sles-sap-15-sp4-v20251022-x86-64 Package Source Changes

000release-packages:SLES_SAP-release

n/a

bind

- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch

kernel-default

- netfilter: nft_objref: validate objref and objrefmap expressions
  (bsc#1250237).
  No CVE available yet, please see the bugzilla ticket referenced.
- commit 4f0eb33

- xfrm: xfrm_alloc_spi shouldn't use 0 as SPI (CVE-2025-39797
  bsc#1249608).
- commit 159b5f2

- xfrm: Duplicate SPI Handling (CVE-2025-39797 bsc#1249608).
- commit be6d0eb

- rpl: Fix use-after-free in rpl_do_srh_inline() (CVE-2025-38476
  bsc#1247317).
- commit a8ae790

- KVM: x86: Reset IRTE to host control if *new* route isn't postable (bsc#1242960, CVE-2025-37885).
- commit d2a1295

- net/sched: ets: use old 'nbands' while purging unused classes
  (git-fixes).
- commit b4fe27e

- README.BRANCH: Add Lidong Zhong as a SLE15-SP4-LTSS co-maintainer.
- commit ea9aaf3

- net: If sock is dead don't access sock's sk_wq in
  sk_stream_wait_memory (CVE-2022-50409 bsc#1250392).
- commit 89e3be4

- net/mdiobus: Fix potential out-of-bounds read/write access
  (CVE-2025-38111 bsc#1245666).
- igb: Do not free q_vector unless new one was allocated
  (CVE-2022-50252 bsc#1249846).
- commit ce67a8c

