suse-sles-15-sp6-v20251002-arm64-ltd Package Source Changes

azure-cli

- Add azure-storage-azcopy to Recommends (bsc#1245160, jsc#PED-13198)

bind

- ensure file descriptors 0-2 are in use before using libuv (bsc#1230649)
  * bind-ensure-file-descriptors-0-2-are-in-use-before-using-.patch

cloud-regionsrv-client

- Update version to 10.5.2 (bsc#1247539)
  + When an instance fails verification server side the default credentials
    were left behind requireing manual intervantion prior to the next
    registration attempt.
  + Fix issue triggered when using instance-billing-flavor-check due to
    IP address handling as object rather than string introduced 10.5.0

- Update version to 10.5.1
  + Fix issue with picking up configured server names from the
    regionsrv config file. Previously only IP addresses were collected
  + Update scriptlet for package uninstall to avoid issues in the
    build service

- Update version to 10.5.0
  + Use region server IP addresses to determine Internet access rather
    than a generic address. Region server IP addresses may not be blocked
    in the network construct. (bsc#1245305)

curl

- tool_operate: fix return code when --retry is used but not
  triggered [bsc#1249367]
  * Add curl-tool_operate-fix-return-code-when-retry-is-used.patch

- Security fixes:
  * [bsc#1249191, CVE-2025-9086] Out of bounds read for cookie path
  * [bsc#1249348, CVE-2025-10148] Predictable WebSocket mask
  * Add patches:
  - curl-CVE-2025-9086.patch
  - curl-CVE-2025-10148.patch

- Fix the --ftp-pasv option in curl v8.14.1 [bsc#1246197]
  * tool_getparam: fix --ftp-pasv [5f805ee]
  * Add curl-fix--ftp-pasv.patch

- Update to 8.14.1: [jsc#PED-13055, jsc#PED-13056]
  * Add _multibuild
  * Remove patches fixed in the update:
  - curl-CVE-2024-11053.patch
  - curl-CVE-2024-2004.patch
  - curl-CVE-2024-2379.patch
  - curl-CVE-2024-2398.patch
  - curl-CVE-2024-2466.patch
  - curl-CVE-2024-6197.patch
  - curl-CVE-2024-7264.patch
  - curl-CVE-2024-8096.patch
  - curl-CVE-2024-9681.patch
  - curl-CVE-2025-0167.patch
  - curl-CVE-2025-0725.patch
  - curl-aws_sigv4-url-encode-the-canonical-path.patch
  - curl-mstp-starttls.patch

- Sync spec file with SLE codestreams: [jsc#PED-13055, jsc#PED-13056]
  * Add curl-mini.rpmlintrc to avoid rpmlint shlib-policy-name-error
    when building the curl-mini package in SLE.
  * Add libssh minimum version requirements.
  * Use ldconfig_scriptlets when available.
  * Remove unused option --disable-ntlm-wb.

- Update to 8.14.1:
  * Security fixes:
  - [bsc#1243933, CVE-2025-5399] libcurl can possibly get
    trapped in an endless busy-loop when processing specially
    crafted packets [d1145df2]
  * Bugfixes:
  - asyn-thrdd: fix cleanup when RR fails due to OOM
  - ftp: fix teardown of DATA connection in done
  - http: fail early when rewind of input failed when following redirects
  - multi: fix add_handle resizing
  - tls BIOs: handle BIO_CTRL_EOF correctly
  - tool_getparam: make --no-anyauth not be accepted
  - wolfssl: fix sending of early data
  - ws: handle blocked sends better
  - ws: tests and fixes

- Update to 8.14.0:
  * Security fixes:
  - [CVE-2025-4947, bsc#1243397] QUIC certificate check skip with wolfSSL
  - [CVE-2025-5025, bsc#1243706] No QUIC certificate pinning with wolfSSL
  * Changes:
  - mqtt: send ping at upkeep interval
  - schannel: handle pkcs12 client certificates containing CA certificates
  - TLS: add CURLOPT_SSL_SIGNATURE_ALGORITHMS and --sigalgs
  - vquic: ngtcp2 + openssl support
  - wcurl: import v2025.04.20 script + docs
  - websocket: add option to disable auto-pong reply
  * Bugfixes:
  - asny-thrdd: fix detach from running thread
  - async-threaded resolver: use ref counter
  - async: DoH improvements
  - build: enable gcc-12/13+, clang-10+ picky warnings
  - build: enable gcc-15 picky warnings
  - certs: drop unused `default_bits` from `.prm` files
  - cf-https-connect: use the passed in dns struct pointer
  - cf-socket: fix FTP accept connect
  - cfilters: remove assert
  - cmake: fix nghttp3 static linking with `USE_OPENSSL_QUIC=ON`
  - cmake: prefer `COMPILE_OPTIONS` over `CMAKE_C_FLAGS` for custom C options
  - cmake: revert `CURL_LTO` behavior for multi-config generators
  - configure: fix --disable-rt
  - CONTRIBUTE: add project guidelines for AI use
  - cpool/cshutdown: force close connections under pressure
  - curl: fix memory leak when -h is used in config file
  - curl_get_line: handle lines ending on the buffer boundary
  - headers: enforce a max number of response header to accept
  - http: fix HTTP/2 handling of TE request header using "trailers"
  - lib: include files using known path
  - lib: unify conversions to/from hex
  - libssh: add NULL check for Curl_meta_get()
  - libssh: fix memory leak
  - mqtt: use conn/easy meta hash
  - multi: do transfer book keeping using mid
  - multi: init_do(): check result
  - netrc: avoid NULL deref on weird input
  - netrc: avoid strdup NULL
  - netrc: deal with null token better
  - openssl-quic: avoid potential `-Wnull-dereference`, add assert
  - openssl-quic: fix shutdown when stream not open
  - openssl: enable builds for *both* engines and providers
  - openssl: set the cipher string before doing private cert
  - progress: avoid integer overflow when gathering total transfer size
  - rand: update comment on Curl_rand_bytes weak random
  - rustls: make max size of cert and key reasonable
  - smb: avoid integer overflow on weird input date
  - urlapi: redirecting to "" is considered fine
  * Remove curl-8.13.0-CloseSocket.patch upstream
  * Rebase libcurl-ocloexec.patch

- fix Leap build add curl-8.13.0-CloseSocket.patch

- Update to 8.13.0:
  * Changes:
  - curl: add write-out variable 'tls_earlydata'
  - curl: make --url support a file with URLs
  - gnutls: set priority via --ciphers
  - IMAP: add CURLOPT_UPLOAD_FLAGS and --upload-flags
  - lib: add CURLFOLLOW_OBEYCODE and CURLFOLLOW_FIRSTONLY
  - OpenSSL/quictls: add support for TLSv1.3 early data
  - rustls: add support for CERTINFO
  - rustls: add support for SSLKEYLOGFILE
  - rustls: support ECH w/ DoH lookup for config
  - rustls: support native platform verifier
  - var: add a '64dec' function that can base64 decode a string
  * Bugfixes:
  - conn: fix connection reuse when SSL is optional
  - hash: use single linked list for entries
  - http2: detect session being closed on ingress handling
  - http2: reset stream on response header error
  - http: remove a HTTP method size restriction
  - http: version negotiation
  - httpsrr: fix port detection
  - libssh: fix freeing of resources in disconnect
  - libssh: fix scp large file upload for 32-bit size_t systems
  - openssl-quic: do not iterate over multi handles
  - openssl: check return value of X509_get0_pubkey
  - openssl: drop support for old OpenSSL/LibreSSL versions
  - openssl: fix crash on missing cert password
  - openssl: fix pkcs11 URI checking for key files.
  - openssl: remove bad `goto`s into other scope
  - setopt: illegal CURLOPT_SOCKS5_AUTH should return error
  - setopt: setting PROXYUSERPWD after PROXYUSERNAME/PASSWORD is fine
  - sshserver.pl: adjust `AuthorizedKeysFile2` cutoff version
  - sshserver: fix excluding obsolete client config lines
  - SSLCERTS: list support for SSL_CERT_FILE and SSL_CERT_DIR
  - tftpd: prefix TFTP protocol error `E*` constants with `TFTP_`
  - tool_operate: fail SSH transfers without server auth
  - url: call protocol handler's disconnect in Curl_conn_free
  - urlapi: remove percent encoded dot sequences from the URL path
  - urldata: remove 'hostname' from struct Curl_async
  * Rebase patches:
  - libcurl-ocloexec.patch
  - curl-secure-getenv.patch

- Update to 8.12.1:
  * Bugfixes:
  - asyn-thread: fix build with 'CURL_DISABLE_SOCKETPAIR'
  - asyn-thread: fix HTTPS RR crash
  - asyn-thread: fix the returned bitmask from Curl_resolver_getsock
  - asyn-thread: survive a c-ares channel set to NULL
  - cmake: always reference OpenSSL and ZLIB via imported targets
  - cmake: respect 'GNUTLS_CFLAGS' when detected via 'pkg-config'
  - cmake: respect 'GNUTLS_LIBRARY_DIRS' in 'libcurl.pc' and 'curl-config'
  - content_encoding: #error on too old zlib
  - imap: TLS upgrade fix
  - ldap: drop support for legacy Novell LDAP SDK
  - libssh2: comparison is always true because rc <= -1
  - libssh2: raise lowest supported version to 1.2.8
  - libssh: drop support for libssh older than 0.9.0
  - openssl-quic: ignore ciphers for h3
  - pop3: TLS upgrade fix
  - runtests: fix the disabling of the memory tracking
  - runtests: quote commands to support paths with spaces
  - scache: add magic checks
  - smb: silence '-Warray-bounds' with gcc 13+
  - smtp: TLS upgrade fix
  - tool_cfgable: sort struct fields by size, use bitfields for booleans
  - tool_getparam: add "TLS required" flag for each such option
  - vtls: fix multissl-init
  - wakeup_write: make sure the eventfd write sends eight bytes

