Packages changed:
  apparmor (3.0.3 -> 3.0.4)
  appstream-glib (0.7.18 -> 0.7.18+30)
  augeas
  autofs
  avahi
  btrfsprogs (5.16 -> 5.16.1)
  busybox-links
  dhcp
  gcc11
  gdbm (1.22 -> 1.23)
  glib2 (2.70.3 -> 2.70.4)
  glib2-branding-openSUSE
  glibc (2.34 -> 2.35)
  gobject-introspection
  grep
  grub2
  haproxy
  harfbuzz (3.2.0 -> 3.3.2)
  installation-images-MicroOS (17.39 -> 17.42)
  iputils
  kdump
  kernel-source (5.16.5 -> 5.16.10)
  keylime
  kubernetes1.23
  lcms2 (2.13 -> 2.13.1)
  libapparmor (3.0.3 -> 3.0.4)
  libgpg-error (1.43 -> 1.44)
  libnetfilter_conntrack (1.0.8 -> 1.0.9)
  libnvme (1.0~2 -> 1.0~3)
  libpeas
  libproxy
  libqmi (1.30.2 -> 1.30.4)
  librsvg (2.52.5 -> 2.52.6)
  libsemanage
  libzypp (17.29.3 -> 17.29.4)
  multipath-tools (0.8.8+45+suse.628d603e -> 0.8.8+64+suse.f265f7e0)
  nvme-cli (2.0~2 -> 2.0~3)
  open-iscsi
  openssl-1_1
  pam-config (1.5 -> 1.6)
  pango (1.50.3 -> 1.50.4)
  patterns-base
  python-alembic (1.7.5 -> 1.7.6)
  python-charset-normalizer (2.0.10 -> 2.0.12)
  python-cryptography
  python-distro (1.6.0 -> 1.7.0)
  python-pandas (1.4.0 -> 1.4.1)
  python-pyOpenSSL (21.0.0 -> 22.0.0)
  python-pyparsing (3.0.6 -> 3.0.7)
  python-semanage
  python-setuptools (57.4.0 -> 58.3.0)
  rook
  rpm-config-SUSE (0.g93 -> 0.g96)
  salt
  selinux-policy
  sg3_utils (1.47+2.388b767 -> 1.47+3.adb7276)
  spice-vdagent (0.21.0 -> 0.22.1)
  sssd (2.6.2 -> 2.6.3)
  sudo
  systemd
  systemd-rpm-macros (15 -> 16)
  sysuser-tools
  u-boot-rpiarm64
  vim (8.2.4286 -> 8.2.4375)
  wireless-regdb (20211209 -> 20220108)
  wpa_supplicant
  yast2 (4.4.43 -> 4.4.45)

=== Details ===

==== apparmor ====
Version update (3.0.3 -> 3.0.4)
Subpackages: apparmor-abstractions apparmor-parser apparmor-profiles apparmor-utils python3-apparmor

- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch

==== appstream-glib ====
Version update (0.7.18 -> 0.7.18+30)

- Update to version 0.7.18+30:
  * libappstream-builder: Fix file paths in icon tarball
- Update to version 0.7.18+29:
  * Updated translations.
- Improve _service file to handle to drop +0 in versions for when
  we are exactly on a tag.
- Update to version 0.7.18+28:
  * as-app: Also unwrap description in metainfo files
  * Fix validation of translated captions when LANG is not C
  * Revert "Don't emit legacy component type values"
  * Don't emit legacy component type values
  * its: Sync with appstream
  * Consider AppStream version as a string
  * meson: Check --version-script linker option before using.
  * Update current newest version in AsStore
  * Support em/code tags Some appstream-data packages add <em> and
    </em> or <code> and </code> to the files. Not all package
    manager can handle that. An example would be pamac from Manjaro
  * Update asb-self-test to match current behavior
  * Add validation for duplicate license xml elements
  * builder: make directories as 0755 && umask
  * Do not show a critical warning on <suggests><id/></suggests>
  * libappstream-builder: Fix paths for cached icons
  * as-util: Fix Markdown underlining in appdata-to-news
  * Replace links http://standards.freedesktop.org/... by https in
    README.md
  * Replace a link http://www.freedesktop.org/wiki/... by https in
    README.md
  * as-app: Parse launchables from DEP-11
  * as-app: Parse custom tags from DEP-11
  * as-content-rating: Align the OARS/CSM mappings of sex-*
  * Updated translations.
- Switch to current git head, upstream is not making releases.
- Drop 0001-as-app-Also-unwrap-description-in-metainfo-files.patch:
  Fixed upstream.
- Add patch to fix descriptions in .metainfo.xml files
  (boo#1192243, gh#hughsie/appstream-glib#381):
  * 0001-as-app-Also-unwrap-description-in-metainfo-files.patch

==== augeas ====

- testsuite requires glibc-locale, buildrequire it

==== autofs ====

- Add autofs-Test-TCP-request-correctly-in-nfs_get_info.patch
  Fix bug when rpcbind not visible
  (bsc#1195587 bsc#1195595)

==== avahi ====
Subpackages: libavahi-client3 libavahi-common3

- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).

==== btrfsprogs ====
Version update (5.16 -> 5.16.1)
Subpackages: btrfsprogs-udev-rules libbtrfs0

- Update to 5.16.1
  * mkfs: support DUP on metadata on zoned devices
  * subvol delete: drop warning for root when search ioctl fails
  * check:
  * fix --init-csum-tree to not create checksums for extents that are not
    supposed to have them
  * add check for metadata item levels
  * add udev rule for zoned devices as they require mq-deadline
  * build: fix redefinition of ALIGN on mixed old/new kernel/userspace (5.11)
  * other:
  * typo fixes
  * new tests
  * CI targets updated
  * Removed patches: btrfs-progs-kerncompat-add-local-definition-for-alig.patch (upstream)

==== busybox-links ====
Subpackages: busybox-coreutils busybox-gawk busybox-grep busybox-gzip busybox-hostname busybox-sed busybox-xz

- Drop update-alternatives support

==== dhcp ====
Subpackages: dhcp-client

- modify source if-up.d.dhcpd-restart-hook:
  * fix option parsing
  * do not call /usr/libexec/dhcp/dhcpd directly, use systemd for it

==== gcc11 ====
Subpackages: libgcc_s1 libgfortran5 libgomp1 libstdc++6

- Add gcc11-PIE, similar to gcc-PIE but affecting gcc11 [bsc#1195628]
- Put libstdc++6-pp Requires on the shared library and drop
  to Recoomends.
- Remove sys/rseq.h from include-fixed

==== gdbm ====
Version update (1.22 -> 1.23)

- update to 1.23:
  * Bucket cache switched from balanced tree to hash table
  * Speed up flushing the changed buckets on disk
  * New option codes for gdbm_setopt
  * Enable or disable automatic cache adjustment
- remove obsolete texinfo packaging macros

==== glib2 ====
Version update (2.70.3 -> 2.70.4)
Subpackages: glib2-tools libgio-2_0-0 libglib-2_0-0 libgmodule-2_0-0 libgobject-2_0-0

- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 ?Fix memory leak in
    gio/gdbusauthmechanismsha1.c? to glib-2-70.
  + Updated translations.

==== glib2-branding-openSUSE ====

- Drop gnome-documents from favorite-apps for both openSUSE and
  SLED, package is archived upstream.

