Removed rpms ============ - NetworkManager-openconnect-gnome - NetworkManager-pptp-gnome - abseil-cpp - flatpak-remote-flathub - libappstream4 Added rpms ========== - libabsl2401_0_0 - libzxcvbn0 Package Source Changes ====================== MozillaFirefox +- Firefox Extended Support Release 115.9.1esr ESR + * Fixed: Security fix. + MFSA 2024-16 (bsc#1221850) + * CVE-2024-29944 (bmo#1886852) + Privileged JavaScript Execution via Event Handlers + +- Firefox Extended Support Release 115.9.0 ESR + * Fixed: Various security fixes and other quality improvements. + MFSA 2024-13 (bsc#1221327) + * CVE-2024-0743 (bmo#1867408) + Crash in NSS TLS method + * CVE-2024-2605 (bmo#1872920) + Windows Error Reporter could be used as a Sandbox escape + vector + * CVE-2024-2607 (bmo#1879939) + JIT code failed to save return registers on Armv7-A + * CVE-2024-2608 (bmo#1880692) + Integer overflow could have led to out of bounds write + * CVE-2024-2616 (bmo#1846197) + Improve handling of out-of-memory conditions in ICU + * CVE-2023-5388 (bmo#1780432) + NSS susceptible to timing attack against RSA decryption + * CVE-2024-2610 (bmo#1871112) + Improper handling of html and body tags enabled CSP nonce + leakage + * CVE-2024-2611 (bmo#1876675) + Clickjacking vulnerability could have led to a user + accidentally granting permissions + * CVE-2024-2612 (bmo#1879444) + Self referencing object could have potentially led to a use- + after-free + * CVE-2024-2614 (bmo#1685358, bmo#1861016, bmo#1880405, + bmo#1881093) + Memory safety bugs fixed in Firefox 124, Firefox ESR 115.9, + and Thunderbird 115.9 + -- Mozilla Firefox ESR 115.8 - MFSA 2024-UNKNOWN (bsc#1220048) - * NO CVE-NUMBER ASSIGNED YET (bmo#1843752) + MFSA 2024-06 (bsc#1220048) + * CVE-2024-1546 (bmo#1843752) - * NO CVE-NUMBER ASSIGNED YET (bmo#1877879) + * CVE-2024-1547 (bmo#1877879) - * NO CVE-NUMBER ASSIGNED YET (bmo#1832627) + * CVE-2024-1548 (bmo#1832627) - * NO CVE-NUMBER ASSIGNED YET (bmo#1833814) + * CVE-2024-1549 (bmo#1833814) - * NO CVE-NUMBER ASSIGNED YET (bmo#1860065) + * CVE-2024-1550 (bmo#1860065) - * NO CVE-NUMBER ASSIGNED YET (bmo#1864385) + * CVE-2024-1551 (bmo#1864385) - * NO CVE-NUMBER ASSIGNED YET (bmo#1874502) + * CVE-2024-1552 (bmo#1874502) - * NO CVE-NUMBER ASSIGNED YET (bmo#1855686, bmo#1867982, bmo#1871498, + * CVE-2024-1553 (bmo#1855686, bmo#1867982, bmo#1871498, abseil-cpp +- update to 20240116.1: + * Add absl::NoDestructor<T> to simplify defining static types + that do not need to be destructed upon program exit. + * Add configurable verbose logging (also known as VLOG). + * Added absl::Overload(), which returns a functor that provides + overloads based on the functors passed to it. Note that this + functionality requires C++17 or newer. + * Breaking Change: AbslHashValue() no longer accepts C-style + arrays as a parameter, caller need to wrap C-string literals in + absl::string_view. + * Breaking Change: absl::weak_equality and absl::strong_equality + have been removed. The corresponding std types were removed + before C++20 was finalized + apache2 +- Add patches to improve FIPS compatibility (bsc#1220681): + * apache2-fips-compatibility-01.patch + * apache2-fips-compatibility-02.patch + * apache2-fips-compatibility-03.patch + +- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork, + apache2ctl, htpasswd2) change, including the relative + manpages (bsc#1221880) + apache2:manual +- Add patches to improve FIPS compatibility (bsc#1220681): + * apache2-fips-compatibility-01.patch + * apache2-fips-compatibility-02.patch + * apache2-fips-compatibility-03.patch + +- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork, + apache2ctl, htpasswd2) change, including the relative + manpages (bsc#1221880) + apache2:prefork +- Add patches to improve FIPS compatibility (bsc#1220681): + * apache2-fips-compatibility-01.patch + * apache2-fips-compatibility-02.patch + * apache2-fips-compatibility-03.patch + +- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork, + apache2ctl, htpasswd2) change, including the relative + manpages (bsc#1221880) + apache2:utils +- Add patches to improve FIPS compatibility (bsc#1220681): + * apache2-fips-compatibility-01.patch + * apache2-fips-compatibility-02.patch + * apache2-fips-compatibility-03.patch + +- SLE-only: forward-port compatibility symlinks (e.g. httpd2-prefork, + apache2ctl, htpasswd2) change, including the relative + manpages (bsc#1221880) + btrfsprogs +- enable zstd support for 15.6 / SLE15-SP6 build targets (bsc#1221943) + flatpak +- Make flatpak-remote-flathub only supplement flatpak in TW + (bsc#1221662). + glibc +- malloc-arena-get2.patch: malloc: Use __get_nprocs on arena_get2 (BZ + [#30945]) +- sched-getcpu-rseq-area.patch: linux: Use rseq area unconditionally in + sched_getcpu (BZ #31479) + grub2 +- Fix LPAR falls into grub shell after installation with lvm (bsc#1221866) + * 0001-ofdisk-Enhance-canonical-path-handling-for-bootpath.patch + +- Fix memdisk becomes the default boot entry, resolving no graphic display + device error in guest vnc console (bsc#1221779) + * grub2-xen-pv-firmware.cfg + kernel-default +- usb: gadget: tegra-xudc: Fix USB3 PHY retrieval logic (bsc#1221491) +- commit 24e3b19 + +- phy: tegra: xusb: Add API to retrieve the port number of phy (bsc#1221491) +- commit be854b3 + +- Update + patches.suse/arm64-sme-Always-exit-sme_alloc-early-with-existing-.patch + (git-fixes CVE-2024-26618 bsc#1221295). +- Update + patches.suse/btrfs-don-t-abort-filesystem-when-attempting-to-snap.patch + (bsc#1221282 CVE-2024-26644 bsc#1222072). +- Update + patches.suse/btrfs-scrub-avoid-use-after-free-when-chunk-length-i.patch + (bsc#1220943 CVE-2024-26616). +- Update + patches.suse/drm-amd-display-Fix-late-derefrence-dsc-check-in-lin.patch + (git-fixes CVE-2024-26647 bsc#1222066). +- Update + patches.suse/drm-amd-display-Fix-variable-deferencing-before-NULL.patch + (git-fixes CVE-2024-26648 bsc#1222067). +- Update + patches.suse/drm-amdgpu-Fix-the-null-pointer-when-load-rlc-firmwa.patch + (git-fixes CVE-2024-26649 bsc#1222055). +- Update + patches.suse/net-qualcomm-rmnet-fix-global-oob-in-rmnet_policy.patch + (git-fixes CVE-2024-26597 bsc#1220363). +- Update patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch + (bsc#1218968 CVE-2024-26629 bsc#1221379). +- Update + patches.suse/pwm-Fix-out-of-bounds-access-in-of_pwm_single_xlate.patch + (git-fixes CVE-2024-26599 bsc#1220365). +- Update + patches.suse/scsi-core-Move-scsi_host_busy-out-of-host-lock-for-waking-up-EH-handler.patch + (git-fixes CVE-2024-26627 bsc#1221090). +- Update + patches.suse/thermal-intel-hfi-Add-syscore-callbacks-for-system-w.patch + (git-fixes CVE-2024-26646 bsc#1222070). +- Update + patches.suse/tracing-Ensure-visibility-when-inserting-an-element-into-tracing_map.patch + (git-fixes CVE-2024-26645 bsc#1222056). +- Update patches.suse/wifi-iwlwifi-fix-a-memory-corruption.patch + (git-fixes CVE-2024-26610 bsc#1221299). +- Update + patches.suse/x86-fpu-Stop-relying-on-userspace-for-info-to-fault-in-xsa.patch + (bsc#1220335 CVE-2024-26603). +- commit 29c1925 + +- Update + patches.suse/0002-ravb-Fix-use-after-free-issue-in-ravb_tx_timeout_wor.patch + (bsc#1212514 CVE-2023-35827 CVE-2023-52509 bsc#1220836). +- Update + patches.suse/Bluetooth-hci_codec-Fix-leaking-content-of-local_cod.patch + (git-fixes CVE-2023-52518 bsc#1221056). +- Update + patches.suse/EDAC-thunderx-Fix-possible-out-of-bounds-string-acce.patch + (git-fixes CVE-2023-52464 bsc#1220330). +- Update + patches.suse/FS-JFS-UBSAN-array-index-out-of-bounds-in-dbAdjTree.patch + (git-fixes CVE-2023-52604 bsc#1221067). +- Update + patches.suse/HID-intel-ish-hid-ipc-Disable-and-reenable-ACPI-GPE-.patch + (git-fixes CVE-2023-52519 bsc#1220920). +- Update + patches.suse/HID-sony-Fix-a-potential-memory-leak-in-sony_probe.patch + (git-fixes CVE-2023-52529 bsc#1220929). +- Update patches.suse/IB-ipoib-Fix-mcast-list-locking.patch + (jsc#PED-6864 CVE-2023-52587 bsc#1221082). +- Update + patches.suse/PCI-switchtec-Fix-stdev_release-crash-after-surprise.patch + (git-fixes CVE-2023-52617 bsc#1221613). +- Update + patches.suse/PM-devfreq-Fix-buffer-overflow-in-trans_stat_show.patch + (git-fixes CVE-2023-52614 bsc#1221617). +- Update + patches.suse/PM-sleep-Fix-possible-deadlocks-in-core-system-wide-.patch + (git-fixes CVE-2023-52498 bsc#1221269). +- Update + patches.suse/RDMA-siw-Fix-connection-failure-handling.patch + (git-fixes CVE-2023-52513 bsc#1221022). +- Update + patches.suse/RDMA-srp-Do-not-call-scsi_done-from-srp_abort.patch + (git-fixes CVE-2023-52515 bsc#1221048). +- Update + patches.suse/Revert-tty-n_gsm-fix-UAF-in-gsm_cleanup_mux.patch + (git-fixes CVE-2023-52564 bsc#1220938). +- Update + patches.suse/SUNRPC-Fix-a-suspicious-RCU-usage-warning.patch + (git-fixes CVE-2023-52623 bsc#1222060). +- Update + patches.suse/UBSAN-array-index-out-of-bounds-in-dtSplitRoot.patch + (git-fixes CVE-2023-52603 bsc#1221066). +- Update + patches.suse/apparmor-avoid-crash-when-parsed-profile-name-is-emp.patch + (git-fixes CVE-2023-52443 bsc#1220240). +- Update + patches.suse/arm64-dts-qcom-sdm845-db845c-Mark-cont-splash-memory.patch + (git-fixes CVE-2023-52561 bsc#1220935). +- Update + patches.suse/bpf-Check-rcu_read_lock_trace_held-before-calling-bp.patch + (bsc#1220251 CVE-2023-52447 CVE-2023-52621 bsc#1222073). +- Update + patches.suse/bus-mhi-host-Add-alignment-check-for-event-ring-read.patch + (git-fixes CVE-2023-52494 bsc#1221273). +- Update + patches.suse/bus-mhi-host-Drop-chan-lock-before-queuing-buffers.patch + (git-fixes CVE-2023-52493 bsc#1221274). +- Update + patches.suse/cifs-Fix-UAF-in-cifs_demultiplex_thread.patch + (bsc#1208995 CVE-2023-1192 CVE-2023-52572 bsc#1220946). +- Update + patches.suse/class-fix-use-after-free-in-class_register.patch + (git-fixes CVE-2023-52468 bsc#1220431). +- Update + patches.suse/crypto-scomp-fix-req-dst-buffer-overflow.patch + (git-fixes CVE-2023-52612 bsc#1221616). +- Update patches.suse/dccp-fix-dccp_v4_err-dccp_v6_err-again.patch + (bsc#1220419 CVE-2023-52577 bsc#1220873). +- Update + patches.suse/dmaengine-fix-NULL-pointer-in-channel-unregistration.patch + (git-fixes CVE-2023-52492 bsc#1221276). +- Update + patches.suse/drivers-amd-pm-fix-a-use-after-free-in-kv_parse_powe.patch + (git-fixes CVE-2023-52469 bsc#1220411). +- Update + patches.suse/drm-Don-t-unref-the-same-fb-many-times-by-mistake-du.patch + (git-fixes CVE-2023-52486 bsc#1221277). +- Update + patches.suse/drm-amd-display-Fix-NULL-pointer-dereference-at-hibe.patch + (git-fixes CVE-2023-52460 bsc#1220319). +- Update + patches.suse/drm-amdgpu-Fix-possible-NULL-dereference-in-amdgpu_r.patch + (git-fixes CVE-2023-52585 bsc#1221080). +- Update + patches.suse/drm-meson-fix-memory-leak-on-hpd_notify-callback.patch + (jsc#PED-3527 jsc#PED-5475 jsc#PED-6068 jsc#PED-6070 + jsc#PED-6116 jsc#PED-6120 jsc#PED-5065 jsc#PED-5477 jsc#PED-5511 + jsc#PED-6041 jsc#PED-6069 jsc#PED-6071 CVE-2023-52563 + bsc#1220937). +- Update + patches.suse/drm-msm-dpu-Add-mutex-lock-in-control-vblank-irq.patch + (git-fixes CVE-2023-52586 bsc#1221081). +- Update + patches.suse/drm-radeon-check-the-alloc_workqueue-return-value-in.patch + (git-fixes CVE-2023-52470 bsc#1220413). +- Update + patches.suse/drm-sched-Fix-bounds-limiting-when-given-a-malformed.patch + (git-fixes CVE-2023-52461 bsc#1220322). +- Update + patches.suse/firmware-arm_scmi-Check-mailbox-SMT-channel-for-cons.patch + (git-fixes CVE-2023-52608 bsc#1221375). +- Update + patches.suse/gfs2-Fix-kernel-NULL-pointer-dereference-in-gfs2_rgrp_dump.patch + (git-fixes CVE-2023-52448 bsc#1220253). +- Update + patches.suse/hwrng-core-Fix-page-fault-dead-lock-on-mmap-ed-hwrng.patch + (git-fixes CVE-2023-52615 bsc#1221614). +- Update + patches.suse/ieee802154-ca8210-Fix-a-potential-UAF-in-ca8210_prob.patch + (git-fixes CVE-2023-52510 bsc#1220898). +- Update + patches.suse/iio-adc-ad7091r-Allow-users-to-configure-device-even.patch + (git-fixes CVE-2023-52627 bsc#1222051). +- Update + patches.suse/iommu-Don-t-reserve-0-length-IOVA-region.patch + (git-fixes CVE-2023-52455 bsc#1220332). +- Update + patches.suse/iommu-arm-smmu-v3-Fix-soft-lockup-triggered-by-arm_smmu_mm_invalidate_range.patch + (bsc#1215921 CVE-2023-52484 bsc#1220797). +- Update + patches.suse/iommu-vt-d-Avoid-memory-allocation-in-iommu_suspend + (jsc#PED-7779 jsc#PED-7780 CVE-2023-52559 bsc#1220933). +- Update + patches.suse/ipv4-ipv6-Fix-handling-of-transhdrlen-in-__ip-6-_app.patch + (bsc#1220419 CVE-2023-52527 bsc#1220928). +- Update + patches.suse/jfs-fix-array-index-out-of-bounds-in-dbAdjTree.patch + (git-fixes CVE-2023-52601 bsc#1221068). +- Update + patches.suse/jfs-fix-array-index-out-of-bounds-in-diNewExt.patch + (git-fixes CVE-2023-52599 bsc#1221062). +- Update + patches.suse/jfs-fix-slab-out-of-bounds-Read-in-dtSearch.patch + (git-fixes CVE-2023-52602 bsc#1221070). +- Update patches.suse/jfs-fix-uaf-in-jfs_evict_inode.patch + (git-fixes CVE-2023-52600 bsc#1221071). +- Update + patches.suse/ksmbd-fix-slub-overflow-in-ksmbd_decode_ntlmss.patch + (bsc#1012628 CVE-2023-52440 bsc#1220182). +- Update + patches.suse/media-mtk-jpeg-Fix-use-after-free-bug-due-to-error-p.patch + (git-fixes CVE-2023-52491 bsc#1221281). +- Update + patches.suse/media-rkisp1-Fix-IRQ-disable-race-issue.patch + (git-fixes CVE-2023-52589 bsc#1221084). +- Update patches.suse/media-uvcvideo-Fix-OOB-read.patch (git-fixes + CVE-2023-52565 bsc#1220939). +- Update + patches.suse/mfd-syscon-Fix-null-pointer-dereference-in-of_syscon.patch + (git-fixes CVE-2023-52467 bsc#1220433). +- Update + patches.suse/mm-migrate-fix-getting-incorrect-page-mapping-during-page-migration.patch + (git-fixes CVE-2023-52490 bsc#1221325). +- Update + patches.suse/mm-slab_common-fix-slab_caches-list-corruption-after-kmem_cache_destroy.patch + (git-fixes CVE-2023-52562 bsc#1220936). +- Update + patches.suse/mtd-Fix-gluebi-NULL-pointer-dereference-caused-by-ft.patch + (git-fixes CVE-2023-52449 bsc#1220238). +- Update patches.suse/net-bridge-use-DEV_STATS_INC.patch + (bsc#1220419 CVE-2023-52578 bsc#1220874). +- Update patches.suse/net-core-Fix-ETH_P_1588-flow-dissector.patch + (bsc#1220419 CVE-2023-52580 bsc#1220876). +- Update + patches.suse/net-fix-possible-store-tearing-in-neigh_periodic_wor.patch + (bsc#1220419 CVE-2023-52522 bsc#1220924). +- Update + patches.suse/net-mlx5e-Fix-operation-precedence-bug-in-port-times.patch + (jsc#PED-3311 CVE-2023-52626 bsc#1222054). +- Update patches.suse/net-mlx5e-Fix-peer-flow-lists-handling.patch + (jsc#PED-3311 CVE-2023-52487 bsc#1221341). +- Update + patches.suse/net-nfc-fix-races-in-nfc_llcp_sock_get-and-nfc_llcp_.patch + (git-fixes CVE-2023-52502 bsc#1220831). +- Update + patches.suse/net-nfc-llcp-Add-lock-when-modifying-device-list.patch + (git-fixes CVE-2023-52524 bsc#1220927). +- Update + patches.suse/net-rds-Fix-possible-NULL-pointer-dereference.patch + (bsc#1220419 CVE-2023-52573 bsc#1220869). +- Update + patches.suse/net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch + (git-fixes CVE-2023-52528 bsc#1220843). +- Update + patches.suse/netfilter-nft_set_rbtree-skip-sync-GC-for-new-elemen.patch + (git-fixes CVE-2023-52433 bsc#1220137). +- Update + patches.suse/nfc-nci-assert-requested-protocol-is-valid.patch + (git-fixes CVE-2023-52507 