- Update to 8.12.0:
  * Security fixes:
  - [bsc#1234068, CVE-2024-11053] curl could leak the password used
    for the first host to the followed-to host under certain circumstances.
  - [bsc#1232528, CVE-2024-9681] HSTS subdomain overwrites parent cache entry
  - [bsc#1236589, CVE-2025-0665] eventfd double close
  * Changes:
  - curl: add byte range support to --variable reading from file
  - curl: make --etag-save acknowledge --create-dirs
  - getinfo: fix CURLINFO_QUEUE_TIME_T and add 'time_queue' var
  - getinfo: provide info which auth was used for HTTP and proxy
  - hyper: drop support
  - openssl: add support to use keys and certificates from PKCS#11 provider
  - QUIC: 0RTT for gnutls via CURLSSLOPT_EARLYDATA
  - vtls: feature ssls-export for SSL session im-/export
  * Bugfixes:
  - altsvc: avoid integer overflow in expire calculation
  - asyn-ares: acknowledge CURLOPT_DNS_SERVERS set to NULL
  - asyn-ares: fix memory leak
  - asyn-ares: initial HTTPS resolve support
  - asyn-thread: use c-ares to resolve HTTPS RR
  - async-thread: avoid closing eventfd twice
  - cd2nroff: do not insist on quoted <> within backticks
  - cd2nroff: support "none" as a TLS backend
  - conncache: count shutdowns against host and max limits
  - content_encoding: drop support for zlib before 1.2.0.4
  - content_encoding: namespace GZIP flag constants
  - content_encoding: put the decomp buffers into the writer structs
  - content_encoding: support use of custom libzstd memory functions
  - cookie: cap expire times to 400 days
  - cookie: parse only the exact expire date
  - curl: return error if etag options are used with multiple URLs
  - curl_multi_fdset: include the shutdown connections in the set
  - curl_sha512_256: rename symbols to the curl namespace
  - curl_url_set.md: adjust the added-in to 7.62.0
  - doh: send HTTPS RR requests for all HTTP(S) transfers
  - easy: allow connect-only handle reuse with easy_perform
  - easy: make curl_easy_perform() return error if connection still there
  - easy_lock: use Sleep(1) for thread yield on old Windows
  - ECH: update APIs to those agreed with OpenSSL maintainers
  - GnuTLS: fix 'time_appconnect' for early data
  - HTTP/2: strip TE request header
  - http2: fix data_pending check
  - http2: fix value stored to 'result' is never read
  - http: ignore invalid Retry-After times
  - http_aws_sigv4: Fix invalid compare function handling zero-length pairs
  - https-connect: start next immediately on failure
  - lib: redirect handling by protocol handler
  - multi: fix curl_multi_waitfds reporting of fd_count
  - netrc: 'default' with no credentials is not a match
  - netrc: fix password-only entries
  - netrc: restore _netrc fallback logic
  - ngtcp2: fix memory leak on connect failure
  - openssl: define `HAVE_KEYLOG_CALLBACK` before use
  - openssl: fix ECH logic
  - osslq: use SSL_poll to determine writeability of QUIC streams
  - sectransp: free certificate on error
  - select: avoid a NULL deref in cwfds_add_sock
  - src: omit hugehelp and ca-embed from libcurltool
  - ssl session cache: change cache dimensions
  - system.h: add 64-bit curl_off_t definitions for NonStop
  - telnet: handle single-byte input option
  - TLS: check connection for SSL use, not handler
  - tool_formparse.c: make curlx_uztoso a static in here
  - tool_formparse: accept digits in --form type= strings
  - tool_getparam: ECH param parsing refix
  - tool_getparam: fail --hostpubsha256 if libssh2 is not used
  - tool_getparam: fix "Ignored Return Value"
  - tool_getparam: fix memory leak on error in parse_ech
  - tool_getparam: fix the ECH parser
  - tool_operate: make --etag-compare always accept a non-existing file
  - transfer: fix CURLOPT_CURLU override logic
  - urlapi: fix redirect to a new fragment or query (only)
  - vquic: make vquic_send_packets not return without setting psent
  - vtls: fix default SSL backend as a fallback
  - vtls: only remember the expiry timestamp in session cache
  - websocket: fix message send corruption
  - x509asn1: add parse recursion limit
  * Rebase pathes:
  - libcurl-ocloexec.patch
  - dont-mess-with-rpmoptflags.patch

dracut

- Update to version 059+suse.562.geca59f6b:
  * fix(dracut-util): crash if CMDLINE ends with quotation mark (bsc#1247819)
  * fix(rngd): adjust license to match the license of the whole project
  * fix(nfs): set correct ownership of rpc.statd state directories (bsc#1217885)
  * perf(nfs): remove references to old rpcbind state dir
  * fix(nfs): libnfsidmap plugins not added in some distributions

hyper-v

- fcopy: Fix irregularities with size of ring buffer (a4131a50)
- fcopy: Fix incorrect file path conversion (0d86a8d6)

- Enable debug logs for hv_kvp_daemon (a9c0b33e) (bsc#1244154)

- update route parsing in kvp daemon (9bbb8a07)
- reduce resource usage in hv_kvp_daemon (175c71c2)
- reduce resouce usage in hv_get_dns_info helper (a4d024fe)
- hv_kvp_daemon: Pass NIC name to hv_get_dns_info as well (07dfa6e8)
- terminate fcopy daemon if read from uio fails (a9640fcd)
- change permissions of NetworkManager configuration file (91ae69c7)
- Fix a complier warning in the fcopy uio daemon (cb1b78f1)
- remove obsolete kvptest.ps1.txt which failed since a decade
- remove obsolete rpm postinstall code for SLE11SP2

- Add memory allocation check in hv_fcopy_start (94e86b17)
- suppress the invalid warning for packed member alignment (207e03b0)
- Add new fcopy application based on uio driver (82b0945c)
- Add vmbus_bufring (45bab4d7)
- kvp: Handle IPv4 and Ipv6 combination for keyfile format (f971f6dd)
- kvp: Some small fixes for handling NM keyfiles (c3803203)
- kvp: Support for keyfile based connection profile (42999c90)
- kvp: remove unnecessary (void*) conversions (22589542)
- Remove an extraneous "the" (f15f39fa)
- change http to https in hv_kvp_daemon.c (fa52a4b2)
- replace the copy of include/linux/hyperv.h with include/uapi/linux/hyperv.h (6de74d10)
- merge individual udev rules files into a single rules file
- package only files, not directories already owned by filesystem.rpm
- remove braces from rpm spec macros
- remove obsolete Group tag
- replace RPM_BUILD_ROOT with buildroot
- use a meaningful name for the UAPI include file
- use a meaningful variable name for ifcfg in hv_set_ifconfig.sh

- remove dependency on /usr/bin/python3 using
  %python3_fix_shebang macro, [bsc#1212476]

- Use %patch -P N instead of deprecated %patchN.

iproute2

- add post-6.4 follow-up fixes (bsc#1243005)
  * patches/bond-fix-stack-smash-in-xstats.patch
  * patches/tc-gred-fix-debug-print.patch

- sync UAPI header copies with SLE15-SP6 kernel
  * sync-UAPI-header-copies-with-SLE15-SP6.patch
- drop Update-kernel-headers.patch
  (no longer needed with full UAPI sync)

- devlink: support ipsec_crypto and ipsec_packet cap (bsc#1248660)
  * add Update-kernel-headers.patch
  * add devlink-Support-setting-port-function-ipsec_crypto-c.patch
  * add devlink-Support-setting-port-function-ipsec_packet-c.patch
  * refresh ss-Tone-down-cgroup-path-resolution.patch

- add post-6.4 follow-up fix (bsc#1243005)
  * ss-show-extra-info-when-processes-is-not-used.patch

- add post-6.4 follow-up fixes (bsc#1243005):
  * bpf-fix-warning-from-basename.patch
  * bridge-fdb-add-an-error-print-for-unknown-command.patch
  * bridge-vni-Accept-del-command.patch
  * bridge-vni-Fix-duplicate-group-and-remote-error-mess.patch
  * bridge-vni-Fix-vni-filter-help-strings.patch
  * bridge-vni-Remove-dead-code-in-group-argument-parsin.patch
  * bridge-vni-Report-duplicate-vni-argument-using-dupar.patch
  * f_flower-Treat-port-0-as-valid.patch
  * genl-ctrl.c-spelling-fix-in-error-message.patch
  * ip-Add-missing-echo-option-to-usage.patch
  * ip-Add-missing-stats-command-to-usage.patch
  * ip-ipmroute-use-preferred_family-to-get-prefix.patch
  * ip-remove-non-existent-amt-subcommand-from-usage.patch
  * iplink-fix-fd-leak-when-playing-with-netns.patch
  * iplink_bridge-fix-incorrect-root-id-dump.patch
  * iplink_xstats-spelling-fix-in-error-message.patch
  * iproute2-fix-type-incompatibility-in-ifstat.c.patch
  * iproute2-prevent-memory-leak.patch
  * libnetlink-validate-nlmsg-header-length-first.patch
  * man-devlink-resource-add-missing-words-in-the-exampl.patch
  * mnl_utils-sanitize-incoming-netlink-payload-size-in-.patch
  * rdma-Fix-help-information-of-rdma-resource.patch
  * rdma-Fix-the-error-of-accessing-string-variable-outs.patch
  * rdma-use-print_XXX-instead-of-COLOR_NONE.patch
  * ss-Fix-socket-type-check-in-packet_show_line.patch
  * ss-fix-directory-leak-when-T-option-is-used.patch
  * ss-mptcp-display-info-counters-as-unsigned.patch
  * ss-prevent-Process-column-from-being-printed-unless-.patch
  * tc-taprio-don-t-print-netlink-attributes-which-weren.patch
  * tc-taprio-fix-JSON-output-when-TCA_TAPRIO_ATTR_ADMIN.patch
  * tc-taprio-fix-parsing-of-fp-option-when-it-doesn-t-a.patch
  * vdpa-consume-device_features-parameter.patch
- add to blacklist:
  * af0ea2cd0b9e (duplicate of 92eac7e4bf14)
- refresh:
  * ss-Add-support-for-dumping-TCP-bound-inactive-socket.patch
  * add-explicit-typecast-to-avoid-gcc-warning.patch
  * use-sysconf-_SC_CLK_TCK-if-HZ-undefined.patch

kernel-default

- kernel-subpackage-build: Decompress ghost file when compressed version exists (bsc#1249346)
- commit 40606b5

- staging: media: atomisp: Fix stack buffer overflow in
  gmin_get_var_int() (CVE-2025-38585 bsc#1248355).
- commit f7d8b23

- vsock: Do not allow binding to VMADDR_PORT_ANY (bsc#1248511
  CVE-2025-38618).
- commit 0256bd0

- RDMA: hfi1: fix possible divide-by-zero in find_hw_thread_mask() (git-fixes)
- commit 5289b12

- RDMA/core: reduce stack using in nldev_stat_get_doit() (git-fixes)
- commit 1ff622a

- KVM: Allow CPU to reschedule while setting per-page memory
  attributes (bsc#1248186 CVE-2025-38506).
- commit a7f8a41

- slab: Decouple slab_debug and no_hash_pointers (bsc#1249022).
- commit 41f928f

- RAS/AMD/FMPM: Use atl internal.h for INVALID_SPA (bsc#1242034).
- commit ac5d9dc