- Update
  patches.suse/0001-mm-mempolicy-fix-memory-leak-in-set_mempolicy_home_n.patch
  (bsc#1206468 CVE-2022-50391 bsc#1250138).
- Update
  patches.suse/0001-ubi-ensure-that-VID-header-offset-VID-header-size-al.patch
  (bsc#1210584 CVE-2023-53265 bsc#1249908).
- Update
  patches.suse/0014-md-Replace-snprintf-with-scnprintf.patch
  (git-fixes bsc#1164051 CVE-2022-50299 bsc#1249734).
- Update
  patches.suse/0054-block-bfq-fix-uaf-for-bfqq-in-bfq_exit_icq_bfqq.patch
  (git-fixes CVE-2022-50329 bsc#1249699).
- Update
  patches.suse/ACPI-tables-FPDT-Don-t-call-acpi_os_map_memory-on-in.patch
  (git-fixes CVE-2022-50320 bsc#1249858).
- Update
  patches.suse/ACPICA-Add-AML_NO_OPERAND_RESOLVE-flag-to-Timer.patch
  (git-fixes CVE-2023-53395 bsc#1250358).
- Update
  patches.suse/ACPICA-Avoid-undefined-behavior-applying-zero-offset.patch
  (git-fixes CVE-2023-53182 bsc#1250010).
- Update
  patches.suse/ACPICA-Fix-error-code-path-in-acpi_ds_call_control_m.patch
  (git-fixes CVE-2022-50411 bsc#1250393).
- Update
  patches.suse/ACPICA-Fix-use-after-free-in-acpi_ut_copy_ipackage_t.patch
  (git-fixes CVE-2022-50423 bsc#1250784).
- Update
  patches.suse/ALSA-ac97-fix-possible-memory-leak-in-snd_ac97_dev_r.patch
  (git-fixes CVE-2022-50427 bsc#1250787).
- Update
  patches.suse/ALSA-aoa-i2sbus-fix-possible-memory-leak-in-i2sbus_a.patch
  (git-fixes CVE-2022-50431 bsc#1250790).
- Update
  patches.suse/ALSA-hda-Fix-Oops-by-9.1-surround-channel-names.patch
  (git-fixes CVE-2023-53400 bsc#1250328).
- Update
  patches.suse/ALSA-hda-fix-a-possible-null-pointer-dereference-due.patch
  (git-fixes CVE-2023-53275 bsc#1250459).
- Update
  patches.suse/ASoC-fsl_mqs-move-of_node_put-to-the-correct-locatio.patch
  (git-fixes CVE-2023-53268 bsc#1249914).
- Update
  patches.suse/ASoC-mediatek-mt8173-Enable-IRQ-when-pdata-is-ready.patch
  (git-fixes CVE-2022-50439 bsc#1250948).
- Update
  patches.suse/ASoC-mediatek-mt8183-fix-refcount-leak-in-mt8183_mt6.patch
  (git-fixes CVE-2022-50392 bsc#1250105).
- Update patches.suse/ASoC-qcom-Add-checks-for-devm_kcalloc.patch
  (git-fixes CVE-2022-50308 bsc#1249722).
- Update
  patches.suse/Bluetooth-Fix-potential-use-after-free-when-clear-ke.patch
  (git-fixes CVE-2023-53386 bsc#1250106).
- Update patches.suse/Bluetooth-L2CAP-Fix-use-after-free.patch
  (git-fixes CVE-2023-53305 bsc#1250049).
- Update patches.suse/Bluetooth-L2CAP-Fix-user-after-free.patch
  (git-fixes CVE-2022-50386 bsc#1250301).
- Update
  patches.suse/Bluetooth-L2CAP-fix-bad-unlock-balance-in-l2cap_disc.patch
  (git-fixes CVE-2023-53297 bsc#1250322).
- Update
  patches.suse/Bluetooth-hci_-ldisc-serdev-check-percpu_init_rwsem-.patch
  (git-fixes CVE-2022-50374 bsc#1250060).
- Update
  patches.suse/Bluetooth-hci_sysfs-Fix-attempting-to-call-device_ad.patch
  (git-fixes CVE-2022-50419 bsc#1250394).
- Update
  patches.suse/FS-JFS-Fix-null-ptr-deref-Read-in-txBegin.patch
  (git-fixes CVE-2023-53457 bsc#1250763).
- Update
  patches.suse/HID-multitouch-Correct-devm-device-reference-for-hid.patch
  (git-fixes CVE-2023-53454 bsc#1250759).
- Update
  patches.suse/IB-hfi1-Fix-possible-panic-during-hotplug-remove.patch
  (git-fixes CVE-2023-53488 bsc#1250825).
- Update
  patches.suse/KVM-s390-diag-fix-racy-access-of-physical-cpu-number-in-diag-9c-handler.patch
  (git-fixes bsc#1215911 CVE-2023-53205 bsc#1249677).
- Update patches.suse/NFS-Fix-an-Oops-in-nfs_d_automount.patch
  (git-fixes CVE-2022-50385 bsc#1250131).
- Update
  patches.suse/NFSD-Protect-against-send-buffer-overflow-in-NFSv2-R.patch
  (bsc#1205128 CVE-2022-43945 CVE-2022-50410 bsc#1250187).
- Update
  patches.suse/NFSD-Protect-against-send-buffer-overflow-in-NFSv2-Rdir.patch
  (bsc#1205128 CVE-2022-43945 CVE-2022-50235 bsc#1249667).
- Update
  patches.suse/NFSD-fix-leaked-reference-count-of-nfsd4_ssc_umount_.patch
  (git-fixes CVE-2023-53381 bsc#1250118).
- Update
  patches.suse/NFSD-fix-use-after-free-on-source-server-when-doing-.patch
  (git-fixes CVE-2022-50241 bsc#1249691).
- Update
  patches.suse/PCI-ASPM-Disable-ASPM-on-MFD-function-removal-to-avo.patch
  (git-fixes CVE-2023-53446 bsc#1250145).
- Update
  patches.suse/PM-devfreq-Fix-leak-in-devfreq_dev_release.patch
  (git-fixes CVE-2023-53518 bsc#1250923).
- Update
  patches.suse/PNP-fix-name-memory-leak-in-pnp_alloc_dev.patch
  (git-fixes CVE-2022-50278 bsc#1249715).
- Update
  patches.suse/RDMA-bnxt_re-wraparound-mbox-producer-index.patch
  (git-fixes CVE-2023-53201 bsc#1249687).
- Update
  patches.suse/RDMA-cma-Allow-UD-qp_type-to-join-multicast-only.patch
  (git-fixes CVE-2023-53525 bsc#1250927).
- Update
  patches.suse/RDMA-cxgb4-Fix-potential-null-ptr-deref-in-pass_esta.patch
  (git-fixes CVE-2023-53335 bsc#1250072).
- Update
  patches.suse/RDMA-mlx5-Fix-mlx5_ib_get_hw_stats-when-used-for-dev.patch
  (git-fixes CVE-2023-53393 bsc#1250114).
- Update
  patches.suse/RDMA-mlx5-Return-the-firmware-result-upon-destroying.patch
  (git-fixes CVE-2023-53286 bsc#1250325).
- Update
  patches.suse/USB-chipidea-fix-memory-leak-with-using-debugfs_look.patch
  (git-fixes CVE-2023-53334 bsc#1250077).
- Update
  patches.suse/USB-dwc3-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53415 bsc#1250412).
- Update
  patches.suse/USB-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53359 bsc#1250316).
- Update
  patches.suse/USB-fotg210-fix-memory-leak-with-using-debugfs_looku.patch
  (git-fixes CVE-2023-53404 bsc#1250331).
- Update
  patches.suse/USB-gadget-gr_udc-fix-memory-leak-with-using-debugfs.patch
  (git-fixes CVE-2023-53405 bsc#1250454).
- Update
  patches.suse/USB-gadget-pxa25x_udc-fix-memory-leak-with-using-deb.patch
  (git-fixes CVE-2023-53406 bsc#1250362).
- Update
  patches.suse/USB-isp116x-fix-memory-leak-with-using-debugfs_looku.patch
  (git-fixes CVE-2023-53413 bsc#1250370).
- Update
  patches.suse/USB-isp1362-fix-memory-leak-with-using-debugfs_looku.patch
  (git-fixes CVE-2023-53416 bsc#1250428).
- Update
  patches.suse/USB-uhci-fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53197 bsc#1249791).
- Update
  patches.suse/VMCI-check-context-notify_page-after-call-to-get_use.patch
  (git-fixes CVE-2023-53259 bsc#1249767).
- Update
  patches.suse/arm64-efi-Make-efi_rt_lock-a-raw_spinlock.patch
  (git-fixes CVE-2023-53216 bsc#1249669).
- Update
  patches.suse/blk-mq-fix-possible-memleak-when-register-hctx-failed-4b7a.patch
  (git-fixes CVE-2022-50434 bsc#1250792).
- Update
  patches.suse/brcmfmac-return-error-when-getting-invalid-max_flowr.patch
  (git-fixes CVE-2022-50358 bsc#1250264).
- Update
  patches.suse/btrfs-fix-race-between-quota-enable-and-quota-rescan.patch
  (bsc#1207158 CVE-2022-50379 bsc#1250245).
- Update
  patches.suse/btrfs-fix-resolving-backrefs-for-inline-extent-follo.patch
  (bsc#1206456 CVE-2022-50456 bsc#1250856).
- Update
  patches.suse/caif-fix-memory-leak-in-cfctrl_linkup_request.patch
  (git-fixes CVE-2023-53330 bsc#1249954).
- Update
  patches.suse/can-bcm-bcm_tx_setup-fix-KMSAN-uninit-value-in-vfs_w.patch
  (git-fixes CVE-2023-53344 bsc#1250023).
- Update
  patches.suse/cassini-Fix-a-memory-leak-in-the-error-handling-path.patch
  (git-fixes CVE-2023-53435 bsc#1250159).
- Update
  patches.suse/chardev-fix-error-handling-in-cdev_device_add.patch
  (git-fixes CVE-2022-50282 bsc#1249739).
- Update
  patches.suse/cifs-Fix-memory-leak-when-build-ntlmssp-negotiate-blob-failed.patch
  (bsc#1193629 CVE-2022-50372 bsc#1250052).
- Update
  patches.suse/cifs-Fix-warning-and-UAF-when-destroy-the-MR-list.patch
  (git-fixes CVE-2023-53427 bsc#1250168).
- Update patches.suse/cifs-Fix-xid-leak-in-cifs_create-.patch
  (bsc#1193629 CVE-2022-50351 bsc#1249925).
- Update patches.suse/cifs-Fix-xid-leak-in-cifs_flock-.patch
  (bsc#1193629 CVE-2022-50460 bsc#1250879).
- Update
  patches.suse/cifs-fix-DFS-traversal-oops-without-CONFIG_CIFS_DFS_UPCALL.patch
  (bsc#1193629 CVE-2023-53246 bsc#1249867).
- Update
  patches.suse/cifs-prevent-use-after-free-by-freeing-the-cfile-later.patch
  (bsc#1193629 CVE-2023-53377 bsc#1250161).
- Update
  patches.suse/clk-imx-clk-imx8mn-fix-memory-leak-in-imx8mn_clocks_.patch
  (git-fixes CVE-2023-53249 bsc#1249642).
- Update
  patches.suse/clk-samsung-Fix-memory-leak-in-_samsung_clk_register.patch
  (git-fixes CVE-2022-50449 bsc#1250889).
- Update
  patches.suse/clk-socfpga-Fix-memory-leak-in-socfpga_gate_init.patch
  (git-fixes CVE-2022-50264 bsc#1249685).
- Update
  patches.suse/clk-tegra-Fix-refcount-leak-in-tegra210_clock_init.patch
  (git-fixes CVE-2022-50458 bsc#1250891).
- Update
  patches.suse/clk-tegra-tegra124-emc-Fix-potential-memory-leak.patch
  (git-fixes CVE-2023-53505 bsc#1250807).
- Update
  patches.suse/clk-tegra20-Fix-refcount-leak-in-tegra20_clock_init.patch
  (git-fixes CVE-2022-50444 bsc#1250767).
- Update
  patches.suse/cpufreq-qcom-fix-writes-in-read-only-memory-region.patch
  (git-fixes CVE-2022-50239 bsc#1249836).
- Update
  patches.suse/crypto-cavium-prevent-integer-overflow-loading-firmw.patch
  (git-fixes CVE-2022-50330 bsc#1249700).
- Update patches.suse/crypto-seqiv-Handle-EBUSY-correctly.patch
  (git-fixes CVE-2023-53373 bsc#1250137).
- Update patches.suse/crypto-xts-Handle-EBUSY-correctly.patch
  (git-fixes CVE-2023-53494 bsc#1250822).
- Update
  patches.suse/dmaengine-hisilicon-Add-multi-thread-support-for-a-D.patch
  (git-fixes CVE-2022-50362 bsc#1250039).
- Update
  patches.suse/drivers-base-component-fix-memory-leak-with-using-de.patch
  (git-fixes CVE-2023-53409 bsc#1250418).
- Update
  patches.suse/drivers-base-dd-fix-memory-leak-with-using-debugfs_l.patch
  (git-fixes CVE-2023-53390 bsc#1250453).
- Update
  patches.suse/drivers-md-md-bitmap-check-the-return-value-of-md_bitmap_get_counter-3bd5.patch
  (git-fixes CVE-2022-50402 bsc#1250363).
- Update
  patches.suse/drivers-serial-jsm-fix-some-leaks-in-probe.patch
  (git-fixes CVE-2022-50312 bsc#1249716).
- Update
  patches.suse/drivers-staging-rtl8723bs-Fix-locking-in-_rtw_join_t.patch
  (git-fixes CVE-2023-53281 bsc#1249939).
- Update
  patches.suse/drm-amd-display-Fix-potential-null-dereference.patch
  (git-fixes CVE-2023-53498 bsc#1250819).
- Update
  patches.suse/drm-amdgpu-gfx-disable-gfx9-cp_ecc_error_irq-only-wh.patch
  (git-fixes CVE-2023-53471 bsc#1250866).
- Update
  patches.suse/drm-bridge-megachips-Fix-a-null-pointer-dereference-.patch
  (git-fixes CVE-2022-50317 bsc#1249713).
- Update
  patches.suse/drm-client-Fix-memory-leak-in-drm_client_modeset_pro.patch
  (git-fixes CVE-2023-53288 bsc#1250058).
- Update
  patches.suse/drm-mediatek-Clean-dangling-pointer-on-bind-error-pa.patch
  (git-fixes CVE-2023-53388 bsc#1250191).
- Update
  patches.suse/drm-msm-Make-.remove-and-.shutdown-HW-shutdown-consi.patch
  (git-fixes CVE-2022-50260 bsc#1249885).
- Update
  patches.suse/drm-msm-dp-Free-resources-after-unregistering-them.patch
  (git-fixes CVE-2023-53316 bsc#1250066).
- Update
  patches.suse/drm-msm-dsi-Add-missing-check-for-alloc_ordered_work.patch
  (git-fixes CVE-2023-53223 bsc#1250080).
- Update
  patches.suse/drm-msm-dsi-fix-memory-corruption-with-too-many-brid.patch
  (git-fixes CVE-2022-50368 bsc#1250009).
- Update
  patches.suse/drm-msm-hdmi-fix-memory-corruption-with-too-many-bri.patch
  (git-fixes CVE-2022-50437 bsc#1250797).
