suse-sles-15-sp5-chost-byos-v20230816-hvm-ssd-arm64 Package Source Changes

apparmor

- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)

bind

- Add dnstap support
  [jsc#PED-4852]

- Log named-checkconf output [bsc#1213049]

blog

- Add patch blog.dif
  * Fix big endian cast problems to be able to read commands
    and ansers (blogctl) as well as passphrases (blogd)

cloud-init

- Update cloud-init-write-routes.patch (bsc#1212879)
  + Add necessary import statement
- Enable flake8 linting, fix up patches
  + cloud-init-cve-2023-1786-redact-instance-data-json-main.patch
  + cloud-init-power-rhel-only.patch
  + cloud-init-write-routes.patch
  + datasourceLocalDisk.patch

- Add cloud-init-power-rhel-only.patch (bsc#1210273)
  + Config module cc_refresh_rmc_and_interface is implemented such that
    it will only work on RH distros. Set the module availability accordingly.

curl

- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch

dbus-1

- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch

glibc

- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)

- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)

- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)

- Exclude static archives from preparation for live patching (bnc#1208721)

grub2

- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)

hwinfo

- merge gh#openSUSE/hwinfo#132
- avoid linking problems with libsamba (bsc#1212756)
- 21.85

kernel-default

- x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569).
- commit 90a74a8

- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  Handle the newly added SBPB feature correctly when run in hypervisor
  context and interept an MSR write.
- commit ef9889a

- Update config files.
  We want SRSO mitigation on by default
- commit acc813b

- Input: iqs269a - do not poll during ATI (git-fixes).
- commit 5bdf465

- Input: iqs269a - do not poll during suspend or resume
  (git-fixes).
- commit 467fdbf

- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  (git-fixes).
- commit 0922201

- relayfs: fix out-of-bounds access in relay_file_read
  (bsc#1212502 CVE-2023-3268).
- commit 9c2a6e6

- can: af_can: fix NULL pointer dereference in can_rcv_filter
  (bsc#1210627 CVE-2023-2166).
- commit e89fee8

- can: af_can: fix NULL pointer dereference in can_rcv_filter
  (bsc#1210627 CVE-2023-2166).
- commit 95374ce

- s390: introduce nospec_uses_trampoline() (git-fixes
  bsc#1213870).
- commit c2ccf75

- s390/dasd: print copy pair message only for the correct error
  (git-fixes bsc#1213872).
- commit a5594a2

- s390/ipl: add missing intersection check to ipl_report handling
  (git-fixes bsc#1213871).
- commit 8806556

- Move upstreamed sound patch into sorted sectoin
- commit 8a29738

- iavf: check for removal state before IAVF_FLAG_PF_COMMS_FAILED
  (git-fixes).
- iavf: fix potential deadlock on allocation failure (git-fixes).
- ice: Fix memory management in ice_ethtool_fdir.c (git-fixes).
- iavf: fix reset task race with iavf_remove() (git-fixes).
- iavf: fix a deadlock caused by rtnl and driver's lock circular
  dependencies (git-fixes).
- Revert "iavf: Do not restart Tx queues after reset task failure"
  (git-fixes).
- Revert "iavf: Detach device during reset task" (git-fixes).
- iavf: Wait for reset in callbacks which trigger it (git-fixes).
- ice: Fix max_rate check while configuring TX rate limits
  (git-fixes).
- net/mlx5e: Check for NOT_READY flag state after locking
  (git-fixes).
- net/mlx5e: fix memory leak in mlx5e_ptp_open (git-fixes).
- net/mlx5e: fix memory leak in mlx5e_fs_tt_redirect_any_create
  (git-fixes).
- net/mlx5e: fix double free in mlx5e_destroy_flow_table
  (git-fixes).
- sfc: fix crash when reading stats while NIC is resetting
  (git-fixes).
- ice: handle extts in the miscellaneous interrupt thread
  (git-fixes).
- net/mlx5: DR, Support SW created encap actions for FW table
  (git-fixes).
- net/mlx5e: xsk: Set napi_id to support busy polling on XSK RQ
  (git-fixes).
- net/mlx5e: XDP, Allow growing tail for XDP multi buffer
  (git-fixes).
- sfc: use budget for TX completions (git-fixes).
- sfc: fix XDP queues mode with legacy IRQ (git-fixes).
- iavf: Move netdev_update_features() into watchdog task
  (git-fixes).
- commit 79a5c42

- blacklist.conf: has non-trivial dependencies
- commit 0c7dbe0

- s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870).
- commit 66f8c8e

- KVM: s390: pv: fix index value of replaced ASCE (git-fixes
  bsc#1213867).
- commit e789a10

- s390/decompressor: specify __decompress() buf len to avoid
  overflow (git-fixes bsc#1213863).
- commit 59015c6

- libceph: harden msgr2.1 frame segment length checks
  (bsc#1213857).
- ceph: don't let check_caps skip sending responses for revoke
  msgs (bsc#1213856).
- commit 9052bbe

- KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620)
- commit 222f2a2

- Update config files: set CONFIG_GDS_FORCE_MITIGATION=n
- commit f04be94

- bpf: add missing header file include (bsc#1211738
  CVE-2023-0459).
- commit 1ccaaad

- Drop the recent USB gadget fix patches
  The recent USB gadget fix patches look dubious and likely leading to
  locking problem.  Drop them for now until we get the proper backports
  Deleted:
  patches.suse/usb-gadget-core-remove-unbalanced-mutex_unlock-in-us.patch
  patches.suse/usb-gadget-udc-core-Offload-usb_udc_vbus_handler-pro.patch
  patches.suse/usb-gadget-udc-core-Prevent-soft_connect_store-race.patch
- commit d9bbe1b

- block: Fix a source code comment in
  include/uapi/linux/blkzoned.h (git-fixes).
- commit 8349665

- blacklist.conf: cleanup
- commit fb32f77

- blacklist.conf: cleanup
- commit 4a72f90

- scftorture: Count reschedule IPIs (git-fixes).
- commit e88bc8d

- Revert "Drop AMDGPU patches for fixing regression (bsc#1213304,bsc#1213777)"
  SLE15-SP5 branch works as is, hence revive the dropped patches again.
- commit b4b1978

- netfilter: nft_set_pipapo: fix improper element removal
  (bsc#1213812 CVE-2023-4004).
- commit 4902a99

- Update
  patches.suse/RDMA-mthca-Fix-crash-when-polling-CQ-for-shared-QPs.patch
  (git-fixes bsc#1212604).
  Added bug reference.
- commit 391a3ba

- igc: Fix Kernel Panic during ndo_tx_timeout callback
  (git-fixes).
- iavf: use internal state to free traffic IRQs (git-fixes).
- iavf: Fix out-of-bounds when setting channels on remove
  (git-fixes).
- iavf: Fix use-after-free in free_netdev (git-fixes).
- igc: Prevent garbled TX queue with XDP ZEROCOPY (git-fixes).
- net: ena: fix shift-out-of-bounds in exponential backoff
  (git-fixes).
- igc: Fix inserting of empty frame for launchtime (git-fixes).
- igc: Fix launchtime before start of cycle (git-fixes).
- octeontx2-pf: Add additional check for MCAM rules (git-fixes).
- gve: unify driver name usage (git-fixes).
- octeontx2-af: Move validation of ptp pointer before its usage
  (git-fixes).
- igc: Handle PPS start time programming for past time values
  (git-fixes).
- igc: set TP bit in 'supported' and 'advertising' fields of
  ethtool_link_ksettings (git-fixes).
- igc: Remove delay during TX ring configuration (git-fixes).
- gve: Set default duplex configuration to full (git-fixes).
- octeontx-af: fix hardware timestamp configuration (git-fixes).
- igc: Work around HW bug causing missing timestamps (git-fixes).
- igc: Check if hardware TX timestamping is enabled earlier
  (git-fixes).
- igc: Fix race condition in PTP tx code (git-fixes).
- igc: Enable and fix RX hash usage by netstack (git-fixes).
- commit a695c8c

- s390/dasd: fix hanging device after quiesce/resume (git-fixes
  bsc#1213810).
- commit dfb76f0

- Drop AMDGPU patches for fixing regression (bsc#1213304,bsc#1213777)
  Deleted:
  patches.suse/drm-amd-display-Add-wrapper-to-call-planes-and-strea.patch
  patches.suse/drm-amd-display-Use-dc_update_planes_and_stream.patch
  Refreshed:
  patches.suse/drm-amd-display-fix-the-system-hang-while-disable-PS.patch
- commit b04dd6d

- usb: typec: Use sysfs_emit_at when concatenating the string
  (git-fixes).
- usb: typec: Iterate pds array when showing the pd list
  (git-fixes).
- usb: typec: Set port->pd before adding device for typec_port
  (git-fixes).
- commit 4e8be6b

- m ALSA: usb-audio: Add quirk for Tascam Model 12 (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-Update-for-native-DSD-support-quirks.patch.
- commit 99c6344

- usb: dwc3: pci: skip BYT GPIO lookup table for hardwired phy
  (git-fixes).
- Revert "usb: gadget: tegra-xudc: Fix error check in
  tegra_xudc_powerdomain_init()" (git-fixes).
- Revert "usb: xhci: tegra: Fix error check" (git-fixes).
- usb: gadget: core: remove unbalanced mutex_unlock in
  usb_gadget_activate (git-fixes).
- Revert "usb: dwc3: core: Enable AutoRetry feature in the
  controller" (git-fixes).
- Revert "xhci: add quirk for host controllers that don't update
  endpoint DCS" (git-fixes).
- usb: xhci-mtk: set the dma max_seg_size (git-fixes).
- usb: dwc3: don't reset device side if dwc3 was configured as
  host-only (git-fixes).
- serial: sifive: Fix sifive_serial_console_setup() section
  (git-fixes).
- Documentation: devices.txt: reconcile serial/ucc_uart minor
  numers (git-fixes).
- tty: n_gsm: fix UAF in gsm_cleanup_mux (git-fixes).
- staging: ks7010: potential buffer overflow in
  ks_wlan_set_encode_ext() (git-fixes).
- staging: r8712: Fix memory leak in _r8712_init_xmit_priv()
  (git-fixes).
- Revert "debugfs, coccinelle: check for obsolete
  DEFINE_SIMPLE_ATTRIBUTE() usage" (git-fixes).
- commit 68f52c9

- ipv6: rpl: Fix Route of Death (CVE-2023-2156 bsc#1211131).
- commit c2f8329

- RDMA/irdma: Report correct WC error (git-fixes)
- commit bbd2277

- RDMA/irdma: Fix op_type reporting in CQEs (git-fixes)
- commit 9cf2e90

- RDMA/bnxt_re: Fix hang during driver unload (git-fixes)
- commit 88338bc

- RDMA/bnxt_re: Prevent handling any completions after qp destroy (git-fixes)
- commit cea614e