- RAS/AMD/FMPM: Get masked address (bsc#1242034).
- commit 4171987

- RAS/AMD/ATL: Include row bit in row retirement (bsc#1242034).
- commit fa3fcbb

- Update
  patches.suse/Bluetooth-btnxpuart-Resolve-TX-timeout-error-in-powe.patch
  (bsc#1230557 CVE-2024-58238 bsc#1242754).
- Update
  patches.suse/HID-quirks-Add-quirk-for-2-Chicony-Electronics-HP-5M.patch
  (stable-fixes CVE-2025-38540 bsc#1248208).
- Update
  patches.suse/PCI-pnv_php-Clean-up-allocated-IRQs-on-unplug.patch
  (bsc#1215199 CVE-2025-38624 bsc#1248617).
- Update
  patches.suse/PM-devfreq-Check-governor-before-using-governor-name.patch
  (git-fixes CVE-2025-38609 bsc#1248337).
- Update
  patches.suse/RDMA-hns-Fix-double-destruction-of-rsv_qp.patch
  (git-fixes CVE-2025-38582 bsc#1248349).
- Update
  patches.suse/arm64-entry-Mask-DAIF-in-cpu_switch_to-call_on_irq_stack.patch
  (git-fixes CVE-2025-38670 bsc#1248655).
- Update
  patches.suse/btrfs-fix-assertion-when-building-free-space-tree.patch
  (git-fixes CVE-2025-38503 bsc#1248183).
- Update
  patches.suse/can-netlink-can_changelink-fix-NULL-pointer-deref-of.patch
  (git-fixes CVE-2025-38665 bsc#1248648).
- Update
  patches.suse/clk-davinci-Add-NULL-check-in-davinci_lpsc_clk_regis.patch
  (git-fixes CVE-2025-38635 bsc#1248573).
- Update
  patches.suse/clk-xilinx-vcu-unregister-pll_post-only-if-registere.patch
  (git-fixes CVE-2025-38583 bsc#1248350).
- Update
  patches.suse/comedi-aio_iiro_16-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38529 bsc#1248196).
- Update
  patches.suse/comedi-pcl812-Fix-bit-shift-out-of-bounds.patch
  (git-fixes CVE-2025-38530 bsc#1248206).
- Update
  patches.suse/crypto-ccp-Fix-crash-when-rebind-ccp-device-for-ccp..patch
  (git-fixes CVE-2025-38581 bsc#1248345).
- Update
  patches.suse/dmaengine-nbpfaxi-Fix-memory-corruption-in-probe.patch
  (git-fixes CVE-2025-38538 bsc#1248213).
- Update patches.suse/drm-amd-display-Fix-vs-typos.patch
  (git-fixes CVE-2024-26661 bsc#1222323).
- Update
  patches.suse/drm-sched-Increment-job-count-before-swapping-tail-s.patch
  (git-fixes CVE-2025-38515 bsc#1248212).
- Update
  patches.suse/drm-tegra-nvdec-Fix-dma_alloc_coherent-error-check.patch
  (git-fixes CVE-2025-38543 bsc#1248214).
- Update
  patches.suse/fbdev-imxfb-Check-fb_add_videomode-to-prevent-null-p.patch
  (git-fixes CVE-2025-38630 bsc#1248575).
- Update
  patches.suse/hfsplus-remove-mutex_lock-check-in-hfsplus_free_extents.patch
  (git-fixes CVE-2025-38650 bsc#1248746).
- Update
  patches.suse/hwmon-corsair-cpro-Validate-the-size-of-the-received.patch
  (git-fixes CVE-2025-38548 bsc#1248228).
- Update
  patches.suse/i2c-qup-jump-out-of-the-loop-in-case-of-timeout.patch
  (git-fixes CVE-2025-38671 bsc#1248652).
- Update
  patches.suse/ipv6-fix-possible-infinite-loop-in-fib6_info_uses_de.patch
  (git-fixes CVE-2025-38587 bsc#1248361).
- Update
  patches.suse/ipv6-mcast-Delay-put-pmc-idev-in-mld_del_delrec.patch
  (git-fixes CVE-2025-38550 bsc#1248227).
- Update
  patches.suse/ipv6-prevent-infinite-loop-in-rt6_nlmsg_size.patch
  (git-fixes CVE-2025-38588 bsc#1248368).
- Update
  patches.suse/ipv6-reject-malicious-packets-in-ipv6_gso_segment.patch
  (git-fixes CVE-2025-38572 bsc#1248399).
- Update
  patches.suse/iwlwifi-Add-missing-check-for-alloc_ordered_workqueu.patch
  (git-fixes CVE-2025-38602 bsc#1248341).
- Update
  patches.suse/kasan-remove-kasan_find_vm_area-to-prevent-possible-.patch
  (git-fixes CVE-2025-38510 bsc#1248166).
- Update
  patches.suse/ksmbd-fix-out-of-bounds-read-in-smb2_sess_setup.patch
  (bsc#1012628 bsc#1213545 CVE-2023-3867).
- Update
  patches.suse/ksmbd-fix-wrong-next-length-validation-of-ea-b.patch
  (bsc#1012628 CVE-2023-4130 bsc#1248164).
- Update patches.suse/ksmbd-validate-command-request-size.patch
  (bsc#1012628 CVE-2023-4515 bsc#1248180).
- Update
  patches.suse/md-make-rdev_addable-usable-for-rcu-mode.patch
  (git-fixes CVE-2025-38621 bsc#1248609).
- Update
  patches.suse/net-packet-fix-a-race-in-packet_set_ring-and-packet_.patch
  (git-fixes CVE-2025-38617 bsc#1248621).
- Update patches.suse/net-phy-Don-t-register-LEDs-for-genphy.patch
  (git-fixes CVE-2025-38537 bsc#1248229).
- Update
  patches.suse/net-sched-Restrict-conditions-for-adding-duplicating.patch
  (git-fixes CVE-2025-38553 bsc#1248255).
- Update
  patches.suse/net-sched-mqprio-fix-stack-out-of-bounds-write-in-tc.patch
  (git-fixes CVE-2025-38568 bsc#1248386).
- Update
  patches.suse/nilfs2-reject-invalid-file-types-when-reading-inodes.patch
  (git-fixes CVE-2025-38663 bsc#1248636).
- Update patches.suse/perf-core-Exit-early-on-perf_mmap-fail.patch
  (CVE-2025-38563 bsc#1248306 dependency CVE-2025-38565
  bsc#1248377).
- Update
  patches.suse/phy-tegra-xusb-Fix-unbalanced-regulator-disable-in-U.patch
  (git-fixes CVE-2025-38535 bsc#1248240).
- Update
  patches.suse/pinctrl-qcom-msm-mark-certain-pins-as-invalid-for-in.patch
  (git-fixes CVE-2025-38516 bsc#1248209).
- Update
  patches.suse/pinmux-fix-race-causing-mux_owner-NULL-with-active-m.patch
  (git-fixes CVE-2025-38632 bsc#1248669).
- Update
  patches.suse/power-supply-cpcap-charger-Fix-null-check-for-power_.patch
  (git-fixes CVE-2025-38634 bsc#1248666).
- Update
  patches.suse/powercap-dtpm_cpu-Fix-NULL-pointer-dereference-in-ge.patch
  (git-fixes CVE-2025-38610 bsc#1248395).
- Update
  patches.suse/powerpc-eeh-Make-EEH-driver-device-hotplug-safe.patch
  (bsc#1215199 CVE-2025-38576 bsc#1248354).
- Update
  patches.suse/staging-fbtft-fix-potential-memory-leak-in-fbtft_fra.patch
  (git-fixes CVE-2025-38612 bsc#1248390).
- Update
  patches.suse/sunrpc-fix-client-side-handling-of-tls-alerts.patch
  (git-fixes CVE-2025-38571 bsc#1248401).
- Update
  patches.suse/sunrpc-fix-handling-of-server-side-tls-alerts.patch
  (git-fixes CVE-2025-38566 bsc#1248374).
- Update
  patches.suse/tls-stop-recv-if-initial-process_rx_list-gave-us-non.patch
  (bsc#1221858 CVE-2024-58239 bsc#1248614).
- Update
  patches.suse/usb-gadget-fix-use-after-free-in-composite_dev_clean.patch
  (git-fixes CVE-2025-38555 bsc#1248297).
- Update
  patches.suse/wifi-ath11k-clear-initialized-flag-for-deinit-ed-srn.patch
  (git-fixes CVE-2025-38601 bsc#1248340).
- Update
  patches.suse/wifi-iwlwifi-Fix-error-code-in-iwl_op_mode_dvm_start.patch
  (git-fixes CVE-2025-38656 bsc#1248643).
- Update
  patches.suse/wifi-mac80211-reject-TDLS-operations-when-station-is.patch
  (git-fixes CVE-2025-38644 bsc#1248748).
- Update
  patches.suse/wifi-mt76-mt7925-Fix-null-ptr-deref-in-mt7925_therma.patch
  (git-fixes CVE-2025-38541 bsc#1248216).
- Update
  patches.suse/wifi-prevent-A-MSDU-attacks-in-mesh-networks.patch
  (stable-fixes CVE-2025-38512 bsc#1248178).
- Update
  patches.suse/wifi-rtl818x-Kill-URBs-before-clearing-tx-status-que.patch
  (git-fixes CVE-2025-38604 bsc#1248333).
- Update
  patches.suse/wifi-rtw89-avoid-NULL-dereference-when-RX-problemati.patch
  (git-fixes CVE-2025-38646 bsc#1248577).
- Update
  patches.suse/wifi-zd1211rw-Fix-potential-NULL-pointer-dereference.patch
  (git-fixes CVE-2025-38513 bsc#1248179).
- commit efc5ee0

- HID: asus: fix UAF via HID_CLAIMED_INPUT validation (git-fixes).
- HID: multitouch: fix slab out-of-bounds access in
  mt_report_fixup() (git-fixes).
- drm/mediatek: Fix device/node reference count leaks in
  mtk_drm_get_all_drm_priv (git-fixes).
- drm/msm/kms: move snapshot init earlier in KMS init (git-fixes).
- drm/msm: Defer fd_install in SUBMIT ioctl (git-fixes).
- drm/nouveau: remove unused memory target test (git-fixes).
- drm/nouveau: remove unused increment in gm200_flcn_pio_imem_wr
  (git-fixes).
- drm/nouveau: fix error path in nvkm_gsp_fwsec_v2 (git-fixes).
- drm/nouveau/disp: Always accept linear modifier (git-fixes).
- mISDN: hfcpci: Fix warning when deleting uninitialized timer
  (git-fixes).
- Bluetooth: hci_sync: fix set_local_name race condition
  (git-fixes).
- Bluetooth: hci_event: Detect if HCI_EV_NUM_COMP_PKTS is
  unbalanced (git-fixes).
- Bluetooth: hci_event: Mark connection as closed during suspend
  disconnect (git-fixes).
- Bluetooth: hci_event: Treat UNKNOWN_CONN_ID on disconnect as
  success (git-fixes).
- commit f54cbc7

- clk: bcm: rpi: Add NULL check in raspberrypi_clk_register() (CVE-2025-38160 bsc#1245780)
- commit f8670f7

- tipc: fix null-ptr-deref when acquiring remote ip of ethernet bearer (CVE-2025-38184 bsc#1245956)
- commit 263759a

- drm/amd/display: Avoid divide by zero by initializing dummy pitch to 1 (CVE-2025-38205 bsc#1246005)
- commit e09f72d

- smb: client: add NULL check in automount_fullpath (CVE-2025-38208 bsc#1245815)
- commit 04d79fb

- net: stmmac: make sure that ptp_rate is not 0 before configuring EST (CVE-2025-38125 bsc#1245710)
- commit 0fcfa4f