==== glibc ====
Version update (2.34 -> 2.35)
Subpackages: glibc-locale-base

- Update to glibc 2.35
  Major new features:
  * Unicode 14.0.0 Support
  * Bump r_version in the debugger interface to 2
  * Support for the C.UTF-8 locale has been added to glibc
  * <math.h> functions that round their results to a narrower type, and
    corresponding <tgmath.h> macros, are added from TS 18661-1:2014, TS
    18661-3:2015 and draft ISO C2X
  * <math.h> functions for floating-point maximum and minimum,
    corresponding to new operations in IEEE 754-2019, and corresponding
    <tgmath.h> macros, are added from draft ISO C2X
  * <math.h> macros for single-precision float constants are added as a
    GNU extension
  * The __STDC_IEC_60559_BFP__ and __STDC_IEC_60559_COMPLEX__ macros are
    predefined as specified in TS 18661-1:2014
  * The exp10 functions in <math.h> now have a corresponding type-generic
    macro in <tgmath.h>
  * The ISO C2X macro _PRINTF_NAN_LEN_MAX has been added to <stdio.h>
  * printf-family functions now support the %b format for output of
    integers in binary, as specified in draft ISO C2X, and the %B variant
    of that format recommended by draft ISO C2X
  * A new DSO sorting algorithm has been added in the dynamic linker that uses
    topological sorting by depth-first search (DFS), solving performance issues
    of the existing sorting algorithm when encountering particular circular
    object dependency cases
  * A new tunable, glibc.rtld.dynamic_sort, can be used to select between
    the two DSO sorting algorithms
  * ABI support for a new function '__memcmpeq'. '__memcmpeq' is meant
    to be used by compilers for optimizing usage of 'memcmp' when its
    return value is only used for its boolean status
  * Support for automatically registering threads with the Linux rseq
    system call has been added
  * A symbolic link to the dynamic linker is now installed under
    /usr/bin/ld.so (or more precisely, '${bindir}/ld.so')
  * All programs and the testsuite in glibc are now built as position independent
    executables (PIE) by default on toolchains and architectures that support it
  * On Linux, a new tunable, glibc.malloc.hugetlb, can be used to
    either make malloc issue madvise plus MADV_HUGEPAGE on mmap and sbrk
    or to use huge pages directly with mmap calls with the MAP_HUGETLB
    flags)
  * The printf family of functions now handles the flagged %#m conversion
    specifier, printing errno as an error constant (similar to strerrorname_np)
  * The function _dl_find_object has been added
  * On Linux, the epoll_pwait2 function has been added
  * The function posix_spawn_file_actions_addtcsetpgrp_np has been added,
    enabling posix_spawn and posix_spawnp to set the controlling terminal in
    the new process in a race free manner
  * Source fortification (_FORTIFY_SOURCE) level 3 is now available for
    applications compiling with glibc and gcc 12 and later
  Deprecated and removed features, and other changes affecting compatibility:
  * On x86-64, the LD_PREFER_MAP_32BIT_EXEC environment variable support
    has been removed since the first PT_LOAD segment is no longer executable
    due to defaulting to -z separate-code
  * The r_version update in the debugger interface makes the glibc binary
    incompatible with GDB
  * Intel MPX support (lazy PLT, ld.so profile, and LD_AUDIT) has been removed
  * The catchsegv script and associated libSegFault.so shared object have
    been removed
  * Support for prelink will be removed in the next release; this includes
    removal of the LD_TRACE_PRELINKING, and LD_USE_LOAD_BIAS, environment
    variables and their functionality in the dynamic loader
  Changes to build and runtime requirements:
  * The audit module interface version LAV_CURRENT is increased to enable
    proper bind-now support
  * The audit interface on aarch64 is extended to support both the indirect
    result location register (x8) and NEON Q register
  Security related changes:
  * CVE-2022-23219: Passing an overlong file name to the clnt_create
    legacy function could result in a stack-based buffer overflow when
    using the "unix" protocol
  * CVE-2022-23218: Passing an overlong file name to the svcunix_create
    legacy function could result in a stack-based buffer overflow
  * CVE-2021-3998: Passing a path longer than PATH_MAX to the realpath
    function could result in a memory leak and potential access of
    uninitialized memory
  * CVE-2021-3999: Passing a buffer of size exactly 1 byte to the getcwd
    function may result in an off-by-one buffer underflow and overflow
    when the current working directory is longer than PATH_MAX and also
    corresponds to the / directory through an unprivileged mount
    namespace
- copy-and-spawn-sgid-double-close.patch,
  fcntl-time-bits-64-redirect.patch, gaiconf-init-double-free.patch,
  gconv-parseconfdir-memory-leak.patch, getcwd-attribute-access.patch,
  glibc-c-utf8-locale.patch, iconv-charmap-close-output.patch,
  ld-show-auxv-colon.patch, ldconfig-leak-empty-paths.patch,
  librt-null-pointer.patch, pthread-kill-fail-after-exit.patch,
  pthread-kill-race-thread-exit.patch, pthread-kill-return-esrch.patch,
  pthread-kill-send-specific-thread.patch,
  pthread-mutexattr-getrobust-np-type.patch,
  setxid-deadlock-blocked-signals.patch,
  sysconf-nprocessors-affinity.patch, x86-string-control-test.patch:
  Removed.

==== gobject-introspection ====
Subpackages: girepository-1_0 libgirepository-1_0-1

- use bash for bash scripts (bsc#1195391)
- Add upstream patches to fix build with meson 0.61.0 and newer:
  + 7c1178069f1c58a05ec56a94ca6ba124215a947b.patch
  + effb1e09dee263cdac4ec593e8caf316e6f01fe2.patch
  + 827494d6415b696a98fa195cbd883b50cc893bfc.patch

==== grep ====

- use glibc-locale to reenable less common locale tests (bsc#1195390)

==== grub2 ====
Subpackages: grub2-arm64-efi grub2-snapper-plugin

- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).

==== haproxy ====

- Add now working CONFIG parameter to sysusers generator

==== harfbuzz ====
Version update (3.2.0 -> 3.3.2)

- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags

==== installation-images-MicroOS ====
Version update (17.39 -> 17.42)

- merge gh#openSUSE/installation-images#577
- remove obsolete systemd-sysvinit package
- 17.42
- merge gh#openSUSE/installation-images#572
- debuginfodeps: blacklist usr/bin/syslinux-mtools
- 17.41
- merge gh#openSUSE/installation-images#554
- Support for new oscrc location
- 17.40

==== iputils ====

- rarpd and rdisc tools are now disabled again [jsc#SLE-23521]

==== kdump ====

- Exclude i586 from SLE builds.

==== kernel-source ====
Version update (5.16.5 -> 5.16.10)