- RDMA/mthca: Fix crash when polling CQ for shared QPs (git-fixes)
- commit 9675e7a

- RDMA/core: Update CMA destination address on rdma_resolve_addr (git-fixes)
- commit 2321b3b

- RDMA/irdma: Fix data race on CQP request done (git-fixes)
- commit ea2e3ca

- RDMA/irdma: Fix data race on CQP completion stats (git-fixes)
- commit 0780ef4

- RDMA/irdma: Add missing read barriers (git-fixes)
- commit 495eb3b

- RDMA/mlx4: Make check for invalid flags stricter (git-fixes)
- commit 67b00ed

- ALSA: usb-audio: Rate limit usb_set_interface error reporting
  (git-fixes).
- ALSA: usb-audio: Add FIXED_RATE quirk for JBL Quantum610
  Wireless (git-fixes).
- ALSA: usb-audio: Fix possible NULL pointer dereference in
  snd_usb_pcm_has_fixed_rate() (git-fixes).
- ALSA: usb-audio: Always initialize fixed_rate in
  snd_usb_find_implicit_fb_sync_format() (git-fixes).
- Revert "ALSA: usb-audio: Drop superfluous interface setup at
  parsing" (git-fixes).
- ALSA: usb-audio: More refactoring of hw constraint rules
  (git-fixes).
- ALSA: usb-audio: Add new quirk FIXED_RATE for JBL Quantum810
  Wireless (git-fixes).
- commit b55a442

- ALSA: usb-audio: Workaround for XRUN at prepare (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-Fix-broken-resume-due-to-UAC3-power-s.patch.
- commit 9074d7a

- ALSA: usb-audio: Avoid superfluous endpoint setup (git-fixes).
- ALSA: usb-audio: Correct the return code from
  snd_usb_endpoint_set_params() (git-fixes).
- ALSA: usb-audio: Apply mutex around
  snd_usb_endpoint_set_params() (git-fixes).
- ALSA: usb-audio: Avoid unnecessary interface change at EP close
  (git-fixes).
- ALSA: usb-audio: Properly refcounting clock rate (git-fixes).
- commit 0041e9b

- ALSA: usb-audio: Split endpoint setups for hw_params and prepare
  (take#2) (git-fixes).
- Refresh
  patches.suse/ALSA-usb-audio-Fix-broken-resume-due-to-UAC3-power-s.patch.
- commit 0822cdf

- ALSA: usb-audio: Clear fixed clock rate at closing EP
  (git-fixes).
- commit 5be6bf5

- ALSA: usb-audio: Drop superfluous interface setup at parsing
  (git-fixes).
- ALSA: usb-audio: Use atomic_try_cmpxchg in ep_state_update
  (git-fixes).
- ALSA: usb-audio: Fix wrong kfree issue in
  snd_usb_endpoint_free_all (git-fixes).
- ALSA: usb-audio: Refcount multiple accesses on the single clock
  (git-fixes).
- commit a3859e4

- amd-pstate: Fix amd_pstate mode switch (git-fixes).
- Refresh
  patches.suse/cpufreq-amd-pstate-Add-guided-mode-control-support-v.patch.
- commit f595cdb

- ALSA: usb-audio: Update for native DSD support quirks
  (git-fixes).
- commit 43f1612

- ACPI/IORT: Remove erroneous id_count check in
  iort_node_get_rmr_info() (git-fixes).
- drm/amd/display: Unlock on error path in
  dm_handle_mst_sideband_msg_ready_event() (git-fixes).
- drm/amd: Fix an error handling mistake in psp_sw_init()
  (git-fixes).
- drm/i915: Fix an error handling path in igt_write_huge()
  (git-fixes).
- drm/i915/dpt: Use shmem for dpt objects (git-fixes).
- commit 38b2687

- ASoC: atmel: Fix the 8K sample parameter in I2SC master
  (git-fixes).
- ASoC: rt711-sdca: fix for JD event handling in ClockStop Mode0
  (git-fixes).
- ASoC: rt711: fix for JD event handling in ClockStop Mode0
  (git-fixes).
- ASoc: codecs: ES8316: Fix DMIC config (git-fixes).
- ASoC: rt5682-sdw: fix for JD event handling in ClockStop Mode0
  (git-fixes).
- ASoC: wm8904: Fill the cache for WM8904_ADC_TEST_0 register
  (git-fixes).
- ASoC: da7219: Check for failure reading AAD IRQ events
  (git-fixes).
- ASoC: da7219: Flush pending AAD IRQ when suspending (git-fixes).
- ALSA: hda/realtek: Support ASUS G713PV laptop (git-fixes).
- ALSA: hda/relatek: Enable Mute LED on HP 250 G8 (git-fixes).
- commit e160036

- ata: pata_ns87415: mark ns87560_tf_read static (git-fixes).
- serial: qcom-geni: drop bogus runtime pm state update
  (git-fixes).
- hwmon: (k10temp) Enable AMD3255 Proc to show negative
  temperature (git-fixes).
- hwmon: (nct7802) Fix for temp6 (PECI1) processed even if PECI1
  disabled (git-fixes).
- tpm_tis: Explicitly check for error code (git-fixes).
- ASoC: fsl_spdif: Silence output on stop (git-fixes).
- drm/msm: Fix IS_ERR_OR_NULL() vs NULL check in
  a5xx_submit_in_rb() (git-fixes).
- drm/msm/adreno: Fix snapshot BINDLESS_DATA size (git-fixes).
- drm/msm/dpu: drop enum dpu_core_perf_data_bus_id (git-fixes).
- commit 2f04296

- file: always lock position for FMODE_ATOMIC_POS (bsc#1213759).
- commit 5a72d04

- x86/srso: Add IBPB on VMEXIT (bsc#1213287, CVE-2023-20569).
- commit 179babc

- x86/srso: Add IBPB (bsc#1213287, CVE-2023-20569).
- commit 2cb8ed9

- x86/srso: Add SRSO_NO support (bsc#1213287, CVE-2023-20569).
- commit 17c6a41

- KVM: downgrade two BUG_ONs to WARN_ON_ONCE (git-fixes)
- commit ad8acc9

- x86/cpu, kvm: Add support for CPUID_80000021_EAX (bsc#1213287, CVE-2023-20569).
- Refresh patches.suse/x86-cpufeatures-add-kabi-padding.patch.
- commit fe91ad7

- nvme: don't reject probe due to duplicate IDs for single-ported
  PCIe devices (git-fixes).
- nvme: fix the NVME_ID_NS_NVM_STS_MASK definition (git-fixes).
- commit 72e33c1

- x86/srso: Add IBPB_BRTYPE support (bsc#1213287, CVE-2023-20569).
- commit f111fdf

- KVM: arm64: Don't read a HW interrupt pending state in user context (git-fixes)
- commit ffcb733

- KVM: Don't null dereference ops->destroy (git-fixes)
- commit 3407958

- KVM: Initialize debugfs_dentry when a VM is created to avoid NULL (git-fixes)
- commit f80bc2c

- wifi: ath11k: add support for suspend in power down state
  (bsc#1207948).
- commit 0ef156d

- x86: Sanitize linker script (bsc#1213287, CVE-2023-20569).
- commit 16a308d

- nvme-pci: fix DMA direction of unmapping integrity data
  (git-fixes).
- nvme-pci: remove nvme_queue from nvme_iod (git-fixes).
- commit 3d56665

- x86/retbleed: Add __x86_return_thunk alignment checks (bsc#1213287, CVE-2023-20569).
- commit 7bc51ed

- scsi: lpfc: Copyright updates for 14.2.0.14 patches
  (bsc#1213756).
- scsi: lpfc: Update lpfc version to 14.2.0.14 (bsc#1213756).
- scsi: lpfc: Clean up SLI-4 sysfs resource reporting
  (bsc#1213756).
- scsi: lpfc: Refactor cpu affinity assignment paths
  (bsc#1213756).
- scsi: lpfc: Abort outstanding ELS cmds when mailbox timeout
  error is detected (bsc#1213756).
- scsi: lpfc: Make fabric zone discovery more robust when handling
  unsolicited LOGO (bsc#1213756).
- scsi: lpfc: Set Establish Image Pair service parameter only
  for Target Functions (bsc#1213756).
- scsi: lpfc: Revise ndlp kref handling for dev_loss_tmo_callbk
  and lpfc_drop_node (bsc#1213756).
- scsi: lpfc: Qualify ndlp discovery state when processing RSCN
  (bsc#1213756).
- scsi: lpfc: Remove extra ndlp kref decrement in FLOGI cmpl
  for loop topology (bsc#1213756).
- scsi: lpfc: Simplify fcp_abort transport callback log message
  (bsc#1213756).
- scsi: lpfc: Pull out fw diagnostic dump log message from
  driver's trace buffer (bsc#1213756).
- scsi: lpfc: Fix a possible data race in
  lpfc_unregister_fcf_rescan() (bsc#1213756).
- scsi: lpfc: Fix lpfc_name struct packing (bsc#1213756).
- scsi: lpfc: Avoid -Wstringop-overflow warning (bsc#1213756).
- scsi: lpfc: Use struct_size() helper (bsc#1213756).
- scsi: lpfc: Fix incorrect big endian type assignments in FDMI
  and VMID paths (bsc#1213756).
- scsi: lpfc: Replace all non-returning strlcpy() with strscpy()
  (bsc#1213756).
- scsi: lpfc: Replace one-element array with flexible-array member
  (bsc#1213756).
- scsi: lpfc: Fix incorrect big endian type assignment in bsg
  loopback path (bsc#1213756).
- commit 3d33912

- blacklist.conf: add commit 122deabfe142 ("ubifs: dirty_cow_znode: Fix
  memleak in error handling path")
  This is reverted in commit 7d01cb27f6ae ("Revert "ubifs:
  dirty_cow_znode: Fix memleak in error handling path"")
- commit b666937

- ubifs: Fix memory leak in do_rename (git-fixes).
- commit 9147a2c

- x86/srso: Add a Speculative RAS Overflow mitigation (bsc#1213287, CVE-2023-20569).
- commit 3021432

- afs: Fix server->active leak in afs_put_server (git-fixes).
- commit 214e9da

- afs: Fix dynamic root getattr (git-fixes).
- commit edbfecf

- jffs2: GC deadlock reading a page that is used in
  jffs2_write_begin() (git-fixes).
- commit d4f2e0b

- jffs2: reduce stack usage in jffs2_build_xattr_subsystem()
  (git-fixes).
- commit 5f487ee