- pNFS: Fix disk addr range check in block/scsi layout
  (git-fixes).
- commit c36ff17

- pNFS: Fix stripe mapping in block/scsi layout (git-fixes).
- commit 5bf6a36

- pNFS: Handle RPC size limit for layoutcommits (git-fixes).
- commit 36dee9f

- pNFS: Fix uninited ptr deref in block/scsi layout (git-fixes).
- commit 8d7a7ee

- jfs: truncate good inode pages when hard link is 0 (git-fixes).
- commit 7e762b7

- jfs: Regular file corruption check (git-fixes).
- commit 4f3d801

- jfs: upper bound check of tree index in dbAllocAG (git-fixes).
- commit 997ac87

- hfs: fix slab-out-of-bounds in hfs_bnode_read() (git-fixes).
- commit 1ea8ac2

- hfsplus: fix slab-out-of-bounds in hfsplus_bnode_read()
  (git-fixes).
- commit 34d35cb

- hfsplus: fix slab-out-of-bounds read in hfsplus_uni2asc()
  (git-fixes).
- commit 07b3674

- hfsplus: don't use BUG_ON() in hfsplus_create_attributes_file()
  (git-fixes).
- commit edddb1c

- hfs: fix not erasing deleted b-tree node issue (git-fixes).
- commit 9b06f84

- fs/orangefs: use snprintf() instead of sprintf() (git-fixes).
- commit 9e05c62

- exfat: add cluster chain loop check for dir (git-fixes).
- commit 50f0877

- drm/amdkfd: Don't call mmput from MMU notifier callback (bsc#1248217 CVE-2025-38520)
- commit c848230

- kernel-binary: Another installation ordering fix (bsc#1241353).
- commit fe14ab5

- drm/amdgpu: fix task hang from failed job submission during
  process kill (git-fixes).
- commit 6aefbfc

- usb: dwc3: Remove WARN_ON for device endpoint command timeouts
  (stable-fixes).
- USB: storage: Ignore driver CD mode for Realtek multi-mode
  Wi-Fi dongles (stable-fixes).
- usb: dwc3: pci: add support for the Intel Wildcat Lake
  (stable-fixes).
- USB: storage: Add unusual-devs entry for Novatek NTK96550-based
  camera (stable-fixes).
- usb: quirks: Add DELAY_INIT quick for another SanDisk 3.2Gen1
  Flash Drive (stable-fixes).
- rtc: ds1307: handle oscillator stop flag (OSF) for ds1341
  (stable-fixes).
- rtc: ds1307: remove clear of oscillator stop flag (OSF) in probe
  (stable-fixes).
- watchdog: sbsa: Adjust keepalive timeout to avoid MediaTek
  WS0 race condition (stable-fixes).
- watchdog: dw_wdt: Fix default timeout (stable-fixes).
- watchdog: iTCO_wdt: Report error if timeout configuration fails
  (stable-fixes).
- soundwire: amd: serialize amd manager resume sequence during
  pm_prepare (stable-fixes).
- power: supply: qcom_battmgr: Add lithium-polymer entry
  (stable-fixes).
- pwm: mediatek: Fix duty and period setting (git-fixes).
- pwm: mediatek: Handle hardware enable and clock enable
  separately (stable-fixes).
- wifi: ath12k: Correct tid cleanup when tid setup fails
  (stable-fixes).
- wifi: ath12k: Add memset and update default rate value in wmi
  tx completion (stable-fixes).
- wifi: cfg80211: reject HTC bit for management frames
  (stable-fixes).
- wifi: rtw89: Lower the timeout in rtw89_fw_read_c2h_reg()
  for USB (stable-fixes).
- wifi: rtw89: Fix rtw89_mac_power_switch() for USB
  (stable-fixes).
- wifi: rtw89: Disable deep power saving for USB/SDIO
  (stable-fixes).
- wifi: iwlwifi: mvm: set gtk id also in older FWs (stable-fixes).
- wifi: iwlwifi: mvm: fix scan request validation (stable-fixes).
- wifi: cfg80211: Fix interface type validation (stable-fixes).
- wifi: mac80211: don't complete management TX on SAE commit
  (stable-fixes).
- wifi: mac80211: fix rx link assignment for non-MLO stations
  (stable-fixes).
- wifi: mt76: mt7915: mcu: re-init MCU before loading FW patch
  (stable-fixes).
- wifi: iwlwifi: dvm: fix potential overflow in rs_fill_link_cmd()
  (stable-fixes).
- wifi: iwlwifi: fw: Fix possible memory leak in
  iwl_fw_dbg_collect (stable-fixes).
- wifi: rtlwifi: fix possible skb memory leak in
  `_rtl_pci_rx_interrupt()` (stable-fixes).
- wifi: rtlwifi: fix possible skb memory leak in
  _rtl_pci_init_one_rxdesc() (stable-fixes).
- wifi: ath12k: Enable REO queue lookup table feature on QCN9274
  hw2.0 (stable-fixes).
- wifi: ath12k: Decrement TID on RX peer frag setup error handling
  (stable-fixes).
- wifi: mac80211: update radar_required in channel context after
  channel switch (stable-fixes).
- wifi: iwlegacy: Check rate_idx range after addition
  (stable-fixes).
- reset: brcmstb: Enable reset drivers for ARCH_BCM2835
  (stable-fixes).
- usb: xhci: print xhci->xhc_state when queue_command failed
  (stable-fixes).
- usb: typec: ucsi: psy: Set current max to 100mA for BC 1.2
  and Default (stable-fixes).
- usb: xhci: Set avg_trb_len = 8 for EP0 during Address Device
  Command (stable-fixes).
- usb: xhci: Avoid showing warnings for dying controller
  (stable-fixes).
- usb: xhci: Avoid showing errors during surprise removal
  (stable-fixes).
- usb: core: config: Prevent OOB read in SS endpoint companion
  parsing (stable-fixes).
- usb: typec: intel_pmc_mux: Defer probe if SCU IPC isn't present
  (stable-fixes).
- usb: core: usb_submit_urb: downgrade type check (stable-fixes).
- thermal: sysfs: Return ENODATA instead of EAGAIN for reads
  (stable-fixes).
- thermal/drivers/qcom-spmi-temp-alarm: Enable stage 2 shutdown
  when required (stable-fixes).
- pm: cpupower: Fix the snapshot-order of tsc,mperf, clock in
  mperf_stop() (stable-fixes).
- PM: runtime: Clear power.needs_force_resume in
  pm_runtime_reinit() (stable-fixes).
- PM: sleep: console: Fix the black screen issue (stable-fixes).
- PM / devfreq: governor: Replace sscanf() with kstrtoul()
  in set_freq_store() (stable-fixes).
- commit 3e165bb

- net: phy: smsc: add proper reset flags for LAN8710A
  (stable-fixes).
- pinctrl: stm32: Manage irq affinity settings (stable-fixes).
- phy: rockchip-pcie: Properly disable TEST_WRITE strobe signal
  (stable-fixes).
- media: v4l2-common: Reduce warnings about missing
  V4L2_CID_LINK_FREQ control (stable-fixes).
- media: tc358743: Return an appropriate colorspace from
  tc358743_set_fmt (stable-fixes).
- media: tc358743: Check I2C succeeded during probe
  (stable-fixes).
- media: tc358743: Increase FIFO trigger level to 374
  (stable-fixes).
- media: usb: hdpvr: disable zero-length read messages
  (stable-fixes).
- net: phy: micrel: Add ksz9131_resume() (stable-fixes).
- net: thunderbolt: Enable end-to-end flow control also in
  transmit (stable-fixes).
- net: thunderbolt: Fix the parameter passing of
  tb_xdomain_enable_paths()/tb_xdomain_disable_paths()
  (stable-fixes).
- mmc: sdhci-msm: Ensure SD card power isn't ON when card removed
  (stable-fixes).
- mmc: rtsx_usb_sdmmc: Fix error-path in sd_set_power_mode()
  (stable-fixes).
- mei: bus: Check for still connected devices in
  mei_cl_bus_dev_release() (stable-fixes).
- platform/chrome: cros_ec_typec: Defer probe on missing EC parent
  (stable-fixes).
- platform/x86/amd: pmc: Add Lenovo Yoga 6 13ALC6 to pmc quirk
  list (stable-fixes).
- commit 49985d1

- iio: pressure: bmp280: Use IS_ERR() in bmp280_common_probe()
  (git-fixes).
- ipmi: Use dev_warn_ratelimited() for incorrect message warnings
  (stable-fixes).
- ipmi: Fix strcpy source and destination the same (stable-fixes).
- i2c: Force DLL0945 touchpad i2c freq to 100khz (stable-fixes).
- i3c: don't fail if GETHDRCAP is unsupported (stable-fixes).
- i3c: master: Initialize ret in i3c_i2c_notifier_call()
  (stable-fixes).
- hwmon: (emc2305) Set initial PWM minimum value during probe
  based on thermal state (stable-fixes).
- media: dvb-frontends: dib7090p: fix null-ptr-deref in
  dib7090p_rw_on_apb() (stable-fixes).
- media: dvb-frontends: w7090p: fix null-ptr-deref in
  w7090p_tuner_write_serpar and w7090p_tuner_read_serpar
  (stable-fixes).
- media: uvcvideo: Fix bandwidth issue for Alcor camera
  (stable-fixes).
- leds: leds-lp50xx: Handle reg to get correct multi_index
  (stable-fixes).
- iio: adc: ad_sigma_delta: don't overallocate scan buffer
  (stable-fixes).
- iio: imu: inv_icm42600: use = { } instead of memset()
  (stable-fixes).
- iio: adc: ad7768-1: Ensure SYNC_IN pulse minimum timing
  requirement (stable-fixes).
- gpio: wcd934x: check the return value of regmap_update_bits()
  (stable-fixes).
- gpio: tps65912: check the return value of regmap_update_bits()
  (stable-fixes).
- iio: imu: inv_icm42600: switch timestamp type from int64_t
  __aligned(8) to aligned_s64 (stable-fixes).
- commit cf6f726

