137).
+- Update
+  patches.suse/nfc-nci-assert-requested-protocol-is-valid.patch
+  (git-fixes CVE-2023-52507 bsc#1220833).
+- Update
+  patches.suse/nilfs2-fix-potential-use-after-free-in-nilfs_gccache.patch
+  (git-fixes CVE-2023-52566 bsc#1220940).
+- Update
+  patches.suse/nvme-fc-Prevent-null-pointer-dereference-in-nvme_fc_.patch
+  (bsc#1214842 CVE-2023-52508 bsc#1221015).
+- Update
+  patches.suse/nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva.patch
+  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
+  CVE-2023-6356 CVE-2023-52454 bsc#1220320).
+- Update
+  patches.suse/ocfs2-Avoid-touching-renamed-directory-if-parent-doe.patch
+  (bsc#1221044 CVE-2023-52591 CVE-2023-52590 bsc#1221088).
+- Update
+  patches.suse/perf-x86-intel-uncore-Fix-NULL-pointer-dereference-issue-in-upi_fill_topology.patch
+  (bsc#1218958 CVE-2023-52450 bsc#1220237).
+- Update patches.suse/perf-x86-lbr-Filter-vsyscall-addresses.patch
+  (git-fixes CVE-2023-52476 bsc#1220703).
+- Update
+  patches.suse/phy-lynx-28g-serialize-concurrent-phy_set_mode_ext-c.patch
+  (git-fixes CVE-2023-52505 bsc#1220830).
+- Update
+  patches.suse/pinctrl-nuvoton-wpcm450-fix-out-of-bounds-write.patch
+  (git-fixes CVE-2023-52512 bsc#1221021).
+- Update
+  patches.suse/platform-x86-think-lmi-Fix-reference-leak.patch
+  (git-fixes CVE-2023-52520 bsc#1220921).
+- Update
+  patches.suse/power-supply-rk817-Fix-node-refcount-leak.patch
+  (git-fixes CVE-2023-52571 bsc#1220945).
+- Update
+  patches.suse/powerpc-lib-Validate-size-for-vector-operations.patch
+  (bsc#1215199 CVE-2023-52606 bsc#1221069).
+- Update
+  patches.suse/powerpc-mm-Fix-null-pointer-dereference-in-pgtable_c.patch
+  (bsc#1215199 CVE-2023-52607 bsc#1221061).
+- Update
+  patches.suse/pstore-ram-Fix-crash-when-setting-number-of-cpus-to-.patch
+  (git-fixes CVE-2023-52619 bsc#1221618).
+- Update
+  patches.suse/ring-buffer-Do-not-attempt-to-read-past-commit.patch
+  (git-fixes CVE-2023-52501 bsc#1220885).
+- Update
+  patches.suse/scsi-pm80xx-Avoid-leaking-tags-when-processing-OPC_INB_SET_CONTROLLER_CONFIG-command.patch
+  (jsc#PED-6874 CVE-2023-52500 bsc#1220883).
+- Update
+  patches.suse/serial-8250_port-Check-IRQ-data-before-use.patch
+  (git-fixes CVE-2023-52567 bsc#1220839).
+- Update
+  patches.suse/serial-sc16is7xx-convert-from-_raw_-to-_noinc_-regma.patch
+  (git-fixes CVE-2023-52488 bsc#1221162).
+- Update
+  patches.suse/soc-qcom-pmic_glink_altmode-fix-port-sanity-check.patch
+  (git-fixes CVE-2023-52495 bsc#1221271).
+- Update
+  patches.suse/spi-sun6i-fix-race-between-DMA-RX-transfer-completio.patch
+  (git-fixes CVE-2023-52517 bsc#1221055).
+- Update
+  patches.suse/spi-sun6i-reduce-DMA-RX-transfer-width-to-single-byt.patch
+  (git-fixes CVE-2023-52511 bsc#1221012).
+- Update patches.suse/spmi-mediatek-Fix-UAF-on-device-remove.patch
+  (git-fixes CVE-2023-52584 bsc#1221079).
+- Update
+  patches.suse/thermal-core-Fix-NULL-pointer-dereference-in-zone-re.patch
+  (git-fixes CVE-2023-52473 bsc#1220430).
+- Update patches.suse/uio-Fix-use-after-free-in-uio_open.patch
+  (git-fixes CVE-2023-52439 bsc#1220140).
+- Update
+  patches.suse/wifi-ath9k-Fix-potential-array-index-out-of-bounds-r.patch
+  (git-fixes CVE-2023-52594 bsc#1221045).
+- Update
+  patches.suse/wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_proc.patch
+  (git-fixes CVE-2023-52525 bsc#1220840).
+- Update
+  patches.suse/wifi-rt2x00-restart-beacon-queue-when-hardware-reset.patch
+  (git-fixes CVE-2023-52595 bsc#1221046).
+- Update
+  patches.suse/wifi-rtw88-sdio-Honor-the-host-max_req_size-in-the-R.patch
+  (git-fixes CVE-2023-52611 bsc#1221611).
+- Update
+  patches.suse/wifi-wfx-fix-possible-NULL-pointer-dereference-in-wf.patch
+  (git-fixes CVE-2023-52593 bsc#1221042).
+- Update
+  patches.suse/x86-alternatives-disable-kasan-in-apply_alternatives.patch
+  (git-fixes CVE-2023-52504 bsc#1221553).
+- Update
+  patches.suse/x86-srso-fix-sbpb-enablement-for-spec_rstack_overflow-off.patch
+  (git-fixes CVE-2023-52575 bsc#1220871).
+- commit 6296dca
+
+- Refresh patches.suse/kdump-add-crashkernel-cma-suffix.patch.
+  (fix unused variable warning)
+- commit c953180
+
+- Move upstreamed patches into sorted section
+- commit 70b2e3d
+
+- Move upstreamed uio patches into sorted section
+- commit bd64fed
+
+- Move out-of-tree kexec patches into the right section
+- commit 06266e2
+
+- kdump: wait for DMA to time out when using CMA (jsc#PED-7249).
+- Refresh
+  patches.suse/add-product-identifying-information-to-vmcoreinfo.patch.
+- kdump: describe crashkernel ,cma in Documentaion (jsc#PED-7249).
+- kdump, x86: implement crashkernel cma reservation
+  (jsc#PED-7249).
+- commit 99814c5
+
+- kdump: implement reserve_crashkernel_cma (jsc#PED-7249).
+- Refresh
+  patches.suse/add-product-identifying-information-to-vmcoreinfo.patch.
+- commit fc59052
+
+- kdump: add crashkernel= ,cma suffix (jsc#PED-7249).
+- commit 41f0c07
+
+- kdump: defer the insertion of crashkernel resources
+  (jsc#PED-7249).
+- crash_core: fix the check for whether crashkernel is from high
+  memory (jsc#PED-7249).
+- crash_core.c: remove unneeded functions (jsc#PED-7249).
+- riscv: kdump: use generic interface to simplify crashkernel
+  reservation (jsc#PED-7249).