- jffs2: fix memory leak in jffs2_do_fill_super (git-fixes).
- commit 359ea76

- jffs2: fix memory leak in jffs2_scan_medium (git-fixes).
- commit 47521cf

- jffs2: fix memory leak in jffs2_do_mount_fs (git-fixes).
- commit 3127ba1

- jffs2: fix use-after-free in jffs2_clear_xattr_subsystem
  (git-fixes).
- commit 629e159

- ubifs: Free memory for tmpfile name (git-fixes).
- commit b8a1ad9

- wifi: ath11k: remove MHI LOOPBACK channels (bsc#1207948).
- wifi: ath11k: handle thermal device registeration together
  with MAC (bsc#1207948).
- wifi: ath11k: handle irq enable/disable in several code path
  (bsc#1207948).
- bus: mhi: add new interfaces to handle MHI channels directly
  (bsc#1207948).
- bus: mhi: host: add destroy_device argument to mhi_power_down()
  (bsc#1207948).
- commit 9564a14

- ubifs: ubifs_writepage: Mark page dirty after writing inode
  failed (git-fixes).
- commit 840e02c

- ubifs: Re-statistic cleaned znode count if commit failed
  (git-fixes).
- commit 8fb0e1e

- ubifs: Fix memory leak in alloc_wbufs() (git-fixes).
- commit 8e663ab

- ubifs: Reserve one leb for each journal head while doing budget
  (git-fixes).
- commit cbe6386

- ubifs: do_rename: Fix wrong space budget when target inode's
  nlink > 1 (git-fixes).
- commit b6963c0

- ubifs: Fix wrong dirty space budget for dirty inode (git-fixes).
- commit b3864d7

- ubifs: Rectify space budget for ubifs_xrename() (git-fixes).
- commit 567a5c8

- ubifs: Rectify space budget for ubifs_symlink() if symlink is
  encrypted (git-fixes).
- commit 3474d4d

- scsi: qla2xxx: Update version to 10.02.08.500-k (bsc#1213747).
- scsi: qla2xxx: fix inconsistent TMF timeout (bsc#1213747).
- scsi: qla2xxx: Fix TMF leak through (bsc#1213747).
- scsi: qla2xxx: Turn off noisy message log (bsc#1213747).
- scsi: qla2xxx: Fix session hang in gnl (bsc#1213747).
- scsi: qla2xxx: Fix erroneous link up failure (bsc#1213747).
- scsi: qla2xxx: Fix command flush during TMF (bsc#1213747).
- scsi: qla2xxx: Limit TMF to 8 per function (bsc#1213747).
- scsi: qla2xxx: Adjust IOCB resource on qpair create
  (bsc#1213747).
- scsi: qla2xxx: Fix deletion race condition (bsc#1213747).
- scsi: qla2xxx: Use vmalloc_array() and vcalloc() (bsc#1213747).
- scsi: qla2xxx: Fix error code in qla2x00_start_sp()
  (bsc#1213747).
- scsi: qla2xxx: Silence a static checker warning (bsc#1213747).
- scsi: qla2xxx: Remove unused nvme_ls_waitq wait queue
  (bsc#1213747).
- scsi: qla2xxx: Update version to 10.02.08.400-k (bsc#1213747).
- scsi: qla2xxx: Correct the index of array (bsc#1213747).
- scsi: qla2xxx: Pointer may be dereferenced (bsc#1213747).
- scsi: qla2xxx: Fix buffer overrun (bsc#1213747).
- scsi: qla2xxx: Check valid rport returned by fc_bsg_to_rport()
  (bsc#1213747).
- scsi: qla2xxx: Avoid fcport pointer dereference (bsc#1213747).
- scsi: qla2xxx: Fix potential NULL pointer dereference
  (bsc#1213747).
- scsi: qla2xxx: Array index may go out of bound (bsc#1213747).
- scsi: qla2xxx: Drop useless LIST_HEAD (bsc#1213747).
- scsi: qla2xxx: Replace one-element array with
  DECLARE_FLEX_ARRAY() helper (bsc#1213747).
- scsi: qla2xxx: Fix end of loop test (bsc#1213747).
- scsi: qla2xxx: Fix NULL pointer dereference in target mode
  (bsc#1213747).
- commit e04dc4d

- ubifs: Fix build errors as symbol undefined (git-fixes).
- commit 003e06c

- series: udpate metadata
  Refresh
- patches.suse/ibmvnic-Do-not-reset-dql-stats-on-NON_FATAL-err.patch
- commit 3672423

- ubifs: Fix AA deadlock when setting xattr for encrypted file
  (git-fixes).
- commit 905856b

- ubifs: rename_whiteout: correct old_dir size computing
  (git-fixes).
- commit 746fc1a

- ubifs: Fix to add refcount once page is set private (git-fixes).
- commit eb16186

- ubifs: Fix read out-of-bounds in ubifs_wbuf_write_nolock()
  (git-fixes).
- commit ec064eb

- ubifs: setflags: Make dirtied_ino_d 8 bytes aligned (git-fixes).
- commit 44d5601

- ubifs: Rectify space amount budget for mkdir/tmpfile operations
  (git-fixes).
- commit 5c3e281

- x86/returnthunk: Allow different return thunks (bsc#1213287, CVE-2023-20569).
- commit 9047ebd

- ubifs: Fix 'ui->dirty' race between do_tmpfile() and writeback
  work (git-fixes).
- commit f4b451d

- ubifs: Rename whiteout atomically (git-fixes).
- commit eb7797d

- ubifs: Add missing iput if do_tmpfile() failed in rename
  whiteout (git-fixes).
- commit 6d376e9

- ubifs: Fix deadlock in concurrent rename whiteout and inode
  writeback (git-fixes).
- commit fcb2f4b

- ubifs: rename_whiteout: Fix double free for whiteout_ui->data
  (git-fixes).
- commit 289d359

- ubifs: Error path in ubifs_remount_rw() seems to wrongly free
  write buffers (git-fixes).
- commit 90b0b69

- fs: dlm: return positive pid value for F_GETLK (git-fixes).
- commit 6a5ab84

- fs: dlm: move sending fin message into state change handling
  (git-fixes).
- commit dab00d6

- fs: dlm: don't set stop rx flag after node reset (git-fixes).
- commit 4b30eff

- fs: dlm: start midcomms before scand (git-fixes).
- commit a80feb6

- fs: dlm: add midcomms init/start functions (git-fixes).
- commit 1f391d7

- fs: dlm: fix log of lowcomms vs midcomms (git-fixes).
- commit d7af52c

- fs: dlm: retry accept() until -EAGAIN or error returns
  (git-fixes).
- commit 8d74a84

- fs: dlm: handle -EBUSY first in lock arg validation (git-fixes).
- commit 8503974

- fs: dlm: fix race between test_bit() and queue_work()
  (git-fixes).
- commit a237b08

- fs: dlm: fix race in lowcomms (git-fixes).
- commit 92fc0f8

- dlm: fix missing lkb refcount handling (git-fixes).
- commit 263b40e

- dlm: fix plock invalid read (git-fixes).
- commit 7bcd1e8

- fs: dlm: filter user dlm messages for kernel locks (git-fixes).
- commit 38ca134

- afs: Fix vlserver probe RTT handling (git-fixes).
- commit fc1925d

- afs: Fix setting of mtime when creating a file/dir/symlink
  (git-fixes).
- commit 6bbf246

- afs: Fix updating of i_size with dv jump from server
  (git-fixes).
- commit 6731933

- afs: Fix lost servers_outstanding count (git-fixes).
- commit 29cfb62

- afs: Fix fileserver probe RTT handling (git-fixes).
- commit b1a6d0f

- afs: Use the operation issue time instead of the reply time
  for callbacks (git-fixes).
- commit dce7453

- afs: Return -EAGAIN, not -EREMOTEIO, when a file already locked
  (git-fixes).
- commit 856031a

- afs: Fix access after dec in put functions (git-fixes).
- commit 7e9acb5

- afs: Use refcount_t rather than atomic_t (git-fixes).
- commit ee87d6d

- afs: Fix infinite loop found by xfstest generic/676 (git-fixes).
- commit e319694

- afs: Adjust ACK interpretation to try and cope with NAT
  (git-fixes).
- commit 0170794

- rxrpc, afs: Fix selection of abort codes (git-fixes).
- commit 6b22544

- afs: Fix afs_getattr() to refetch file status if callback
  break occurred (git-fixes).
- commit 610ac25

- coda: Avoid partial allocation of sig_inputArgs (git-fixes).
- commit a4211ac

- fs: hfsplus: remove WARN_ON() from
  hfsplus_cat_{read,write}_inode() (git-fixes).
- commit e720f69

- FS: JFS: Check for read-only mounted filesystem in txBegin
  (git-fixes).
- commit 74fc884

- FS: JFS: Fix null-ptr-deref Read in txBegin (git-fixes).
- commit ded2fdb

- fs: jfs: Fix UBSAN: array-index-out-of-bounds in dbAllocDmapLev
  (git-fixes).
- commit d3b12be

- jfs: jfs_dmap: Validate db_l2nbperpage while mounting
  (git-fixes).
- commit cb7cfeb

- net: mana: Use the correct WQE count for ringing RQ doorbell
  (bsc#1212901).
- net: mana: Batch ringing RX queue doorbell on receiving packets
  (bsc#1212901).
- commit de409ae

- kernel-binary.spec.in: Remove superfluous %% in Supplements
  Fixes: 02b7735e0caf ("rpm/kernel-binary.spec.in: Add Enhances and Supplements tags to in-tree KMPs")
- commit 264db74

- drm/amd/display: check TG is non-null before checking if enabled
  (git-fixes).
- drm/amd/pm: re-enable the gfx imu when smu resume (git-fixes).
- commit 0e22ad9

- pinctrl: amd: Don't show `Invalid config param` errors
  (git-fixes).
- commit 924f82b

- can: gs_usb: gs_can_close(): add missing set of CAN state to
  CAN_STATE_STOPPED (git-fixes).
- net: phy: marvell10g: fix 88x3310 power up (git-fixes).
- soundwire: qcom: update status correctly with mask (git-fixes).
- phy: hisilicon: Fix an out of bounds check in
  hisi_inno_phy_probe() (git-fixes).
- regmap: Account for register length in SMBus I/O limits
  (git-fixes).
- regmap: Drop initial version of maximum transfer length fixes
  (git-fixes).
- ASoC: fsl_sai: Disable bit clock with transmitter (git-fixes).
- drm/amd/display: Keep PHY active for DP displays on DCN31
  (git-fixes).
- drm/amd/display: Disable MPC split by default on special asic
  (git-fixes).
- drm/client: Fix memory leak in drm_client_modeset_probe
  (git-fixes).
- pinctrl: amd: Use amd_pinconf_set() for all config options
  (git-fixes).
- drm/radeon: Fix integer overflow in radeon_cs_parser_init
  (git-fixes).
- ALSA: emu10k1: roll up loops in DSP setup code for Audigy
  (git-fixes).
- commit a35f25e