- drm/amd/display: Fix DP audio DTO1 clock source on DCE 6
  (stable-fixes).
- drm/amd/display: Fill display clock and vblank time in
  dce110_fill_display_configs (stable-fixes).
- drm/amd/display: Find first CRTC and its line time in
  dce110_fill_display_configs (stable-fixes).
- drm/amd/display: Avoid a NULL pointer dereference
  (stable-fixes).
- drm/amdkfd: Destroy KFD debugfs after destroy KFD wq
  (stable-fixes).
- drm/amd/display: Add primary plane to commits for correct VRR
  handling (stable-fixes).
- drm/amdgpu: update mmhub 3.0.1 client id mappings
  (stable-fixes).
- drm/amd: Restore cached power limit during resume
  (stable-fixes).
- fbdev: Fix vmalloc out-of-bounds write in fast_imageblit
  (stable-fixes).
- fbdev: fix potential buffer overflow in
  do_register_framebuffer() (stable-fixes).
- drm/amd/display: Only finalize atomic_obj if it was initialized
  (stable-fixes).
- drm/amd/display: Avoid configuring PSR granularity if PSR-SU
  not supported (stable-fixes).
- drm/amdgpu: Avoid extra evict-restore process (stable-fixes).
- crypto: hisilicon/hpre - fix dma unmap sequence (stable-fixes).
- crypto: jitter - fix intermediary handling (stable-fixes).
- crypto: qat - lower priority for skcipher and aead algorithms
  (stable-fixes).
- crypto: octeontx2 - add timeout for load_fvc completion poll
  (stable-fixes).
- drm/msm: use trylock for debugfs (stable-fixes).
- drm/amd/display: Separate set_gsl from set_gsl_source_select
  (stable-fixes).
- drm/amd/display: Fix 'failed to blank crtc!' (stable-fixes).
- drm/amd: Allow printing VanGogh OD SCLK levels without setting
  dpm to manual (stable-fixes).
- drm/amd/display: Avoid trying AUX transactions on disconnected
  ports (stable-fixes).
- drm/dp: Change AUX DPCD probe address from DPCD_REV to
  LANE0_1_STATUS (stable-fixes).
- drm/ttm: Should to return the evict error (stable-fixes).
- drm/ttm: Respect the shrinker core free target (stable-fixes).
- et131x: Add missing check after DMA map (stable-fixes).
- comedi: fix race between polling and detaching (git-fixes).
- char: misc: Fix improper and inaccurate error code returned
  by misc_init() (stable-fixes).
- commit adab316

- ALSA: hda/realtek: Add support for HP EliteBook x360 830 G6
  and EliteBook 830 G6 (stable-fixes).
- ALSA: hda/realtek: Fix headset mic on HONOR BRB-X
  (stable-fixes).
- ALSA: hda/realtek: Add Framework Laptop 13 (AMD Ryzen AI 300)
  to quirks (stable-fixes).
- ASoC: Intel: avs: Fix uninitialized pointer error in probe()
  (stable-fixes).
- Bluetooth: hci_sock: Reset cookie to zero in
  hci_sock_free_cookie() (stable-fixes).
- ASoC: soc-dapm: set bias_level if snd_soc_dapm_set_bias_level()
  was successed (stable-fixes).
- ASoC: hdac_hdmi: Rate limit logging on connection and
  disconnection (stable-fixes).
- ASoC: core: Check for rtd == NULL in
  snd_soc_remove_pcm_runtime() (stable-fixes).
- ASoC: codecs: rt5640: Retry DEVICE_ID verification
  (stable-fixes).
- commit c1f1889

- ALSA: hda: Handle the jack polling always via a work
  (stable-fixes).
- ALSA: hda: Disable jack polling at shutdown (stable-fixes).
- ALSA: intel8x0: Fix incorrect codec index usage in mixer for
  ICH4 (stable-fixes).
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control
  (stable-fixes).
- ALSA: pcm: Rewrite recalculate_boundary() to avoid costly loop
  (stable-fixes).
- ALSA: usb-audio: Avoid precedence issues in mixer_quirks macros
  (stable-fixes).
- ACPI: APEI: send SIGBUS to current task if synchronous memory
  error not recovered (stable-fixes).
- ACPI: processor: fix acpi_object initialization (stable-fixes).
- commit d6d6e01

- xfrm: interface: fix use-after-free after changing collect_md
  xfrm interface (CVE-2025-38500 bsc#1248088).
- rxrpc: Fix recv-recv race of completed call (CVE-2025-38524
  bsc#1248194).
- atm: clip: Fix memory leak of struct clip_vcc (CVE-2025-38546
  bsc#1248223).
- commit 57cffb2

- x86/sev: Evict cache lines during SNP memory validation
  (CVE-2025-38560 bsc#1248312).
- commit 0d489ec

- hid: hide cleanup of hid_descriptor (CVE-2025-38103
  bsc#1245663).
- commit 58f3abc

- HID: usbhid: Eliminate recurrent out-of-bounds bug in
  usbhid_parse() (CVE-2025-38103 bsc#1245663).
- blacklist.conf: removed erroneous entry
- commit 5f4ef22

- rpm/config.sh: Update Leap project
- commit 20eb23b

- selftests/perf_events: Add a mmap() correctness test
  (CVE-2025-38563 bsc#1248306 selftest).
- commit 919a844

- bpf: fix kfunc btf caching for modules (git-fixes).
- commit 5ae4aa5

- perf/core: Prevent VMA split of buffer mappings (CVE-2025-38563
  bsc#1248306).
- commit d1daec3

- perf/core: Exit early on perf_mmap() fail (CVE-2025-38563
  bsc#1248306 dependency).
- commit 4deadd8

- perf/core: Don't leak AUX buffer refcount on allocation failure
  (CVE-2025-38563 bsc#1248306 dependency).
- commit d26658d

- bpf: use kvzmalloc to allocate BPF verifier environment
  (git-fixes).
- commit fd28e75

- selftests/bpf: Verify that sync_linked_regs preserves subreg_def
  (bsc#1234156 CVE-2024-53125).
- commit cee135e

- samples/bpf: Fix compilation errors with cf-protection option
  (git-fixes).
- commit 388c9e8

- selftests/bpf: fexit_sleep: Fix stack allocation for arm64
  (git-fixes).
- commit 2d627c6

- iio: common: st_sensors: Fix use of uninitialize device structs
  (CVE-2025-38531 bsc#1248205).
- commit 2739cf9

- usb: xhci: Fix slot_id resource race conflict (git-fixes).
- commit 40d11e8

- usb: dwc3: fix fault at system suspend if device was already
  runtime suspended (git-fixes).
- commit 03244f6

- usb: dwc3: core: Fix system suspend on TI AM62 platforms
  (git-fixes).
- commit ae2a72e

- pinctrl: STMFX: add missing HAS_IOMEM dependency (git-fixes).
- most: core: Drop device reference after usage in get_channel()
  (git-fixes).
- usb: storage: realtek_cr: Use correct byte order for
  bcs->Residue (git-fixes).
- usb: dwc3: Ignore late xferNotReady event to prevent halt
  timeout (git-fixes).
- usb: core: hcd: fix accessing unmapped memory in
  SINGLE_STEP_SET_FEATURE test (git-fixes).
- usb: renesas-xhci: Fix External ROM access timeouts (git-fixes).
- mmc: sdhci-pci-gli: GL9763e: Rename the gli_set_gl9763e()
  for consistency (git-fixes).
- commit f954d9b

- iio: proximity: isl29501: fix buffered read on big-endian
  systems (git-fixes).
- comedi: Make insn_rw_emulate_bits() do insn->n samples
  (git-fixes).
- comedi: Fix use of uninitialized memory in do_insn_ioctl()
  and do_insnlist_ioctl() (git-fixes).
- comedi: pcl726: Prevent invalid irq number (git-fixes).
- cdx: Fix off-by-one error in cdx_rpmsg_probe() (git-fixes).
- drm/hisilicon/hibmc: fix the hibmc loaded failed bug
  (git-fixes).
- iosys-map: Fix undefined behavior in iosys_map_clear()
  (git-fixes).
- drm/nouveau: fix typos in comments (git-fixes).
- drm/nouveau/nvif: Fix potential memory leak in nvif_vmm_ctor()
  (git-fixes).
- drm/amd/display: Fix fractional fb divider in set_pixel_clock_v3
  (git-fixes).
- drm/amd/display: Adjust DCE 8-10 clock, don't overclock by 15%
  (git-fixes).
- drm/amd/display: Don't overclock DCE 6 by 15% (git-fixes).
- drm/amd/display: Add null pointer check in
  mod_hdcp_hdcp1_create_session() (git-fixes).
- memstick: Fix deadlock by moving removing flag earlier
  (git-fixes).
- ALSA: usb-audio: Use correct sub-type for UAC3 feature unit
  validation (git-fixes).
- ALSA: hda/realtek: Audio disappears on HP 15-fc000 after warm
  boot again (git-fixes).
- ALSA: hda/realtek: Fix headset mic on ASUS Zenbook 14
  (git-fixes).
- ALSA: usb-audio: Fix size validation in convert_chmap_v3()
  (git-fixes).
- commit 0a99e72

- bpf: Reject narrower access to pointer ctx fields (bsc#1248363
  CVE-2025-38591).
- commit 2a67c58

- md: make rdev_addable usable for rcu mode (git-fixes).
- scsi: sd: Make sd shutdown issue START STOP UNIT appropriately
  (git-fixes).
- scsi: Revert "scsi: iscsi: Fix HW conn removal use after free"
  (git-fixes).
- scsi: mpt3sas: Fix a fw_event memory leak (git-fixes).
- scsi: isci: Fix dma_unmap_sg() nents value (git-fixes).
- scsi: mvsas: Fix dma_unmap_sg() nents value (git-fixes).
- scsi: elx: efct: Fix dma_unmap_sg() nents value (git-fixes).
- scsi: core: Fix kernel doc for scsi_track_queue_full()
  (git-fixes).
- scsi: ibmvscsi_tgt: Fix dma_unmap_sg() nents value (git-fixes).
- scsi: mpi3mr: Serialize admin queue BAR writes on 32-bit systems
  (git-fixes).
- scsi: mpi3mr: Fix race between config read submit and interrupt
  completion (git-fixes).
- scsi: mpi3mr: Fix kernel-doc issues in mpi3mr_app.c (git-fixes).
- sunvdc: Balance device refcount in vdc_port_mpgroup_check
  (git-fixes).
- md: allow removing faulty rdev during resync (git-fixes).
- block: mtip32xx: Fix usage of dma_map_sg() (git-fixes).
- ublk: use vmalloc for ublk_device's __queues (git-fixes).
- loop: use kiocb helpers to fix lockdep warning (git-fixes).
- block: fix kobject leak in blk_unregister_queue (git-fixes).
- md/raid1,raid10: strip REQ_NOWAIT from member bios (git-fixes).
- ublk: sanity check add_dev input for underflow (git-fixes).
- aoe: defer rexmit timer downdev work to workqueue (git-fixes).
- commit e0823df

- clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (CVE-2025-38499 bsc#1247976)
- commit a7416f7

- atm: clip: Fix NULL pointer dereference in vcc_sendmsg() (CVE-2025-38458 bsc#1247116)
- commit 17419dc

- atm: Release atm_dev_mutex after removing procfs in atm_dev_deregister() (CVE-2025-38245 bsc#1246193)
- commit c9503c1

- btrfs: fix adding block group to a reclaim list and the unused
  list during reclaim (git-fixes).
- btrfs: retry block group reclaim without infinite loop
  (git-fixes).
- commit 0a86fac

- btrfs: fix bitmap leak when loading free space cache on
  duplicate entry (git-fixes).
- commit 72cd329

- btrfs: run delayed iputs when flushing delalloc (git-fixes).
- btrfs: update target inode's ctime on unlink (git-fixes).
- commit 8eb6c44

- btrfs: fix data race when accessing the inode's disk_i_size
  at btrfs_drop_extents() (git-fixes).
- commit 04c28bf