- Update patches.suse/drm-msm-mdp5-Add-check-for-kzalloc.patch
  (git-fixes CVE-2023-53239 bsc#1249781).
- Update
  patches.suse/drm-msm-mdp5-Don-t-leak-some-plane-state.patch
  (git-fixes CVE-2023-53324 bsc#1250070).
- Update
  patches.suse/drm-nouveau-fix-a-use-after-free-in-nouveau_gem_prim.patch
  (git-fixes CVE-2022-50454 bsc#1250890).
- Update
  patches.suse/drm-panfrost-Fix-GEM-handle-creation-ref-counting.patch
  (git-fixes CVE-2022-50417 bsc#1250184).
- Update
  patches.suse/drm-radeon-Add-the-missed-acpi_put_table-to-fix-memo.patch
  (git-fixes CVE-2022-50275 bsc#1249705).
- Update
  patches.suse/drm-radeon-Fix-integer-overflow-in-radeon_cs_parser_.patch
  (git-fixes CVE-2023-53309 bsc#1250055).
- Update
  patches.suse/drm-radeon-free-iio-for-atombios-when-driver-shutdow.patch
  (git-fixes CVE-2023-53453 bsc#1250761).
- Update
  patches.suse/drm-rockchip-lvds-fix-PM-usage-counter-unbalance-in-.patch
  (git-fixes CVE-2022-50443 bsc#1250768).
- Update
  patches.suse/drm-sti-Fix-return-type-of-sti_-dvo-hda-hdmi-_connec.patch
  (git-fixes CVE-2022-50261 bsc#1249742).
- Update
  patches.suse/drm-ttm-check-null-pointer-before-accessing-when-swa.patch
  (git-fixes CVE-2023-53352 bsc#1250006).
- Update patches.suse/drm-vkms-Fix-memory-leak-in-vkms_init.patch
  (git-fixes CVE-2022-50269 bsc#1249777).
- Update
  patches.suse/drm-vkms-Fix-null-ptr-deref-in-vkms_release.patch
  (git-fixes CVE-2022-50369 bsc#1250026).
- Update
  patches.suse/drm-vmwgfx-Validate-the-box-size-for-the-snooped-cur.patch
  (bsc#1203332 CVE-2022-36280 git-fixes CVE-2022-50440
  bsc#1250853).
- Update
  patches.suse/ext4-avoid-crash-when-inline-data-creation-follows-D.patch
  (bsc#1206883 CVE-2022-50435 bsc#1250799).
- Update
  patches.suse/ext4-avoid-deadlock-in-fs-reclaim-with-page-writebac.patch
  (bsc#1213016 CVE-2023-53149 bsc#1249882).
- Update
  patches.suse/ext4-don-t-allow-journal-inode-to-have-encrypt-flag.patch
  (bsc#1207621 CVE-2022-50277 bsc#1249750).
- Update
  patches.suse/ext4-don-t-set-up-encryption-key-during-jbd2-transac.patch
  (bsc#1207624 CVE-2022-50436 bsc#1250846).
- Update patches.suse/ext4-fix-WARNING-in-mb_find_extent.patch
  (bsc#1213099 CVE-2023-53317 bsc#1250081).
- Update
  patches.suse/ext4-fix-delayed-allocation-bug-in-ext4_clu_mapped-f.patch
  (bsc#1207631 CVE-2022-50286 bsc#1249753).
- Update
  patches.suse/ext4-fix-i_disksize-exceeding-i_size-problem-in-pari.patch
  (bsc#1213015 CVE-2023-53270 bsc#1249872).
- Update
  patches.suse/ext4-fix-leaking-uninitialized-memory-in-fast-commit.patch
  (bsc#1207625 CVE-2022-50465 bsc#1250883).
- Update
  patches.suse/ext4-fix-null-ptr-deref-in-ext4_write_info.patch
  (bsc#1206884 CVE-2022-50344 bsc#1250014).
- Update
  patches.suse/ext4-fix-off-by-one-errors-in-fast-commit-block-fill.patch
  (bsc#1207628 CVE-2022-50428 bsc#1250786).
- Update
  patches.suse/ext4-improve-error-handling-from-ext4_dirhash.patch
  (bsc#1213104 CVE-2023-53473 bsc#1250848).
- Update
  patches.suse/ext4-init-quota-for-old.inode-in-ext4_rename.patch
  (bsc#1207629 CVE-2022-50346 bsc#1250044).
- Update
  patches.suse/fbdev-ep93xx-fb-Do-not-assign-to-struct-fb_info.dev.patch
  (git-fixes CVE-2023-53314 bsc#1250065).
- Update
  patches.suse/fbdev-fbcon-release-buffer-when-fbcon_do_set_font-fa.patch
  (git-fixes CVE-2022-50404 bsc#1250153).
- Update
  patches.suse/firmware-dmi-sysfs-Fix-null-ptr-deref-in-dmi_sysfs_r.patch
  (git-fixes CVE-2023-53250 bsc#1249727).
- Update
  patches.suse/firmware-stratix10-svc-Fix-a-potential-resource-leak.patch
  (git-fixes CVE-2023-53255 bsc#1249762).
- Update
  patches.suse/floppy-Fix-memory-leak-in-do_floppy_init.patch
  (git-fixes CVE-2022-50342 bsc#1249890).
- Update
  patches.suse/fs-binfmt_elf-Fix-memory-leak-in-load_elf_binary.patch
  (git-fixes CVE-2022-50466 bsc#1250875).
- Update patches.suse/fs-dlm-fix-race-in-lowcomms.patch (git-fixes
  CVE-2022-50373 bsc#1250287).
- Update
  patches.suse/fs-fix-UAF-GPF-bug-in-nilfs_mdt_destroy.patch
  (CVE-2022-2978 bsc#1202700 CVE-2022-50367 bsc#1250277).
- Update
  patches.suse/fs-jfs-Fix-UBSAN-array-index-out-of-bounds-in-dbAllocDmapLev.patch
  (git-fixes CVE-2023-53485 bsc#1250872).
- Update
  patches.suse/fs-jfs-fix-shift-out-of-bounds-in-dbDiscardAG.patch
  (git-fixes CVE-2022-50333 bsc#1249860).
- Update
  patches.suse/gpiolib-cdev-fix-NULL-pointer-dereferences.patch
  (git-fixes CVE-2022-50453 bsc#1250887).
- Update
  patches.suse/i2c-designware-Fix-handling-of-real-but-unexpected-d.patch
  (git-fixes CVE-2022-50370 bsc#1250011).
- Update
  patches.suse/i2c-ismt-Fix-an-out-of-bounds-bug-in-ismt_access.patch
  (git-fixes CVE-2022-50394 bsc#1250107).
- Update
  patches.suse/i2c-mux-reg-check-return-value-after-calling-platfor.patch
  (git-fixes CVE-2022-50364 bsc#1250083).
- Update
  patches.suse/ibmvnic-Do-not-reset-dql-stats-on-NON_FATAL-err.patch
  (bsc#1212603 ltc#202604 CVE-2023-53463 bsc#1250867).
- Update
  patches.suse/integrity-Fix-memory-leakage-in-keyring-allocation-e.patch
  (git-fixes CVE-2022-50395 bsc#1250211).
- Update
  patches.suse/io_uring-af_unix-defer-registered-files-gc-to-io_uri.patch
  (bsc#1204228 CVE-2022-2602 CVE-2022-50234 bsc#1249664).
- Update patches.suse/iommu-omap-Fix-buffer-overflow-in-debugfs
  (git-fixes CVE-2022-50301 bsc#1249733).
- Update
  patches.suse/iw_cxgb4-Fix-potential-NULL-dereference-in-c4iw_fill.patch
  (git-fixes CVE-2023-53476 bsc#1250839).
- Update
  patches.suse/jbd2-check-jh-b_transaction-before-removing-it-from-.patch
  (bsc#1214953 CVE-2023-53526 bsc#1250928).
- Update
  patches.suse/jbd2-fix-potential-use-after-free-in-jbd2_fc_wait_bu.patch
  (bsc#1207645 CVE-2022-50328 bsc#1250181).
- Update
  patches.suse/jfs-jfs_dmap-Validate-db_l2nbperpage-while-mounting.patch
  (git-fixes CVE-2023-53222 bsc#1249864).
- Update
  patches.suse/kernfs-fix-use-after-free-in-__kernfs_remove.patch
  (git-fixes CVE-2022-50432 bsc#1250851).
- Update
  patches.suse/kprobes-Fix-check-for-probe-enabled-in-kill_kprobe.patch
  (git-fixes CVE-2022-50266 bsc#1249810).
- Update patches.suse/md-fix-a-crash-in-mempool_free-3410.patch
  (git-fixes CVE-2022-50381 bsc#1250257).
- Update
  patches.suse/md-raid10-fix-leak-of-r10bio-remaining-for-recovery-2620.patch
  (git-fixes CVE-2023-53299 bsc#1249927).
- Update
  patches.suse/md-raid10-fix-null-ptr-deref-of-mreplace-in-raid10_s-3481.patch
  (git-fixes CVE-2023-53380 bsc#1250198).
- Update
  patches.suse/md-raid10-fix-wrong-setting-of-max_corr_read_errors-f8b2.patch
  (git-fixes CVE-2023-53313 bsc#1249911).
- Update
  patches.suse/md-raid10-prevent-soft-lockup-while-flush-writes-0104.patch
  (git-fixes CVE-2023-53151 bsc#1249865).
- Update
  patches.suse/media-atomisp-prevent-integer-overflow-in-sh_css_set.patch
  (git-fixes CVE-2022-50399 bsc#1250108).
- Update
  patches.suse/media-cx23885-Fix-a-null-ptr-deref-bug-in-buffer_pre.patch
  (git-fixes CVE-2023-53458 bsc#1250864).
- Update
  patches.suse/media-cx88-Fix-a-null-ptr-deref-bug-in-buffer_prepar.patch
  (git-fixes CVE-2022-50359 bsc#1250269).
- Update
  patches.suse/media-dvb-usb-az6027-fix-null-ptr-deref-in-az6027_i2.patch
  (git-fixes bsc#1209291 CVE-2023-28328 CVE-2022-50272
  bsc#1249808).
- Update
  patches.suse/media-netup_unidvb-fix-use-after-free-at-del_timer.patch
  (git-fixes CVE-2023-53219 bsc#1249661).
- Update
  patches.suse/media-ov2740-Fix-memleak-in-ov2740_init_controls.patch
  (git-fixes CVE-2023-53349 bsc#1250015).
- Update
  patches.suse/media-pci-tw68-Fix-null-ptr-deref-bug-in-buf-prepare.patch
  (git-fixes CVE-2023-53244 bsc#1249868).
- Update
  patches.suse/media-uvcvideo-Handle-cameras-with-invalid-descripto.patch
  (git-fixes CVE-2023-53437 bsc#1250178).
- Update
  patches.suse/media-v4l2-mem2mem-add-lock-to-protect-parameter-num.patch
  (git-fixes CVE-2023-53519 bsc#1250964).
- Update
  patches.suse/media-vimc-Fix-wrong-function-called-when-vimc_init-.patch
  (git-fixes CVE-2022-50340 bsc#1249892).
- Update
  patches.suse/media-xilinx-vipp-Fix-refcount-leak-in-xvip_graph_dm.patch
  (git-fixes CVE-2022-50309 bsc#1249718).
- Update
  patches.suse/memory-of-Fix-refcount-leak-bug-in-of_get_ddr_timing.patch
  (git-fixes CVE-2022-50249 bsc#1249747).
- Update
  patches.suse/memory-of-Fix-refcount-leak-bug-in-of_lpddr3_get_ddr.patch
  (git-fixes CVE-2022-50429 bsc#1250811).
- Update
  patches.suse/mfd-arizona-Use-pm_runtime_resume_and_get-to-prevent.patch
  (git-fixes CVE-2023-53443 bsc#1250457).
- Update
  patches.suse/misc-tifm-fix-possible-memory-leak-in-tifm_7xx1_swit.patch
  (git-fixes CVE-2022-50349 bsc#1249920).
- Update
  patches.suse/mmc-moxart-fix-return-value-check-of-mmc_add_host.patch
  (git-fixes CVE-2022-50268 bsc#1249741).
- Update
  patches.suse/mmc-rtsx_pci-fix-return-value-check-of-mmc_add_host.patch
  (git-fixes CVE-2022-50267 bsc#1249749).
- Update
  patches.suse/mmc-rtsx_usb_sdmmc-fix-return-value-check-of-mmc_add.patch
  (git-fixes CVE-2022-50347 bsc#1249928).
- Update
  patches.suse/mmc-vub300-fix-return-value-check-of-mmc_add_host.patch
  (git-fixes CVE-2022-50251 bsc#1249745).
- Update
  patches.suse/mmc-vub300-fix-warning-do-not-call-blocking-ops-when.patch
  (git-fixes CVE-2022-50430 bsc#1250791).
- Update
  patches.suse/mmc-wmt-sdmmc-fix-return-value-check-of-mmc_add_host.patch
  (git-fixes CVE-2022-50353 bsc#1250047).
- Update
  patches.suse/msft-hv-2770-Drivers-vmbus-Check-for-channel-allocation-before-lo.patch
  (git-fixes CVE-2023-53273 bsc#1249930).
- Update
  patches.suse/msft-hv-2841-scsi-storvsc-Fix-handling-of-virtual-Fibre-Channel-t.patch
  (git-fixes CVE-2023-53245 bsc#1249641).
- Update
  patches.suse/mtd-maps-pxa2xx-flash-fix-memory-leak-in-probe.patch
  (git-fixes CVE-2022-50324 bsc#1249701).
- Update
  patches.suse/net-ena-fix-shift-out-of-bounds-in-exponential-backo.patch
  (git-fixes CVE-2023-53272 bsc#1249917).
- Update
  patches.suse/netfilter-conntrack-dccp-copy-entire-header-to-stack.patch
  (CVE-2023-39197 bsc#1216976 CVE-2023-53333 bsc#1249949).
- Update
  patches.suse/netfilter-ipset-add-the-missing-IP_SET_HASH_WITH_NET.patch
  (CVE-2023-42753 bsc#1215150 CVE-2023-53179 bsc#1249825).
- Update
  patches.suse/netfilter-nf_tables-do-not-ignore-genmask-when-looki.patch
  (CVE-2023-31248 bsc#1213061 CVE-2023-53492 bsc#1250823).
- Update
  patches.suse/netfilter-nft_set_rbtree-fix-overlap-expiration-walk.patch
  (CVE-2023-52923 bsc#1236104 CVE-2023-53304 bsc#1249923).
- Update
  patches.suse/nfc-fix-memory-leak-of-se_io-context-in-nfc_genl_se_.patch
  (git-fixes CVE-2023-53298 bsc#1249944).
- Update
  patches.suse/nfsd-Fix-a-memory-leak-in-an-error-handling-path.patch
  (git-fixes CVE-2022-50348 bsc#1249924).
- Update
  patches.suse/nfsd-call-op_release-even-when-op_func-returns-an-er.patch
  (git-fixes CVE-2023-53241 bsc#1249638).
- Update
  patches.suse/nfsd-under-NFSv4.1-fix-double-svc_xprt_put-on-rpc_cr.patch
  (git-fixes CVE-2022-50401 bsc#1250140).
- Update
  patches.suse/nilfs2-do-not-write-dirty-data-after-degenerating-to.patch
  (git-fixes CVE-2023-53337 bsc#1250315).
- Update patches.suse/nilfs2-fix-sysfs-interface-lifetime.patch
  (git-fixes CVE-2023-53440 bsc#1250151).
- Update
  patches.suse/nilfs2-fix-use-after-free-of-nilfs_root-in-dirtying-.patch