bsc#1220833). +- Update + patches.suse/nilfs2-fix-potential-use-after-free-in-nilfs_gccache.patch + (git-fixes CVE-2023-52566 bsc#1220940). +- Update + patches.suse/nvme-fc-Prevent-null-pointer-dereference-in-nvme_fc_.patch + (bsc#1214842 CVE-2023-52508 bsc#1221015). +- Update + patches.suse/nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva.patch + (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536 + CVE-2023-6356 CVE-2023-52454 bsc#1220320). +- Update + patches.suse/ocfs2-Avoid-touching-renamed-directory-if-parent-doe.patch + (bsc#1221044 CVE-2023-52591 CVE-2023-52590 bsc#1221088). +- Update + patches.suse/perf-x86-intel-uncore-Fix-NULL-pointer-dereference-issue-in-upi_fill_topology.patch + (bsc#1218958 CVE-2023-52450 bsc#1220237). +- Update patches.suse/perf-x86-lbr-Filter-vsyscall-addresses.patch + (git-fixes CVE-2023-52476 bsc#1220703). +- Update + patches.suse/phy-lynx-28g-serialize-concurrent-phy_set_mode_ext-c.patch + (git-fixes CVE-2023-52505 bsc#1220830). +- Update + patches.suse/pinctrl-nuvoton-wpcm450-fix-out-of-bounds-write.patch + (git-fixes CVE-2023-52512 bsc#1221021). +- Update + patches.suse/platform-x86-think-lmi-Fix-reference-leak.patch + (git-fixes CVE-2023-52520 bsc#1220921). +- Update + patches.suse/power-supply-rk817-Fix-node-refcount-leak.patch + (git-fixes CVE-2023-52571 bsc#1220945). +- Update + patches.suse/powerpc-lib-Validate-size-for-vector-operations.patch + (bsc#1215199 CVE-2023-52606 bsc#1221069). +- Update + patches.suse/powerpc-mm-Fix-null-pointer-dereference-in-pgtable_c.patch + (bsc#1215199 CVE-2023-52607 bsc#1221061). +- Update + patches.suse/pstore-ram-Fix-crash-when-setting-number-of-cpus-to-.patch + (git-fixes CVE-2023-52619 bsc#1221618). +- Update + patches.suse/ring-buffer-Do-not-attempt-to-read-past-commit.patch + (git-fixes CVE-2023-52501 bsc#1220885). +- Update + patches.suse/scsi-pm80xx-Avoid-leaking-tags-when-processing-OPC_INB_SET_CONTROLLER_CONFIG-command.patch + (jsc#PED-6874 CVE-2023-52500 bsc#1220883). +- Update + patches.suse/serial-8250_port-Check-IRQ-data-before-use.patch + (git-fixes CVE-2023-52567 bsc#1220839). +- Update + patches.suse/serial-sc16is7xx-convert-from-_raw_-to-_noinc_-regma.patch + (git-fixes CVE-2023-52488 bsc#1221162). +- Update + patches.suse/soc-qcom-pmic_glink_altmode-fix-port-sanity-check.patch + (git-fixes CVE-2023-52495 bsc#1221271). +- Update + patches.suse/spi-sun6i-fix-race-between-DMA-RX-transfer-completio.patch + (git-fixes CVE-2023-52517 bsc#1221055). +- Update + patches.suse/spi-sun6i-reduce-DMA-RX-transfer-width-to-single-byt.patch + (git-fixes CVE-2023-52511 bsc#1221012). +- Update patches.suse/spmi-mediatek-Fix-UAF-on-device-remove.patch + (git-fixes CVE-2023-52584 bsc#1221079). +- Update + patches.suse/thermal-core-Fix-NULL-pointer-dereference-in-zone-re.patch + (git-fixes CVE-2023-52473 bsc#1220430). +- Update patches.suse/uio-Fix-use-after-free-in-uio_open.patch + (git-fixes CVE-2023-52439 bsc#1220140). +- Update + patches.suse/wifi-ath9k-Fix-potential-array-index-out-of-bounds-r.patch + (git-fixes CVE-2023-52594 bsc#1221045). +- Update + patches.suse/wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_proc.patch + (git-fixes CVE-2023-52525 bsc#1220840). +- Update + patches.suse/wifi-rt2x00-restart-beacon-queue-when-hardware-reset.patch + (git-fixes CVE-2023-52595 bsc#1221046). +- Update + patches.suse/wifi-rtw88-sdio-Honor-the-host-max_req_size-in-the-R.patch + (git-fixes CVE-2023-52611 bsc#1221611). +- Update + patches.suse/wifi-wfx-fix-possible-NULL-pointer-dereference-in-wf.patch + (git-fixes CVE-2023-52593 bsc#1221042). +- Update + patches.suse/x86-alternatives-disable-kasan-in-apply_alternatives.patch + (git-fixes CVE-2023-52504 bsc#1221553). +- Update + patches.suse/x86-srso-fix-sbpb-enablement-for-spec_rstack_overflow-off.patch + (git-fixes CVE-2023-52575 bsc#1220871). +- commit 6296dca + +- Refresh patches.suse/kdump-add-crashkernel-cma-suffix.patch. + (fix unused variable warning) +- commit c953180 + +- Move upstreamed patches into sorted section +- commit 70b2e3d + +- Move upstreamed uio patches into sorted section +- commit bd64fed + +- Move out-of-tree kexec patches into the right section +- commit 06266e2 + +- kdump: wait for DMA to time out when using CMA (jsc#PED-7249). +- Refresh + patches.suse/add-product-identifying-information-to-vmcoreinfo.patch. +- kdump: describe crashkernel ,cma in Documentaion (jsc#PED-7249). +- kdump, x86: implement crashkernel cma reservation + (jsc#PED-7249). +- commit 99814c5 + +- kdump: implement reserve_crashkernel_cma (jsc#PED-7249). +- Refresh + patches.suse/add-product-identifying-information-to-vmcoreinfo.patch. +- commit fc59052 + +- kdump: add crashkernel= ,cma suffix (jsc#PED-7249). +- commit 41f0c07 + +- kdump: defer the insertion of crashkernel resources + (jsc#PED-7249). +- crash_core: fix the check for whether crashkernel is from high + memory (jsc#PED-7249). +- crash_core.c: remove unneeded functions (jsc#PED-7249). +- riscv: kdump: use generic interface to simplify crashkernel + reservation (jsc#PED-7249). +- commit 8326859 + +- arm64: kdump: use generic interface to simplify crashkernel + reservation (jsc#PED-7249). +- Update config files. +- commit 7ae6d47 + +- x86: kdump: use generic interface to simplify crashkernel + reservation code (jsc#PED-7249). +- Update config files. +- commit c141552 + +- crash_core: move crashk_*res definition into crash_core.c + (jsc#PED-7249). +- commit 0e37e20 + +- crash_core: add generic function to do reservation + (jsc#PED-7249). +- Refresh + patches.suse/add-product-identifying-information-to-vmcoreinfo.patch. +- commit a0ccf1b + +- crash_core: change parse_crashkernel() to support + crashkernel=,high|low parsing (jsc#PED-7249). +- crash_core: change the prototype of function parse_crashkernel() + (jsc#PED-7249). +- crash_core.c: remove unnecessary parameter of function + (jsc#PED-7249). +- riscv: kdump: Implement crashkernel=X,[high,low] (jsc#PED-7249). +- arm64: kdump: simplify the reservation behaviour of + crashkernel=,high (jsc#PED-7249). +- commit 9191c97 + +- soc: fsl: dpio: fix kcalloc() argument order (git-fixes). +- cpufreq: dt: always allocate zeroed cpumask (git-fixes). +- thermal/drivers/mediatek: Fix control buffer enablement on + MT7896 (git-fixes). +- thermal/drivers/mediatek/lvts_thermal: Fix a memory leak in + an error handling path (git-fixes). +- commit 353a58d + +- Refresh + patches.suse/net-sched-Add-module-alias-for-sch_fq_pie.patch. +- commit 4c6eb4e + +- RDMA/rtrs-clt: Check strnlen return len in sysfs mpath_policy_store() (git-fixes) +- commit 4586f58 + +- RDMA/device: Fix a race between mad_client and cm_client init (git-fixes) +- commit 0f4890f + +- RDMA/hns: Fix mis-modifying default congestion control algorithm (git-fixes) +- commit a44fff2 + +- RDMA/srpt: Do not register event handler until srpt device is fully setup (git-fixes) +- commit faac2cb + +- RDMA/irdma: Remove duplicate assignment (git-fixes) +- commit 5dbeef5 + +- drm/amd/display: Fix && vs || typos (git-fixes). +- commit 1a09c42 + +- memory: tegra: Add BPMP and ICC info for DLA clients (bsc#1221330) +- commit 7fbb1f9 + +- memory: tegra: Correct DLA client names (bsc#1221330) +- commit 09ff68e + +- Refresh patches.suse/Revert-drm-amd-pm-resolve-reboot-exception-for-si-ol.patch (git-fixes) + Alt-commit +- commit c5c0b23 + +- Refresh patches.suse/drm-amdgpu-pm-Fix-the-power1_min_cap-value.patch (git-fixes) + Alt-commit +- commit b9c791c + +- Refresh patches.suse/drm-amd-display-Prevent-potential-buffer-overflow-in.patch (git-fixes) + Alt-commit +- commit efd4bf7 + +- Refresh