+- commit 8326859
+
+- arm64: kdump: use generic interface to simplify crashkernel
+  reservation (jsc#PED-7249).
+- Update config files.
+- commit 7ae6d47
+
+- x86: kdump: use generic interface to simplify crashkernel
+  reservation code (jsc#PED-7249).
+- Update config files.
+- commit c141552
+
+- crash_core: move crashk_*res definition into crash_core.c
+  (jsc#PED-7249).
+- commit 0e37e20
+
+- crash_core: add generic function to do reservation
+  (jsc#PED-7249).
+- Refresh
+  patches.suse/add-product-identifying-information-to-vmcoreinfo.patch.
+- commit a0ccf1b
+
+- crash_core: change parse_crashkernel() to support
+  crashkernel=,high|low parsing (jsc#PED-7249).
+- crash_core: change the prototype of function parse_crashkernel()
+  (jsc#PED-7249).
+- crash_core.c: remove unnecessary parameter of function
+  (jsc#PED-7249).
+- riscv: kdump: Implement crashkernel=X,[high,low] (jsc#PED-7249).
+- arm64: kdump: simplify the reservation behaviour of
+  crashkernel=,high (jsc#PED-7249).
+- commit 9191c97
+
+- soc: fsl: dpio: fix kcalloc() argument order (git-fixes).
+- cpufreq: dt: always allocate zeroed cpumask (git-fixes).
+- thermal/drivers/mediatek: Fix control buffer enablement on
+  MT7896 (git-fixes).
+- thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in
+  an error handling path (git-fixes).
+- commit 353a58d
+
+- Refresh
+  patches.suse/net-sched-Add-module-alias-for-sch_fq_pie.patch.
+- commit 4c6eb4e
+
+- RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store() (git-fixes)
+- commit 4586f58
+
+- RDMA/device: Fix a race between mad_client and cm_client init (git-fixes)
+- commit 0f4890f
+
+- RDMA/hns: Fix mis-modifying default congestion control algorithm (git-fixes)
+- commit a44fff2
+
+- RDMA/srpt: Do not register event handler until srpt device is fully setup (git-fixes)
+- commit faac2cb
+
+- RDMA/irdma: Remove duplicate assignment (git-fixes)
+- commit 5dbeef5
+
+- drm/amd/display: Fix && vs || typos (git-fixes).
+- commit 1a09c42
+
+- memory: tegra: Add BPMP and ICC info for DLA clients (bsc#1221330)
+- commit 7fbb1f9
+
+- memory: tegra: Correct DLA client names (bsc#1221330)
+- commit 09ff68e
+
+- Refresh patches.suse/Revert-drm-amd-pm-resolve-reboot-exception-for-si-ol.patch (git-fixes)
+  Alt-commit
+- commit c5c0b23
+
+- Refresh patches.suse/drm-amdgpu-pm-Fix-the-power1_min_cap-value.patch (git-fixes)
+  Alt-commit
+- commit b9c791c
+
+- Refresh patches.suse/drm-amd-display-Prevent-potential-buffer-overflow-in.patch (git-fixes)
+  Alt-commit
+- commit efd4bf7
+
+- Refresh patches.suse/drm-amdgpu-Fix-the-runtime-resume-failure-issue.patch (git-fixes)
+  Alt-commit
+- commit 6ffd9c2
+
+- Refresh patches.suse/drm-amd-display-fix-null-pointer-dereference-on-edid.patch (git-fixes)
+  Alt-commit
+- commit 3adc50a
+
+- Refresh patches.suse/drm-amd-display-Fix-memory-leak-in-dm_sw_fini.patch (git-fixes)
+  Alt-commit
+- commit 1e0a8c4
+
+- Refresh patches.suse/drm-amd-display-Fix-potential-null-pointer-dereferen.patch (git-fixes)
+  Alt-commit
+- commit e173f6f
+
+- Refresh patches.suse/drm-amdgpu-display-Initialize-gamma-correction-mode-.patch (git-fixes)
+  Alt-commit
+- commit 36a7865
+
+- Refresh patches.suse/drm-amd-display-Fix-possible-NULL-dereference-on-dev.patch (git-fixes)
+  Alt-commit
+- commit c463983
+
+- Refresh patches.suse/Revert-drm-amd-display-increased-min_dcfclk_mhz-and-.patch (git-fixes)
+  Alt-commit
+- commit 04c948e
+
+- Refresh patches.suse/Revert-drm-amd-flush-any-delayed-gfxoff-on-suspend-e.patch (git-fixes)
+  Alt-commit
+- commit 30b9cb6
+
+- Refresh patches.suse/drm-amd-Stop-evicting-resources-on-APUs-in-suspend.patch (git-fixes)
+  Alt-commit
+- commit 84c8d2c
+
+- Refresh patches.suse/drm-amd-display-Fix-possible-buffer-overflow-in-find.patch (git-fixes)
+  Alt-commit
+- commit b40ba61
+
+- Refresh patches.suse/drm-amd-display-Fix-possible-use-of-uninitialized-ma.patch (git-fixes)
+  Alt-commit
+- commit c3f6221
+
+- Refresh patches.suse/drm-amd-display-Initialize-wait_time_microsec-variab.patch (git-fixes)
+  Alt-commit
+- commit e48d42e
+
+- Refresh patches.suse/drm-amdkfd-Fix-L2-cache-size-reporting-in-GFX9.4.3.patch (git-fixes)
+  Alt-commit
+- commit 2eea2ce
+
+- Refresh patches.suse/drm-amd-display-Implement-bounds-check-for-stream-en.patch (git-fixes)
+  Alt-commit
+- commit d676a78
+
+- Refresh patches.suse/drm-amd-display-Add-NULL-test-for-timing-generator-i.patch (git-fixes)
+  Alt-commit
+- commit c8a379e
+
+- Refresh patches.suse/drm-amd-display-Fix-panel_cntl-could-be-null-in-dcn2.patch (git-fixes)
+  Alt-commit
+- commit 31dbfa0
+
+- Refresh patches.suse/drm-amdkfd-reserve-the-BO-before-validating-it.patch (git-fixes)
+  Alt-commit
+- commit 1aea4a9
+
+- Refresh patches.suse/drm-amd-display-Fix-buffer-overflow-in-get_host_rout.patch (git-fixes)
+  Alt-commit
+- commit 8ed7043
+
+- Refresh patches.suse/drm-amd-display-Add-NULL-check-for-kzalloc-in-amdgpu.patch (git-fixes)
+  Alt-commit
+- commit 06e5854
+
+- Refresh patches.suse/drm-amdgpu-Fix-missing-error-code-in-gmc_v6-7-8-9_0_.patch (git-fixes)
+  Alt-commit
+- commit 933ecff
+
+- Refresh patches.suse/drm-amd-Don-t-init-MEC2-firmware-when-it-fails-to-lo.patch (git-fixes)
+  Alt-commit
+- commit 3901f67
+
+- Refresh patches.suse/Revert-drm-amd-pm-fix-the-high-voltage-and-temperatu.patch (git-fixes)
+  Alt-commit