- Revert "config: x86-64: Enable DRM stack for early-boot graphics (boo#1193472)"
  This reverts commit 8e500f570e98a3997e9f4bc80b4c45bba2a50789.
  Going back to efifb/vesafb for now. See boo#1195885 and boo#1195887.
- commit 20d1fcf
- Linux 5.16.10 (bsc#1012628).
- integrity: check the return value of audit_log_start()
  (bsc#1012628).
- audit: don't deref the syscall args when checking the openat2
  open_how::flags (bsc#1012628).
- ima: fix reference leak in asymmetric_verify() (bsc#1012628).
- ima: Remove ima_policy file before directory (bsc#1012628).
- ima: Allow template selection with ima_template[_fmt]= after
  ima_hash= (bsc#1012628).
- ima: Do not print policy rule with inactive LSM labels
  (bsc#1012628).
- mmc: sdhci-of-esdhc: Check for error num after setting mask
  (bsc#1012628).
- mmc: core: Wait for command setting 'Power Off Notification'
  bit to complete (bsc#1012628).
- mmc: sh_mmcif: Check for null res pointer (bsc#1012628).
- can: isotp: fix potential CAN frame reception race in
  isotp_rcv() (bsc#1012628).
- can: isotp: fix error path in isotp_sendmsg() to unlock wait
  queue (bsc#1012628).
- net: phy: marvell: Fix RGMII Tx/Rx delays setting in
  88e1121-compatible PHYs (bsc#1012628).
- net: phy: marvell: Fix MDI-x polarity setting in
  88e1118-compatible PHYs (bsc#1012628).
- NFS: Fix initialisation of nfs_client cl_flags field
  (bsc#1012628).
- NFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes
  (bsc#1012628).
- NFSD: Fix ia_size underflow (bsc#1012628).
- NFSD: Clamp WRITE offsets (bsc#1012628).
- NFSD: Fix offset type in I/O trace points (bsc#1012628).
- NFSD: Fix the behavior of READ near OFFSET_MAX (bsc#1012628).
- NFS: change nfs_access_get_cached to only report the mask
  (bsc#1012628).
- NFSv4 only print the label when its queried (bsc#1012628).
- nfs: nfs4clinet: check the return value of kstrdup()
  (bsc#1012628).
- NFSv4.1: Fix uninitialised variable in devicenotify
  (bsc#1012628).
- NFSv4 remove zero number of fs_locations entries error check
  (bsc#1012628).
- NFSv4 store server support for fs_location attribute
  (bsc#1012628).
- NFSv4.1 query for fs_location attr on a new file system
  (bsc#1012628).
- NFSv4 expose nfs_parse_server_name function (bsc#1012628).
- NFSv4 handle port presence in fs_location server string
  (bsc#1012628).
- SUNRPC allow for unspecified transport time in rpc_clnt_add_xprt
  (bsc#1012628).
- net/sunrpc: fix reference count leaks in
  rpc_sysfs_xprt_state_change (bsc#1012628).
- sunrpc: Fix potential race conditions in
  rpc_sysfs_xprt_state_change() (bsc#1012628).
- irqchip/realtek-rtl: Service all pending interrupts
  (bsc#1012628).
- perf/x86/rapl: fix AMD event handling (bsc#1012628).
- x86/perf: Avoid warning for Arch LBR without XSAVE
  (bsc#1012628).
- sched: Avoid double preemption in __cond_resched_*lock*()
  (bsc#1012628).
- drm/vc4: Fix deadlock on DSI device attach error (bsc#1012628).
- drm: panel-orientation-quirks: Add quirk for the 1Netbook
  OneXPlayer (bsc#1012628).
- net: sched: Clarify error message when qdisc kind is unknown
  (bsc#1012628).
- powerpc/fixmap: Fix VM debug warning on unmap (bsc#1012628).
- s390/module: test loading modules with a lot of relocations
  (bsc#1012628).
- arm64: Add Cortex-X2 CPU part definition (bsc#1012628).
- arm64: errata: Update ARM64_ERRATUM_[2119858|2224489] with
  Cortex-X2 ranges (bsc#1012628).
- scsi: target: iscsi: Make sure the np under each tpg is unique
  (bsc#1012628).
- scsi: ufs: ufshcd-pltfrm: Check the return value of
  devm_kstrdup() (bsc#1012628).
- scsi: qedf: Add stag_work to all the vports (bsc#1012628).
- scsi: qedf: Fix refcount issue when LOGO is received during TMF
  (bsc#1012628).
- scsi: qedf: Change context reset messages to ratelimited
  (bsc#1012628).
- scsi: pm8001: Fix bogus FW crash for maxcpus=1 (bsc#1012628).
- scsi: ufs: Use generic error code in ufshcd_set_dev_pwr_mode()
  (bsc#1012628).
- scsi: ufs: Treat link loss as fatal error (bsc#1012628).
- scsi: myrs: Fix crash in error case (bsc#1012628).
- net: stmmac: reduce unnecessary wakeups from eee sw timer
  (bsc#1012628).
- PM: hibernate: Remove register_nosave_region_late()
  (bsc#1012628).
- drm/amd/display: Correct MPC split policy for DCN301
  (bsc#1012628).
- drm/amdgpu/display: adjust msleep limit in
  dp_wait_for_training_aux_rd_interval (bsc#1012628).
- drm/amdgpu/display: use msleep rather than udelay for long
  delays (bsc#1012628).
- usb: dwc2: gadget: don't try to disable ep0 in
  dwc2_hsotg_suspend (bsc#1012628).
- perf: Always wake the parent event (bsc#1012628).
- nvme-pci: add the IGNORE_DEV_SUBNQN quirk for Intel P4500/P4600
  SSDs (bsc#1012628).
- MIPS: Fix build error due to PTR used in more places
  (bsc#1012628).
- net: stmmac: dwmac-sun8i: use return val of readl_poll_timeout()
  (bsc#1012628).
- arm64: errata: Add detection for TRBE ignored system register
  writes (bsc#1012628).
- arm64: errata: Add detection for TRBE invalid prohibited states
  (bsc#1012628).
- arm64: errata: Add detection for TRBE trace data corruption
  (bsc#1012628).
- arm64: cpufeature: List early Cortex-A510 parts as having
  broken dbm (bsc#1012628).
- kasan: test: fix compatibility with FORTIFY_SOURCE
  (bsc#1012628).
- KVM: eventfd: Fix false positive RCU usage warning
  (bsc#1012628).
- KVM: nVMX: eVMCS: Filter out VM_EXIT_SAVE_VMX_PREEMPTION_TIMER
  (bsc#1012628).
- KVM: nVMX: Also filter MSR_IA32_VMX_TRUE_PINBASED_CTLS when
  eVMCS (bsc#1012628).
- KVM: SVM: Don't kill SEV guest if SMAP erratum triggers in
  usermode (bsc#1012628).
- KVM: VMX: Set vmcs.PENDING_DBG.BS on #DB in STI/MOVSS blocking
  shadow (bsc#1012628).
- KVM: x86: Report deprecated x87 features in supported CPUID
  (bsc#1012628).
- riscv: fix build with binutils 2.38 (bsc#1012628).
- riscv: Fix XIP_FIXUP_FLASH_OFFSET (bsc#1012628).
- riscv: cpu-hotplug: clear cpu from numa map when teardown
  (bsc#1012628).
- riscv/mm: Add XIP_FIXUP for phys_ram_base (bsc#1012628).
- riscv: eliminate unreliable __builtin_frame_address(1)
  (bsc#1012628).
- gfs2: Fix gfs2_release for non-writers regression (bsc#1012628).
- Revert "gfs2: check context in gfs2_glock_put" (bsc#1012628).
- Revert "PCI/portdrv: Do not setup up IRQs if there are no users"
  (bsc#1012628).
- ARM: dts: imx23-evk: Remove MX23_PAD_SSP1_DETECT from hog group
  (bsc#1012628).
- ARM: dts: Fix boot regression on Skomer (bsc#1012628).
- ARM: socfpga: fix missing RESET_CONTROLLER (bsc#1012628).
- nvme-tcp: fix bogus request completion when failing to send AER
  (bsc#1012628).
- ACPI/IORT: Check node revision for PMCG resources (bsc#1012628).
- PM: s2idle: ACPI: Fix wakeup interrupts handling (bsc#1012628).
- drm/amdgpu/display: change pipe policy for DCN 2.0
  (bsc#1012628).
- drm/rockchip: vop: Correct RK3399 VOP register fields
  (bsc#1012628).
- drm/i915: Disable DRRS on IVB/HSW port != A (bsc#1012628).
- ARM: dts: Fix timer regression for beagleboard revision c
  (bsc#1012628).
- ARM: dts: meson: Fix the UART compatible strings (bsc#1012628).
- ARM: dts: meson8: Fix the UART device-tree schema validation
  (bsc#1012628).
- ARM: dts: meson8b: Fix the UART device-tree schema validation
  (bsc#1012628).
- phy: broadcom: Kconfig: Fix PHY_BRCM_USB config option
  (bsc#1012628).
- tee: optee: do not check memref size on return from Secure World
  (bsc#1012628).
- optee: add error checks in optee_ffa_do_call_with_arg()
  (bsc#1012628).
- staging: fbtft: Fix error path in fbtft_driver_module_init()
  (bsc#1012628).
- ARM: dts: imx6qdl-udoo: Properly describe the SD card detect
  (bsc#1012628).
- phy: xilinx: zynqmp: Fix bus width setting for SGMII
  (bsc#1012628).
- phy: stm32: fix a refcount leak in stm32_usbphyc_pll_enable()
  (bsc#1012628).
- ARM: dts: imx7ulp: Fix 'assigned-clocks-parents' typo
  (bsc#1012628).
- arm64: dts: imx8mq: fix mipi_csi bidirectional port numbers
  (bsc#1012628).
- usb: f_fs: Fix use-after-free for epfile (bsc#1012628).
- arm64: Enable Cortex-A510 erratum 2051678 by default
  (bsc#1012628).
- phy: dphy: Correct clk_pre parameter (bsc#1012628).
- gpio: aggregator: Fix calling into sleeping GPIO controllers
  (bsc#1012628).
- NFS: Don't overfill uncached readdir pages (bsc#1012628).
- NFS: Don't skip directory entries when doing uncached readdir
  (bsc#1012628).
- NFS: Avoid duplicate uncached readdir calls on eof
  (bsc#1012628).
- drm/vc4: hdmi: Allow DBLCLK modes even if horz timing is odd
  (bsc#1012628).
- misc: fastrpc: avoid double fput() on failed usercopy
  (bsc#1012628).
- net: sparx5: Fix get_stat64 crash in tcpdump (bsc#1012628).
- netfilter: nft_payload: don't allow th access for fragments
  (bsc#1012628).
- netfilter: ctnetlink: disable helper autoassign (bsc#1012628).
- arm64: dts: meson-g12b-odroid-n2: fix typo 'dio2133'
  (bsc#1012628).
- arm64: dts: meson-sm1-odroid: use correct enable-gpio pin for
  tf-io regulator (bsc#1012628).
- arm64: dts: meson-sm1-bananapi-m5: fix wrong GPIO domain for
  GPIOE_2 (bsc#1012628).
- arm64: dts: meson-sm1-odroid: fix boot loop after reboot
  (bsc#1012628).
- ixgbevf: Require large buffers for build_skb on 82599VF
  (bsc#1012628).
- tcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case
  (bsc#1012628).
- net: mscc: ocelot: fix all IP traffic getting trapped to CPU
  with PTP over IP (bsc#1012628).
- drm/panel: simple: Assign data from panel_dpi_probe() correctly
  (bsc#1012628).
- s390/module: fix building test_modules_helpers.o with clang
  (bsc#1012628).
- ACPI: PM: s2idle: Cancel wakeup before dispatching EC GPE
  (bsc#1012628).
- gpiolib: Never return internal error codes to user space
  (bsc#1012628).
- gpio: sifive: use the correct register to read output values
  (bsc#1012628).
- fbcon: Avoid 'cap' set but not used warning (bsc#1012628).
- SUNRPC: lock against ->sock changing during sysfs read
  (bsc#1012628).
- gve: Recording rx queue before sending to napi (bsc#1012628).
- bonding: pair enable_port with slave_arr_updates (bsc#1012628).
- net: dsa: mv88e6xxx: don't use devres for mdiobus (bsc#1012628).
- net: dsa: ar9331: register the mdiobus under devres
  (bsc#1012628).
- net: dsa: bcm_sf2: don't use devres for mdiobus (bsc#1012628).
- net: dsa: felix: don't use devres for mdiobus (bsc#1012628).
- net: dsa: ocelot: seville: utilize of_mdiobus_register
  (bsc#1012628).
- net: dsa: seville: register the mdiobus under devres
  (bsc#1012628).