patches.suse/drm-amdgpu-Fix-the-runtime-resume-failure-issue.patch (git-fixes) + Alt-commit +- commit 6ffd9c2 + +- Refresh patches.suse/drm-amd-display-fix-null-pointer-dereference-on-edid.patch (git-fixes) + Alt-commit +- commit 3adc50a + +- Refresh patches.suse/drm-amd-display-Fix-memory-leak-in-dm_sw_fini.patch (git-fixes) + Alt-commit +- commit 1e0a8c4 + +- Refresh patches.suse/drm-amd-display-Fix-potential-null-pointer-dereferen.patch (git-fixes) + Alt-commit +- commit e173f6f + +- Refresh patches.suse/drm-amdgpu-display-Initialize-gamma-correction-mode-.patch (git-fixes) + Alt-commit +- commit 36a7865 + +- Refresh patches.suse/drm-amd-display-Fix-possible-NULL-dereference-on-dev.patch (git-fixes) + Alt-commit +- commit c463983 + +- Refresh patches.suse/Revert-drm-amd-display-increased-min_dcfclk_mhz-and-.patch (git-fixes) + Alt-commit +- commit 04c948e + +- Refresh patches.suse/Revert-drm-amd-flush-any-delayed-gfxoff-on-suspend-e.patch (git-fixes) + Alt-commit +- commit 30b9cb6 + +- Refresh patches.suse/drm-amd-Stop-evicting-resources-on-APUs-in-suspend.patch (git-fixes) + Alt-commit +- commit 84c8d2c + +- Refresh patches.suse/drm-amd-display-Fix-possible-buffer-overflow-in-find.patch (git-fixes) + Alt-commit +- commit b40ba61 + +- Refresh patches.suse/drm-amd-display-Fix-possible-use-of-uninitialized-ma.patch (git-fixes) + Alt-commit +- commit c3f6221 + +- Refresh patches.suse/drm-amd-display-Initialize-wait_time_microsec-variab.patch (git-fixes) + Alt-commit +- commit e48d42e + +- Refresh patches.suse/drm-amdkfd-Fix-L2-cache-size-reporting-in-GFX9.4.3.patch (git-fixes) + Alt-commit +- commit 2eea2ce + +- Refresh patches.suse/drm-amd-display-Implement-bounds-check-for-stream-en.patch (git-fixes) + Alt-commit +- commit d676a78 + +- Refresh patches.suse/drm-amd-display-Add-NULL-test-for-timing-generator-i.patch (git-fixes) + Alt-commit +- commit c8a379e + +- Refresh patches.suse/drm-amd-display-Fix-panel_cntl-could-be-null-in-dcn2.patch (git-fixes) + Alt-commit +- commit 31dbfa0 + +- Refresh patches.suse/drm-amdkfd-reserve-the-BO-before-validating-it.patch (git-fixes) + Alt-commit +- commit 1aea4a9 + +- Refresh patches.suse/drm-amd-display-Fix-buffer-overflow-in-get_host_rout.patch (git-fixes) + Alt-commit +- commit 8ed7043 + +- Refresh patches.suse/drm-amd-display-Add-NULL-check-for-kzalloc-in-amdgpu.patch (git-fixes) + Alt-commit +- commit 06e5854 + +- Refresh patches.suse/drm-amdgpu-Fix-missing-error-code-in-gmc_v6-7-8-9_0_.patch (git-fixes) + Alt-commit +- commit 933ecff + +- Refresh patches.suse/drm-amd-Don-t-init-MEC2-firmware-when-it-fails-to-lo.patch (git-fixes) + Alt-commit +- commit 3901f67 + +- Refresh patches.suse/Revert-drm-amd-pm-fix-the-high-voltage-and-temperatu.patch (git-fixes) + Alt-commit +- commit c410dd8 + +- Refresh patches.suse/drm-amdgpu-revert-Adjust-removal-control-flow-for-sm.patch (git-fixes) + Alt-commit +- commit e2f8984 + +- Refresh patches.suse/drm-amd-display-Fix-a-switch-statement-in-populate_d.patch (git-fixes) + Alt-commit +- commit fd4226b + +- Refresh patches.suse/drm-bridge-sii902x-Fix-audio-codec-unregistration.patch (git-fixes) + Alt-commit +- commit eb02c03 + +- Refresh patches.suse/drm-bridge-sii902x-Fix-probing-race-issue.patch (git-fixes) + Alt-commit +- commit c6467b6 + +- Refresh patches.suse/drm-i915-perf-Update-handling-of-MMIO-triggered-repo.patch (git-fixes) + Alt-commit +- commit c6bd3a5 + +- Refresh patches.suse/drm-i915-dp-Fix-passing-the-correct-DPCD_REV-for-drm.patch (git-fixes) + Alt-commit +- commit 7fcb6ca + +- Refresh patches.suse/drm-amd-display-Fix-sending-VSC-colorimetry-packets-.patch (git-fixes) + Alt-commit +- commit 2a5c3b0 + +- Refresh patches.suse/drm-amdgpu-re-create-idle-bo-s-PTE-during-VM-state-m.patch (git-fixes) + Alt-commit +- commit cce0614 + +- Refresh patches.suse/drm-amd-display-Restore-guard-against-default-backli.patch (git-fixes) + Alt-commit +- commit f6c0702 + +- Refresh patches.suse/1958-drm-amd-display-fix-hw-rotated-modes-when-PSR-SU-is-.patch (git-fixes) + Alt-commit +- commit e213d83 + +- Refresh patches.suse/1936-drm-amdgpu-Restrict-extended-wait-to-PSP-v13.0.6.patch (git-fixes) + Alt-commit +- commit ef2737c + +- Refresh patches.suse/drm-amd-display-Increase-frame-warning-limit-with-KA.patch (git-fixes) + Alt-commit +- commit ad4332b + +- Refresh patches.suse/drm-amdgpu-disable-MCBP-by-default.patch (git-fixes) + Alt-commit +- commit 2c67e58 + +- Refresh patches.suse/drm-amd-pm-fix-a-memleak-in-aldebaran_tables_init.patch (git-fixes) + Alt-commit +- commit c8de278 + +- Move upstreamed patches into sorted section +- commit 8b684d5 + +- Move out-of-tree patches into the right sections +- commit 2aa9e6c + +- Move upstreamed patches into sorted section +- commit cdb27f5 + +- drm/i915: Add missing ; to __assign_str() macros in tracepoint + code (git-fixes). +- ALSA: hda/realtek: add in quirk for Acer Swift Go 16 - SFG16-71 + (git-fixes). +- Revert "ALSA: usb-audio: Name feature ctl using output if + input is PCM" (git-fixes). +- ALSA: hda/realtek: Add quirk for Lenovo Yoga 9 14IMH9 + (git-fixes). +- commit fbc9b5f + +- fs: don't assume arguments are non-NULL (bsc#1221044 + CVE-2023-52591). +- commit ec8f09d + +- fs: Restrict lock_two_nondirectories() to non-directory inodes + (bsc#1221044 CVE-2023-52591). +- commit b103012 + +- fs: ocfs2: check status values (bsc#1221044 CVE-2023-52591). +- commit a281985 + +- rename(): avoid a deadlock in the case of parents having no + common ancestor (bsc#1221044 CVE-2023-52591). +- commit ea7137b + +- kill lock_two_inodes() (bsc#1221044 CVE-2023-52591). +- commit 005222f + +- rename(): fix the locking of subdirectories (bsc#1221044 + CVE-2023-52591). +- commit a6484cb + +- f2fs: Avoid reading renamed directory if parent does not change + (bsc#1221044 CVE-2023-52591). +- commit 3fb2dd8 + +- ext4: don't access the source subdirectory content on + same-directory rename (bsc#1221044 CVE-2023-52591). +- commit ba7d1aa + +- ext2: Avoid reading renamed directory if parent does not change + (bsc#1221044 CVE-2023-52591). +- commit 65af3c2 + +- udf_rename(): only access the child content on cross-directory + rename (bsc#1221044 CVE-2023-52591). +- commit a29fcb6 + +- ocfs2: Avoid touching renamed directory if parent does not + change (bsc#1221044 CVE-2023-52591). +- Update references in + patches.suse/reiserfs-Avoid-touching-renamed-directory-if-parent-.patch + (git-fixes bsc#1221044 CVE-2023-52591). +- commit 0477c34 + +- dcssblk: handle alloc_dax() -EOPNOTSUPP failure (git-fixes + bsc#1221626). +- commit eaf806c + +- s390/cache: prevent rebuild of shared_cpu_list (git-fixes + bsc#1221625). +- commit d9bc980 + +- s390/pai: fix attr_event_free upper limit for pai device drivers + (git-fixes bsc#1221623). +- commit eac0e1f + +- KVM: s390: only deliver the set service event bits (git-fixes + bsc#1221620). +- commit 55838c8 + +- dm: treat alloc_dax() -EOPNOTSUPP failure as non-fatal + (git-fixes). +- dm: call the resume method on internal suspend (git-fixes). +- dm raid: fix false positive for requeue needed during reshape + (git-fixes). +- dm ioctl: update DM_DRIVER_EMAIL to new dm-devel mailing list + (git-fixes). +- dm-raid: fix lockdep waring in "pers->hot_add_disk" + (jsc#PED-7542). +- md/raid5: fix atomicity violation in raid5_cache_count + (bsc#1219169, CVE-2024-23307). +- dm: dm-zoned: guard blkdev_zone_mgmt with noio scope + (jsc#PED-7542). +- dm-integrity, dm-verity: reduce stack usage for recheck + (jsc#PED-7542). +- dm-crypt, dm-integrity, dm-verity: bump target version + (jsc#PED-7542). +- dm-verity, dm-crypt: align "struct bvec_iter" correctly + (jsc#PED-7542). +- dm-crypt: recheck the integrity tag after a failure (git-fixes). +- dm-crypt: don't modify the data when using authenticated + encryption (git-fixes). +- dm-verity: recheck the hash after a failure (git-fixes). +- dm-integrity: recheck the integrity tag after a failure + (git-fixes). +- md: Fix missing release of 'active_io' for flush (jsc#PED-7542). +- dm-crypt, dm-verity: disable tasklets (git-fixes). +- dm writecache: allow allocations larger than 2GiB + (jsc#PED-7542). +- dm stats: limit the number of entries (jsc#PED-7542). +- md/raid1: Use blk_opf_t for read and write operations + (git-fixes). +- md: Fix md_seq_ops() regressions (git-fixes). +- md: Whenassemble the array, consult the superblock of the + freshest device (git-fixes). +- md/raid1: remove unnecessary null checking (jsc#PED-7542). +- md: synchronize flush io with array reconfiguration (git-fixes). +- commit 7042e1b + +- md/raid5: remove rcu protection to access rdev from conf + (jsc#PED-7542). +- md/raid1: remove rcu protection to access rdev from conf + (jsc#PED-7542). +- md/raid10: remove rcu protection to access rdev from conf + (jsc#PED-7542). +- md: remove flag RemoveSynchronized (jsc#PED-7542). +- dm audit: fix Kconfig so DM_AUDIT depends on BLK_DEV_DM + (git-fixes). +- dm-integrity: don't modify bio's immutable bio_vec in + integrity_metadata() (git-fixes). +- commit 1587009 + +- raid1: fix use-after-free for original bio in + raid1_write_request() (bsc#1221097). +- commit 296098e + +- Update + patches.suse/s390-ptrace-handle-setting-of-fpc-register-correctly.patch + (git-fixes bsc#1219812 CVE-2023-52598 bsc#1221060). +- commit 0d496e7 + +- Update + patches.suse/s390-vfio-ap-always-filter-entire-AP-matrix.patch + (git-fixes bsc#1218988 CVE-2024-26620 bsc#1221298). +- commit b046ad1 + +- selftests/bpf: Add testcases for tailcall infinite loop fixing + (git-fixes). +- bpf, x64: Fix tailcall infinite loop (git-fixes). +- selftests/bpf: Correct map_fd to data_fd in tailcalls + (git-fixes). +- commit 1302854 + +- btrfs: preallocate temporary extent buffer for inode logging when needed (bsc#1217362). +- commit c7ccbf0 + +- i3c: dw: Disable IBI IRQ depends on hot-join and SIR enabling + (git-fixes). +- watchdog: stm32_iwdg: initialize default timeout (git-fixes). +- watchdog: starfive: Check pm_runtime_enabled() before + decrementing usage counter (git-fixes). +- commit 357d510 + +- of: make for_each_property_of_node() available to to !OF + (git-fixes). +- mtd: rawnand: Constrain even more when continuous reads are + enabled (git-fixes). +- mtd: rawnand: Fix and simplify again the continuous read + derivations (git-fixes). +- mtd: rawnand: lpc32xx_mlc: fix irq handler prototype + (git-fixes). +- mtd: rawnand: meson: fix scrambling mode value in command macro + (git-fixes). +- mtd: maps: physmap-core: fix flash size larger than 32-bit + (git-fixes). +- media: usbtv: Remove useless locks in usbtv_video_free() + (git-fixes). +- media: ttpci: fix two memleaks in budget_av_attach (git-fixes). +- media: go7007: fix a memleak in go7007_load_encoder (git-fixes). +- media: dvb-frontends: avoid stack overflow warnings with clang + (git-fixes). +- media: pvrusb2: fix uaf in pvr2_context_set_notify (git-fixes). +- media: i2c: imx290: Fix IMX920 typo (git-fixes). +- media: pvrusb2: fix pvr2_stream_callback casts (git-fixes). +- media: pvrusb2: remove redundant NULL check (git-fixes). +- media: go7007: add check of return value of go7007_read_addr() + (git-fixes). +- media: imx: csc/scaler: fix v4l2_ctrl_handler memory leak + (git-fixes). +- media: sun8i-di: Fix chroma difference threshold (git-fixes). +- media: sun8i-di: Fix power on/off sequences (git-fixes). +- media: sun8i-di: Fix coefficient writes (git-fixes). +- media: cedrus: h265: Fix configuring bitstream size (git-fixes). +- media: edia: dvbdev: fix a use-after-free (git-fixes). +- media: nxp: imx8-isi: Check whether crossbar pad is non-NULL + before access (git-fixes). +- media: mc: Add local pad to pipeline regardless of the link + state (git-fixes). +- net: lan78xx: fix runtime PM count underflow on link stop + (git-fixes). +- commit 9b93c7d + +- clk: renesas: r8a779g0: Correct PFC/GPIO parent clocks + (git-fixes). +- commit 0b0c529 + +- crypto: jitter - fix CRYPTO_JITTERENTROPY help text (git-fixes). +- crypto: qat - remove double initialization of value (git-fixes). +- crypto: qat - avoid division by zero (git-fixes). +- crypto: qat - removed unused macro in adf_cnv_dbgfs.c + (git-fixes). +- crypto: qat - remove unused macros in qat_comp_alg.c + (git-fixes). +- crypto: ccp - Avoid discarding errors in + psp_send_platform_access_msg() (git-fixes). +- crypto: arm/sha - fix function cast warnings (git-fixes). +- crypto: qat - resolve race condition during AER recovery + (git-fixes). +- crypto: qat - change SLAs cleanup flow at shutdown (git-fixes). +- crypto: xilinx - call finalize with bh disabled (git-fixes). +- clk: imx: imx8mp: Fix SAI_MCLK_SEL definition (git-fixes). +- clk: samsung: exynos850: Propagate SPI IPCLK rate change + (git-fixes). +- clk: Fix clk_core_get NULL dereference (git-fixes). +- clk: qcom: mmcc-msm8974: fix terminating of frequency table + arrays (git-fixes). +- clk: qcom: mmcc-apq8084: fix terminating of frequency table + arrays (git-fixes). +- clk: qcom: gcc-ipq9574: fix terminating of frequency table + arrays (git-fixes). +- clk: qcom: gcc-ipq8074: fix terminating of frequency table + arrays (git-fixes). +- clk: qcom: gcc-ipq6018: fix terminating of frequency table + arrays (git-fixes). +- clk: qcom: dispcc-sdm845: Adjust internal GDSC wait times + (git-fixes). +- clk: qcom: gcc-sdm845: Add soft dependency on rpmhpd + (git-fixes). +- clk: meson: Add missing clocks to axg_clk_regmaps (git-fixes). +- clk: keystone: sci-clk: Adding support for non contiguous clocks + (git-fixes). +- clk: mediatek: mt7981-topckgen: flag SGM_REG_SEL as critical + (git-fixes). +- clk: mediatek: mt8183: Correct parent of CLK_INFRA_SSPM_32K_SELF + (git-fixes). +- clk: mediatek: mt8135: Fix an error handling path in + clk_mt8135_apmixed_probe() (git-fixes). +- clk: hisilicon: hi3559a: Fix an erroneous devm_kfree() + (git-fixes). +- clk: hisilicon: hi3519: Release the correct number of gates + in hi3519_clk_unregister() (git-fixes). +- clk: zynq: Prevent null pointer dereference caused by kmalloc + failure (git-fixes). +- clk: renesas: r8a779f0: Correct PFC/GPIO parent clock + (git-fixes). +- media: v4l2-mem2mem: fix a memleak in v4l2_m2m_register_entity + (git-fixes). +- media: v4l2-tpg: fix some memleaks in tpg_alloc (git-fixes). +- media: em28xx: annotate unchecked call to + media_device_register() (git-fixes). +- media: videobuf2: Fix doc comment (git-fixes). +- media: xc4000: Fix atomicity violation in xc4000_get_frequency + (git-fixes). +- media: staging: ipu3-imgu: Set fields before + media_entity_pads_init() (git-fixes). +- commit df2e5ae + +- xfs: shrink failure needs to hold AGI buffer (git-fixes). +- commit e670f77 + +- xfs: fix imprecise logic in xchk_btree_check_block_owner + (git-fixes). +- commit 24972c0 + +- xfs: fix SEEK_HOLE/DATA for regions with active COW extents + (git-fixes). +- commit 4197ae0 + +- xfs: ensure submit buffers on LSN boundaries in error handlers + (git-fixes). +- commit c23fb7a + +- afs: Fix endless loop in directory parsing (git-fixes). +- commit d1332b9 + +- afs: Increase buffer size in afs_update_volume_status() + (git-fixes). +- commit a954f43 + +- nilfs2: fix hang in nilfs_lookup_dirty_data_buffers() + (git-fixes). +- commit 6c3b10c + +- nilfs2: convert nilfs_page_mkwrite() to