+- commit c410dd8
+
+- Refresh patches.suse/drm-amdgpu-revert-Adjust-removal-control-flow-for-sm.patch (git-fixes)
+  Alt-commit
+- commit e2f8984
+
+- Refresh patches.suse/drm-amd-display-Fix-a-switch-statement-in-populate_d.patch (git-fixes)
+  Alt-commit
+- commit fd4226b
+
+- Refresh patches.suse/drm-bridge-sii902x-Fix-audio-codec-unregistration.patch (git-fixes)
+  Alt-commit
+- commit eb02c03
+
+- Refresh patches.suse/drm-bridge-sii902x-Fix-probing-race-issue.patch (git-fixes)
+  Alt-commit
+- commit c6467b6
+
+- Refresh patches.suse/drm-i915-perf-Update-handling-of-MMIO-triggered-repo.patch (git-fixes)
+  Alt-commit
+- commit c6bd3a5
+
+- Refresh patches.suse/drm-i915-dp-Fix-passing-the-correct-DPCD_REV-for-drm.patch (git-fixes)
+  Alt-commit
+- commit 7fcb6ca
+
+- Refresh patches.suse/drm-amd-display-Fix-sending-VSC-colorimetry-packets-.patch (git-fixes)
+  Alt-commit
+- commit 2a5c3b0
+
+- Refresh patches.suse/drm-amdgpu-re-create-idle-bo-s-PTE-during-VM-state-m.patch (git-fixes)
+  Alt-commit
+- commit cce0614
+
+- Refresh patches.suse/drm-amd-display-Restore-guard-against-default-backli.patch (git-fixes)
+  Alt-commit
+- commit f6c0702
+
+- Refresh patches.suse/1958-drm-amd-display-fix-hw-rotated-modes-when-PSR-SU-is-.patch (git-fixes)
+  Alt-commit
+- commit e213d83
+
+- Refresh patches.suse/1936-drm-amdgpu-Restrict-extended-wait-to-PSP-v13.0.6.patch (git-fixes)
+  Alt-commit
+- commit ef2737c
+
+- Refresh patches.suse/drm-amd-display-Increase-frame-warning-limit-with-KA.patch (git-fixes)
+  Alt-commit
+- commit ad4332b
+
+- Refresh patches.suse/drm-amdgpu-disable-MCBP-by-default.patch (git-fixes)
+  Alt-commit
+- commit 2c67e58
+
+- Refresh patches.suse/drm-amd-pm-fix-a-memleak-in-aldebaran_tables_init.patch (git-fixes)
+  Alt-commit
+- commit c8de278
+
+- Move upstreamed patches into sorted section
+- commit 8b684d5
+
+- Move out-of-tree patches into the right sections
+- commit 2aa9e6c
+
+- Move upstreamed patches into sorted section
+- commit cdb27f5
+
+- drm/i915: Add missing ; to __assign_str() macros in tracepoint
+  code (git-fixes).
+- ALSA: hda/realtek: add in quirk for Acer Swift Go 16 - SFG16-71
+  (git-fixes).
+- Revert "ALSA: usb-audio: Name feature ctl using output if
+  input is PCM" (git-fixes).
+- ALSA: hda/realtek: Add quirk for Lenovo Yoga 9 14IMH9
+  (git-fixes).
+- commit fbc9b5f
+
+- fs: don't assume arguments are non-NULL (bsc#1221044
+  CVE-2023-52591).
+- commit ec8f09d
+
+- fs: Restrict lock_two_nondirectories() to non-directory inodes
+  (bsc#1221044 CVE-2023-52591).
+- commit b103012
+
+- fs: ocfs2: check status values (bsc#1221044 CVE-2023-52591).
+- commit a281985
+
+- rename(): avoid a deadlock in the case of parents having no
+  common ancestor (bsc#1221044 CVE-2023-52591).
+- commit ea7137b
+
+- kill lock_two_inodes() (bsc#1221044 CVE-2023-52591).
+- commit 005222f
+
+- rename(): fix the locking of subdirectories (bsc#1221044
+  CVE-2023-52591).
+- commit a6484cb
+
+- f2fs: Avoid reading renamed directory if parent does not change
+  (bsc#1221044 CVE-2023-52591).
+- commit 3fb2dd8
+
+- ext4: don't access the source subdirectory content on
+  same-directory rename (bsc#1221044 CVE-2023-52591).
+- commit ba7d1aa
+
+- ext2: Avoid reading renamed directory if parent does not change
+  (bsc#1221044 CVE-2023-52591).
+- commit 65af3c2
+
+- udf_rename(): only access the child content on cross-directory
+  rename (bsc#1221044 CVE-2023-52591).
+- commit a29fcb6
+
+- ocfs2: Avoid touching renamed directory if parent does not
+  change (bsc#1221044 CVE-2023-52591).
+- Update references in
+  patches.suse/reiserfs-Avoid-touching-renamed-directory-if-parent-.patch
+  (git-fixes bsc#1221044 CVE-2023-52591).
+- commit 0477c34
+
+- dcssblk: handle alloc_dax() -EOPNOTSUPP failure (git-fixes
+  bsc#1221626).
+- commit eaf806c
+
+- s390/cache: prevent rebuild of shared_cpu_list (git-fixes
+  bsc#1221625).
+- commit d9bc980
+
+- s390/pai: fix attr_event_free upper limit for pai device drivers
+  (git-fixes bsc#1221623).
+- commit eac0e1f
+
+- KVM: s390: only deliver the set service event bits (git-fixes
+  bsc#1221620).
+- commit 55838c8
+
+- dm: treat alloc_dax() -EOPNOTSUPP failure as non-fatal
+  (git-fixes).
+- dm: call the resume method on internal suspend (git-fixes).
+- dm raid: fix false positive for requeue needed during reshape
+  (git-fixes).
+- dm ioctl: update DM_DRIVER_EMAIL to new dm-devel mailing list
+  (git-fixes).
+- dm-raid: fix lockdep waring in "pers->hot_add_disk"
+  (jsc#PED-7542).
+- md/raid5: fix atomicity violation in raid5_cache_count
+  (bsc#1219169, CVE-2024-23307).
+- dm: dm-zoned: guard blkdev_zone_mgmt with noio scope
+  (jsc#PED-7542).
+- dm-integrity, dm-verity: reduce stack usage for recheck
+  (jsc#PED-7542).
+- dm-crypt, dm-integrity, dm-verity: bump target version
+  (jsc#PED-7542).
+- dm-verity, dm-crypt: align "struct bvec_iter" correctly
+  (jsc#PED-7542).
+- dm-crypt: recheck the integrity tag after a failure (git-fixes).
+- dm-crypt: don't modify the data when using authenticated
+  encryption (git-fixes).
+- dm-verity: recheck the hash after a failure (git-fixes).
+- dm-integrity: recheck the integrity tag after a failure
+  (git-fixes).
+- md: Fix missing release of 'active_io' for flush (jsc#PED-7542).
+- dm-crypt, dm-verity: disable tasklets (git-fixes).