- io_uring: ensure IOPOLL locks around deferred work (bsc#1213272
  CVE-2023-21400).
- commit 744cfeb

- KVM: VMX: Inject #GP, not #UD, if SGX2 ENCLS leafs are
  unsupported (git-fixes).
- commit 34f9d1f

- KVM: VMX: Inject #GP on ENCLS if vCPU has paging disabled
  (CR0.PG==0) (git-fixes).
- commit 6d14c23

- Update config files: enable CONFIG_X86_AMD_PSTATE (bsc#1212445)
- commit 09b37e1

- KVM: VMX: restore vmx_vmexit alignment (git-fixes).
- commit fe48bf1

- KVM: x86: Account fastpath-only VM-Exits in vCPU stats
  (git-fixes).
- commit c6619e5

- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 52c1db3

- cpufreq: amd-pstate: add amd-pstate driver parameter for mode
  selection (bsc#1212445).
- commit 14292ad

- cpufreq: amd-pstate: Set a fallback policy based on
  preferred_profile (bsc#1212445).
- ACPI: CPPC: Add definition for undefined FADT preferred PM
  profile value (bsc#1212445).
- cpufreq: amd-pstate: Make amd-pstate EPP driver name hyphenated
  (bsc#1212445).
- cpufreq: amd-pstate: Write CPPC enable bit per-socket
  (bsc#1212445).
- cpufreq: amd-pstate: Update policy->cur in
  amd_pstate_adjust_perf() (bsc#1212445).
- cpufreq: amd-pstate: Remove fast_switch_possible flag from
  active driver (bsc#1212445).
- cpufreq: amd-pstate: Add ->fast_switch() callback (bsc#1212445).
- commit 8041c32

- cpufreq: amd-pstate: Make varaiable mode_state_machine static
  (bsc#1212445).
- cpufreq: amd-pstate: Add guided mode control support via sysfs
  (bsc#1212445).
- cpufreq: amd-pstate: Add guided autonomous mode (bsc#1212445).
- Documentation: cpufreq: amd-pstate: Move amd_pstate param to
  alphabetical order (bsc#1212445).
- cpufreq: amd-pstate: remove MODULE_LICENSE in non-modules
  (bsc#1212445).
- cpufreq: amd-pstate: Let user know amd-pstate is disabled
  (bsc#1212445).
- cpufreq: amd-pstate: Fix invalid write to MSR_AMD_CPPC_REQ
  (bsc#1212445).
- cpufreq: amd-pstate: avoid uninitialized variable use
  (bsc#1212445).
- cpufreq: amd-pstate: convert sprintf with sysfs_emit()
  (bsc#1212445).
- cpufreq: amd-pstate: add driver working mode switch support
  (bsc#1212445).
- cpufreq: amd-pstate: implement suspend and resume callbacks
  (bsc#1212445).
- commit cecc1a7

- vhost: support PACKED when setting-getting vring_base
  (git-fixes).
- commit 0bfd988

- cpufreq: amd-pstate: implement amd pstate cpu online and
  offline callback (bsc#1212445).
- Refresh patches.kabi/cpp_epp_perf-kABI-workaround.patch.
- commit 0db85b8

- cpufreq: amd-pstate: implement Pstate EPP support for the AMD
  processors (bsc#1212445).
- Refresh patches.kabi/cpp_epp_perf-kABI-workaround.patch.
- commit 43aa608

- cpufreq: amd-pstate: optimize driver working mode selection
  in amd_pstate_param() (bsc#1212445).
- cpufreq: amd-pstate: fix kernel hang issue while amd-pstate
  unregistering (bsc#1212445).
- cpufreq: amd-pstate: change amd-pstate driver to be built-in
  type (bsc#1212445).
- cpufreq: amd-pstate: cpufreq: amd-pstate: reset MSR_AMD_PERF_CTL
  register at init (bsc#1212445).
- cpufreq: amd-pstate: Fix Kconfig dependencies for AMD P-State
  (bsc#1212445).
- commit 81828e8

- cpufreq: amd-pstate: Expose struct amd_cpudata (bsc#1212445).
- MAINTAINERS: Add AMD P-State driver maintainer entry
  (bsc#1212445).
- commit f8c7ae3

- cpufreq: amd-pstate: Fix initial highest_perf value
  (bsc#1212445).
- cpufreq: amd-pstate: update pstate frequency transition delay
  time (bsc#1212445).
- cpufreq: amd_pstate: map desired perf into pstate scope for
  powersave governor (bsc#1212445).
- cpufreq: amd_pstate: fix wrong lowest perf fetch (bsc#1212445).
- cpufreq: amd-pstate: fix white-space (bsc#1212445).
- cpufreq: amd-pstate: simplify cpudata pointer assignment
  (bsc#1212445).
- ACPI: CPPC: Add ACPI disabled check to acpi_cpc_valid()
  (bsc#1212445).
- cpufreq: amd-pstate: Add resume and suspend callbacks
  (bsc#1212445).
- cpufreq: amd-pstate: Add more tracepoint for AMD P-State module
  (bsc#1212445).
- cpufreq: amd-pstate: Fix struct amd_cpudata kernel-doc comment
  (bsc#1212445).
- cpufreq: amd-pstate: Add AMD P-State performance attributes
  (bsc#1212445).
- cpufreq: amd-pstate: Add AMD P-State frequencies attributes
  (bsc#1212445).
- cpufreq: amd-pstate: Add boost mode support for AMD P-State
  (bsc#1212445).
- cpufreq: amd-pstate: Add trace for AMD P-State module
  (bsc#1212445).
- cpufreq: amd-pstate: Introduce the support for the processors
  with shared memory solution (bsc#1212445).
- cpufreq: amd-pstate: Add fast switch function for AMD P-State
  (bsc#1212445).
- cpufreq: amd-pstate: Introduce a new AMD P-State driver to
  support future processors (bsc#1212445).
- commit 68cc349

- vhost_net: revert upend_idx only on retriable error (git-fixes).
- commit 8b2dc73

- s390/vmem: fix empty page tables cleanup under KASAN (git-fixes
  bsc#1213715).
- commit 6879f59

- s390/qeth: Fix vipa deletion (git-fixes bsc#1213713).
- commit 48f331c

- virtio_net: Fix error unwinding of XDP initialization
  (git-fixes).
- commit a90e297

- virtio-net: Maintain reverse cleanup order (git-fixes).
- commit ee47906

- x86/PVH: obtain VGA console info in Dom0 (git-fixes).
- commit a5c9518

- xen/pvcalls-back: fix double frees with
  pvcalls_new_active_socket() (git-fixes).
- commit ae3a872

- xen/blkfront: Only check REQ_FUA for writes (git-fixes).
- commit 05a3279

- platform/x86: msi-laptop: Fix rfkill out-of-sync on MSI Wind
  U100 (git-fixes).
- media: staging: atomisp: select V4L2_FWNODE (git-fixes).
- commit 29a4c8a

- net/sched: cls_fw: Fix improper refcount update leads to
  use-after-free (CVE-2023-3776 bsc#1213588).
- commit 057a69b

- block, bfq: Fix division by zero error on zero wsum
  (bsc#1213653).
- commit da28d59

- md: add error_handlers for raid0 and linear (bsc#1212766).
- commit 19b2ae4

- drm/ttm: fix warning that we shouldn't mix && and ||
  (git-fixes).
- commit 25df30d

- drm/ttm: fix bulk_move corruption when adding a entry
  (git-fixes).
- commit 04de7a2

- ASoC: rt5640: Fix sleep in atomic context (git-fixes).
- commit ee2d57e

- net: nfc: Fix use-after-free caused by nfc_llcp_find_local
  (bsc#1213601 CVE-2023-3863).
- nfc: llcp: simplify llcp_sock_connect() error paths (bsc#1213601
  CVE-2023-3863).
- nfc: llcp: nullify llcp_sock->dev on connect() error paths
  (bsc#1213601 CVE-2023-3863).
- commit 63ddbca

- mhi_power_down() kABI workaround (bsc#1207948).
- commit 24dd94d

- kabi/severities: relax kABI for ath11k local symbols (bsc#1207948)
- commit 3000949

- Update
  patches.suse/vc_screen-don-t-clobber-return-value-in-vcs_read.patch
  (git-fixes bsc#1213167 CVE-2023-3567).
- Update
  patches.suse/vc_screen-modify-vcs_size-handling-in-vcs_read.patch
  (git-fixes bsc#1213167 CVE-2023-3567).
- Update
  patches.suse/vc_screen-move-load-of-struct-vc_data-pointer-in-vcs.patch
  (git-fixes bsc#1213167 CVE-2023-3567).
  Add references.
- commit 86b316a

- drm/vmwgfx: Remove explicit and broken vblank handling
  (bsc#1213632).
- commit d21ac8b

- drm/vmwgfx: Fix Legacy Display Unit atomic drm support
  (bsc#1213632).
- commit 6057f49

- drm/vmwgfx: Remove rcu locks from user resources (bsc#1213632).
- commit a689fa2

- Bluetooth: hci_ldisc: check HCI_UART_PROTO_READY flag in
  HCIUARTGETPROTO (bsc#1210780 CVE-2023-31083).
- commit ad56bc8

- ALSA: usb-audio: Add quirk for Microsoft Modern Wireless Headset
  (bsc#1207129).
- commit 6298aeb

- Revert "NFSv4: Retry LOCK on OLD_STATEID during delegation
  return" (git-fixes).
- NFSv4.1: freeze the session table upon receiving
  NFS4ERR_BADSESSION (git-fixes).
- svcrdma: Prevent page release when nothing was received
  (git-fixes).
- NFSD: add encoding of op_recall flag for write delegation
  (git-fixes).
- SUNRPC: Fix UAF in svc_tcp_listen_data_ready() (git-fixes).
- nfsd: fix double fget() bug in __write_ports_addfd()
  (git-fixes).
- NFSD: Remove open coding of string copy (git-fixes).
- SUNRPC: Fix trace_svc_register() call site (git-fixes).
- SUNRPC: always free ctxt when freeing deferred request
  (git-fixes).
- SUNRPC: double free xprt_ctxt while still in use (git-fixes).
- SUNRPC: remove the maximum number of retries in call_bind_status
  (git-fixes).
- NFSv4.1: Always send a RECLAIM_COMPLETE after establishing lease
  (git-fixes).
- SUNRPC: Remove dead code in svc_tcp_release_rqst() (git-fixes).
- NFSD: Fix sparse warning (git-fixes).
- commit 8c604d4