- net: dsa: mt7530: fix kernel bug in mdiobus_free() when
  unbinding (bsc#1012628).
- net: dsa: lantiq_gswip: don't use devres for mdiobus
  (bsc#1012628).
- ibmvnic: don't release napi in __ibmvnic_open() (bsc#1012628).
- net: ethernet: litex: Add the dependency on HAS_IOMEM
  (bsc#1012628).
- ipmr,ip6mr: acquire RTNL before calling ip[6]mr_free_table()
  on failure path (bsc#1012628).
- nfp: flower: fix ida_idx not being released (bsc#1012628).
- net: do not keep the dst cache when uncloning an skb dst and
  its metadata (bsc#1012628).
- net: fix a memleak when uncloning an skb dst and its metadata
  (bsc#1012628).
- veth: fix races around rq->rx_notify_masked (bsc#1012628).
- net: mdio: aspeed: Add missing MODULE_DEVICE_TABLE
  (bsc#1012628).
- tipc: rate limit warning for received illegal binding update
  (bsc#1012628).
- net: amd-xgbe: disable interrupts during pci removal
  (bsc#1012628).
- net: dsa: fix panic when DSA master device unbinds on shutdown
  (bsc#1012628).
- drm/amd/pm: fix hwmon node of power1_label create issue
  (bsc#1012628).
- mptcp: netlink: process IPv6 addrs in creating listening sockets
  (bsc#1012628).
- dpaa2-eth: unregister the netdev before disconnecting from
  the PHY (bsc#1012628).
- ice: fix an error code in ice_cfg_phy_fec() (bsc#1012628).
- ice: fix IPIP and SIT TSO offload (bsc#1012628).
- ice: Fix KASAN error in LAG NETDEV_UNREGISTER handler
  (bsc#1012628).
- ice: Avoid RTNL lock when re-creating auxiliary device
  (bsc#1012628).
- net: mscc: ocelot: fix mutex lock error during ethtool stats
  read (bsc#1012628).
- net: dsa: mv88e6xxx: fix use-after-free in
  mv88e6xxx_mdios_unregister (bsc#1012628).
- vt_ioctl: fix array_index_nospec in vt_setactivate
  (bsc#1012628).
- vt_ioctl: add array_index_nospec to VT_ACTIVATE (bsc#1012628).
- n_tty: wake up poll(POLLRDNORM) on receiving data (bsc#1012628).
- eeprom: ee1004: limit i2c reads to I2C_SMBUS_BLOCK_MAX
  (bsc#1012628).
- usb: dwc2: drd: fix soft connect when gadget is unconfigured
  (bsc#1012628).
- Revert "usb: dwc2: drd: fix soft connect when gadget is
  unconfigured" (bsc#1012628).
- net: usb: ax88179_178a: Fix out-of-bounds accesses in RX fixup
  (bsc#1012628).
- usb: ulpi: Move of_node_put to ulpi_dev_release (bsc#1012628).
- usb: ulpi: Call of_node_put correctly (bsc#1012628).
- usb: dwc3: gadget: Prevent core from processing stale TRBs
  (bsc#1012628).
- usb: gadget: udc: renesas_usb3: Fix host to USB_ROLE_NONE
  transition (bsc#1012628).
- USB: gadget: validate interface OS descriptor requests
  (bsc#1012628).
- usb: gadget: rndis: check size of RNDIS_MSG_SET command
  (bsc#1012628).
- usb: gadget: f_uac2: Define specific wTerminalType
  (bsc#1012628).
- usb: raw-gadget: fix handling of dual-direction-capable
  endpoints (bsc#1012628).
- USB: serial: ftdi_sio: add support for Brainboxes US-159/235/320
  (bsc#1012628).
- USB: serial: option: add ZTE MF286D modem (bsc#1012628).
- USB: serial: ch341: add support for GW Instek USB2.0-Serial
  devices (bsc#1012628).
- USB: serial: cp210x: add NCR Retail IO box id (bsc#1012628).
- USB: serial: cp210x: add CPI Bulk Coin Recycler id
  (bsc#1012628).
- speakup-dectlk: Restore pitch setting (bsc#1012628).
- phy: ti: Fix missing sentinel for clk_div_table (bsc#1012628).
- iio: buffer: Fix file related error handling in
  IIO_BUFFER_GET_FD_IOCTL (bsc#1012628).
- fs/proc: task_mmu.c: don't read mapcount for migration entry
  (bsc#1012628).
- mm: vmscan: remove deadlock due to throttling failing to make
  progress (bsc#1012628).
- mm: memcg: synchronize objcg lists with a dedicated spinlock
  (bsc#1012628).
- seccomp: Invalidate seccomp mode to catch death failures
  (bsc#1012628).
- signal: HANDLER_EXIT should clear SIGNAL_UNKILLABLE
  (bsc#1012628).
- s390/cio: verify the driver availability for path_event call
  (bsc#1012628).
- bus: mhi: pci_generic: Add mru_default for Foxconn SDX55
  (bsc#1012628).
- bus: mhi: pci_generic: Add mru_default for Cinterion MV31-W
  (bsc#1012628).
- x86/sgx: Silence softlockup detection when releasing large
  enclaves (bsc#1012628).
- Makefile.extrawarn: Move -Wunaligned-access to W=1
  (bsc#1012628).
- scsi: lpfc: Remove NVMe support if kernel has NVME_FC disabled
  (bsc#1012628).
- scsi: lpfc: Reduce log messages seen after firmware download
  (bsc#1012628).
- MIPS: octeon: Fix missed PTR->PTR_WD conversion (bsc#1012628).
- arm64: dts: imx8mq: fix lcdif port node (bsc#1012628).
- perf: Fix list corruption in perf_cgroup_switch() (bsc#1012628).
- kconfig: fix missing fclose() on error paths (bsc#1012628).
- docs/ABI: testing: aspeed-uart-routing: Escape asterisk
  (bsc#1012628).
- iommu: Fix potential use-after-free during probe (bsc#1012628).
- Update config files.
- commit 3192082
- Refresh
  patches.suse/drm-i915-Workaround-broken-BIOS-DBUF-configuration-o.patch.
  Update upstream status.
- commit 9ffab43
- Refresh
  patches.suse/drm-i915-Populate-pipe-dbuf-slices-more-accurately-d.patch.
  Update upstream status.
- commit ae6fdf3
- Refresh
  patches.suse/drm-i915-Allow-join_mbus-cases-for-adlp-dbuf-configu.patch.
  Update upstream status.
- commit d6e9958
- config: Disable CONFIG_READ_ONLY_THP_FOR_FS (bsc#1195774)
- commit 4a5d464
- usb: gadget: clear related members when goto fail
  (CVE-2022-24958 bsc#1195905).
- usb: gadget: don't release an existing dev->buf (CVE-2022-24958
  bsc#1195905).
- commit dedbf20
- ALSA: hda/realtek: Fix deadlock by COEF mutex (bsc#1195913).
- ALSA: usb-audio: Don't abort resume upon errors (bsc#1195913).
- ALSA: memalloc: invalidate SG pages before sync (bsc#1195913).
- ALSA: memalloc: Fix dma_need_sync() checks (bsc#1195913).
- commit 86181b2
- constraints: Also adjust disk requirement for x86 and s390.
- commit 9719db0
- constraints: Increase disk space for aarch64
- commit 09c2882
- Linux 5.16.9 (bsc#1012628).
- tipc: improve size validations for received domain records
  (bsc#1012628).
- crypto: api - Move cryptomgr soft dependency into algapi
  (bsc#1012628).
- ksmbd: fix SMB 3.11 posix extension mount failure (bsc#1012628).
- KVM: s390: Return error on SIDA memop on normal guest
  (bsc#1012628).
- moxart: fix potential use-after-free on remove path
  (bsc#1012628).
- ata: libata-core: Fix ata_dev_config_cpr() (bsc#1012628).
- commit 704dc30
- Revert "build initrd without systemd" (bsc#1195775)
  This reverts commit ef4c569b998635a9369390d4e9cfe3a922815c76. systemd is
  needed to at least mount /sys/kernel/security/ during apparmor build.
- commit 5d1f5d2
- rpm/fdupes_relink: dups linking implementation in perl (bsc#1195709)
- rpm/kernel-source.spec.in: use the above
  This is orders of magnitude faster.
- commit 359854d
- Update config files.
  Set CONFIG_FRAMEBUFFER_CONSOLE_LEGACY_ACCELERATION=y on i386. the
  rest to =n. Copied from master branch.
- commit 224cad2
- Linux 5.16.8 (bsc#1012628).
- drm/i915: Disable DSB usage for now (bsc#1012628).
- selinux: fix double free of cond_list on error paths
  (bsc#1012628).
- audit: improve audit queue handling when "audit=1" on cmdline
  (bsc#1012628).
- ipc/sem: do not sleep with a spin lock held (bsc#1012628).
- spi: stm32-qspi: Update spi registering (bsc#1012628).
- ASoC: hdmi-codec: Fix OOB memory accesses (bsc#1012628).
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw()
  (bsc#1012628).
- ASoC: ops: Reject out of bounds values in snd_soc_put_volsw_sx()
  (bsc#1012628).
- ASoC: ops: Reject out of bounds values in snd_soc_put_xr_sx()
  (bsc#1012628).
- ALSA: usb-audio: Correct quirk for VF0770 (bsc#1012628).
- ALSA: hda: Fix UAF of leds class devs at unbinding
  (bsc#1012628).
- ALSA: hda: realtek: Fix race at concurrent COEF updates
  (bsc#1012628).
- ALSA: hda/realtek: Add quirk for ASUS GU603 (bsc#1012628).
- ALSA: hda/realtek: Add missing fixup-model entry for Gigabyte
  X570 ALC1220 quirks (bsc#1012628).
- ALSA: hda/realtek: Fix silent output on Gigabyte X570S Aorus
  Master (newer chipset) (bsc#1012628).
- ALSA: hda/realtek: Fix silent output on Gigabyte X570 Aorus
  Xtreme after reboot from Windows (bsc#1012628).
- ata: libata-core: Introduce ATA_HORKAGE_NO_LOG_DIR horkage
  (bsc#1012628).
- btrfs: don't start transaction for scrub if the fs is mounted
  read-only (bsc#1012628).
- btrfs: fix deadlock between quota disable and qgroup rescan
  worker (bsc#1012628).
- btrfs: fix use-after-free after failure to create a snapshot
  (bsc#1012628).
- Revert "fs/9p: search open fids first" (bsc#1012628).
- drm/nouveau: fix off by one in BIOS boundary checking
  (bsc#1012628).
- drm/i915/adlp: Fix TypeC PHY-ready status readout (bsc#1012628).
- drm/amdgpu: fix a potential GPU hang on cyan skillfish
  (bsc#1012628).
- drm/amd/pm: correct the MGpuFanBoost support for Beige Goby
  (bsc#1012628).
- drm/amd/display: Update watermark values for DCN301
  (bsc#1012628).
- drm/amd/display: watermark latencies is not enough on DCN31
  (bsc#1012628).
- drm/amd/display: Force link_rate as LINK_RATE_RBR2 for 2018 15"
  Apple Retina panels (bsc#1012628).
- nvme-fabrics: fix state check in nvmf_ctlr_matches_baseopts()
  (bsc#1012628).
- mm/debug_vm_pgtable: remove pte entry from the page table
  (bsc#1012628).
- mm/pgtable: define pte_index so that preprocessor could
  recognize it (bsc#1012628).
- mm/kmemleak: avoid scanning potential huge holes (bsc#1012628).
- block: bio-integrity: Advance seed correctly for larger interval
  sizes (bsc#1012628).
- dma-buf: heaps: Fix potential spectre v1 gadget (bsc#1012628).
- IB/hfi1: Fix panic with larger ipoib send_queue_size
  (bsc#1012628).
- IB/hfi1: Fix alloc failure with larger txqueuelen (bsc#1012628).
- IB/hfi1: Fix AIP early init panic (bsc#1012628).
- Revert "fbdev: Garbage collect fbdev scrolling acceleration,
  part 1 (from TODO list)" (bsc#1012628).
- Revert "fbcon: Disable accelerated scrolling" (bsc#1012628).
- fbcon: Add option to enable legacy hardware acceleration
  (bsc#1012628).
- mptcp: fix msk traversal in mptcp_nl_cmd_set_flags()
  (bsc#1012628).
- Revert "ASoC: mediatek: Check for error clk pointer"
  (bsc#1012628).
- RISC-V: KVM: make CY, TM, and IR counters accessible in VU mode
  (bsc#1012628).
- KVM: arm64: Avoid consuming a stale esr value when SError occur
  (bsc#1012628).
- KVM: arm64: Stop handle_exit() from handling HVC twice when
  an SError occurs (bsc#1012628).
- arm64: Add Cortex-A510 CPU part definition (bsc#1012628).