  (git-fixes CVE-2023-53311 bsc#1250062).
- Update
  patches.suse/nvme-fix-multipath-crash-caused-by-flush-request-whe.patch
  (git-fixes CVE-2022-50388 bsc#1250293).
- Update
  patches.suse/ocfs2-fix-memory-leak-in-ocfs2_stack_glue_init.patch
  (bsc#1207651 CVE-2022-50289 bsc#1249981).
- Update
  patches.suse/orangefs-Fix-kmemleak-in-orangefs_-kernel-client-_debug_init.patch
  (git-fixes CVE-2022-50376 bsc#1250209).
- Update
  patches.suse/perf-x86-intel-uncore-Fix-reference-count-leak-in-hswep_has_limit_sbox.patch
  (git fixes CVE-2022-50318 bsc#1249709).
- Update
  patches.suse/phy-hisilicon-Fix-an-out-of-bounds-check-in-hisi_inn.patch
  (git-fixes CVE-2023-53238 bsc#1249707).
- Update
  patches.suse/platform-chrome-cros_usbpd_notify-Fix-error-handling.patch
  (git-fixes CVE-2022-50468 bsc#1250877).
- Update
  patches.suse/power-supply-fix-null-pointer-dereferencing-in-power.patch
  (git-fixes CVE-2022-50276 bsc#1249651).
- Update
  patches.suse/powerpc-Don-t-try-to-copy-PPR-for-task-with-NULL-pt_.patch
  (bsc#1065729 CVE-2023-53326 bsc#1250071).
- Update
  patches.suse/powerpc-rtas_flash-allow-user-copy-to-flash-block-ca.patch
  (bsc#1194869 CVE-2023-53487 bsc#1250830).
- Update
  patches.suse/pstore-ram-Check-start-of-empty-przs-during-init.patch
  (git-fixes CVE-2023-53331 bsc#1249950).
- Update
  patches.suse/pwm-lpc32xx-Remove-handling-of-PWM-channels.patch
  (git-fixes CVE-2023-53472 bsc#1250841).
- Update patches.suse/qed-allow-sleep-in-qed_mcp_trace_dump.patch
  (jsc#SLE-19001 CVE-2023-53509 bsc#1250810).
- Update
  patches.suse/regulator-core-fix-use_count-leakage-when-handling-b.patch
  (git-fixes CVE-2022-50250 bsc#1249844).
- Update
  patches.suse/s390-dasd-Fix-potential-memleak-in-dasd_eckd_init.patch
  (git-fixes CVE-2023-53449 bsc#1250874).
- Update
  patches.suse/scsi-core-Fix-possible-memory-leak-if-device_add-fails.patch
  (git-fixes CVE-2023-53174 bsc#1250024).
- Update
  patches.suse/scsi-fcoe-Fix-transport-not-deattached-when-fcoe_if_init-fails.patch
  (git-fixes CVE-2022-50414 bsc#1250183).
- Update
  patches.suse/scsi-iscsi-iscsi_tcp-Fix-null-ptr-deref-while-calling-getpeername.patch
  (git-fixes CVE-2022-50459 bsc#1250850).
- Update
  patches.suse/scsi-iscsi_tcp-Check-that-sock-is-valid-before-iscsi_set_param.patch
  (git-fixes CVE-2023-53464 bsc#1250868).
- Update
  patches.suse/scsi-libsas-Fix-use-after-free-bug-in-smp_execute_task_sg.patch
  (git-fixes CVE-2022-50422 bsc#1250774).
- Update
  patches.suse/scsi-lpfc-Fix-null-ndlp-ptr-dereference-in-abnormal-.patch
  (bsc#1203063 CVE-2022-50467 bsc#1250847).
- Update
  patches.suse/scsi-lpfc-Fix-use-after-free-KFENCE-violation-during.patch
  (bsc#1208607 CVE-2023-53282 bsc#1250311).
- Update patches.suse/scsi-mpt3sas-Fix-a-memory-leak.patch
  (git-fixes CVE-2023-53512 bsc#1250915).
- Update
  patches.suse/scsi-qla2xxx-Fix-potential-NULL-pointer-dereference.patch
  (bsc#1213747 CVE-2023-53451 bsc#1250831).
- Update
  patches.suse/scsi-qla2xxx-Pointer-may-be-dereferenced.patch
  (bsc#1213747 CVE-2023-53150 bsc#1249853).
- Update
  patches.suse/scsi-qla2xxx-Remove-unused-nvme_ls_waitq-wait-queue.patch
  (bsc#1213747 CVE-2023-53280 bsc#1249938).
- Update
  patches.suse/scsi-qla2xxx-Use-raw_smp_processor_id-instead-of-smp.patch
  (git-fixes CVE-2023-53530 bsc#1250949).
- Update
  patches.suse/scsi-qla2xxx-Wait-for-io-return-on-terminate-rport.patch
  (bsc#1211960 CVE-2023-53322 bsc#1250323).
- Update
  patches.suse/scsi-ses-Fix-slab-out-of-bounds-in-ses_intf_remove.patch
  (git-fixes CVE-2023-53521 bsc#1250965).
- Update
  patches.suse/scsi-ses-Handle-enclosure-with-just-a-primary-component-gracefully.patch
  (git-fixes CVE-2023-53431 bsc#1250374).
- Update
  patches.suse/scsi-snic-Fix-memory-leak-with-using-debugfs_lookup.patch
  (git-fixes CVE-2023-53414 bsc#1250425).
- Update
  patches.suse/scsi-snic-Fix-possible-memory-leak-if-device_add-fails.patch
  (git-fixes CVE-2023-53436 bsc#1250156).
- Update
  patches.suse/serial-8250-Reinit-port-pm-on-port-specific-driver-u.patch
  (git-fixes CVE-2023-53176 bsc#1249991).
- Update
  patches.suse/slimbus-qcom-ngd-cleanup-in-probe-error-path.patch
  (git-fixes CVE-2022-50298 bsc#1249934).
- Update
  patches.suse/smb-client-fix-warning-in-cifs_smb3_do_mount-.patch
  (bsc#1193629 CVE-2023-53230 bsc#1249866).
- Update
  patches.suse/soundwire-qcom-fix-storing-port-config-out-of-bounds.patch
  (git-fixes CVE-2023-53465 bsc#1250863).
- Update
  patches.suse/staging-rtl8723bs-fix-potential-memory-leak-in-rtw_i.patch
  (git-fixes CVE-2022-50469 bsc#1250824).
- Update
  patches.suse/staging-vt6655-fix-some-erroneous-memory-clean-up-lo.patch
  (git-fixes CVE-2022-50355 bsc#1250041).
- Update
  patches.suse/thermal-drivers-hisi-Drop-second-sensor-hi3660.patch
  (git-fixes CVE-2023-53242 bsc#1249639).
- Update
  patches.suse/tls-separate-no-async-decryption-request-handling-fr.patch
  (CVE-2024-26583 CVE-2024-26584 bsc#1220185 bsc#1220186
  CVE-2024-58240 bsc#1248847).
- Update
  patches.suse/tpm-tpm_crb-Add-the-missed-acpi_put_table-to-fix-mem.patch
  (git-fixes CVE-2022-50389 bsc#1250121).
- Update
  patches.suse/tracing-Fix-null-pointer-dereference-in-tracing_err_log_open.patch
  (git-fixes CVE-2023-53167 bsc#1249712).
- Update
  patches.suse/tracing-Fix-race-issue-between-cpu-buffer-write-and-swap.patch
  (git-fixes CVE-2023-53368 bsc#1249979).
- Update
  patches.suse/tracing-Fix-reading-strings-from-synthetic-events.patch
  (git-fixes CVE-2022-50255 bsc#1249910).
- Update
  patches.suse/tracing-Free-error-logs-of-tracing-instances.patch
  (git-fixes CVE-2023-53375 bsc#1250197).
- Update
  patches.suse/tty-serial-fsl_lpuart-disable-dma-rx-tx-use-flags-in.patch
  (git-fixes CVE-2022-50375 bsc#1250132).
- Update patches.suse/ubifs-Fix-memory-leak-in-alloc_wbufs.patch
  (git-fixes CVE-2023-53468 bsc#1250888).
- Update patches.suse/ubifs-Fix-memory-leak-in-do_rename.patch
  (git-fixes CVE-2023-53396 bsc#1250200).
- Update patches.suse/ubifs-Free-memory-for-tmpfile-name.patch
  (git-fixes CVE-2023-53276 bsc#1250309).
- Update
  patches.suse/udf-Do-not-bother-merging-very-long-extents.patch
  (bsc#1213040 CVE-2023-53506 bsc#1250963).
- Update
  patches.suse/udf-Do-not-update-file-length-for-failed-writes-to-i.patch
  (bsc#1213041 CVE-2023-53295 bsc#1250324).
- Update
  patches.suse/udf-Fix-uninitialized-array-access-for-some-pathname.patch
  (bsc#1214967 CVE-2023-53165 bsc#1250395).
- Update
  patches.suse/usb-dwc3-qcom-Fix-potential-memory-leak.patch
  (git-fixes CVE-2023-53196 bsc#1249758).
- Update
  patches.suse/usb-gadget-u_serial-Add-null-pointer-check-in-gseria-2f6ecb89fe8f.patch
  (git-fixes CVE-2023-53356 bsc#1249997).
- Update
  patches.suse/usb-phy-phy-tahvo-fix-memory-leak-in-tahvo_usb_probe.patch
  (git-fixes CVE-2023-53379 bsc#1250128).
- Update
  patches.suse/usb-typec-tcpci-fix-of-node-refcount-leak-in-tcpci_r.patch
  (git-fixes CVE-2022-50246 bsc#1249746).
- Update
  patches.suse/usb-xhci-mtk-fix-leakage-of-shared-hcd-when-fail-to-.patch
  (git-fixes CVE-2022-50247 bsc#1249681).
- Update
  patches.suse/usb-xhci-tegra-fix-sleep-in-atomic-call.patch
  (git-fixes CVE-2023-53475 bsc#1250843).
- Update
  patches.suse/vfio-type1-prevent-underflow-of-locked_vm-via-exec.patch
  (git-fixes CVE-2023-53171 bsc#1249933).
- Update
  patches.suse/vhost-vsock-Use-kvmalloc-kvfree-for-larger-packets.patch
  (git-fixes CVE-2022-50271 bsc#1249740).
- Update
  patches.suse/virtio-mmio-don-t-break-lifecycle-of-vm_dev.patch
  (git-fixes CVE-2023-53515 bsc#1250917).
- Update
  patches.suse/virtio_net-Fix-error-unwinding-of-XDP-initialization.patch
  (git-fixes CVE-2023-53499 bsc#1250818).
- Update
  patches.suse/watchdog-Fix-kmemleak-in-watchdog_cdev_register.patch
  (git-fixes CVE-2023-53234 bsc#1249784).
- Update
  patches.suse/wifi-ath11k-Fix-SKB-corruption-in-REO-destination-ri.patch
  (git-fixes CVE-2023-53315 bsc#1250303).
- Update
  patches.suse/wifi-ath9k-don-t-allow-to-overwrite-ENDPOINT0-attrib.patch
  (git-fixes CVE-2023-53185 bsc#1249820).
- Update
  patches.suse/wifi-ath9k-hif_usb-clean-up-skbs-if-ath9k_hif_usb_rx.patch
  (git-fixes CVE-2023-53199 bsc#1249683).
- Update
  patches.suse/wifi-ath9k-verify-the-expected-usb_endpoints-are-pre.patch
  (git-fixes CVE-2022-50297 bsc#1250250).
- Update
  patches.suse/wifi-brcmfmac-Fix-potential-stack-out-of-bounds-in-b.patch
  (git-fixes CVE-2022-50258 bsc#1249947).
- Update
  patches.suse/wifi-brcmfmac-fix-potential-memory-leak-in-brcmf_net.patch
  (git-fixes CVE-2022-50321 bsc#1249706).
- Update
  patches.suse/wifi-brcmfmac-fix-use-after-free-bug-in-brcmf_netdev.patch
  (git-fixes CVE-2022-50408 bsc#1250391).
- Update
  patches.suse/wifi-brcmfmac-slab-out-of-bounds-read-in-brcmf_get_a.patch
  (git-fixes bsc#1209287 CVE-2023-1380 CVE-2023-53213
  bsc#1249918).
- Update
  patches.suse/wifi-cfg80211-Fix-use-after-free-for-wext.patch
  (git-fixes CVE-2023-53153 bsc#1249877).
- Update
  patches.suse/wifi-iwl3945-Add-missing-check-for-create_singlethre.patch
  (git-fixes CVE-2023-53277 bsc#1249936).
- Update
  patches.suse/wifi-iwl4965-Add-missing-check-for-create_singlethre.patch
  (git-fixes CVE-2023-53302 bsc#1249958).
- Update
  patches.suse/wifi-iwlwifi-fw-fix-memory-leak-in-debugfs.patch
  (git-fixes CVE-2023-53422 bsc#1250182).
- Update
  patches.suse/wifi-iwlwifi-mvm-fix-double-free-on-tx-path.patch
  (git-fixes CVE-2022-50248 bsc#1249840).
- Update
  patches.suse/wifi-iwlwifi-pcie-Fix-integer-overflow-in-iwl_write_.patch
  (git-fixes CVE-2023-53524 bsc#1250953).
- Update
  patches.suse/wifi-iwlwifi-pcie-fix-NULL-pointer-dereference-in-iw.patch
  (git-fixes CVE-2023-53251 bsc#1249730).
- Update
  patches.suse/wifi-libertas-fix-memory-leak-in-lbs_init_adapter.patch
  (git-fixes CVE-2022-50294 bsc#1249799).
- Update
  patches.suse/wifi-mac80211-fix-invalid-drv_sta_pre_rcu_remove-cal.patch
  (git-fixes CVE-2023-53229 bsc#1249650).
- Update
  patches.suse/wifi-mwifiex-Fix-OOB-and-integer-underflow-when-rx-p.patch
  (git-fixes CVE-2023-53226 bsc#1249658).
- Update
  patches.suse/wifi-mwifiex-avoid-possible-NULL-skb-pointer-derefer.patch
  (git-fixes CVE-2023-53384 bsc#1250127).
- Update
  patches.suse/wifi-rtlwifi-Fix-global-out-of-bounds-bug-in-_rtl881.patch
  (git-fixes CVE-2022-50279 bsc#1249751).
- Update
  patches.suse/wifi-rtw89-fix-potential-race-condition-between-napi.patch
  (git-fixes CVE-2023-53452 bsc#1250762).
- Update
  patches.suse/wwan_hwsim-fix-possible-memory-leak-in-wwan_hwsim_de.patch
  (git-fixes CVE-2022-50331 bsc#1249695).
- Update
  patches.suse/x86-fpu-fix-copy_xstate_to_uabi-to-copy-init-states-correctly.patch
  (git-fixes CVE-2022-50425 bsc#1250781).
- Update patches.suse/x86-mce-amd-use-an-u64-for-bank_map.patch
  (git-fixes CVE-2023-53474 bsc#1250842).
- Update
  patches.suse/x86-platform-uv-Use-alternate-source-for-socket-to-n.patch
  (bsc#1215696 bsc#1217790 CVE-2023-53496 bsc#1250905).
- Update patches.suse/xen-gntdev-Prevent-leaking-grants.patch
  (git-fixes CVE-2022-50257 bsc#1249743).
- Update
  patches.suse/xfrm-add-NULL-check-in-xfrm_update_ae_params.patch
  (bsc#1213666 CVE-2023-3772 CVE-2023-53147 bsc#1249880).
- commit 3e8722f