- squashfs: fix memory leak in squashfs_fill_super (git-fixes).
- commit 7c9f4fd

- btrfs: convert BUG_ON in btrfs_reloc_cow_block() to proper
  error handling (git-fixes).
- commit 0d7a95c

- btrfs: correctly escape subvol in btrfs_show_options()
  (git-fixes).
- commit 8ae9b3b

- atm: Revert atm_account_tx() if copy_from_iter_full() fails (CVE-2025-38190 bsc#1245973)
- commit ee168d7

- atm: atmtcp: Free invalid length skb in atmtcp_c_send() (CVE-2025-38185 bsc#1246012)
- commit 3034c5a

- md/raid1: Fix stack memory use after return in raid1_reshape (CVE-2025-38445 bsc#1247229)
- commit c07b722

- bpf, ktls: Fix data corruption when using bpf_msg_pop_data()
  in ktls (bsc#1248338 CVE-2025-38608).
- commit 70a5de5

- RDMA/hns: Fix dip entries leak on devices newer than hip09 (git-fixes)
- commit b03653b

- RDMA/bnxt_re: Fix to initialize the PBL array (git-fixes)
- commit 99342e6

- RDMA/bnxt_re: Fix a possible memory leak in the driver (git-fixes)
- commit d8fc453

- RDMA/bnxt_re: Fix to remove workload check in SRQ limit path (git-fixes)
- commit d6073c4

- RDMA/bnxt_re: Fix to do SRQ armena by default (git-fixes)
- commit 43a4c91

- RDMA/erdma: Fix ignored return value of init_kernel_qp (git-fixes)
- commit 184f89d

- atm: clip: Fix infinite recursive call of clip_push() (CVE-2025-38459 bsc#1247119)
- commit cace503

- atm: clip: prevent NULL deref in clip_push() (CVE-2025-38251 bsc#1246181)
- commit 955d194

- bnxt_en: Set DMA unmap len correctly for XDP_REDIRECT (CVE-2025-38439 bsc#1247155)
- commit fad3d81

- ACPI: pfr_update: Fix the driver update version check
  (git-fixes).
- net: usb: asix_devices: Fix PHY address mask in MDIO bus
  initialization (git-fixes).
- Bluetooth: hci_conn: do return error from
  hci_enhanced_setup_sync() (git-fixes).
- Bluetooth: hci_event: fix MTU for BN == 0 in CIS Established
  (git-fixes).
- commit 5ef3e7e

- raid10: cleanup memleak at raid10_make_request (CVE-2025-38444 bsc#1247162)
- commit 08daebe

- net: openvswitch: Fix the dead loop of MPLS parse
  (CVE-2025-38146 bsc#1245767).
- commit 2d16fb7

- Update patches.kabi/kabi-hide-new-member-fallback_lock-in-struct-mptcp_s.patch.
  Perform the build time check that struct mptcp_sock layout only when
  CONFIG_SUSE_KERNEL_SUPPORTED is enabled. Some kernel-debug builds do not
  have the hole we rely on in the kabi hack. (But those do not have to
  preserve kABI so that we can simply disable the check.)
- commit 21df537

- kabi: hide new member fallback_lock in struct mptcp_sock
  (CVE-2025-38491 bsc#1247280).
- mptcp: make fallback action and fallback decision atomic
  (CVE-2025-38491 bsc#1247280).
- mptcp: safety check before fallback (CVE-2025-38491
  bsc#1247280).
- mptcp: reset when MPTCP opts are dropped after join (git-fixes).
- mptcp: fallback when MPTCP opts are dropped after 1st data
  (git-fixes).
- commit 7bb090d

- tipc: Fix use-after-free in tipc_conn_close() (CVE-2025-38464
  bsc#1247112).
- commit 7a2a262

- bpf: Reject %p% format string in bprintf-like helpers
  (bsc#1248198 CVE-2025-38528).
- commit b8830ae

- md/md-cluster: handle REMOVE message earlier (bsc#1247057).
- commit b9c1ff5

- scsi: target: iscsi: Fix timeout on deleted connection (CVE-2025-38075 bsc#1244734)
- commit 9bfd228

- net: mctp: Don't access ifa_index when missing (CVE-2025-38006 bsc#1244930)
- commit d0d056e

- netfilter: nft_set_pipapo: clamp maximum map bucket size to
  INT_MAX (CVE-2025-38201 bsc#1245977).
- commit 2f63881

- netfilter: flowtable: account for Ethernet header in
  nf_flow_pppoe_proto() (CVE-2025-38441 bsc#1247167).
- commit 0a2f320

- netfilter: nf_conntrack: fix crash due to removal of
  uninitialised entry (CVE-2025-38472 bsc#1247313).
- commit 1779cac

- powerpc/kernel: Fix ppc_save_regs inclusion in build
  (bsc#1215199).
- powerpc: do not build ppc_save_regs.o always (bsc#1215199).
- commit 3402e7e

- powerpc/eeh: Make EEH driver device hotplug safe (bsc#1215199).
- powerpc/eeh: Export eeh_unfreeze_pe() (bsc#1215199).
- PCI: pnv_php: Work around switches with broken presence
  detection (bsc#1215199).
- PCI: pnv_php: Clean up allocated IRQs on unplug (bsc#1215199).
- arch/powerpc: Remove .interp section in vmlinux (bsc#1215199).
- powerpc/eeh: Rely on dev->link_active_reporting (bsc#1215199).
- commit 0bddfac

- ata: libata-scsi: Fix CDL control (git-fixes).
- commit c04f51b

- drm/amdgpu: fix incorrect vm flags to map bo (git-fixes).
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors
  (git-fixes).
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too
  (git-fixes).
- gpio: mlxbf3: use platform_get_irq_optional() (git-fixes).
- Revert "gpio: mlxbf3: only get IRQ for device instance 0"
  (git-fixes).
- soc/tegra: pmc: Ensure power-domains are in a known state
  (git-fixes).
- phy: mscc: Fix parsing of unicast frames (git-fixes).
- ALSA: scarlett2: Add retry on -EPROTO from scarlett2_usb_tx()
  (git-fixes).
- selftests: rtnetlink.sh: remove esp4_offload after test
  (git-fixes).
- Bluetooth: btusb: Add USB ID 3625:010b for TP-LINK Archer
  TX10UB Nano (stable-fixes).
- kselftest/arm64: Fix check for setting new VLs in sve-ptrace
  (git-fixes).
- selftests: Fix errno checking in syscall_user_dispatch test
  (git-fixes).
- selftests/tracing: Fix false failure of subsystem event test
  (git-fixes).
- USB: serial: option: add Foxconn T99W709 (stable-fixes).
- ASoC: amd: yc: Add DMI quirk for HP Laptop 17 cp-2033dx
  (stable-fixes).
- ASoC: amd: yc: Add DMI entries to support HP 15-fb1xxx
  (stable-fixes).
- ASoC: Intel: fix SND_SOC_SOF dependencies (stable-fixes).
- ASoC: amd: yc: add DMI quirk for ASUS M6501RM (stable-fixes).
- commit 19adc9d

- net: usb: asix_devices: add phy_mask for ax88772 mdio bus
  (git-fixes).
- commit 206e9eb

- ACPI: processor: perflib: Move problematic pr->performance check
  (git-fixes).
- commit 742e4e7

- btrfs: fix the length of reserved qgroup to free (bsc#1240708)
- commit e3e4e05

- btrfs: fix qgroup reserve leaks in cow_file_range (CVE-2024-46733 bsc#1230708)
- commit 20ff141

- Move pesign-obs-integration requirement from kernel-syms to kernel devel
  subpackage (bsc#1248108).
- commit e707e41

- mm/ptdump: take the memory hotplug lock inside ptdump_walk_pgd() (git-fixes)
- commit bf13671

- arm64: dts: imx8mm-venice-gw7904: Increase HS400 USDHC clock speed (git-fixes)
- commit 246a69b

- arm64: dts: imx8mm-venice-gw7903: Increase HS400 USDHC clock speed (git-fixes)
- commit 4fac981

- arm64: dts: imx8mn-venice-gw7902: Increase HS400 USDHC clock speed (git-fixes)
- commit 9beeb6d

- arm64: dts: imx8mm-venice-gw7902: Increase HS400 USDHC clock speed (git-fixes)
- commit 173d0a1

- PCI: rockchip: Set Target Link Speed to 5.0 GT/s before
  retraining (git-fixes).
- PCI: rockchip: Use standard PCIe definitions (git-fixes).
- PCI: imx6: Delay link start until configfs 'start' written
  (git-fixes).
- PCI: imx6: Remove apps_reset toggling from
  imx_pcie_{assert/deassert}_core_reset (git-fixes).
- PCI: imx6: Add IMX8MM_EP and IMX8MP_EP fixed 256-byte BAR 4
  in epc_features (git-fixes).
- PCI/portdrv: Use is_pciehp instead of is_hotplug_bridge
  (git-fixes).
- PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug Capable ports
  (git-fixes).
- kABI: PCI/ACPI: Fix runtime PM ref imbalance on Hot-Plug
  Capable ports (git-fixes).
- PCI: Support Immediate Readiness on devices without PM
  capabilities (git-fixes).
- PCI: apple: Fix missing OF node reference in
  apple_pcie_setup_port (git-fixes).
- PCI: Add ACS quirk for Loongson PCIe (git-fixes).
- commit e24dcd6

- arm64: dts: imx8mm-venice-gw7901: Increase HS400 USDHC clock speed (git-fixes)
- commit 271991a

- arm64: dts: imx8mm-venice-gw700x: Increase HS400 USDHC clock speed (git-fixes)
- commit b77d1e0

- arm64: dts: imx8mn-beacon: Fix HS400 USDHC clock speed (git-fixes)
- commit 3cbe1cf

- arm64: dts: imx8mm-beacon: Fix HS400 USDHC clock speed (git-fixes)
- commit 6d0adbc

- arm64: dts: rockchip: fix endpoint dtc warning for PX30 ISP (git-fixes)
- commit d8b8e5c

- arm64/entry: Mask DAIF in cpu_switch_to(), call_on_irq_stack() (git-fixes)
- commit 81dc70d

- arm64: dts: freescale: imx8mm-verdin: Keep LDO5 always on (git-fixes)
- commit a30082d

- arm64: Filter out SME hwcaps when FEAT_SME isn't implemented (git-fixes)
- commit d67b39d

- arm64: dts: apple: t8103: Fix PCIe BCM4377 nodename (git-fixes)
- commit 3ecd022

- arm64: Restrict pagetable teardown to avoid false warning (git-fixes)
- commit c34ecbe

- arm64: dts: rockchip: Update eMMC for NanoPi R5 series (git-fixes)
- commit b37cb41

- arm64: dts: imx8mp-beacon: Fix RTC capacitive load (git-fixes)
- commit 32c56dd

- arm64: dts: imx8mn-beacon: Fix RTC capacitive load (git-fixes)
- commit ee84ff9