- drm/amd/display: fix access hdcp_workqueue assert (git-fixes).
- drm/amd/display: phase3 mst hdcp for multiple displays
  (git-fixes).
- commit d286bfe

- drm/amd/display: only accept async flips for fast updates
  (git-fixes).
- drm/amd/display: save restore hdcp state when display is
  unplugged from mst hub (git-fixes).
- drm/amd/display: Only update link settings after successful
  MST link train (git-fixes).
- commit d4f34b0

- net/sched: cls_u32: Fix reference counter leak leading to
  overflow (CVE-2023-3609 bsc#1213586).
- commit e129a1f

- net/sched: sch_qfq: account for stab overhead in qfq_enqueue
  (CVE-2023-3611 bsc#1213585).
- net/sched: sch_qfq: reintroduce lmax bound check for MTU
  (bsc#1213585).
- net/sched: sch_qfq: refactor parsing of netlink parameters
  (bsc#1213585).
- commit 67a1d0b

- Fix null pointer dereference in drm_dp_atomic_find_time_slots()
  (bsc#1213578).
- commit 453d6f3

- drm/amd/display: Add polling method to handle MST reply packet
  (bsc#1213578).
- commit 308c526

- IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes)
- commit cb2f513

- Revive drm_dp_mst_hpd_irq() function (bsc#1213578).
- commit 499a97d

- drm/dp_mst: Clear MSG_RDY flag before sending new message
  (bsc#1213578).
- commit a5454fb

- drm/amd/pm: conditionally disable pcie lane/speed switching
  for SMU13 (git-fixes).
- drm/amd/pm: share the code around SMU13 pcie parameters update
  (git-fixes).
- drm/i915: Don't preserve dpll_hw_state for slave crtc in
  Bigjoiner (git-fixes).
- drm/bridge: ti-sn65dsi86: Fix auxiliary bus lifetime
  (git-fixes).
- drm/amd/display: Add monitor specific edid quirk (git-fixes).
- drm/amd/display: Remove Phantom Pipe Check When Calculating
  K1 and K2 (git-fixes).
- drm/amd/pm: add abnormal fan detection for smu 13.0.0
  (git-fixes).
- drm/amd/display: fix seamless odm transitions (git-fixes).
- drm/amdgpu: Fix minmax warning (git-fixes).
- drm/amdgpu: add the fan abnormal detection feature (git-fixes).
- commit e81cef2

- pinctrl: amd: Detect internal GPIO0 debounce handling
  (git-fixes).
- commit 2209e7e

- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 01f0700

- usb: dwc2: platform: Improve error reporting for problems
  during .remove() (git-fixes).
- Refresh
  patches.suse/usb-dwc2-Fix-some-error-handling-paths.patch.
- commit c99cdac

- drm/atomic: Fix potential use-after-free in nonblocking commits
  (git-fixes).
- pinctrl: amd: Only use special debounce behavior for GPIO 0
  (git-fixes).
- drm/amdgpu: avoid restore process run into dead loop
  (git-fixes).
- i2c: xiic: Don't try to handle more interrupt events after error
  (git-fixes).
- drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes).
- drm/amdgpu: fix clearing mappings for BOs that are always
  valid in VM (git-fixes).
- USB: serial: option: add LARA-R6 01B PIDs (git-fixes).
- xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).
- xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
  (git-fixes).
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
  (git-fixes).
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
  (git-fixes).
- pinctrl: amd: Fix mistake in handling clearing pins at startup
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
  (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring
  on ADM1272 (git-fixes).
- selftests: rtnetlink: remove netdevsim device after ipsec
  offload test (git-fixes).
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev
  rename (git-fixes).
- mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).
- mmc: sdhci: fix DMA configure compatibility issue when 64bit
  DMA mode is used (git-fixes).
- kselftest: vDSO: Fix accumulation of uninitialized ret when
  CLOCK_REALTIME is undefined (git-fixes).
- ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error
  (git-fixes).
- crypto: qat - Use helper to set reqsize (git-fixes).
- crypto: kpp - Add helper to set reqsize (git-fixes).
- wifi: ray_cs: Drop useless status variable in parse_addr()
  (git-fixes).
- wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes).
- hwmon: (adm1275) Allow setting sample averaging (git-fixes).
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in
  xiic_process() (git-fixes).
- wl3501_cs: use eth_hw_addr_set() (git-fixes).
- commit 87a543d

- Update References tag
  patches.suse/fbcon-set_con2fb_map-needs-to-set-con2fb_map.patch
  (git-fixes bsc#1213417 CVE-2023-38409).
- commit 256b397

- xfs: wait iclog complete before tearing down AIL (bsc#1211811).
- commit a2d37c4

- xfs: run callbacks before waking waiters in
  xlog_state_shutdown_callbacks (bsc#1211811).
- commit 602a6b0

- drm/i915/tc: Fix system resume MST mode restore for DP-alt sinks
  (git-fixes).
- commit c057899

- ASoC: SOF: ipc3-dtrace: uninitialized data in
  dfsentry_trace_filter_write() (git-fixes).
- ASoC: amd: acp: fix for invalid dai id handling in
  acp_get_byte_count() (git-fixes).
- fbdev: imxfb: Removed unneeded release_mem_region (git-fixes).
- commit 8fba390

- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component
  remove (git-fixes).
- ASoC: codecs: wcd934x: fix resource leaks on component remove
  (git-fixes).
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
  (git-fixes).
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR
  (git-fixes).
- ASoC: codecs: wcd938x: fix soundwire initialisation race
  (git-fixes).
- ASoC: codecs: wcd938x: fix codec initialisation race
  (git-fixes).
- ASoC: tegra: Fix ADX byte map (git-fixes).
- ASoC: tegra: Fix AMX byte map (git-fixes).
- commit 2c27c0a

- ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops
  (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
- commit 61a595d

- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp
  (git-fixes).
- ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
  (git-fixes).
- fbdev: imxfb: warn about invalid left/right margin (git-fixes).
- commit 61676e6

- xfs: drop async cache flushes from CIL commits (bsc#1211811).
- commit b52f8c8

- xfs: async CIL flushes need pending pushes to be made stable
  (bsc#1211811).
- commit a7a8e83

- xfs: move the CIL workqueue to the CIL (bsc#1211811).
- commit bdc017f

- xfs: CIL work is serialised, not pipelined (bsc#1211811).
- commit 41681a2

- xfs: AIL needs asynchronous CIL forcing (bsc#1211811).
- commit df27a10

- xfs: order CIL checkpoint start records (bsc#1211811).
- commit 1723063

- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state()
  (bsc#1211811).
- commit 7d0f707

- xfs: don't run shutdown callbacks on active iclogs
  (bsc#1211811).
- Refresh patches.suse/xfs-pass-a-CIL-context-to-xlog_write.patch.
- commit bbe5b6f

- xfs: separate out log shutdown callback processing
  (bsc#1211811).
- commit 8739ead

- xfs: rework xlog_state_do_callback() (bsc#1211811).
- commit e073f75

- xfs: factor out log write ordering from xlog_cil_push_work()
  (bsc#1211811).
- commit 9190d3a

- xfs: pass a CIL context to xlog_write() (bsc#1211811).
- Delete
  patches.suse/xfs-drop-async-cache-flushes-from-CIL-commits.patch.
- commit 32853a9

- Revert "usb: gadget: udc: core: Offload usb_udc_vbus_handler processing"
  This reverts commit bc0618750f6987c96fa2a99ae8452ae74c5cb94b.
- commit 2488305

- Revert "usb: gadget: udc: core: Prevent soft_connect_store() race"
  This reverts commit b1dbc3a2da2b71fefe5889fb00557f6279033499.
  udc_lock and udc->connect_lock nesting must be resolved post-merge.
- commit aa5b47d

- xfs: XLOG_STATE_IOERROR must die (bsc#1211811).
- commit 90fa477

- xfs: move xlog_commit_record to xfs_log_cil.c (bsc#1211811).
- commit b415a31

- kabi/severities: ignore kABI of vmwgfx
  The driver exports a function unnecessarily without used by anyone else.
  Ignore the kABI changes.
- commit 62ee467

- kabi/severities: ignore kABI of i915 module
  It's exported only for its sub-module, not really used by externals
- commit 63cfeb5

- Add alt-commit to amdgpu patches
- commit bee21b3

- drm/amdgpu/vkms: relax timer deactivation by
  hrtimer_try_to_cancel (git-fixes).
- drm/msm/a5xx: really check for A510 in a5xx_gpu_init
  (git-fixes).
- drm/msm/dpu: clean up dpu_kms_get_clk_rate() returns
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: anx7625: Prevent endless probe loop (git-fixes).
- drm: Add fixed-point helper to get rounded integer values
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- drm: use mgr->dev in drm_dbg_kms in drm_dp_add_payload_part2
  (git-fixes).
- drm/amdgpu: vcn_4_0 set instance 0 init sched score to 1
  (git-fixes).
- drm/amd/pm: workaround for compute workload type on some skus
  (git-fixes).
- drm/amd/display: Reduce sdp bw after urgent to 90% (git-fixes).
- drm/amdgpu: change reserved vram info print (git-fixes).
- swsmu/amdgpu_smu: Fix the wrong if-condition (git-fixes).
- commit 3a68598

- drm/amd/pm: conditionally disable pcie lane switching for some
  sienna_cichlid SKUs (git-fixes).
- drm/amdgpu: enable tmz by default for GC 11.0.1 (git-fixes).
- drm/amd/pm: resolve reboot exception for si oland (git-fixes).
- drm/amd/pm: reverse mclk clocks levels for SMU v13.0.5
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for SMU v13.0.4
  (git-fixes).
- drm/amd/display: Have Payload Properly Created After Resume
  (git-fixes).
- drm/amd/pm: add missing NotifyPowerSource message mapping for
  SMU13.0.7 (git-fixes).
- drm/amd/pm: fix possible power mode mismatch between driver
  and PMFW (git-fixes).
- drm/amdgpu/gmc11: implement get_vbios_fb_size() (git-fixes).
- drm/amdgpu/gfx11: Adjust gfxoff before powergating on gfx11
  as well (git-fixes).
- drm/amdgpu/gfx11: update gpu_clock_counter logic (git-fixes).
- drm/amdgpu/jpeg: Remove harvest checking for JPEG3 (git-fixes).
- drm/amd/pm: avoid potential UBSAN issue on legacy asics
  (git-fixes).
- drm/amd/display: Enforce 60us prefetch for 200Mhz DCFCLK modes
  (git-fixes).
- drm/amdgpu: set gfx9 onwards APU atomics support to be true
  (git-fixes).
- drm/dsc: fix DP_DSC_MAX_BPP_DELTA_* macro values (git-fixes).
- drm/dsc: fix drm_edp_dsc_sink_output_bpp() DPCD high byte usage
  (git-fixes).
- commit 26f6cbe