- RDMA/cma: Use correct address when leaving multicast group
  (bsc#1012628).
- RDMA/ucma: Protect mc during concurrent multicast leaves
  (bsc#1012628).
- RDMA/siw: Fix refcounting leak in siw_create_qp() (bsc#1012628).
- IB/rdmavt: Validate remote_addr during loopback atomic tests
  (bsc#1012628).
- RDMA/siw: Fix broken RDMA Read Fence/Resume logic (bsc#1012628).
- RDMA/mlx4: Don't continue event handler after memory allocation
  failure (bsc#1012628).
- ALSA: usb-audio: initialize variables that could ignore errors
  (bsc#1012628).
- ALSA: hda: Fix signedness of sscanf() arguments (bsc#1012628).
- ALSA: hda: Skip codec shutdown in case the codec is not
  registered (bsc#1012628).
- iommu/vt-d: Fix potential memory leak in
  intel_setup_irq_remapping() (bsc#1012628).
- iommu/amd: Fix loop timeout issue in iommu_ga_log_enable()
  (bsc#1012628).
- spi: bcm-qspi: check for valid cs before applying chip select
  (bsc#1012628).
- spi: mediatek: Avoid NULL pointer crash in interrupt
  (bsc#1012628).
- spi: meson-spicc: add IRQ check in meson_spicc_probe
  (bsc#1012628).
- spi: uniphier: fix reference count leak in uniphier_spi_probe()
  (bsc#1012628).
- IB/hfi1: Fix tstats alloc and dealloc (bsc#1012628).
- IB/cm: Release previously acquired reference counter in the
  cm_id_priv (bsc#1012628).
- net: ieee802154: hwsim: Ensure proper channel selection at
  probe time (bsc#1012628).
- net: ieee802154: mcr20a: Fix lifs/sifs periods (bsc#1012628).
- net: ieee802154: ca8210: Stop leaking skb's (bsc#1012628).
- netfilter: nft_reject_bridge: Fix for missing reply from
  prerouting (bsc#1012628).
- net: ieee802154: Return meaningful error codes from the netlink
  helpers (bsc#1012628).
- net/smc: Forward wakeup to smc socket waitqueue after fallback
  (bsc#1012628).
- net: stmmac: dwmac-visconti: No change to ETHER_CLOCK_SEL for
  unexpected speed request (bsc#1012628).
- net: stmmac: properly handle with runtime pm in
  stmmac_dvr_remove() (bsc#1012628).
- net: macsec: Fix offload support for NETDEV_UNREGISTER event
  (bsc#1012628).
- net: macsec: Verify that send_sci is on when setting Tx sci
  explicitly (bsc#1012628).
- net: stmmac: dump gmac4 DMA registers correctly (bsc#1012628).
- net, neigh: Do not trigger immediate probes on NUD_FAILED from
  neigh_managed_work (bsc#1012628).
- net: stmmac: ensure PTP time register reads are consistent
  (bsc#1012628).
- drm: mxsfb: Fix NULL pointer dereference (bsc#1012628).
- drm/kmb: Fix for build errors with Warray-bounds (bsc#1012628).
- drm/i915/overlay: Prevent divide by zero bugs in scaling
  (bsc#1012628).
- drm/i915: Lock timeline mutex directly in error path of
  eb_pin_timeline (bsc#1012628).
- drm/amd: avoid suspend on dGPUs w/ s2idle support when runtime
  PM enabled (bsc#1012628).
- ASoC: rt5682: Fix deadlock on resume (bsc#1012628).
- ASoC: fsl: Add missing error handling in pcm030_fabric_probe
  (bsc#1012628).
- ASoC: xilinx: xlnx_formatter_pcm: Make buffer bytes multiple
  of period bytes (bsc#1012628).
- ASoC: simple-card: fix probe failure on platform component
  (bsc#1012628).
- ASoC: cpcap: Check for NULL pointer after calling
  of_get_child_by_name (bsc#1012628).
- ASoC: max9759: fix underflow in speaker_gain_control_put()
  (bsc#1012628).
- ASoC: codecs: wcd938x: fix incorrect used of portid
  (bsc#1012628).
- ASoC: codecs: lpass-rx-macro: fix sidetone register offsets
  (bsc#1012628).
- ASoC: codecs: wcd938x: fix return value of mixer put function
  (bsc#1012628).
- ASoC: qdsp6: q6apm-dai: only stop graphs that are started
  (bsc#1012628).
- pinctrl: sunxi: Fix H616 I2S3 pin data (bsc#1012628).
- pinctrl: intel: Fix a glitch when updating IRQ flags on a
  preconfigured line (bsc#1012628).
- pinctrl: intel: fix unexpected interrupt (bsc#1012628).
- pinctrl: bcm2835: Fix a few error paths (bsc#1012628).
- btrfs: fix use of uninitialized variable at rm device ioctl
  (bsc#1012628).
- scsi: bnx2fc: Make bnx2fc_recv_frame() mp safe (bsc#1012628).
- nfsd: nfsd4_setclientid_confirm mistakenly expires confirmed
  client (bsc#1012628).
- gve: fix the wrong AdminQ buffer queue index check
  (bsc#1012628).
- bpf: Use VM_MAP instead of VM_ALLOC for ringbuf (bsc#1012628).
- selftests/exec: Remove pipe from TEST_GEN_FILES (bsc#1012628).
- selftests: futex: Use variable MAKE instead of make
  (bsc#1012628).
- tools/resolve_btfids: Do not print any commands when building
  silently (bsc#1012628).
- e1000e: Separate ADP board type from TGP (bsc#1012628).
- rtc: cmos: Evaluate century appropriate (bsc#1012628).
- objtool: Fix truncated string warning (bsc#1012628).
- kvm: add guest_state_{enter,exit}_irqoff() (bsc#1012628).
- kvm/arm64: rework guest entry logic (bsc#1012628).
- perf: Copy perf_event_attr::sig_data on modification
  (bsc#1012628).
- perf stat: Fix display of grouped aliased events (bsc#1012628).
- perf/x86/intel/pt: Fix crash with stop filters in single-range
  mode (bsc#1012628).
- x86/perf: Default set FREEZE_ON_SMI for all (bsc#1012628).
- EDAC/altera: Fix deferred probing (bsc#1012628).
- EDAC/xgene: Fix deferred probing (bsc#1012628).
- ext4: prevent used blocks from being allocated during fast
  commit replay (bsc#1012628).
- ext4: modify the logic of ext4_mb_new_blocks_simple
  (bsc#1012628).
- ext4: fix error handling in ext4_restore_inline_data()
  (bsc#1012628).
- ext4: fix error handling in ext4_fc_record_modified_inode()
  (bsc#1012628).
- ext4: fix incorrect type issue during replay_del_range
  (bsc#1012628).
- net: dsa: mt7530: make NET_DSA_MT7530 select MEDIATEK_GE_PHY
  (bsc#1012628).
- cgroup/cpuset: Fix "suspicious RCU usage" lockdep warning
  (bsc#1012628).
- tools include UAPI: Sync sound/asound.h copy with the kernel
  sources (bsc#1012628).
- gpio: idt3243x: Fix an ignored error return from
  platform_get_irq() (bsc#1012628).
- gpio: mpc8xxx: Fix an ignored error return from
  platform_get_irq() (bsc#1012628).
- selftests: nft_concat_range: add test for reload with no
  element add/del (bsc#1012628).
- selftests: netfilter: check stateless nat udp checksum fixup
  (bsc#1012628).
- Update config files.
- commit 1b44d21
- Refresh
  patches.suse/0001-lib-raid6-Use-strict-priority-ranking-for-pq-gen-ben.patch.
- Refresh
  patches.suse/0001-lib-raid6-skip-benchmark-of-non-chosen-xor_syndrome-.patch.
- Refresh
  patches.suse/cifs-fix-workstation_name-for-multiuser-mounts.patch.
  Update upstream status and move to sorted section.
- commit 9ebef3e
- drm/i915: Workaround broken BIOS DBUF configuration on TGL/RKL
  (bsc#1193640).
- drm/i915: Populate pipe dbuf slices more accurately during
  readout (bsc#1193640).
- drm/i915: Allow !join_mbus cases for adlp+ dbuf configuration
  (bsc#1193640).
- commit 0503f69
- Linux 5.16.7 (bsc#1012628).
- Revert "drm/vc4: hdmi: Make sure the device is powered with CEC"
  again (bsc#1012628).
- Revert "drm/vc4: hdmi: Make sure the device is powered with CEC"
  (bsc#1012628).
- commit 37d59fa
- Linux 5.16.6 (bsc#1012628).
- ovl: fix NULL pointer dereference in copy up warning
  (bsc#1012628).
- tcp: add missing tcp_skb_can_collapse() test in
  tcp_shift_skb_data() (bsc#1012628).
- tcp: fix mem under-charging with zerocopy sendmsg()
  (bsc#1012628).
- af_packet: fix data-race in packet_setsockopt /
  packet_setsockopt (bsc#1012628).
- e1000e: Handshake with CSME starts from ADL platforms
  (bsc#1012628).
- cpuset: Fix the bug that subpart_cpus updated wrongly in
  update_cpumask() (bsc#1012628).
- bpf: Fix possible race in inc_misses_counter (bsc#1012628).
- net: ipa: request IPA register values be retained (bsc#1012628).
- rtnetlink: make sure to refresh master_dev/m_ops in
  __rtnl_newlink() (bsc#1012628).
- net: sched: fix use-after-free in tc_new_tfilter()
  (bsc#1012628).
- fanotify: Fix stale file descriptor in copy_event_to_user()
  (bsc#1012628).
- net: amd-xgbe: Fix skb data length underflow (bsc#1012628).
- net: amd-xgbe: ensure to reset the tx_timer_active flag
  (bsc#1012628).
- i40e: Fix reset path while removing the driver (bsc#1012628).
- i40e: Fix reset bw limit when DCB enabled with 1 TC
  (bsc#1012628).
- ipheth: fix EOVERFLOW in ipheth_rcvbulk_callback (bsc#1012628).
- net/mlx5e: Avoid implicit modify hdr for decap drop rule
  (bsc#1012628).
- net/mlx5: E-Switch, Fix uninitialized variable modact
  (bsc#1012628).
- net/mlx5e: Fix broken SKB allocation in HW-GRO (bsc#1012628).
- net/mlx5e: Fix wrong calculation of header index in HW_GRO
  (bsc#1012628).
- net/mlx5e: Avoid field-overflowing memcpy() (bsc#1012628).
- net/mlx5: Bridge, Fix devlink deadlock on net namespace deletion
  (bsc#1012628).
- net/mlx5e: Don't treat small ceil values as unlimited in HTB
  offload (bsc#1012628).
- net/mlx5: Fix offloading with ESWITCH_IPV4_TTL_MODIFY_ENABLE
  (bsc#1012628).
- net/mlx5e: TC, Reject rules with forward and drop actions
  (bsc#1012628).
- net/mlx5e: Fix module EEPROM query (bsc#1012628).
- net/mlx5: Use del_timer_sync in fw reset flow of halting poll
  (bsc#1012628).
- net/mlx5e: Fix handling of wrong devices during bond netevent
  (bsc#1012628).
- net/mlx5: Bridge, ensure dev_name is null-terminated
  (bsc#1012628).
- net/mlx5: Bridge, take rtnl lock in init error handler
  (bsc#1012628).
- net/mlx5e: TC, Reject rules with drop and modify hdr action
  (bsc#1012628).
- net/mlx5e: IPsec: Fix tunnel mode crypto offload for non
  TCP/UDP traffic (bsc#1012628).
- net/mlx5e: IPsec: Fix crypto offload for non TCP/UDP
  encapsulated traffic (bsc#1012628).
- lockd: fix failure to cleanup client locks (bsc#1012628).
- lockd: fix server crash on reboot of client holding lock
  (bsc#1012628).
- ovl: don't fail copy up if no fileattr support on upper
  (bsc#1012628).
- net: phy: Fix qca8081 with speeds lower than 2.5Gb/s
  (bsc#1012628).
- Revert "mm/gup: small refactoring: simplify try_grab_page()"
  (bsc#1012628).
- cgroup-v1: Require capabilities to set release_agent
  (bsc#1012628).
- drm/vc4: hdmi: Make sure the device is powered with CEC
  (bsc#1012628).
- net: ipa: prevent concurrent replenish (bsc#1012628).
- net: ipa: use a bitmap for endpoint replenish_enabled
  (bsc#1012628).
- selftests: mptcp: fix ipv6 routing setup (bsc#1012628).
- PCI: pciehp: Fix infinite loop in IRQ handler upon power fault
  (bsc#1012628).
- commit 1e2a324
- Refresh patches.suse/Input-elan_i2c-Add-deny-list-for-Lenovo-Yoga-Slim-7.patch
  Fix section mistmatch warning
- commit 1f97ae0