- arm64: dts: imx8mm-beacon: Fix RTC capacitive load (git-fixes)
- commit 7b505c9

- arm64: tegra: Drop remaining serial clock-names and reset-names (git-fixes)
- commit 2981841

- arm64: Add support for HIP09 Spectre-BHB mitigation (git-fixes)
- commit 4ad8521

- arm64: zynqmp: add clock-output-names property in clock nodes (git-fixes)
- commit ba1bbf1

- arm64: tegra: p2597: Fix gpio for vdd-1v8-dis regulator (git-fixes)
- commit 356d85f

- arm64/mm: Check PUD_TYPE_TABLE in pud_bad() (git-fixes)
- commit 1ad9e93

- arm64/cpufeatures/kvm: Add ARMv8.9 FEAT_ECBHB bits in ID_AA64MMFR1 (git-fixes)
- commit 54de7d8

- serial: 8250: fix panic due to PSLVERR (git-fixes).
- commit c91d52e

- drm/amd/display: Add more checks for DSC / HUBP ONO guarantees (bsc#1247078 CVE-2025-38360)
- commit 9101a0c

- net: libwx: remove duplicate page_pool_put_full_page()
  (CVE-2025-38490 bsc#1247243).
- commit f305524

- sunrpc: fix handling of server side tls alerts (git-fixes).
- commit 40fb7b3

- cifs: Fix buffer overflow when parsing NFS reparse points
  (CVE-2024-49996 bsc#1232089).
- commit 50adb2e

- smb: client: fix parsing of device numbers (git-fixes).
- commit 45992a6

- ice, irdma: fix an off by one in error handling code
  (bsc#1247712).
- irdma: free iwdev->rf after removing MSI-X (bsc#1247712).
- ice: Fix signedness bug in ice_init_interrupt_scheme()
  (bsc#1247712).
- commit 46ad237

- ice: init flow director before RDMA (bsc#1247712).
- ice: simplify VF MSI-X managing (bsc#1247712).
- ice: enable_rdma devlink param (bsc#1247712).
- ice: treat dyn_allowed only as suggestion (bsc#1247712).
- ice, irdma: move interrupts code to irdma (bsc#1247712).
- ice: get rid of num_lan_msix field (bsc#1247712).
- ice: remove splitting MSI-X between features (bsc#1247712).
- ice: devlink PF MSI-X max and min parameter (bsc#1247712).
- ice: count combined queues using Rx/Tx count (bsc#1247712).
- commit 383df22

avahi

- Add avahi-CVE-2024-52615.patch:
  Backport 4e2e1ea from upstream, Resolve fixed source ports for
  wide-area DNS queries cause DNS responses be injected.
  (CVE-2024-52615, bsc#1233421)

openssl-1_1

- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read & write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch

openssl-3

- Security fix: [bsc#1250232 CVE-2025-9230]
  * Fix out-of-bounds read & write in RFC 3211 KEK unwrap
  * Add patch openssl3-CVE-2025-9230.patch

libssh

- Security fix: [CVE-2025-8277, bsc#1249375]
  * Memory Exhaustion via Repeated Key Exchange
  * Add patches:
  - libssh-CVE-2025-8277-packet-Adjust-packet-filter-to-work-wh.patch
  - libssh-CVE-2025-8277-Fix-memory-leak-of-unused-ephemeral-ke.patch
  - libssh-CVE-2025-8277-ecdh-Free-previously-allocated-pubkeys.patch

- Security fix: [CVE-2025-8114, bsc#1246974]
  * NULL pointer dereference when calculating session ID during KEX
  * Add libssh-CVE-2025-8114.patch

net-tools

- Drop 0002-Do-not-warn-about-interface-socket-not-binded.patch. It
  worked around a net-tools-1.60 specific problem, that does not
  happen in net-tools-2.10. It is more harmful than useful, as it
  can hide real problems. (bsc#430864#c15,
  https://github.com/ecki/net-tools/issues/32#issuecomment-3265471116).

- Drop 0004-By-default-do-not-fopen-anything-in-netrom_gr.patch. It
  was net-tools-1.60 specific leak fix and breaks netrom in
  net-tools-2.10 (bnc#544339#c2).

- Drop old Fedora patch 0006-Allow-interface-stacking.patch. It
  provided a fix for CVE-2025-46836 (bsc#142461), but it was fixes
  by the upstream in 2025 in a different way. Revert interferring
  net-tools-CVE-2025-46836.patch back to the upstream version.
- Fix stack buffer overflow in parse_hex (bsc#1248687,
  GHSA-h667-qrp8-gj58, net-tools-parse_hex-stack-overflow.patch).
- Fix stack-based buffer overflow in proc_gen_fmt (bsc#1248687,
  GHSA-w7jq-cmw2-cq59,
  net-tools-proc_gen_fmt-buffer-overflow.patch).
- Avoid unsafe memcpy in ifconfig (bsc#1248687,
  net-tools-ifconfig-avoid-unsafe-memcpy.patch).
- Prevent overflow in ax25 and netrom (bsc#1248687,
  net-tools-ax25+netrom-overflow-1.patch,
  net-tools-ax25+netrom-overflow-2.patch).
- Keep possibility to enter long interface names, even if they are
  not accepted by the kernel, because it was always possible up to
  CVE-2025-46836 fix. But issue a warning about an interface name
  concatenation (bsc#1248410,
  net-tools-ifconfig-long-name-warning.patch).

- Provide more readable error for interface name size checking
  introduced by net-tools-CVE-2025-46836.patch
  (bsc#1243581, net-tools-CVE-2025-46836-error-reporting.patch).

- Fix a regression in net-tools-CVE-2025-46836.patch (bsc#1246608).

- Perform bound checks when parsing interface labels in
  /proc/net/dev (bsc#1243581, CVE-2025-46836, GHSA-pfwf-h6m3-63wf,
  net-tools-CVE-2025-46836.patch,
  net-tools-CVE-2025-46836-regression.patch).

python-certifi

- Add python36-certifi provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-idna

- Add python36-idna provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-importlib-metadata

- Add python36-importlib-metadata provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-packaging

- Add python36-packaging provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-pyasn1

- Add python36-pyasn1 provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-pycparser

- Add python36-pycparser provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-pytz

- Add python36-pytz provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-py

- Add python36-py provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-requests

- Add python36- provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-six

- Add python36-six provides/obsoletes to enable SLE-12 ->
  SLE-15 migration, bsc#1233012

python-aiohttp

- Add CVE-2025-53643.patch to fix CVE-2025-53643 (bsc#1246517)

python-azure-multiapi-storage

- Downgrade upstream version to 1.3.0 to address compatibility
  issues with azure-cli 2.66.0 in SLE-15-SP4 (bsc#1247261)
- Override upstream version with 1.4.0.really.1.3.0

regionServiceClientConfigAzure

- Update to version 3.0.0 (bsc#1246995)
  + SLE 16 python-requests requiers SSL v3 certificates. Update 2
    region server certs to support SLE 16 when it gets released.

- Update dependency name for metadata package, name change in SLE 16
  (bsc#1243419)

release-notes-sles

- 15.6.20250821 (tracked in bsc#933411)
- Added note about virt-install --cdrom with SEV (bsc#1241602)
- Added note about SSH algo control method changing and link
  (bsc#1244260)
- Added note about 4096-bit signing key (jsc#PED-8000)
- Added note about Non unified image for SEV (bsc#1232762)
- Added note about new systems management module (jsc#PED-12703)
- Added note about externally supported flag (jsc#PED-8462)
- Added MI300A support (jsc#PED-7607)
- Added note about PHP 7.4 deprecation (jsc#PED-8166)
- Clarified support of BPF-related tools (jsc#PED-8569)
- Added note about deprecating NFSv2 (bsc#1230914)

sysconfig

- version 0.85.10
  * codespell run for all repository files and changes file
  * spec: define permissions for ghost file attrs to avoid
    rpm --restore resets them to 0 (bsc#1237595).
  * spec: fix name-repeated-in-summary rpmlint warning

systemd-presets-branding-SLE

- enable sysstat_collect.timer and sysstat_summary.timer [bsc#1244553]
  and [bsc#1246835]
- modified sources
  % default-SLE.preset