- drm/amd/display: filter out invalid bits in pipe_fuses
  (git-fixes).
- commit 1fab8ae

- drm/amd/display: Change default Z8 watermark values (git-fixes).
- drm/amdgpu: fix an amdgpu_irq_put() issue in gmc_v9_0_hw_fini()
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v10_0_hw_fini
  (git-fixes).
- drm/amdgpu: fix amdgpu_irq_put call trace in gmc_v11_0_hw_fini
  (git-fixes).
- drm/i915: Check pipe source size when using skl+ scalers
  (git-fixes).
- drm/amd/display: Lowering min Z8 residency time (git-fixes).
- drm/amd/display: Add missing WA and MCLK validation (git-fixes).
- drm/amdgpu: reserve the old gc_11_0_*_mes.bin (git-fixes).
- drm/amdgpu: refine get gpu clock counter method (git-fixes).
- commit 6d48349

- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 05668f6

- drm/amdgpu: Fix sdma v4 sw fini error (git-fixes).
- drm/amd/display: Correct DML calculation to follow HW SPEC
  (git-fixes).
- drm/amd/amdgpu: introduce gc_*_mes_2.bin v2 (git-fixes).
- drm/amd/display: fixed dcn30+ underflow issue (git-fixes).
- drm/amd/display: Fix 4to1 MPC black screen with DPP RCO
  (git-fixes).
- drm/amd/amdgpu: limit one queue per gang (git-fixes).
- drm/i915/tc: Fix TC port link ref init for DP MST during HW
  readout (git-fixes).
- drm/amd/display: Ensure vmin and vmax adjust for DCE
  (git-fixes).
- drm/amd/display: Enable HostVM based on rIOMMU active
  (git-fixes).
- drm/amd/display: Update minimum stutter residency for DCN314 Z8
  (git-fixes).
- drm/amd/display: Add minimum Z8 residency debug option
  (git-fixes).
- drm/amd/display: Do not update DRR while BW optimizations
  pending (git-fixes).
- drm/amd/display: Correct DML calculation to align HW formula
  (git-fixes).
- drm/amd/display: populate subvp cmd info only for the top pipe
  (git-fixes).
- drm/rockchip: dw_hdmi: cleanup drm encoder during unbind
  (git-fixes).
- drm/amd/display: fix a divided-by-zero error (git-fixes).
- commit 9c0d61f

- drm/amd/display: limit timing for single dimm memory
  (git-fixes).
- drm/amd/display: set dcn315 lb bpp to 48 (git-fixes).
- drm/amdgpu: Fix desktop freezed after gpu-reset (git-fixes).
- drm: buddy_allocator: Fix buddy allocator init on 32-bit systems
  (git-fixes).
- drm/amdgpu/gfx: set cg flags to enter/exit safe mode
  (git-fixes).
- drm/amdgpu: Force signal hw_fences that are embedded in
  non-sched jobs (git-fixes).
- drm/amdgpu: add mes resume when do gfx post soft reset
  (git-fixes).
- drm/i915/guc: Fix missing ecodes (git-fixes).
- drm/i915/fbdev: lock the fbdev obj before vma pin (git-fixes).
- commit 602ee99

- drm/amdgpu/vcn: Disable indirect SRAM on Vangogh broken BIOSes
  (git-fixes).
- drm/i915/sseu: fix max_subslices array-index-out-of-bounds
  access (git-fixes).
- drm/display: Don't block HDR_OUTPUT_METADATA on unknown EOTF
  (git-fixes).
- drm/msm/adreno: fix runtime PM imbalance at unbind (git-fixes).
- drm/amd: Don't allow s0ix on APUs older than Raven (git-fixes).
- drm/i915: Populate encoder->devdata for DSI on icl+ (git-fixes).
- drm/amd/display: Update Z8 SR exit/enter latencies (git-fixes).
- drm/amd/display: Remove stutter only configurations (git-fixes).
- drm/amd/display: Fix Z8 support configurations (git-fixes).
- drm/i915/guc: Rename GuC register state capture node to be
  more obvious (git-fixes).
- commit ae9d397

- drm/msm/dpu: Add DSC hardware blocks to register snapshot
  (git-fixes).
- drm/amdgpu: declare firmware for new MES 11.0.4 (git-fixes).
- drm: rcar-du: Fix setting a reserved bit in DPLLCR (git-fixes).
- drm: rcar-du: Add quirk for H3 ES1.x pclk workaround
  (git-fixes).
- drm/i915/mtl: update scaler source and destination limits for
  MTL (git-fixes).
- drm: Add missing DP DSC extended capability definitions
  (git-fixes).
- Revert "drm/i915: Disable DSB usage for now" (git-fixes).
- drm/i915: Do panel VBT init early if the VBT declares an
  explicit panel type (git-fixes).
- drm/i915: Introduce intel_panel_init_alloc() (git-fixes).
- commit cc492ab

- drm/msm/hdmi: use devres helper for runtime PM management
  (git-fixes).
- Refresh
  patches.suse/drm-msm-hdmi-Add-missing-check-for-alloc_ordered_wor.patch.
- commit 7348d6f

- drm/amd: Use `amdgpu_ucode_*` helpers for MES (git-fixes).
- drm/amd: Load MES microcode during early_init (git-fixes).
- drm/amd/display: fix PSR-SU/DSC interoperability support
  (git-fixes).
- drm/amd: Add a new helper for loading/validating microcode
  (git-fixes).
- drm/display/dp_mst: Fix payload addition on a disconnected sink
  (git-fixes).
- drm/bridge: anx7625: Convert to i2c's .probe_new() (git-fixes).
- drm: panel-orientation-quirks: Add quirk for DynaBook K50
  (git-fixes).
- drm/panel: boe-tv101wum-nl6: Ensure DSI writes succeed during
  disable (git-fixes).
- drm/i915: Fix a memory leak with reused mmap_offset (git-fixes).
- drm/drm_vma_manager: Add drm_vma_node_allow_once() (git-fixes).
- drm: Optimize drm buddy top-down allocation method (git-fixes).
- drm/virtio: Fix memory leak in virtio_gpu_object_create()
  (git-fixes).
- drm/amd/display: Add debug option to skip PSR CRTC disable
  (git-fixes).
- drm/amdgpu/mes11: enable reg active poll (git-fixes).
- drm/amd/amdgpu: update mes11 api def (git-fixes).
- drm/msm/adreno: Simplify read64/write64 helpers (git-fixes).
- drm/amd/display: Add Z8 allow states to z-state support list
  (git-fixes).
- drm/amd/display: Update Z8 watermarks for DCN314 (git-fixes).
- drm/virtio: Simplify error handling of
  virtio_gpu_object_create() (git-fixes).
- commit e9a6574

- Update
  patches.suse/net-tun-fix-bugs-for-oversize-packet-when-napi-frags.patch
  (git-fixes CVE-2023-3812 bsc#1213543).
  Added CVE reference.
- commit 98bd6ff

- drm/i915/guc: Limit scheduling properties to avoid overflow
  (git-fixes).
- Refresh
  patches.suse/drm-i915-Fix-compute-pre-emption-w-a-to-apply-to-com.patch.
- commit 696b0f8

- adreno: Shutdown the GPU properly (git-fixes).
- drm/i915: Use _MMIO_PIPE() for SKL_BOTTOM_COLOR (git-fixes).
- drm/etnaviv: reap idle mapping if it doesn't match the softpin
  address (git-fixes).
- drm/etnaviv: move idle mapping reaping into separate function
  (git-fixes).
- drm/amdgpu: Don't set struct drm_driver.output_poll_changed
  (git-fixes).
- drm/meson: Fix return type of meson_encoder_cvbs_mode_valid()
  (git-fixes).
- drm/amd/display (gcc13): fix enum mismatch (git-fixes).
- drm/amdgpu: remove deprecated MES version vars (git-fixes).
- drm/amd/display: Remove optimization for VRR updates
  (git-fixes).
- drm/amd/display: Refactor eDP PSR codes (git-fixes).
- drm/amd/display: Remove FPU guards from the DML folder
  (git-fixes).
- drm/i915/guc: Add error-capture init warnings when needed
  (git-fixes).
- drm/i915/gt: Cleanup partial engine discovery failures
  (git-fixes).
- drm/i915: Allow panel fixed modes to have differing sync
  polarities (git-fixes).
- drm/i915: Print return value on error (git-fixes).
- drm/i915: Fix TypeC mode initialization during system resume
  (git-fixes).
- drm/vmwgfx: Remove vmwgfx_hashtab (git-fixes).
- drm/vmwgfx: Refactor ttm reference object hashtable to use
  linux/hashtable (git-fixes).
- drm/vmwgfx: Refactor resource validation hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Remove ttm object hashtable (git-fixes).
- drm/vmwgfx: Refactor resource manager's hashtable to use
  linux/hashtable implementation (git-fixes).
- drm/vmwgfx: Write the driver id registers (git-fixes).
- dma-buf/dma-resv: Stop leaking on krealloc() failure
  (git-fixes).
- Bluetooth: hci_sync: Avoid use-after-free in dbg for
  hci_remove_adv_monitor() (git-fixes).
- Bluetooth: ISO: fix iso_conn related locking and validity issues
  (git-fixes).
- Bluetooth: hci_event: call disconnect callback before deleting
  conn (git-fixes).
- Bluetooth: use RCU for hci_conn_params and iterate safely in
  hci_sync (git-fixes).
- commit a039f9f

- irqchip/gicv3: Workaround for NVIDIA erratum T241-FABRIC-4 (bsc#1213533)
- commit 42bde43

- irqchip/gicv3: Handle resource request failure consistently (bsc#1213533)
- commit 9a79248

- irqchip/gic-v3: Claim iomem resources (bsc#1213533)
- commit 58b558e

- drm/client: Fix memory leak in drm_client_target_cloned
  (git-fixes).
- net: phy: prevent stale pointer dereference in phy_init()
  (git-fixes).
- can: bcm: Fix UAF in bcm_proc_show() (git-fixes).
- selftests: tc: add ConnTrack procfs kconfig (git-fixes).
- selftests: tc: add 'ct' action kconfig dep (git-fixes).
- selftests: tc: set timeout to 15 minutes (git-fixes).
- rsi: remove kernel-doc comment marker (git-fixes).
- pie: fix kernel-doc notation warning (git-fixes).
- devlink: fix kernel-doc notation warnings (git-fixes).
- codel: fix kernel-doc notation warnings (git-fixes).
- commit a53eee1