==== keylime ====
Subpackages: keylime-agent keylime-config keylime-firewalld keylime-registrar keylime-tpm_cert_store keylime-verifier python38-keylime

- Change back agent_uuid to hostname
- Set tpm_hash_alg to sha256 by default
- Update version.diff patch to point to the correct version number
- Fix issue with Tornado, when multiple workers are started
  * Add cloud_verifier_tornado-use-fork_processes.patch (bsc#1195605)

==== kubernetes1.23 ====
Subpackages: kubernetes1.23-client kubernetes1.23-client-common kubernetes1.23-kubeadm kubernetes1.23-kubelet kubernetes1.23-kubelet-common

- avoid bashism in client-common postinstall script (bsc#1195391)

==== lcms2 ====
Version update (2.13 -> 2.13.1)

- update to 2.13.1:
  * Fix a bug on grayscale that made printing gray on white paper
  * Added support for premultiplied alpha
  * tifficc can now handle alpha channels, both unassociated and premultiplied
  * Better documentation
  * CGATS parser can now deal with very long strings
  * Added Projects for Visual Studio 2020
  * Travis CI discontinued, GitHub actions used instead
  * Added a very preliminary meson build script (thanks to xclaesse)
  * Added ARM64 target to visual studio 2019 (thanks to gaborkertesz-linaro)
  * Added thread safe code to get time
  * Added automatic linear space detection
  * Added cmsGetStageContextID function
  * Added cmsDetectRGBProfileGamma
  * configure now accepts --without-fastfloat to turn plugin off
  * autogen.sh has now a --distclean toggle to get rid of all autotools generated files
  * Checked to work on STM32 Cortex-A, Cortex-M families
  * Bug & typos fixing (thanks to many reporters and contributors)
  * Fixed mem leaks and out-of bounds accesses as reported by fuzzer

==== libapparmor ====
Version update (3.0.3 -> 3.0.4)

- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch

==== libgpg-error ====
Version update (1.43 -> 1.44)

- Update to 1.44:
  * Fix dependency to gpg-error-config-test.sh.
  * Run the posix locking test only on supported platforms.
  * Detect Linux systems using musl.
  * Fix gpg-error-config-test for PKG_CONFIG_LIBDIR.
  * Fix returning of option attributes for options with args.
  * Add Turkish translations.

==== libnetfilter_conntrack ====
Version update (1.0.8 -> 1.0.9)

- Update to release 1.0.9
  * This release comes with the new nfct_nlmsg_build_filter()
    function that allows to add metadata for kernel-side
    filtering of conntrack entries during conntrack table dump.
  * The nfct_query() API supports the new NFCT_Q_FLUSH_FILTER
    argument, it allows to flush only IPv6 or IPv4 entries from
    the connection tracking table.

==== libnvme ====
Version update (1.0~2 -> 1.0~3)

- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it

==== libpeas ====

- Add upstream bug fix patches:
  + a9d2ba590641d832dcf6b97184687b6eb424c00f.patch: icons: Update
    icon licenses
  + dfc763c16c0ce66a180ccb13205f1ca9666278a8.patch: icons: Correct
    icon licenses again
  + 2a976339f444d70f10949901a6ee2b1f8ccb24b6.patch: Build: add
    embedded-resources.h to libembedded_dep
- Use ldconfig_scriptlets macro for post(un) handling.
- Update our Supplements to current standard.
- Stop removing no longer exisiting la files, not present after the
  switch to meson build system.
- Stop packaging the demo files/sub-package, pass demos=false to
  meson, and add libpeas-demo Obsolets to main lib.
- Remove all traces of already disabled via bcond
  libpeas-loader-python sub-package, there is no chance we will
  package that again.

==== libproxy ====

- Drop gconf2-devel BuildRequires: libproxy was ported to gsettings
  quite some time ago.
- Update our Supplements to current standard.

==== libqmi ====
Version update (1.30.2 -> 1.30.4)

- update to 1.30.4:
  * * meson: switch to use the new python module in meson.
  * * meson: added a new boolean 'man' option in the meson setup to explicitly
    enable or disable building the man pages.
  * * meson: removed the option to detect if rmnet is supported.
  * * meson: multiple updates to use newer meson features like install_dir(),
    install_mode() or summary().
  * * meson: options 'mbim_qmux' and 'qrtr' are enabled by default and must be
    explicitly disabled if they're not needed, there is no attempt to
    autodetect whether they can be enabled or not.
  * qmi-proxy:
  * * Remove assert when attempting to close ghost device.
  * qmi-firmware-update:
  * * Use defaults if FLASH variables not reported, enabling support to flash
    the new Sierra Wireless EM9190 and EM9191 modules.
  * Several other minor improvements and fixes.

==== librsvg ====
Version update (2.52.5 -> 2.52.6)
Subpackages: gdk-pixbuf-loader-rsvg librsvg-2-2

- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.

==== libsemanage ====
Subpackages: libsemanage-conf libsemanage2

- Drop Buildrequires for libustr-devel, not needed anymore

==== libzypp ====
Version update (17.29.3 -> 17.29.4)

- Fix handling of redirected command in-/output (bsc#1195326)
  This fixes delays at the end of zypper operations, where
  zypper unintentionally waits for appdata plugin scripts to
  complete.
- version 17.29.4 (22)

==== multipath-tools ====
Version update (0.8.8+45+suse.628d603e -> 0.8.8+64+suse.f265f7e0)
Subpackages: kpartx libmpath0

- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus
- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)
- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)

==== nvme-cli ====
Version update (2.0~2 -> 2.0~3)

- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation

==== open-iscsi ====
Subpackages: iscsiuio libopeniscsiusr0_2_0

- Updated to latest upstream 2.1.6 as 2.1.6-suse, which contains
  bug fixes and cleanups. See the Changelog for more details.

==== openssl-1_1 ====
Subpackages: libopenssl1_1

- Pull libopenssl-1_1 when updating openssl-1_1 with the same
  version. [bsc#1195792]
- FIPS: Fix function and reason error codes [bsc#1182959]
  * Add openssl-1_1-FIPS-fix-error-reason-codes.patch

==== pam-config ====
Version update (1.5 -> 1.6)

- Update to Version 1.6
  - Create /etc/pam.d if not there
  - Support file option of pam_pwhistory

==== pango ====
Version update (1.50.3 -> 1.50.4)

- Update to version 1.50.4:
  + Tweak synthetic space size.
  + itemize: Try harder to avoid NULL fonts.
  + docs: Some additions.
  + Pass synthetic slant to harfbuzz.
  + Make sloped carets work with uneven scales.
  + Fix serialiation on arm.
  + Avoid an uninitialized variable warning.
  + Reinstate previous behavior of pango_attr_list_splice.
  + Deprecated pango_coverage_ref/unref.
  + Fix serialization on non-glibc systems.
  + Fix allow-breaks handling.