+- dm writecache: allow allocations larger than 2GiB
+  (jsc#PED-7542).
+- dm stats: limit the number of entries (jsc#PED-7542).
+- md/raid1: Use blk_opf_t for read and write operations
+  (git-fixes).
+- md: Fix md_seq_ops() regressions (git-fixes).
+- md: Whenassemble the array, consult the superblock of the
+  freshest device (git-fixes).
+- md/raid1: remove unnecessary null checking (jsc#PED-7542).
+- md: synchronize flush io with array reconfiguration (git-fixes).
+- commit 7042e1b
+
+- md/raid5: remove rcu protection to access rdev from conf
+  (jsc#PED-7542).
+- md/raid1: remove rcu protection to access rdev from conf
+  (jsc#PED-7542).
+- md/raid10: remove rcu protection to access rdev from conf
+  (jsc#PED-7542).
+- md: remove flag RemoveSynchronized (jsc#PED-7542).
+- dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM
+  (git-fixes).
+- dm-integrity: don't modify bio's immutable bio_vec in
+  integrity_metadata() (git-fixes).
+- commit 1587009
+
+- raid1: fix use-after-free for original bio in
+  raid1_write_request() (bsc#1221097).
+- commit 296098e
+
+- Update
+  patches.suse/s390-ptrace-handle-setting-of-fpc-register-correctly.patch
+  (git-fixes bsc#1219812 CVE-2023-52598 bsc#1221060).
+- commit 0d496e7
+
+- Update
+  patches.suse/s390-vfio-ap-always-filter-entire-AP-matrix.patch
+  (git-fixes bsc#1218988 CVE-2024-26620 bsc#1221298).
+- commit b046ad1
+
+- selftests/bpf: Add testcases for tailcall infinite loop fixing
+  (git-fixes).
+- bpf, x64: Fix tailcall infinite loop (git-fixes).
+- selftests/bpf: Correct map_fd to data_fd in tailcalls
+  (git-fixes).
+- commit 1302854
+
+- btrfs: preallocate temporary extent buffer for inode logging when needed (bsc#1217362).
+- commit c7ccbf0
+
+- i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling
+  (git-fixes).
+- watchdog: stm32_iwdg: initialize default timeout (git-fixes).
+- watchdog: starfive: Check pm_runtime_enabled() before
+  decrementing usage counter (git-fixes).
+- commit 357d510
+
+- of: make for_each_property_of_node() available to to !OF
+  (git-fixes).
+- mtd: rawnand: Constrain even more when continuous reads are
+  enabled (git-fixes).
+- mtd: rawnand: Fix and simplify again the continuous read
+  derivations (git-fixes).
+- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype
+  (git-fixes).
+- mtd: rawnand: meson: fix scrambling mode value in command macro
+  (git-fixes).
+- mtd: maps: physmap-core: fix flash size larger than 32-bit
+  (git-fixes).
+- media: usbtv: Remove useless locks in usbtv_video_free()
+  (git-fixes).
+- media: ttpci: fix two memleaks in budget_av_attach (git-fixes).
+- media: go7007: fix a memleak in go7007_load_encoder (git-fixes).
+- media: dvb-frontends: avoid stack overflow warnings with clang
+  (git-fixes).
+- media: pvrusb2: fix uaf in pvr2_context_set_notify (git-fixes).
+- media: i2c: imx290: Fix IMX920 typo (git-fixes).
+- media: pvrusb2: fix pvr2_stream_callback casts (git-fixes).
+- media: pvrusb2: remove redundant NULL check (git-fixes).
+- media: go7007: add check of return value of go7007_read_addr()
+  (git-fixes).
+- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak
+  (git-fixes).
+- media: sun8i-di: Fix chroma difference threshold (git-fixes).
+- media: sun8i-di: Fix power on/off sequences (git-fixes).
+- media: sun8i-di: Fix coefficient writes (git-fixes).
+- media: cedrus: h265: Fix configuring bitstream size (git-fixes).
+- media: edia: dvbdev: fix a use-after-free (git-fixes).
+- media: nxp: imx8-isi: Check whether crossbar pad is non-NULL
+  before access (git-fixes).
+- media: mc: Add local pad to pipeline regardless of the link
+  state (git-fixes).
+- net: lan78xx: fix runtime PM count underflow on link stop
+  (git-fixes).
+- commit 9b93c7d
+
+- clk: renesas: r8a779g0: Correct PFC/GPIO parent clocks
+  (git-fixes).
+- commit 0b0c529
+
+- crypto: jitter - fix CRYPTO_JITTERENTROPY help text (git-fixes).
+- crypto: qat - remove double initialization of value (git-fixes).
+- crypto: qat - avoid division by zero (git-fixes).
+- crypto: qat - removed unused macro in adf_cnv_dbgfs.c
+  (git-fixes).
+- crypto: qat - remove unused macros in qat_comp_alg.c
+  (git-fixes).
+- crypto: ccp - Avoid discarding errors in
+  psp_send_platform_access_msg() (git-fixes).
+- crypto: arm/sha - fix function cast warnings (git-fixes).
+- crypto: qat - resolve race condition during AER recovery
+  (git-fixes).
+- crypto: qat - change SLAs cleanup flow at shutdown (git-fixes).
+- crypto: xilinx - call finalize with bh disabled (git-fixes).
+- clk: imx: imx8mp: Fix SAI_MCLK_SEL definition (git-fixes).
+- clk: samsung: exynos850: Propagate SPI IPCLK rate change
+  (git-fixes).
+- clk: Fix clk_core_get NULL dereference (git-fixes).
+- clk: qcom: mmcc-msm8974: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: mmcc-apq8084: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: gcc-ipq9574: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: gcc-ipq8074: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: gcc-ipq6018: fix terminating of frequency table
+  arrays (git-fixes).
+- clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times
+  (git-fixes).
+- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd
+  (git-fixes).
+- clk: meson: Add missing clocks to axg_clk_regmaps (git-fixes).
+- clk: keystone: sci-clk: Adding support for non contiguous clocks
+  (git-fixes).
+- clk: mediatek: mt7981-topckgen: flag SGM_REG_SEL as critical
+  (git-fixes).
+- clk: mediatek: mt8183: Correct parent of CLK_INFRA_SSPM_32K_SELF
+  (git-fixes).
+- clk: mediatek: mt8135: Fix an error handling path in
+  clk_mt8135_apmixed_probe() (git-fixes).
+- clk: hisilicon: hi3559a: Fix an erroneous devm_kfree()
+  (git-fixes).
+- clk: hisilicon: hi3519: Release the correct number of gates
+  in hi3519_clk_unregister() (git-fixes).
+- clk: zynq: Prevent null pointer dereference caused by kmalloc
+  failure (git-fixes).
+- clk: renesas: r8a779f0: Correct PFC/GPIO parent clock
+  (git-fixes).
+- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity
+  (git-fixes).
+- media: v4l2-tpg: fix some memleaks in tpg_alloc (git-fixes).
+- media: em28xx: annotate unchecked call to
+  media_device_register() (git-fixes).