- netfilter: nf_tables: prevent OOB access in nft_byteorder_eval
  (CVE-2023-35001 bsc#1213059).
- netfilter: nf_tables: do not ignore genmask when looking up
  chain by id (CVE-2023-31248 bsc#1213061).
- commit 2165cfd

- uaccess: Add speculation barrier to copy_from_user()
  (bsc#1211738 CVE-2023-0459).
- commit 444186d

- fuse: ioctl: translate ENOSYS in outarg (bsc#1213524).
- fuse: revalidate: don't invalidate if interrupted (bsc#1213523).
- commit 6e0bfdd

- netfilter: nf_tables: incorrect error path handling with
  NFT_MSG_NEWRULE (CVE-2023-3390 CVE-2023-3117 bsc#1212846
  bsc#1213245).
- commit fc1ae7b

- powerpc/pseries/vas: Hold mmap_mutex after mmap lock during
  window close (jsc#PED-542 git-fixes).
- commit 0caaae2

- Drop
  patches.suse/nvme-warn-about-shared-namespaces-without-CONFIG_NVM.patch (bsc#1213311)
- Delete
  patches.suse/nvme-warn-about-shared-namespaces-without-CONFIG_NVM.patch.
- Refresh
  patches.suse/nvme-refactor-namespace-probing.patch
- commit a744f3d

- KVM: Add GDS_NO support to KVM (bsc#1206418, CVE-2022-40982).
- commit aa4b0be

- x86/speculation: Add Kconfig option for GDS (bsc#1206418, CVE-2022-40982).
- commit 9f327b6

- x86/speculation: Add force option to GDS mitigation (bsc#1206418, CVE-2022-40982).
- commit a0b814b

- x86/speculation: Add Gather Data Sampling mitigation (bsc#1206418, CVE-2022-40982).
- commit bc512dd

- drm/i915: Never return 0 if not all requests retired
  (git-fixes).
- drm/i915: Fix negative value passed as remaining time
  (git-fixes).
- drm/i915/sdvo: Grab mode_config.mutex during LVDS init to
  avoid WARNs (git-fixes).
- commit d9993e1

- drm/i915/dp_mst: Add the MST topology state for modesetted CRTCs
  (bsc#1213493).
- commit 8d27c97

- xfs: don't deplete the reserve pool when trying to shrink the fs
  (git-fixes).
- commit 5a2f80d

- xfs: don't reverse order of items in bulk AIL insertion
  (git-fixes).
- commit d6e35fc

- xfs: fix logdev fsmap query result filtering (git-fixes).
- commit c455cfa

- xfs: clean up the rtbitmap fsmap backend (git-fixes).
- commit 48d04d0

- xfs: fix getfsmap reporting past the last rt extent (git-fixes).
- commit c0bf1f4

- xfs: fix integer overflows in the fsmap rtbitmap and logdev
  backends (git-fixes).
- commit 2722715

- xfs: fix interval filtering in multi-step fsmap queries
  (git-fixes).
- commit bdbe0c0

- xfs: fix uninitialized variable access (git-fixes).
- commit 00489cf

- xfs: pass explicit mount pointer to rtalloc query functions
  (git-fixes).
- commit 8dd0d7d

- xfs: make the record pointer passed to query_range functions
  const (git-fixes).
- commit f3907e2

- xfs: make fsmap backend function key parameters const
  (git-fixes).
- commit f2d77e2

- xfs: fix off-by-one error when the last rt extent is in use
  (git-fixes).
- commit 6038622

- ocfs2: Switch to security_inode_init_security() (git-fixes).
- commit a16070d

- ocfs2: check new file size on fallocate call (git-fixes).
- commit 3af0daa

- ocfs2: fix use-after-free when unmounting read-only filesystem
  (git-fixes).
- commit 32172b2

- smb: client: fix missed ses refcounting (git-fixes).
- commit 1464145

- Refresh
  patches.suse/keys-Fix-linking-a-duplicate-key-to-a-keyring-s-asso.patch.
- commit d8bebeb

- security: keys: Modify mismatched function name (git-fixes).
- tpm: tpm_vtpm_proxy: fix a race condition in /dev/vtpmx creation
  (git-fixes).
- commit 9b8aa64

- x86/cpu/amd: Add a Zenbleed fix (bsc#1213286, CVE-2023-20593).
- commit e269335

- x86/cpu/amd: Move the errata checking functionality up (bsc#1213286, CVE-2023-20593).
- commit 74df26d

- usb: gadget: udc: core: Prevent soft_connect_store() race
  (git-fixes).
- commit b1dbc3a

- usb: gadget: udc: core: Offload usb_udc_vbus_handler processing
  (git-fixes).
- commit bc06187

- x86/platform/uv: Update UV platform code for SNC (bsc#1212256
  jsc#PED-4718).
- x86/platform/uv: Remove remaining BUG_ON() and BUG() calls
  (bsc#1212256 jsc#PED-4718).
- x86/platform/uv: UV support for sub-NUMA clustering (bsc#1212256
  jsc#PED-4718).
- x86/platform/uv: Helper functions for allocating and freeing
  conversion tables (bsc#1212256 jsc#PED-4718).
- x86/platform/uv: When searching for minimums, start at INT_MAX
  not 99999 (bsc#1212256 jsc#PED-4718).
- x86/platform/uv: Fix printed information in calc_mmioh_map
  (bsc#1212256 jsc#PED-4718).
- x86/platform/uv: Introduce helper function uv_pnode_to_socket
  (bsc#1212256 jsc#PED-4718).
- x86/platform/uv: Add platform resolving #defines for misc
  GAM_MMIOH_REDIRECT* (bsc#1212256 jsc#PED-4718).
- commit 22f8c94

- rpm: Update dependency to match current kmod.
- commit d687dc3

- usb: dwc2: Fix some error handling paths (git-fixes).
- commit b3ae2f4

- blacklist.conf: optimization
- commit 9e3e296

- blacklist.conf: kABI
- commit 938b640

- usb: typec: Fix fast_role_swap_current show function
  (git-fixes).
- commit b9a4a79

- blacklist.conf: Blacklist redundant patch
- commit 48411ae

- arm64: vdso: Pass (void *) to virt_to_page() (git-fixes)
- commit 80dd531

- arm64/mm: mark private VM_FAULT_X defines as vm_fault_t (git-fixes)
- commit beb79bd

- Revert "arm64: dts: zynqmp: Add address-cells property to interrupt (git-fixes)
- commit d0d71ee

- arm64: dts: microchip: sparx5: do not use PSCI on reference boards (git-fixes)
- commit ada238c

- arm64: xor-neon: mark xor_arm64_neon_*() static (git-fixes)
- commit c9bacb3

- spi: bcm63xx: fix max prepend length (git-fixes).
- commit 656db51

- drm/i915: Fix one wrong caching mode enum usage (git-fixes).
- drm/panel: simple: Add Powertip PH800480T013 drm_display_mode
  flags (git-fixes).
- drm/ttm: Don't leak a resource on swapout move error
  (git-fixes).
- drm/panel: simple: Add connector_type for innolux_at043tn24
  (git-fixes).
- wifi: rtw89: debug: fix error code in
  rtw89_debug_priv_send_h2c_set() (git-fixes).
- wifi: airo: avoid uninitialized warning in airo_get_rate()
  (git-fixes).
- commit d32565b

- net: mana: Add support for vlan tagging (bsc#1212301).
- commit b4b8120

- s390: define RUNTIME_DISCARD_EXIT to fix link error with GNU
  ld < 2.36 (git-fixes bsc#1213264).
- commit 02c9941

- s390/debug: add _ASM_S390_ prefix to header guard (git-fixes
  bsc#1213263).
- commit ddf8224

- blacklist.conf: clang warning
- commit e4ffa77

- s390/ap: fix status returned by ap_aqic() (git-fixes
  bsc#1213259).
- commit 5299a79

- s390/ap: fix status returned by ap_qact() (git-fixes
  bsc#1213258).
- commit 43d22ed

- Move upstreamed x86 patch into sorted section
- commit d418f0a

- Move upstreamed AMDGPU patches into sorted section
- commit 399c97a

- Bluetooth: hci_bcm: do not mark valid bd_addr as invalid
  (git-fixes).
- commit 04e6123

- nilfs2: reject devices with insufficient block count
  (git-fixes).
- perf/x86/amd/core: Always clear status for idx (bsc#1213233).
- soundwire: bus_type: Avoid lockdep assert in sdw_drv_probe()
  (git-fixes).
- soundwire: cadence: Drain the RX FIFO after an IO timeout
  (git-fixes).
- commit 0234d5a

- s390/percpu: add READ_ONCE() to arch_this_cpu_to_op_simple()
  (git-fixes bsc#1213252).
- commit c694863

- drm/amdgpu: Fix memcpy() in
  sienna_cichlid_append_powerplay_table function (git-fixes).
- net: qrtr: Fix an uninit variable access bug in qrtr_tx_resume()
  (git-fixes).
- net: qrtr: start MHI channel after endpoit creation (git-fixes).
- commit 7915fbb

- cpufreq: tegra194: Fix module loading (git-fixes).
- drm/bridge: anx7625: Fix refcount bug in anx7625_parse_dt()
  (git-fixes).
- commit 0b3f8c1

- Bluetooth: fix use-bdaddr-property quirk (git-fixes).
- Bluetooth: fix invalid-bdaddr quirk for non-persistent setup
  (git-fixes).
- acpi: Fix suspend with Xen PV (git-fixes).
- commit 7879a1f

- wifi: ath11k: Add missing check for ioremap (git-fixes).
- wifi: ath10k: Trigger STA disconnect after reconfig complete
  on hardware restart (git-fixes).
- usb: typec: Fix fast_role_swap_current show function
  (git-fixes).
- x86/amd_nb: Add PCI ID for family 19h model 78h (git-fixes).
- commit 51addf5

- PCI: vmd: Fix uninitialized variable usage in
  vmd_enable_domain() (git-fixes).
- soundwire: stream: Add missing clear of alloc_slave_rt
  (git-fixes).
- selftests: cgroup: fix unsigned comparison with less than zero
  (git-fixes).
- selftests/ir: fix build with ancient kernel headers (git-fixes).
- selftests: forwarding: Fix packet matching in mirroring
  selftests (git-fixes).
- commit 72553e2

- drm/bridge: tc358767: Switch to devm MIPI-DSI helpers
  (git-fixes).
- drm/bridge: ti-sn65dsi83: Fix enable error path (git-fixes).
- drm/bridge: it6505: Move a variable assignment behind a null
  pointer check in receive_timing_debugfs_show() (git-fixes).
- drm/msm/dpu: Assign missing writeback log_mask (git-fixes).
- commit 85e8c29