vim

- Fix the following CVEs and bugs:
  * bsc#1246602 (CVE-2025-53906)
  * bsc#1246604 (CVE-2025-53905)
  * bsc#1247939 (CVE-2025-55158)
  * bsc#1247938 (CVE-2025-55157)
- Update to 9.1.1629:
  9.1.1629: Vim9: Not able to use more than 10 type arguments in a generic function
  9.1.1628: fuzzy.c has a few issues
  9.1.1627: fuzzy matching can be improved
  9.1.1626: cindent: does not handle compound literals
  9.1.1625: Autocompletion slow with include- and tag-completion
  9.1.1624: Cscope not enabled on MacOS
  9.1.1623: Buffer menu does not handle unicode names correctly
  9.1.1622: Patch v9.1.1432 causes performance regressions
  9.1.1621: flicker in popup menu during cmdline autocompletion
  9.1.1620: filetype: composer.lock and symfony.lock files not recognized
  9.1.1619: Incorrect E535 error message
  9.1.1618: completion: incorrect selected index returned from complete_info()
  9.1.1617: Vim9: some error messages can be improved
  9.1.1616: xxd: possible buffer overflow with bitwise output
  9.1.1615: diff format erroneously detected
  9.1.1614: Vim9: possible variable type change
  9.1.1613: tests: test_search leaves a few swapfiles behind
  9.1.1612: Ctrl-G/Ctrl-T do not ignore the end search delimiter
  9.1.1611: possible undefined behaviour in mb_decompose()
  9.1.1610: completion: hang or E684 when 'tagfunc' calls complete()
  9.1.1609: complete: Heap-buffer overflow with complete function
  9.1.1608: No command-line completion for :unsilent {command}
  9.1.1607: :apple command detected as :append
  9.1.1606: filetype: a few more files are not recognized
  9.1.1605: cannot specify scope for chdir()
  9.1.1604: completion: incsearch highlight might be lost
  9.1.1603: completion: cannot use autoloaded funcs in 'complete' F{func}
  9.1.1602: filetype: requirements-*.txt files are not recognized
  9.1.1601: Patch v8.1.0425 was wrong
  9.1.1600: using diff anchors with hidden buffers fails silently
  9.1.1599: :bnext doesn't go to unlisted help buffers
  9.1.1598: filetype: waybar config file is not recognized
  9.1.1597: CI reports leaks in libgtk3 library
  9.1.1596: tests: Test_search_wildmenu_iminsert() depends on help file
  9.1.1595: Wayland: non-portable use of select()
  9.1.1594: completion: search completion throws errors
  9.1.1593: Confusing error when compiling incomplete try block
  9.1.1592: Vim9: crash with classes and garbage collection
  9.1.1591: VMS support can be improved
  9.1.1590: cannot perform autocompletion
  9.1.1589: Cannot disable cscope interface using configure
  9.1.1588: Vim9: cannot split dict inside command block
  9.1.1587: Wayland: timeout not updated before select()
  9.1.1586: Vim9: can define an enum/interface in a function
  9.1.1585: Wayland: gvim still needs GVIM_ENABLE_WAYLAND
  9.1.1584: using ints as boolean type
  9.1.1583: gvim window lost its icons
  9.1.1582: style issue in vim9type.c and vim9generics.c
  9.1.1581: possible memory leak in vim9generics.c
  9.1.1580: possible memory leak in vim9type.c
  9.1.1579: Coverity complains about unchecked return value
  9.1.1578: configure: comment still mentions autoconf 2.71
  9.1.1577: Vim9: no generic support yet
  9.1.1576: cannot easily trigger wildcard expansion
  9.1.1575: tabpanel not drawn correctly with wrapped lines
  9.1.1574: Dead code in mbyte.c
  9.1.1573: Memory leak when pressing Ctrl-D in cmdline mode
  9.1.1572: expanding $var does not escape whitespace for 'path'
  9.1.1571: CmdlineChanged triggered to often
  9.1.1570: Copilot suggested some improvements in cmdexpand.c
  9.1.1569: tests: Vim9 tests can be improved
  9.1.1568: need a few more default highlight groups
  9.1.1567: crash when using inline diff mode
  9.1.1566: self-referenced enum may not get freed
  9.1.1565: configure: does not consider tiny version for wayland
  9.1.1564: crash when opening popup to closing buffer
  9.1.1563: completion: ruler may disappear
  9.1.1562: close button always visible in the 'tabline'
  9.1.1561: configure: wayland test can be improved
  9.1.1560: configure: uses $PKG_CONFIG before it is defined
  9.1.1559: tests: Test_popup_complete_info_01() fails when run alone
  9.1.1558: str2blob() treats NULL string and empty string differently
  9.1.1557: not possible to anchor specific lines in difff mode
  9.1.1556: string handling in cmdexpand.c can be improved
  9.1.1555: completion: repeated insertion of leader
  9.1.1554: crash when omni-completion opens command-line window
  9.1.1553: Vim9: crash when accessing a variable in if condition
  9.1.1552: [security]: path traversal issue in tar.vim
  9.1.1551: [security]: path traversal issue in zip.vim
  9.1.1550: defaults: 'showcmd' is not enabled in non-compatible mode on Unix
  9.1.1549: filetype: pkl files are not recognized
  9.1.1548: filetype: OpenFGA files are not recognized
  9.1.1547: Wayland: missing ifdef
  9.1.1546: Vim9: error with has() and short circuit evaluation
  9.1.1545: typo in os_unix.c
  9.1.1544: :retab cannot be limited to indentation only
  9.1.1543: Wayland: clipboard appears to not be working
  9.1.1542: Coverity complains about uninitialized variable
  9.1.1541: Vim9: error when last enum value ends with a comma
  9.1.1540: completion: menu state wrong on interruption
  9.1.1539: completion: messages don't respect 'shm' setting
  9.1.1537: helptoc: still some issues when markdown code blocks
  9.1.1536: tests: test_plugin_comment uses wrong :Check command
  9.1.1535: the maximum search count uses hard-coded value 99
  9.1.1534: unnecessary code in tabpanel.c
  9.1.1533: helptoc: does not handle code sections in markdown well
  9.1.1532: termdebug: not enough ways to configure breakpoints
  9.1.1531: confusing error with nested legacy function
  9.1.1530: Missing version change in v9.1.1529
  9.1.1529: Win32: the toolbar in the GUI is old and dated
  9.1.1528: completion: crash with getcompletion()
  9.1.1527: Vim9: Crash with string compound assignment
  9.1.1526: completion: search completion match may differ in case
  9.1.1525: tests: testdir/ is a bit messy
  9.1.1524: tests: too many imports in the test suite
  9.1.1523: tests: test_clipmethod fails in non X11 environment
  9.1.1522: tests: still some ANSI escape sequences in test output
  9.1.1521: completion: pum does not reset scroll pos on reopen with 'noselect'
  9.1.1520: completion: search completion doesn't handle 'smartcase' well
  9.1.1519: tests: Test_termdebug_decimal_breakpoints() may fail
  9.1.1518: getcompletiontype() may crash
  9.1.1517: filetype: autopkgtest files are not recognized
  9.1.1516: tests: no test that 'incsearch' is updated after search completion
  9.1.1515: Coverity complains about potential unterminated strings
  9.1.1514: Coverity complains about the use of tmpfile()
  9.1.1513: resizing Vim window causes unexpected internal window width
  9.1.1512: completion: can only complete from keyword characters
  9.1.1511: tests: two edit tests change v:testing from 1 to 0
  9.1.1510: Search completion may use invalid memory
  9.1.1509: patch 9.1.1505 was not good
  9.1.1508: string manipulation can be improved in cmdexpand.c
  9.1.1507: symlinks are resolved on :cd commands
  9.1.1506: tests: missing cleanup in Test_search_cmdline_incsearch_highlight()
  9.1.1505: not possible to return completion type for :ex command
  9.1.1504: filetype: numbat files are not recognized
  9.1.1503: filetype: haxe files are not recognized
  9.1.1502: filetype: quickbms files are not recognized
  9.1.1501: filetype: flix files are not recognized
  9.1.1500: if_python: typo in python error variable
  9.1.1499: MS-Windows: no indication of ARM64 architecture
  9.1.1498: completion: 'complete' funcs behave different to 'omnifunc'
  9.1.1497: Link error with shm_open()
  9.1.1496: terminal: still not highlighting empty cells correctly
  9.1.1495: Wayland: uses $XDG_SEAT to determine seat
  9.1.1494: runtime(tutor): no French translation for Chapter 2
  9.1.1493: manually comparing positions on buffer
  9.1.1492: tests: failure when Wayland compositor fails to start
  9.1.1491: missing out-of-memory checks in cmdexpand.c
  9.1.1490: 'wildchar' does not work in search contexts
  9.1.1489: terminal: no visual highlight of empty cols with empty 'listchars'
  9.1.1488: configure: using obsolete macro AC_PROG_GCC_TRADITIONAL
  9.1.1487: :cl doesn't invoke :clist
  9.1.1486: documentation issues with Wayland
  9.1.1485: missing Wayland clipboard support
  9.1.1484: tests: Turkish locale tests fails on Mac
  9.1.1483: not possible to translation position in buffer
  9.1.1482: scrolling with 'splitkeep' and line()
  9.1.1481: gcc complains about uninitialized variable
  9.1.1480: Turkish translation outdated
  9.1.1479: regression when displaying localized percentage position
  9.1.1478: Unused assignment in ex_uniq()
  9.1.1476: no easy way to deduplicate text
  9.1.1476: missing out-of-memory checks in cmdexpand.c
  9.1.1475: completion: regression when "nearest" in 'completeopt'
  9.1.1474: missing out-of-memory check in mark.c
  9.1.1473: inconsistent range arg for :diffget/diffput
  9.1.1472: if_python: PySequence_Fast_{GET_SIZE,GET_ITEM} removed
  9.1.1471: completion: inconsistent ordering with CTRL-P
  9.1.1470: use-after-free with popup callback on error
  9.1.1469: potential buffer-underflow with invalid hl_id
  9.1.1468: filetype: bright(er)script files are not recognized
  9.1.1467: too many strlen() calls
  9.1.1466: filetype: not all lex files are recognized
  9.1.1465: tabpanel: not correctly drawn with 'equalalways'
  9.1.1464: gv does not work in operator-pending mode
  9.1.1463: Integer overflow in getmarklist() after linewise operation
  9.1.1462: missing change from patch v9.1.1461
  9.1.1461: tabpanel: tabpanel vanishes with popup menu
  9.1.1460: MS-Windows: too many strlen() calls in os_win32.c
  9.1.1459: xxd: coloring output is inefficient
  9.1.1458: tabpanel: tabs not properly updated with 'stpl'
  9.1.1457: compile warning with tabpanelopt
  9.1.1456: comment plugin fails toggling if 'cms' contains \
  9.1.1455: Haiku: dailog objects created with no reference
  9.1.1454: tests: no test for pum at line break position
  9.1.1453: tests: Test_geometry() may fail
  9.1.1452: completion: redundant check for completion flags
  9.1.1451: tabpanel rendering artifacts when scrolling
  9.1.1450: Session has wrong arglist with :tcd and :arglocal
  9.1.1449: typo in pum_display()
  9.1.1448: tabpanel is not displayed correctly when msg_scrolled
  9.1.1447: completion: crash when backspacing with fuzzy completion
  9.1.1446: filetype: cuda-gdb config files are not recognized
  9.1.1445: negative matchfuzzy scores although there is a match
  9.1.1444: Unused assignment in set_fuzzy_score()
  9.1.1443: potential buffer underflow in insertchar()
  9.1.1442: tests: Test_diff_fold_redraw() is insufficient
  9.1.1441: completion: code can be improved
  9.1.1440: too many strlen() calls in os_win32.c
  9.1.1439: Last diff folds not merged
  9.1.1438: tests: Test_breakindent_list_split() fails
  9.1.1437: MS-Windows: internal compile error in uc_list()
  9.1.1436: GUI control code is displayed on the console on startup
  9.1.1435: completion: various flaws in fuzzy completion
  9.1.1434: MS-Windows: missing out-of-memory checks in os_win32.c
  9.1.1433: Unnecessary :if when writing session
  9.1.1432: GTK GUI: Buffer menu does not handle unicode correctly
  9.1.1431: Hit-Enter Prompt when loading session files
  9.1.1430: tabpanel may flicker in the GUI
  9.1.1429: dragging outside the tabpanel changes tabpagenr
  9.1.1428: completion: register completion needs cleanup
  9.1.1427: rendering artifacts with the tabpanel
  9.1.1426: completion: register contents not completed
  9.1.1425: tabpanel: there are still some problems with the tabpanel
  9.1.1424: PMenu selection broken with multi-line selection and limits
  9.1.1423: :tag command not working correctly using Vim9 Script
  9.1.1422: scheduling of complete function can be improved
  9.1.1421: tests: need a test for the new-style tutor.tutor
  9.1.1420: tests: could need some more tests for shebang lines
  9.1.1419: It is difficult to ignore all but some events
  9.1.1418: configures GUI auto detection favors GTK2
  9.1.1417: missing info about register completion in complete_info()
  9.1.1416: completion limits not respected for fuzzy completions
  9.1.1415: potential use-after free when there is an error in 'tabpanel'
  9.1.1414: MS-Windows: compile warnings in os_win32.c
  9.1.1413: spurious CursorHold triggered in GUI on startup
  9.1.1412: tests: Test_tabpanel_tabonly() fails on larger screens
  9.1.1411: crash when calling non-existing function for tabpanel
  9.1.1410: out-of-bounds access with 'completefunc'
  9.1.1409: using f-flag in 'complete' conflicts with Neovim
  9.1.1408: not easily possible to complete from register content
  9.1.1407: Can't use getpos('v') in OptionSet when using setbufvar()