+- media: videobuf2: Fix doc comment (git-fixes).
+- media: xc4000: Fix atomicity violation in xc4000_get_frequency
+  (git-fixes).
+- media: staging: ipu3-imgu: Set fields before
+  media_entity_pads_init() (git-fixes).
+- commit df2e5ae
+
+- xfs: shrink failure needs to hold AGI buffer (git-fixes).
+- commit e670f77
+
+- xfs: fix imprecise logic in xchk_btree_check_block_owner
+  (git-fixes).
+- commit 24972c0
+
+- xfs: fix SEEK_HOLE/DATA for regions with active COW extents
+  (git-fixes).
+- commit 4197ae0
+
+- xfs: ensure submit buffers on LSN boundaries in error handlers
+  (git-fixes).
+- commit c23fb7a
+
+- afs: Fix endless loop in directory parsing (git-fixes).
+- commit d1332b9
+
+- afs: Increase buffer size in afs_update_volume_status()
+  (git-fixes).
+- commit a954f43
+
+- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers()
+  (git-fixes).
+- commit 6c3b10c
+
+- nilfs2: convert nilfs_page_mkwrite() to use a folio (git-fixes).
+- commit 29291de
+
+- erofs: fix handling kern_mount() failure (git-fixes).
+- commit ea16f48
+
+- erofs: Don't use certain unnecessary folio_*() functions
+  (git-fixes).
+- commit 021c910
+
+- erofs: fix refcount on the metabuf used for inode lookup
+  (git-fixes).
+- commit 0bf0150
+
+- erofs: clean up zmap.c (git-fixes).
+- commit 3625a10
+
+- erofs: fix up compacted indexes for block size < 4096
+  (git-fixes).
+- commit 458bf09
+
+- erofs: fix memory leak on short-lived bounced pages (git-fixes).
+- commit 5efbfc4
+
+- iommu/amd: Fix failure return from snp_lookup_rmpentry()
+  (git-fixes).
+- commit 536001e
+
+- erofs: allow empty device tags in flatdev mode (git-fixes).
+- commit c8ff154
+
+- iommu/vt-d: Don't issue ATS Invalidation request when device
+  is disconnected (git-fixes).
+- commit 5d166d5
+
+- net/sched: Add module alias for sch_fq_pie (bsc#1210335).
+- commit 211b413
+
+- net/sched: Remove alias of sch_clsact (bsc#1210335).
+- net/sched: Load modules via their alias (bsc#1210335).
+- net/sched: Add module aliases for cls_,sch_,act_ modules
+  (bsc#1210335).
+- net/sched: Add helper macros with module names (bsc#1210335).
+- commit 2046cfc
+
+- Refresh
+  patches.suse/perf-pmu-events-powerpc-Update-json-mapfile-with-Power11-PVR.patch.
+- commit 42a5ace
+
+- ionic: restore netdev feature bits after reset (git-fixes).
+- commit 898af71
+
+- ionic: check cmd_regs before copying in or out (git-fixes).
+- commit f1dc989
+
+- ionic: check before releasing pci regions (git-fixes).
+- commit 2a1c23c
+
+- net: veth: clear GRO when clearing XDP even when down (git-fixes).
+- commit 553eb02
+
+- tun: Fix xdp_rxq_info's queue_index when detaching (git-fixes).
+- commit b7d1001
+
+- net: dpaa: fman_memac: accept phy-interface-type = "10gbase-r" in the device tree (git-fixes).
+- commit 675b36c
+
+- ice: Fix ASSERT_RTNL() warning during certain scenarios (git-fixes).
+- commit 8b9399e
+
+- ice: fix pin phase adjust updates on PF reset (git-fixes).
+- commit ef21fc4
+
+- ice: fix dpll periodic work data updates on PF reset (git-fixes).
+- commit dc97d19
+
+- ice: fix dpll and dpll_pin data access on PF reset (git-fixes).
+- commit f610e32
+
+- ice: fix dpll input pin phase_adjust value updates (git-fixes).
+- commit cfb9c02
+
+- ice: fix connection state of DPLL and out pin (git-fixes).
+- commit 7176021
+
+- net: sparx5: Add spinlock for frame transmission from CPU (git-fixes).
+- commit 2486a16
+
+- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (git-fixes).
+- commit 86d216d
+
+- net: ipa: don't overrun IPA suspend interrupt registers (git-fixes).
+- commit 7f00d73
+
+- ethernet: cpts: fix function pointer cast warnings (git-fixes).
+- commit d241bc1
+
+- net: ethernet: ti: cpsw_new: enable mac_managed_pm to fix mdio (git-fixes).
+- commit 229f845
+
+- ppp_async: limit MRU to 64K (git-fixes).
+- commit 463471e
+
+- nfp: enable NETDEV_XDP_ACT_REDIRECT feature flag (git-fixes).
+- commit 36e79a9
+
+- ALSA: hda/tas2781: remove unnecessary runtime_pm calls
+  (git-fixes).
+- ALSA: hda/realtek - ALC236 fix volume mute & mic mute LED on
+  some HP models (git-fixes).
+- ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops
+  (git-fixes).
+- ALSA: hda: Reuse for_each_pcm_streams() (git-fixes).
+- ALSA: usb-audio: Name feature ctl using output if input is PCM
+  (git-fixes).
+- commit fdd39ea
+
+- ALSA: hda/realtek: Add quirks for various HP ENVY models
+  (git-fixes).
+- commit 62207c4
+
+- ALSA: hda/realtek: Add "Intel Reference board" SSID in the
+  ALC256 (git-fixes).
+- ALSA: hda/realtek: Remove two HP Laptops using CS35L41
+  (git-fixes).
+- ALSA: hda: cs35l41: Support HP models without _DSD using dual
+  Speaker ID (git-fixes).
+- ALSA: hda: cs35l41: Support additional HP Envy Models
+  (git-fixes).
+- ALSA: hda/realtek: Add quirks for HP G11 Laptops using CS35L56
+  (git-fixes).
+- ALSA: hda: realtek: Re-work CS35L41 fixups to re-use for other
+  amps (git-fixes).
+- commit c4f7d5a
+
+- Drivers: hv: vmbus: Update indentation in create_gpadl_header()
+  (git-fixes).
+- Drivers: hv: vmbus: Remove duplication and cleanup code in
+  create_gpadl_header() (git-fixes).
+- Drivers: hv: vmbus: Calculate ring buffer size for more
+  efficient use of memory (git-fixes).
+- hv_utils: Allow implicit ICTIMESYNCFLAG_SYNC (git-fixes).
+- minmax: relax check to allow comparison between unsigned
+  arguments (git-fixes).
+- minmax: allow comparisons of 'int' against 'unsigned char/short'
+  (git-fixes).
+- minmax: fix indentation of __cmp_once() and __clamp_once()
+  (git-fixes).
+- minmax: allow min()/max()/clamp() if the arguments have the same
+  (git-fixes).
+- minmax: add umin(a, b) and umax(a, b) (git-fixes).