- Update
  patches.suse/nbd-fix-incomplete-validation-of-ioctl-arg-5579.patch
  (git-fixes CVE-2023-53513 bsc#1250955).
- Update
  patches.suse/rbd-avoid-use-after-free-in-do_rbd_add-when-rbd_dev_-f7c4.patch
  (git-fixes CVE-2023-53307 bsc#1250043).
- commit 1c510bb

- Bluetooth: Fix use-after-free in l2cap_sock_cleanup_listen()
  (CVE-2025-39860 bsc#1250247).
- commit a1c6acf

- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race
  (CVE-2025-38085 bsc#1245499).
- commit 5c79076

- mm/hugetlb: unshare page tables during VMA split, not before
  (CVE-2025-38084 bsc#1245498).
- commit d3bed21

- HID: asus: fix UAF via HID_CLAIMED_INPUT validation
  (CVE-2025-39824 bsc#1250007).
- commit 4aec876

- hugetlb: unshare some PMDs when splitting VMAs (CVE-2025-38084
  bsc#1245498).
- commit c029b9b

- net: stmmac: Fix accessing freed irq affinity_hint
  (CVE-2025-23155 bsc#1242573).
- commit c6366be

- net/smc: fix UAF on smcsk after smc_listen_out() (CVE-2025-38734
  bsc#1249324).
- commit fe18faf

- s390/ism: fix concurrency management in ism_cmd() (git-fixes
  bsc#1249266 CVE-2025-39726).
- commit ac040b4

- dmaengine: ti: edma: Fix memory allocation size for
  queue_priority_map (CVE-2025-39869 bsc#1250406).
- commit 9685491

- KVM: x86: use array_index_nospec with indices that come from
  guest (CVE-2025-39823 bsc#1250002).
- commit d9de1fd

- mm/huge_memory: fix dereferencing invalid pmd migration entry
  (CVE-2025-37958 bsc#1243539).
- commit 521422d

- ext4: ignore xattrs past end (bsc#1242846 CVE-2025-37738).
- commit 4630cc6

- fs/buffer: fix use-after-free when call bh_read() helper
  (bsc#1249374 CVE-2025-39691).
- commit 996c520

- Bluetooth: eir: Fix using strlen with
  hdev->{dev_name,short_name} (CVE-2022-50233 bsc#1246968).
- commit 2e1f686

- mm: fix zswap writeback race condition (CVE-2023-53178
  bsc#1249827).
- Refresh
  patches.suse/mm-zswap-properly-synchronize-freeing-resources-duri.patch.
- commit 42ab563

- mm: zswap: fix missing folio cleanup in writeback race path
  (CVE-2023-53178 bsc#1249827 git-fix).
- commit ccc740f

- wifi: mac80211_hwsim: drop short frames (CVE-2023-53321
  bsc#1250313).
- commit 19db60e

- x86/MCE: Always save CS register on AMD Zen IF Poison errors
  (CVE-2023-53438 bsc#1250180).
- commit b12ae2d

- kernel-source.spec: Depend on python3-base for build
  Both kernel-binary and kernel-docs already have this dependency.
  Adding it to kernel-source makes it possible to use python in shared
  build scripts.
- commit 72fdedd

- kernel-source: Do not list mkspec and its inputs as sources
  (bsc#1250522).
  This excludes the files from the src.rpm. The next step is to remove
  these files in tar-up so that they do not get uploaded to OBS either.
  As there is only one version of tar-up these files need to be removed
  from all kernels.
- commit e72b8a2

- rpm: Link arch-symbols script from scripts directory.
- commit 90b2abb

- use uniform permission checks for all mount propagation changes
  (git-fixes).
- commit 7dba905

- rpm: Link guards script from scripts directory.
- commit e19a893

- kABI fix for net: vlan: fix VLAN 0 refcount imbalance of
  toggling filtering during runtime (CVE-2025-38470 bsc#1247288).
- commit 8551218

- net: vlan: fix VLAN 0 refcount imbalance of toggling filtering
  during runtime (CVE-2025-38470 bsc#1247288).
- commit 05f6c5a

- Delete ARMv7 configs.
  There is no longer a 5.14 based Leap.
- commit c9e0295

- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  (bsc#1249200 CVE-2025-38713).
- commit 0f4fe03

- Revert backported patches for bsc#1238160 because the CVSS less than 7.0
- Delete
    patches.suse/Bluetooth-hci_event-Fix-checking-conn-for-le_conn_co.patch.
- Delete
    patches.suse/Bluetooth-hci_event-Fix-checking-for-invalid-handle-.patch.
- Delete
    patches.suse/Bluetooth-hci_event-Ignore-multiple-conn-complete-ev.patch.
  (bsc#1238160 CVE-2022-49138)
- commit 58636bb

- Update config files. (bsc#1249186)
  Enable where we define KABI refs + rely on Kconfig deps.
- commit 40e5ff4

- ASoC: core: Check for rtd == NULL in
  snd_soc_remove_pcm_runtime() (CVE-2025-38706 bsc#1249195).
- commit 00df3f7

- net, hsr: reject HSR frame if skb can't hold tag (CVE-2025-39703
  bsc#1249315).
- commit 4aa620b