==== patterns-base ====
Subpackages: patterns-base-apparmor patterns-base-bootloader patterns-base-minimal_base

- No longer recommend apparmor pattern by enhanced_base:
  installations using YaST have the LSM selected during
  installation. Other setups might just as well pick SELinux.

==== python-alembic ====
Version update (1.7.5 -> 1.7.6)

- update to 1.7.6:
  * Add a new command alembic ensure_version, which will ensure that the Alembic
    version table is present in the target database, but does not alter its
    contents.
  * Fixed regression where usage of a with_variant() datatype in conjunction with
    the existing_type option of op.alter_column() under batch mode would lead to an
    internal exception.
  * Implemented support for recognizing and rendering SQLAlchemy ?variant? types
    going forward into SQLAlchemy 2.0, where the architecture of ?variant?
    datatypes will be changing.
  * Added a rule to the MySQL impl so that the translation between JSON / LONGTEXT
    is accommodated by autogenerate, treating LONGTEXT from the server as
    equivalent to an existing JSON in the model.
  * Removed a warning raised by SQLAlchemy when dropping constraints on MSSQL
    regarding statement caching.

==== python-charset-normalizer ====
Version update (2.0.10 -> 2.0.12)

- update to 2.0.12:
  * ASCII miss-detection on rare cases (PR #170)
  * Explicit support for Python 3.11 (PR #164)
  * The logging behavior have been completely reviewed, now using only TRACE
    and DEBUG levels

==== python-cryptography ====

- split tests in a multibuild variant to optimize rebuild time a bit

==== python-distro ====
Version update (1.6.0 -> 1.7.0)

- remove shebang from distro.py
- update to version 1.7.0:
  - BACKWARD COMPATIBILITY:
  - Dropped support for EOL Pythons 2.7, 3.4 and 3.5 [[#281](https://github.com/python-distro/distro/pull/281)]
  - Dropped support for LSB and `uname` back-ends when `--root-dir` is specified [[#311](https://github.com/python-distro/distro/pull/311)]
  - Moved `distro.py` to `src/distro/distro.py` [[#315](https://github.com/python-distro/distro/pull/315)]
  - ENHANCEMENTS:
  - Documented that `distro.version()` can return an empty string on rolling releases [[#312](https://github.com/python-distro/distro/pull/312)]
  - Documented support for Python 3.10 [[#316](https://github.com/python-distro/distro/pull/316)]
  - Added official support for Rocky Linux distribution [[#318](https://github.com/python-distro/distro/pull/318)]
  - Added a shebang to `distro.py` to allow standalone execution [[#313](https://github.com/python-distro/distro/pull/313)]
  - Added support for AIX platforms [[#311](https://github.com/python-distro/distro/pull/311)]
  - Added compliance for PEP-561 [[#315](https://github.com/python-distro/distro/pull/315)]
  - BUG FIXES:
  - Fixed `include_uname` parameter oversight [[#305](https://github.com/python-distro/distro/pull/305)]
  - Fixed crash when `uname -rs` output is empty [[#304](https://github.com/python-distro/distro/pull/304)]
  - Fixed Amazon Linux identifier in `distro.id()` documentation [[#318](https://github.com/python-distro/distro/pull/318)]
  - Fixed OpenSuse >= 15 support [[#319](https://github.com/python-distro/distro/pull/319)]
  - Fixed encoding issues when opening distro release files [[#324](https://github.com/python-distro/distro/pull/324)]
  - Fixed `linux_distribution` regression introduced in [[#230](https://github.com/python-distro/distro/pull/230)] [[#325](https://github.com/python-distro/distro/pull/325)]

==== python-pandas ====
Version update (1.4.0 -> 1.4.1)

- update to version 1.4.1:
  * Fixed regressions
    + Regression in Series.mask() with inplace=True and PeriodDtype
    and an incompatible other coercing to a common dtype instead of
    raising (GH45546)
    + Regression in assert_frame_equal() not respecting
    check_flags=False (GH45554)
    + Regression in DataFrame.loc() raising ValueError when indexing
    (getting values) on a MultiIndex with one level (GH45779)
    + Regression in Series.fillna() with downcast=False incorrectly
    downcasting object dtype (GH45603)
    + Regression in api.types.is_bool_dtype() raising an
    AttributeError when evaluating a categorical Series (GH45615)
    + Regression in DataFrame.iat() setting values leading to not
    propagating correctly in subsequent lookups (GH45684)
    + Regression when setting values with DataFrame.loc() losing Index
    name if DataFrame was empty before (GH45621)
    + Regression in join() with overlapping IntervalIndex raising an
    InvalidIndexError (GH45661)
    + Regression when setting values with Series.loc() raising with
    all False indexer and Series on the right hand side (GH45778)
    + Regression in read_sql() with a DBAPI2 connection that is not an
    instance of sqlite3.Connection incorrectly requiring SQLAlchemy
    be installed (GH45660)
    + Regression in DateOffset when constructing with an integer
    argument with no keywords (e.g. pd.DateOffset(n)) would behave
    like datetime.timedelta(days=0) (GH45643, GH45890)
  * Bug fixes
    + Fixed segfault in DataFrame.to_json() when dumping tz-aware
    datetimes in Python 3.10 (GH42130)
    + Stopped emitting unnecessary FutureWarning in
    DataFrame.sort_values() with sparse columns (GH45618)
    + Fixed window aggregations in DataFrame.rolling() and
    Series.rolling() to skip over unused elements (GH45647)
    + Fixed builtin highlighters in Styler to be responsive to NA with
    nullable dtypes (GH45804)
    + Bug in apply() with axis=1 raising an erroneous ValueError
    (GH45912)
  * Other
    + Reverted performance speedup of DataFrame.corr() for
    method=pearson to fix precision regression (GH45640, GH42761)

==== python-pyOpenSSL ====
Version update (21.0.0 -> 22.0.0)

- update to 22.0.0:
  - Drop support for Python 2.7.
  - The minimum ``cryptography`` version is now 35.0.
  - Expose wrappers for some `DTLS
    <https://en.wikipedia.org/wiki/Datagram_Transport_Layer_Security>`_
    primitives.
- drop check_inv_ALPN_lists.patch: upstream

==== python-pyparsing ====
Version update (3.0.6 -> 3.0.7)

- specfile:
  * update copyright year
- update to version 3.0.7:
  * Fixed bug #345, in which delimitedList changed expressions in
    place using expr.streamline(). Reported by Kim Gräsman, thanks!
  * Fixed bug #346, when a string of word characters was passed to
    WordStart or WordEnd instead of just taking the default
    value. Originally posted as a question by Parag on StackOverflow,
    good catch!
  * Fixed bug #350, in which White expressions could fail to match due
    to unintended whitespace-skipping. Reported by Fu Hanxi, thank
    you!
  * Fixed bug #355, when a QuotedString is defined with characters in
    its quoteChar string containing regex-significant characters such
    as ., *, ?, [, ], etc.
  * Fixed bug in ParserElement.run_tests where comments would be
    displayed using with_line_numbers.
  * Added optional "min" and "max" arguments to `delimited_list`. PR
    submitted by Marius, thanks!
  * Added new API change note in `whats_new_in_pyparsing_3_0_0`,
    regarding a bug fix in the `bool()` behavior of `ParseResults`.
  * Prior to pyparsing 3.0.x, the `ParseResults` class implementation
    of `__bool__` would return `False` if the `ParseResults` item list
    was empty, even if it contained named results. In 3.0.0 and later,
    `ParseResults` will return `True` if either the item list is not
    empty *or* if the named results dict is not empty.
  * Minor enhancement to Word generation of internal regular
    expression, to emit consecutive characters in range, such as "ab",
    as "ab", not "a-b".
  * Fixed character ranges for search terms using non-Western
    characters in booleansearchparser, PR submitted by tc-yu, nice
    work!
  * Additional type annotations on public methods.

==== python-semanage ====

- Drop Buildrequires for libustr-devel, not needed anymore

==== python-setuptools ====
Version update (57.4.0 -> 58.3.0)

- update to 58.3.0:
  * ``setup.py install`` and ``easy_install`` commands are now officially
    deprecated. Use other standards-based installers (like pip) and builders (like
    build). Workloads reliant on this behavior should pin to this major version of
    Setuptools.
  * #1988: Deprecated the ``bdist_rpm`` command.
  * #2785: Replace confirparser's readfp with read_file, deprecated since Python 3.2.
  * #2823: Officially deprecated support for ``setup_requires``. Users are
    encouraged instead to migrate to PEP 518 ``build-system.requires`` in
    ``pyproject.toml``. Users reliant on ``setup_requires`` should consider
    pinning to this major version to avoid disruption.
  * #2762: Changed codecov.yml to configure the threshold to be lower
  * #2757: Add windows arm64 launchers for scripts generated by easy_install.
  * #2800: Added ``--owner`` and ``--group`` options to the ``sdist`` command,
    for specifying file ownership within the produced tarball (similarly
    to the corresponding distutils ``sdist`` options).
  * #2792: Document how the legacy and non-legacy versions are compared, and
    reference to the `PEP 440 <https://www.python.org/dev/peps/pep-0440/>`_
    scheme.
  * #2773: Retain case in setup.cfg during sdist.
  * #2777: Build does not fail fast when ``use_2to3`` is supplied but set to a
    false value.
  * #2769: Build now fails fast when ``use_2to3`` is supplied.
  * #2765: In Distribution.finalize_options, suppress known removed entry points
    to avoid issues with older Setuptools.
  * #2086: Removed support for 2to3 during builds. Projects should port to a
    unified codebase or pin to an older version of Setuptools using PEP 518
    build-requires.
  * #2712: Added implicit globbing support for `[options.data_files]` values.
  * #2737: fix various syntax and style errors in code snippets in docs

==== rook ====

- avoid bashism in post scripts (bsc#1195391)

==== rpm-config-SUSE ====
Version update (0.g93 -> 0.g96)

- Update to version 0.g96:
  * changes
  * Avoid bash specific construct

==== salt ====
Subpackages: python3-salt salt-master salt-minion salt-standalone-formulas-configuration salt-transactional-update