+- minmax: fix header inclusions (git-fixes).
+- minmax: deduplicate __unconst_integer_typeof() (git-fixes).
+- minmax: Introduce {min,max}_array() (git-fixes).
+- commit 7632d3b
+
+- iommu/amd: Mark interrupt as managed (git-fixes).
+- commit 5ef4be8
+
+- arm64: dts: imx8mm-kontron: Refactor devicetree for OSM-S module and (git-fixes)
+- commit 0049d8d
+
+- Update ppc64le kabi files.
+- commit 5c9702d
+
+- arm64: dts: sprd: Change UMS512 idle-state nodename to match bindings (git-fixes)
+- commit 58013ba
+
+- arm64: dts: rockchip: drop rockchip,trcm-sync-tx-only from rk3588 i2s (git-fixes)
+- commit b287ab6
+
+- arm64: dts: rockchip: fix reset-names for rk356x i2s2 controller (git-fixes)
+- commit bfdd563
+
+- arm64: dts: rockchip: add missing interrupt-names for rk356x vdpu (git-fixes)
+- commit b9c1de2
+
+- arm64: dts: imx8mp: Set SPI NOR to max 40 MHz on Data Modul i.MX8M (git-fixes)
+- commit 5a00002
+
+- arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS (git-fixes)
+- commit a9642be
+
+- arm64: dts: imx8mm-kontron: Fix OSM-S devicetrees to match latest (git-fixes)
+- commit d17e1b2
+
+- arm64: dts: imx8mm-kontron: Fix interrupt for RTC on OSM-S i.MX8MM (git-fixes)
+- commit 63e3e05
+
+- arm64: dts: imx8mm-kontron: Disable pull resistors for SD card (git-fixes)
+- commit 645b123
+
+- arm64: dts: imx8mm-kontron: Disable pull resistors for SD card (git-fixes)
+- commit 63490f6
+
+- arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals (git-fixes)
+- commit 980bc4a
+
+- arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals (git-fixes)
+- commit 3a04f44
+
+- arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL (git-fixes)
+- commit d23e2ff
+
+- arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on OSM-S (git-fixes)
+- commit e658d8c
+
+- arm64: dts: allwinner: h6: Add RX DMA channel for SPDIF (git-fixes)
+- commit 8098072
+
+- arm64: tegra: Fix Tegra234 MGBE power-domains (git-fixes)
+- commit 58db13b
+
+- arm64: dts: imx8mp: Fix LDB clocks property (git-fixes)
+- commit 8815925
+
+- arm64: dts: rockchip: set num-cs property for spi on px30 (git-fixes)
+- commit ac8cd44
+
+- arm64: dts: imx8mp: Disable UART4 by default on Data Modul i.MX8M (git-fixes)
+- commit d39bc86
+
+- arm64: dts: sprd: Add clock reference for pll2 on UMS512 (git-fixes)
+- commit 8ef3da3
+
+- arm64: zynqmp: Fix clock node name in kv260 cards (git-fixes)
+- commit 49dfade
+
+- arm64: zynqmp: Move fixed clock to / for kv260 (git-fixes)
+- commit 8a08b0f
+
+- Make NVIDIA Grace-Hopper TPM related drivers build-ins (bsc#1221156)
+- commit 32745a0
+
+- powerpc/64s: Fix get_hugepd_cache_index() build failure
+  (bsc#1215199).
+- powerpc: Remove cpu-as-y completely (bsc#1215199).
+- powerpc/64s: Use .machine power4 around dcbt (bsc#1215199).
+- powerpc/64s: Move dcbt/dcbtst sequence into a macro
+  (bsc#1215199).
+- powerpc/pseries: Fix potential memleak in papr_get_attr()
+  (bsc#1215199).
+- powerpc/kprobes: Handle error returned by set_memory_rox()
+  (bsc#1215199).
+- powerpc: Implement set_memory_rox() (bsc#1215199).
+- powerpc: Use user_mode() macro when possible (bsc#1215199).
+- powerpc/rtas: use correct function name for resetting TCE tables
+  (bsc#1215199).
+- commit 35dba53
+
+- Update patches.suse/arm64-sme-Always-exit-sme_alloc-early-with-existing-.patch (git-fixes, CVE-2024-26618)
+  Add reference to CVE-2024-26618.
+- commit 50882e3
+
+- powerpc/pseries/iommu: IOMMU table is not initialized for
+  kdump over SR-IOV (bsc#1220492 ltc#205270).
+- commit 2026089
+
+- group-source-files.pl: Quote filenames (boo#1221077).
+  The kernel source now contains a file with a space in the name.
+  Add quotes in group-source-files.pl to avoid splitting the filename.
+  Also use -print0 / -0 when updating timestamps.
+- commit a005e42
+
+- power: reset: pwr-mlxbf: support graceful reboot instead of emergency (jsc#PED-8032)
+- commit 7221104
+
+- platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when Tx (jsc#PED-8032)
+- commit 0fc3eb8
+
+- platform/mellanox: mlxbf-tmfifo: Remove unnecessary bool conversion (jsc#PED-8032)
+- commit 53a0f30
+
+- platform/mellanox: mlxbf-tmfifo: Fix a warning message (jsc#PED-8032)
+- commit 8a9b17e
+
+- platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace (jsc#PED-8032)
+- commit 2307ef6
+
+- platform/mellanox: Check devm_hwmon_device_register_with_groups() (jsc#PED-8032)
+- commit e1cd31d
+
+- platform/mellanox: Add null pointer checks for devm_kasprintf() (jsc#PED-8032)
+- commit bda53cc
+
+- platform/mellanox: mlxbf-pmc: Add support for BlueField-3 (jsc#PED-8032)
+- commit bbdb7cd
+
+- mlxbf-bootctl: correctly identify secure boot with development keys (jsc#PED-8032)
+- commit 7f706aa
+
+- platform/mellanox: mlxbf-bootctl: Convert to platform remove callback (jsc#PED-8032)
+- commit 55906a9
+
+- mlxbf-bootctl: Support sysfs entries for MFG fields (jsc#PED-8032)
+- commit ed7de29
+
+- mlxbf-bootctl: Support setting the ARM boot state to "OS up" (jsc#PED-8032)
+- commit c648b6e
+
+- mlxbf-bootctl: Support the large icmc write/read (jsc#PED-8032)
+- commit 3f27c32
+
+- mlxbf-bootctl: Add sysfs file for BlueField boot log (jsc#PED-8032)
+- commit 2f2dfde
+
+- mmc: sdhci-of-dwcmshc: Add runtime PM operations (jsc#PED-8032)
+- commit 8cc192b
+
+- mmc: sdhci-of-dwcmshc: Add error handling in dwcmshc_resume (jsc#PED-8032)
+- commit 9fc0dca
+
+- mmc: sdhci-of-dwcmshc: Convert to platform remove callback returning (jsc#PED-8032)
+- commit 1b18d2f
+
+- i2c: mlxbf: Use devm_platform_get_and_ioremap_resource() (jsc#PED-8032)
+- commit b7e1af1
+
+- i2c: mlxbf: Use dev_err_probe in probe function (jsc#PED-8032)
+- commit c1c0d6f
+
+- supported.conf: Add few drivers for BF3 (jsc#PED-8032)
+  Add gpio-mlxbf3, sdhci-of-dwcmshc, pinctrl-mlxbf3 and
+  pwr-mlxbf drivers in kernel-default.