- i2c/designware: Fix an initialization issue (git-fixes
  CVE-2025-38380 bsc#1247028).
- commit 3969bae

- kabi/severities: ignore kABI for atheros helper modules
  The symbols are used only internally by atheros drivers.
- commit 35d7d9d

- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  (CVE-2025-39751 bsc#1249538).
- commit 2fa5c70

- wifi: ath10k: shutdown driver when hardware is unreliable
  (CVE-2025-39746 bsc#1249516).
- commit b79070e

- bus: mhi: host: Detect events pointing to unexpected TREs
  (CVE-2025-39790 bsc#1249548).
- commit 8f23ea7

- netfilter: nf_tables: reject duplicate device on updates
  (CVE-2025-38678 bsc#1249126).
- commit ed53d59

- dmaengine: idxd: Fix refcount underflow on module unload
  (CVE-2025-38014 bsc#1244732).
- commit 7288c92

- Limit patch filenames to 100 characters (bsc#1249604).
- commit 864f4b6

- kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
- commit 40606b5

- fbdev: Fix vmalloc out-of-bounds write in fast_imageblit (bsc#1249220 CVE-2025-38685)
- commit 92b9def

- btrfs: avoid NULL pointer dereference if no valid extent tree
  (bsc#1249158).
- commit 6c3a163

- smb: client: fix use-after-free in crypt_message when using
  async crypto (bsc#1247239, CVE-2025-38488).
- commit 03f19df

- ipv6: reject malicious packets in ipv6_gso_segment()
  (CVE-2025-38572 bsc#1248399).
- net/sched: Restrict conditions for adding duplicating netems
  to qdisc tree (CVE-2025-38553 bsc#1248255).
- commit 27382a9

- rpm: Configure KABI checkingness macro (bsc#1249186)
  The value of the config should match presence of KABI reference data. If
  it mismatches:
- !CONFIG & reference  -> this is bug, immediate fail
- CONFIG & no reference -> OK temporarily, must be resolved eventually
- commit 23c1536

- Kconfig.suse: Add KABI checkiness macro (config) (bsc#1249186)
  The motivation: there are patches.kabi/ patches that restore KABI and
  they check validity of the approach with static_assert()s to prevent
  accidental KABI breakage.
  These asserts are invoked on each arch-flavor and they may signal false
  negatives -- that is KABI restoration patch could break KABI but the
  given arch-flavor defines no KABI.
  The intended use is to disable the compile time checks in patches.kabi/
  (but not to be confused with __GENKSYMS__ that affects how reference is
  calculated).
  The name is chosen so that it mimics HAVE_* macros that are not
  configured manually (but is selected by an arch). In our case it's
  (un)selected by build script depending on whether KABI reference is
  defined for given arch-flavor and whether check is really requested by
  the user. Default value is 'n' so that people building merely via
  Makefile (not RPM with KABI checking) obtain consistent config.
- commit a007049

- gfs2: No more self recovery (bsc#1248639 CVE-2025-38659).
- gfs2: Get rid of gfs2_glock_queue_put in signal_our_withdraw
  (bsc#1248639 CVE-2025-38659).
- commit d2aba16

- usb: gadget: udc: core: Offload usb_udc_vbus_handler processing
  (CVE-2022-49980 bsc#1245110).
- commit b9c8803

- ice: Fix a null pointer dereference in ice_copy_and_init_pkg()
  (CVE-2025-38664 bsc#1248628).
- commit 5eff097

- wifi: mac80211: reject TDLS operations when station is not
  associated (CVE-2025-38644 bsc#1248748).
- commit a8c476b

- vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511
  CVE-2025-38618).
- commit 33452e8

- USB: gadget: Fix obscure lockdep violation for udc_mutex
  (CVE-2022-49980 bsc#1245110).
- commit 25d2f46

- usb: gadget: core: do not try to disconnect gadget if it is
  not connected (CVE-2022-49980 bsc#1245110).
- commit a760fdc

- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (CVE-2025-38184 bsc#1245956)
- commit 9365d7a

- kernel-binary: Another installation ordering fix (bsc#1241353).
- commit fe14ab5

- USB: gadget: Fix use-after-free Read in usb_udc_uevent()
  (CVE-2022-49980 bsc#1245110).
- commit dffc69a

- atm: clip: Fix memory leak of struct clip_vcc (CVE-2025-38546
  bsc#1248223).
- atm: clip: Fix potential null-ptr-deref in to_atmarpd()
  (CVE-2025-38460 bsc#1247143).
- tls: stop recv() if initial process_rx_list gave us non-DATA
  (CVE-2024-58239 bsc#1248614).
- tls: rx: drop pointless else after goto (CVE-2024-58239
  bsc#1248614).
- commit 47416a2

- x86/sev: Evict cache lines during SNP memory validation
  (CVE-2025-38560 bsc#1248312).
- commit 766631f

- selftests/perf_events: Add a mmap() correctness test
  (CVE-2025-38563 bsc#1248306 selftest).
- commit b58bec8

- perf/core: Prevent VMA split of buffer mappings (CVE-2025-38563
  bsc#1248306).
- commit 30b2db8

- perf/core: Exit early on perf_mmap() fail (CVE-2025-38563
  bsc#1248306 dependency).
- commit 037df8e

- perf/core: Don't leak AUX buffer refcount on allocation failure
  (CVE-2025-38563 bsc#1248306 dependency).
- commit 4273af9

- bpf, ktls: Fix data corruption when using bpf_msg_pop_data()
  in ktls (bsc#1248338 CVE-2025-38608).
- commit 43a92df

- build_bug.h: Add KABI assert (bsc#1249186).
- commit 6e38849

- usb: gadget : fix use-after-free in composite_dev_cleanup()
  (CVE-2025-38555 bsc#1248297).
- commit d29d36a

- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499 bsc#1247976)
- commit 767ab57

- net/packet: fix a race in packet_set_ring() and
  packet_notifier() (CVE-2025-38617 bsc#1248621).
- commit a477bef

- Update config files. Disable N_GSM (jsc#PED-8240, bsc#1244824, CVE-2022-50116)
- commit 98bb21f

- Move pesign-obs-integration requirement from kernel-syms to kernel devel
  subpackage (bsc#1248108).
- commit e707e41

- NFSv4.1: fix backchannel max_resp_sz verification check
  (bsc#1247518).
- commit c2874ca

- smb: prevent use-after-free due to open_cached_dir error paths
  (bsc#1234896, CVE-2024-53177).
- commit 99ad7d6

- posix-cpu-timers: fix race between handle_posix_cpu_timers()
  and posix_cpu_timer_del() (bsc#1246911 CVE-2025-38352).
- commit 5c74715

- do_change_type(): refuse to operate on unmounted/not ours mounts (CVE-2025-38498 bsc#1247374)
- commit 16fc04a

- net: atm: fix /proc/net/atm/lec handling (CVE-2025-38180
  bsc#1245970).
- net: atm: add lec_mutex (CVE-2025-38323 bsc#1246473).
- commit d88adbc

samba

- CVE-2025-9640: fix vfs_streams_xattr uninitialized memory write;
  (bsc#1251279);(bso#15885).
- CVE-2025-10230: fix command Injection in WINS Server Hook Script;
  (bsc#1251280);(bso#15903).

cups

- cups-2.2.7-CVE-2024-47175.patch is based on
  https://github.com/OpenPrinting/libppd/commit/d681747ebf12602cb426725eb8ce2753211e2477
  backported to CUPS 2.2.7 to fix CVE-2024-47175
  "lack of input sanitization in _ppdCreateFromIPP()"
  (bsc#1230932 and bsc#1246533)
- In general regarding CUPS and cups-browsed security issues see
  https://en.opensuse.org/SDB:CUPS_and_SANE_Firewall_settings

- cups-2.2.7-CVE-2025-58364.patch is derived
  from the upstream patch to fix CVE-2025-58364
  "Remote DoS via null dereference"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7qx3-r744-6qv4
  bsc#1249128

- cups-2.2.7-CVE-2025-58060.patch is derived
  from the upstream patch against CUPS 2.4
  to fix CVE-2025-58060
  "Authentication bypass with AuthType Negotiate"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-4c68-qgrh-rmmq
  bsc#1249049
- Removed the obsoleted cups-2.1.0-cups-systemd-socket.patch
  see the below entry dated "Fri Jun  2 10:32:33 CEST 2017"

curl

- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch

- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch

- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch

- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Rebase patches:
  - curl-disabled-redirect-protocol-message.patch
  - curl-secure-getenv.patch
  - dont-mess-with-rpmoptflags.patch
  - libcurl-ocloexec.patch
  * Remove patches fixed in the update:
  - curl-CVE-2023-28319.patch
  - curl-CVE-2023-28320.patch
  - curl-CVE-2023-28321.patch
  - curl-CVE-2023-28322.patch
  - curl-CVE-2023-32001.patch
  - curl-CVE-2023-38039.patch
  - curl-CVE-2023-38545.patch
  - curl-CVE-2023-38546.patch
  - curl-CVE-2023-46218.patch
  - curl-CVE-2023-46219.patch
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-canonicalise-valueless-query-params.patch
  - curl-aws_sigv4-canonicalize-the-query.patch
  - curl-aws_sigv4-skip-the-op-if-the-query-pair-is-zero-bytes.patch
  - curl-aws_sigv4-the-query-canon-code-miscounted-url-encoded-input.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-aws_sigv4-verify-query-canonization.patch
  - curl-libssh_Implement_SFTP_packet_size_limit.patch

- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.