use a folio (git-fixes). +- commit 29291de + +- erofs: fix handling kern_mount() failure (git-fixes). +- commit ea16f48 + +- erofs: Don't use certain unnecessary folio_*() functions + (git-fixes). +- commit 021c910 + +- erofs: fix refcount on the metabuf used for inode lookup + (git-fixes). +- commit 0bf0150 + +- erofs: clean up zmap.c (git-fixes). +- commit 3625a10 + +- erofs: fix up compacted indexes for block size < 4096 + (git-fixes). +- commit 458bf09 + +- erofs: fix memory leak on short-lived bounced pages (git-fixes). +- commit 5efbfc4 + +- iommu/amd: Fix failure return from snp_lookup_rmpentry() + (git-fixes). +- commit 536001e + +- erofs: allow empty device tags in flatdev mode (git-fixes). +- commit c8ff154 + +- iommu/vt-d: Don't issue ATS Invalidation request when device + is disconnected (git-fixes). +- commit 5d166d5 + +- net/sched: Add module alias for sch_fq_pie (bsc#1210335). +- commit 211b413 + +- net/sched: Remove alias of sch_clsact (bsc#1210335). +- net/sched: Load modules via their alias (bsc#1210335). +- net/sched: Add module aliases for cls_,sch_,act_ modules + (bsc#1210335). +- net/sched: Add helper macros with module names (bsc#1210335). +- commit 2046cfc + +- Refresh + patches.suse/perf-pmu-events-powerpc-Update-json-mapfile-with-Power11-PVR.patch. +- commit 42a5ace + +- ionic: restore netdev feature bits after reset (git-fixes). +- commit 898af71 + +- ionic: check cmd_regs before copying in or out (git-fixes). +- commit f1dc989 + +- ionic: check before releasing pci regions (git-fixes). +- commit 2a1c23c + +- net: veth: clear GRO when clearing XDP even when down (git-fixes). +- commit 553eb02 + +- tun: Fix xdp_rxq_info's queue_index when detaching (git-fixes). +- commit b7d1001 + +- net: dpaa: fman_memac: accept phy-interface-type = "10gbase-r" in the device tree (git-fixes). +- commit 675b36c + +- ice: Fix ASSERT_RTNL() warning during certain scenarios (git-fixes). +- commit 8b9399e + +- ice: fix pin phase adjust updates on PF reset (git-fixes). +- commit ef21fc4 + +- ice: fix dpll periodic work data updates on PF reset (git-fixes). +- commit dc97d19 + +- ice: fix dpll and dpll_pin data access on PF reset (git-fixes). +- commit f610e32 + +- ice: fix dpll input pin phase_adjust value updates (git-fixes). +- commit cfb9c02 + +- ice: fix connection state of DPLL and out pin (git-fixes). +- commit 7176021 + +- net: sparx5: Add spinlock for frame transmission from CPU (git-fixes). +- commit 2486a16 + +- gtp: fix use-after-free and null-ptr-deref in gtp_genl_dump_pdp() (git-fixes). +- commit 86d216d + +- net: ipa: don't overrun IPA suspend interrupt registers (git-fixes). +- commit 7f00d73 + +- ethernet: cpts: fix function pointer cast warnings (git-fixes). +- commit d241bc1 + +- net: ethernet: ti: cpsw_new: enable mac_managed_pm to fix mdio (git-fixes). +- commit 229f845 + +- ppp_async: limit MRU to 64K (git-fixes). +- commit 463471e + +- nfp: enable NETDEV_XDP_ACT_REDIRECT feature flag (git-fixes). +- commit 36e79a9 + +- ALSA: hda/tas2781: remove unnecessary runtime_pm calls + (git-fixes). +- ALSA: hda/realtek - ALC236 fix volume mute & mic mute LED on + some HP models (git-fixes). +- ALSA: hda/realtek: fix ALC285 issues on HP Envy x360 laptops + (git-fixes). +- ALSA: hda: Reuse for_each_pcm_streams() (git-fixes). +- ALSA: usb-audio: Name feature ctl using output if input is PCM + (git-fixes). +- commit fdd39ea + +- ALSA: hda/realtek: Add quirks for various HP ENVY models + (git-fixes). +- commit 62207c4 + +- ALSA: hda/realtek: Add "Intel Reference board" SSID in the + ALC256 (git-fixes). +- ALSA: hda/realtek: Remove two HP Laptops using CS35L41 + (git-fixes). +- ALSA: hda: cs35l41: Support HP models without _DSD using dual + Speaker ID (git-fixes). +- ALSA: hda: cs35l41: Support additional HP Envy Models + (git-fixes). +- ALSA: hda/realtek: Add quirks for HP G11 Laptops using CS35L56 + (git-fixes). +- ALSA: hda: realtek: Re-work CS35L41 fixups to re-use for other + amps (git-fixes). +- commit c4f7d5a + +- Drivers: hv: vmbus: Update indentation in create_gpadl_header() + (git-fixes). +- Drivers: hv: vmbus: Remove duplication and cleanup code in + create_gpadl_header() (git-fixes). +- Drivers: hv: vmbus: Calculate ring buffer size for more + efficient use of memory (git-fixes). +- hv_utils: Allow implicit ICTIMESYNCFLAG_SYNC (git-fixes). +- minmax: relax check to allow comparison between unsigned + arguments (git-fixes). +- minmax: allow comparisons of 'int' against 'unsigned char/short' + (git-fixes). +- minmax: fix indentation of __cmp_once() and __clamp_once() + (git-fixes). +- minmax: allow min()/max()/clamp() if the arguments have the same + (git-fixes). +- minmax: add umin(a, b) and umax(a, b) (git-fixes). +- minmax: fix header inclusions (git-fixes). +- minmax: deduplicate __unconst_integer_typeof() (git-fixes). +- minmax: Introduce {min,max}_array() (git-fixes). +- commit 7632d3b + +- iommu/amd: Mark interrupt as managed (git-fixes). +- commit 5ef4be8 + +- arm64: dts: imx8mm-kontron: Refactor devicetree for OSM-S module and (git-fixes) +- commit 0049d8d + +- Update ppc64le kabi files. +- commit 5c9702d + +- arm64: dts: sprd: Change UMS512 idle-state nodename to match bindings (git-fixes) +- commit 58013ba + +- arm64: dts: rockchip: drop rockchip,trcm-sync-tx-only from rk3588 i2s (git-fixes) +- commit b287ab6 + +- arm64: dts: rockchip: fix reset-names for rk356x i2s2 controller (git-fixes) +- commit bfdd563 + +- arm64: dts: rockchip: add missing interrupt-names for rk356x vdpu (git-fixes) +- commit b9c1de2 + +- arm64: dts: imx8mp: Set SPI NOR to max 40 MHz on Data Modul i.MX8M (git-fixes) +- commit 5a00002 + +- arm64: dts: imx8mm-venice-gw71xx: fix USB OTG VBUS (git-fixes) +- commit a9642be + +- arm64: dts: imx8mm-kontron: Fix OSM-S devicetrees to match latest (git-fixes) +- commit d17e1b2 + +- arm64: dts: imx8mm-kontron: Fix interrupt for RTC on OSM-S i.MX8MM (git-fixes) +- commit 63e3e05 + +- arm64: dts: imx8mm-kontron: Disable pull resistors for SD card (git-fixes) +- commit 645b123 + +- arm64: dts: imx8mm-kontron: Disable pull resistors for SD card (git-fixes) +- commit 63490f6 + +- arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals (git-fixes) +- commit 980bc4a + +- arm64: dts: imx8mm-kontron: Disable pullups for onboard UART signals (git-fixes) +- commit 3a04f44 + +- arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on SL/BL (git-fixes) +- commit d23e2ff + +- arm64: dts: imx8mm-kontron: Disable pullups for I2C signals on OSM-S (git-fixes) +- commit e658d8c + +- arm64: dts: allwinner: h6: Add RX DMA channel for SPDIF (git-fixes) +- commit 8098072 + +- arm64: tegra: Fix Tegra234 MGBE power-domains (git-fixes) +- commit 58db13b + +- arm64: dts: imx8mp: Fix LDB clocks property (git-fixes) +- commit 8815925 + +- arm64: dts: rockchip: set num-cs property for spi on px30 (git-fixes) +- commit ac8cd44 + +- arm64: dts: imx8mp: Disable UART4 by default on Data Modul i.MX8M (git-fixes) +- commit d39bc86 + +- arm64: dts: sprd: Add clock reference for pll2 on UMS512 (git-fixes) +- commit 8ef3da3 + +- arm64: zynqmp: Fix clock node name in kv260 cards (git-fixes) +- commit 49dfade + +- arm64: zynqmp: Move fixed clock to / for kv260 (git-fixes) +- commit 8a08b0f + +- Make NVIDIA Grace-Hopper TPM related drivers build-ins (bsc#1221156) +- commit 32745a0 + +- powerpc/64s: Fix get_hugepd_cache_index() build failure + (bsc#1215199). +- powerpc: Remove cpu-as-y completely (bsc#1215199). +- powerpc/64s: Use .machine power4 around dcbt (bsc#1215199). +- powerpc/64s: Move dcbt/dcbtst sequence into a macro + (bsc#1215199). +- powerpc/pseries: Fix potential memleak in papr_get_attr() + (bsc#1215199). +- powerpc/kprobes: Handle error returned by set_memory_rox() + (bsc#1215199). +- powerpc: Implement set_memory_rox() (bsc#1215199). +- powerpc: Use user_mode() macro when possible (bsc#1215199). +- powerpc/rtas: use correct function name for resetting TCE tables + (bsc#1215199). +- commit 35dba53 + +- Update patches.suse/arm64-sme-Always-exit-sme_alloc-early-with-existing-.patch (git-fixes, CVE-2024-26618) + Add reference to CVE-2024-26618. +- commit 50882e3 + +- powerpc/pseries/iommu: IOMMU table is not initialized for + kdump over SR-IOV (bsc#1220492 ltc#205270). +- commit 2026089 + +- group-source-files.pl: Quote filenames (boo#1221077). + The kernel source now contains a file with a space in the name. + Add quotes in group-source-files.pl to avoid splitting the filename. + Also use -print0 / -0 when updating timestamps. +- commit a005e42 + +- power: reset: pwr-mlxbf: support graceful reboot instead of emergency (jsc#PED-8032) +- commit 7221104 + +- platform/mellanox: mlxbf-tmfifo: Drop Tx network packet when Tx (jsc#PED-8032) +- commit 0fc3eb8 + +- platform/mellanox: mlxbf-tmfifo: Remove unnecessary bool conversion (jsc#PED-8032) +- commit 53a0f30 + +- platform/mellanox: mlxbf-tmfifo: Fix a warning message (jsc#PED-8032) +- commit 8a9b17e + +- platform/mellanox: mlxbf-pmc: Fix offset calculation for crspace (jsc#PED-8032) +- commit 2307ef6 + +- platform/mellanox: Check devm_hwmon_device_register_with_groups() (jsc#PED-8032) +- commit e1cd31d + +- platform/mellanox: Add null pointer checks for devm_kasprintf() (jsc#PED-8032) +- commit bda53cc + +- platform/mellanox: mlxbf-pmc: Add support for BlueField-3 (jsc#PED-8032) +- commit bbdb7cd + +- mlxbf-bootctl: correctly identify secure boot with development keys (jsc#PED-8032) +- commit 7f706aa + +- platform/mellanox: mlxbf-bootctl: Convert to platform remove callback (jsc#PED-8032) +- commit 55906a9 + +- mlxbf-bootctl: Support sysfs entries for MFG fields (jsc#PED-8032) +- commit ed7de29 + +- mlxbf-bootctl: Support setting the ARM boot state to "OS up" (jsc#PED-8032) +- commit c648b6e + +- mlxbf-bootctl: Support the large icmc write/read (jsc#PED-8032) +- commit 3f27c32 + +- mlxbf-bootctl: Add sysfs file for BlueField boot log (jsc#PED-8032) +- commit 2f2dfde + +- mmc: sdhci-of-dwcmshc: Add runtime PM operations (jsc#PED-8032) +- commit 8cc192b + +- mmc: sdhci-of-dwcmshc: Add error handling in dwcmshc_resume (jsc#PED-8032) +- commit 9fc0dca + +- mmc: sdhci-of-dwcmshc: Convert to platform remove callback returning (jsc#PED-8032) +- commit 1b18d2f + +- i2c: mlxbf: Use devm_platform_get_and_ioremap_resource() (jsc#PED-8032) +- commit b7e1af1 + +- i2c: mlxbf: Use dev_err_probe in probe function (jsc#PED-8032) +- commit c1c0d6f + +- supported.conf: Add few drivers for BF3 (jsc#PED-8032) + Add gpio-mlxbf3, sdhci-of-dwcmshc, pinctrl-mlxbf3 and + pwr-mlxbf drivers in kernel-default. +- commit dd06563 + +- gpio: mlxbf3: add an error code check in mlxbf3_gpio_probe (jsc#PED-8032) +- commit 6e4d90e + +- gpio: mlxbf3: use capital "OR" for multiple licenses in SPDX (jsc#PED-8032) +- commit 62fd912 + +- gpio: mlxbf3: Support add_pin_ranges() (jsc#PED-8032) +- commit f0d8a10 + +- config/arm64: Enable BF3 GPIO driver (jsc#PED-8032) + Add config to enable Bluefield3 GPIO driver as module. +- commit cae28d7 + +- gpio: mlxbf3: Add gpio driver support (jsc#PED-8032) +- commit 305cf5b + +- memory: tegra: add MC client for Tegra234 GPU (bsc#1221330) +- commit f5d121c + +- memory: tegra: Add clients used by DRM in Tegra234 (bsc#1221330). +- commit 67c31f5 + +- supported.conf: Add supported entry for stusb160x (bsc#1221330) +- commit d3bd091 + +- mkspec-dtb: add toplevel symlinks also on arm +- commit ed29cae + +- rpm/mkspec-dtb: dtbs have moved to vendor sub-directories in 6.5 + By commit 724ba6751532 ("ARM: dts: Move .dts files to vendor + sub-directories"). + So switch to them. -- commit 6484eda +- commit 7aee36a krb5 +- Fix memory leaks, add patch 0010-Fix-three-memory-leaks.patch + * CVE-2024-26458, bsc#1220770 + * CVE-2024-26461, bsc#1220771 + * CVE-2024-26462, bsc#1220772 + libixion +- Use %autosetup macro. Allows to eliminate the usage of deprecated + %patchN + +- Update to 0.19.0: + * C++ API + * added support for renaming sheets after they have been created. + * formula interpreter + * added support for inline arrays. + liborcus +- Use %autosetup macro. Allows to eliminate the usage of deprecated + %patchN + +- Update to orcus 0.19.2: + * fixed a build issue with gcc 14 due to a missing include for std::find_if + and std::for_each. + * fixed a segmentation fault with the orcus-test-xml-mapped test which + manifested on hppa hardware, as originally reported on + https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1054376. + * fixed a crash when loading a document that includes a style record + referencing an unnamed style record as its parent. In Excel-generated + documents, styles only reference named styles as their parents. But in + 3rd-party generated documents, styles referencing unnamed styles as their + parents can occur. + * fixed a crash when the document model returned a null pointer when a + reference resolver interface was requested. +- Update to orcus 0.19.1: + * implemented orcus::create_filter() which instantiates a filter object of + specified type. The returned object is of type + orcus::iface::import_filter. + * moved test cases for format detection to the respective filter test files. + * fixed a bug where the import filter did not set the formula grammer prior + to importing. +- Update to orcus 0.19.0: + * added support for allowing use of std::filesystem, + std::experimental::filesystem or boost::filesystem per build + configuration. + * refactored styles import to use style indices returned by the document + model implementer rather than using the indices stored in the file. This + allows the implementer to aggregate some style records and re-use the same + index for records that are stored as different records in the original + file. + * fixed a bug where column styles were not applied to the correct columns + when the starting column index was not 0. + * overhauled the Gnumeric import filter to fix many bugs and support many + missing features relative to the other filters included in orcus. Most + notable mentions are: + * cell styles + * rich-text strings + * named ranges + * row heights and column widths + * merged cells + * added partial support for Apache Parquet import filter. This is still + heavily experimental. +- Remove patches: + * 0001-Possibility-to-build-against-a-host-of-filesystem-im.patch (upstreamed) + * 0002-Allow-using-older-boost-filesystem.patch + libreoffice +- Update to 24.2.1.2 (jsc#PED-7496): + https://wiki.documentfoundation.org/ReleaseNotes/24.2 + https://wiki.documentfoundation.org/Releases/24.2.1/RC1 and + https://wiki.documentfoundation.org/Releases/24.2.1/RC2 + https://wiki.documentfoundation.org/Releases/7.6.4/RC1 + https://wiki.documentfoundation.org/Releases/7.6.3/RC2 + https://wiki.documentfoundation.org/Releases/7.6.3/RC1 + https://wiki.documentfoundation.org/Releases/7.6.2/RC2 +- Remove the following patches, as they're no longer required for + LibreOffice 24.2: + * CVE-2023-6185.patch + * CVE-2023-6186-1.patch + * CVE-2023-6186-2.patch + * CVE-2023-6186-3.patch + * CVE-2023-6186-4.patch + * CVE-2023-6186-5.patch +- Allow building with gcc >= 12 on system where it is the default +- Added patch: + * 0001-Allow-building-with-Java-8.patch + + patch submitted upstream restoring the possibility to build + with JDK >= 8 +- Removed patches: + * 0001-Revert-java-9-changes.patch + * 0002-Revert-Require-HarfBuzz-5.1.0.patch + + not needed with the new patch above +- Armenian translation added +- Update patch handling to be compatible with rpm 4.20 +- Update bundled dependencies: + curl-8.2.1.tar.xz -> curl-8.6.0.tar.xz + gpgme-1.18.0.tar.bz2 -> gpgme-1.20.0.tar.bz2 + harfbuzz-8.0.0.tar.xz -> harfbuzz-8.2.2.tar.xz + libcmis-0.5.2.tar.xz -> libcmis-0.6.1.tar.xz + libgpg-error-1.43.tar.bz2 -> libgpg-error-1.47.tar.bz2 + pdfium-5778.tar.bz2 -> pdfium-6179.tar.bz2 + poppler-23.06.0.tar.xz -> poppler-23.09.0.tar.xz + skia-m111-a31e897fb3dcbc96b2b40999751611d029bf5404.tar.xz -> skia-m116-2ddcf183eb260f63698aa74d1bb380f247ad7ccd.tar.xz +- Add new bundled dependencies: + Java-WebSocket-1.5.4.tar.gz + fontconfig-2.14.2.tar.xz + freetype-2.13.0.tar.xz + phc-winner-argon2-20190702.tar.gz + tiff-4.6.0.tar.xz +- Build using OpenSSL instead of NSS, since the bundled curl does + not support the NSS backend any more +- Add bundled() markers + timezone -- update to 2024a: - * Kazakhstan unifies on UTC+5. This affects Asia/Almaty and - Asia/Qostanay which together represent the eastern portion of the - country that will transition from UTC+6 on 2024-03-01 at 00:00 to - join the western portion. (Thanks to Zhanbolat Raimbekov.) - * Palestine springs forward a week later than previously predicted - in 2024 and 2025. (Thanks to Heba Hamad.) Change spring-forward - predictions to the second Saturday after Ramadan, not the first; - this also affects other predictions starting in 2039. - * Asia/Ho_Chi_Minh's 1955-07-01 transition occurred at 01:00 - not 00:00. (Thanks to Äoà n Trần Công Danh.) - * From 1947 through 1949, Toronto's transitions occurred at 02:00 - not 00:00. (Thanks to Chris Walton.) - * In 1911 Miquelon adopted standard time on June 15, not May 15. - * The FROM and TO columns of Rule lines can no longer be "minimum" - or an abbreviation of "minimum", because TZif files do not support - DST rules that extend into the indefinite past - although these - rules were supported when TZif files had only 32-bit data, this - stopped working when 64-bit TZif files were introduced in 1995. - This should not be a problem for realistic data, since DST was - first used in the 20th century. As a transition aid, FROM columns - like "minimum" are now diagnosed and then treated as if they were - the year 1900; this should suffice for TZif files on old systems - with only 32-bit time_t, and it is more compatible with bugs in - 2023c-and-earlier localtime.c. (Problem reported by Yoshito - Umaoka.) - * localtime and related functions no longer mishandle some - timestamps that occur about 400 years after a switch to a time - zone with a DST schedule. In 2023d data this problem was visible - for some timestamps in November 2422, November 2822, etc. in - America/Ciudad_Juarez. (Problem reported by Gilmore Davidson.) - * strftime %s now uses tm_gmtoff if available. (Problem and draft - patch reported by Dag-Erling Smørgrav.) - * The strftime man page documents which struct tm members affect - which conversion specs, and that tzset is called. (Problems - reported by Robert Elz and Steve Summit.) +- Unify SLE-15-SP6 and Factory packages (PED#8158). + This is still related to bsc#1213470. We're applying this fix for + SLE-15-SP6 too. This changelog entry is meant to bring over the SLE + information, so the same package can be used for both code streams. +- This patch has long been removed on Factory but was never mentioned + explicitly, it was related to ticket bsc#1202310, a minor update to + reflect Chile's DST change back in 2022. + * bsc1202310.patch + +- Use /bin/sh for tzselect. Used to require bash for the 'select' + builtin but has a fallback meanwhile so no need for explicit bash + anymore. + +- Drop the timezone-java (bsc#1213470). + After thorough consideration of possible problems that arise from + having a timezone package specifically for the Java ecosystem, + Fridrich Strba and I have decided to drop the package altogether. + Doing so means the JDK will use its built-in timezone data that is + updated quarterly, when refreshed JDK versions are released. + While this does mean there could be situations where there is a bit + of a mismatch between the 'timezone' package's data, and the data + that is used by JDK, in practice the difference will be minimal and + short-lived. + So we've established this to be the best course of action. +- Remove _multibuild, not longer required. + +- Update to 2024a: + * Kazakhstan unifies on UTC+5 beginning 2024-03-01 + * Palestine springs forward a week later after Ramadan + * zic no longer pretends to support indefinite-past DST + * localtime no longer mishandles Ciudad Juárez in 2422 -- Refresh tzdata-china.diff - * Revert changes made in 2023b + * Reverts changes for 2023 Lebanon DST change to 2023a data + - * Lebanon delays the start of DST this year. + * In 2023 Lebanon springs forward April 20/21 not March 25/26 + +- Remove upstreamed patch gcc13-fix.patch + +- Add gcc13-fix.patch upsteam patch for GCC 13 compiler. -- timezone update 2022g (bsc#1177460): +- Install leapseconds data to %{_datadir}/zoneinfo/; this is now + required by some scientific applications. + +- timezone update 2022g: -- timezone update 2022f (bsc#1177460): +- timezone update 2022f: -- Refreshed patches: - * fat.patch - * tzdata-china.diff -- timezone update 2022e (bsc#1177460): +- timezone update 2022e: + + + -- Refresh tzdata-china.diff -- Remove upstreamed bsc1202310.patch -- Update to reflect new Chile DST change, bsc#1202310 - * bsc1202310.patch +- switch to _multibuild +- refresh keyring, enable keyring validation + +- Add --add-exports for java versions that support it. + * Fixes build in factory, since this is compulsory for jdk17+ -- timezone update 2022a (bsc#1177460): +- timezone update 2022a: -- timezone update 2021e (bsc#1177460): +- timezone update 2021e: + + + -- Refresh tzdata-china.patch -- timezone update 2020d (bsc#1177460) +- Adjust timezone-java.spec.in to avoid build failures when running + pre_checkin.sh + +- timezone update 2020d -- timezone update 2020c (bsc#1177460) +- timezone update 2020c +- Fixup tzdata-china.diff: zone.tab and zone1970.tab MUST be tab + delimited (boo#1176927). + +- modify tzdata-china.diff + * systemd now reads zone1970.tab + * link Asia/Shanghai to Asia/Beijing is enough and more precise + +- timezone modifies a file below /usr/share (boo#1172521) + - * Palestine's 2019 spring-forward transition was on 03-29, - not 03-30. - * Add info about the Crimea situation. + * Palestine's 2019 spring-forward transition was on 03-29, not 03-30. + * Add info about the Crimea situation in zone1970.tab and zone.tab. -- timezone update 2018i (bsc#1120402) - * São Tomé and PrÃncipe switches from +01 to +00 on 2019-01-01. -- timezone update 2018h +- timezone update 2018i: + * São Tomé and PrÃncipe switches from +01 to +00 on 2019-01-01 + +- timezone update 2018h (bsc#1120402): vhba-kmp +- Update to release 20240202 + * No user-visible changes + wicked +- hide secrets in debug log (bsc#1221194) + [+ 0003-move-all-attribute-definitions-to-compiler-h.patch] + [+ 0004-hide-secrets-in-debug-log-bsc-1221194.patch] + wireplumber +- Add patch from upstream to fix all input sources only working + when bluetooth profile is set to HSF/HFP, which was a regression + in 0.5.0 (glfo#pipewire/wireplumber#598): + * 0001-filter-utils-fix-handling-of-targetless-smart-filters.patch + +- Avoid %if %{pkg_vcmp gcc < 8}, instead replicate the condition + from the BuildRequires section. +