+- commit dd06563
+
+- gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (jsc#PED-8032)
+- commit 6e4d90e
+
+- gpio: mlxbf3: use capital "OR" for multiple licenses in SPDX (jsc#PED-8032)
+- commit 62fd912
+
+- gpio: mlxbf3: Support add_pin_ranges() (jsc#PED-8032)
+- commit f0d8a10
+
+- config/arm64: Enable BF3 GPIO driver (jsc#PED-8032)
+  Add config to enable Bluefield3 GPIO driver as module.
+- commit cae28d7
+
+- gpio: mlxbf3: Add gpio driver support (jsc#PED-8032)
+- commit 305cf5b
+
+- memory: tegra: add MC client for Tegra234 GPU (bsc#1221330)
+- commit f5d121c
+
+- memory: tegra: Add clients used by DRM in Tegra234 (bsc#1221330).
+- commit 67c31f5
+
+- supported.conf: Add supported entry for stusb160x (bsc#1221330)
+- commit d3bd091
+
+- mkspec-dtb: add toplevel symlinks also on arm
+- commit ed29cae
+
+- rpm/mkspec-dtb: dtbs have moved to vendor sub-directories in 6.5
+  By commit 724ba6751532 ("ARM: dts: Move .dts files to vendor
+  sub-directories").
+  So switch to them.
-- commit 6484eda
+- commit 7aee36a
krb5
+- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch
+  * CVE-2024-26458, bsc#1220770
+  * CVE-2024-26461, bsc#1220771
+  * CVE-2024-26462, bsc#1220772
+
libixion
+- Use %autosetup macro. Allows to eliminate the usage of deprecated
+  %patchN
+
+- Update to 0.19.0:
+  * C++ API
+  * added support for renaming sheets after they have been created.
+  * formula interpreter
+  * added support for inline arrays.
+
liborcus
+- Use %autosetup macro. Allows to eliminate the usage of deprecated
+  %patchN
+
+- Update to orcus 0.19.2:
+  * fixed a build issue with gcc 14 due to a missing include for std::find_if
+    and std::for_each.
+  * fixed a segmentation fault with the orcus-test-xml-mapped test which
+    manifested on hppa hardware, as originally reported on
+    https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054376.
+  * fixed a crash when loading a document that includes a style record
+    referencing an unnamed style record as its parent.  In Excel-generated
+    documents, styles only reference named styles as their parents.  But in
+    3rd-party generated documents, styles referencing unnamed styles as their
+    parents can occur.
+  * fixed a crash when the document model returned a null pointer when a
+    reference resolver interface was requested.
+- Update to orcus 0.19.1:
+  * implemented orcus::create_filter() which instantiates a filter object of
+    specified type.  The returned object is of type
+    orcus::iface::import_filter.
+  * moved test cases for format detection to the respective filter test files.
+  * fixed a bug where the import filter did not set the formula grammer prior
+    to importing.
+- Update to orcus 0.19.0:
+  * added support for allowing use of std::filesystem,
+    std::experimental::filesystem or boost::filesystem per build
+    configuration.
+  * refactored styles import to use style indices returned by the document
+    model implementer rather than using the indices stored in the file.  This
+    allows the implementer to aggregate some style records and re-use the same
+    index for records that are stored as different records in the original
+    file.
+  * fixed a bug where column styles were not applied to the correct columns
+    when the starting column index was not 0.
+  * overhauled the Gnumeric import filter to fix many bugs and support many
+    missing features relative to the other filters included in orcus.  Most
+    notable mentions are:
+  * cell styles
+  * rich-text strings
+  * named ranges
+  * row heights and column widths
+  * merged cells
+  * added partial support for Apache Parquet import filter.  This is still
+    heavily experimental.
+- Remove patches:
+  * 0001-Possibility-to-build-against-a-host-of-filesystem-im.patch (upstreamed)
+  * 0002-Allow-using-older-boost-filesystem.patch
+
libreoffice
+- Update to 24.2.1.2 (jsc#PED-7496):
+  https://wiki.documentfoundation.org/ReleaseNotes/24.2
+  https://wiki.documentfoundation.org/Releases/24.2.1/RC1 and
+  https://wiki.documentfoundation.org/Releases/24.2.1/RC2
+  https://wiki.documentfoundation.org/Releases/7.6.4/RC1
+  https://wiki.documentfoundation.org/Releases/7.6.3/RC2
+  https://wiki.documentfoundation.org/Releases/7.6.3/RC1
+  https://wiki.documentfoundation.org/Releases/7.6.2/RC2
+- Remove the following patches, as they're no longer required for
+  LibreOffice 24.2:
+  * CVE-2023-6185.patch
+  * CVE-2023-6186-1.patch
+  * CVE-2023-6186-2.patch
+  * CVE-2023-6186-3.patch
+  * CVE-2023-6186-4.patch
+  * CVE-2023-6186-5.patch
+- Allow building with gcc >= 12 on system where it is the default
+- Added patch:
+  * 0001-Allow-building-with-Java-8.patch
+    + patch submitted upstream restoring the possibility to build
+    with JDK >= 8
+- Removed patches:
+  * 0001-Revert-java-9-changes.patch
+  * 0002-Revert-Require-HarfBuzz-5.1.0.patch
+    + not needed with the new patch above
+- Armenian translation added
+- Update patch handling to be compatible with rpm 4.20
+- Update bundled dependencies:
+  curl-8.2.1.tar.xz -> curl-8.6.0.tar.xz
+  gpgme-1.18.0.tar.bz2 -> gpgme-1.20.0.tar.bz2
+  harfbuzz-8.0.0.tar.xz -> harfbuzz-8.2.2.tar.xz
+  libcmis-0.5.2.tar.xz -> libcmis-0.6.1.tar.xz
+  libgpg-error-1.43.tar.bz2 -> libgpg-error-1.47.tar.bz2
+  pdfium-5778.tar.bz2 -> pdfium-6179.tar.bz2
+  poppler-23.06.0.tar.xz -> poppler-23.09.0.tar.xz
+  skia-m111-a31e897fb3dcbc96b2b40999751611d029bf5404.tar.xz -> skia-m116-2ddcf183eb260f63698aa74d1bb380f247ad7ccd.tar.xz
+- Add new bundled dependencies:
+  Java-WebSocket-1.5.4.tar.gz
+  fontconfig-2.14.2.tar.xz
+  freetype-2.13.0.tar.xz
+  phc-winner-argon2-20190702.tar.gz
+  tiff-4.6.0.tar.xz
+- Build using OpenSSL instead of NSS, since the bundled curl does
+  not support the NSS backend any more
+- Add bundled() markers
+
timezone
-- update to 2024a:
-  * Kazakhstan unifies on UTC+5.  This affects Asia/Almaty and
-    Asia/Qostanay which together represent the eastern portion of the
-    country that will transition from UTC+6 on 2024-03-01 at 00:00 to
-    join the western portion.  (Thanks to Zhanbolat Raimbekov.)