dracut

- Update to version 055+suse.361.g448229ea:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(rngd): adjust license to match the license of the whole project

expat

- Fix CVE-2025-59375 / bsc#1249584.
- Add patch file:
  * CVE-2025-59375.patch

google-cloud-sap-agent

- Update to version 3.9 (bsc#1248452, bsc#1249003)
  * Use correct version comparison to support double digit minor versions
  * Reduce Process Metrics collection frequency.
  * Update event topic message structure
  * Fix network stats skipped metrics
  * fixing a typo
  * PubSub Log Collection Unit Tests
  * Reduce info log volume with default agent config
  * fix typo in action workflow
  * Use a github token when adding the workloadagentplatform submodule to avoid rate limits
  * Add executable permission check for /usr/sap in Status OTE
  * Delete aianalyzer from SAP Agent - we have moved to a new agent in platform
  * Update CheckTopology to call sapcontrol as sidadm user correctly
  * bump oauth2 version to v0.27.0
  * Auto updated compiled protocol buffers
  * Log collection streaming to pub/sub
  * Version fix and improved LVMRename error handling
  * Add todo for archive snapshot in hanadiskbackup and hanadiskrestore.
  * Use snapshot group workflow for version 3.9+
  * Add Rename LVM step to restore with Snapshot Group Workflow
  * Agent for SAP: Add functionality to wait for snapshot group creation
    till it's status is not 'CREATING'
  * Modify hanadiskbackup for sidadm user
  * Implement bulk insert for snapshot group in multidisk restore.
  * Populate instance uri in agent status
  * Add `ListDisksFromSnapshot` function to snapshot group utils.
  * Use Snapshot Group for snapshot validation.
  * Added method to list snapshots from snapshot group.
  * Adding snapshot group flag to hanadiskrestore OTE.
  * Fixes the link to the cloud console for upgrading the storage bucket
  * Implement function to create disks from snapshot group via bulk insert API.
  * SAP Agent - HANA Disk Snapshot - Add SG Workflow
  * Implement WaitForSGUploadCompletionWithRetry function to wait
    for Snapshot group upload completion.
  * Implement `ListSGs` function in `snapshotgroup` utils.
  * Implement get snapshot groups functionality.
  * Implement CreateSG method.
  * Add Snapshot group utility library
  * Auto updated compiled protocol buffers
  * Remove lastHostChangeTimestamp field from host metrics
- Drop CVE-2025-22868.patch, merged upstream

krb5

- Remove des3-cbc-sha1 and arcfour-hmac-md5 from permitted
  enctypes unless new special options "allow_des3" or "allow_rc4"
  are set; (CVE-2025-3576); (bsc#1241219).
- Add patch 0015-CVE-2025-3576.patch

avahi

- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)

cairo

- Add cairo-CVE-2025-50422.patch:
  Backport from William Bader's request 621, Fix NULL access
  in active_edges_to_traps().
  https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621/diffs
  https://gitlab.freedesktop.org/williamb/cairo/-/commit/b5752618
  (CVE-2025-50422, bsc#1247589)

openssl-1_1

- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read & write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch

pacemaker

- fenced: DC node fencing is unconditionally relayed. (bsc#1249419)
  * bsc#1249419-0001-Mid-fenced-DC-node-fencing-is-unconditionally-relaye.patch

- libcrmservice: consider a monitor pending if LoadUnit receives no reply from systemd (bsc#1232276, gh#ClusterLabs/pacemaker#3880)
  * bsc#1232276-0001-Fix-libcrmservice-consider-a-monitor-pending-if-Load.patch

tiff

- security update:
  * CVE-2025-8961 [bsc#1248117]
    Fix segmentation fault via main function of tiffcrop utility
    + tiff-CVE-2025-8961.patch

- security update:
  * CVE-2025-8534 [bsc#1247582]
    Fix null pointer dereference in function PS_Lvl2page
    + tiff-CVE-2025-8534.patch
  * CVE-2025-9165 [bsc#1248330]
    Fix local execution manipulation can lead to memory leak
    + tiff-CVE-2025-9165.patch

libzypp

- runposttrans: strip root prefix from tmppath (bsc#1250343)
- fixup! Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.18 (35)

- Make ld.so ignore the subarch packages during install
  (bsc#1246912)
- version 17.37.17 (35)

lifecycle-data-sle-module-live-patching

- Added data for 5_14_21-150400_24_167, 5_14_21-150400_24_170,
  5_14_21-150500_55_110, 5_14_21-150500_55_113,
  5_14_21-150500_55_116, 5_3_18-150300_59_207,
  5_3_18-150300_59_211, 6_4_0-150600_23_53,
  6_4_0-150600_23_60, 6_4_0-150700_51,
  6_4_0-150700_53_3, 6_4_0-150700_53_6,
  +kernel-livepatch-6_4_0-150600_10_39-rt,*,+kernel-livepatch-6_4_0-150600_10_44-rt,*,+kernel-livepatch-6_4_0-150700_5-rt,*,+kernel-livepatch-6_4_0-150700_7_3-rt,*,+kernel-livepatch-6_4_0-150700_7_8-rt,*. (bsc#1020320)

net-tools

- Drop 0002-Do-not-warn-about-interface-socket-not-binded.patch. It
  worked around a net-tools-1.60 specific problem, that does not
  happen in net-tools-2.10. It is more harmful than useful, as it
  can hide real problems. (bsc#430864#c15,
  https://github.com/ecki/net-tools/issues/32#issuecomment-3265471116).

- Drop 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch. It
  was net-tools-1.60 specific leak fix and breaks netrom in
  net-tools-2.10 (bnc#544339#c2).

- Drop old Fedora patch 0006-Allow-interface-stacking.patch. It
  provided a fix for CVE-2025-46836 (bsc#142461), but it was fixes
  by the upstream in 2025 in a different way. Revert interferring
  net-tools-CVE-2025-46836.patch back to the upstream version.
- Fix stack buffer overflow in parse_hex (bsc#1248687,
  GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch).
- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687,
  GHSA-w7jq-cmw2-cq59,
  net-tools-proc_gen_fmt-buffer-overflow.patch).
- Avoid unsafe memcpy in ifconfig (bsc#1248687,
  net-tools-ifconfig-avoid-unsafe-memcpy.patch).
- Prevent overflow in ax25 and netrom (bsc#1248687,
  net-tools-ax25+netrom-overflow-1.patch,
  net-tools-ax25+netrom-overflow-2.patch).
- Keep possibility to enter long interface names, even if they are
  not accepted by the kernel, because it was always possible up to
  CVE-2025-46836 fix. But issue a warning about an interface name
  concatenation (bsc#1248410,
  net-tools-ifconfig-long-name-warning.patch).

- Provide more readable error for interface name size checking
  introduced by net-tools-CVE-2025-46836.patch
  (bsc#1243581, net-tools-CVE-2025-46836-error-reporting.patch).

- Fix a regression in net-tools-CVE-2025-46836.patch (bsc#1246608).

- Perform bound checks when parsing interface labels in
  /proc/net/dev (bsc#1243581, CVE-2025-46836, GHSA-pfwf-h6m3-63wf,
  net-tools-CVE-2025-46836.patch,
  net-tools-CVE-2025-46836-regression.patch).

permissions

- Update to version 20201225:
  * permissions: remove unnecessary static dirs and devices (bsc#1235873)

rubygem-puma

- update to version 5.6.9 (bsc#1218638)
  This update includes fixed for CVE-2024-21647
  as well as for CVE-2024-45614, CVE-2024-21647, CVE-2023-40175
- Remove CVE-2024-45614.patch
- Remove CVE-2024-21647.patch
- Remove CVE-2023-40175.patch

000release-packages:sle-ha-release

n/a

000release-packages:sle-module-basesystem-release

n/a

000release-packages:sle-module-containers-release

n/a

000release-packages:sle-module-desktop-applications-release

n/a

000release-packages:sle-module-development-tools-release

n/a

000release-packages:sle-module-live-patching-release

n/a

000release-packages:sle-module-public-cloud-release

n/a

000release-packages:sle-module-python3-release

n/a

000release-packages:sle-module-sap-applications-release

n/a

000release-packages:sle-module-server-applications-release

n/a

000release-packages:sle-module-web-scripting-release

n/a

sysconfig

- version 0.85.10
  * codespell run for all repository files and changes file
  * spec: define permissions for ghost file attrs to avoid
    rpm --restore resets them to 0 (bsc#1237595).
  * spec: fix name-repeated-in-summary rpmlint warning

sysstat

- Still related to bsc#1244553, removal of broken symlinks
  during the post-install phase.