- drm/msm/dpu: set DSC flush bit correctly at MDP CTL flush
  register (git-fixes).
- drm/amdgpu: Fix usage of UMC fill record in RAS (git-fixes).
- drm/amd/display: Fix a test dml32_rq_dlg_get_rq_reg()
  (git-fixes).
- drm/amd/display: Fix a test CalculatePrefetchSchedule()
  (git-fixes).
- commit 68b289c

- Add alt-commit to an amdgpu patch
- commit 17f4d4e

- s390: discard .interp section (git-fixes bsc#1213247).
- commit 227bb94

- Bluetooth: ISO: Fix CIG auto-allocation to select configurable
  CIG (git-fixes).
- commit 2742425

- Bluetooth: ISO: use hci_sync for setting CIG parameters
  (git-fixes).
- Bluetooth: ISO: consider right CIS when removing CIG at cleanup
  (git-fixes).
- commit 2dd543b

- ASoC: Intel: sof_sdw: remove SOF_SDW_TGL_HDMI for MeteorLake
  devices (git-fixes).
- ASoC: SOF: topology: Fix logic for copying tuples (git-fixes).
- commit 13a5a3a

- kABI fix after Restore kABI for NVidia vGPU driver
  (bsc#1210825).
- commit 61abbf8

- s390/pci: clean up left over special treatment for function zero
  (bsc#1212525).
- s390/pci: remove redundant pci_bus_add_devices() on new bus
  (bsc#1212525).
- s390/pci: only add specific device in zpci_bus_scan_device()
  (bsc#1212525).
- PCI: s390: Fix use-after-free of PCI resources with per-function
  hotplug (bsc#1212525).
- commit 12637e5

- i2c: tegra: Set ACPI node as primary fwnode (bsc#1213226).
- commit 9454717

- Restore kABI for NVidia vGPU driver (bsc#1210825).
- commit 416c78b

- smb: client: remove redundant pointer 'server' (bsc#1193629).
- commit 20babff

- cifs: fix session state transition to avoid use-after-free issue
  (bsc#1193629).
- commit a0e7e51

- cifs: new dynamic tracepoint to track ses not found errors
  (bsc#1193629).
- commit 79e9e86

- cifs: log session id when a matching ses is not found
  (bsc#1193629).
- commit 920ccfd

- smb: client: improve DFS mount check (bsc#1193629).
- commit 8dd4bf1

- smb: client: fix shared DFS root mounts with different prefixes
  (bsc#1193629).
- commit 4ae5a6b

- smb: client: fix parsing of source mount option (bsc#1193629).
- commit 2375f35

- smb: client: fix broken file attrs with nodfs mounts
  (bsc#1193629).
- commit cf3707b

- cifs: print client_guid in DebugData (bsc#1193629).
- commit edd7762

- cifs: fix session state check in smb2_find_smb_ses
  (bsc#1193629).
- commit 8dbfb28

- cifs: fix session state check in reconnect to avoid
  use-after-free issue (bsc#1193629).
- commit 6191deb

- cifs: do all necessary checks for credits within or before
  locking (bsc#1193629).
- commit 5bb05f4

- cifs: prevent use-after-free by freeing the cfile later
  (bsc#1193629).
- commit b7bc433

- smb: client: fix warning in generic_ip_connect() (bsc#1193629).
- commit f671e4f

- smb: client: fix warning in CIFSFindNext() (bsc#1193629).
- commit d1f13ae

- smb: client: fix warning in CIFSFindFirst() (bsc#1193629).
- commit 01673ee

- smb3: do not reserve too many oplock credits (bsc#1193629).
- commit 73fb9a2

- cifs: print more detail when invalidate_inode_mapping fails
  (bsc#1193629).
- commit a875165

- smb: client: fix warning in cifs_smb3_do_mount() (bsc#1193629).
- commit 28577bd

- smb: client: fix warning in cifs_match_super() (bsc#1193629).
- commit c6a889a

- cifs: print nosharesock value while dumping mount options
  (bsc#1193629).
- commit 4243019

- Refresh
  patches.suse/x86-xen-fix-secondary-processor-fpu-initialization.patch.
- commit 011270e

- x86: Fix .brk attribute in linker script (git-fixes).
- commit cacd6a8

- ceph: fix blindly expanding the readahead windows (bsc#1213206).
- ceph: add a dedicated private data for netfs rreq (bsc#1213205).
- commit 9f18816

- blacklist.conf: Blacklist 23ee27dce30e and dc94bb8f271c
- commit aa7880b

- Update patches.suse/fs-hfsplus-fix-UAF-issue-in-hfsplus_put_super.patch (CVE-2023-2985, bsc#1211867).
- commit b8edf00

krb5

- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0009-Ensure-array-count-consistency-in-kadm5-RPC.patch

libapparmor

- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)

cryptsetup

- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch

libfido2

- Use openssl 1.1 still on SLES 15 SP4 to avoid pulling unnecessary
  openssl-3 dependency.  jsc#PED-4521

openssl-1_1

- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch

- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch

- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch

pcre2

- Security fix: [bsc#1213514, CVE-2022-41409]
  * Integer overflow vulnerability in pcre2test before 10.41
    allows attackers to cause a denial of service or other
    unspecified impacts via negative input.
  * Add pcre2-CVE-2022-41409.patch

shadow

- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch

- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
  Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch

openssh

- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)

- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)

perl-Bootloader

- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944

- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943

- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942

- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941

- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940

perl

- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff

python-pyasn1

- To avoid users of this package having to recompile bytecode
  files, change the mtime of any __init__.py. (bsc#1207805)

samba

- secure channel faulty since Windows 10/11 update 07/2023;
  (bso#15418); (bsc#1213384).

- CVE-2022-2127: lm_resp_len not checked properly in
  winbindd_pam_auth_crap_send; (bso#15072); (bsc#1213174).
- CVE-2023-34966: Samba Spotlight mdssvc RPC Request Infinite
  Loop Denial-of-Service Vulnerability; (bso#15340); (bsc#1213173).
- CVE-2023-34967: Samba Spotlight mdssvc RPC Request Type
  Confusion Denial-of-Service Vulnerability; (bso#15341); (bsc#1213172).
- CVE-2023-34968: Spotlight server-side Share Path Disclosure;
  (bso#15388); (bsc#1213171).
- CVE-2023-3347: Samba doesn't require SMB2+ signing if
  `server signing = mandatory` is set; (bso#15397); (bsc#1213170).

- Update to 4.17.9
  * Backport --pidl-developer fixes; (bso#15404).
  * smbd_scavenger crashes when service smbd is stopped;
    (bso#15275).
  * vfs_fruit might cause a failing open for delete; (bso#15378).
  * named crashes on DLZ zone update; (bso#14030).
  * winbind recurses into itself via rpcd_lsad; (bso#15361).
  * cli_list loops 100% CPU against pre-lanman2 servers;
    (bso#15382).
  * smbclient leaks fds with showacls; (bso#15391).
  * aes256 smb3 encryption algorithms are not allowed in
    smb3_sid_parse(); (bso#15374).
  * winbindd gets stuck on NT_STATUS_RPC_SEC_PKG_ERROR;
    (bso#15413).
  * smbget memory leak if failed to download files recursively;
    (bso#15403).

- Update to 4.17.8
  * log flood: smbd_calculate_access_mask_fsp: Access denied:
    message level should be lower; (bso#15302).
  * Floating point exception (FPE) via cli_pull_send at
    source3/libsmb/clireadwrite.c; (bso#15306).
  * test_tstream_more_tcp_user_timeout_spin fails intermittently
    on Rackspace GitLab runners; (bso#15328).
  * Reduce flapping of ridalloc test; (bso#15329).
  * large_ldap test is unreliable; (bso#15351).
  * New filename parser doesn't check veto files smb.conf
    parameter; (bso#15143).
  * mdssvc may crash when initializing; (bso#15354).
  * Large directory optimization broken for non-lcomp path
    elements; (bso#15313).
  * streams_depot fails to create streams; (bso#15357).
  * shadow_copy2 and streams_depot don't play well together;
    (bso#15358).
  * wbinfo -u fails on ad dc with >1000 users; (bso#15366).
  * winbindd idmap child contacts the domain controller without a
    need; (bso#15317).
  * idmap_autorid may fail to map sids of trusted domains for the
    first time; (bso#15318).
  * idmap_hash doesn't use ID_TYPE_BOTH for reverse mappings;
    (bso#15319).
  * net ads search -P doesn't work against servers in other
    domains; (bso#15323).
  * DS ACEs might be inherited to unrelated object classes;
    (bso#15338).
  * Temporary smbXsrv_tcon_global.tdb can't be parsed;
    (bso#15353).
  * Setting veto files = /.*/ break listing directories;
    (bso#15360); (bsc#1212375).
  * CVE-2020-25720 [SECURITY] Create Child permission should not
    allow full write to all attributes (additional changes);
    (bso#14810).
  * dsgetdcname: assumes local system uses IPv4; (bso#15325).

000release-packages:sle-module-basesystem-release

n/a

000release-packages:sle-module-containers-release

n/a

000release-packages:sle-module-public-cloud-release

n/a

000release-packages:sle-module-server-applications-release

n/a

000release-packages:SLES-release

n/a

systemd-presets-common-SUSE

- Fix another case of systemctl being called with an empty
  argument. This if a preemptive fix for a similar issue to
  bsc#1212496.

- Don't call systemctl list-unit-files with an empty argument,
  this will break enabling of system unit files [bsc#1212496]

- Add wtmpdb-update-boot.service and wtmpdb-rotate.timer to enable
  wtmpdb as Y2038 safe wtmp replacement

wicked

- ifconfig: fix arp notify loop (boo#1212806) and burst sending
  [+ 0001-fix_arp_notify_loop_and_burst_sending.patch]

- update to version 0.6.73
- spec: cleanup artefacts and fix some rpmlint warnings
- arp: allow verify/notify counter and interval configuration
- arp: handle ENOBUFS sending errors (bsc#1203300)
- extensions: improve environment variable handling
- firmware: refactor firmware extension definition
- firmware: enable, disable and revert cli commands
- code cleanup: fix memory leaks, add array/list utils
- wireless: Ignore WIRELESS_EAP_AUTH within TLS (bsc#1211026)
- cleanup /var/run leftovers in extension scripts (bsc#1194557)
- json: output formatting improvements and Unicode support
- removed patches included in the source archive:
  [- 0001-bond-workaround-6.1-enslave-regression-boo-1206674.patch,
  - 0002-extensions-nbft-add-post-up-script.bsc-1211647.patch]