- Update generated documentation to 3004
- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch
- Fix salt-call event.send with pillar or grains
- Added:
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch

==== selinux-policy ====
Subpackages: selinux-policy-targeted

- Updated fix_cron.patch. Adjust labeling for at (bsc#1195683)
- Fix bitlbee runtime directory (bsc#1193230)
  * add fix_bitlbee.patch

==== sg3_utils ====
Version update (1.47+2.388b767 -> 1.47+3.adb7276)
Subpackages: libsgutils2-1_47-2

- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)

==== spice-vdagent ====
Version update (0.21.0 -> 0.22.1)

- Update to version 0.22.1. Features and Issues addressed:
  * !40 - Handle side mouse buttons
  * !39 - Set retry limit to connect to vdagentd and improve logging error
  * !35 - Fix deprecation warning
  * !37 - Provide systemd spice-vdagent.service
  Do not process X11 events in vdagent_x11_create
  Drop upstream signature file as having "No public key"
- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_spice-vdagentd.service.patch

==== sssd ====
Version update (2.6.2 -> 2.6.3)
Subpackages: libsss_certmap0 libsss_idmap0 libsss_nss_idmap0 sssd-krb5-common sssd-ldap

- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)
- Update to release 2.6.3
  * A regression introduced in sssd-2.6.2 in the IPA provider
    that prevented users from login was fixed. Access control
    always denied access because the selinux_child returned an
    unexpected reply.
  * A critical regression that prevented authentication of users
    via AD and IPA providers was fixed. LDAP port was reused for
    Kerberos communication and this provider would send
    incomprehensible information to this port.
  * When authenticating AD users, backtrace was triggered even
    though everything was working correctly. This was caused by a
    search in the global catalog. Servers from the global catalog
    are filtered out of the list before writing the KDC info
    file. With this fix, SSSD does not attempt to write to the
    KDC info file when performing a GC lookup.

==== sudo ====

- Restrict use of sudo -U other -l to people who have permission
  to run commands as that user (bsc#1181703, jsc#SLE-22569)
  * feature-upstream-restrict-sudo-U-other-l.patch

==== systemd ====
Subpackages: libsystemd0 libudev1 udev

- Drop enablement symlink migration support of SysV init scripts
  And let's finish reducing the support of SysV init scripts to its minimum.
- spec: fix dependencies for mini variants
  Make sure that all mini variants won't be installed in real systems and won't
  be involved when building medias with kiwi. Note that sub-packages that
  requires systemd (such as udev) don't need any special treatment since the
  specific deps are inherited from the main (mini) package.
- spec: simplify systemd-mini-doc dependencies by assuming that the doc
  sub-package can't be a build requirement for other packages.
- spec: libsystemd-mini and libudev-mini need to provide libsystemd and libudev
  respectively
- Rename systemd-sysvinit into systemd-sysvcompat
  systemd-sysvinit was probably provided to allow systems to switch from
  sysvinit to systemd by overwriting /sbin/init with a link to systemd. But this
  isn't very useful anymore due to the fact that sysvinit is not supported since
  several years. Therefore the subpackage contains now the files needed to keep
  backward compatibility with SysV init scripts (most notably sysv-generator)
  and has been renamed accordingly. The few files that are not specific to
  sysvinit (such as /bin/init) have been moved to the main package.
  Normally this new subpackage shouldn't be needed (since all packages use
  systemd unit files) unless a 3rd party application is installed and still
  relies on SysV init scripts.
- systemd.spec: explicitely turn on/off build options
  Hence a feature can't be accidentally turned on/off because its dep is pulled
  in or removed due to another feature being turned on/off.

==== systemd-rpm-macros ====
Version update (15 -> 16)

- Bump to version 16
- Drop enablement symlink migration support of SysV init scripts
  This was announced here:
  https://lists.opensuse.org/archives/list/factory@lists.opensuse.org/thread/3ERUP5ZZJ6PPA36L3HVN46BH6U6JL74O/

==== sysuser-tools ====

- invoke bash for bash scripts (bsc#1195391)

==== u-boot-rpiarm64 ====
Subpackages: u-boot-rpiarm64-doc

- Add nanopc-t4-rk3399 and nanopi-m4b-rk3399 flavor

==== vim ====
Version update (8.2.4286 -> 8.2.4375)
Subpackages: vim-data-common vim-small

-  Updated to version 8.2.4375, fixes the following problems
  * Vim9: strict type checking after copy() and deepcopy().
  * Cannot assign empty list with any list type to variable with specific
  list type.
  * Preprocessor indents are inconsistent.
  * Warnings reported by MSVC.
  * Error number used twice.
  * Test fails.
  * Vim9: when copying a list it gets type list<any> even when the original
  list did not have a type.
  * Vim9: concatenating two lists may result in wrong type.
  * Vim9: not all code covered by tests.
  * Vim9: not all code covered by tests.
  * Divide by zero with huge tabstop value.
  * SafeState autocommand interferes with debugging.
  * Cannot build tiny version. (Tony Mechelynck)
  * Vim9: type error for copy of dict.
  * Vim9: return type of getline() is too strict.
  * A few messages should not be translated.
  * Vim9: slice() makes a copy but doesn't change the type.
  * Tex filetype detection fails.
  * No test for fixed perl filetype check.
  * A few more messages should not be translated.
  * Vim9: cannot list autoload function.
  * Vim9: crash when using a partial in the wrong context.
  * Vim9: constant list and dict get a declaration type other than "any".
  * Vim9: changing script variable type not caught at compile time.
  * No error for using :vim9script in a :def function.
  * Vim9: cannot change type of list after making a slice.
  * Test fails where lines are skipped.
  * Put in Visual mode not fully tested.
  * Various comment and indent mistakes, returning wrong zero.
  * :put does not work properly in compiled function. (John Beckett)
  * Athena and Motif: when maximized scrollbar position is wrong.
  * Vim9: crash when using a funcref to a closure.
  * Vim9: crash when using funcref with closure.
  * Vim9: nested function name can start with "_".
  * Vim9: script-local function name can start with "_".
  * 'wildmenu' only shows few matches.
  * "o" and "O" copying comment not sufficiently tested.
  * May end up with no current buffer.
  * Command line complete matches cleard when typing character. (Dominique
  Pellé)
  * No support for end line number and column in 'errorformat'.
  * Vim9: no error if script imports itself.
  * Vim9: no test for existing script variable in block.
  * Vim9: incomplete test for existing script variable in block.
  * cstack not always passed to where it is needed.
  * Command line popup menu not positioned correctly.
  * No autocommand event triggered before changing directory. (Ronnie Magatti)
  * Using :filter for :scriptnames does not work. (Ben Jackson)
  * Part of condition is always true.
  * An error from an expression mapping messes up the display.
  * CTRL-A does not work properly with the cmdline popup menu.
  * Command line not redrawn when finishing popup menu and the screen has
  scrolled up.
  * CI will soon switch to other windows version.
  * When reloading not all properties are detected.
  * <amatch> is expanded like a file name for DirChangedPre.
  * A custom statusline may cause Esc to work like Enter on the command line
  when the popup menu is displayed.
  * In some build setups UNUSED is not defined.
  * "legacy exe cmd" does not do what one would expect.
  * FEAT_GUI_ENABLED defined but never used.
  * No coverage is measured on MS-Windows CI.
  * ReScript files are not recognized.
  * CI does not use the latest Lua and Python.
  * Dynamic loading of libsodium not handled properly.
  * Unnecessary call to check_colorcolumn().
  * Command line completion functions are very long.
  * sticky command modifiers are too sticky.
  * Vim9: line number of exception is not set.
  * crash when repeatedly using :retab.
  * Vim9: allowing use of "s:" leads to inconsistencies.
  * Vim9: some tests fail.
  * :retab may allocate too much memory.
  * sticky command modifiers are too sticky.
  * Not enough tests for command line completion.
  * Calling in_vim9script() multiple times.
  * Amiga: a few compiler warnings.
  * Redundant #ifdef argument.
  * MS-Windows: libsodium.dll not included with the installer.
  * Vim9: can create a script variable from a legacy function.
  * Filetype detection from file contents is in legacy script.
  * Expression test fails.
  * Unreachable code.
  * ctx_imports is not used.

==== wireless-regdb ====
Version update (20211209 -> 20220108)

- Update to version 20220108:
  * wireless-regdb: Update regulatory rules for Croatia (HR) on 6GHz

==== wpa_supplicant ====

- Apply Revert-DBus-Add-sae-to-interface-key_mgmt-capabilities.patch
  to fix connect with AVM FB, if WPA3 transition mode is activated,
  e.g. Wifi -> Security: is WPA2 + WPA3, alt. switch to WPA2 (CCMP)
  (bsc#1195312)
- drop restore-old-dbus-interface.patch, wicked has been
  switching to the new dbus interface in version 0.6.66.
- drop wpa_supplicant-getrandom.patch : glibc has been updated
  so the getrandom() wrapper is now there
- config:
  * enable QCA vendor extensions to nl80211
  * enable EAP-EKE
  * Support HT overrides
  * WPA3-Enterprise
  * TLS v1.1 and TLS v1.2
  * Fast Session Transfer (FST)
  * Automatic Channel Selection
  * Multi Band Operation
  * Fast Initial Link Setup
  * Mesh Networking (IEEE 802.11s)
- config:
  * Reenable Fast BSS Transition (likely fixing bsc#1195312)
  * Enable OCV, security feature that prevents MITM
    multi-channel attacks
  * Enable OWE for better hotspot support

==== yast2 ====
Version update (4.4.43 -> 4.4.45)

- do not strip surrounding white space in CDATA XML elements (bsc#1195910)
- 4.4.45
- Keep the user defined $Y2STYLE and $XCURSOR_THEME environment
  variables, allow changing the installer theme via these
  environment variables (related to jsc#SLE-20547)
- 4.4.44