vim

- Refresh patch:
  * vim-8.2.2411-globalvimrc.patch
- Add patch:
  * reorder-exit-raw-mode.patch
- Fix the following CVEs and bugs:
  * bsc#1246602 (CVE-2025-53906)
  * bsc#1246604 (CVE-2025-53905)
  * bsc#1247939 (CVE-2025-55158)
  * bsc#1247938 (CVE-2025-55157)
- Update to 9.1.1629:
  9.1.1629: Vim9: Not able to use more than 10 type arguments in a generic function
  9.1.1628: fuzzy.c has a few issues
  9.1.1627: fuzzy matching can be improved
  9.1.1626: cindent: does not handle compound literals
  9.1.1625: Autocompletion slow with include- and tag-completion
  9.1.1624: Cscope not enabled on MacOS
  9.1.1623: Buffer menu does not handle unicode names correctly
  9.1.1622: Patch v9.1.1432 causes performance regressions
  9.1.1621: flicker in popup menu during cmdline autocompletion
  9.1.1620: filetype: composer.lock and symfony.lock files not recognized
  9.1.1619: Incorrect E535 error message
  9.1.1618: completion: incorrect selected index returned from complete_info()
  9.1.1617: Vim9: some error messages can be improved
  9.1.1616: xxd: possible buffer overflow with bitwise output
  9.1.1615: diff format erroneously detected
  9.1.1614: Vim9: possible variable type change
  9.1.1613: tests: test_search leaves a few swapfiles behind
  9.1.1612: Ctrl-G/Ctrl-T do not ignore the end search delimiter
  9.1.1611: possible undefined behaviour in mb_decompose()
  9.1.1610: completion: hang or E684 when 'tagfunc' calls complete()
  9.1.1609: complete: Heap-buffer overflow with complete function
  9.1.1608: No command-line completion for :unsilent {command}
  9.1.1607: :apple command detected as :append
  9.1.1606: filetype: a few more files are not recognized
  9.1.1605: cannot specify scope for chdir()
  9.1.1604: completion: incsearch highlight might be lost
  9.1.1603: completion: cannot use autoloaded funcs in 'complete' F{func}
  9.1.1602: filetype: requirements-*.txt files are not recognized
  9.1.1601: Patch v8.1.0425 was wrong
  9.1.1600: using diff anchors with hidden buffers fails silently
  9.1.1599: :bnext doesn't go to unlisted help buffers
  9.1.1598: filetype: waybar config file is not recognized
  9.1.1597: CI reports leaks in libgtk3 library
  9.1.1596: tests: Test_search_wildmenu_iminsert() depends on help file
  9.1.1595: Wayland: non-portable use of select()
  9.1.1594: completion: search completion throws errors
  9.1.1593: Confusing error when compiling incomplete try block
  9.1.1592: Vim9: crash with classes and garbage collection
  9.1.1591: VMS support can be improved
  9.1.1590: cannot perform autocompletion
  9.1.1589: Cannot disable cscope interface using configure
  9.1.1588: Vim9: cannot split dict inside command block
  9.1.1587: Wayland: timeout not updated before select()
  9.1.1586: Vim9: can define an enum/interface in a function
  9.1.1585: Wayland: gvim still needs GVIM_ENABLE_WAYLAND
  9.1.1584: using ints as boolean type
  9.1.1583: gvim window lost its icons
  9.1.1582: style issue in vim9type.c and vim9generics.c
  9.1.1581: possible memory leak in vim9generics.c
  9.1.1580: possible memory leak in vim9type.c
  9.1.1579: Coverity complains about unchecked return value
  9.1.1578: configure: comment still mentions autoconf 2.71
  9.1.1577: Vim9: no generic support yet
  9.1.1576: cannot easily trigger wildcard expansion
  9.1.1575: tabpanel not drawn correctly with wrapped lines
  9.1.1574: Dead code in mbyte.c
  9.1.1573: Memory leak when pressing Ctrl-D in cmdline mode
  9.1.1572: expanding $var does not escape whitespace for 'path'
  9.1.1571: CmdlineChanged triggered to often
  9.1.1570: Copilot suggested some improvements in cmdexpand.c
  9.1.1569: tests: Vim9 tests can be improved
  9.1.1568: need a few more default highlight groups
  9.1.1567: crash when using inline diff mode
  9.1.1566: self-referenced enum may not get freed
  9.1.1565: configure: does not consider tiny version for wayland
  9.1.1564: crash when opening popup to closing buffer
  9.1.1563: completion: ruler may disappear
  9.1.1562: close button always visible in the 'tabline'
  9.1.1561: configure: wayland test can be improved
  9.1.1560: configure: uses $PKG_CONFIG before it is defined
  9.1.1559: tests: Test_popup_complete_info_01() fails when run alone
  9.1.1558: str2blob() treats NULL string and empty string differently
  9.1.1557: not possible to anchor specific lines in difff mode
  9.1.1556: string handling in cmdexpand.c can be improved
  9.1.1555: completion: repeated insertion of leader
  9.1.1554: crash when omni-completion opens command-line window
  9.1.1553: Vim9: crash when accessing a variable in if condition
  9.1.1552: [security]: path traversal issue in tar.vim
  9.1.1551: [security]: path traversal issue in zip.vim
  9.1.1550: defaults: 'showcmd' is not enabled in non-compatible mode on Unix
  9.1.1549: filetype: pkl files are not recognized
  9.1.1548: filetype: OpenFGA files are not recognized
  9.1.1547: Wayland: missing ifdef
  9.1.1546: Vim9: error with has() and short circuit evaluation
  9.1.1545: typo in os_unix.c
  9.1.1544: :retab cannot be limited to indentation only
  9.1.1543: Wayland: clipboard appears to not be working
  9.1.1542: Coverity complains about uninitialized variable
  9.1.1541: Vim9: error when last enum value ends with a comma
  9.1.1540: completion: menu state wrong on interruption
  9.1.1539: completion: messages don't respect 'shm' setting
  9.1.1537: helptoc: still some issues when markdown code blocks
  9.1.1536: tests: test_plugin_comment uses wrong :Check command
  9.1.1535: the maximum search count uses hard-coded value 99
  9.1.1534: unnecessary code in tabpanel.c
  9.1.1533: helptoc: does not handle code sections in markdown well
  9.1.1532: termdebug: not enough ways to configure breakpoints
  9.1.1531: confusing error with nested legacy function
  9.1.1530: Missing version change in v9.1.1529
  9.1.1529: Win32: the toolbar in the GUI is old and dated
  9.1.1528: completion: crash with getcompletion()
  9.1.1527: Vim9: Crash with string compound assignment
  9.1.1526: completion: search completion match may differ in case
  9.1.1525: tests: testdir/ is a bit messy
  9.1.1524: tests: too many imports in the test suite
  9.1.1523: tests: test_clipmethod fails in non X11 environment
  9.1.1522: tests: still some ANSI escape sequences in test output
  9.1.1521: completion: pum does not reset scroll pos on reopen with 'noselect'
  9.1.1520: completion: search completion doesn't handle 'smartcase' well
  9.1.1519: tests: Test_termdebug_decimal_breakpoints() may fail
  9.1.1518: getcompletiontype() may crash
  9.1.1517: filetype: autopkgtest files are not recognized
  9.1.1516: tests: no test that 'incsearch' is updated after search completion
  9.1.1515: Coverity complains about potential unterminated strings
  9.1.1514: Coverity complains about the use of tmpfile()
  9.1.1513: resizing Vim window causes unexpected internal window width
  9.1.1512: completion: can only complete from keyword characters
  9.1.1511: tests: two edit tests change v:testing from 1 to 0
  9.1.1510: Search completion may use invalid memory
  9.1.1509: patch 9.1.1505 was not good
  9.1.1508: string manipulation can be improved in cmdexpand.c
  9.1.1507: symlinks are resolved on :cd commands
  9.1.1506: tests: missing cleanup in Test_search_cmdline_incsearch_highlight()
  9.1.1505: not possible to return completion type for :ex command
  9.1.1504: filetype: numbat files are not recognized
  9.1.1503: filetype: haxe files are not recognized
  9.1.1502: filetype: quickbms files are not recognized
  9.1.1501: filetype: flix files are not recognized
  9.1.1500: if_python: typo in python error variable
  9.1.1499: MS-Windows: no indication of ARM64 architecture
  9.1.1498: completion: 'complete' funcs behave different to 'omnifunc'
  9.1.1497: Link error with shm_open()
  9.1.1496: terminal: still not highlighting empty cells correctly
  9.1.1495: Wayland: uses $XDG_SEAT to determine seat
  9.1.1494: runtime(tutor): no French translation for Chapter 2
  9.1.1493: manually comparing positions on buffer
  9.1.1492: tests: failure when Wayland compositor fails to start
  9.1.1491: missing out-of-memory checks in cmdexpand.c
  9.1.1490: 'wildchar' does not work in search contexts
  9.1.1489: terminal: no visual highlight of empty cols with empty 'listchars'
  9.1.1488: configure: using obsolete macro AC_PROG_GCC_TRADITIONAL
  9.1.1487: :cl doesn't invoke :clist
  9.1.1486: documentation issues with Wayland
  9.1.1485: missing Wayland clipboard support
  9.1.1484: tests: Turkish locale tests fails on Mac
  9.1.1483: not possible to translation position in buffer
  9.1.1482: scrolling with 'splitkeep' and line()
  9.1.1481: gcc complains about uninitialized variable
  9.1.1480: Turkish translation outdated
  9.1.1479: regression when displaying localized percentage position
  9.1.1478: Unused assignment in ex_uniq()
  9.1.1476: no easy way to deduplicate text
  9.1.1476: missing out-of-memory checks in cmdexpand.c
  9.1.1475: completion: regression when "nearest" in 'completeopt'
  9.1.1474: missing out-of-memory check in mark.c
  9.1.1473: inconsistent range arg for :diffget/diffput
  9.1.1472: if_python: PySequence_Fast_{GET_SIZE,GET_ITEM} removed
  9.1.1471: completion: inconsistent ordering with CTRL-P
  9.1.1470: use-after-free with popup callback on error
  9.1.1469: potential buffer-underflow with invalid hl_id
  9.1.1468: filetype: bright(er)script files are not recognized
  9.1.1467: too many strlen() calls
  9.1.1466: filetype: not all lex files are recognized
  9.1.1465: tabpanel: not correctly drawn with 'equalalways'
  9.1.1464: gv does not work in operator-pending mode
  9.1.1463: Integer overflow in getmarklist() after linewise operation
  9.1.1462: missing change from patch v9.1.1461
  9.1.1461: tabpanel: tabpanel vanishes with popup menu
  9.1.1460: MS-Windows: too many strlen() calls in os_win32.c
  9.1.1459: xxd: coloring output is inefficient
  9.1.1458: tabpanel: tabs not properly updated with 'stpl'
  9.1.1457: compile warning with tabpanelopt
  9.1.1456: comment plugin fails toggling if 'cms' contains \
  9.1.1455: Haiku: dailog objects created with no reference
  9.1.1454: tests: no test for pum at line break position
  9.1.1453: tests: Test_geometry() may fail
  9.1.1452: completion: redundant check for completion flags
  9.1.1451: tabpanel rendering artifacts when scrolling
  9.1.1450: Session has wrong arglist with :tcd and :arglocal
  9.1.1449: typo in pum_display()
  9.1.1448: tabpanel is not displayed correctly when msg_scrolled
  9.1.1447: completion: crash when backspacing with fuzzy completion
  9.1.1446: filetype: cuda-gdb config files are not recognized
  9.1.1445: negative matchfuzzy scores although there is a match
  9.1.1444: Unused assignment in set_fuzzy_score()
  9.1.1443: potential buffer underflow in insertchar()
  9.1.1442: tests: Test_diff_fold_redraw() is insufficient
  9.1.1441: completion: code can be improved
  9.1.1440: too many strlen() calls in os_win32.c
  9.1.1439: Last diff folds not merged
  9.1.1438: tests: Test_breakindent_list_split() fails
  9.1.1437: MS-Windows: internal compile error in uc_list()
  9.1.1436: GUI control code is displayed on the console on startup
  9.1.1435: completion: various flaws in fuzzy completion
  9.1.1434: MS-Windows: missing out-of-memory checks in os_win32.c
  9.1.1433: Unnecessary :if when writing session
  9.1.1432: GTK GUI: Buffer menu does not handle unicode correctly
  9.1.1431: Hit-Enter Prompt when loading session files
  9.1.1430: tabpanel may flicker in the GUI
  9.1.1429: dragging outside the tabpanel changes tabpagenr
  9.1.1428: completion: register completion needs cleanup
  9.1.1427: rendering artifacts with the tabpanel
  9.1.1426: completion: register contents not completed
  9.1.1425: tabpanel: there are still some problems with the tabpanel
  9.1.1424: PMenu selection broken with multi-line selection and limits
  9.1.1423: :tag command not working correctly using Vim9 Script
  9.1.1422: scheduling of complete function can be improved
  9.1.1421: tests: need a test for the new-style tutor.tutor
  9.1.1420: tests: could need some more tests for shebang lines
  9.1.1419: It is difficult to ignore all but some events
  9.1.1418: configures GUI auto detection favors GTK2
  9.1.1417: missing info about register completion in complete_info()
  9.1.1416: completion limits not respected for fuzzy completions
  9.1.1415: potential use-after free when there is an error in 'tabpanel'
  9.1.1414: MS-Windows: compile warnings in os_win32.c
  9.1.1413: spurious CursorHold triggered in GUI on startup
  9.1.1412: tests: Test_tabpanel_tabonly() fails on larger screens
  9.1.1411: crash when calling non-existing function for tabpanel
  9.1.1410: out-of-bounds access with 'completefunc'
  9.1.1409: using f-flag in 'complete' conflicts with Neovim
  9.1.1408: not easily possible to complete from register content
  9.1.1407: Can't use getpos('v') in OptionSet when using setbufvar()

zypper

- Fixed `bash-completion`: `zypper refresh` now ignores
  repository priority lines.
- Changes to support building against restructured libzypp in
  stack build (bsc#1230267)
- version 1.14.94