-  * Palestine springs forward a week later than previously predicted
-    in 2024 and 2025.  (Thanks to Heba Hamad.)  Change spring-forward
-    predictions to the second Saturday after Ramadan, not the first;
-    this also affects other predictions starting in 2039.
-  * Asia/Ho_Chi_Minh's 1955-07-01 transition occurred at 01:00
-    not 00:00.  (Thanks to Đoàn Trần Công Danh.)
-  * From 1947 through 1949, Toronto's transitions occurred at 02:00
-    not 00:00.  (Thanks to Chris Walton.)
-  * In 1911 Miquelon adopted standard time on June 15, not May 15.
-  * The FROM and TO columns of Rule lines can no longer be "minimum"
-    or an abbreviation of "minimum", because TZif files do not support
-    DST rules that extend into the indefinite past - although these
-    rules were supported when TZif files had only 32-bit data, this
-    stopped working when 64-bit TZif files were introduced in 1995.
-    This should not be a problem for realistic data, since DST was
-    first used in the 20th century.  As a transition aid, FROM columns
-    like "minimum" are now diagnosed and then treated as if they were
-    the year 1900; this should suffice for TZif files on old systems
-    with only 32-bit time_t, and it is more compatible with bugs in
-    2023c-and-earlier localtime.c.  (Problem reported by Yoshito
-    Umaoka.)
-  * localtime and related functions no longer mishandle some
-    timestamps that occur about 400 years after a switch to a time
-    zone with a DST schedule.  In 2023d data this problem was visible
-    for some timestamps in November 2422, November 2822, etc. in
-    America/Ciudad_Juarez.  (Problem reported by Gilmore Davidson.)
-  * strftime %s now uses tm_gmtoff if available.  (Problem and draft
-    patch reported by Dag-Erling Smørgrav.)
-  * The strftime man page documents which struct tm members affect
-    which conversion specs, and that tzset is called.  (Problems
-    reported by Robert Elz and Steve Summit.)
+- Unify SLE-15-SP6 and Factory packages (PED#8158).
+  This is still related to bsc#1213470. We're applying this fix for
+  SLE-15-SP6 too.  This changelog entry is meant to bring over the SLE
+  information, so the same package can be used for both code streams.
+- This patch has long been removed on Factory but was never mentioned
+  explicitly, it was related to ticket bsc#1202310, a minor update to
+  reflect Chile's DST change back in 2022.
+  * bsc1202310.patch
+
+- Use /bin/sh for tzselect. Used to require bash for the 'select'
+  builtin but has a fallback meanwhile so no need for explicit bash
+  anymore.
+
+- Drop the timezone-java (bsc#1213470).
+  After thorough consideration of possible problems that arise from
+  having a timezone package specifically for the Java ecosystem,
+  Fridrich Strba and I have decided to drop the package altogether.
+  Doing so means the JDK will use its built-in timezone data that is
+  updated quarterly, when refreshed JDK versions are released.
+  While this does mean there could be situations where there is a bit
+  of a mismatch between the 'timezone' package's data, and the data
+  that is used by JDK, in practice the difference will be minimal and
+  short-lived.
+  So we've established this to be the best course of action.
+- Remove _multibuild, not longer required.
+
+- Update to 2024a:
+  * Kazakhstan unifies on UTC+5 beginning 2024-03-01
+  * Palestine springs forward a week later after Ramadan
+  * zic no longer pretends to support indefinite-past DST
+  * localtime no longer mishandles Ciudad Juárez in 2422
-- Refresh tzdata-china.diff
-  * Revert changes made in 2023b
+  * Reverts changes for 2023 Lebanon DST change to 2023a data
+
-  * Lebanon delays the start of DST this year.
+  * In 2023 Lebanon springs forward April 20/21 not March 25/26
+
+- Remove upstreamed patch gcc13-fix.patch
+
+- Add gcc13-fix.patch upsteam patch for GCC 13 compiler.
-- timezone update 2022g (bsc#1177460):
+- Install leapseconds data to %{_datadir}/zoneinfo/; this is now
+  required by some scientific applications.
+
+- timezone update 2022g:
-- timezone update 2022f (bsc#1177460):
+- timezone update 2022f:
-- Refreshed patches:
-  * fat.patch
-  * tzdata-china.diff
-- timezone update 2022e (bsc#1177460):
+- timezone update 2022e:
+
+
+
-- Refresh tzdata-china.diff
-- Remove upstreamed bsc1202310.patch
-- Update to reflect new Chile DST change, bsc#1202310
-  * bsc1202310.patch
+- switch to _multibuild
+- refresh keyring, enable keyring validation
+
+- Add --add-exports for java versions that support it.
+  * Fixes build in factory, since this is compulsory for jdk17+
-- timezone update 2022a (bsc#1177460):
+- timezone update 2022a:
-- timezone update 2021e (bsc#1177460):
+- timezone update 2021e:
+
+
+
-- Refresh tzdata-china.patch
-- timezone update 2020d (bsc#1177460)
+- Adjust timezone-java.spec.in to avoid build failures when running
+  pre_checkin.sh
+
+- timezone update 2020d
-- timezone update 2020c (bsc#1177460)
+- timezone update 2020c
+- Fixup tzdata-china.diff: zone.tab and zone1970.tab MUST be tab
+  delimited (boo#1176927).
+
+- modify tzdata-china.diff
+  * systemd now reads zone1970.tab
+  * link Asia/Shanghai to Asia/Beijing is enough and more precise
+
+- timezone modifies a file below /usr/share (boo#1172521)
+
-  * Palestine's 2019 spring-forward transition was on 03-29,
-    not 03-30.
-  * Add info about the Crimea situation.
+  * Palestine's 2019 spring-forward transition was on 03-29, not 03-30.
+  * Add info about the Crimea situation in zone1970.tab and zone.tab.
-- timezone update 2018i (bsc#1120402)
-  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01.
-- timezone update 2018h
+- timezone update 2018i:
+  * São Tomé and Príncipe switches from +01 to +00 on 2019-01-01
+
+- timezone update 2018h (bsc#1120402):
vhba-kmp
+- Update to release 20240202
+  * No user-visible changes
+
wicked
+- hide secrets in debug log (bsc#1221194)
+  [+ 0003-move-all-attribute-definitions-to-compiler-h.patch]
+  [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch]
+
wireplumber
+- Add patch from upstream to fix all input sources only working
+  when bluetooth profile is set to HSF/HFP, which was a regression
+  in 0.5.0 (glfo#pipewire/wireplumber#598):
+  * 0001-filter-utils-fix-handling-of-targetless-smart-filters.patch
+
+- Avoid %if %{pkg_vcmp gcc < 8}, instead replicate the condition
+  from the BuildRequires section.
+